Releases · cloudfoundry/diego-release

09 Apr 14:22

appruntimeplatform-bot

v2.135.0

512a3d0

2.135.0 Latest

Latest

2.135.0

Release Date: April 09, 2026

Changes

Upgrade golang-1.26-windows (1.26.2) - Author: App Platform Runtime Working Group CI Bot - SHA: 8f1d9ea
Upgrade golang-1.26-linux (1.26.2) - Author: App Platform Runtime Working Group CI Bot - SHA: d709d2c
Replace pre-commit symlink with bash script - Author: Amelia Downs - SHA: 07a1217
Merge pull request #1121 from cloudfoundry/gh-image-tag - Author: Amelia Downs - SHA: e7b0753
ghactions include determine image tag update ai-assisted=yes TNZ-37899 - Author: karthick udayakumar - SHA: d671222
Merge pull request #1120 from cloudfoundry/gh-action-1 - Author: Amelia Downs - SHA: 82d77e3
git hub action for units ai-assisted=no TNZ-37899 - Author: karthick udayakumar - SHA: 9e0ba0f

Blob Updates

Bumped blob 'proxy/envoy-6d9bb7d9a85d616b220d1f8fe67b61f82bbdb8d3-1.37.0.tgz' to 'proxy/envoy-5ef4e4cea57f63e7e2970b9c1ad696278db927d6-1.37.1.tgz'

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.65.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.67.0' to 'v0.68.0'
Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.68.0' to 'v0.70.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.72.0' to 'v2.73.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.64.0' to 'v1.65.0'
Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260323130242-4632577e239e' to 'v0.0.0-20260406130247-f0f6a4624b0e'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.90.0' to 'v0.91.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.98.0' to 'v0.100.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.81.0' to 'v0.83.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.67.0' to 'v0.68.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.67.0' to 'v0.68.0'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.95.0' to 'v0.96.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260318025245-1b062a144fe6' to 'v0.0.0-20260401025327-b8e60c988757'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.64.0' to 'v3.65.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.66.0' to 'v0.67.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.49.0' to 'v0.50.0'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2' from 'v1.41.4' to 'v1.41.5'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/config' from 'v1.32.12' to 'v1.32.14'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/credentials' from 'v1.19.12' to 'v1.19.14'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/feature/ec2/imds' from 'v1.18.20' to 'v1.18.21'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/configsources' from 'v1.4.20' to 'v1.4.21'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/endpoints/v2' from 'v2.7.20' to 'v2.7.21'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecr' from 'v1.56.1' to 'v1.56.2'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecrpublic' from 'v1.38.12' to 'v1.38.13'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/presigned-url' from 'v1.13.20' to 'v1.13.21'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/signin' from 'v1.0.8' to 'v1.0.9'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sso' from 'v1.30.13' to 'v1.30.15'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ssooidc' from 'v1.35.17' to 'v1.35.19'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sts' from 'v1.41.9' to 'v1.41.10'
Bumped go.mod package 'github.com/aws/smithy-go' from 'v1.24.2' to 'v1.24.3'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.171' to 'v0.2.172'
Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260302011040-a15ffb7f9dcc' to 'v0.0.0-20260402051712-545e8a4df936'
Bumped go.mod package 'github.com/hashicorp/go-version' from 'v1.8.0' to 'v1.9.0'
Bumped go.mod package 'github.com/lib/pq' from 'v1.12.0' to 'v1.12.3'
Bumped go.mod package 'github.com/nats-io/nats-server/v2' from 'v2.12.5' to 'v2.12.6'
Bumped go.mod package 'github.com/nats-io/nats.go' from 'v1.49.0' to 'v1.50.0'
Bumped go.mod package 'go.step.sm/crypto' from 'v0.77.1' to 'v0.77.2'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260319201613-d00831a3d3e7' to 'v0.0.0-20260406210006-6f92a3bedf2d'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260319201613-d00831a3d3e7' to 'v0.0.0-20260406210006-6f92a3bedf2d'
Bumped go.mod package 'google.golang.org/grpc' from 'v1.79.3' to 'v1.80.0'

✨ Built with go 1.26.2

Full Changelog: v2.134.0...v2.135.0

Resources

Download release 2.135.0 from bosh.io.

Assets 3

02 Apr 16:37

appruntimeplatform-bot

v2.134.0

cc6969c

2.134.0

Release Date: April 02, 2026

Changes

Merge pull request #1118 from sap-contributions/maxmoehl/evict-file-cache - Author: Amelia Downs - SHA: adc78c1
Evict file cache when cf-pcap flag changes - Author: Maximilian Moehl - SHA: cedaf47

Changes for cnbapplifecycle

Bump actions/checkout from 5 to 6 - Author: dependabot[bot] - SHA: 07caf648691794a56fc5f75571f387ebbbb6fcd8
Ensure system buildpack is present - Author: Johannes Dillmann - SHA: 23f165d7468a924797fd5f3c30eedb0c00d14e25
Bump all direct dependencies - Author: Johannes Dillmann - SHA: 128b5f35085264c841233f8390a2a1a0ef741613

Changes for bbs

Cancel DB health check context on timeout to release row locks - Author: Amelia Downs - SHA: 1402bd61fc46c8769a9d4f02da50662bc48f4066

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260316130226-db948d6c5f1c' to 'v0.0.0-20260323130242-4632577e239e'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.89.0' to 'v0.90.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.97.0' to 'v0.98.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.80.0' to 'v0.81.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.48.0' to 'v0.49.0'
Bumped go.mod package 'github.com/antithesishq/antithesis-sdk-go' from 'v0.6.0' to 'v0.7.0'
Bumped go.mod package 'github.com/jackc/pgx/v5' from 'v5.8.0' to 'v5.9.1'
Bumped go.mod package 'github.com/klauspost/compress' from 'v1.18.4' to 'v1.18.5'
Bumped go.mod package 'github.com/minio/highwayhash' from 'v1.0.4-0.20251030100505-070ab1a87a76' to 'v1.0.4'

Go Package Updates for cnbapplifecycle

Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20250505130841-11f3a43db498' to 'v0.0.0-20260316130226-db948d6c5f1c'
Added go.mod package 'codeberg.org/chavacava/garif' version 'v0.2.0'
Added go.mod package 'dev.gaijin.team/go/exhaustruct/v4' version 'v4.0.0'
Added go.mod package 'dev.gaijin.team/go/golib' version 'v0.6.0'
Bumped go.mod package 'github.com/4meepo/tagalign' from 'v1.4.2' to 'v1.4.3'
Bumped go.mod package 'github.com/Abirdcfly/dupword' from 'v0.1.3' to 'v0.1.7'
Added go.mod package 'github.com/AdminBenni/iota-mixing' version 'v1.0.0'
Added go.mod package 'github.com/AlwxSin/noinlineerr' version 'v1.0.5'
Bumped go.mod package 'github.com/Antonboom/errname' from 'v1.1.0' to 'v1.1.1'
Bumped go.mod package 'github.com/Antonboom/nilnil' from 'v1.1.0' to 'v1.1.1'
Bumped go.mod package 'github.com/Antonboom/testifylint' from 'v1.6.1' to 'v1.6.4'
Bumped go.mod package 'github.com/BurntSushi/toml' from 'v1.5.0' to 'v1.6.0'
Removed go.mod package 'github.com/Crocmagnon/fatcontext' version 'v0.7.2'
Bumped go.mod package 'github.com/Djarvur/go-err113' from 'v0.0.0-20210108212216-aea10b59be24' to 'v0.1.1'
Removed go.mod package 'github.com/GaijinEntertainment/go-exhaustruct/v3' version 'v3.3.1'
Added go.mod package 'github.com/MirrexOne/unqueryvet' version 'v1.3.0'
Bumped go.mod package 'github.com/alecthomas/chroma/v2' from 'v2.16.0' to 'v2.20.0'
Added go.mod package 'github.com/alfatraining/structtag' version 'v1.0.0'
Removed go.mod package 'github.com/ashanbrown/forbidigo' version 'v1.6.0'
Added go.mod package 'github.com/ashanbrown/forbidigo/v2' version 'v2.3.0'
Removed go.mod package 'github.com/ashanbrown/makezero' version 'v1.2.0'
Added go.mod package 'github.com/ashanbrown/makezero/v2' version 'v2.1.0'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2' from 'v1.39.2' to 'v1.41.4'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/config' from 'v1.31.12' to 'v1.32.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/credentials' from 'v1.18.16' to 'v1.19.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/feature/ec2/imds' from 'v1.18.9' to 'v1.18.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/configsources' from 'v1.4.9' to 'v1.4.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/endpoints/v2' from 'v2.7.9' to 'v2.7.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/ini' from 'v1.8.3' to 'v1.8.6'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecr' from 'v1.45.1' to 'v1.55.3'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecrpublic' from 'v1.33.2' to 'v1.38.10'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding' from 'v1.13.1' to 'v1.13.7'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/presigned-url' from 'v1.13.9' to 'v1.13.20'
Added go.mod package 'github.com/aws/aws-sdk-go-v2/service/signin' version 'v1.0.8'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sso' from 'v1.29.6' to 'v1.30.13'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ssooidc' from 'v1.35.1' to 'v1.35.17'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sts' from 'v1.38.6' to 'v1.41.9'
Bumped go.mod package 'github.com/aws/smithy-go' from 'v1.23.0' to 'v1.24.2'
Bumped go.mod package 'github.com/awslabs/amazon-ecr-credential-helper/ecr-login' from 'v0.10.1' to 'v0.12.0'
Added go.mod package 'github.com/bombsimon/wsl/v5' version 'v5.3.0'
Bumped go.mod package 'github.com/buildpacks/imgutil' from 'v0.0.0-20250626173435-7c19c278f3d2' to 'v0.0.0-20260216175732-65b01efeb22e'
Bumped go.mod package 'github.com/buildpacks/lifecycle' from 'v0.20.16' to 'v0.21.6'
Bumped go.mod package 'github.com/buildpacks/pack' from 'v0.38.2' to 'v0.40.2'
Bumped go.mod package 'github.com/catenacyber/perfsprint' from 'v0.9.1' to 'v0.10.1'
Bumped go.mod package 'github.com/ccojocar/zxcvbn-go' from 'v1.0.2' to 'v1.0.4'
Bumped go.mod package 'github.com/charithe/durationcheck' from 'v0.0.10' to 'v0.0.11'
Removed go.mod package 'github.com/chavacava/garif' version 'v0.1.0'
Added go.mod package 'github.com/clipperhouse/uax29/v2' version 'v2.7.0'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.150' to 'v0.2.171'
Bumped go.mod package 'github.com/containerd/platforms' from 'v1.0.0-rc.1' to 'v1.0.0-rc.2'
Bumped go.mod package 'github.com/containerd/stargz-snapshotter/estargz' from 'v0.16.3' to 'v0.18.2'
Bumped go.mod package 'github.com/daixiang0/gci' from 'v0.13.6' to 'v0.13.7'
Bumped go.mod package 'github.com/docker/cli' from 'v28.4.0+incompatible' to 'v29.3.0+incompatible'
Bumped go.mod package 'github.com/docker/docker' from 'v28.5.1+incompatible' to 'v28.5.2+incompatible'
Bumped go.mod package 'github.com/docker/docker-credential-helpers' from 'v0.9.3' to 'v0.9.5'
Bumped go.mod package 'github.com/ebitengine/purego' from 'v0.8.4' to 'v0.10.0'
Bumped go.mod package 'github.com/ghostiam/protogetter' from 'v0.3.15' to 'v0.3.17'
Bumped go.mod package 'github.com/go-critic/go-critic' from 'v0.13.0' to 'v0.14.2'
Added go.mod package 'github.com/godoc-lint/godoc-lint' version 'v0.10.2'
Bumped go.mod package 'github.com/gofrs/flock' from 'v0.12.1' to 'v0.13.0'
Added go.mod package 'github.com/golangci/asciicheck' version 'v0.5.0'
Bumped go.mod package 'github.com/golangci/go-printf-func-name' from 'v0.1.0' to 'v0.1.1'
Bumped go.mod package 'github.com/golangci/golangci-lint/v2' from 'v2.1.2' to 'v2.7.2'
Bumped go.mod package 'github.com/golangci/misspell' from 'v0.6.0' to 'v0.7.0'
Bumped go.mod package 'github.com/golangci/plugin-module-register' from 'v0.1.1' to 'v0.1.2'
Added go.mod package 'github.com/golangci/swaggoswag' version 'v0.0.0-20250504205917-77f2aca3143e'
Bumped go.mod package 'github.com/google/go-containerregistry' from 'v0.20.6' to 'v0.21.3'
Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20250501235452-c0086092b71a' to 'v0.0.0-20260302011040-a15ffb7f9dcc'
Bumped go.mod package 'github.com/gordonklaus/ineffassign' from 'v0.1.0' to 'v0.2.0'
Bumped go.mod package 'github.com/gostaticanalysis/nilerr' from 'v0.1.1' to 'v0.1.2'
Bumped go.mod package 'github.com/hashicorp/go-version' from 'v1.7.0' to 'v1.8.0'
Bumped go.mod package 'github.com/jarcoal/httpmock' from 'v1.4.0' to 'v1.4.1'
Bumped go.mod package 'github.com/jgautheron/goconst' from 'v1.8.1' to 'v1.8.2'
Bumped go.mod package 'github.com/jjti/go-spancheck' from 'v0.6.4' to 'v0.6.5'
Bumped go.mod package 'github.com/karamaru-alpha/copyloopvar' from 'v1.2.1' to 'v1.2.2'
Bumped go.mod package 'github.com/klauspost/compress' from 'v1.18.0' to 'v1.18.4'
Bumped go.mod package 'github.com/kulti/thelper' from 'v0.6.3' to 'v0.7.1'
Bumped go.mod package 'github.com/kunwardeep/paralleltest' from 'v1.0.14' to 'v1.0.15'
Bumped go.mod package 'github.com/ldez/exptostd' from 'v0.4.3' to 'v0.4.5'
Bumped go.mod package 'github.com/ldez/gomoddirectives' from 'v0.6.1' to 'v0.7.1'
Bumped go.mod package 'github.com/ldez/grignotin' from 'v0.9.0' to 'v0.10.1'
Bumped go.mod package 'github.com/ldez/tagliatelle' from 'v0.7.1' to 'v0.7.2'
Bumped go.mod package 'github.com/ldez/usetesting' from 'v0.4.3' to 'v0.5.0'
Bumped go.mod package 'github.com/lucasb-eyer/go-colorful' from 'v1.2.0' to 'v1.3.0'
Added go.mod package 'github.com/manuelarte/embeddedstructfieldcheck' version 'v0.4.0'
Bumped go.mod package 'github.com/manuelarte/funcorder' from 'v0.2.1' to 'v0.5.0'
Bumped go.mod package 'github.com/maratori/testableexamples' from 'v1.0.0' to 'v1.0.1'
Bumped go.mod package 'github.com/maratori/testpackage' from 'v1.1.1' to 'v1.1.2'
Bumped go.mod package 'github.com/mattn/go-runewidth' from 'v0.0.16' to 'v0.0.21'
Bumped go.mod package 'github.com/mgechev/revive' from 'v1.9.0' to 'v1.13.0'
Bumped go.mod package 'github.com/moby/buildkit' from 'v0.25.1' to 'v0.28.0'
Bumped go.mod package 'github.com/moby/go-archive' from 'v0.1.0' to 'v0.2.0'
Added go.mod package 'github.com/moby/moby/api' version 'v1.54.0'
Added go.mod package 'github.com/moby/moby...

Assets 3

20 Mar 21:10

appruntimeplatform-bot

v2.133.0

7c7435f

2.133.0

Release Date: March 20, 2026

Changes

Fix readme job - Author: Amin Jamali - SHA: b1025e4

Changes for bbs

Remove unused helper function and fix typos - Author: Geoff Franks - SHA: f9b7322ba965fc87c7135a15f54bec0a469cba01
Only evacuate 1 instance at a time with recreate update strategy - Author: Maria Shaldybin - SHA: fa0efa88b48e719dbd9b44631c578b8eaa9f8a0b
Add protobuf message for DedicatedDevice - Author: Maria Shaldybin - SHA: fdaff70adde0a21ce585c3badcf1fd4bc07a0d42
Evacuate immediately for recreate update strategy - Author: Amelia Downs - SHA: cf667c49ca0bd0849e55369d2fb545c0646e762f
Add the update_strategy to the desired LRP - Author: Amelia Downs - SHA: 0b98bcb86651c8bb077e049e957c3e493c65ca9a
Add update_strategy enum to desired_lrps table - Author: Amelia Downs - SHA: b81c849ad650248479f2a301c1c307317fdf75d9

Changes for rep

Add tests for invalid JSON in dedicated volume mount configs - Author: Geoff Franks - SHA: d9774a98206bdfe2aad3ac9d0a58695d4f233e5e
Parse dedicated volume mount for executor - Author: Maria Shaldybin - SHA: 7a7e08f94ceb948d9710b3414224a20469c4eb59

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.64.0' to 'v0.65.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.66.0' to 'v0.67.0'
Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.67.0' to 'v0.68.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.71.0' to 'v2.72.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.63.0' to 'v1.64.0'
Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.58.0' to 'v0.59.0'
Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260309130112-afd4aa9f371a' to 'v0.0.0-20260316130226-db948d6c5f1c'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.88.0' to 'v0.89.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.96.0' to 'v0.97.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.79.0' to 'v0.80.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.66.0' to 'v0.67.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.66.0' to 'v0.67.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260311024225-613a89da1275' to 'v0.0.0-20260318024418-0ddea73e969e'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.94.0' to 'v0.95.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260311025007-475c35f2e0a1' to 'v0.0.0-20260318025245-1b062a144fe6'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.63.0' to 'v3.64.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.65.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.47.0' to 'v0.48.0'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2' from 'v1.41.3' to 'v1.41.4'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/config' from 'v1.32.11' to 'v1.32.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/credentials' from 'v1.19.11' to 'v1.19.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/feature/ec2/imds' from 'v1.18.19' to 'v1.18.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/configsources' from 'v1.4.19' to 'v1.4.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/endpoints/v2' from 'v2.7.19' to 'v2.7.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/ini' from 'v1.8.5' to 'v1.8.6'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecr' from 'v1.55.4' to 'v1.56.1'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecrpublic' from 'v1.38.11' to 'v1.38.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding' from 'v1.13.6' to 'v1.13.7'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/presigned-url' from 'v1.13.19' to 'v1.13.20'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/signin' from 'v1.0.7' to 'v1.0.8'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sso' from 'v1.30.12' to 'v1.30.13'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ssooidc' from 'v1.35.16' to 'v1.35.17'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sts' from 'v1.41.8' to 'v1.41.9'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.170' to 'v0.2.171'
Bumped go.mod package 'github.com/lib/pq' from 'v1.11.2' to 'v1.12.0'
Bumped go.mod package 'github.com/nats-io/jwt/v2' from 'v2.8.0' to 'v2.8.1'
Bumped go.mod package 'go.step.sm/crypto' from 'v0.76.2' to 'v0.77.1'
Bumped go.mod package 'golang.org/x/crypto' from 'v0.48.0' to 'v0.49.0'
Bumped go.mod package 'golang.org/x/net' from 'v0.51.0' to 'v0.52.0'
Bumped go.mod package 'golang.org/x/tools' from 'v0.42.0' to 'v0.43.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260226221140-a57be14db171' to 'v0.0.0-20260319201613-d00831a3d3e7'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260226221140-a57be14db171' to 'v0.0.0-20260319201613-d00831a3d3e7'
Bumped go.mod package 'google.golang.org/grpc' from 'v1.79.2' to 'v1.79.3'

✨ Built with go 1.26.1

Full Changelog: v2.132.0...v2.133.0

Resources

Download release 2.133.0 from bosh.io.

Assets 3

13 Mar 02:03

appruntimeplatform-bot

v2.132.0

8b8470f

2.132.0

Release Date: March 13, 2026

Changes

Upgrade golang-1.26-windows (1.26.1) - Author: App Platform Runtime Working Group CI Bot - SHA: dd8d192
Upgrade golang-1.26-linux (1.26.1) - Author: App Platform Runtime Working Group CI Bot - SHA: c3138ed

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.70.0' to 'v2.71.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.95.0' to 'v0.96.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260304024058-46dd12e5cd10' to 'v0.0.0-20260311024225-613a89da1275'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260304024757-b2a02a8878e6' to 'v0.0.0-20260311025007-475c35f2e0a1'
Bumped go.mod package 'golang.org/x/mod' from 'v0.33.0' to 'v0.34.0'
Bumped go.mod package 'golang.org/x/text' from 'v0.34.0' to 'v0.35.0'

Bosh Job Spec changes:

diff --git a/jobs/vizzini/spec b/jobs/vizzini/spec
index 70f1de7f9..51c7d0f1d 100644
--- a/jobs/vizzini/spec
+++ b/jobs/vizzini/spec
@@ -1,7 +1,7 @@
 ---
 name: vizzini
 packages:
-  - golang-1.25-linux
+  - golang-1.26-linux
   - vizzini
 
 templates:

✨ Built with go 1.26.1

Full Changelog: v2.131.0...v2.132.0

Resources

Download release 2.132.0 from bosh.io.

Assets 3

10 Mar 19:04

appruntimeplatform-bot

v2.131.0

bfb98f3

2.131.0

Release Date: March 10, 2026

Changes

Upgrade golang-1.25-windows (1.25.8) - Author: App Platform Runtime Working Group CI Bot - SHA: ffb6f09
Upgrade golang-1.25-linux (1.25.8) - Author: App Platform Runtime Working Group CI Bot - SHA: 13e1fc5

Changes for buildpackapplifecycle

Merge pull request #79 from tomkennedy513/fix-output-metadata-json-marshaling - Author: Geoff Franks - SHA: 7d680b144ebf7472f5614a6e72271b4421b3e5f2
Handle yaml unmarshal error for buildpack metadata - Author: Tom Kennedy - SHA: c20920d2d81fe4482f6e0fda145f804d34325156
Fix result.json not being properly unmarshaled - Author: Tom Kennedy - SHA: ee42b04f5082c386c6eba90d729010d89843a9d1

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.62.0' to 'v0.64.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.64.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.66.0' to 'v0.67.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.69.0' to 'v2.70.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.61.0' to 'v1.63.0'
Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.57.0' to 'v0.58.0'
Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260216140056-3ed7ad5aa36b' to 'v0.0.0-20260309130112-afd4aa9f371a'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.86.0' to 'v0.88.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.92.0' to 'v0.95.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.76.0' to 'v0.79.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.64.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.64.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260211023825-fb202bdd1b27' to 'v0.0.0-20260304024058-46dd12e5cd10'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.91.0' to 'v0.94.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260218024445-0b3043cea204' to 'v0.0.0-20260304024757-b2a02a8878e6'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.61.0' to 'v3.63.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.63.0' to 'v0.65.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.45.0' to 'v0.47.0'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2' from 'v1.41.1' to 'v1.41.3'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/config' from 'v1.32.8' to 'v1.32.11'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/credentials' from 'v1.19.8' to 'v1.19.11'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/feature/ec2/imds' from 'v1.18.17' to 'v1.18.19'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/configsources' from 'v1.4.17' to 'v1.4.19'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/endpoints/v2' from 'v2.7.17' to 'v2.7.19'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/internal/ini' from 'v1.8.4' to 'v1.8.5'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecr' from 'v1.55.2' to 'v1.55.4'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecrpublic' from 'v1.38.9' to 'v1.38.11'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding' from 'v1.13.4' to 'v1.13.6'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/internal/presigned-url' from 'v1.13.17' to 'v1.13.19'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/signin' from 'v1.0.5' to 'v1.0.7'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sso' from 'v1.30.9' to 'v1.30.12'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ssooidc' from 'v1.35.14' to 'v1.35.16'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/sts' from 'v1.41.6' to 'v1.41.8'
Bumped go.mod package 'github.com/aws/smithy-go' from 'v1.24.0' to 'v1.24.2'
Bumped go.mod package 'github.com/awslabs/amazon-ecr-credential-helper/ecr-login' from 'v0.11.0' to 'v0.12.0'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.168' to 'v0.2.170'
Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260202012954-cb029daf43ef' to 'v0.0.0-20260302011040-a15ffb7f9dcc'
Bumped go.mod package 'github.com/nats-io/nats-server/v2' from 'v2.12.4' to 'v2.12.5'
Bumped go.mod package 'github.com/nats-io/nats.go' from 'v1.48.0' to 'v1.49.0'
Bumped go.mod package 'go.step.sm/crypto' from 'v0.76.0' to 'v0.76.2'
Removed go.mod package 'go.uber.org/automaxprocs' version 'v1.6.0'
Bumped go.mod package 'golang.org/x/net' from 'v0.50.0' to 'v0.51.0'
Bumped go.mod package 'golang.org/x/oauth2' from 'v0.35.0' to 'v0.36.0'
Bumped go.mod package 'golang.org/x/sync' from 'v0.19.0' to 'v0.20.0'
Bumped go.mod package 'golang.org/x/sys' from 'v0.41.0' to 'v0.42.0'
Bumped go.mod package 'golang.org/x/time' from 'v0.14.0' to 'v0.15.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260217215200-42d3e9bedb6d' to 'v0.0.0-20260226221140-a57be14db171'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260217215200-42d3e9bedb6d' to 'v0.0.0-20260226221140-a57be14db171'
Bumped go.mod package 'google.golang.org/grpc' from 'v1.79.1' to 'v1.79.2'

✨ Built with go 1.25.8

Full Changelog: v2.130.0...v2.131.0

Resources

Download release 2.131.0 from bosh.io.

Assets 3

07 Mar 01:41

appruntimeplatform-bot

v2.130.0

9ef0345

2.130.0

Release Date: March 07, 2026

Changes

Set BBS nf_conntrack_max conditionally based on current value - Author: Plamen Bardarov - SHA: bb7a010
vizzini: expect task result on failure (match rep behavior) - Author: Naveen Sreeramachandra - SHA: 61cf536
Bump envoy to 6d9bb7d9a8 (#1082) - Author: appruntimeplatform-bot - SHA: 9e4f618
Explicitly load nf_conntrack module in bbs - Author: Maria Shaldybin - SHA: 7fc6302
Fix debug server config for file-server - Author: Stephan Merker - SHA: 1d15929
Implement cf-pcap to enable packet captures in apps - Author: Maximilian Moehl - SHA: 157d785
Introduce dependencies for cf-pcap - Author: Maximilian Moehl - SHA: 1f36e18
feat: report container IPv6 address to NATS - Author: Maximilian Moehl - SHA: 912b4b2
mtls for fileserver - Author: Stephan Merker - SHA: cb18f24
Add support for DockerV2ListMediaType - Author: Amin Jamali - SHA: a3ef58c

Changes for bbs

feat: add support to store IPv6 address of LRP - Author: Maximilian Moehl - SHA: a998cae3b567d58ca4def4877fb68c21354bee00

Changes for buildpackapplifecycle

Merge pull request #78 from tomkennedy513/buildpack-metadata - Author: Geoff Franks - SHA: caaa1a0fd61d5a37c885d49eefab3f2ba657de1e
Allow buildpacks to provide arbitrary metadata from a build - Author: Tom Kennedy - SHA: 3214c91e4f5d88a92b186420ecd4f805a6eb5f99

Changes for rep

feat: record IPv6 address in ActualLRPNetInfo - Author: Maximilian Moehl - SHA: 5bbcd6b802a01a983283465a3970b60d2f31ddcf
Always attempt to read result file in task completion handler - Author: Tom Kennedy - SHA: f8415d49931852a637b5a2171770cf90b931285a

Blob Updates

Bumped blob 'proxy/envoy-dc2d3098ae5641555f15c71d5bb5ce0060a8015c-1.36.2.tgz' to 'proxy/envoy-6d9bb7d9a85d616b220d1f8fe67b61f82bbdb8d3-1.37.0.tgz'

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260212202352-e7a28f9d31c0' to 'v0.0.0-20260216140056-3ed7ad5aa36b'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.85.0' to 'v0.86.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.91.0' to 'v0.92.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.75.0' to 'v0.76.0'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.90.0' to 'v0.91.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260213233528-11bccf5f5240' to 'v0.0.0-20260218024445-0b3043cea204'
Bumped go.mod package 'filippo.io/edwards25519' from 'v1.1.0' to 'v1.2.0'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/config' from 'v1.32.7' to 'v1.32.8'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/credentials' from 'v1.19.7' to 'v1.19.8'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ecr' from 'v1.55.1' to 'v1.55.2'
Bumped go.mod package 'github.com/aws/aws-sdk-go-v2/service/ssooidc' from 'v1.35.13' to 'v1.35.14'
Bumped go.mod package 'github.com/envoyproxy/go-control-plane/envoy' from 'v1.36.0' to 'v1.37.0'
Bumped go.mod package 'github.com/envoyproxy/protoc-gen-validate' from 'v1.3.0' to 'v1.3.3'
Added go.mod package 'github.com/gopacket/gopacket' version 'v1.5.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260209200024-4cfbd4190f57' to 'v0.0.0-20260217215200-42d3e9bedb6d'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260209200024-4cfbd4190f57' to 'v0.0.0-20260217215200-42d3e9bedb6d'

Bosh Job Spec changes:

diff --git a/jobs/file_server/spec b/jobs/file_server/spec
index d55cfc534..604964a75 100644
--- a/jobs/file_server/spec
+++ b/jobs/file_server/spec
@@ -13,6 +13,7 @@ templates:
   loggregator_client.key.erb: config/certs/loggregator/client.key
   tls.crt.erb: config/certs/tls.crt
   tls.key.erb: config/certs/tls.key
+  tls.client_ca_cert.erb: config/certs/tls.client_ca_cert
 
 packages:
   - pid_utils
@@ -37,8 +38,8 @@ properties:
     default: "/var/vcap/jobs/file_server/packages/"
     description: "Fully-qualified path to the doc root for the file server's static files"
   diego.file_server.debug_addr:
-    description: "address at which to serve debug info"
-    default: "127.0.0.1:17005"
+    description: "Address at which to serve debug info, e.g. 127.0.0.1:17005. Debug server is disabled when empty (default)"
+    default: ""
   diego.file_server.log_level:
     description: "Log level"
     default: "info"
@@ -56,6 +57,8 @@ properties:
     description: "PEM-encoded tls certificate that can be used for server auth"
   tls.key:
     description: "PEM-encoded tls key"
+  tls.client_ca_cert:
+    description: "PEM-encoded CA certificate for mTLS, optional"
 
   loggregator.v2_api_port:
     description: "Port which the component should use to communicate to the metron agent's v2 API (host is assumed to be `localhost`)."
diff --git a/jobs/rep/spec b/jobs/rep/spec
index a462e0b2c..8bb3c3b17 100644
--- a/jobs/rep/spec
+++ b/jobs/rep/spec
@@ -245,6 +245,10 @@ properties:
     description: "Maximum container capacity per rep"
     default: 250
 
+  diego.rep.enable_cf_pcap:
+    description: "Allow app developers to capture tcpdumps within their app containers."
+    default: false
+
   enable_healthcheck_metrics:
     description: "When set, enables the rep to emit healtcheck failure metrics."
     default: false

✨ Built with go 1.25.7

Full Changelog: v2.129.0...v2.130.0

Resources

Download release 2.130.0 from bosh.io.

Assets 3

14 Feb 11:03

appruntimeplatform-bot

v2.129.0

46c719a

2.129.0

Release Date: February 14, 2026

Changes

Merge pull request #1104 from cloudfoundry/cellpresence-rootfs-bbs-dependency - Author: Amelia Downs - SHA: c7864ec
inlcude the commits of bbs cellprescence model update - Author: karthick udayakumar - SHA: 400def3
Merge pull request #1103 from cloudfoundry/locket-timeout-1 - Author: Karthick Udayakumar - SHA: 1141880
locket sql db read/write timeout setting - Author: karthick udayakumar - SHA: af1684f
Upgrade golang-1.25-windows (1.25.7) - Author: App Platform Runtime Working Group CI Bot - SHA: 6325606
Upgrade golang-1.25-linux (1.25.7) - Author: App Platform Runtime Working Group CI Bot - SHA: f2bbb5c
add test cases for sha 256 fingerprint check - Author: karthick udayakumar - SHA: 972dd17
Revert "Use SHA256 Instead of SHA1" - Author: karthick udayakumar - SHA: 5d757c0
Revert "WIP Update name for SHA256" - Author: karthick udayakumar - SHA: 3410e53
Revert "Support SHA1 & SHA256" - Author: karthick udayakumar - SHA: 827cbb8
Revert "Use the correct package for SHA256" - Author: karthick udayakumar - SHA: e219d8d
add sha 256 fingerprint validation - Author: karthick udayakumar - SHA: bba2ab3

Changes for bbs

Report extra rootfs information in cell presence (#140) - Author: Maria Shaldybin - SHA: a0e418cacd769db04d571870ad9d0dbaf2790ce0

Changes for rep

Report stack versions for preloaded and extra rootfses (#78) - Author: Maria Shaldybin - SHA: e562b38aa4d4023cf4518845949d63a63d112fa0

Blob Updates

Bumped blob 'proxy/envoy-dc2d3098ae5641555f15c71d5bb5ce0060a8015c-1.36.2.tgz' to 'libpcap/libpcap-1.10.6.tar.xz'
Bumped blob 'tar/tar-1737494392.tgz' to 'proxy/envoy-dc2d3098ae5641555f15c71d5bb5ce0060a8015c-1.36.2.tgz'
Bumped blob 'winpty/winpty-0.4.3.tgz' to 'tar/tar-1737494392.tgz'
Bumped blob 'null' to 'winpty/winpty-0.4.3.tgz'

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.60.0' to 'v0.62.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.62.0' to 'v0.64.0'
Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.64.0' to 'v0.66.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.67.0' to 'v2.69.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.59.0' to 'v1.61.0'
Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.55.0' to 'v0.57.0'
Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20260126140202-2a7d9013060a' to 'v0.0.0-20260212202352-e7a28f9d31c0'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.83.0' to 'v0.85.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.89.0' to 'v0.91.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.72.0' to 'v0.75.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.62.0' to 'v0.64.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.62.0' to 'v0.64.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260121023424-879cfc366958' to 'v0.0.0-20260211023825-fb202bdd1b27'
Bumped go.mod package 'code.cloudfoundry.org/go-diodes' from 'v0.0.0-20260119094648-9c5f37160881' to 'v0.0.0-20260209061029-a81ffbc46978'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.88.0' to 'v0.90.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260121024111-7225277b5229' to 'v0.0.0-20260213233528-11bccf5f5240'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.59.0' to 'v3.61.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.61.0' to 'v0.63.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.44.0' to 'v0.45.0'
Bumped go.mod package 'github.com/antithesishq/antithesis-sdk-go' from 'v0.5.0' to 'v0.6.0'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.165' to 'v0.2.168'
Bumped go.mod package 'github.com/cncf/xds/go' from 'v0.0.0-20260121142036-a486691bba94' to 'v0.0.0-20260202195803-dba9d589def2'
Bumped go.mod package 'github.com/coreos/go-systemd/v22' from 'v22.6.0' to 'v22.7.0'
Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260115054156-294ebfa9ad83' to 'v0.0.0-20260202012954-cb029daf43ef'
Bumped go.mod package 'github.com/klauspost/compress' from 'v1.18.3' to 'v1.18.4'
Bumped go.mod package 'github.com/lib/pq' from 'v1.10.9' to 'v1.11.2'
Bumped go.mod package 'github.com/nats-io/nats-server/v2' from 'v2.12.3' to 'v2.12.4'
Bumped go.mod package 'github.com/nats-io/nkeys' from 'v0.4.14' to 'v0.4.15'
Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.5' to 'v2.28.1'
Bumped go.mod package 'github.com/onsi/gomega' from 'v1.39.0' to 'v1.39.1'
Bumped go.mod package 'golang.org/x/crypto' from 'v0.47.0' to 'v0.48.0'
Bumped go.mod package 'golang.org/x/mod' from 'v0.32.0' to 'v0.33.0'
Bumped go.mod package 'golang.org/x/net' from 'v0.49.0' to 'v0.50.0'
Bumped go.mod package 'golang.org/x/oauth2' from 'v0.34.0' to 'v0.35.0'
Bumped go.mod package 'golang.org/x/sys' from 'v0.40.0' to 'v0.41.0'
Bumped go.mod package 'golang.org/x/text' from 'v0.33.0' to 'v0.34.0'
Bumped go.mod package 'golang.org/x/tools' from 'v0.41.0' to 'v0.42.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260126211449-d11affda4bed' to 'v0.0.0-20260209200024-4cfbd4190f57'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260126211449-d11affda4bed' to 'v0.0.0-20260209200024-4cfbd4190f57'
Bumped go.mod package 'google.golang.org/grpc' from 'v1.78.0' to 'v1.79.1'

Bosh Job Spec changes:

diff --git a/jobs/locket/spec b/jobs/locket/spec
index 0123da12c..8f8d393e9 100644
--- a/jobs/locket/spec
+++ b/jobs/locket/spec
@@ -63,10 +63,10 @@ properties:
     default: "30"
   diego.locket.sql.db_read_timeout: 
     description: "Timeout in seconds for a db client to wait for data to be received from the server"
-    default: "600"
+    default: "60"
   diego.locket.sql.db_write_timeout: 
     description: "Timeout in seconds for a db client to wait for data to be sent to the server"
-    default: "600"
+    default: "60"
   diego.locket.sql.require_ssl:
     description: "Whether to require SSL for Locket communication to the SQL backend"
     default: false

✨ Built with go 1.25.7

Full Changelog: v2.128.0...v2.129.0

Resources

Download release 2.129.0 from bosh.io.

Assets 3

28 Jan 15:29

appruntimeplatform-bot

v2.128.0

e7cc101

2.128.0

Release Date: January 28, 2026

Changes

fix TCPRouteMapping for new function signature - Author: Amelia Downs - SHA: ebad7c3
fix TCPRouteMapping for new function signature - Author: Amelia Downs - SHA: 73953a4
Merge pull request #1095 from Joey-Rose/joey-add-sni-rewrite-support - Author: Amelia Downs - SHA: 2a4f6bc
Add unit tests for sni rewrite support - Author: Joey Rose - SHA: ccda0f6
Add sni rewrite support - Author: Joey Rose - SHA: 32768ae

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/credhub-cli' from 'v0.0.0-20251215140710-93274ab0250e' to 'v0.0.0-20260126140202-2a7d9013060a'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.82.0' to 'v0.83.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.88.0' to 'v0.89.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.71.0' to 'v0.72.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260114023242-b0c72d3d55e3' to 'v0.0.0-20260121023424-879cfc366958'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260114024131-2da481271a23' to 'v0.0.0-20260121024111-7225277b5229'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.43.0' to 'v0.44.0'
Bumped go.mod package 'github.com/cncf/xds/go' from 'v0.0.0-20251210132809-ee656c7534f5' to 'v0.0.0-20260121142036-a486691bba94'
Bumped go.mod package 'github.com/nats-io/nkeys' from 'v0.4.12' to 'v0.4.14'
Bumped go.mod package 'go.step.sm/crypto' from 'v0.75.0' to 'v0.76.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20260114163908-3f89685c29c3' to 'v0.0.0-20260126211449-d11affda4bed'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20260114163908-3f89685c29c3' to 'v0.0.0-20260126211449-d11affda4bed'

✨ Built with go 1.25.6

Full Changelog: v2.127.0...v2.128.0

Resources

Download release 2.128.0 from bosh.io.

Assets 3

21 Jan 15:11

appruntimeplatform-bot

v2.127.0

a72d924

2.127.0

Release Date: January 21, 2026

Changes

Merge pull request #1098 from plamen-bardarov/ecrhelper_non_fips_repo_support - Author: Amelia Downs - SHA: e966613
reset useFIPSEndpoint variable in tests - Author: Plamen Bardarov - SHA: 7d6d6f7
make fips endpoint optional when calling GetAuthorizationToken in ecrhelper - Author: Plamen Bardarov - SHA: 2f65f1d

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.59.0' to 'v0.60.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.61.0' to 'v0.62.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.66.0' to 'v2.67.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.58.0' to 'v1.59.0'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.81.0' to 'v0.82.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.87.0' to 'v0.88.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.70.0' to 'v0.71.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.61.0' to 'v0.62.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.61.0' to 'v0.62.0'
Bumped go.mod package 'code.cloudfoundry.org/go-diodes' from 'v0.0.0-20260112063157-4b000d565325' to 'v0.0.0-20260119094648-9c5f37160881'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.87.0' to 'v0.88.0'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.58.0' to 'v3.59.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.60.0' to 'v0.61.0'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.164' to 'v0.2.165'
Bumped go.mod package 'github.com/klauspost/compress' from 'v1.18.2' to 'v1.18.3'

✨ Built with go 1.25.6

Full Changelog: v2.126.0...v2.127.0

Resources

Download release 2.127.0 from bosh.io.

Assets 3

20 Jan 17:04

appruntimeplatform-bot

v2.126.0

9bbc95d

2.126.0

Release Date: January 20, 2026

Changes

Upgrade golang-1.25-windows (1.25.6) - Author: App Platform Runtime Working Group CI Bot - SHA: d49d8bd
Upgrade golang-1.25-linux (1.25.6) - Author: App Platform Runtime Working Group CI Bot - SHA: f4c9c82
Add inigo test to validate there aren't deadlock issues with readiness checks upon container failure during startup when the readiness check succeeded - Author: Geoff Franks - SHA: 0b07727

Changes for executor

Resolves deadlock issue with the readiness check. (#127) - Author: Geoff Franks - SHA: 8eaf4cb3970e39c5fce9c50ec933bfd549ecfb67

Go Packages Updates

Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.58.0' to 'v0.59.0'
Bumped go.mod package 'code.cloudfoundry.org/bytefmt' from 'v0.60.0' to 'v0.61.0'
Bumped go.mod package 'code.cloudfoundry.org/certsplitter' from 'v0.63.0' to 'v0.64.0'
Bumped go.mod package 'code.cloudfoundry.org/cfhttp/v2' from 'v2.65.0' to 'v2.66.0'
Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.57.0' to 'v1.58.0'
Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.54.0' to 'v0.55.0'
Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.80.0' to 'v0.81.0'
Bumped go.mod package 'code.cloudfoundry.org/diego-logging-client' from 'v0.86.0' to 'v0.87.0'
Bumped go.mod package 'code.cloudfoundry.org/dockerdriver' from 'v0.69.0' to 'v0.70.0'
Bumped go.mod package 'code.cloudfoundry.org/durationjson' from 'v0.60.0' to 'v0.61.0'
Bumped go.mod package 'code.cloudfoundry.org/eventhub' from 'v0.60.0' to 'v0.61.0'
Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20260107023026-c1405e3f9a7c' to 'v0.0.0-20260114023242-b0c72d3d55e3'
Bumped go.mod package 'code.cloudfoundry.org/go-diodes' from 'v0.0.0-20251217145408-467f62baff7d' to 'v0.0.0-20260112063157-4b000d565325'
Bumped go.mod package 'code.cloudfoundry.org/goshims' from 'v0.86.0' to 'v0.87.0'
Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20260107023704-fd60faae10e9' to 'v0.0.0-20260114024131-2da481271a23'
Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.57.0' to 'v3.58.0'
Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.59.0' to 'v0.60.0'
Bumped go.mod package 'code.cloudfoundry.org/tlsconfig' from 'v0.42.0' to 'v0.43.0'
Bumped go.mod package 'github.com/cloudfoundry/socks5-proxy' from 'v0.2.163' to 'v0.2.164'
Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20260106004452-d7df1bf2cac7' to 'v0.0.0-20260115054156-294ebfa9ad83'
Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.4' to 'v2.27.5'
Bumped go.mod package 'github.com/sirupsen/logrus' from 'v1.9.3' to 'v1.9.4'
Bumped go.mod package 'golang.org/x/crypto' from 'v0.46.0' to 'v0.47.0'
Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.49.0'
Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.41.0'
Bumped go.mod package 'google.golang.org/genproto/googleapis/api' from 'v0.0.0-20251222181119-0a764e51fe1b' to 'v0.0.0-20260114163908-3f89685c29c3'
Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20251222181119-0a764e51fe1b' to 'v0.0.0-20260114163908-3f89685c29c3'

✨ Built with go 1.25.6

Full Changelog: v2.125.0...v2.126.0

Resources

Download release 2.126.0 from bosh.io.

Assets 3

Releases: cloudfoundry/diego-release

2.135.0

2.135.0

Changes

Blob Updates

Go Packages Updates

✨ Built with go 1.26.2

Resources

Uh oh!

2.134.0

2.134.0

Changes

Changes for cnbapplifecycle

Changes for bbs

Go Packages Updates

Go Package Updates for cnbapplifecycle

Uh oh!

2.133.0

2.133.0

Changes

Changes for bbs

Changes for rep

Go Packages Updates

✨ Built with go 1.26.1

Resources

Uh oh!

2.132.0

2.132.0

Changes

Go Packages Updates

Bosh Job Spec changes:

✨ Built with go 1.26.1

Resources

Uh oh!

2.131.0

2.131.0

Changes

Changes for buildpackapplifecycle

Go Packages Updates

✨ Built with go 1.25.8

Resources

Uh oh!

2.130.0

2.130.0

Changes

Changes for bbs

Changes for buildpackapplifecycle

Changes for rep

Blob Updates

Go Packages Updates

Bosh Job Spec changes:

✨ Built with go 1.25.7

Resources

Uh oh!

2.129.0

2.129.0

Changes

Changes for bbs

Changes for rep

Blob Updates

Go Packages Updates

Bosh Job Spec changes:

✨ Built with go 1.25.7

Resources

Uh oh!

2.128.0

2.128.0

Changes

Go Packages Updates

✨ Built with go 1.25.6

Resources

Uh oh!

2.127.0

2.127.0

Changes

Go Packages Updates

✨ Built with go 1.25.6

Resources

Uh oh!

2.126.0