Skip to content

chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.46.0#43

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-runatlantis-atlantis-0.x
Open

chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.46.0#43
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/ghcr.io-runatlantis-atlantis-0.x

Conversation

@renovate

@renovate renovate Bot commented Jun 13, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
ghcr.io/runatlantis/atlantis minor v0.36.0v0.46.0

Release Notes

runatlantis/atlantis (ghcr.io/runatlantis/atlantis)

v0.46.0

Compare Source

Highlights

  • OpenTofu .tofu support: Atlantis now detects OpenTofu versions from .tofu and .tofu.json files, includes those files in default autoplan and project discovery behavior, and detects Terraform Cloud/Enterprise workspace configuration from .tf.json, .tofu, and .tofu.json projects.
  • Broader core workflow coverage: The E2E harness now activates expanded fixtures from runatlantis/atlantis-tests#21001, covering multi-project targeting, autodiscovery, configured JSON projects, custom workflow environment behavior, and long-output status contexts.
  • Safer plan/apply behavior: This release hardens apply validation against stale head/base plan state, preserves on_apply locks during plan cleanup, and fixes /api/plan with policy checks enabled while preserving per-project /api/apply behavior.

Project Health

  • Top-Ranking Atlantis Issues 📊 Maintainers and contributors can now use #​6608 to see open Atlantis issues ranked by community thumbs-up reactions. The ranking is a signal for prioritization and contribution, not a roadmap commitment or acceptance guarantee.
  • Atlantis now uploads Go coverage to GitHub Code Quality, lints the separate e2e Go module, and has automated top-issue ranking to make maintenance work more visible.
  • We welcome contributors across bug reports, focused fixes, documentation improvements, issue reproduction, and issue moderation/triage.

Call For Adopters

If your organization uses Atlantis and can share a sanitized setup or adoption note, runatlantis/examples is a good place to contribute it. Public examples help users learn from real deployments, help the project document its ecosystem, and can become future candidates for atlantis-tests fixture coverage.

What's Next

We are also looking at flag lifecycle improvements so Atlantis has a clearer path for introducing, documenting, deprecating, and eventually removing server flags.

What's Changed

Exciting New Features 🎉
Provider Bitbucket
Bug fixes 🐛
Dependencies
  • chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to aa0051c in .clusterfuzzlite/dockerfile (main) by @​renovate[bot] in #​6607
Other Changes 🔄

New Contributors

Full Changelog: runatlantis/atlantis@v0.45.0...v0.46.0

v0.45.0

Compare Source

This minor release adds alpha drift detection and remediation APIs, new localization and automerge controls, notification improvements, and several provider and execution fixes.

Highlights

  • Added alpha drift detection, status, remediation, remediation history, and drift webhook APIs. These APIs are alpha and their request/response behavior may change in future releases. (#​6360)
  • Added runtime localization support with built-in English and Spanish catalogs plus custom YAML overrides. (#​6506)
  • Added automerge controls for default merge method and disabling automerge labels. (#​6573, #​6593)
  • Improved GitHub team allowlists to honor team hierarchy. (#​6365)

Alpha: Drift detection and remediation APIs

  • Added alpha drift detection APIs, drift status API, drift remediation API, and remediation history/result read endpoints. (#​6360)
  • Added drift webhook notifications, including Slack and HTTP webhook support. (#​6360)
  • Added --enable-drift-detection for drift detection/status/history behavior.
  • Added --enable-drift-remediation for destructive remediation apply.
  • Drift APIs require API authentication with X-Atlantis-Token and repository allowlist authorization.
  • Remediation action:"apply" requires cached positive drift with has_drift:true for the same repo/ref/base branch/project/path/workspace.
  • Drift API inputs include ref, path, workspace, repository, and allowlist safety validation.
  • Operators should test carefully before production use, especially with hooks, policy checks, allowlists, multi-project repos, and custom workflows.

Features

  • Added --language and --language-config-file to localize Atlantis pull request comments and override language catalog strings. (#​6506)
  • Added --automerge-method to set a default merge method for automerging, currently implemented for GitHub. (#​6573)
  • Added --disable-automerge-label to disable automerge label behavior. (#​6593)
  • Extended autodiscover.ignore_paths to targeted -d commands. (#​6466)
  • Streamed project failure text to the job page. (#​6414)

Fixes

  • Scoped regex project plans correctly when --restrict-file-list is enabled. (#​6598)
  • Detected OpenTofu versions using the project distribution. (#​6597)
  • Re-downloaded Terraform/OpenTofu binaries when the existing binary appears invalid. (#​6454)
  • Unified Terraform/Terragrunt project directory detection, including .tf, .tf.json, and terragrunt.hcl indicators. (#​6455)
  • Hardened path handling for CWE-22 path-expression issues. (#​6254)
  • Preserved Docker healthcheck port fallback behavior. (#​6588)
  • Clarified status-update logging when no URL is available. (#​6595)

Provider fixes

  • Bitbucket Cloud: validate pagination next URLs before following them. (#​6260)
  • GitHub: only apply GitHub App checkout behavior to GitHub repositories. (#​6119)
  • GitHub: support child-team inheritance for GH_TEAM_ALLOWLIST. (#​6365)

Notifications and webhooks

  • Slack notifications now show the pull request head branch instead of the base branch. (#​6316)
  • Slack notifications can include the pull request description. (#​6540)
  • Documentation now clarifies Slack payload fields and GitHub team hierarchy behavior. (#​6596)

New Contributors

Full Changelog: runatlantis/atlantis@v0.44.1...v0.45.0

v0.44.1

Compare Source

This patch release focuses on provider correctness, safer apply behavior, plan/output rendering fixes, and refreshed runtime foundations.

Highlights

  • Broader GitHub Enterprise support: existing GitHub Enterprise Server behavior is preserved, and GitHub Enterprise Cloud *.ghe.com tenants now use the correct REST and GraphQL API endpoint patterns.
  • The Debian-based Atlantis image now uses Debian 13 Trixie with refreshed pinned system packages including curl, git, OpenSSH, GnuPG, OpenSSL, and libcap.
  • Apply safety is improved by failing closed when apply-lock backends cannot be reached and by correctly evaluating pull request status for API apply requirements.
  • Mergeability and status behavior is more accurate across GitHub, GitLab, GitHub App checkout flows, and no-change apply statuses.
  • Terraform/OpenTofu plan output rendering now handles to forget, multi-unit summaries, heredoc/multiline-string diffs, and very long single-line command output more reliably.

Provider fixes

  • GitHub: support GitHub Enterprise Cloud *.ghe.com API URL patterns. (#​6339)
  • GitHub: truncate status contexts to GitHub's 255-character limit. (#​6541)
  • GitHub App: skip unused source remotes on fork-safe checkout paths. (#​6568)
  • GitLab: filter mergeability status checks by the merge request ref/SHA. (#​6557)
  • GitLab: scope project apply mergeability to the project being applied. (#​6543)
  • Azure DevOps: guard nil pull request status values while parsing pull events. (#​6496)
  • Gitea: avoid nil response dereferences while logging API errors. (#​6442)

Apply, plan, and output fixes

  • Fail closed when the apply lock backend cannot be reached instead of allowing applies to proceed on lock-check errors. (#​6533)
  • Populate pull request status before API apply requirement evaluation so approved and mergeable are enforced correctly. (#​6535)
  • Show no-change plans as up to date in apply statuses instead of implying they were applied. (#​6498)
  • Preserve and aggregate to forget plan statistics. (#​6570)
  • Aggregate multi-unit plan summaries correctly. (#​6490)
  • Remove stale .tfplan files when refreshing a working directory to a new ref. (#​6358)
  • Skip non-git directories when finding pending plans. (#​6453)
  • Preserve command output lines longer than 64 KiB. (#​6544)
  • Color changed lines inside heredoc and multiline-string diffs. (#​6561)
  • Fix a divergence check order issue. (#​6452)

Runtime and maintenance

  • Updated the Debian image base to Debian 13 Trixie. (#​6572)
  • Updated OpenTofu and CI/test image digests. (#​6549, #​6580, #​6581)
  • Removed the obsolete check-lint Makefile target. (#​6554)
  • Pinned scorecard-related Go and npm commands for OpenSSF compliance. (#​6480)
  • Updated website and CI dependencies, including security-related frontend dependency updates. (#​6563, #​6564, #​6565, #​6566)

Documentation

  • Clarified GitHub App merge checkout behavior. (#​6577)
  • Clarified recent status, locking, VCS, pending-plan, and output-handling behavior. (#​6578, #​6582)

New Contributors

Full Changelog: runatlantis/atlantis@v0.44.0...v0.44.1

v0.44.0

Compare Source

What's Changed

Exciting New Features 🎉
Provider GitHub
  • fix(deps): bump go-github to v88 and migrate to options-pattern constructor by @​jamengual in #​6537
Bug fixes 🐛
Security changes
  • chore(deps): update module golang.org/x/net to v0.53.0 [security] (main) by @​renovate[bot] in #​6457
  • chore(deps): update dependency mermaid to v11.15.0 [security] (main) by @​renovate[bot] in #​6462
  • fix(deps): update module github.com/slack-go/slack to v0.23.1 [security] (main) by @​renovate[bot] in #​6477
  • chore(deps): update module golang.org/x/crypto to v0.52.0 [security] (main) by @​renovate[bot] in #​6500
  • chore(deps): update module golang.org/x/sys to v0.44.0 [security] (main) by @​renovate[bot] in #​6502
  • chore(deps): update module golang.org/x/net to v0.55.0 [security] (main) by @​renovate[bot] in #​6501
Documentation
Dependencies
Other Changes 🔄

New Contributors

Full Changelog: runatlantis/atlantis@v0.43.0...v0.44.0

v0.43.0

Compare Source

What's Changed

Provider AzureDevops
Provider GitHub
Provider GitLab
Bug fixes 🐛
Security changes
Documentation
Dependencies
Other Changes

New Contributors

Full Changelog: runatlantis/atlantis@v0.42.0...v0.43.0

v0.42.0

Compare Source

What's Changed

Breaking Changes 🛠
Provider AzureDevops
Provider GitHub
Bug fixes 🐛
Security changes
Documentation
Dependencies
  • chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to 634ffcd in dockerfile.dev (main) by @​renovate[bot] in #​6349
  • chore(deps): update dependency hashicorp/terraform to v1.14.8 in testdrive/utils.go (main) by @​renovate[bot] in #​6354
  • fix(deps): update module github.com/go-playground/validator/v10 to v10.30.2 in go.mod (main) by @​renovate[bot] in #​6357
  • fix(deps): update module github.com/moby/patternmatcher to v0.6.1 in go.mod (main) by @​renovate[bot] in #​6359
  • chore(deps): update debian:12.13-slim docker digest to 4724b8c in dockerfile (main) by @​renovate[bot] in #​6370
  • chore(deps): update docker/dockerfile:1 docker digest to 2780b5c in dockerfile (main) by @​renovate[bot] in #​6372
  • chore(deps): update codelytv/pr-size-labeler digest to 095a41f in .github/workflows/pr-size-labeler.yml (main) by @​renovate[bot] in #​6380
  • chore(deps): update ngrok/ngrok:latest docker digest to 068852d in docker-compose.yml (main) by @​renovate[bot] in #​6383
  • chore(deps): update dependency opentofu/opentofu to v1.11.6 in dockerfile (main) by @​renovate[bot] in #​6391
  • chore(deps): update redis:8.6-alpine docker digest to c5e375a in docker-compose.yml (main) by @​renovate[bot] in #​6402
  • chore(deps): bump go to 1.25.8 and hc-install to v0.9.4 by @​edbighead in #​6410
Other Changes 🔄

New Contributors

Full Changelog: runatlantis/atlantis@v0.41.0...v0.42.0

v0.41.0

Compare Source

Atlantis is now hosting CNCF-supported community meeting on Wednesday 4PM UTC! The meeting will be bi-weekly.
Please bear with the maintainer team as we kick-start this process. Hope to see you all there!
Agenda and Notes can be found here (as well as links to the LFX zoom to add to your calendar):
https://docs.google.com/document/d/1EzseHmT4Zarj-_7MO8ud5mHByIJGIHS7JdoNNK9ZckU/edit?tab=t.0

What's Changed

Exciting New Features 🎉
Provider GitHub
Bug fixes 🐛
Security changes
  • fix(deps): patch minimatch/markdown-it via npm overrides by @​Copilot in #​6239
  • chore(deps): update module github.com/cloudflare/circl to v1.6.3 [security] (main) by @​renovate[bot] in #​6269
Documentation
Dependencies
  • chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to bdf219f in dockerfile.dev (main) by @​renovate[bot] in #​6130
  • chore(deps): update dependency opentofu/opentofu to v1.11.4 in dockerfile (main) by @​renovate[bot] in #​6127
  • chore(deps): update redis:7.4-alpine docker digest to 02f2cc4 in docker-compose.yml (main) by @​renovate[bot] in #​6132
  • chore(deps): update terraform random to v3.8.1 in server/controllers/events/testdata/test-repos/state-rm-single-project/versions.tf (main) by @​renovate[bot] in #​6138
  • fix(deps): update module golang.org/x/term to v0.39.0 in go.mod (main) by @​renovate[bot] in #​6142
  • fix(deps): update module github.com/spf13/viper to v1.21.0 in go.mod (main) by @​renovate[bot] in #​6140
  • fix(deps): update module github.com/spf13/cobra to v1.10.2 in go.mod (main) by @​renovate[bot] in #​6139
  • fix(deps): update module golang.org/x/text to v0.33.0 in go.mod (main) by @​renovate[bot] in #​6143
  • chore(deps): update debian:12.13-slim docker digest to 98f4b71 in dockerfile (main) by @​renovate[bot] in #​6148
  • chore(deps): update ngrok/ngrok:latest docker digest to 2226144 in docker-compose.yml (main) by @​renovate[bot] in #​6161
  • chore(deps): update alpine docker tag to v3.23.3 in dockerfile (main) by @​renovate[bot] in #​6169
  • chore(deps): update ngrok/ngrok:latest docker digest to 07bd8fa in docker-compose.yml (main) by @​renovate[bot] in #​6191
  • fix(deps): update github.com/shurcool/githubv4 digest to 2402fdf in go.mod (main) by @​renovate[bot] in #​6193
  • fix(deps): update module code.gitea.io/sdk/gitea to v0.23.2 in go.mod (main) by @​renovate[bot] in #​6199
  • fix(deps): update module github.com/alicebob/miniredis/v2 to v2.36.1 in go.mod (main) by @​renovate[bot] in #​6200
  • fix(deps): update github.com/hashicorp/terraform-config-inspect digest to f4be3ba in go.mod (main) by @​renovate[bot] in #​6192
  • chore(deps): update dependency hashicorp/terraform to v1.14.5 in testdrive/utils.go (main) by @​renovate[bot] in #​6196
  • fix(deps): update module golang.org/x/text to v0.34.0 in go.mod (main) by @​renovate[bot] in #​6211
  • fix(deps): update module github.com/redis/go-redis/v9 to v9.17.3 in go.mod (main) by @​renovate[bot] in #​6208
  • fix(deps): update module github.com/go-playground/validator/v10 to v10.30.1 in go.mod (main) by @​renovate[bot] in #​6203
  • fix(deps): update module golang.org/x/term to v0.40.0 in go.mod (main) by @​renovate[bot] in #​6210
  • fix(deps): update module github.com/golang-jwt/jwt/v5 to v5.3.1 in go.mod (main) by @​renovate[bot] in #​6204
  • fix(deps): update module github.com/hashicorp/hcl/v2 to v2.24.0 in go.mod (main) by @​renovate[bot] in #​6206
  • fix(deps): update module github.com/bmatcuk/doublestar/v4 to v4.10.0 in go.mod (main) by @​renovate[bot] in #​6201
  • fix(deps): update module github.com/bradleyfalzon/ghinstallation/v2 to v2.17.0 in go.mod (main) by @​renovate[bot] in #​6202
  • fix(deps): update module github.com/petergtz/pegomock/v4 to v4.3.0 in go.mod (main) by [@​renova

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "every weekend"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/ghcr.io-runatlantis-atlantis-0.x branch from 57af75f to d57c86b Compare June 26, 2026 12:54
@renovate renovate Bot changed the title chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.44.0 chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.44.1 Jun 26, 2026
@renovate renovate Bot force-pushed the renovate/ghcr.io-runatlantis-atlantis-0.x branch from d57c86b to 983cab1 Compare June 28, 2026 17:06
@renovate renovate Bot changed the title chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.44.1 chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.45.0 Jun 28, 2026
@renovate renovate Bot force-pushed the renovate/ghcr.io-runatlantis-atlantis-0.x branch from 983cab1 to 2c9e926 Compare June 30, 2026 18:35
@renovate renovate Bot changed the title chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.45.0 chore(deps): update ghcr.io/runatlantis/atlantis docker tag to v0.46.0 Jun 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants