Skip to main content

Nextflow 26.04.8

Rotate Bitbucket Cloud API tokens

This release keeps Bitbucket Cloud API tokens out of git clone URLs and logs. If you authenticated with a Bitbucket API token on 26.04.0 through 26.04.7, rotate the token. It may have been written to console output, .nextflow.log files, and the .git/config of cloned pipelines. See #7868.

Use 26.04.9 instead

This release pins nf-k8s@1.5.6, which requires Nextflow 26.08.0-edge or later and fails to load on 26.04.x. Use 26.04.9 instead.

Bug fixes​

General​

  • Removed the Bitbucket API token from git clone URLs and logs by @bentsherman in #7870
  • Prevented leaking environment secrets in CI by @jorgee in #7873

Dependencies​

  • Bumped nf-azure@1.22.8
  • Bumped nf-k8s@1.5.6
  • Bumped nf-tower@1.28.4

Full changelog: https://github.com/nextflow-io/nextflow/releases/tag/v26.04.8