Version history
2.0.52Bamboo 8.0.0 - 9.5.22024-03-08Bamboo 9.5.X compatibility Version 2.0.52 • Released 2024-03-08 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialNo release notes.2.0.52Bamboo Server 8.0.0 - 9.5.22024-03-08Bamboo 9.5.X compatibility Version 2.0.52 • Released 2024-03-08 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialNo release notes.2.0.51Bamboo 8.0.0 - 9.4.42024-01-30Bugfix for CyberArk Conjur Version 2.0.51 • Released 2024-01-30 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis is a hotfix release which fixes a bug for CyberArk Conjur. Secret names containing a space were incorrectly encoded and as a result could not be resolved.
2.0.51Bamboo Server 8.0.0 - 9.4.42024-01-30Bugfix for CyberArk Conjur Version 2.0.51 • Released 2024-01-30 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis is a hotfix release which fixes a bug for CyberArk Conjur. Secret names containing a space were incorrectly encoded and as a result could not be resolved.
2.0.50Bamboo 8.0.0 - 9.4.42023-10-27Log improvements Version 2.0.50 • Released 2023-10-27 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Ensure secret resolution errors are present in the final build logs when building on a remote agent
- Do not obfuscate variable value for unresolved secrets
2.0.50Bamboo Server 7.2.0 - 9.4.42023-10-27Log improvements Version 2.0.50 • Released 2023-10-27 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Ensure secret resolution errors are present in the final build logs when building on a remote agent
- Do not obfuscate variable value for unresolved secrets
2.0.49Bamboo 8.0.0 - 9.3.62023-10-16Bamboo 9.3 compatibility and bugfix Version 2.0.49 • Released 2023-10-16 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Bamboo 9.3 compatibility: fix for pre-build queued action called multiple times by framework.
- Bugfix: excessive log obfuscation for multi-line secrets with empty lines.
2.0.49Bamboo Server 7.2.0 - 9.3.62023-10-16Bamboo 9.3 compatibility and bugfix Version 2.0.49 • Released 2023-10-16 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Bamboo 9.3 compatibility: fix for pre-build queued action called multiple times by framework.
- Bugfix: excessive log obfuscation for multi-line secrets with empty lines.
2.0.48Bamboo 8.0.0 - 9.2.122023-03-06Bugfix Version 2.0.48 • Released 2023-03-06 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialA regression bug introduced by version 2.0.47 has been fixed, ensuring that secrets in build logs downloaded form a remote agents are obfuscated.
2.0.48Bamboo Server 7.2.0 - 9.2.122023-03-06Bugfix Version 2.0.48 • Released 2023-03-06 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialA regression bug introduced by version 2.0.47 has been fixed, ensuring that secrets in build logs downloaded form a remote agents are obfuscated.
2.0.47Bamboo 8.0.0 - 9.1.32023-01-11Scope & resolution changes Version 2.0.47 • Released 2023-01-11 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- A new flag is introduced on the scope dialog, which allows automatically granting access to deployments linked to whitelisted plans. See the updated documentation for more information.
- The resolution of secrets now happens much earlier in the build or deployment process, which has the following beneficial consequences:
- Variables used in the 'Docker Runner' configuration can be resolved to secrets as well.
- There is no longer need for (remote) agent to server communication during secret resolution. As such, the plugin no longer depends on the server Base URL.
- Due to the above changes, the minimum supported Bamboo version for Server had to be bumped to 7.2.0.
2.0.47Bamboo Server 7.2.0 - 9.1.32023-01-11Scope & resolution changes Version 2.0.47 • Released 2023-01-11 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- A new flag is introduced on the scope dialog, which allows automatically granting access to deployments linked to whitelisted plans. See the updated documentation for more information.
- The resolution of secrets now happens much earlier in the build or deployment process, which has the following beneficial consequences:
- Variables used in the 'Docker Runner' configuration can be resolved to secrets as well.
- There is no longer need for (remote) agent to server communication during secret resolution. As such, the plugin no longer depends on the server Base URL.
- Due to the above changes, the minimum supported Bamboo version for Server had to be bumped to 7.2.0.
1.8.46Bamboo 8.0.0 - 9.1.32022-12-30Bugfixes Version 1.8.46 • Released 2022-12-30 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Fixed exception regarding XMLInputFactory when using AWS secret manager on Bamboo 9.0+.
- Updated dependencies to address CVE-2022-25647 and CVE-2022-42003.
- Fixed connection failure tooltip width on Bamboo 9.0+.
1.8.46Bamboo Server 7.0.1 - 9.1.32022-12-30Bugfixes Version 1.8.46 • Released 2022-12-30 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Fixed exception regarding XMLInputFactory when using AWS secret manager on Bamboo 9.0+.
- Updated dependencies to address CVE-2022-25647 and CVE-2022-42003.
- Fixed connection failure tooltip width on Bamboo 9.0+.
1.8.45Bamboo 8.0.0 - 9.0.42022-04-13Bamboo 8.2 Compatibility Version 1.8.45 • Released 2022-04-13 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis version adds compatibility for the Bamboo 8.2 series. Earlier versions of the plugin will not work on 8.2 and up.
1.8.45Bamboo Server 7.0.1 - 9.0.42022-04-13Bamboo 8.2 Compatibility Version 1.8.45 • Released 2022-04-13 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis version adds compatibility for the Bamboo 8.2 series. Earlier versions of the plugin will not work on 8.2 and up.
1.8.44Bamboo 8.0.0 - 8.1.122022-04-12Bamboo Data Center Version 1.8.44 • Released 2022-04-12 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialSupport for Bamboo Data Center
1.8.44Bamboo Server 6.4.2 - 8.1.122022-04-13Bamboo Data Center Version 1.8.44 • Released 2022-04-13 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialSimultaneous release with the first Data Center compatible version of the plugin. Updated dependencies to address CVE-2020-36518.
1.7.43Bamboo Server 6.4.2 - 8.1.122022-02-07HashiCorp Vault: support for namespaces Version 1.7.43 • Released 2022-02-07 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis release adds the option to specify a namespace when configuring a HashiCorp Vault secret manager. Namespaces are a Vault Enterprise feature. Specifying a namespace against a non-enterprise installation will have no effect.
1.7.42Bamboo Server 6.4.2 - 8.1.122022-01-31Bugfix: HashiCorp Vault transient network error handling Version 1.7.42 • Released 2022-01-31 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialThis release improves the handling of transient network errors for HashiCorp Vault by introducing exponential backoff when fetching tokens and secrets.
1.7.41Bamboo Server 6.4.2 - 8.1.122022-01-05Bamboo Data Center notice Version 1.7.41 • Released 2022-01-05 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialWith the release of Bamboo 8.1 comes the availability of the Bamboo Data Center Apps Program.
We are currently in the process of preparing a Data Center version of the app, which will be released once the certification process is completed. Please note that customers running a Data Center version of Bamboo will be required to purchase a Data Center app license upon the next renewal afterwards.
In the meantime, the Server version of the app is fully supported on Data Center even when UPM flags it as incompatible.
1.7.40Bamboo Server 6.4.2 - 8.1.122021-12-06Thycotic secret search bugfix Version 1.7.40 • Released 2021-12-06 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- A bug has been resolved resulting in an "undetermined result, multiple secrets found" error message at secret resolution time for Thycotic Secret Server.The bug manifested itself when the name of a secret was used in a field of a different secret.
1.7.39Bamboo Server 6.4.2 - 8.0.132021-11-23Log masking of multiline secrets Version 1.7.39 • Released 2021-11-23 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialLog masking has been improved to cover most use cases involving multiline secrets (i.e. secrets printed over multiple lines in the Bamboo build log), such as certificates.
1.7.38Bamboo Server 6.4.2 - 8.0.132020-11-26Implicit AWS credentials Version 1.7.38 • Released 2020-11-26 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- AWS Secrets Manager: in addition to specifying credentials explicitly (using Access Key Id and Secret Access Key) from the Bamboo UI, it is now possible to specify credentials implicitly. In this case, the credentials must be provided by environment variables (AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY), java system properties (aws.accessKeyId/aws.secretKey), a web identity token, the default credential profiles file, ECS container credentials or instance profile credentials.
1.7.37Bamboo Server 6.4.2 - 7.1.42020-11-11Improved Thycotic Secret Server support Version 1.7.37 • Released 2020-11-11 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Support for spaces and non-ascii characters in the Thycotic Secret Server secret path.
- Support for spaces and non-ascii characters in the AWS Secrets Managers, HashiCorp Vault & Thycotic Secret Server secret names.
1.7.36Bamboo Server 6.4.2 - 7.1.42020-10-26Secret discriminators and support for Thycotic Secret Server Version 1.7.36 • Released 2020-10-26 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Introduction of secret discriminators, which extend the current %<secret-manager-name>:<secret-path>% syntax to allow the optional specification of a discriminator as follows: %<secret-manager-name>:<secret-path>:<secret-discriminator>%. The discriminator values are specific to the secret manager, but correspond in the majority of cases to the version identifier of the secret.
- Initial support for Thycotic Secret Server.
1.6.34Bamboo Server 6.4.2 - 7.1.42020-10-16Support for Oracle Cloud Vault Version 1.6.34 • Released 2020-10-16 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialInitial support for Oracle Cloud Vault.
1.5.33Bamboo Server 6.4.2 - 7.1.42020-08-18Bugfix Version 1.5.33 • Released 2020-08-18 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Bugfix: avoid secret resolution timeout after plugin updates or plugin enable/disable cycles. When experiencing the build or deployment error "Could not resolve secrets within set time limit", please update to this version. From this version on, the plugin depends on a resolvable "Base URL" of the Bamboo server (as configured in the Administrative section below System > General configuration).
1.5.32Bamboo Server 6.4.2 - 7.1.42020-08-15Bugfix Version 1.5.32 • Released 2020-08-15 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Bugfix: prevent leaking secrets in the logs through extra environment variable(s) when building or deploying on remote agents.
1.5.31Bamboo Server 6.4.2 - 7.1.42020-08-14Support for Bamboo 7.1.X Version 1.5.31 • Released 2020-08-14 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Support for Bamboo 7.1.X (released July 24).
- Bugfix: support for HashiCorp Vault versions before 0.11.2.
1.5.30Bamboo Server 6.4.2 - 7.0.62020-06-04Support for HashiCorp Vault K/V v1 Version 1.5.30 • Released 2020-06-04 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Choose between HashiCorp Vault secrets engine K/V version 1 and K/V version 2.
- Azure Key Vault Client Secret validation loosened, as the GUID format is not strictly required.
1.4.28Bamboo Server 6.4.0 - 7.0.62020-05-08Support for CyberArk Conjur Version 1.4.28 • Released 2020-05-08 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialInitial support for CyberArk Conjur and the CyberArk Dynamic Access Provider (DAP).
1.3.26Bamboo Server 6.4.0 - 7.0.62020-04-30Performance improvements Version 1.3.26 • Released 2020-04-30 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialConstant-time project and deployment search for scope autocomplete.
1.3.24Bamboo Server 6.4.0 - 7.0.62020-04-21Bugfix Version 1.3.24 • Released 2020-04-21 • Supported By WindTunnel Technologies • Paid via Atlassian • CommercialUrl validation loosened, as to accept 'internal' urls with non-official TLD's as well.
1.3.23Bamboo Server 6.4.0 - 7.0.62020-04-10Webhooks and Support for GCP Secret Manager Version 1.3.23 • Released 2020-04-10 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Connect with GCP Secret Manager.
- Enable secret rotation through secret manager webhooks.
- Support for AWS Secrets Manager plaintext secrets (in addition to key/value).
1.2.14Bamboo Server 6.4.0 - 7.0.62020-03-27Compatibility update Version 1.2.14 • Released 2020-03-27 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Compatibility with Bamboo 7.0.
- Documentation of plugin REST API.
1.1.8Bamboo Server 6.4.0 - 6.10.62020-03-03Minor increment Version 1.1.8 • Released 2020-03-03 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Fixed scoping bug related to deployment environments.
- Global settings: set connection timeout.
1.1.0Bamboo Server 6.4.0 - 6.10.62020-02-18Scoping and Support for AWS Secrets Manager Version 1.1.0 • Released 2020-02-18 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Connect with AWS Secrets Manager (https://aws.amazon.com/secrets-manager/).
- Scope secret managers to specific projects, builds, deployments or environments.
- Global settings: fail build or deployment when secret resolution fails.
1.0.0Bamboo Server 6.0.0 - 6.10.62020-02-17Initial release Version 1.0.0 • Released 2020-02-17 • Supported By WindTunnel Technologies • Paid via Atlassian • Commercial- Connect with Azure Key Vault (Secrets)
- Connect with HashiCorp Vault (K/V v2)
- Integration with global, plan and deployment variables
- Resolution of external variables during builds and deployments
- Remote agent support