CloudBees Compliance v1.53.1

Released: August 25, 2025

Upgrade notes

Perform the following steps when upgrading your installation to the latest release:

New database indexes

New database indexes are created during the upgrade to improve performance. This requires the scan-manager and compliance-engine services to be stopped while the indexes are created. This is handled automatically by the app-deploy.sh script.

GitHub App webhook URLs

The legacy ui-auth-service has been replaced with ui-authorisation-service. As a result, you must reconfigure the webhook URLs for GitHub and GitHub Enterprise apps.

Configure the GitHub app for all environments with the new webhook URL:

https://{hostname}/app/api/accounts/github/webhook

Apply this change to both cloud and enterprise GitHub Apps.

Delete empty child organizations

The bash script delete_org.sh deletes empty child orgizations, and is included as a part of the release bundle in the scripts folder. To use the script, run:

bash delete_org.sh <ORG_UUID> <ENVIRONMENT> <NEO4J_HOSTNAME>

For, example: bash delete_org.sh 853b3870-3f1f-42c5-b404-3a855d3e04fc dev neo4j.dev.example.com

Terraform

  • EKS version 1.33 is now the default supported version.

  • Removed secrets for ui-auth-service, which has been replaced with ui-authorisation-service.

The following infra modules must be applied:

  • eks-infra

    • To upgrade the EKS cluster from 1.32 to 1.33.

  • secret-infra

    • To remove the secrets for ui-auth-service.

    • To add secrets for ui-authorisation-service.

      Helm

  • The legacy ui-auth-service has been retired. Remove the following values from values-<env>.yaml:

        uiAuthService:
      sidecar:
        hosts:
        - "./*.keysight.com"
        - "./mariadb.internal.cbc.is.keysight.com"
        - "./redis.internal.cbc.is.keysight.com"
        - "./neo4j.internal.cbc.is.keysight.com"
    ▼