Release Notes: August 2025

Release Notes for Codefresh Pipelines and GitOps

Features & enhancements

GitOps Cloud: Enhanced GitOps App Breadcrumbs

We’re excited to announce a major enhancement to the GitOps App breadcrumbs, designed to streamline your navigation and provide more insightful context. This update is a huge step toward making your workflow more intuitive and efficient.

  • Direct Runtime navigation: We added the Runtime name directly to your breadcrumb trail. A simple click on the Runtime name will take you to the main applications page, automatically filtered to display only the apps associated with that specific runtime.
  • Visual clarity with new icons: To help you better understand your application’s hierarchy at a glance, we introduced new icons for each breadcrumb component:
  • A unique icon for the Runtime Name.
  • A helpful icon for the ApplicationSet, if your application uses one.
  • A clear icon for the Application Name itself. These improvements provide a more visually organized and functional navigation system, helping you manage your GitOps applications with greater speed and clarity.

New navigation breadcrumbs

New navigation breadcrumbs

Pipelines: Classic Runner 8.x Release – Breaking Changes

On July 17, 2025, we released Classic Runner version 8.x (based on Docker v28) for our hybrid customers. This release introduces breaking changes and requires action before upgrading.

For Hybrid Customers If you have not yet upgraded, you have 2 options:

Option 1:

Use the Modern Helm-Based Runner Installer
Breaking change: Support for legacy Docker images (manifest schema v2, schema 1) has been removed. Pipelines that build or pull these images will fail after upgrade.

What to do:

  • Identify and update deprecated images using our migration guide in GitHub.
  • Upgrade to Runner 8.0 via the Helm-based installer.
Option 2:

Continue with the Legacy CLI-Based Runner Installer
The legacy installer is now deprecated. You will no longer receive upgrades, updates, or security patches. It will remain locked to the last version based on Docker v26.

What to do:

For SaaS & On-Prem Customers

  • SaaS: We automatically upgraded all SaaS environments to the new runner on August 17, 2025.
  • On-Prem: Support for Runner 8.0 will be included in On-Prem release 2.9 (due September 30, 2025).

Pipelines: New Security Enhancement: Prevent Unauthorized Changes to ABAC Tags

We heard your feedback about accidental changes to tags used in ABAC permission rules, and we’ve addressed this. Until now, users could modify or delete these tags without warning, which risked breaking access controls and unintentionally exposing resources.

With this update, whenever a user tries to edit or remove a tag linked to an ABAC rule, a clear warning message will appear. This helps prevent mistakes that could compromise security or block authorized users.

We’re continuing to explore improvements that make ABAC easier to manage while keeping security controls strong.

Key benefits

  • Prevents accidental changes to security-critical tags
  • Clear warnings to avoid breaking ABAC rules
  • Stronger protection of your access controls

This enhancement gives teams greater peace of mind, ensuring that access policies remain secure without slowing down development.

New ABAC warning

New ABAC warning

Bug fixes

Pipelines
  • Fixed recurring “socket hang up” build failures in by increasing engine pod CPU requests and stabilizing dind/network behavior.
  • Fixed cron trigger creation errors caused by outdated regex handling of short custom cron expressions, adding clearer error messaging.