Taskcluster

Latest version: v83.4.0

Safety actively analyzes 723144 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 62

82.0.0

WORKER-DEPLOYERS

▶ [MAJOR] [7086](https://github.com/taskcluster/taskcluster/issues/7086)
Worker Manager introduces `launchConfigId` and schema changes:

* New `workerManager` configuration object in launch configs that includes:
* `launchConfigId` - unique identifier for tracking and error attribution
* `capacityPerInstance` - specify worker capacity per instance (old top-level propert is supported but is deprecated)
* `initialWeight` - control provisioning probability (0-1)
* `maxCapacity` - hard limit on number of instances per config

The provisioner distributes load across configs by:
* Dynamically adjusting weights based on error rates and capacity limits
* Temporarily reducing usage of configs experiencing errors
* Maintaining error history in a 1-hour sliding window

81.0.3

GENERAL

▶ [patch] [7532](https://github.com/taskcluster/taskcluster/issues/7532)
Generic Worker (windows): fix cache ownership issues. Clean up ACLs so prior task users aren't referenced anymore.

USERS

▶ [patch] [7527](https://github.com/taskcluster/taskcluster/issues/7527)
Fixes an issue introduced in Generic Worker 81.0.0 where the Chain of Trust
certificate would not contain all of the additional data specified in the
task-provided `chain-of-trust-additional-data.json` file.

Generic Worker 81.0.0 enhanced the Chain of Trust task payload feature to
support adding arbitrary additional data to the `public/chain-of-trust.json`
artifact. This was implemented in [PR
7507](https://github.com/taskcluster/taskcluster/pull/7507) by allowing the
task to write additional data to the file `chain-of-trust-additional-data.json`
in the task directory. The feature was meant to merge the content of this file
with the generated `chain-of-trust.json` file before publishing it as an
artifact. However, the merge of the two json objects was broken if they
contained common ancestors. For example, the generated `chain-of-trust.json`
file contains a top level object property `environment`. If the task-provided
`chain-of-trust-additional-data.json` file also contained a top level object
property `environment` containing further properties, they would be omitted
from the resulting `environment` property in the published Chain of Trust
certificate.

▶ [patch] [7014](https://github.com/taskcluster/taskcluster/issues/7014)
Generic Worker now adds `environment.imageHash` (always), and
`environment.imageArtifactHash` (when present) to `public/chain-of-trust.json`
when running Docker Worker Chain of Trust tasks, to match Docker Worker
behaviour.

DEVELOPERS

▶ [patch] [7479](https://github.com/taskcluster/taskcluster/issues/7479)
Add a way to update d2g test expectations by setting the
`D2G_UPDATE_TEST_EXPECTATIONS` environment variable while running tests

81.0.2

WORKER-DEPLOYERS

▶ [patch] [7521](https://github.com/taskcluster/taskcluster/issues/7521)
Generic Worker: fixes an issue introduced in v81.0.0 where `TASK_USER_CREDENTIALS` env var wasn't written to the task's environment if `task.payload.features.runTaskAsCurrentUser` was enabled.

Automated Package Updates

<details>
<summary>2 Dependabot updates</summary>

* build(deps): bump elliptic from 6.6.0 to 6.6.1 in /ui (a0eb01744)
* build(deps): bump elliptic from 6.6.0 to 6.6.1 in /clients/client-web (e17fc4ed4)

</details>

81.0.1

WORKER-DEPLOYERS

▶ [patch] [7517](https://github.com/taskcluster/taskcluster/issues/7517)
Generic Worker: fixes `fork/exec` issue on headless, multiuser engine introduced in v81.0.0.

81.0.0

GENERAL

▶ [patch]

80.0.0

WORKER-DEPLOYERS

▶ [MAJOR]
D2G: Drop support for `podman`. Docker worker `payload.capabilities.containerEngine` is removed. Generic Worker config `d2gConfig.containerEngine` is removed.

Automated Package Updates

<details>
<summary>6 Dependabot updates</summary>

* build(deps-dev): bump the client-web-node-deps group (76b590caa)
* build(deps): bump taskcluster from 77.0.0 to 79.0.0 in /taskcluster (17fa89a7e)
* build(deps): bump taskcluster-taskgraph in /taskcluster (3cd394e86)
* build(deps): bump the node-deps group with 23 updates (f2915637d)
* build(deps): bump the go-deps group with 5 updates (4ebb48d43)
* build(deps): bump dependabot/fetch-metadata in the gh-actions-deps group (abda5e681)

</details>

Page 3 of 62

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.