Release 6.x

6.41.0

Bug Fixes

6.40.0

Bug Fixes

6.39.0

Unicode Bidirectional Override Characters Vulnerability

Recently, Atlassian highlighted a security vulnerability where special characters (unicode bidirectional override characters) were not rendered or displayed in the affected applications (CVE-2021-42574). This vulnerability could affect ScriptRunner if a user were to copy malicious code from an untrusted source and execute it within ScriptRunner. To mitigate this risk, we have added highlighting for bidirectional characters everywhere in ScriptRunner you can enter code. For more information please take a look at our blog post. 

Bug Fixes

6.38.0

There are only core component changes in ScriptRunner for Bamboo 6.38.0, so we do not have any new features or bug fixes to report.

6.37.0

Script Editor Expand and Collapse Folders

Folders in the Script Editor are now collapsed by default when the editor is opened. We have also added Expand All and Collapse All buttons to the Script Editor heading, as well as the option to right-click a folder to expand it. 

New Features

6.36.0

New Features

Bug Fixes

6.35.0

There are only core component changes in ScriptRunner for Bamboo 6.35.0, so we do not have any new features or bug fixes to report.

6.34.0

There are only core component changes in ScriptRunner for Bamboo 6.34.0, so we do not have any new features or bug fixes to report.

6.33.0

There are only core component changes in ScriptRunner for Bamboo 6.33.0, so we do not have any new features or bug fixes to report.

6.32.0

There are only core component changes in ScriptRunner for Bamboo 6.32.0, so we do not have any new features or bug fixes to report.

6.31.0

There are only core component changes in ScriptRunner for Bamboo 6.31.0, so we do not have any new features or bug fixes to report.

6.30.1

Bug Fixes

6.30.0

Update for Custom Listener

When you are setting up a custom listener, you can now use deployment events. 

New Features

6.29.0

New Features

Bug Fixes

6.28.0

There are only core component changes in ScriptRunner for Bamboo 6.28.0, so we do not have any new features or bug fixes to report.

6.27.0

There are only core component changes in ScriptRunner for Bamboo 6.27.0, so we do not have any new features or bug fixes to report.

6.26.0

Bug Fixes

6.25.0

Bug Fixes

6.24.0

Remote Code Execution Vulnerability

SRBAM-243 - A security vulnerability for remote code execution has been fixed.

A malicious authenticated Bamboo user could exploit this vulnerability to run arbitrary code inside the Bamboo Server instance.

This security vulnerability has been fixed in ScriptRunner for Bamboo 6.24.0. It is recommended all customers upgrade to 6.24.0+ where possible.

Changes to Scriptable and Conditional tasks

SRBAM-241 - Configuring scriptable and conditional tasks no longer requires global administrator permission

In prior versions scriptable and conditional tasks were only permitted to be configured by global administrators. From version 6.24.0 onward scriptable and conditional tasks can be configured by any user who is permitted to modify task configurations in a plan.

The global administrator permission requirement was removed because Bamboo does not have a mechanism for enforcing such permission checking consistently for all methods of modifying a plan.

More information on task security can be found here: Security Considerations

6.23.0

Bug Fixes

6.22.0

There are only core component changes in ScriptRunner for Bamboo 6.22.0, so we do not have any new features or bug fixes to report.

6.21.0

Welcome to the new documentation site! We don't have any major changes in this ScriptRunner for Bamboo release, but we have updated the in-app documentation links to point here. Let us know if you encounter any issues via our support portal.

For previous versions of the documentation, please visit the old documentation site.

6.20.0

New Features

• SRPLAT-1205 - The compile context in the Script Editor is now set when opening it from a page where the script is being used, using the Edit icon.

Bug Fixes

• SRPLAT-1415 - Syntax highlighting for SQL and properties editors was added.

6.19.0

IE11 Support

As of the 1st February 2021, we are no longer developing new ScriptRunner features that are compatible with IE11 and subsequent versions of ScriptRunner will not be compatible with IE11.
See our full statement for more information.

Bug Fixes

• SRPLAT-1442 - Fragment validation now checks for null and/or empty module keys.

• SRPLAT-1441 - The execution history syntax highlighting was fixed.

• SRPLAT-1434 - The Script Editor was fixed to show warning annotations. An example of a warning annotation is the usage of deprecated methods.

• SRPLAT-1432 - CheckedScriptFileInputBox was fixed to run static type checking when a user returns to the tab.

• SRPLAT-1431 - The Script Editor was fixed to show an overall RAG status for a given file.

• SRPLAT-1430 - The Script Editor was fixed to run static type checking when a file is opened.

• SRPLAT-1420 - Documentation links were corrected in the Hints and Tips.

6.18.0

New Features

• SRPLAT-1414 - You can now configure LDAP resource environment properties.

• SRBAM-240 - The Clear Groovy Class Loader built-in script was added.

Bug Fixes

• SRPLAT-1401 - Running built-in scripts multiple times led to stuck loading spinners.

• SRPLAT-1407 - Groovy has been updated to 2.5.14.

6.17.0

Bug Fixes

• SRPLAT-1271 - When using existing REST Endpoints that use an inline script, you could not switch to the File tab without an error.

6.16.0

Bug Fixes

• SRPLAT-841 - The URL of the Endpoint-scanning endpoint is now correctly mapped to the backend method.

• SRBAM-236 - Using logger no longer shows compilation errors in Scriptable or Condition tasks.

6.14.0

Storing Environmental Variables

Want to simplify migrating from a test instance to production? Check out our new Storing Environmental Variablesdocumentation for best practices.

Bug Fixes

• SRPLAT-1364 - Script Editor failed to open files with national characters.

6.13.0

Bug Fixes

• SRPLAT-1345 - Audit logging was added for Settings changes.

• SRPLAT-1302 - Secure shell options were expanded to include boolean literals and negation.

• SRBAM-233 - Custom Listener script errors failed to be logged correctly.

• SRPLAT-1319 - Custom scripts returning String from getHelpUrl() did not work.

• SRPLAT-1313 - Script configurations can now be saved with a blank inline script.

6.8.2.1-p4

Remote Code Execution Vulnerability

SRBAM-243 - A security vulnerability for remote code execution has been fixed.

A malicious authenticated Bamboo user could exploit this vulnerability to run arbitrary code inside the Bamboo Server instance.

This security vulnerability has been fixed in ScriptRunner for Bamboo 6.8.2.1-p4. It is recommended all customers upgrade to 6.8.2.1-p4+ where possible.

6.8.0

Hello! Welcome to the first non-beta release of ScriptRunner for Bamboo!

To start, you can explore these features:

• Script Console: Learn and experiment with the Bamboo API.

• Built-In Scripts: Help get you started with the product.

• Listeners: Perform custom actions whenever standard Bamboo system events are fired.

• Script Fragments: Customize the UI.

• Script Jobs: Run script actions at a specified time interval.

• REST Endpoints: Run a script with a URL.

• Script Editor: Manage all of your script files and folders.

• Condition Tasks: Add logic to your build to avoid a rapid increase of plans or wrapping everything with script tasks.

• Scripted Tasks: Create and execute tasks with different parameters based on build variables.

These features are in addition to ScriptRunner features you know, like Execution History and Advanced Logging.

If you have any questions, please contact ScriptRunner for Bamboo Support here!