github.com/runatlantis/atlantis
v0.47.1
#370 most downloaded on Go modules
runatlantis/atlantis
What this package is like to depend on
Last release 2 days ago
22 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Most releases are documented
notes for 102 of 136 stable releases
Nothing withdrawn
no release was ever pulled
9 years old
1409 releases · first in 2017
809 releases in the last 12 months
see the full history below
Release timeline
1409 releases · Feb 2022 to Aug 2026Releases
latest 60 of 1409-
v0.47.120 Aug 2026Release notes
Open source →What's Changed
Security changes
- fix: prevent pull request input from reaching a shell (GHSA-rjh2-4xgw-p2hj) by @jamengual in #6792
Full Changelog: v0.47.0...v0.47.1
Thanks to @krewenki for the security review of this fix, and to @pseudomorph for reviewing.
-
v0.47.1-0.20260822005147-078d0a82081e22 Aug 2026 pre-releaseNothing published for this version
-
v0.47.1-0.20260821010552-15e7a741764921 Aug 2026 pre-releaseNothing published for this version
-
v0.47.1-0.20260820174559-930dcd80d82220 Aug 2026 pre-releaseNothing published for this version
-
v0.47.1-0.20260819025139-599419d2874c19 Aug 2026 pre-releaseNothing published for this version
-
v0.47.018 Aug 2026Release notes
Open source →What's Changed
Exciting New Features 🎉
- feat(#303): include commit SHA in working directory lock errors by @ShankyJS in #6646
- feat: Expose plan_output on POST /api/drift/detect and clarify drift API workflow docs by @albertorm95 in #6709
- feat: add --plan-store-dir to decouple plan file storage from data-dir by @sakkiii in #6636
Provider GitHub
- fix: handle malformed plans and VCS transport failures by @chenrui333 in #6672
- fix: make GitHub token rotation concurrency-safe by @chenrui333 in #6670
Bug fixes 🐛
- fix: wire SkipPRRequirements for no-PR API and drift remediation contexts by @albertorm95 in #6664
- fix: exempt readiness probe from web authentication by @chenrui333 in #6669
- fix: avoid nil terraform client dereference in NewServer by @Atul-Koundal in #6697
- fix: accept 2xx responses as success in HTTP webhooks by @gautamrizwani in #6648
- fix: only require a managed plan file for managed apply workflows by @jamengual in #6781
- fix: scope misspell "did you mean" check to default executable name by @npwolf in #6690
- fix: NoOpLocker.Unlock returns non-nil lock, breaking DELETE /locks error handling by @ricardbejarano in #6775
Security changes
- fix(deps): update module golang.org/x/text to v0.39.0 [security] (main) by @renovate[bot] in #6687
- chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (main) by @renovate[bot] in #6706
- chore(deps): update module golang.org/x/mod to v0.40.0 [security] (main) by @renovate[bot] in #6771
- chore(deps): update dependency mermaid to v11.16.1 [security] (main) by @renovate[bot] in #6744
Documentation
- docs: Promote Terraform distribution agnosticism in Terragrunt example by @lachlankidson in #6620
- chore(deps): Bump dompurify from 3.4.11 to 3.4.12 by @dependabot[bot] in #6688
- chore(deps): update lodash-es to 4.18.1 by @chenrui333 in #6673
Dependencies
- chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to e7292be in .clusterfuzzlite/dockerfile (main) by @renovate[bot] in #6702
- chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to bb153df in .clusterfuzzlite/dockerfile (main) by @renovate[bot] in #6705
- chore(deps): update golang:1.26.5 docker digest to 3aff665 in testing/dockerfile (main) by @renovate[bot] in #6716
- chore(deps): update redis:8.6-alpine docker digest to cd218f4 in docker-compose.yml (main) by @renovate[bot] in #6722
- fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 2fb54c2 in go.mod (main) by @renovate[bot] in #6730
- chore(deps): update dependency opentofu/opentofu to v1.12.5 in dockerfile (main) by @renovate[bot] in #6735
- chore(deps): update step-security/harden-runner digest to b09bb98 in .github/workflows/scorecard.yml (main) by @renovate[bot] in #6757
- fix(deps): update module github.com/go-playground/validator/v10 to v10.30.3 in go.mod (main) by @renovate[bot] in #6770
- fix(deps): update module github.com/hashicorp/hc-install to v0.9.5 in go.mod (main) by @renovate[bot] in #6774
- chore(deps): update docker/dockerfile:1 docker digest to ecfaec9 in dockerfile (main) by @renovate[bot] in #6780
Other Changes 🔄
- chore(deps): bump Alpine curl to 8.20.0-r0 by @albertorm95 in #6665
- fix: bump alpine base image to 3.23.5 to update libssl3/libcrypto3 by @albertorm95 in #6708
New Contributors
- @ShankyJS made their first contribution in #6646
- @sakkiii made their first contribution in #6636
- @gautamrizwani made their first contribution in #6648
Full Changelog: v0.46.0...v0.47.0
-
v0.46.1-0.20260818004709-9928a77b07c218 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260817193259-0a08cd6cdac017 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260817183912-984bd5a4394c17 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260817025517-b859034a51af17 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260816015231-9d81ac26482716 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260815015707-7016f37cf17915 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260814075850-d163012f4a0714 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260813000853-92ce5c51d1a013 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260812034800-7803f1d9746812 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260810015426-554d3f1dcc3510 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260809014018-04886051710e09 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260806022906-5218252bd2f606 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260805172408-cca07329cbc305 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260805020829-9d38004eb0d805 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260804024249-1b7077db3c0e04 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260803020236-73b30488a67e03 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260802020907-2a17b1460a3b02 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260801020743-c5d4e1929ba501 Aug 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260731004743-229ed07dda1931 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260730020332-6e51a7446cdd30 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260729024227-406113f45a7529 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260728195318-85c5147f1faf28 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260728060453-a80af8e7b96f28 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260728041851-7147dbc38d1c28 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260727013416-9ce8e288b69627 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260725003657-b883706d1e4725 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260723023014-692c4f6971b623 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260723011055-ecc9e23b76b723 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260721224230-a06145d516c521 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260721180043-f8b37af54cd321 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260719025623-e9a0870c9fef19 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260718004629-f580ebc344a918 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260717013612-9ce030a4700b17 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260716182311-dcc84120949516 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260715004216-a34da7ec7f7215 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260714020441-05cf91dde46c14 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260713145658-5e42de2df9e513 Jul 2026 pre-releaseNothing published for this version
-
v0.46.1-0.20260704021334-5683ed53e11a04 Jul 2026 pre-releaseNothing published for this version
-
v0.46.030 Jun 2026Release notes
Open source →Highlights
- OpenTofu .tofu support: Atlantis now detects OpenTofu versions from .tofu and .tofu.json files, includes those files in default autoplan and project discovery behavior, and detects Terraform Cloud/Enterprise workspace configuration from .tf.json, .tofu, and .tofu.json projects.
- Broader core workflow coverage: The E2E harness now activates expanded fixtures from runatlantis/atlantis-tests#21001, covering multi-project targeting, autodiscovery, configured JSON projects, custom workflow environment behavior, and long-output status contexts.
- Safer plan/apply behavior: This release hardens apply validation against stale head/base plan state, preserves on_apply locks during plan cleanup, and fixes /api/plan with policy checks enabled while preserving per-project /api/apply behavior.
Project Health
- Top-Ranking Atlantis Issues 📊 Maintainers and contributors can now use #6608 to see open Atlantis issues ranked by community thumbs-up reactions. The ranking is a signal for prioritization and contribution, not a roadmap commitment or acceptance guarantee.
- Atlantis now uploads Go coverage to GitHub Code Quality, lints the separate e2e Go module, and has automated top-issue ranking to make maintenance work more visible.
- We welcome contributors across bug reports, focused fixes, documentation improvements, issue reproduction, and issue moderation/triage.
Call For Adopters
If your organization uses Atlantis and can share a sanitized setup or adoption note, runatlantis/examples is a good place to contribute it. Public examples help users learn from real deployments, help the project document its ecosystem, and can become future candidates for atlantis-tests fixture coverage.
What's Next
We are also looking at flag lifecycle improvements so Atlantis has a clearer path for introducing, documenting, deprecating, and eventually removing server flags.
What's Changed
Exciting New Features 🎉
- feat(e2e): activate new fixture coverage from atlantis-tests#21001 by @chenrui333 in #6601
- feat: support OpenTofu .tofu/.tofu.json version auto-detection by @chenrui333 in #6600
- feat: workspace detection for .tofu/.tofu.json, shared project indicators by @chenrui333 in #6603
Provider Bitbucket
- fix: validate current head and base plan state by @chenrui333 in #6605
Bug fixes 🐛
- fix: preserve on_apply locks during plan cleanup by @chenrui333 in #6606
- fix: normalize TestExecute_Flags path assertions by @Atul-Koundal in #6612
- fix: POST /api/plan panics when ATLANTIS_ENABLE_POLICY_CHECKS=true by @Abzaek in #6484
Dependencies
- chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to aa0051c in .clusterfuzzlite/dockerfile (main) by @renovate[bot] in #6607
Other Changes 🔄
- ci(e2e): add lint coverage and harden cleanup safety by @chenrui333 in #6602
- ci: upload Go coverage to GitHub Code Quality by @chenrui333 in #6604
- ci: add top-ranking issues automation by @chenrui333 in #6610
- test: close BoltDB instances in locks controller tests by @Atul-Koundal in #6611
- test: add on_apply lock preservation scenario by @chenrui333 in #6609
New Contributors
Full Changelog: v0.45.0...v0.46.0
-
v0.45.1-0.20260630155125-ac39085b350f30 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260630131624-c3047613d28c30 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260629143225-a8555f646fd929 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260629040048-484faaf5937b29 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260628223634-4912e69c5efe28 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260628215206-9c57b5f07ea328 Jun 2026 pre-releaseNothing published for this version
-
v0.45.1-0.20260628183237-914990efb52a28 Jun 2026 pre-releaseNothing published for this version
-
v0.45.028 Jun 2026Release notes
Open source →This minor release adds alpha drift detection and remediation APIs, new localization and automerge controls, notification improvements, and several provider and execution fixes.
Highlights
- Added alpha drift detection, status, remediation, remediation history, and drift webhook APIs. These APIs are alpha and their request/response behavior may change in future releases. (#6360)
- Added runtime localization support with built-in English and Spanish catalogs plus custom YAML overrides. (#6506)
- Added automerge controls for default merge method and disabling automerge labels. (#6573, #6593)
- Improved GitHub team allowlists to honor team hierarchy. (#6365)
Alpha: Drift detection and remediation APIs
- Added alpha drift detection APIs, drift status API, drift remediation API, and remediation history/result read endpoints. (#6360)
- Added drift webhook notifications, including Slack and HTTP webhook support. (#6360)
- Added
--enable-drift-detectionfor drift detection/status/history behavior. - Added
--enable-drift-remediationfor destructive remediation apply. - Drift APIs require API authentication with
X-Atlantis-Tokenand repository allowlist authorization. - Remediation
action:"apply"requires cached positive drift withhas_drift:truefor the same repo/ref/base branch/project/path/workspace. - Drift API inputs include ref, path, workspace, repository, and allowlist safety validation.
- Operators should test carefully before production use, especially with hooks, policy checks, allowlists, multi-project repos, and custom workflows.
Features
- Added
--languageand--language-config-fileto localize Atlantis pull request comments and override language catalog strings. (#6506) - Added
--automerge-methodto set a default merge method for automerging, currently implemented for GitHub. (#6573) - Added
--disable-automerge-labelto disable automerge label behavior. (#6593) - Extended
autodiscover.ignore_pathsto targeted-dcommands. (#6466) - Streamed project failure text to the job page. (#6414)
Fixes
- Scoped regex project plans correctly when
--restrict-file-listis enabled. (#6598) - Detected OpenTofu versions using the project distribution. (#6597)
- Re-downloaded Terraform/OpenTofu binaries when the existing binary appears invalid. (#6454)
- Unified Terraform/Terragrunt project directory detection, including
.tf,.tf.json, andterragrunt.hclindicators. (#6455) - Hardened path handling for CWE-22 path-expression issues. (#6254)
- Preserved Docker healthcheck port fallback behavior. (#6588)
- Clarified status-update logging when no URL is available. (#6595)
Provider fixes
- Bitbucket Cloud: validate pagination next URLs before following them. (#6260)
- GitHub: only apply GitHub App checkout behavior to GitHub repositories. (#6119)
- GitHub: support child-team inheritance for
GH_TEAM_ALLOWLIST. (#6365)
Notifications and webhooks
- Slack notifications now show the pull request head branch instead of the base branch. (#6316)
- Slack notifications can include the pull request description. (#6540)
- Documentation now clarifies Slack payload fields and GitHub team hierarchy behavior. (#6596)
New Contributors
- @hussein-mimi made their first contribution in #6365
- @JFryy made their first contribution in #6072
- @ronaldmiranda made their first contribution in #6573
- @emanuelbesliu made their first contribution in #6466
- @rym-dd made their first contribution in #6540
- @eamonryan made their first contribution in #6414
- @kiwibel made their first contribution in #6316
- @zonorti made their first contribution in #6119
Full Changelog: v0.44.1...v0.45.0
-
v0.44.2-0.20260627173004-52745e1fdf6627 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260627163821-a959625cbc6b27 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260627060052-0896b77af72a27 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260627035602-31cd481f3ba427 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260627020621-c3a9791fca3f27 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260626233338-fa056039cf7626 Jun 2026 pre-releaseNothing published for this version
-
v0.44.2-0.20260626201759-75ee4dcd4d5c26 Jun 2026 pre-releaseNothing published for this version