April 21, 2026

Tugboat Changelog

v2.26.17

In This Release...

  • We patched three high-severity security vulnerabilities in a proxy dependency that could have allowed a malicious preview environment to crash or exhaust memory on the proxy service. Nothing to do on your end — you're already protected.
  • Tugboat now supports Bitbucket API tokens for repository authentication. If your Bitbucket repos stopped connecting after Bitbucket deprecated app passwords last September, re-authenticating with an API token will get things back on track.
  • Another day, another round of dependency updates.

Recent Releases

v2.26.32
July 16, 2026
Tightened CORS policy and bumped dependencies across the board.
v2.26.31
July 15, 2026
We are further hardening the backend security of Tugboat.
v2.26.30
July 10, 2026
Added user verification config option and made base preview failure emails opt-in for existing users.
v2.26.29
July 8, 2026
Fixed a pesky typo in the empty preview message. The details matter!
v2.26.28
July 2, 2026
Dependency updates across the board, plus fixes for dashboard footer styling and email sending functionality.
View All