balena-cli: all versions and old releases

163ab1b (Disable shrinkwrap deduplication test, 2026-10-21)
dc91c6c (Suggest using nodejs >= 24.22.1, 2026-10-21)
ea1d44f (Republish with nodejs ^24.22.1, 2026-10-21)

a1a32a2 (os configure: Clarify that the image's config.json is always replaced, 2026-08-26)
b5b9692 (Deduplicate dependencies, 2026-08-26)

88bc2d7 (os download: Add debug logs, 2026-08-18)

715e00f (Treat 429 errors as expected, 2026-08-14)
1dbbe04 (Run dedupe, 2026-08-14)

Update actions/upload-artifact action to v7

Notable changes
- Update the readme with direct upload details by @danwkennedy in #795
- Readme: bump all the example versions to v7 by @danwkennedy in #796
- Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797
- Add proxy integration test by @Link- in #754
- Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
- Support direct file uploads by @danwkennedy in #764
- @Link- made their first contribution in #754
actions/upload-artifact (actions/upload-artifact)

v7.0.1
Compare Source

What's Changed
- Update the readme with direct upload details by @danwkennedy in #795
- Readme: bump all the example versions to v7 by @danwkennedy in #796
- Include changes in typespec/ts-http-runtime 0.3.5 by @yacaovsnc in #797

v7.0.0
Compare Source

v7 What's new

Direct Uploads
Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed
- Add proxy integration test by @Link- in #754
- Upgrade the module to ESM and bump dependencies by @danwkennedy in #762
- Support direct file uploads by @danwkennedy in #764

New Contributors
- @Link- made their first contribution in #754

v7
Compare Source

List of commits
cadae2f (Update actions/upload-artifact action to v7, 2026-08-12)

ddf5e49 (Update GitHub Actions, 2026-08-12)

Update actions/download-artifact action to v8

Notable changes
- Support for CJK characters in the artifact name by @danwkennedy in #471
- Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472
- Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
- Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461
actions/download-artifact (actions/download-artifact)

v8.0.1
Compare Source

What's Changed
- Support for CJK characters in the artifact name by @danwkennedy in #471
- Add a regression test for artifact name + content-type mismatches by @danwkennedy in #472

v8.0.0
Compare Source

v8 - What's new
> [!IMPORTANT]
> actions/download-artifact@v8 has been migrated to an ESM module. This should be transparent to the caller but forks might need to make significant changes.
> [!IMPORTANT]
> Hash mismatches will now error by default. Users can override this behavior with a setting change (see below).

Direct downloads
To support direct uploads in actions/upload-artifact, the action will no longer attempt to unzip all downloaded files. Instead, the action checks the Content-Type header ahead of unzipping and skips non-zipped files. Callers wishing to download a zipped file as-is can also set the new skip-decompress parameter to true.

Enforced checks (breaking)
A previous release introduced digest checks on the download. If a download hash didn't match the expected hash from the server, the action would log a warning. Callers can now configure the behavior on mismatch with the digest-mismatch parameter. To be secure by default, we are now defaulting the behavior to error which will fail the workflow run.

ESM
To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed
- Don't attempt to un-zip non-zipped downloads by @danwkennedy in #460
- Add a setting to specify what to do on hash mismatch and default it to error by @danwkennedy in #461

v8
Compare Source

List of commits
cafe078 (Update actions/download-artifact action to v8, 2026-07-27)

ab603e3 (device os-update: Add support for Queued OS updates, 2026-02-09)
98b71f2 (Support pinning devices that haven't completed their OS update back to their current release, 2026-02-19)
320bca1 (Deduplicate dependencies, 2026-07-23)

Update apple-actions/import-codesign-certs action to v7

Notable changes
- Switch from ncc to esbuild
- Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in Apple-Actions#166
- Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in Apple-Actions#167
- Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in Apple-Actions#168
- Bump knip from 5.78.0 to 6.2.0 by @dependabot[bot] in Apple-Actions#173
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)

v7.0.0
Compare Source

What's Changed
- Switch from ncc to esbuild
- Bump flatted from 3.4.1 to 3.4.2 by @dependabot[bot] in Apple-Actions#166
- Bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in Apple-Actions#167
- Bump picomatch from 2.3.1 to 2.3.2 by @dependabot[bot] in Apple-Actions#168
- Bump knip from 5.78.0 to 6.2.0 by @dependabot[bot] in Apple-Actions#173

v7
Compare Source

List of commits
113c4f1 (Update apple-actions/import-codesign-certs action to v7, 2026-06-29)

c163b65 (Fix progress bar clamping bug and improve push upload feedback, 2026-06-18)
eef54bc (Promote updateImage log from debug to info for deploy visibility, 2026-06-18)
7ddbf80 (dedup shrinkwrap, 2026-06-18)

3128a0f (Switch from custom Dictionary type to built in Record typing, 2026-06-16)
bd99c83 (Shrinkwrap dedupe, 2026-06-17)

0a7f977 (Bump @balena/compose-parser to 0.2.6, @balena/compose to 8.0.4, 2026-05-28)

562b1e4 (Fix link in help output about FAQ and troubleshooting, 2026-05-13)
2b62874 (Deduplicate dependencies, 2026-05-15)

fb681df (Update GitHub Actions, 2026-05-13)

817d158 (Bump @balena/compose-parser to 0.2.1, @balena/compose to 8.0.2, 2026-05-01)

c5988e1 (tests: Update builder dashboard link, 2026-04-30)
7105369 (Deduplicate dependencies, 2026-04-30)

039eef8 (Add organization management commands, 2026-04-24)

Update @balena/compose to v8
This release adds CLI support for a number of compose fields in the latest docker compose spec. The fields are listed below, however note that balena Supervisor support needs to be added for the fields to be fully supported by balena. These fields will be rejected by the Supervisor via the container contract mechanism until Supervisor support is implemented. See balena-io-modules/balena-compose-parser#19 where the compose container contract is injected if new fields are detected.
Dev overlay file merging
While in local mode, all top-level fields in docker-compose.dev.yml are merged into the main compose file. Before, only top-level service fields were merged. A bare Dockerfile with no docker-compose.yml will no longer apply docker-compose.dev.yml as an overlay, so make sure to create a docker-compose file if you wish for dev overlays to be applied.
Add support for compose fields:
Compose features:
- Fragments, extensions (pre-v8 balena-compose already supported this, but using a custom implementation. balena-compose v8 moves to the official implementation used by docker compose (compose-go)
- include directive
services.${serviceName}:
NOTE: "logged / not logged" refers to Supervisor logging Ignoring unsupported or unknown compose fields
───────────────────────────────────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────
field │SV behavior
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
annotations │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
attach │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
cgroup │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
cpu_rt_runtime │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
cpu_rt_period │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
cpus │ignored, not logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
device_cgroup_rules │ignored, logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
env_file │N/A - compose-go folds this into environment during parsing
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
extends │N/A - compose-go folds this into the composition during parsing
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
healthcheck.start_interval │ignored, not logged
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
healthcheck.start_period │supported
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
ipc │conditional error loop if ipc: service:${serviceName}, supports ipc: shareable
───────────────────────────────────┼─────────────────────────────────────────────────────────────────────────────────────────────────────────────
label_file │N/A - compose-go folds this into labels during parsing
───────────────────────────────────┼──────────────────────────────────

6251f3c (Retry ratelimited requests that have a Retry-After less than 60 seconds, 2026-04-24)
2c343d0 (Deduplicate dependencies, 2026-04-27)

a97edb0 (test(device ssh): unset proxy env vars that break stderr assertions, 2026-04-07)

d0e19ed (Update @balena/lint to prepare for TS6.0, 2026-04-07)
657f56c (Deduplicate dependencies, 2026-04-07)
12a64e3 (Unblock color tests on CI after deduplicating supports-color, 2026-04-07)

3420382 (Deduplicate dependencies, 2026-02-26)
cb22fb0 (Disable background auto-updates, 2026-02-26)

508a595 (Deduplicate dependencies, 2026-02-18)
d184e5e (Update balena-sdk to 23.0.2, 2026-02-18)

cc32211 (tests: Replace the deprecated url.parse with new URL(), 2026-02-11)
f8702f5 (Remove unnecessary 'url' imports, 2026-02-11)
84edd27 (tests/build: Increase the test timeout to 1.5 minute, 2026-02-11)

2697746 (Remove unused setMaxListeners function, 2026-01-13)
9f72030 (Reduce overall usage of require, 2026-01-13)

0a43fa0 (Update balena-image-fs to 7.6.0, 2026-01-13)
2216598 (Remove no longer needed code in favor of balena-image-fs, 2026-01-13)
7c978a0 (Remove no longer needed direct dependencies file-disk and partitioninfo, 2026-01-13)

d3392a9 (README: remove david-dm link, 2026-01-12)
156af67 (Remove unused dev dependencies, 2026-01-12)
6c90666 (Add missing dependency indent-string, 2026-01-12)
7eb41c3 (Add missing dev dependency pinejs-client-core, 2026-01-12)
a54c4d1 (Add missing dependency file-disk, 2026-01-12)
2e4cf49 (Add missing dependency partitioninfo, 2026-01-12)
e10fdcb (Run npm audit fix, 2026-01-13)
8c1cb04 (Deduplicate dependencies, 2026-01-13)

09cea86 (Deduplicate dependencies, 2026-01-13)
2eaa5c1 (Add tests for balena config generate, 2026-01-13)

23c645a (os download: Correct img names to match devices type in examples, 2026-01-01)
59b639d (Update reconfix to 1.0.2, 2026-01-12)
15bf2d6 (Update balena-device-init to 8.2.1, 2026-01-12)
d8f50d0 (Drop exit-hook patch, 2026-01-02)
bd3acf1 (Deduplicate dependencies, 2026-01-12)

ff73fed (tests: Replace nock, mock-require and rewire with mockttp and sinon, 2025-10-17)
81e6537 (Unpin balena-request from v14.0.6, 2026-01-09)

d0b98ad (Fix intermitent test on image-manager, 2026-01-09)

9ebf244 (Update balena-sdk to 22.4.5, 2025-12-30)
df95136 (Use the device.is_connected_to_vpn field for device actions, ssh & tunnel checks, 2025-11-13)

11745cd (Update docker-progress to 5.4.0, 2025-12-04)

Update aws-actions/configure-aws-credentials action to v5
Notable changes
- release 5.1.1 (56d6a58)
- various dependency updates
- Add global timeout support (#1487) (1584b8b)
- add no-proxy support (#1482) (dde9b22)
- Improve debug logging in retry logic (#1485) (97ef425)
- properly expose getProxyForUrl (introduced in #1482) (#1486) (cea4298)
- Cleanup input handling. Changes invalid boolean input behavior (see #1445)
- add skip OIDC option (#1458) (8c45f6b)
- Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
- support account id allowlist (#1456) (c4be498)
aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)
v5.1.1
Compare Source
Miscellaneous Chores
- release 5.1.1 (56d6a58)
- various dependency updates
v5.1.0
Compare Source
Features
- Add global timeout support (#1487) (1584b8b)
- add no-proxy support (#1482) (dde9b22)
- Improve debug logging in retry logic (#1485) (97ef425)
Bug Fixes
- properly expose getProxyForUrl (introduced in #1482) (#1486) (cea4298)
v5.0.0
Compare Source
⚠ BREAKING CHANGES
- Cleanup input handling. Changes invalid boolean input behavior (see #1445)
Features
- add skip OIDC option (#1458) (8c45f6b)
- Cleanup input handling. Changes invalid boolean input behavior (see #1445) (74b3e27)
- support account id allowlist (#1456) (c4be498)
List of commits
6ff189c (Update aws-actions/configure-aws-credentials action to v5, 2025-12-15)

Update apple-actions/import-codesign-certs action to v5
Notable changes
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)
v5
Compare Source
v4
Compare Source
List of commits
68c8deb (Update apple-actions/import-codesign-certs action to v5, 2025-12-12)

55f230c (os configure, device init: Validate that the config.json's installer.secureboot is a boolean when set, 2025-12-05)
b138ce3 (Add test for os configure --config using secureboot, 2025-12-05)

0bc9b48 (os configure: Fix asking interactive questions when --config is used, 2025-12-05)
b85ccb7 (Add tests for os configure --config, 2025-12-06)
adde762 (Update @balena/lint to 9.3.7 to support async disposables, 2025-12-06)

Update apple-actions/import-codesign-certs action to v3
Notable changes
apple-actions/import-codesign-certs (apple-actions/import-codesign-certs)
v3
Compare Source
Upgrade to node 20 plus some other changes
List of commits
e840195 (Update apple-actions/import-codesign-certs action to v3, 2025-12-05)

Update actions/download-artifact action to v6
Notable changes
- Update README for download-artifact v5 changes by @yacaovsnc in #417
- Update README with artifact extraction details by @yacaovsnc in #424
- Readme: spell out the first use of GHES by @danwkennedy in #431
- Bump @actions/artifact to v4.0.0
- Prepare v6.0.0 by @danwkennedy in #438
- @danwkennedy made their first contribution in #431
actions/download-artifact (actions/download-artifact)
v6.0.0
Compare Source
What's Changed
BREAKING CHANGE: this update supports Node v24.x. This is not a breaking change per-se but we're treating it as such.
- Update README for download-artifact v5 changes by @yacaovsnc in #417
- Update README with artifact extraction details by @yacaovsnc in #424
- Readme: spell out the first use of GHES by @danwkennedy in #431
- Bump @actions/artifact to v4.0.0
- Prepare v6.0.0 by @danwkennedy in #438
New Contributors
- @danwkennedy made their first contribution in #431
Full Changelog: actions/download-artifact@v5...v6.0.0
List of commits
92eee38 (Update actions/download-artifact action to v6, 2025-12-02)

e463dea (Deduplicate dependencies, 2025-12-02)
b4668b0 (tests/os/configure.spec: Abstract the temp image creation and cleanup, 2025-12-02)

a8f87d1 (Include sub-commands in --help, 2025-11-19)

91cf9f3 (Remove the oclif/core patches in favor oclif overrides & customization, 2025-11-18)

8a6630c (Fix version and autocomplete commands not working in offline mode, 2025-11-18)
bfc0ba7 (Deduplicate dependencies, 2025-11-19)

ab7ecec (push,build: Use streaming while packing the build context files, 2024-02-26)

a97c8db (Drop some usage of lodash in favor of native equivalents, 2025-11-12)

757061c (device os-update: Add support for HUPing ESR devices, 2025-11-17)
bfc464b (Deduplicate dependencies, 2025-11-18)

00363df (Use nullish coalescing, 2025-11-11)
731e19a (Fix getExpandedProp return type, 2025-11-11)
772f597 (Re-enable JS linting and add JSDoc annotations for JS files, 2025-11-11)
ccc82d7 (Add missing type annotations, 2025-11-11)

df1bf2f (release list: Replace the semver field with raw_vesrion, 2025-09-02)
21bf25f (release: Replace the semver field with raw_vesrion, 2025-09-02)
e2c6f85 (release: Include the build_log in the --json results, 2025-09-02)
3d84d13 (Drop the 'balena os build-config' command in favor of balena config generate', 2025-09-01) a2846e76 (os configure: Drop the --version flag & fail when the image version can't be detected, 2025-09-01) 5ca2b07d (os configure, os initialize: Fail when a device-type.json can't be detected in the provided image, 2025-09-01) 2ab5bc17 (os configure: Make --config incompatible with all other flags other than --system-connection, 2025-09-02) 7a84cac9 (Extract parts of os configure, 2025-09-03) 91f217ea (device init: Validate that the provided config file paths exist, 2025-09-03) 0c969e67 (device init: Make --config incompatible with all other flags other than --drive --version & --yes, 2025-09-03) e551af5a (Replace custom versioncommand with@oclif/plugin-version, 2025-09-03) 8ea0f3ac (Replace manual completion generation with @oclif/plugin-autocomplete`, 2025-09-03)
a4aaebb (Use oclif's native json support instead of manually adding it, 2025-09-03)
5a0bc30 (Drop all deprecated aliases, 2025-09-03)
7d8f5d6 (os configure: Add tests for how flags are allowed to be combined, 2025-09-09)
fa020b4 (os configure: Use oclif relations to enforce --device-type dependency on --fleet, 2025-09-09)
3bc2261 (config generate: Drop the deprecated no-op '--generate-device-api-key' flag, 2025-09-10)
acf6e70 (Drop support for node <24.11.0, 2025-09-12)
684c2a9 (device init: Fix node DEP0190 deprecation warning, 2025-09-12)
db5a67a (device note: Drop the --dev flag in favor of the standardize --device, 2025-11-13)
fd5f06d (Fix lzma-native build on node24 on Linux ARM runners, 2025-11-14)
c132e8d (Deduplicate dependencies, 2025-11-17)

Update actions/setup-python action to v6
Notable changes
actions/setup-python (actions/setup-python)
v6
Compare Source
v5
Compare Source
List of commits
c366802 (Update actions/setup-python action to v6, 2025-11-14)

Update actions/setup-node action to v6
Notable changes
actions/setup-node (actions/setup-node)
v6
Compare Source
v5
Compare Source
List of commits
9d82d2d (Update actions/setup-node action to v6, 2025-11-13)

Update GitHub Artifact Actions to v5 (major)
Notable changes
- Update README.md by @nebuk89 in #407
- BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416
- By name: name: my-artifact → extracted to path/ (direct)
- By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)
- By name: name: my-artifact → extracted to path/ (unchanged)
- By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
- You download artifacts by name
- You download multiple artifacts by ID
- You already use merge-multiple: true as a workaround
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@v5
- @nebuk89 made their first contribution in #407
- feat: implement new artifact-ids input by @GrantBirki in #401
- Fix workflow example for downloading by artifact ID by @joshmgross in #402
- Prep for v4.3.0 release by @robherley in #404
- @GrantBirki made their first contribution in #401
- Add unit tests by @GhadimiR in #392
- Fix bug introduced in 4.2.0 by @GhadimiR in #391
- Update README.md by @lkfortuna in #384
- Bump artifact version, do digest check by @GhadimiR in #383
- @lkfortuna made their first contribution in #384
- @GhadimiR made their first contribution in #383
-actions/upload-artifact (actions/upload-artifact)
actions/download-artifact (actions/download-artifact)
v5.0.0
Compare Source
What's Changed
- Update README.md by @nebuk89 in #407
- BREAKING fix: inconsistent path behavior for single artifact downloads by ID by @GrantBirki in #416
v5.0.0
🚨 Breaking Change
This release fixes an inconsistency in path behavior for single artifact downloads by ID. If you're downloading single artifacts by ID, the output path may change.
What Changed
Previously, single artifact downloads behaved differently depending on how you specified the artifact:
- By name: name: my-artifact → extracted to path/ (direct)
- By ID: artifact-ids: 12345 → extracted to path/my-artifact/ (nested)
Now both methods are consistent:
- By name: name: my-artifact → extracted to path/ (unchanged)
- By ID: artifact-ids: 12345 → extracted to path/ (fixed - now direct)
Migration Guide
✅ No Action Needed If:
- You download artifacts by name
- You download multiple artifacts by ID
- You already use merge-multiple: true as a workaround
⚠️ Action Required If:
You download single artifacts by ID and your workflows expect the nested directory structure.
Before v5 (nested structure):
- uses: actions/download-artifact@v4
with:
artifact-ids: 12345
path: dist
# Files were in: dist/my-artifact/
> Where my-artifact is the name of the artifact you previously uploaded
To maintain old behavior (if needed):
- uses: actions/download-artifact@v5
with:
artifact-ids: 12345
path: dist/my-artifact # Explicitly specify the nested path
New Contributors
- @nebuk89 made their first contribution in #407
Full Changelog: actions/download-artifact@v4...v5.0.0
v4.3.0
Compare Source
What's Changed
- feat: implement new artifact-ids input by @GrantBirki in #401
- Fix workflow example for downloading by artifact ID by @joshmgross in #402
- Prep for v4.3.0 release by @robherley in #404
New Contributors
- @GrantBirki made their first contribution in #401
Full Changelog: actions/download-artifact@v4.2.1...v4.3.0
v4.2.1
Compare Source
What's Changed
- Add unit tests by @GhadimiR in #392
- Fix bug introduced in 4.2.0 by @GhadimiR in #391
Full Changelog: actions/download-artifact@v4.2.0...v4.2.1
v4.2.0
Compare Source
What's Changed
- Update README.md by @lkfortuna in #384
- Bump artifact version, do digest check by @GhadimiR in #383
New Contributors
- @lkfortuna made their first contribution in #384
- @GhadimiR made their first contribution in #383
Full Changelog: actions/download-artifact@v4.1.9...v4.2.0
actions/upload-artifact (actions/upload-artifact)
v5
Compare Source
List of commits
baa5eda (Update GitHub Artifact Actions to v5, 2025-11-13)

e7f5859 (feat: add update command, 2025-09-15)

e225a5b (Build with macos-15-intel as macos-13 is deprecated, 2025-11-11)

aa3cc4c (ssh,tunnel: Fix retrieving the online devices ordered by name, 2025-10-20)
eb5e2bb (Deduplicate dependencies, 2025-10-30)

f3d8ec6 (Update @oclif/core, 2025-10-20)
4dca906 (Remove a patch to @oclif/core, 2025-10-20)
3bf1f33 (Deduplicate dependencies, 2025-10-21)

973b784 (Remove unused api mock for version command, 2025-10-17)

69f4e26 (Remove all references to removed pkg bundle method, 2025-10-13)

1597961 (Switch runtime uses of mkdirp to use the native equivalent, 2025-09-17)

bf8df4a (Build with node 22.20.0, 2025-10-08)

eb76b43 (Update resin-cli-visuals to 4.0.1, 2025-09-18)
4652dcf (Update resin-cli-form to 5.0.0, 2025-09-18)
ff8db8f (Update tar-utils to 3.0.3, 2025-09-21)
edce3d6 (Update reconfix to 1.0.1, 2025-09-22)
6e05a07 (Update livepush to 3.5.2, 2025-09-22)
fdde92a (Drop no longer needed @types/bluebird devDependency, 2025-09-24)
5964115 (Update balena-device-init to 8.1.14, 2025-09-24)
3427fb5 (Deduplicate dependencies, 2025-09-24)

6607ce4 (Update balena-semver to 3.0.10, 2025-09-22)
c558eb1 (Deduplicate dependencies, 2025-09-22)

7de68cc (Switch runtime uses of rimraf to use the native equivalent, 2025-09-17)

9a70e35 (Convert various lodash methods to native versions, 2025-09-17)

a4db91b (Update resin-doodles, 2025-09-16)
b0164da (Update resin-cli-visuals, 2025-09-17)
29cff50 (Update resin-cli-form, 2025-09-17)
a67303c (Deduplicate dependencies, 2025-09-17)

dd1f1a4 (Update TypeScript to 5.9.2, 2025-08-01)
1fb9df4 (Update @balena/lint to 9.3.2, 2025-08-01)
cf38c94 (Deduplicate dependencies, 2025-09-15)

9b0e31d (Drop dependency chalk, 2025-09-09)
08595cf (Replace chalk with oclif ux.colorize, 2025-09-09)

837db11 (Fix minor typo in package.json, 2025-09-10)
f30da95 (Deduplicate dependencies, 2025-09-10)

8471da8 (tests/ssh: Avoid an as any cast, 2025-09-02)

944a281 (utils/config: Convert generateDeviceConfig to async await, 2025-09-01)
218d2f2 (config generate: Deprecate the '--generate-device-api-key' flag, 2025-09-01)

04c8c12 (Add release_asset model, 2025-08-21)

6fb498e (Fix uploading installer to github releases, 2025-08-08)

3c1fe3c (Deduplicate dependencies, 2025-08-01)
9d95574 (tests: Fix @balena/compose deep import in node 22.18.0, 2025-08-01)

40d233d (Update oclif & @oclif/core deps and patches, 2025-07-22)

6fda0fa (Stream json output on release list to avoid nodejs max string limit size, 2025-07-18)

8617b1a (Update build pipeline to use windows-2022 runner, 2025-07-10)

a1a0e4f (Deduplicate dependencies, 2025-06-17)
bddad25 (Deploy: Limit the submitted error_message of images that fail to build to 1000 characters, 2025-06-17)

b32514f (Bump etcher-sdk to v10.0.0, 2025-06-07)
f80b8e6 (Add support for node 22, 2025-06-07)

8502c4d (Replace request usage with got, 2025-05-30)
d47abf0 (Remove request dependency, 2025-05-30)
78f1471 (Deduplicate dependencies, 2025-05-30)

0b0e24c (Bump etcher-sdk to v9.1.4, 2025-05-29)

e5877c7 (deploy-legacy: Replace request with got, 2025-05-28)
a7a408a (tests: Replace request with got, 2025-05-28)

5ccee0e (Bump sentry to v9, 2025-05-28)

8d10c1a (Fix balena build to work with --nologs, 2025-05-28)

78ffff8 (Update nock to 14.0.4, 2025-05-28)
3396ba5 (DeviceAPI: Move away from request in favor of BalenaSdk request, 2025-05-28)
b7f1469 (Deduplicate dependencies, 2025-05-28)

21fd8a3 (Build standalone without pkg, 2024-10-30)
45eb0ad (Add migration guide to v22, 2025-05-23)

2bccabf (Bump balena-preload to 18.0.4, 2025-05-21)

7c8ce1b (Bump balena-preload to 18.0.3, 2025-05-21)

0f8ce47 (Update @balena/compose dependency to fix error with build secrets., 2025-04-15)
98197ee (Dedupe dependencies, 2025-04-15)

8eb1777 (Fix typos in os configure and config generate help messages, 2025-04-23)
457b81a (Deduplicate dependencies, 2025-05-06)

37e96e5 (patch: fix windows signing, 2025-05-05)

4fcedd0 (Update balena-config-json to rely on the balena-image-fs helpers, 2025-04-02)
daf5c51 (Deduplicate dependencies, 2025-04-04)

Update actions/download-artifact action to v4.1.9
Notable changes
- Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/download-artifact/pull/354
- docs: small migration fix by @​froblesmartin in https://github.com/actions/download-artifact/pull/370
- Update MIGRATION.md by @​andyfeller in https://github.com/actions/download-artifact/pull/372
- Update artifact package to 2.2.2 by @​yacaovsnc in https://github.com/actions/download-artifact/pull/380
- @​Jcambass made their first contribution in https://github.com/actions/download-artifact/pull/354
- @​froblesmartin made their first contribution in https://github.com/actions/download-artifact/pull/370
- @​andyfeller made their first contribution in https://github.com/actions/download-artifact/pull/372
- @​yacaovsnc made their first contribution in https://github.com/actions/download-artifact/pull/380
actions/download-artifact (actions/download-artifact)
v4.1.9
Compare Source
What's Changed
- Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/download-artifact/pull/354
- docs: small migration fix by @​froblesmartin in https://github.com/actions/download-artifact/pull/370
- Update MIGRATION.md by @​andyfeller in https://github.com/actions/download-artifact/pull/372
- Update artifact package to 2.2.2 by @​yacaovsnc in https://github.com/actions/download-artifact/pull/380
New Contributors
- @​Jcambass made their first contribution in https://github.com/actions/download-artifact/pull/354
- @​froblesmartin made their first contribution in https://github.com/actions/download-artifact/pull/370
- @​andyfeller made their first contribution in https://github.com/actions/download-artifact/pull/372
- @​yacaovsnc made their first contribution in https://github.com/actions/download-artifact/pull/380
Full Changelog: actions/download-artifact@v4.1.8...v4.1.9
List of commits
a2209ff (Update actions/download-artifact action to v4.1.9, 2025-04-03)

b650f8f (Update dockerode/docker-modem dependencies for fixes, 2025-04-02)
663e83c (Dedupe dependencies, 2025-04-02)

28703bb (Add comment with secure boot signature file example for preload, 2025-04-01)
30076fa (Dedupe dependencies, 2025-04-01)

0d4e411 (Fix device detail for open balena, 2025-03-27)

7f2daee (Deny preload for an image with secure boot enabled, 2025-02-21)
18bc0d6 (Dedupe dependencies, 2025-03-18)

e829068 (Bump balena-sdk to 21.3.0, 2025-03-26)
20d7655 (Add explicit read properties for device command, 2025-03-26)

Add support for requirement labels feature
This release introduces support for defining container requirements from composition labels.
Supported labels are
- io.balena.features.requires.sw.supervisor that should be set to a version range
- io.balena.features.requires.sw.l4t that should be set to a version range
- io.balena.features.requires.arch.sw that should be set to a valid architecture (amd64, aarch64, armv7hf, rpi, i386)
- io.balena.features.requires.hw.device-type that should be set to a valid device type slug (not validated at the moment).
List of commits
42c50ef (Add support for new requirement labels feature, 2025-03-03)
d24d78d (Fix package release action for macOS, 2025-03-12)

8fe6d6c (Update balena-sdk to 21.2.1, 2025-03-11)
ed0e03d (Add dependency date-fns, 2025-03-11)
9d3120b (Update balena-preload to 18.0.1, 2025-03-11)
c0fd1e3 (Deduplicate dependencies, 2025-03-11)
ecc6f80 (api-key generate: Add required argument expiryDate, 2025-02-05)
aad62d1 (Drop support for OS versions <2.14.0, 2025-02-05)
bc3558d (Address SDK major v21 breaking changes, 2025-02-05)

a10156a (Update TypeScript to 5.8.2, 2025-03-04)
043bc48 (Add a "deduplicate-dependencies" npm script to standardize such commits, 2025-03-04)
1a33029 (Deduplicate dependencies, 2025-03-04)

64d1943 (Fix CORS issue with X-Balena-Client header, 2025-02-26)

93039b0 (Update balena-config-json dependency and fix test, 2025-02-25)

bef5221 (Use the CLI version in the X-Balena-Client header, 2025-02-25)

53be743 (Remove unused old eslint version files, 2025-01-15)

61d4d1f1 (Update TypeScript to 5.7.2, 2024-11-23)
a01c85bc (Deduplicate dependencies, 2024-11-23)

24273b5a (Deduplicate dependencies, 2024-11-07)
6155509f (Refactor balena build for clarity, 2024-11-07)

bcb42c8a (Update actions/upload-artifact digest to b4b15b8, 2024-11-05)

55d06ace (Deduplicate npm dependencies, 2024-04-29)
aa9a148c (Upgrade dockerode and docker-modem dependencies, 2024-04-14)

6fb65bcf (Re-run npm install and npm dedupe, 2024-04-19)
954de13b (Use Actuated runners for Linux test and publish, 2024-04-19)

766e6d4e (build: Auto-resolve the cpu arch when the --deviceType is provided, 2024-04-17)

7c7f46fe (Deduplicate dependencies, 2024-04-16)
b29aae18 (Mark node 20.6.0 as the minimum working version, 2024-04-16)

d01461ff (Deduplicate dependencies, 2024-04-10)
2a970478 (Enable npm dedupe as part of Renovate postUpdateOptions, 2024-04-01)

6178f34f (Bump patch-package to 6.5.1, 2024-04-09)
c5ecf692 (npm-shrinkwrap.json: Recreate with lockfileVersion 3, 2024-04-09)

bb4713ab (Move klaw library to dev dependency, 2024-03-14)

634ad156 (Update @balena/lint to 8.0.0, 2024-03-14)

7f11805a (Move macos binary signing to oclif pretarball lifecycle, 2024-03-11)

6515d6ae (Remove patching tmp for windows runners, 2024-03-12)

38a28175 (Add support for macos arm64 builds, 2024-03-11)

756f6b32 (Update dependencies, 2024-03-11)

f9f41eef (Removes signing patches, 2024-03-11)

ecfd4a26 (Remove no longer needed windows oclif patches, 2024-03-07)

2e061845 (Fix windows signing, 2024-03-06)

bf5e61a6 (Update to Node 20, 2024-01-17)

a4a4e33d (Dedupe dependencies, 2024-01-30)
8d6a621b (Fix target state construction with livepush, 2024-01-30)