Shipped · DevOps and infrastructure

What semaphoreui/semaphore shipped

The public repository of Semaphoreui · github.com/semaphoreui/semaphore

Written by FoxPlug from the repository's own releases; not affiliated with Semaphoreui. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/semaphoreui/semaphore; Semaphoreui did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.

Get a weekly update like this for your product, free

Or Use it as a GitHub Action

See the update FoxPlug writes for semaphore, free

Week of November 2, 2026

What shipped

Why it matters

Existing roles and grants are lifted on upgrade for the new read permission and workflow permissions, so nobody loses access. LDAP deployments can now apply group role mappings at sign-in, which previously only OIDC with groups_claim could do. The frontend framework move keeps the interface unchanged while modernising the stack behind the web directory.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: workflow permissions with run, edit and approve; a Can read project permission for roles; LDAP group mappings at sign-in; workflow version passed to executors; and the frontend moved to Vue 3, Vuetify 4 and Vite.

Post for LinkedIn

This week's work on Semaphore: workflows get their own permissions for run, edit and approve, plus role grants set from a Permissions tab on the workflow page. Roles gain a Can read project permission, and existing roles and grants are lifted on upgrade so nobody loses access. LDAP sign-in can now read a user's directory groups and apply group role mappings. Workflow tasks expose their resolved workflow version to executors through an environment variable when a version is available. The web frontend moves to Vue 3.5, Vuetify 4.3 and Vite 8 as a like-for-like change, and Go was updated for community and self-hosted builds.

Week of October 26, 2026

What shipped

Why it matters

This week brings a client CLI for signing in and working with projects and their resources from the command line, and a new string-type access key that keeps its secret encrypted and out of responses and backups. Project restore is more reliable, since a failed create or restore no longer leaves a half-made project behind. Port configuration also takes both strings and integers, with empty values falling back to the default port.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: a client CLI for signing in and browsing projects and their resources, string access keys with an encrypted secret, safer project restore that asks about shared roles, proxy support for subscription validation, and port config that accepts a number.

Post for LinkedIn

This week the project gained a client CLI for signing in with a password or token, managing saved server contexts, and browsing projects and their templates, inventories, environments, keys and repositories. A new string-type access key keeps its secret masked and encrypted, and leaves it out of responses and backups. Project create and restore no longer leaves a half-made project behind, and the restore dialog asks which role of this instance to use for shared roles. Subscription validation can now go through an optional proxy, and port configuration accepts a string or an integer from 0 to 65535, falling back to the default port 3000 when empty.

Week of October 19, 2026

What shipped

Why it matters

This week brings Redis sentinel support for high availability setups and instance-wide roles with configurable permissions. It also adds Git branch selection per task and fixes the passlib bcrypt issue in the server image, alongside several UI and release fixes. Most changes are in the beta releases leading to v2.20.16, with v2.19.17 shipping the job polling interval setting.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

This week: Redis sentinel support, instance-wide roles with configurable permissions, and a git_branch parameter for tasks. The server image now uses libpass to fix the bcrypt backend issue, and the UI makes fewer API calls.

Post for LinkedIn

This week in Semaphore: Redis sentinel support landed, including a universal Redis client, high availability configuration and docs. Instance-wide roles with configurable permissions can now be assigned to users, with visibility into effective permissions and admin controls. Tasks can specify a Git branch via the reserved git_branch parameter. The server image replaces passlib with the maintained libpass fork to fix a bcrypt backend load failure. Users without project creation permission now see a message instead of the New Project form. The v2.19.17 release adds a configurable check interval for job polling.

Week of October 12, 2026

What shipped

Why it matters

This week touches two parts of daily use at once: workflows got richer inputs and outputs, with survey variables and artifacts passed between stages, and access control became more flexible with multiple roles per member, roles from identity provider groups and roles referenced by ID. Repository handling also got cheaper checkouts through shallow clones and shared checkouts for monorepos, alongside fixes for concurrent static inventory cleanup and extra-vars quoting. A new admin audit log screen and the v2.20.0-alpha4 release round out the week.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Workflow survey variables, artifacts passed between stages, roles from identity provider groups, several roles per member, a shared monorepo checkout, shallow clones and an admin audit log screen are out this week, plus a fix for concurrent static inventory cleanup.

Post for LinkedIn

This week's changes: workflows can collect typed survey answers when started and pass artifacts between stages, with an output protocol for runners. Access control changed in three ways: members can hold several roles, project roles can come from identity provider group mappings, and every role now has an ID so members and template permissions no longer point to a deleted role or a role of another project. Repositories can be marked as monorepos to share one checkout across templates on the same branch, and remote checkouts now use shallow clones. Concurrent tasks sharing a static inventory no longer remove each other's temporary file, Ansible extra-vars keep quoted values with Ansible Core 2.19 and newer, and admins have an audit log screen. Released as v2.20.0-alpha4.

Week of October 5, 2026

What shipped

Why it matters

This week brings more control over audit data, with an optional retention period that removes old events on a schedule and a new configuration section for a Splunk HEC audit destination in Semaphore Pro. Runners can now be told how often to ask the server for jobs, which reduces request traffic on installations with many runners. The template file picker also points at the files of the selected app, and workflow runs expose environment variables about the current run.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

Audit retention, a Splunk HEC audit config section, configurable runner check interval, app-aware file picker, and workflow run environment variables all landed this week.

Post for LinkedIn

Several changes landed this week. Audit events can be deleted after a configurable retention period via audit.retention_days, with cleanup at startup and hourly; the new audit.splunk_hec section configures the HEC audit destination for Pro builds. Runners can now be told how often to ask the server for new jobs instead of the hard-coded 1 second interval. The template file picker offers the files of the selected app, and workflow runs expose environment variables about the current run.

Week of September 28, 2026

What shipped

Why it matters

The audit log foundation provides visibility into project activity for security and compliance needs. Workflow improvements including redesigned editor UI and enhanced environment variables make workflow automation more transparent and easier to manage. Private repository support in Galaxy extends deployment flexibility.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

V2.20.0-alpha3: Security audit log foundation added to track who did what across resources, plus workflow editor redesign and enhanced private repository support.

Post for LinkedIn

This week Semaphore ships security audit logging to track project activity, task and runner events, and resource changes—all configurable and stored in the database. The workflow editor gets a complete redesign with improved node management and theme support. Workflow tasks now receive environment variables for better integration context, and Ansible Galaxy installation now supports private Git repositories.

Week of September 21, 2026

What shipped

Why it matters

This week adds credential mapping for SSH hosts to streamline repository authentication, generates SSH keys server-side for easier secret management, and improves webhook integrations with additional authentication methods. These changes address configuration pain points for teams managing multiple Git sources and improve bare-metal installation compatibility.

Changelog entry

Example posts FoxPlug drafted from these changes. Not written or posted by the project.

Post for X

New in Semaphore: map SSH hosts to project credentials, generate SSH keys server-side, HMAC-SHA512 webhooks, improved Git auth on bare-metal, and better log copy-paste behavior.

Post for LinkedIn

This week's Semaphore updates focus on credential management and authentication improvements. Projects can now map SSH hosts and Git URLs to specific credentials with UI controls. SSH key generation moves to the server for better secret handling. Webhook integrations gain HMAC-SHA512 support. Bare-metal installations get improved proxy and authentication encoding for Git operations. Task logs handle copy-paste better by excluding timestamps.

More from semaphoreui/semaphore on GitHub

Merged pull requests

Weeks with too little public activity are left out rather than filled in. Last updated 2026-11-10.

Is this your repo? Ask us to remove this page.