22 Releases 22 Tags

RSS Feed

• 2.2.0 9198234f66

  Compare

  Release 2.2.0 (2.1.0 skipped) Stable

  demus released this 2026-07-25 00:26:54 +02:00 | 0 commits to main since this release

  v2.2.0

  Features

  • Add runner health admission checks — #1090
  • Report a GitHub-style "Set up job" section — #1089

  Bug fixes

  • Repair the free-disk-space build on FreeBSD — #1098
  • Stop host-mode jobs from leaking processes on Windows — #1080
  • Classify a cancelled step as an interruption, not a failure — #1095
  • Stop racing the daemon when removing containers — #1093
  • Guard status-check functions against a nil job context — #1092

  v2.1.0

  Features

  • Honour GITEA_RUNNER_LABELS on daemon start and accept labels containing a colon — #1085
  • Add --token-file flag to the register command — #1076
  • Add a bug-report subcommand, exec --eventpath, and runner.set_act_env — #1075

  Bug fixes

  • Ignore blank lines and decode UTF-16 in the runner env files — #1084
  • Stop service containers from clobbering the job container's credentials — #1083
  • Accept natively typed boolean workflow inputs — #1087
  • Drop action outputs whose value exceeds the size limit — #1070

  Docs

  • Explain labels, the docker image cache volume, and the dind-rootless UID — #1086

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 2.0.1 ad04b132e2

  Compare

  Release 2.0.1 Stable

  demus released this 2026-07-10 21:25:06 +02:00 | 1 commits to main since this release

  Bug fixes

  • Skip service containers with an empty image — #1074
  • Prevent exponential growth of RunContext masks in composite actions — #1059
  • Attach task token when cloning actions from self-hosted instance on a different host — #1056
  • Install nftables in dind images to silence nft cleanup errors — #1064

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 2.0.0 f74c30386a

  Compare

  Release 2.0.0 Stable

  demus released this 2026-07-04 10:23:42 +02:00 | 2 commits to main since this release

  ⚠️ Breaking changes

  DOCKER_USERNAME / DOCKER_PASSWORD are no longer used implicitly for image pulls

  See #1007

  The runner previously treated secrets named DOCKER_USERNAME and DOCKER_PASSWORD as implicit Docker pull credentials, attaching them to every job- and step-container image pull unconditionally. Since these credentials carry no registry information, they were even sent to Docker Hub when pulling public images, causing those pulls to fail with authentication errors. This behavior has been removed.

  Workflows or runner setups that relied on DOCKER_USERNAME / DOCKER_PASSWORD being implicitly used for Docker image pulls must migrate to an explicit authentication mechanism:

  • For private job container images, use container.credentials:

  jobs:
    build:
      container:
        image: registry.example.com/image:tag
        credentials:
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}
  
  

  • For private service container images, use service credentials.
  • For private uses: docker://... or private Docker actions, configure Docker authentication in the runner environment before the job starts (e.g. run docker login on the runner host).

  DOCKER_USERNAME and DOCKER_PASSWORD can still be used as ordinary workflow secrets, for example with docker/login-action before pushing images.

  Features

  • Shallow clone action repositories — #1053
  • Enable jobs.<job_id>.timeout-minutes and jobs.<job_id>.continue-on-error — #1032
  • Add optional runner.post_task_script hook after task cleanup — #1026
  • Support ssh:// action URLs — #1035
  • IPv6 options for network container creation — #1029
  • Complete runner-side cancellation handling — #1016
  • Upload job summary when supported — #917

  Bug fixes

  • Composite nested uses clone token — #1041
  • Namespace local docker action image tags per repository — #1051
  • Run always()/cancelled() and post steps correctly on cancellation — #1043
  • Guard SetJobError against missing job-error container — #1050
  • Interpolate job container.volume — #1036
  • Kill Unix step process group on cancel to avoid hang — #1025
  • Prevent loss of step log output at end of step — #1028
  • Bound host-environment cleanup and reclaim leaked scratch dirs — #1024
  • Do not update cached actions with stale origin URL — #1014

  Build & docs

  • Cover Windows Go files in build — #1052
  • Improve cache documentation — #1034
  • Update docker-images docs — #1020

  Dependencies

  • Update github.com/moby/moby/client to v0.5.0 — #1049
  • Update github.com/docker/cli to v29.6.0 — #1045
  • Update docker docker tag to v29.6.0 — #1044
  • Update actions/checkout action to v7 — #1042
  • Update go.etcd.io/bbolt to v1.5.0 — #1040
  • Update golang.org/x/term to v0.44.0 — #1031
  • Update alpine docker tag to v3.24 — #1030
  • Update golang.org/x/crypto to v0.52.0 — #1027
  • Update docker docker tag to v29.5.3 — #1021
  • Update golang.org/x/sys to v0.46.0 — #1019
  • Update github.com/docker/cli to v29.5.3 — #1018
  • Update github.com/opencontainers/selinux to v1.15.1 — #1017
  • Update golang.org/x/sys to v0.45.0 — #1012
  • Update code.gitea.io/actions-proto-go to v0.5.0 — #1009

  Full changelog: https://gitea.com/gitea/runner/compare/v1.0.8...v2.0.0

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.8 d05610fd0f

  Compare

  Release 1.0.8 Stable

  demus released this 2026-06-07 18:53:21 +02:00 | 4 commits to main since this release

  Upstream changelog

  • fix(cleanup): kill Windows step process tree on cancel to avoid hang (#1011)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.7 05fbd3b506

  Compare

  Release 1.0.7 Stable

  demus released this 2026-06-07 18:44:47 +02:00 | 5 commits to main since this release

  Upstream changelog

  • fix(container): re-validate cached container id before reuse (#1003)
  • fix: support multiline secret masking (#1001)
  • fix: restore global docker config dir and socket env in tests (#1004)
  • fix: matrix-job data races + outputs, leaner offline test suite (#994)
  • fix: deliver cancel ack and reap leftover Windows job processes (#996)
  • fix(reporter): respect configured log level for job log forwarding (#989)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.6 17446e265d

  Compare

  Release 1.0.6 Stable

  demus released this 2026-06-07 18:30:26 +02:00 | 6 commits to main since this release

  Upstream changelog

  • fix(deps): update module github.com/opencontainers/selinux to v1.15.0 (#990)
  • chore: pin Docker base images to explicit versions (#992)
  • chore(deps): update actions/setup-node action to v6 (#991)
  • test: make TestRunEvent integration suite runnable locally (#987)
  • ci: add PR title linting against Conventional Commits (#988)
  • fix: clean up job network and container when container start fails (#986)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.5 ede204dce6

  Compare

  Release 1.0.5 Stable

  demus released this 2026-06-07 18:23:33 +02:00 | 7 commits to main since this release

  Upstream changelog

  • fix(deps): update module connectrpc.com/connect to v1.20.0 (#985)
  • update docker cli to v29.5.2 (#984)
  • feat: add cache.offline_mode to reuse cached actions (#966)
  • Remove stale Gitea 1.20 compatibility shims (#978)
  • fix(deps): update module github.com/docker/cli to v29.5.1+incompatible (#979)
  • fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1 (#980)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.4 97d6d33129

  Compare

  Release 1.0.4 Stable

  demus released this 2026-06-07 18:05:00 +02:00 | 8 commits to main since this release

  Upstream changelog

  • Fix token use with schemaless Gitea instance (#977)
  • Add OCI source and version labels to images (#975)
  • fix(parse_env_file): support env-file lines larger than 64 KiB (#974)
  • Fix host cleanup, volume allowlist, cache upload, and action host edge cases (#970)
  • Remove dead code from act/ (#971)
  • fix: Return if executors length is zero in ParallelExecutor (#960)
  • feat: make pseudo-TTY allocation opt-in (#961)
  • fix(deps): update module github.com/docker/cli to v29.5.0+incompatible (#969)
  • Simplify kubernetes dind example allowing for default docker config in workflows (#709)
  • chore(deps): bump retry-go, golangci-lint, govulncheck (#965)
  • fix(deps): bump docker deps, switch to moby/moby (#943)
  • fix: respect proxy env vars in runner client (#962)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.3 ae490d455e

  Compare

  Release 1.0.3 Stable

  demus released this 2026-06-07 17:24:43 +02:00 | 9 commits to main since this release

  Upstream changelog

  • fix: isolate per-task runner envs (#959)
  • fix(deps): update module github.com/opencontainers/selinux to v1.14.1 (#955)
  • fix(deps): update mergo to v1.0.2 (now dario.cat/mergo) (#954)
  • fix: ensure dbfs_data is cleaned up after task completion (#952)
  • fix(artifactcache): preserve cache key case to stop redundant uploads (#947)
  • fix(deps): update module golang.org/x/term to v0.43.0 (#948)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)
• 1.0.2 b78b23b521

  Compare

  Release 1.0.2 Stable

  demus released this 2026-06-07 17:06:22 +02:00 | 10 commits to main since this release

  Upstream changelog

  • fix: overwrite read-only files when copying action directories (#942)
  • docs: add apparmor=rootlesskit in security_opt (#937)
  • fix: serialize action-cache reads to prevent worktree race (#938)
  • feat: remove emojis from runner logging, add Starting job container group (#940)

  Downloads

  • Source Code (ZIP)
  • Source Code (TAR.GZ)