# Woodpecker CI v3.18.0 — 3.18.0

- Product: Woodpecker CI (https://whatsnew.fyi/product/woodpecker-ci)
- Vendor: Woodpecker
- Date: 2026-08-24
- Version: v3.18.0
- Original notes: https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.18.0
- Permalink: https://whatsnew.fyi/product/woodpecker-ci/releases/v3.18.0

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Allow to disable runtime class name backend option for Kubernetes
- **security** — Don't inject additional environment variables into plugins
- **security** — Don't inject matrix environment variables into plugins
- **security** — Change group identifier to full_path for GitLab
- **added** — Allow to add custom message to manual pipelines
- **added** — Add hidden decode-base64 agent command for Windows local backend
- **added** — Add pipeline log download endpoint
- **added** — Allow configuring allowed orgs per forge
- **changed** — Enforce unique name for services and steps if dag is used
- **changed** — Make the Kubernetes cluster domain configurable
- **changed** — Rename WOODPECKER_GRPC_VERIFY to WOODPECKER_GRPC_SKIP_VERIFY
- **changed** — Sort workflow files by name
- **changed** — Return step logs strictly in line order
- **changed** — Order the user feed by creation time instead of id
- **changed** — Cache compiled YAML validation schema for performance
- **fixed** — Prevent repository buttons from overlapping search bar
- **fixed** — Prefix manual trigger Ref with refs/heads/
- **fixed** — Fix orphaned pipelines after repo delete
- **fixed** — Fix running multiple cmdlets on Windows
- **fixed** — Drop stale queued tasks for terminal workflows
- **fixed** — Avoid N+1 member lookups in GitLab Repos()
- **fixed** — Retry agent connect on DeadlineExceeded, not just Unavailable

##### [3.18.0](https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.18.0) - 2026-08-24

⚠️ This release contains a migration that alters log storage. Depending on the number of stored log lines, it can take a while to complete. Back up before upgrading and allow for extra downtime.

###### ❤️ Thanks to all contributors! ❤️

Special thanks to @arpitjain099, @abdullaabdullazade, @george928 and @RealFakeAccount for reporting security vulnerabilities!

@6543, @AhmadNajiKam, @DEATIN, @OCram85, @Palleas, @YouCD, @anbraten, @confusedsushi, @gerbsen, @hasufell, @jrouly, @kastl-ars, @lafriks, @qwerty287, @retif, @romain-rossi, @spam-n-eggs, @stevapple, @xoxys, @zmully

###### 🔒 Security

- k8s: allow to disable runtime class name backend option [[#7046](https://github.com/woodpecker-ci/woodpecker/pull/7046)]
- Don't inject additional env vars into plugins [[#7040](https://github.com/woodpecker-ci/woodpecker/pull/7040)]
- Don't inject matrix env vars into plugins [[#7036](https://github.com/woodpecker-ci/woodpecker/pull/7036)]
- Update `golang.org/x/mod` [[#7012](https://github.com/woodpecker-ci/woodpecker/pull/7012)]
- Change group identifier to full_path for GitLab [[#6950](https://github.com/woodpecker-ci/woodpecker/pull/6950)]

###### 📈 Enhancement

- Allow to add custom message to manual pipelines [[#6973](https://github.com/woodpecker-ci/woodpecker/pull/6973)]
- Add hidden `decode-base64` agent command for Windows local backend [[#7023](https://github.com/woodpecker-ci/woodpecker/pull/7023)]
- Enforce unique name for services and steps if dag is used [[#7032](https://github.com/woodpecker-ci/woodpecker/pull/7032)]
- Add custom list opts with all [[#6992](https://github.com/woodpecker-ci/woodpecker/pull/6992)]
- Add pipeline log download endpoint [[#6876](https://github.com/woodpecker-ci/woodpecker/pull/6876)]
- Reject invalid started and done workflow states [[#7029](https://github.com/woodpecker-ci/woodpecker/pull/7029)]
- Sort workflow files by name [[#7021](https://github.com/woodpecker-ci/woodpecker/pull/7021)]
- Reject incompatible gRPC proto version agents [[#7028](https://github.com/woodpecker-ci/woodpecker/pull/7028)]
- Enforce one log entry per line with a unique index [[#7004](https://github.com/woodpecker-ci/woodpecker/pull/7004)]
- Order the user feed by creation time instead of id [[#7005](https://github.com/woodpecker-ci/woodpecker/pull/7005)]
- Return step logs strictly in line order [[#6999](https://github.com/woodpecker-ci/woodpecker/pull/6999)]
- Find the preceding pipeline by number instead of id [[#7003](https://github.com/woodpecker-ci/woodpecker/pull/7003)]
- perf(schema): cache compiled YAML validation schema [[#7002](https://github.com/woodpecker-ci/woodpecker/pull/7002)]
- Pick a repo's latest pipeline by number instead of id [[#7001](https://github.com/woodpecker-ci/woodpecker/pull/7001)]
- feat: allow configuring allowed orgs per forge [[#6874](https://github.com/woodpecker-ci/woodpecker/pull/6874)]
- Make the Kubernetes cluster domain configurable [[#6957](https://github.com/woodpecker-ci/woodpecker/pull/6957)]
- Fix vite deprecation [[#6974](https://github.com/woodpecker-ci/woodpecker/pull/6974)]
- feat(web): extract ListEditor form component [[#6962](https://github.com/woodpecker-ci/woodpecker/pull/6962)]
- Rename `WOODPECKER_GRPC_VERIFY` to `WOODPECKER_GRPC_SKIP_VERIFY` [[#6947](https://github.com/woodpecker-ci/woodpecker/pull/6947)]
- Update frontend schema.json for documented backend options [[#6933](https://github.com/woodpecker-ci/woodpecker/pull/6933)]

###### 🐛 Bug Fixes

- Prevent repository buttons from overlapping search bar [[#7047](https://github.com/woodpecker-ci/woodpecker/pull/7047)]
- fix(server): prefix manual trigger Ref with refs/heads/ [[#7051](https://github.com/woodpecker-ci/woodpecker/pull/7051)]
- fix runtime to ignore cancel as runtime error [[#7031](https://github.com/woodpecker-ci/woodpecker/pull/7031)]
- Fix orphaned p

_[Truncated at 4000 characters — full notes: https://github.com/woodpecker-ci/woodpecker/releases/tag/v3.18.0]_