Releasesby IbisRunner Release 3.1.14
Update4 days agoUnverifiedAdded Oct 22, 2026
Rebuilt Container Runner and Machine Runner with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943. See our Discuss Post for more details.
Topics: Security
More CircleCI releases
Every CircleCI releaseMachine Runner Orchestrator Release 1.0.2
Security Rebuilt Machine Runner Orchestrator with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943.
OIDC tokens: new V3 token format with config source and ref claims
CircleCI now issues a third version of its OIDC (OpenID Connect) token, alongside the V1 and V2 tokens. In V3 the subject ( sub ) claim covers where the code was checked out from and where the pipeline config came from. What’s new Jobs now get the V3 token in $CIRCLE_OIDC_TOKEN_V3 , alongside $CIRCLE_OIDC_TOKEN and $CIRCLE_OIDC_TOKEN_V2 .
Xcode 27.2 RC 1 Available
The Xcode 27.2 RC 1 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Manage a project’s Slack notifications from the CLI
CLI v1.11.0 adds circleci notification slack commands, so you can script Slack setup across projects instead of clicking through each one. circleci notification slack set --channel #ci-alerts connects a project to a channel. Use a channel name or ID (private channels need the ID).
Xcode 27.2 Beta 3 Available
The Xcode 27.2 Beta 3 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Xcode 27.1 Available
The Xcode 27.1 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Dynamic Parallelism for Smarter Testing
Instead of always starting with full parallelism as set in the config, Dynamic Parallelism can scale the number of parallel nodes your test job needs depending on the number of tests that were selected by Smarter Testing’s Intelligent Test Selection.
Scoped API tokens
You can now assign a scope to Personal API Tokens, controlling exactly what access a token grants. Previously, every Personal API Token was issued with full admin-level access, regardless of what the token was actually used for. Now, when creating a new token, you can choose one of three scopes - Read, Write or Admin.
Also shipped on Oct 20, 2026
CircleCI in October 2026Cloudflare One Client for Windows (version 2026.8.2115.0)
A new GA release for the Windows Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
Cloudflare One Client for macOS (version 2026.8.2115.0)
A new GA release for the macOS Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
Online Feature Store (General availability)
Online Feature Store is now generally available and is no longer in Preview .
Cloudflare One Client for Linux (version 2026.8.2115.0)
A new GA release for the Linux Cloudflare One Client is now available on the stable releases downloads page . This hotfix addresses an issue building trusted certificate chains.
SurveyMonkey connector is available in Beta
The managed SurveyMonkey connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. Use the connector to ingest surveys, survey structure, collectors, survey responses, and contacts from SurveyMonkey into Databricks.
Oracle Eloqua connector is available in Beta
The managed Oracle Eloqua connector is now available in Lakeflow Connect in Beta . Workspace admins can control access to this feature from the Previews page. Use the connector to ingest marketing data such as contacts, accounts, campaigns, email and form assets, form submissions, events, and website visitors from Oracle Eloqua into Databricks.