This release focuses on dependency updates and bug fixes. Thanks to new contributors @3dbrows and
@glenngillen for their contributions!
✨ New Features
- Added support for custom TLS CA certificates via INFRACOST_TLS_CA_CERT_FILE when communicating
with VCS by @3dbrows in #3492.
🐛 Fixes
- Fixed handling of GIT_SSL_CAINFO environment variable by @3dbrows in #3494.
- Resolved master build failures by @aliscott in #3525.
- Updated Google golden files and removed legacy Slack option by @aliscott in #3529.
- Fixed Azure public IP test to use Standard SKU by @aliscott in #3532.
🔒 Security & Maintenance
- Upgraded Go to address CVEs (including CVE-2025-68121 and CVE-2026-25679) by @owenrumney and
@aliscott in #3503 and #3530.
- Resolved Dependabot security alerts and updated dependencies by @aliscott and @dependabot in
multiple PRs.
🛠️ Enhancements
- Increased Azure PR comment API version to 7.1 by @vdmgolub in #3488.
- Added message size limits for Azure Repos comments by @owenrumney in #3505.
- Updated contribution and request management guidelines by @glenngillen in #3507.
