LoginSign Up
← Back to all sparks
C

CircleCI

INFRA · APIS
Velocity7.5

Continuous integration and delivery platform for building, testing and deploying software

circleci.com ↗

CircleCI's GitHub checks now say who re-ran a workflow and why it is on hold.

ci/cdgithub integrationidentitysupply-chain securitycli
◆Current state
CircleCI is in a run of small fixes to how it shows up inside GitHub and Slack. GitHub check runs now explain on-hold approval jobs in a status table, re-runs started from a GitHub check are attributed to the person who clicked, and CLI 1.11 can script a project's Slack notifications. Runner and orchestrator builds were rebuilt to drop the compromised eMudhra and Comodo AAA roots.
◆Where it's heading
The platform is pulling identity and permission checks onto the real actor: scoped API tokens, V3 OIDC claims about config source, and now re-run attribution all narrow who a pipeline runs as. Alongside that it is making work outside the web app, such as GitHub checks and CLI setup, carry enough context to act on directly.
◆Prediction
More CLI coverage for project settings that are still web-only seems likely, given the Slack commands follow the same scriptable pattern as earlier CLI additions.

◆Recent moves

  1. 5d ago

    Improved GitHub check-run summaries for on-hold workflows

    GitHub check runs now show workflow state, a Status/Job/Duration table with failed and on-hold jobs first, and a link to approve paused workflows. It cuts the trips from a pull request into the CircleCI UI without changing branch-protection behaviour.

    View source ↗
  2. 5d ago

    GitHub check re-runs now run as the user who clicked Re-run

    Re-runs launched from a GitHub check now run as the CircleCI user who clicked, with contexts and security groups checked against that person. It closes a gap where a re-run borrowed the original author's permissions, in line with this month's scoped tokens and OIDC claim work.

    View source ↗
  3. 6d ago

    Xcode 27.2 RC 1 Available

    The Xcode 27.2 release candidate image is now available for macOS pipelines. It is routine image upkeep following the 27.2 betas.

    View source ↗
  4. 6d ago

    Manage a project’s Slack notifications from the CLI

    CLI 1.11 adds `circleci notification slack` commands to set, pause, read and delete a project's Slack channel. Teams with many projects can now script notification setup instead of clicking through each one.

    View source ↗
  5. 8d ago

    Runner 3.1.14 drops trust in compromised eMudhra and Comodo roots

    Container and Machine Runner 3.1.14 are rebuilt on a Go release that no longer trusts the eMudhra and Comodo AAA roots, fixing CVE-2026-111943. It matches the orchestrator rebuild from the same day, and self-hosted runner users are told to upgrade.

    View source ↗
  6. 9d ago

    OIDC tokens: new V3 token format with config source and ref claims

    V3 OIDC tokens add checkout-source, checkout-ref, config-source and config-ref claims and switch the sub separator to colons so slash-containing branch names can't spoof wildcard policies. It extends the week's least-privilege push from scoped API tokens to cloud trust policies, but V1/V2 stay the default and pipeline-id changes meaning in V3, so adoption is opt-in.

    View source ↗