Release train 2026-10 (7)

Release train 2026-10 over repos.yaml: finished.

Updated by train.yml (cmd/train, docs/train.md). Org owners can comment /skip <repo>, /retry <repo> or /abort. Don't edit the state comment at the end.

Stage	Repo	Status	From	Released	PRs	Detail
1	api	released	v0.21.1			nothing to release
1	gooci	released	v0.0.10			nothing to release
2	agent	released	v0.9.3			nothing to release
2	ui	released	v2.12.1			nothing to release
3	agent-action	released	v0.0.3			nothing to release
3	plugin-apt-versions	released	v0.6.0	v0.7.0	release plugin-apt-versions#24
3	plugin-apt-versions-policies	released	v0.5.1			nothing to release
3	plugin-aws-acm	released	v0.1.0	v0.1.1	release plugin-aws-acm#15
3	plugin-aws-acm-certificate-policies	released	v0.1.1			nothing to release
3	plugin-aws-apigateway	released	v0.0.0	v0.1.0	release plugin-aws-apigateway#5
3	plugin-aws-apigateway-policies	released	v0.1.0			nothing to release
3	plugin-aws-cloudfront	released	v0.0.0	v0.1.0	release plugin-aws-cloudfront#5
3	plugin-aws-cloudfront-policies	released	v0.1.0			nothing to release
3	plugin-aws-ec2	released	v0.4.0	v0.4.1	release plugin-aws-ec2#19
3	plugin-aws-ec2-policies	released	v0.4.0			nothing to release
3	plugin-aws-ecr	released	v0.1.0	v0.1.1	release plugin-aws-ecr#13
3	plugin-aws-ecr-image-policies	released	v0.1.0			nothing to release
3	plugin-aws-ecr-registry-policies	released	v0.1.0			nothing to release
3	plugin-aws-ecr-repository-policies	released	v0.1.0			nothing to release
3	plugin-aws-eks	released	v0.1.1	v0.1.2	release plugin-aws-eks#13
3	plugin-aws-eks-addon-policies	released	v0.1.0			nothing to release
3	plugin-aws-eks-nodegroup-policies	released	v0.1.0			nothing to release
3	plugin-aws-eks-policies	released	v0.1.0			nothing to release
3	plugin-aws-elb	released	v0.1.0	v0.1.1	release plugin-aws-elb#12
3	plugin-aws-elb-listener-policies	released	v0.1.0			nothing to release
3	plugin-aws-elb-loadbalancer-policies	released	v0.1.0			nothing to release
3	plugin-aws-elb-targetgroup-policies	released	v0.1.0			nothing to release
3	plugin-aws-elb-targethealth-policies	released	v0.1.0			nothing to release
3	plugin-aws-rds-aurora-psql	released	v0.3.1	v0.3.2	release plugin-aws-rds-aurora-psql#20
3	plugin-aws-rds-aurora-psql-policies	released	v0.3.0			nothing to release
3	plugin-aws-s3	released	v0.1.0	v0.1.1	release plugin-aws-s3#10
3	plugin-aws-s3-policies	released	v0.1.0			nothing to release
3	plugin-aws-secretsmanager	released	v0.1.1	v0.1.2	release plugin-aws-secretsmanager#11
3	plugin-aws-secretsmanager-policies	released	v0.1.1			nothing to release
3	plugin-aws-vpc	released	v0.3.0	v0.3.1	release plugin-aws-vpc#19
3	plugin-aws-vpc-nacl-policies	released	v0.1.0			nothing to release
3	plugin-aws-vpc-policies	released	v0.1.0			nothing to release
3	plugin-aws-vpc-rt-policies	released	v0.1.0
3	plugin-aws-vpc-sg-policies	released	v0.3.0			nothing to release
3	plugin-aws-vpc-subnet-policies	released	v0.1.0			nothing to release
3	plugin-cloud-custodian	released	v0.2.8	v0.3.0	release plugin-cloud-custodian#37
3	plugin-cloud-custodian-policies	released	v0.2.1	v0.2.2	release plugin-cloud-custodian-policies#8
3	plugin-dependabot	released	v0.7.0	v0.8.0	release plugin-dependabot#21
3	plugin-dependabot-granular-policies	released	v0.2.0			nothing to release
3	plugin-dependabot-policies	released	v0.5.0			nothing to release
3	plugin-file-attestation	released	v0.2.0	v0.2.1	release plugin-file-attestation#10
3	plugin-file-attestation-ctrf-policies	released	v0.2.0			nothing to release
3	plugin-file-attestation-policies	released	v0.2.0			nothing to release
3	plugin-file-attestation-sarif-policies	released	v0.2.0			nothing to release
3	plugin-github-repositories	released	v0.9.0	v0.10.0	release plugin-github-repositories#27
3	plugin-github-repositories-custom-policies	released	v0.2.0			nothing to release
3	plugin-github-repositories-dependency-policies	released	v0.1.1			nothing to release
3	plugin-github-repositories-policies	released	v0.7.3
3	plugin-github-repositories-pr-policies	released	v0.2.0			nothing to release
3	plugin-github-settings	released	v0.5.0	v0.6.0	release plugin-github-settings#19
3	plugin-github-settings-policies	released	v0.4.1			nothing to release
3	plugin-gitlab-repositories	released	v0.1.0	v0.1.1	release plugin-gitlab-repositories#11
3	plugin-gitlab-repositories-policies	released	v0.1.0			nothing to release
3	plugin-http-collector	released	v0.1.0	v0.2.0	release plugin-http-collector#9
3	plugin-http-collector-policies	released	v0.2.0			nothing to release
3	plugin-intruder	released	v0.1.0	v0.2.0	release plugin-intruder#16
3	plugin-intruder-policies	released	v0.1.0			nothing to release
3	plugin-jira	released	v0.2.2	v0.2.3	release plugin-jira#14
3	plugin-jira-custom-policies	released	v0.2.0			nothing to release
3	plugin-jira-policies	released	v0.2.0			nothing to release
3	plugin-k8s	released	v0.2.0	v0.2.1	release plugin-k8s#14
3	plugin-k8s-opres-policies	released	v0.2.0			nothing to release
3	plugin-local-ssh	released	v0.4.0	v0.5.0	release plugin-local-ssh#36
3	plugin-local-ssh-policies	released	v0.3.1			nothing to release
4	helm-charts	released	ccf-agent v0.4.1, ccf-app v0.9.0			nothing to release

Gate	Version	Result
plugin-apt-versions	0.7.0	passed
plugin-apt-versions-policies	0.5.1	passed
plugin-aws-acm	0.1.1	passed
plugin-aws-acm-certificate-policies	0.1.1	passed
plugin-aws-apigateway	0.1.0	passed
plugin-aws-apigateway-policies	0.1.0	passed
plugin-aws-cloudfront	0.1.0	passed
plugin-aws-cloudfront-policies	0.1.0	passed
plugin-aws-ec2	0.4.1	passed
plugin-aws-ec2-policies	0.4.0	passed
plugin-aws-ecr	0.1.1	passed
plugin-aws-ecr-image-policies	0.1.0	passed
plugin-aws-ecr-registry-policies	0.1.0	passed
plugin-aws-ecr-repository-policies	0.1.0	passed
plugin-aws-eks	0.1.2	passed
plugin-aws-eks-addon-policies	0.1.0	passed
plugin-aws-eks-nodegroup-policies	0.1.0	passed
plugin-aws-eks-policies	0.1.0	passed
plugin-aws-elb	0.1.1	passed
plugin-aws-elb-listener-policies	0.1.0	passed
plugin-aws-elb-loadbalancer-policies	0.1.0	passed
plugin-aws-elb-targetgroup-policies	0.1.0	passed
plugin-aws-elb-targethealth-policies	0.1.0	passed
plugin-aws-rds-aurora-psql	0.3.2	passed
plugin-aws-rds-aurora-psql-policies	0.3.0	passed
plugin-aws-s3	0.1.1	passed
plugin-aws-s3-policies	0.1.0	passed
plugin-aws-secretsmanager	0.1.2	passed
plugin-aws-secretsmanager-policies	0.1.1	passed
plugin-aws-vpc	0.3.1	passed
plugin-aws-vpc-nacl-policies	0.1.0	passed
plugin-aws-vpc-policies	0.1.0	passed
plugin-aws-vpc-rt-policies	0.1.0	passed
plugin-aws-vpc-sg-policies	0.3.0	passed
plugin-aws-vpc-subnet-policies	0.1.0	passed
plugin-cloud-custodian	0.3.0	passed
plugin-cloud-custodian-policies	0.2.2	passed
plugin-dependabot	0.8.0	passed
plugin-dependabot-granular-policies	0.2.0	passed
plugin-dependabot-policies	0.5.0	passed
plugin-file-attestation	0.2.1	passed
plugin-file-attestation-ctrf-policies	0.2.0	passed
plugin-file-attestation-policies	0.2.0	passed
plugin-file-attestation-sarif-policies	0.2.0	passed
plugin-github-repositories	0.10.0	passed
plugin-github-repositories-custom-policies	0.2.0	passed
plugin-github-repositories-dependency-policies	0.1.1	passed
plugin-github-repositories-policies	0.7.3	passed
plugin-github-repositories-pr-policies	0.2.0	passed
plugin-github-settings	0.6.0	passed
plugin-github-settings-policies	0.4.1	passed
plugin-gitlab-repositories	0.1.1	passed
plugin-gitlab-repositories-policies	0.1.0	passed
plugin-http-collector	0.2.0	passed
plugin-http-collector-policies	0.2.0	passed
plugin-intruder	0.2.0	passed
plugin-intruder-policies	0.1.0	passed
plugin-jira	0.2.3	passed
plugin-jira-custom-policies	0.2.0	passed
plugin-jira-policies	0.2.0	passed
plugin-k8s	0.2.1	passed
plugin-k8s-opres-policies	0.2.0	passed
plugin-local-ssh	0.5.0	passed
plugin-local-ssh-policies	0.3.1	passed
stack-smoke		passed

/retry plugin-cloud-custodian-policies

/retry plugin-file-attestation-ctrf-policies

@gusfcarvalho

@gusfcarvalho /retry plugin-cloud-custodian-policies: done.

@gusfcarvalho

@gusfcarvalho /retry plugin-file-attestation-ctrf-policies: plugin-file-attestation-ctrf-policies is already released.

/retry plugin-dependabot

/retry plugin-github-repositories-policies

/retry plugin-aws-vpc-rt-policies

@gusfcarvalho

@gusfcarvalho /retry plugin-dependabot: done.

@gusfcarvalho

@gusfcarvalho /retry plugin-github-repositories-policies: done.

@gusfcarvalho

@gusfcarvalho /retry plugin-aws-vpc-rt-policies: done.

Release digest draft: 2026-10

Draft for #ccf-release-digests; edit before posting.

Repo	Version	From
api	no release	v0.21.1
gooci	no release	v0.0.10
agent	no release	v0.9.3
ui	no release	v2.12.1
agent-action	no release	v0.0.3
plugin-apt-versions	v0.7.0	v0.6.0
plugin-apt-versions-policies	no release	v0.5.1
plugin-aws-acm	v0.1.1	v0.1.0
plugin-aws-acm-certificate-policies	no release	v0.1.1
plugin-aws-apigateway	v0.1.0	v0.0.0
plugin-aws-apigateway-policies	no release	v0.1.0
plugin-aws-cloudfront	v0.1.0	v0.0.0
plugin-aws-cloudfront-policies	no release	v0.1.0
plugin-aws-ec2	v0.4.1	v0.4.0
plugin-aws-ec2-policies	no release	v0.4.0
plugin-aws-ecr	v0.1.1	v0.1.0
plugin-aws-ecr-image-policies	no release	v0.1.0
plugin-aws-ecr-registry-policies	no release	v0.1.0
plugin-aws-ecr-repository-policies	no release	v0.1.0
plugin-aws-eks	v0.1.2	v0.1.1
plugin-aws-eks-addon-policies	no release	v0.1.0
plugin-aws-eks-nodegroup-policies	no release	v0.1.0
plugin-aws-eks-policies	no release	v0.1.0
plugin-aws-elb	v0.1.1	v0.1.0
plugin-aws-elb-listener-policies	no release	v0.1.0
plugin-aws-elb-loadbalancer-policies	no release	v0.1.0
plugin-aws-elb-targetgroup-policies	no release	v0.1.0
plugin-aws-elb-targethealth-policies	no release	v0.1.0
plugin-aws-rds-aurora-psql	v0.3.2	v0.3.1
plugin-aws-rds-aurora-psql-policies	no release	v0.3.0
plugin-aws-s3	v0.1.1	v0.1.0
plugin-aws-s3-policies	no release	v0.1.0
plugin-aws-secretsmanager	v0.1.2	v0.1.1
plugin-aws-secretsmanager-policies	no release	v0.1.1
plugin-aws-vpc	v0.3.1	v0.3.0
plugin-aws-vpc-nacl-policies	no release	v0.1.0
plugin-aws-vpc-policies	no release	v0.1.0
plugin-aws-vpc-rt-policies	no release	v0.1.0
plugin-aws-vpc-sg-policies	no release	v0.3.0
plugin-aws-vpc-subnet-policies	no release	v0.1.0
plugin-cloud-custodian	v0.3.0	v0.2.8
plugin-cloud-custodian-policies	v0.2.2	v0.2.1
plugin-dependabot	v0.8.0	v0.7.0
plugin-dependabot-granular-policies	no release	v0.2.0
plugin-dependabot-policies	no release	v0.5.0
plugin-file-attestation	v0.2.1	v0.2.0
plugin-file-attestation-ctrf-policies	no release	v0.2.0
plugin-file-attestation-policies	no release	v0.2.0
plugin-file-attestation-sarif-policies	no release	v0.2.0
plugin-github-repositories	v0.10.0	v0.9.0
plugin-github-repositories-custom-policies	no release	v0.2.0
plugin-github-repositories-dependency-policies	no release	v0.1.1
plugin-github-repositories-policies	no release	v0.7.3
plugin-github-repositories-pr-policies	no release	v0.2.0
plugin-github-settings	v0.6.0	v0.5.0
plugin-github-settings-policies	no release	v0.4.1
plugin-gitlab-repositories	v0.1.1	v0.1.0
plugin-gitlab-repositories-policies	no release	v0.1.0
plugin-http-collector	v0.2.0	v0.1.0
plugin-http-collector-policies	no release	v0.2.0
plugin-intruder	v0.2.0	v0.1.0
plugin-intruder-policies	no release	v0.1.0
plugin-jira	v0.2.3	v0.2.2
plugin-jira-custom-policies	no release	v0.2.0
plugin-jira-policies	no release	v0.2.0
plugin-k8s	v0.2.1	v0.2.0
plugin-k8s-opres-policies	no release	v0.2.0
plugin-local-ssh	v0.5.0	v0.4.0
plugin-local-ssh-policies	no release	v0.3.1
helm-charts	no release	ccf-agent v0.4.1, ccf-app v0.9.0

Features

plugin-apt-versions v0.7.0

depend on compliance-framework/agent v0.8.0-rc4 (d15ae96)

plugin-aws-apigateway v0.1.0

initial implementation of AWS API Gateway compliance plugin (199e79b)

plugin-aws-cloudfront v0.1.0

initial implementation of AWS CloudFront compliance plugin (0f9bfe2)

plugin-cloud-custodian v0.3.0

parse AWS account configuration (#30) (04b356b)
run Cloud Custodian across AWS accounts (#33) (fc1e1ba)
run Cloud Custodian with an assumed role per AWS account (#31) (ffbce5b)

plugin-dependabot v0.8.0

pass policy data to policy evaluation and depend on agent v0.8.0-rc4 (b52f66d)

plugin-github-repositories v0.10.0

depend on compliance-framework/agent v0.8.0-rc4 (8d5ac78)

plugin-github-settings v0.6.0

pass policy data to policy evaluation and depend on agent v0.8.0-rc4 (f1e87c5)

plugin-http-collector v0.2.0

evaluate policies through policy_manager (#4) (b390dd6)
implement Init (protocol v2) (#5) (fba50d2)

plugin-intruder v0.2.0

implement Init (protocol v2) (#12) (4dad0a6)

plugin-local-ssh v0.5.0

pass policy data to policy evaluation and depend on agent v0.8.0-rc4 (7dda253)

Bug Fixes

plugin-apt-versions v0.7.0

deps: bump compliance-framework/agent to v0.9.1 (#20) (d620ad7)
deps: update security fixes (gomod) [security] (#31) (7ab5085)

plugin-aws-acm v0.1.1

deps: bump agent to v0.9.2 (#23) (860967e)
deps: bump compliance-framework/agent to v0.9.1 (#10) (1f9808e)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#16) (21bcb18)
deps: update security fixes (gomod) [security] (#22) (864ab9f)

plugin-aws-apigateway v0.1.0

deps: bump agent to v0.9.2 (#13) (ffad7c8)
deps: bump compliance-framework/agent to v0.9.1 (#1) (74d46c1)
deps: update security fixes (gomod) [security] (#12) (d202ba9)

plugin-aws-cloudfront v0.1.0

deps: bump agent to v0.9.2 (#13) (9404956)
deps: bump compliance-framework/agent to v0.9.1 (#1) (87a17c0)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#6) (a9c3426)
deps: update security fixes (gomod) [security] (#12) (e354a85)

plugin-aws-ec2 v0.4.1

deps: bump agent to v0.9.2 (#27) (350a80c)
deps: bump compliance-framework/agent to v0.9.1 (#15) (563c418)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#20) (ba3ecf9)
deps: update security fixes (gomod) [security] (#26) (f20182c)

plugin-aws-ecr v0.1.1

deps: bump compliance-framework/agent to v0.9.1 (#8) (36259a2)
deps: update security fixes (gomod) [security] (#20) (7a7b092)

plugin-aws-eks v0.1.2

deps: bump agent to v0.9.2 (#21) (29e2e5a)
deps: bump compliance-framework/agent to v0.9.1 (#9) (8639ae0)

plugin-aws-elb v0.1.1

deps: bump compliance-framework/agent to v0.9.1 (#8) (aa63ba3)
deps: update security fixes (gomod) [security] (#19) (baad6d9)

plugin-aws-rds-aurora-psql v0.3.2

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#16) (451e163)
deps: bump agent to v0.9.2 (#28) (d07a502)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#21) (dcd1088)
deps: update security fixes (gomod) [security] (#27) (b2f744b)

plugin-aws-s3 v0.1.1

deps: bump agent to v0.9.2 (#18) (89ea160)
deps: bump compliance-framework/agent to v0.9.1 (#6) (5e17684)

plugin-aws-secretsmanager v0.1.2

deps: bump agent to v0.9.2 (#19) (a188ed1)
deps: bump compliance-framework/agent to v0.9.1 (#7) (87bfaed)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#12) (1f626a4)
deps: update security fixes (gomod) [security] (#18) (8afba03)

plugin-aws-vpc v0.3.1

deps: bump agent to v0.9.2 (#29) (d171621)
deps: bump compliance-framework/agent to v0.9.1 (#14) (5354545)
deps: update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [security] (#20) (4953811)
deps: update module github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.65.0 [security] (#21) (8a6872b)
deps: update security fixes (gomod) [security] (#28) (a6e3a39)

plugin-cloud-custodian v0.3.0

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#23) (0a26b0c)
default debug payload dir under os.TempDir (#22) (edbbeee)
deps: bump agent to v0.9.2 (#45) (c004007)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#38) (5083b68)
deps: update security fixes (gomod) [security] (#44) (637ee04)
evaluate resources from every region (#27) (f3a5847)
register Cloud Custodian subject templates as components (#25) (a86a154)
use stable ARN-first resource identities (#28) (be7e519)

plugin-cloud-custodian-policies v0.2.2

dedupe risks per AWS account (#6) (74ad553)

plugin-dependabot v0.8.0

deps: bump agent to v0.9.2 (#29) (6e186d9)
deps: bump compliance-framework/agent to v0.9.1 (#16) (576a30d)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#22) (d51f221)
deps: update security fixes (gomod) [security] (#28) (90c7505)
return an error from Init when the plugin is not configured (#19) (232b521)

plugin-file-attestation v0.2.1

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#7) (fe18c84)
deps: bump agent to v0.9.2 (#18) (7ce8ef1)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#11) (c425e27)
deps: update security fixes (gomod) [security] (#17) (2e99621)

plugin-github-repositories v0.10.0

deps: bump agent to v0.9.2 (#36) (7f15c61)
deps: bump compliance-framework/agent to v0.9.1 (#24) (451c664)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#28) (9eb759d)
deps: update security fixes (gomod) [security] (#35) (540387c)

plugin-github-settings v0.6.0

deps: bump agent to v0.9.2 (#27) (38440ba)
deps: bump compliance-framework/agent to v0.9.1 (#16) (8c3e37d)
deps: update security fixes (gomod) [security] (#26) (9e0b390)

plugin-gitlab-repositories v0.1.1

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#7) (3bedf3b)
deps: bump agent to v0.9.2 (#19) (e4482ce)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#12) (0734736)
deps: update security fixes (gomod) [security] (#18) (04fa5a5)

plugin-http-collector v0.2.0

deps: bump agent to v0.9.2 (#17) (fe0be00)
deps: bump compliance-framework/agent to v0.9.1 (#3) (5185193)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#10) (a79857f)
deps: update security fixes (gomod) [security] (#16) (11bff5a)

plugin-intruder v0.2.0

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#11) (eef367f)
deps: bump agent to v0.9.2 (#25) (6205dea)
deps: update security fixes (gomod) [security] (#24) (546334a)

plugin-jira v0.2.3

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#10) (8f64970)
deps: bump agent to v0.9.2 (#22) (1da932a)
deps: update security fixes (gomod) [security] (#21) (c0e29ba)

plugin-k8s v0.2.1

bump compliance-framework/agent to v0.9.1 and pass policy_data to policies (#10) (3aedd13)
deps: bump agent to v0.9.2 (#22) (4c4e6e0)
deps: update security fixes (gomod) [security] (#21) (aee1a08)

plugin-local-ssh v0.5.0

deps: bump agent to v0.9.2 (#44) (5c31878)
deps: bump compliance-framework/agent to v0.9.1 (#32) (1e9893d)
deps: update module golang.org/x/crypto to v0.56.0 [security] (#37) (7a9f280)
deps: update security fixes (gomod) [security] (#43) (079618f)

fix(train): /retry re-runs a failed release-please run (#139)

fix(train): bump helm to the latest final release of each dependency (#…

Navigation Menu

Repository navigation

Release train 2026-10 (7) #138

Release digest draft: 2026-10

Features

Bug Fixes

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Release train 2026-10 (7) #138

Description

Activity

gusfcarvalho commented on Oct 14, 2026

gusfcarvalho commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

gusfcarvalho commented on Oct 14, 2026

gusfcarvalho commented on Oct 14, 2026

gusfcarvalho commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

github-actions commented on Oct 14, 2026

Release digest draft: 2026-10

Features

Bug Fixes

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions