This release addresses a Denial of Service vulnerability reported with included third party software.
APPLICATION LEVEL FEATURES:
- Added Notifications for Run Events
- Added feature to make the chosen repo name the suggested workspace name when creating a new workspace
- Changed policy and policy set sorting to sort by name instead of created-at.
- Changed the UI for workspace access to improve readability
- Added more useful logging when workspace create/update fails due to a VCS repository webhook error.
- Added support for triggering plan-only runs when changing the target branch of a GitHub pull request.
- Changed 2FA recovery code list to remove already-used codes.
- Added more useful welcome page for new users.
- Added functionality to improve the experience of rotating SAML certificates; instead of replacing the old certificate immediately, adding a new certificate will cause TFE to enter a rotation period where both the new and old certificates are checked until the old certificate is explicitly removed.
- Added team organization access controls that allow specific non-owner teams to manage Sentinel policies, workspaces, and/or VCS settings across an organization.
- Added API to create initial admin user
- Added ability to configure TLS 1.2 and/or 1.3.
APPLICATION LEVEL BUG FIXES:
- Fixed GitLab tag pagination to work with the V4 API, improving ingress of module versions.
- Fixed the policy code editor to support very long lines
- Fixed "Use SAML to manage team memberships" not saving properly
- Fixed case where module with unusual semver tag could not be fully processed, resulting in 404 error.
- Fixed race condition when periodically refreshing OAuth tokens.
- Changed workspace URLs to nest under a "Workspaces" page to make navigation consistent.
- Fixed integration with GitLab versions < 8.9.
- Fixed error in backend worker which verifies GitHub tokens.
- Fixed an issue that prevented runs from automatically applying when the runs were queued by a Team Service Account.
- Use proxy settings when cloning git repositories.
- Adjust database pool size to avoid 500s experienced during heavy use.
- Removed support for TLS 1.0 and 1.1.