Spinnaker Release 2025.4.2

Breaking Changes

Features

Configuration

There’s an additional configuration that can be set on the gitrepo for controlling which hosts are accessible by a gitrepo. You can restrict now the gitrepo calls to ONLY internal servers vs. allowing multiple git servers. This can be done by adding an allowedhosts flag on the gitrepo accounts. NOTE: THis does NOT work in halyard so you’ll need to set these accounts via profiles if you’re still using halyard/operator.

Fixes

• builds: Fix spinnaker.io publishing (#7549) (#7550) ( d86027a6 )
• builds: Fix spinnaker.io publishing when using a GitHub App for token (#7498) (#7500) ( 5739c008 )
• builds: Fix testcontainer due to docker client upgrade issue (backport #7471) (#7477) ( c48e50e4 )
• clouddriver: update kubectl download URL (#7470) (#7473) ( 11dd402a )
• gitrepo: Fix git repo validation (#7543) ( 96beee34 )
• iap: Fix iap auth post spring 3.0 upgrade (#7503) (#7548) ( f0207f0a )
• kayentadeck: Fix publishing to NOT tag by latest. This prevents us from hitting an issue where backports fail to publish due to being older versions (#7456) (#7457) ( fd5c76f6 )
• publishing: Tags cant be semver so prefix with release (#7460) (#7461) ( 7e333744 )
• release: Fix release publishing notes to spinnaker.io (#7486) (#7496) ( 164bfb34 )

Other

• build: Add id permissions to release for deck NPM publishing (#7448) (#7449) ( 06cdcfef )
• change: Call Deck/Deck Kayenta workflows via API to work around NPM Trusted Publishing validation (#7455) (#7492) ( 23cb0f17 )
• release: move from personal app to GHA to do updates on release notes or other purposes (#7465) (#7494) ( 524862f8 )