Release Notes

INFO

The release notes include aggregated content for multiple versions of each Operator in the Alauda DevOps v4.2 compatibility matrix. More detailed release notes for each Operator can be further viewed in the corresponding Operator documentation center.

Alauda DevOps (Next-Gen) - 4.2

Compatibility and Support Matrix

The table below shows the version matrix of the Operators included in Alauda DevOps v4.2.

OperatorVersion
Alauda DevOps Pipelinesv4.6(LTS), v4.7
Alauda DevOps Connectorsv1.6(LTS), v1.7
Alauda Build of Gitlabv18.5(LTS)
Alauda Build of Harborv2.14(LTS)
Alauda Build of SonarQubev2025.1(LTS)
Alauda Build of Nexusv3.76(LTS)

New and Optimized Features

Alauda DevOps Pipelines

  • Pipeline Capabilities Continuous Enhancement: Continuously enhanced core capabilities around Pipeline and Task, supporting manual approval, custom execution output, and dynamic form configuration to meet pipeline orchestration needs in complex delivery scenarios.
  • Automated Trigger Enhancement: Supports scheduled tasks, pipeline triggering via image push, and Pipelines-as-Code GitLab integration to enable multi-scenario automated orchestration.
  • Template and Reusability Enhancement: Provides general-purpose Pipeline templates and an extensible Hub Catalog, supporting the reuse of custom Pipelines and Tasks to reduce the cost of pipeline creation and maintenance.
  • More detailed release notes for different versions can be found in the Alauda DevOps Pipelines documentation center.

Alauda DevOps Connectors

  • Comprehensive Toolchain Integration Coverage: Added six major ecosystem Connectors including GitLab, Harbor, NPM, Maven, PyPI, and Kubernetes, enabling unified integration of code repositories, artifact repositories, and container platforms.
  • Pipelines and Connectors Integration: Provides standardized resource definitions for GitCodeRepository, OCIArtifact, and MavenArtifact, seamlessly integrating tools into Pipelines via a unified UI interface.
  • Flexible API Access Modes: The Connector API supports dual modes of native tool API pass-through (Proxy Service) and custom APIs, with the OCI Connector enhancing forward proxy capabilities.
  • Support integration with SonarQube and SonarCloud by using SonarQube Connector.
  • Support to deploy the Connectors system in a high availability (HA) configuration to ensure service continuity and fault tolerance.
  • More detailed release notes for different versions can be found in the Alauda DevOps Connectors documentation center.

DevOps Toolchain

This update enhances the overall security and stability of the toolchain, which includes the following tools:

Breaking Changes

  • For Alauda DevOps Connectors v1.6, Remove the input.xxx variable from spec.auth.types[].generator.rego. Use input.data.xxx instead.
  • For Alauda DevOps Pipelines v4.7, Chains v0.26.0 upgrades to Cosign v2.6.0, which no longer supports HS256 JWT tokens for keyless signing; users with private OIDC providers using HS256 must switch to RS256 before upgrading. For more information, please refer to Chains.

Fixed Issues

  • Before this update, in MicroOS environments with strict SELinux enforcement, Tekton tasks that depend on Java-based tools (such as Maven and SonarQube) failed to start with the error “Error occurred during initialization of VM - Failed to mark memory page as executable”. With this update, the issue is resolved, and Java-based Tekton tasks now run normally in MicroOS environments.
  • Before this update, in MicroOS environments with strict SELinux enforcement, Tekton tasks that depend on Java-based tools (such as Maven and SonarQube) failed to start with the error “Error occurred during initialization of VM - Failed to mark memory page as executable”. With this update, the issue is resolved, and Java-based Tekton tasks now run normally in MicroOS environments.

Known Issues

No issues in this release.