← Back to changelog

2026-10-23

Concourse 8.3.2 drops the compromised eMudhra CA certificates

#concourse  #security  #upgrade  #component 

If you run Concourse with us, we upgraded it to 8.3.2. This release removes the compromised eMudhra CA certificates from every Concourse image and from the bundled resource types, so your pipelines no longer trust them.

What changed

  • No change in behaviour. 8.3.2 is a rebuild of 8.3.1 with updated OS packages and a newer Go version. Your pipelines, teams and fly work as before.
  • Workers are replaced once. Each worker moves to a new image. All workers have been replaced meanwhile.
  • Newer bundled resource types. The built-in git, registry-image, s3, time and other resource types move to their latest patch releases.

What you need to do

Nothing. If a pipeline uses its own resource type images, check that those images are up to date as well: they are not part of this upgrade.