Data and AI releases

2,224 this month · 171 companies

Server Release 4.10.2

UpdateNot yet verified

CircleCI Server 4.10.2 includes security updates to reject compromised certificates and adds new Kong routes for the OAuth authorization server.

Security

Read on circleci.com

Also shipped Oct 28, 2026CircleCI in October 2026 →

More from CircleCIEvery CircleCI release →

Server Release 4.9.7

CircleCI Server 4.9.7 includes security updates to reject compromised certificates and adds new Kong routes for the OAuth authorization server.

Update
Source ↗

Machine Runner Orchestrator Release 1.0.2

Security Rebuilt Machine Runner Orchestrator with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943.

Update
Source ↗

OIDC tokens: new V3 token format with config source and ref claims

CircleCI now issues a third version of its OIDC (OpenID Connect) token, alongside the V1 and V2 tokens. In V3 the subject ( sub ) claim covers where the code was checked out from and where the pipeline config came from. What’s new Jobs now get the V3 token in $CIRCLE_OIDC_TOKEN_V3 , alongside $CIRCLE_OIDC_TOKEN and $CIRCLE_OIDC_TOKEN_V2 .

Update
Source ↗

Runner Release 3.1.14

Rebuilt Container Runner and Machine Runner with a patched Go release that stops trusting the compromised eMudhra and Comodo AAA root certificate authorities, in response to the October 2026 eMudhra intermediate CA key compromise. We recommend that all users upgrade. This addresses CVE-2026-111943. See our Discuss Post for more details.

Update
Source ↗