pipelines-workflows v4.30.0: Faster Auth and Better Hook Errors

Gruntwork released pipelines-workflows v4.30.0 on October 5, 2026. The headline change is a rewrite of cloud authentication that only reads the configuration it needs, which speeds up consolidated plans and applies in large repositories. The release also improves what you see when a hook fails, and fixes a stale artifact cache bug.

The full release notes are on the GitHub release page.

Faster cloud authentication

Authentication during discovery has been rewritten to read only the configuration it needs. Small repositories will see little difference, but large repositories that cannot enable TG_NO_DISCOVERY_AUTH_PROVIDER_CMD should notice a significant improvement on consolidated plans and applies. The maintainers still recommend enabling TG_NO_DISCOVERY_AUTH_PROVIDER_CMD where possible, and there is a performance guide covering it.

Hook error summaries

The Hook API now supports two new output files: PIPELINES_HOOK_OUT_ERROR_SUMMARY_FILE and PIPELINES_HOOK_OUT_ERROR_COMMENT_FILE. Both are read when a hook exits non-zero, so failures can carry a structured summary instead of a wall of stderr.

If a hook fails without writing either file, the Pull Request comment now shows the first 500 characters of its stderr. That is a sane fallback, though writing the summary file gives you more control over what reviewers see.

Environment definition warnings

The orchestrate stage now warns when a unit matches multiple environment filters. If a unit that belongs to more than one environment is being modified, it fails instead. This catches ambiguous configuration before it causes a wrong deployment.

Other fixes

An opt-in feature flag, PIPELINES_FEATURE_EXPERIMENT_COMMIT_AS_TOKEN_OWNER, changes the commit author to match the owner of the push token. The use case in the notes is drift detection commits. There is also a fix for a bug where persistent runners read stale artifact caches.

This is a stable release, not a prerelease. No breaking changes are listed, so upgrading from v4.29.0 should be a straightforward tag bump.

Where to get it

← All updates