Changelog

Per-branch environment variables

Variables can now be scoped to a branch pattern, so preview builds stop borrowing production credentials by accident.

• → Pattern matching supports globs, e.g. release/*
• → Secrets inherit from the default set unless overridden
• → The variable editor now shows which builds used a value last

Runner images split into layers

Base tooling and language runtimes now live in separate layers, which cuts a cold runner start from 41 to 12 seconds.

Cache keys no longer collide across packages

In monorepos, two packages with identical lockfile hashes could share a cache entry. Keys now include the workspace path.

• → Existing entries are invalidated once, on first build
• → Restore logs now print the full key that matched