NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules · #387 by repository stars
Last release today
08 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Some releases are documented
notes for 27 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
1526 releases · first in 2017
fix: anchor the prefix when a repo allowlist rule has a mid-string wildcard ( GHSA-fwc4-2f3p-7qm7 ) by @jamengual in #6962
Full Changelog: v0.48.0...v0.48.1
Thanks to @arpitjain099 for reporting and reviewing this fix, and to @pseudomorph for reviewing.
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
…responsibility for the security lifecycle, vulnerability management, and distribution of third-party Terraform and OpenTofu binaries.
### Terraform and OpenTofu Binaries Removed from Debian and Alpine Images
Users can continue to use Atlantis' automatic binary download functionality to fetch and use the Terraform or OpenTofu versions required by their workflows.
This change allows the Atlantis project to focus its security and maintenance efforts on the Atlantis application and its container images, rather than taking responsibility for the security lifecycle, vulnerability management, and distribution of third-party Terraform and OpenTofu binaries.
Users who require pre-installed binaries can continue to build custom Atlantis images based on the official images.
alpine-slim and debian-slim image targets do not bundle Terraform or OpenTofu.Full Changelog: v0.47.1...v0.48.0
fix: prevent pull request input from reaching a shell ( GHSA-rjh2-4xgw-p2hj ) by @jamengual in #6792
Full Changelog: v0.47.0...v0.47.1
Thanks to @krewenki for the security review of this fix, and to @pseudomorph for reviewing.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
feat( #303 ): include commit SHA in working directory lock errors by @ShankyJS in #6646
Full Changelog: v0.46.0...v0.47.0
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →