Releasesby GlyphChoose read-only access when connecting Buildkite MCP
Users can now select between Read-only and Full access when connecting an AI agent to Buildkite via MCP. Read-only access allows agents to inspect builds and logs without the ability to trigger changes.
Also shipped Nov 10, 2026Buildkite in November 2026 →
Amazon Bedrock AgentCore now offers a Web Search API
AWS launched the InvokeWebSearch API on Amazon Bedrock AgentCore, enabling direct web search execution billed at $7 per 1,000 queries.
Flagship - Evaluate Flagship feature flags from Rust
Cloudflare released an official Rust SDK (`cloudflare-flagship`) for Flagship, enabling async Rust applications to evaluate feature flags via OpenFeature with remote or in-process local evaluation.
BigQuery generative AI functions support gemini-4-carbon
Google Cloud announced general availability for the gemini-4-carbon model across BigQuery generative AI functions.
Amazon OpenSearch Service announces managed cross-Region disaster recovery
AWS introduced managed cross-Region disaster recovery for Amazon OpenSearch Service, providing continuous data replication with an RPO under one minute and RTO under 20 minutes.
Amazon Bedrock adds bedrock-runtime endpoint support for Daybreak models
AWS added support for OpenAI Daybreak Red and Daybreak Blue cybersecurity models on Amazon Bedrock runtime endpoints via US and Global cross-Region inference profiles.
Gemini Enterprise: Gemini 4 Carbon available in web app, mobile app, Workflow Builder, and AI developer tools
Google Cloud generally released Gemini 4 Carbon across Gemini Enterprise web and mobile apps, Workflow Builder, and AI developer tools with multi-region availability.
More from BuildkiteEvery Buildkite release →
Set agent token expiry on the dashboard
Buildkite added support for configuring agent token expiry durations and custom target dates directly within the Buildkite dashboard.
Hosted agents are now available on Windows and Linux ARM64
Buildkite now offers hosted agents for Windows and Linux ARM64. Windows support is in public preview, while Linux ARM64 is generally available, allowing users to run builds without managing their own infrastructure.
Cancel in-progress jobs with concurrency groups
For finer control over concurrency group queues, cancel_in_progress: true lets a job waiting for a concurrency slot cancel blocking jobs in the same group: steps: command: "./real-device-tests.sh" concurrency: limit: 1 group: "my-pipeline/real-device-tests/${BUILDKITE_BRANCH}" cancel_in_progress: true The new concurrency map syntax keeps your limit, group...
More control and visibility for artifacts
Organization admins can now configure shorter retention periods for Buildkite-hosted artifacts. The usage page has been updated to provide clearer tracking of storage and download limits.
Revoke OAuth access for your organization
Organization administrators can now revoke all existing OAuth access and refresh tokens directly from the security settings page.
Require SSO sign-in again for your organization
Organization administrators can now revoke all active SSO sessions for their organization directly from the security settings during a suspected incident.
Check out GitHub code without long-lived credentials on self-hosted agents
Self-hosted agents can now use temporary, read-only GitHub App tokens for repository checkout. This eliminates the need to distribute and rotate long-lived SSH keys or personal access tokens across your agent fleet.
Trace propagation across triggered builds
Agent spans across your multi-pipeline workflows can now share a single OpenTelemetry trace without contacting Support to enable propagation. Buildkite automatically passes trace context from a parent build to builds it triggers. This also works for internal trigger chains without externally supplied trace context.