This release focuses on dependency updates and bug fixes. Thanks to new contributors @3dbrows and
@glenngillen for their contributions!
✨ New Features
• Added support for custom TLS CA certificates via INFRACOST_TLS_CA_CERT_FILE when communicating
with VCS by @3dbrows in #3492.
🐛 Fixes
• Fixed handling of GIT_SSL_CAINFO environment variable by @3dbrows in #3494.
• Resolved master build failures by @aliscott in #3525.
• Updated Google golden files and removed legacy Slack option by @aliscott in #3529.
• Fixed Azure public IP test to use Standard SKU by @aliscott in #3532.
🔒 Security & Maintenance
• Upgraded Go to address CVEs (including CVE-2025-68121 and CVE-2026-25679) by @owenrumney and
@aliscott in #3503 and #3530.
• Resolved Dependabot security alerts and updated dependencies by @aliscott and @dependabot in
multiple PRs.
🛠️ Enhancements
• Increased Azure PR comment API version to 7.1 by @vdmgolub in #3488.
• Added message size limits for Azure Repos comments by @owenrumney in #3505.
• Updated contribution and request management guidelines by @glenngillen in #3507.
