Changelog
This changelog lists all updates, improvements and new features our Engineering team develops for our Skyscrapers Reference Developer Platform. These are rolled out automatically to all DevOps-as-a-Service customers.
2026 Q4
- 2026-10-26
Maintenance
Cluster add-ons stop trusting the compromised eMudhra CA certificates
Last week, the private keys of eight eMudhra intermediate certificate authorities were found to be compromised (CVE-2026-111943). Anyone holding them can issue TLS certificates that look valid. Browsers and operating systems are removing eMudhra from their …
- 2026-10-23
Maintenance
Concourse 8.3.2 drops the compromised eMudhra CA certificates
If you run Concourse with us, we upgraded it to 8.3.2. This release removes the compromised eMudhra CA certificates from every Concourse image and from the bundled resource types, so your pipelines no longer trust them. What changed No change in behaviour. …
- 2026-10-20
Maintenance
Cluster add-on upgrades, with a new node image and safer node repair
We are rolling out the October round of cluster add-on upgrades. It ships to non-production clusters first, with production to follow. Most of it is routine patch and minor releases. A few changes are worth knowing about, and one may need a look if you …
- 2026-10-19
Announcements
Roadmap updates: October 2026
Most of our changelog covers the day-to-day: component upgrades, fixes, small improvements. This post steps back. Here’s what we shipped from our roadmap, which new services you can add on top of DevOps-as-a-Service, and what we’re working on …
- 2026-10-14
Maintenance
[Action required] external-dns 0.23: new annotation prefix, your existing annotations keep working
We upgraded external-dns, the add-on that creates Route53 records for your Services and Ingresses, to v0.23.0. Upstream renamed its annotations: external-dns.alpha.kubernetes.io/ is now external-dns.kubernetes.io/. Your clusters read both for the moment, …
2026 Q3
- 2026-09-24
New Features
Unusual AWS spend now lands in your Slack
Cost surprises used to show up at invoice time, weeks after the fact. We’ve turned on AWS Cost Anomaly Detection for your account, so when a service starts costing meaningfully more than expected, you hear about it the same day instead. What changed …
- 2026-09-23
Maintenance
Cluster add-on upgrades, with Tempo 3.0 and a monitoring stack refresh
We are rolling out another round of cluster add-on upgrades. It ships to non-production clusters first, with production to follow. Most of it is routine patch and minor releases, and none of them need any action on your side. One change is worth a closer …
- 2026-09-23
New Features
Scheduled drift detection now runs for every customer
Last month we piloted automated drift detection with a couple of customers. It now runs for every managed repository: a rolling report that surfaces infrastructure changed outside your normal pull-request workflow. How it works A scheduled job asks the …
- 2026-09-22
Announcements
See how your platform is backed up, in one page
Your repository now has a docs/backups.md page. It gives a clear overview of how your platform is backed up: what is backed up, by which system, how often, and for how long. It complements the general backup documentation with the details that are specific …
- 2026-09-21
Announcements
Your cluster upgrades now roll out through Skyflow
Every change to your EKS clusters (a new kubernetes-stack release, an add-on change, an edit to a cluster definition) now rolls out through Skyflow, our new rollout system. It replaces the Concourse pipelines we ran for you. All clusters, staging and …
- 2026-09-21
New Features
On-demand scaling for self-hosted Bitbucket Pipelines runners
If your self-hosted Bitbucket Pipelines runners run on Kubernetes, they no longer have to sit idle waiting for the next build. We now offer runners that scale up automatically when a pipeline starts and scale back down once it’s done, instead of a …
- 2026-09-01
Announcements
Cluster definition v1: a cleaner, standard format
The cluster definition files in your repository (k8s-clusters/*.yaml) move to a new format: apiVersion: skyscrapers.eu/v1. The old format grew over the years and ended up with mixed naming styles, and with settings for one component spread over several …
- 2026-08-27
New Features
Atlantis now plans the stacks affected by a module or dependency change
Until now Atlantis only planned a stack when a file inside that stack’s own directory changed. A change to a shared module under terraform/modules, or to a stack that other stacks depend on, planned nothing, and you had to comment atlantis plan -d …
- 2026-08-25
Maintenance
Upgraded Neo4j to 5.26.30
The Neo4j cluster module has been bumped from 5.26.25 to 5.26.30, the latest patch release on the 5.26 LTS line. The Helm charts (neo4j, neo4j-admin, neo4j-headless-service) and the Neo4j server image (neo4j:5.26.30-enterprise) move together. Notable patch …
- 2026-08-25
New Features
Clearer alerts, and control over what you receive
We’ve been working on making the alerts you receive from Skyscrapers clearer and more useful. Many of them used to come straight from generic Kubernetes tooling, technically accurate, but not always easy to act on without deep Kubernetes knowledge. …
- 2026-08-25
Maintenance
Upgraded Concourse to 8.3.0
Concourse has been upgraded from 8.1.1 to 8.3.0. The release brings security fixes, scheduling fixes and a number of small pipeline and fly improvements. Workers were replaced as part of the upgrade. What to do Run fly -t <target> sync to update your …
- 2026-08-25
New Features
Automated secret scanning for every managed repository
Every managed repository now has an automated secret scan in its CI. A pull request or push that would commit a credential (AWS key, API token, password, private key, …) is blocked before it can merge, and our security team is alerted automatically. …
- 2026-08-18
Announcements
Reducing alert noise, clearer descriptions and runbooks
We’re starting a gradual cleanup of the alerts we ship, based on an internal audit and customer feedback: fewer low-value pings, and clearer information when something does need your attention. What’s changed so far info severity alerts, meant …
- 2026-08-18
Maintenance
Cluster add-on upgrades, with VPC CNI 1.23 and a monitoring stack refresh
We are rolling out another round of cluster add-on upgrades. It ships to non-production clusters first, with production to follow. This is a routine hygiene round: mostly patch and minor releases, and none of them need any action on your side. What changed …
- 2026-08-13
New Features
Dedicated Atlantis instances per customer, plus experimental drift detection
Atlantis, the bot that plans and applies your infrastructure changes in pull requests, now runs as a dedicated instance per customer instead of one shared service. Your instance holds only the credentials for your own AWS accounts and only listens to your …
- 2026-08-05
New Features
Your clusters now support AWS Graviton
We now fully support running AWS Graviton nodes. Graviton is AWS’ own arm64 processor family, and its instances cost less per vCPU than the equivalent x86_64 (amd64) ones, so moving a workload lowers what you pay for its compute. First make sure your …
- 2026-07-24
Maintenance
Cluster add-on upgrades, with Karpenter 1.14 and cert-manager 1.21
We rolled out another round of cluster add-on upgrades. It is shipping to non-production clusters first, with production to follow in the coming week. This is a routine hygiene round: mostly patch releases, plus two minor version bumps (Karpenter and …
- 2026-07-06
New Features
Your monthly FinOps report, delivered automatically
We now send you an automated monthly FinOps report, so you can see where last month’s AWS spend went and where you can save, without digging through Cost Explorer yourself. When it arrives On the 3rd of every month we open a GitHub issue in your …
2026 Q2
- 2026-06-30
Maintenance
Cluster add-on upgrades, with Loki, Traefik and monitoring refreshed
We rolled out another round of cluster add-on upgrades. It is shipping to non-production clusters first, with production to follow in the coming week. Most of it is routine version hygiene, but three charts got a major refresh (Loki, Traefik, and the …
- 2026-06-24
Maintenance
Cluster add-on upgrades, with a VPC CNI node-networking fix
Over the past week, alongside the EKS 1.36 production rollout, we shipped a round of cluster add-on updates. The notable one is a VPC CNI fix that makes node networking more robust at startup. VPC CNI: more reliable node networking at startup The AWS VPC …