GitHub check re-runs now run as the user who clicked Re-run
UpdateyesterdayUnverifiedAdded Oct 24, 2026
When you re-run a workflow from a GitHub check, CircleCI now attributes the re-run to the CircleCI user who clicked Re-run, not the user who started the original workflow. This matches how re-running from the CircleCI web app already works. Contexts, security groups and permissions are checked against the user who requested the re-run.
Topics: Security
More CircleCI releases
Every CircleCI releaseImproved GitHub check-run summaries for on-hold workflows
GitHub check runs for CircleCI workflows now clearly indicate when a workflow is paused at a manual approval job, along with a link to the workflow so you can act on it. Clearer summary: the headline shows workflow state, job counts, and elapsed time, followed by a one-line explanation of the current status.
Xcode 27.2 RC 1 Available
The Xcode 27.2 RC 1 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Manage a project’s Slack notifications from the CLI
CLI v1.11.0 adds circleci notification slack commands, so you can script Slack setup across projects instead of clicking through each one. circleci notification slack set --channel #ci-alerts connects a project to a channel. Use a channel name or ID (private channels need the ID).
Machine Runner Orchestrator Release 1.0.2
Security Rebuilt Machine Runner Orchestrator with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943.
OIDC tokens: new V3 token format with config source and ref claims
CircleCI now issues a third version of its OIDC (OpenID Connect) token, alongside the V1 and V2 tokens. In V3 the subject ( sub ) claim covers where the code was checked out from and where the pipeline config came from. What’s new Jobs now get the V3 token in $CIRCLE_OIDC_TOKEN_V3 , alongside $CIRCLE_OIDC_TOKEN and $CIRCLE_OIDC_TOKEN_V2 .
Runner Release 3.1.14
Rebuilt Container Runner and Machine Runner with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943. See our Discuss Post for more details.
Xcode 27.2 Beta 3 Available
The Xcode 27.2 Beta 3 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Xcode 27.1 Available
The Xcode 27.1 image is now available to be used in CircleCI pipelines. The full manifest of installed software can be found here .
Also shipped on Oct 23, 2026
CircleCI in October 2026Retrieve Cortex Search (Public Preview)
The CORTEX_SEARCH_RETRIEVE table function is now in public preview, allowing users to execute low-latency search queries directly from SQL for RAG and chatbot applications.
DataFrame caching on serverless compute is now in Public Preview
Databricks now supports DataFrame caching on serverless compute via df.cache() or df.persist(), allowing users to reuse results within a session.
Box Audit Logs managed ingestion connector (Beta)
The Box Audit Logs connector for Lakeflow Connect is now available in beta, enabling the ingestion of enterprise audit events into Databricks.
Manage Test Engine workflows with Terraform and the REST API
Users can now manage Test Engine workflows using the buildkite_test_suite_workflow Terraform resource or the REST API, enabling code-based configuration of monitors and actions.
Flagship - Target Flagship feature flags with structured evaluation context
Flagship now supports nested objects and arrays in evaluation context, allowing developers to target feature flags based on complex user profiles and tags.
Responses API for the Cortex REST API (Preview)
The new Responses API in the Cortex REST API provides OpenAI-compatible endpoints for accessing models.