Shipped · DevOps and infrastructure

What runatlantis/atlantis shipped

The public repository of Runatlantis · github.com/runatlantis/atlantis

Written by FoxPlug from the repository's own releases; not affiliated with Runatlantis. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/runatlantis/atlantis; Runatlantis did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for atlantis, free

Week of November 2, 2026

What shipped

Why it matters

This week tightens how the API and drift detection are exposed, requiring experiment permissions before those endpoints are available and failing startup when related settings are enabled without the prerequisites. It also fixes a security issue in the image build's OpenSSH package and a test helper gap, while the community section makes it easier to find how to participate.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: API and drift detection now sit behind experiment permissions, with startup failing if their settings are enabled without them. Also an OpenSSH CVE fix in the image build, a plan helper test fix and clearer community docs.

Post for LinkedIn

This week's changes to the project: API and drift detection endpoints now require experiment permissions, so startup fails if the related settings are enabled without the right permission or prerequisites. This applies to existing alpha installations too. The Alpine OpenSSH package was updated to include the fix for CVE-2026-123158 and to resolve package-selection failures in image builds. The plan helper now creates the missing Git info directory before writing the exclude file, with a regression test. ADR 0002 on the API and drift detection is marked accepted, and the README and homepage now have a Get involved section covering community meetings, feedback and the contribution workflow.

Week of October 26, 2026

What shipped

Why it matters

This week brings a breaking release that removes Terraform and OpenTofu from the Docker images and changes behavior in several of the 12 security fixes, so existing setups should plan for it. It also adds versioned documentation so readers can follow the docs for the release they run, and advances a proposal to move state into durable storage.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Atlantis v0.49.0 is out. This is a breaking release: Docker images no longer include Terraform or OpenTofu, and 12 security advisories are fixed, several of which change existing behavior. Docs now have a version selector so you can read the docs for your release.

Post for LinkedIn

Atlantis v0.49.0 is released, and it is a breaking release for three reasons. The Docker images no longer include Terraform or OpenTofu, as announced in v0.48.0. 12 security advisories are fixed here, and several of those fixes change behavior that existing setups may rely on. Alongside the release, the documentation site now has a version selector: it defaults to the latest release, with Main (next) available for unreleased changes, and builds docs from tags starting at v0.28.0. The week also brought ADR 0005 proposing durable storage with one relational database for records and coordination plus an artifact store for plans, showfiles, workflow files and logs.

Week of October 19, 2026

What shipped

Why it matters

This week brought an emergency security release, v0.48.2, that moves builds to Go 1.27.3 to distrust compromised eMudhra intermediates, so upgrading is recommended for all users. The Docker images also stop bundling Terraform and OpenTofu from v0.49.0, which changes what the default images contain. Alongside that, API plans and drift detection now honor parallel_plan, and GitLab commit status handling was tightened.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V0.48.2 is out: an emergency security release moving to Go 1.27.3 to distrust compromised eMudhra intermediates, recommended for all users. Also this week: GitLab commit pipelines Atlantis doesn't own are no longer adopted, and API plans and drift detection honor parallel_plan.

Post for LinkedIn

V0.48.2 shipped this week as an emergency security release for the eMudhra intermediate CA key compromise; Go moves to 1.27.3 so builds distrust those intermediates, and all users are recommended to upgrade. The GitLab client now attaches commit statuses only to pipelines that belong to the merge request, and API plan requests and drift detection honor parallel_plan. Docs and image changes also landed, including dropping bundled Terraform and OpenTofu from the default Docker images starting with v0.49.0.

More from runatlantis/atlantis on GitHub

Merged pull requests

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-10.

Is this your repo? Ask us to remove this page.