What semaphoreui/semaphore shipped
Written by FoxPlug from public releases; not affiliated with Semaphoreui. An automatic summary of the public release, pull request and commit data of github.com/semaphoreui/semaphore. Semaphoreui did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- Project host configuration now maps SSH hosts and Git URLs to credentials, with UI controls to create, edit, and delete mappings in project settings [0]. Pull request #4251
- Secrets can now generate private SSH keys on the server, with the option to display public keys for updated secrets [6]. Pull request #3656
- Integrations support HMAC-SHA512 webhook authentication method alongside the existing HMAC-SHA256 option [3]. Pull request #4270
- Git operations on bare-metal installations now forward proxy environment variables and support authentication encoding for internal repositories [1]. Pull request #4197
- Task log timestamps are excluded from text selection so copying output lines doesn't include time column data [2]. Pull request #4266
- Schedule timezone alert can now be dismissed and the dismissal persists across page reloads [4]. Pull request #4267
- Unit tests replaced os.Setenv with t.Setenv for automatic cleanup of environment variable mutations [5]. Pull request #4271
Why it matters
This week adds credential mapping for SSH hosts to streamline repository authentication, generates SSH keys server-side for easier secret management, and improves webhook integrations with additional authentication methods. These changes address configuration pain points for teams managing multiple Git sources and improve bare-metal installation compatibility.
Changelog entry
- feat(host-config): map ssh hosts and git URLs to project credentials Pull request #4251
- feat(secrets): generate private ssh key on server Pull request #3656
- feat(integrations): add HMAC-SHA512 webhook auth method Pull request #4270
- fix(git): forward proxy environment vars and support auth encoding in bare metal installations Pull request #4197
- fix(ui): exclude log timestamps from text selection Pull request #4266
- fix(ui): make schedule timezone alert dismissible Pull request #4267
- chore(tests): replace os.Setenv with t.Setenv Pull request #4271
New in Semaphore: map SSH hosts to project credentials, generate SSH keys server-side, HMAC-SHA512 webhooks, improved Git auth on bare-metal, and better log copy-paste behavior.
This week's Semaphore updates focus on credential management and authentication improvements. Projects can now map SSH hosts and Git URLs to specific credentials with UI controls. SSH key generation moves to the server for better secret handling. Webhook integrations gain HMAC-SHA512 support. Bare-metal installations get improved proxy and authentication encoding for Git operations. Task logs handle copy-paste better by excluding timestamps.
More from semaphoreui/semaphore on GitHub
Merged pull requests
- feat(host-config): map ssh hosts and git URLs to project credentials (#4251, merged September 25, 2026 by befika) (source)
- fix(git): forward proxy environment vars and support auth encoding in bare metal installations (#4197, merged September 24, 2026 by NewMayur) (source)
- fix(ui): exclude log timestamps from text selection (#4266, merged September 23, 2026 by EyJunge1) (source)
- feat(integrations): add HMAC-SHA512 webhook auth method (#4270, merged September 23, 2026 by EyJunge1) (source)
- fix(ui): make schedule timezone alert dismissible (#4267, merged September 22, 2026 by EyJunge1) (source)
- chore(tests): replace os.Setenv with t.Setenv (#4271, merged September 22, 2026 by EyJunge1) (source)
- Gracefully stop and clean up local task process groups (#4228, merged September 18, 2026 by rzaitov) (source)
- Adding username to task logging (#4239, merged September 14, 2026 by JRNC) (source)
- feat: suppress error notifications per template (#4232, merged September 11, 2026 by EyJunge1) (source)
- feat(auth): session duration (#4227, merged September 10, 2026 by fiftin) (source)
- fix(runner): authenticate unregister requests (#4214, merged September 10, 2026 by souryogurt) (source)
- feat(runners): add server-side debug diagnostics (#4222, merged September 10, 2026 by souryogurt) (source)