Bamboo 11.0 リリース ノート
2025 年 4 月
We’re proud to present Bamboo 11.0.
Take some time and read through the release notes to learn what we've prepared for you this time. If you plan to upgrade, swing by the Bamboo 11.0 upgrade notes to check for any breaking change and don’t forget to check out the full list of resolved issues.
ハイライト
Bamboo 11.0.0
Release date:
Here's what's new in Bamboo 11.0.0.
Freemarker and Velocity templates allowlist security improvements
We're taking steps to secure installation directories for all Data Center products. These changes increase the difficulty for an attacker to exploit filesystem access and allow customers to verify the state of the product installation.
From Bamboo 11.0, all Velocity files stored on the filesystem (for example, shared, local home, or any other) will need to be explicitly allowlisted and must be of a specific file type. Files stored inside .jar files and bundled within plugins will not be affected.
In addition, all method invocations within Freemarker or Velocity templates must be explicitly allowlisted. For more information, visit Configuring the Velocity method allowlist and Configuring the Velocity file and file type allowlist. For Freemarker, visit Configuring the Freemarker method allowlist.
Migration to Apache Struts 6
We’ve upgraded to Struts 6. Make sure you’re aware of the following changes:
Annotate getters with
@StrutsParameter(depth=X)(dependency onstruts-corelib)Annotate setters with
@StrutsParameter(dependency onstruts-corelib)The action method previously named
doSomethingmust now be fully informed. Previously, thedoprefix could be suppressed.The method previously named
getBamboo()has been renamed togetBambooContainer()to avoid warnings from Struts when .bamboo. is used in our templates.OGNL Allowlist.
You can find extensive documentation on how to apply these changes at https://developer.atlassian.com/server/confluence/struts-module/
Your deployment projects and environments are cached now
Bamboo 11 introduces application-level caching for deployment projects and environments to elevate your daily experience. This can be especially beneficial if you utilize them heavily or have many of them. Bamboo speeds up display times and optimizes resource usage by serving cached objects for user interface and background processing. We recommend that you keep this enabled, though you can disable it via the system property bamboo.deployment.cache.enabled.
Automatic offline agents management
As an admin, you can now configure policies for the automatic removal of offline agents. This feature helps free up agent names and keeps your instance data tidy and clean. Enabling this will enhance your agents' processing performance.
アプリ署名による安全なアプリ インストール
アプリのセキュリティを向上させるために、アプリのインストールを署名済みアプリのみに制限する新機能を導入します。これは次の場面で役立ちます。
アプリが Atlassian Marketplace からのものか、あるいは信頼できるパートナーが手動でアップロードしたものであることを確認する
悪意のある攻撃者が有害なアプリをアップロードするのを防ぐ
アプリ署名は新規アプリのインストールのみに影響し、すでにインストール済みのアプリはそのままです。
This feature will be gradually rolled out across Data Center products by mid-2025. For details, check out this community post.
このリリースでは、アプリ署名は既定で無効になっています。猶予期間は、Universal Plugin Manager (UPM) の次の機能リリースまで継続し、その後はアプリ署名が既定で有効になります。
この猶予期間を利用して、ご利用のプロセスの適合性をご確認いただくことをおすすめします。必要な手順は、アプリを Marketplace からインストールするか、カスタム アプリを構築するかによって異なります。
アプリ署名を有効にして、Marketplace からインストールする
猶予期間中は、任意のタイミングでアプリ署名を有効化できます。手順は次のとおりです。
Enable app signing. For details, see Configuring UPM app signature check.
Download and install Certificate Authority (CA) from Atlassian. For details, see Updating Atlassian Certificate Bundles.
以上で完了です。Marketplace から安全にアプリをインストールしていただけます。
カスタム アプリのインストール
カスタム アプリのビルドを使用する場合は、次の手順でご自身のアプリに署名してそれらを保護できます。
Enable app signing. For details, see Configuring UPM app signature check.
Get the app signature and verification certificate as described in Generating app signature and verification certificate using OpenSSL.
Put your new certificate in your Trust store as described in Updating Atlassian Certificate Bundles.
署名したアプリをインストールします。
アプリ署名機能を使用せずに、ファイル システム経由でアプリをインストールすることもできます。
If you’re experiencing issues, check out app signing troubleshooting.
サポート対象プラットフォームの更新
See what changes are in store for the supported platforms in Bamboo. For more information about what the latest stable release of Bamboo supports, see Supported platforms.
サポート終了のお知らせ
In this release, we’re removing support for:
PostgreSQL 14
In this release, we’re deprecating support for:
PostgreSQL 15
SQL Server 2017
MySQL 8.0
Java 17
新たにサポート対象となったプラットフォーム
Bamboo 11.0 doesn’t introduce support for any new software platforms.
解決済みの課題
Scroll through the list of the issues we’ve resolved throughout the lifecycle of Bamboo 11.0.
Includes adding new index at TEST_CASE table for performance improvements, upgrade might take 10+ minutes on large datasets.