April 21, 2026

Tugboat Changelog

v2.26.17

In This Release...

  • We patched three high-severity security vulnerabilities in a proxy dependency that could have allowed a malicious preview environment to crash or exhaust memory on the proxy service. Nothing to do on your end — you're already protected.
  • Tugboat now supports Bitbucket API tokens for repository authentication. If your Bitbucket repos stopped connecting after Bitbucket deprecated app passwords last September, re-authenticating with an API token will get things back on track.
  • Another day, another round of dependency updates.

Recent Releases

v2.26.36
August 7, 2026
Git provider refs are now searchable for those refs not on a given page, and we introduced some web server hardening.
v2.26.35
August 3, 2026
Project admins now get notified when scheduled Base Preview refreshes fail, keeping everyone informed.
v2.26.34
July 28, 2026
Fixed an over-restrictive CSP policy blocking Lighthouse score pages.
v2.26.33
July 23, 2026
Bumped dependencies across the stack.
v2.26.32
July 16, 2026
Tightened CORS policy and bumped dependencies across the board.
View All