Changelog

What’s New

This update includes CircleCI’s first ‘current’ release of Windows Server 2022, in addition to regular updates for Windows Server 2019 and Windows Server 2019 - Cuda.

For more detailed information about this update, please see the Windows image update Dicuss Post.

Before Upgrading

See the What’s new in server 3.x doc for upgrade notes for this release.

What’s New in Release 3.4.0

New Features

• Android images for the machine executor are now available. For more information, see the Using Android Images with the Machine Executor guide.
• The CircleCI Build Agent can now be pulled from a custom Docker registry if required. For more information contact customer support.
• You can now use Amazon Certificate Manager (ACM) to manage your TLS certificates. For more information see the installation docs.
• Kubernetes v1.16 - v1.23 are now supported.
• Workload Identities for installations on GCP are now supported. Workload Identities can be used as an alternative to static credentials. For more informations see the installation docs

Fixes

• Fixed a bug that was causing the jobs page and step output access to run very slow in the CircleCI web app.
• Fixed a bug that was causing the workflows conductor pod to crash and issues with StatsD metrics.

Known Issues

• Before installing v3.4.0 delete the deployment named circleci-server-kube-state-metrics.
• Prometheus is broken in KOTS versions 1.65.0 - 1.67.0. If you rely on this feature, do not upgrade your KOTS version until this issue has been resolved.
• Retry with SSH for jobs using the machine executor advertises a private IP address. For this reason, retry with SSH for jobs using the machine executor works as standard for private installations, but for public installs you would need to ensure that you can access the private IP advertised. For example, by using a VPN into your VPC.
• CircleCI 1.0 builds are not supported. If an attempt is made to run a 1.0 build, no feedback will be available in the application to indicate the cause of the issue. If a build is run on your installation and does not show up in the CircleCI application, users should be directed to use the CircleCI CLI to validate the project configuration and get details of the possible cause of the issue.
• The KOTS admin console cannot be upgraded if your installation is set up to be behind a proxy. The proxy settings will be deleted and cause the KOTS admin console to break.
• Config files will now be stored in the chosen object store (e.g., AWS S3, Google Cloud Storage or Minio). Users can run into errors accessing certain pipelines, if these config files are deleted due to retention policies (e.g., AWS S3 Lifecycle).

To learn more about Server 3.x installation, migration, or operations please see our documentation.

What’s New in Release 2.19.15

Notes

In March 2022 updates to CircleCI server v2.x will stop.

Fixes

• Removed out-dated truststore for root CAs.
• Patched various security vulnerabilities.

Known Issues

• On static (non-AWS) installations with NONE selected under storage driver settings, tests can be split only by file name or file size. If a user attempts to split tests by timing data, static instances will split them by file name instead.
• If any changes have been made to your networking configuration from the default, you should run the following steps to ensure you can use SSH to inspect your builds (for further information on SSH reruns see the SSH Rerun Guide):
  • For customers using AWS, make sure that you have the latest Launch Configuration configured for Nomad clients, and that exiting Nomad clients were spun up using the Launch Configuration.
  • On each Nomad Client machine, create /etc/circleci/public-ipv4
  • This file should contain the public (if applicable) or private IP of the nomad client

What’s New

The Android Docker and Android VM images have been updated for March, including the inclusion of Android Tiramisu.

For more information about this update, please refer to the CircleCI Developer Hub page.

You may also find more information in the CircleCI Discuss post.

What’s New

On February 15, 2022, the Ubuntu 14.04 and 16.04 Linux VM images used with our machine executor were deprecated, meaning there will be no new releases or support for these images moving forward. When these images reach end of life (EOL) on May 31, 2022, any pipelines that utilize Ubuntu 14.04 or 16.04 images will fail.

In order to prevent unexpected failures and enable you to begin moving to newer images, CircleCI’s Ubuntu 14.04 and 16.04 Linux virtual machine (VM) images will be temporarily unavailable in late March 2022 and late April 2022, and will become permanently unavailable as of May 31, 2022. During these temporary “brown-out” periods, if you are currently using either of these images, be sure to update your config with a newer Ubuntu machine image before the 14.04 and 16.04 images are removed at the end of May 2022.

For more information about how CircleCI will manage these updates, please see the Deprecating Ubuntu 14.04 and 16.04 blog post.

What’s New

CircleCI now supports Windows Server 2022. CircleCI has released a new Windows Server 2022 image which enables customers using CircleCI’s Windows executors to take advantage of the latest operating system, IDE (Visual Studio 2022), and software from Microsoft.

At this time, the Windows Server 2022 image will co-exist with the Windows Server 2019 image allowing you to have the option to upgrade while not losing support to your existing image.

For more information about this update, please refer to the Discuss post that has details on how to adopt the image.

What’s New in Release 2.19.14

Notes

In March 2022 updates to CircleCI server v2.x will stop. Support for customers using CircleCI server v2.x will continue.

• There has been a change to how you will checkout using tags in jobs. Branch tags will now be referenced by either CIRCLE_TAG or +refs/heads/tag/path. For example, git checkout --force "$CIRCLE_TAG" or git fetch --force origin '+refs/heads/master:refs/remotes/origin/master'

Fixes

• Security patches for the exim image
• Replaced deprecated GitHub API endpoint for teams

Known Issues

• On static (non-AWS) installations with NONE selected under storage driver settings, tests can be split only by file name or file size. If a user attempts to split tests by timing data, static instances will split them by file name instead.
• If any changes have been made to your networking configuration from the default, you should run the following steps to ensure you can use SSH to inspect your builds (for further information on SSH reruns see the SSH Rerun Guide):
  • For customers using AWS, make sure that you have the latest Launch Configuration configured for Nomad clients, and that exiting Nomad clients were spun up using the Launch Configuration.
  • On each Nomad Client machine, create /etc/circleci/public-ipv4
  • This file should contain the public (if applicable) or private IP of the nomad client

What’s New

On March 15, 2022, GitHub will be changing which keys are supported in SSH and removing unencrypted Git protocol. As a result of this change, any image you have used in a job from a project created between November 2, 2021 and January 13, 2022 will require a version of OpenSSH greater than or equal to version 7.2.

CircleCI has updated the version of OpenSSH for supported machine images and next-generation Docker convenience images in anticipation of this breaking change.

To avoid pipeline failures on Tuesday, March 15, 2022, CircleCI recommends that if you are using deprecated Machine images or deprecated Docker convenience images, upgrade to a supported image. If upgrading an image is not possible, you can regenerate SSH keys for impacted projects to avoid pipeline failures on March 15, 2022.

For more information regarding this change and how to regenerate SSH keys, please refer to this support article.

Before Upgrading

See the What’s new in server 3.x doc for upgrade notes for this release.

What’s New in Release 3.3.1

Fixes

• CircleCI runner can now be used when server is installed behind a proxy.
• Fixed a bug that was causing some intermittent broken dependency caches.
• Removed outdated cert trust stores from some images. They were found to be causing access issues to some server installations.
• Fixed a bug that was affecting runner updates.
• SSH reruns now work when server is installed behind a proxy.
• Replaced deprecated GitHub API endoint for teams.

Known Issues

• Retry with SSH for jobs using the machine executor advertises a private IP address. For this reason, retry with SSH for jobs using the machine executor works as standard for private installations, but for public installs you would need to ensure that you can access the private IP advertised, for example, by using a VPN into your VPC.
• CircleCI 1.0 builds are not supported. If an attempt is made to run a 1.0 build, no feedback will be available in the application to indicate the cause of the issue. If a build is run on your installation and does not show up in the CircleCI application, users should be directed to use the CircleCI CLI to validate the project configuration and get details of the possible cause of the issue.
• The KOTS admin console cannot be upgraded if your installation is set up to be behind a proxy. The proxy settings will be deleted and cause the KOTS admin console to break.

To learn more about Server 3.x installation, migration, or operations please see our documentation.

What’s New

We’ve redesigned the project setup experience and made it easier for both new and existing users to set up new projects with CircleCI.

When you set up a new project, you can now quickly select an org and run through setup on a single page. We offer three different ways to set up your projects: use the .circleci/config.yml in your repository; commit a starter CI pipeline to a new branch; or go to a config.yml template that you can edit. We also indicate a time frame for each of the three methods (Fastest, Faster, and Fast, respectively), so you can choose the quickest project setup that also meets your needs.

What’s New

Network transfer information is now available for all jobs using a Docker executor (excluding remote Docker) on our Cloud platform. This feature can help you predict the cost of using the IP ranges feature as well as optimize IP ranges usage.

To view network transfer information, open the Resources tab within a given job’s details page in the CircleCI web app.

Read more about this update in our Discuss post.

What’s New

CircleCI has made it possible for you to access the billing portal without needing to be redirected away from the CircleCI website and on to Chargify’s portal. This eliminates any issues regarding the security of payment details.

The Billing Portal allows you to have complete access to your plan and payment settings including:

• making changes to your plan
• adding/removing credit packages
• adding coupons
• adding a new credit card
• viewing and downloading billing statements

With this update, you will now have access to all of this information in one single window that can be accessed directly through your CircleCI dashboard.

What’s New

Dedicated hosts for macOS are now available on CircleCI. This new layer of support is built exclusively for macOS and offers Apple developers unprecedented storage, security, and testing capabilities on CircleCI. By reserving a dedicated host, teams can unlock access to a bare metal instance that provides exclusive access to an entire host machine with 200GB of storage for 24 hours.

Unlike solutions from other CI/CD providers that run on virtual machines, dedicated hosts offer access to the GPU, which enables full E2E testing, including audio and video.

For more information about dedicated hosts for macOS, please refer to the following resources:

Technical Documentation

Discuss Post

Blog

What’s New

We are excited to announce that access to our macOS executor is now available on our free plan. Apple developers can now start building apps for iOS, macOS, tvOS, or watchOS devices, regardless of which plan they’re on.

Customers on our free plan can use the macOS medium resource class, with 1x concurrency. Additionally, open source projects will no longer need to request access to the macOS executor.

For more information, please see the Hello World macOS documentation.

You may also read more about this update in our Discuss post.

What’s New

A new update has been released for the standard 20.04 Linux images for both amd64 and arm64.

For more detailed information about this update, please see the Linux Machine Executor Images Discuss post.

What’s New

The new Clojure Convenience Image (‘cimg/clojure’) is now generally available. This image replaces the soon-to-be-deprecated legacy image (‘circleci/clojure’).

For more information on this release, please see the CircleCI Discuss post.

You may also find more information in the Clojure image GitHub repository.

What’s New

The IP ranges feature is now generally available to all customers on a Performance or Scale plan. This feature is designed for customers who need to configure IP-based access to their restricted environments. As part of this feature, CircleCI provides a list of well-defined IP addresses associated with the CircleCI service. CircleCI jobs that have this feature enabled will have their traffic routed through one of these defined IP addresses.

As of January 28, 2022; the feature will incur 450 credits per GB of data usage for jobs that have IP ranges enabled.

Note: IP ranges is currently only available for Docker jobs, not including remote_docker.

For more detailed information about IP ranges, please refer to the IP ranges technical documentation.

For information on CircleCI plans, refer to the Pricing and Plans page.

What’s New

CircleCI has just release 7 new Insights API endpoints to improve pipeline observability and tracking. You can now access even more insights features such as:

• flaky tests
• workflow time series
• organization performance data
• project performance data.

For more information about these new endpoints, refer to the CircleCI API v2 Insights documentation.

Before Upgrading

See the What’s new in server 3.x doc for upgrade notes for this release.

What’s New in Release 3.3.0

Features

• Nomad Autoscaler can now be used to scale Nomad clients. For more information see the execution environments installation docs.
• Webhooks are now available.
• The Insights dashboard is now available.
• IRSA (AWS) can now be used as an alternative to keys for object storage authentication.
• The email address from which build notifications are sent is now configurable from the KOTS admin console.
• We have replaced Traefik with Kong as our reverse proxy. However, in order to minimize disruption when upgrading, we chose not to rename the service used by Kong. Therefore, you will see a service named circleci-server-traefik, however, this service is actually for Kong.

Fixes

• Upgraded Python to v3 in Vault container.
• Docs improvements on using the shared VPC architecture in GCP.
• The JVM heap size has been updated so that output-processor can use up to 80% of the pod memory limit.

Known Issues

• Updating GitHub Enterprise with a modified Let’s Encrypt certificate is unsupported.
• Let’s Encrypt’s new root certificate isrgrootx1 is not trusted.
• Retry with SSH for jobs using the machine executor advertises a private IP address. For this reason, retry with SSH for jobs using the machine executor works as standard for private installations, but for public installs you would need to ensure that you can access the private IP advertised, for example, by using a VPN into your VPC.
• It is currently possible for multiple organizations under the same CircleCI server account to have contexts with identical names. This should be avoided as doing so could lead to errors and unexpected behavior.
• CircleCI 1.0 builds are not supported. If an attempt is made to run a 1.0 build, no feedback will be available in the application to indicate the cause of the issue. If a build is run on your installation and does not show up in the CircleCI application, users should be directed to use the CircleCI CLI to validate the project configuration and get details of the possible cause of the issue.
• The KOTS admin console cannot be upgraded if your installation is set up to be behind a proxy. The proxy settings will be deleted and cause the KOTS admin console to break.
• Runner cannot be used when server is installed behind a proxy.

To learn more about Server 3.x installation, migration, or operations please see our documentation.

What’s New

We have released a new image update for Windows, in addition to an update for Visual Studio 2019 16.11.9.0. You can access these updates via our “edge” tags.

For more information about this update and refresh, please see the Windows image update Discuss post

What’s New

Your organization will now be able to take advantage of updated usage controls, which can reduce credits wasted on actions run by unregistered users. This is a function available on your CircleCI dashboard and can be enabled/disabled by your account admin.

This update helps your organization direct credit consumption away from invaluable actions. In app, an unregistered user will see a prompt to register themselves first before continuing to build. This makes it easier for the org to keep track of the user as well as spend, resulting in significant credits savings that could have otherwise been used towards running builds and pipelines.

For more information about usage controls, visit the Usage Control tab URL here: app.circleci.com/settings/plan/[githubORbitbucket]/[OrganizationName]/usage-controls.

What’s New

We have made some exciting updates to our free plan, including giving teams more build minutes and access to our most popular features formerly only available on paid plans.

Some features on our new Free plan include:

• Up to 6,000 build minutes per month. Choose the right resource class size (S-L) to optimize for speed and power, or to maximize your build minutes.
• Unlimited users. CI and CD work better with a team; bring everyone on board easily.
• The largest free resource classes on Docker, Linux, and Windows so you can choose the right compute for any job.
• Increased concurrency limits: now up to 30x on Linux, Arm, and Windows.
• Streamlined collaboration with private orbs: shareable CircleCI configuration packages.
• Security. Our top priority is protecting our users’ intellectual property and sensitive secrets such as keys, tokens, and credentials. Rest easy with a suite of security features and compliance certifications, including FedRAMP and SOC 2 Type II.

You can learn about the of the changes here:

• CircleCI Blog - https://circleci.com/blog/most-generous-free-cicd-plan/
• Technical Documentation - https://circleci.com/docs/credits/#free-plan

What’s New

When you use our Windows executors, you may now take advantage of a larger disk size of 200 GB. This increase in storage size unlocks scenarios where you may wish to download large amounts of software during job execution (ie. gaming engines).

For more information about this update, please see the Discuss for more details.

What’s New

On December 7, 2021; CircleCI upgraded the underlying operating system used to run customer containers as part of the Docker executor on CircleCI Cloud. This change is critical to ensuring the underlying infrastructure that runs your jobs continues to provide reliable and performant execution.

The upgrade of the underlying OS and kernel resulted in improved spin-up performance for jobs that use the Docker executor. For more information on the performance improvements, please see the following Discuss post.

What’s New

We have released a new generation of macOS resources. These new resources can speed up builds by up to 50%, and are available to customers on Performance, Custom, and Scale plans.

For more information about these resources, please see the Discuss post.

For detailed technical documentaton about macOS resources, please see the macOS documentation.

What’s New in Release 2.19.13

Notes

In March 2022 updates to CircleCI server v2.x will stop. Support for customers using CircleCI server v2.x will continue.

Fixes

• Various security and vulnerability patches.

Known Issues

• On static (non-AWS) installations with NONE selected under storage driver settings, tests can be split only by file name or file size. If a user attempts to split tests by timing data, static instances will split them by file name instead.
• If any changes have been made to your networking configuration from the default, you should run the following steps to ensure you can use SSH to inspect your builds (for further information on SSH reruns see the SSH Rerun Guide):
  • For customers using AWS, make sure that you have the latest Launch Configuration configured for Nomad clients, and that exiting Nomad clients were spun up using the Launch Configuration.
  • On each Nomad Client machine, create /etc/circleci/public-ipv4
  • This file should contain the public (if applicable) or private IP of the nomad client

What’s New

SSH reruns have historically been run as independent jobs, rather than as part of a workflow. This makes those jobs difficult to track and manage, causing them to block customers with limited concurrency. We are now running SSH reruns as workflow reruns, so they will appear in the same way that “rerun from failed” workflows appear.

This will make reruns easier to manage and track since they will be connected to the pipelines and workflows they were in when originally run, both in the API and UI.

Note The CircleCI v2 API now supports enabling SSH for re-running workflows.

Before Upgrading

See the What’s new in server 3.x doc for upgrade notes for this release.

What’s New in Release 3.2.2

Notes

• The rerun workflow endpoint now returns workflow ID rather than the message accepted.

Fixes

• TLS is terminated outside of frontend so the SSL server has been completely removed from the frontend container.
• Moved the default certificate logic from KOTS to helm.
• Fixed the build agent image version used in server v3.x. The image used previously was causing problems with runner.

Known Issues

• Retry with SSH for jobs using the machine executor advertises a private IP address. For this reason, retry with SSH for jobs using the machine executor works as standard for private installations, but for public installs you would need to ensure that you can access the private IP advertised, for example, by using a VPN into your VPC.
• It is currently possible for multiple organizations under the same CircleCI server account to have contexts with identical names. This should be avoided as doing so could lead to errors and unexpected behavior.
• CircleCI 1.0 builds are not supported. If an attempt is made to run a 1.0 build, no feedback will be available in the application to indicate the cause of the issue. If a build is run on your installation and does not show up in the CircleCI application, users should be directed to use the CircleCI CLI to validate the project configuration and get details of the possible cause of the issue.
• The KOTS admin console cannot be upgraded if your installation is set up to be behind a proxy. The proxy settings will be deleted and cause the KOTS admin console to break.
• Runner cannot be used when server is installed behind a proxy.
• Let’s Encrypt certificate generation does not work. You will need to provide your own certificates or use the default certificates provided.

To learn more about Server 3.x installation, migration, or operations please see our documentation.

What’s New

You can now interact with private orbs via the CircleCI web app. A list of your organization’s orbs has been added on the Organization Settings page, and new private orb details pages that open in the orb registry have also been added as part of this release. The orbs list shows all public and private orbs authored by your organization / in your organization’s namespace(s), while the private orb details pages open in the Orbs registry and are flagged with a new “private” badge. Please note you will only be able to see these pages if you are logged in and authenticated; if you are not logged in, you will receive a 404 error.

With this update, you may select your preferred way to interact with orbs, which can be either the CircleCI CLI or the CircleCI App, while also being able to easily share private orb information with other users in your organization.

Note: This update will not add private orbs to the searchable Orb Registry, and un-published orbs will not have linked details pages.

What’s New

You can now review the CPU & memory utilization for docker jobs on CircleCI’s hosted cloud compute. A new Resources tab on the job details page displays this data and easy-to-consume graphs for docker jobs.

Early anecdotal evidence has shown that some customers that have used this page to upgrade their resource classes and noticed their jobs were completed quicker. Future updates will include enhancing the UX for highly parallelized jobs and adding a CTA for jobs for high CPU utilization.

What’s New

A new remote docker version (v20.10.11) has been released and is now available for use.

For more detailed information about the currently supported remote docker versions and how to run them, refer to the CircleCI docker technical documentation.

What’s New

CircleCI’s quarterly Linux machine images are now available. The following updated Ubuntu 20.04 images are available for both amd64 and arm64:

• ubuntu-2004:202111-01

This November refresh updates software included in the image, which can be found in this Discuss post.

Refer to the machine executor docs for more information about how to use the machine executor and these images.

What’s New

The test parallelism timing experience feature is now generally available and enables you to view information on parallel test times and bottlenecks so you can take this information and act on it to run your tests faster.

An example of what the timing tab looks like can be seen here.

What’s New

The new MySQL convenience image cimg/mysql is now in Beta. This image is designed to replace circleci/mysql which will soon be deprecated. We are actibely looking feedback from users during the Beta period.

For more information about this image, please refer to the Announcement thread on Discuss.

You may also find more information in the GitHub repo for this image.

What’s New

Scheduling work within CircleCI is an important way for you to run pipelines. In addition to periodic rebuilds of the application, scheduled pipelines can be useful for security scans and certain utility jobs such as restarting services.

While Scheduled Workflows may address some of these issues, there are a number of limitations. Scheduled pipelines will be more consistent with other methods of triggering pipelines (webhooks/APIs), which includes:

• consolidating common schedules
• resolving open issues in functionality for Scheduled Workflows (no dynamic configuratin, limitations in handling restricted contexts)
• increased reliability

For more information about scheduled pipelines, please refer to the blog post and technical documentation.

What’s New

This update enables you to view information on parallel test times and bottlenecks so you can take this information and act on it to run your tests faster.

An example of what the timing tab looks like can be seen here.

The timing tab has been enabled for 25% of users in Optimizely. The plan is to roll out this new feature to a small segment of users to get early feedback.

Note This feature is currently in “preview” mode and is not available to all customers at this time.