Bamboo 9.3 release notes
June 2023
We’re proud to present Bamboo 9.3.
Take some time and read through the release notes to learn what we've prepared for you this time. Swing by the upgrade notes to check for any breaking changes if you plan to upgrade and don’t forget to check out the full list of resolved issues.
Highlights
Integrate Bamboo with your Kubernetes cluster thanks to ephemeral agents
DATA CENTER
In this release, we’ve introduced a new type of remote agent known as an ephemeral agent. Ephemeral agents are short-lived remote agents that start on demand inside a Kubernetes cluster to carry out a single build or deployment before being shut down.
Whether or not you’re already running your own Kubernetes cluster, ephemeral agents are a great way to integrate Bamboo with it, offering such benefits as:
the ability to run agents on any cloud or self-managed infrastructure (both virtualized and bare-metal)
savings on resource costs (agents don’t use computing resources when there’s nothing to do)
flexible and on-demand scalability (run as many agents as necessary at any given moment)
robust security with pod and container isolation (each agent starts up in a fresh environment)
automatic agent lifecycle management (Bamboo automatically starts and stops agents when needed)
Learn more about ephemeral agents
Better security with user session invalidation
DATA CENTER SERVER
As an admin, you can now invalidate user sessions directly from the administrative settings page or through the REST API. This change brings several important security benefits that help protect your Bamboo instance from unauthorized access and data breaches, such as:
Preventing unauthorized access: By invalidating a user's session, you can immediately revoke their access to your Bamboo instance, preventing them from performing any further actions or accessing any sensitive information.
Protecting against session hijacking: Session hijacking is a common attack vector where an attacker steals a user's session token to impersonate that user. By invalidating a user's session, you can effectively prevent session hijacking attacks, as the stolen token will no longer be valid.
Ensuring compliance with security policies: In many organizations, it's important to ensure that users are only able to access your Bamboo instance during specific times or from specific locations. By invalidating a user's session, you can enforce these policies more effectively and ensure that your Bamboo instance remains secure.
Learn more about invalidating active user sessions
Connect to Atlassian cloud products with application tunnels
DATA CENTER SERVER
You can now use application tunnels to securely connect Bamboo 9.3 with other Atlassian cloud products such as Jira Software Cloud. This eliminates the need to open up your network to incoming connections, ensuring that your tools can seamlessly exchange data and interact with one another without forcing you to compromise on security.
Learn more about application tunnels
Improved change detection performance
DATA CENTER SERVER
We’ve introduced a new change detection algorithm designed to optimize resource distribution across multiple repositories and prevent thread pool exhaustion issues. The updated algorithm is based on prioritized request handling, which results in reduced detection times overall.
Resolved issues
This is a summary of the issues we’ve resolved throughout the lifecycle of Bamboo 9.3.
Bamboo 9.3.6 no longer ships with the JDBC driver for the H2 database engine
To resolve several security vulnerabilities, the JDBC driver for the H2 database engine is no longer bundled with Bamboo 9.3.6 and newer. If you want to evaluate Bamboo using the H2 database, see Connect Bamboo to an H2 database.