What's Changed
- [Security] Fix path traversal bug during secrets lookup. Resolves GHSA
- workaround root.MkdirAll bug for Windows workers https://github.com/concourse/concourse/pull/9637
- scheduler: fix scheduling for jobs with
serial: trueandcheck_every: neverresource(s) https://github.com/concourse/concourse/pull/9670
📦 Bundled Resource Types
- bosh-io-release: [v1.3.4](https://github.com/concourse/bosh-io-release-resource/releases/tag/v1.3.4)
- bosh-io-stemcell: [v1.5.4](https://github.com/concourse/bosh-io-stemcell-resource/releases/tag/v1.5.4)
- docker-image: [v1.13.1](https://github.com/concourse/docker-image-resource/releases/tag/v1.13.1)
- git: [v1.22.3](https://github.com/concourse/git-resource/releases/tag/v1.22.3)
- github-release: [v1.14.0](https://github.com/concourse/github-release-resource/releases/tag/v1.14.0)
- hg: [v1.5.4](https://github.com/concourse/hg-resource/releases/tag/v1.5.4)
- mock: [v0.14.5](https://github.com/concourse/mock-resource/releases/tag/v0.14.5)
- pool: [v1.8.1](https://github.com/concourse/pool-resource/releases/tag/v1.8.1)
- registry-image: [v1.17.0](https://github.com/concourse/registry-image-resource/releases/tag/v1.17.0)
- s3: [v2.5.4](https://github.com/concourse/s3-resource/releases/tag/v2.5.4)
- semver: [v2.0.1](https://github.com/concourse/semver-resource/releases/tag/v2.0.1)
- time: [v1.11.3](https://github.com/concourse/time-resource/releases/tag/v1.11.3)
Full Changelog: https://github.com/concourse/concourse/compare/v8.2.4...v8.2.5