Monthly release of Bitrise CLI tools and summary of updates (April, 2018) - CLI v1.15.0

bitrise-tools
announcements
bitrise-cli
#1

We ship a new bitrise cli version on the second Tuesday of every month.
The new release will be available on the bitrise.io
virtual machines on the weekend after the CLI release,
unless we discover any serious bug/regression.

Read on to learn more about this month’s Bitrise CLI release and about the changes around Bitrise tools and steps.


New version of Bitrise CLI (1.15.0)

1. Bitrise secret filtering

From this version, bitrise-cli can filter your secrets from the build log.

Set BITRISE_SECRET_FILTERING to true in your secrets to enable the new feature. The new functionality can hide single and multiline secrets in the log.

NOTE: Secrets with at least 6 characters will be replaced with [REDACTED] pattern in the build log.

Example:

.bitrise.secrets.yml

envs:
- BITRISE_SECRET_FILTERING: true
- MY_SSH_KEY: |
    -----BEGIN RSA PRIVATE KEY-----
    bitrise_testmfsjOSsRK7+uFr1g4jvIz/yoDrSMRcKrBi/c+iJr+aO8xIb7j2WQ
    5F4h84OLEkQEmfsjOSsRK7+uFr1g4jvIz/yoDrSMRcKrBi/c+iJr+aO8xIb7j2WQ
    sPXxhoOj4kuoxqFjrQMGyDZ+uIJMD9D+vsov4iDvIBrMkn2TuD/o1X9oISEhDw1l
    3tsWqgFxpZprcMw64rdEOJ/7+aJczWvi37kGYjQ4wvSnD+MEoFZIM3fhxDDcxb+I
    COjv7Y+Ta++KGjhyu5OJjTAzFyjal0ub0VaVdu8Vg6tAr1grdhQayPYXZqd1TqaU
    kniMwxz4hAg+QbhsdSlKzQjgbJJhzn3shiK7kMxL7DrUmhoIgQ1QMUERj4Lt8y9I
    J3zHmSq27IEXSzwBIL0JRAsKfcq914f3S2tbyQUi2doJTMxWDgcaL6jkzjCwmCx/
    bitrise_testmfsWwlaF+Y0w0xVfAcABHdYjWHx2UHP02EC1ZGUAqF9z6XaCV8l9
    oMHHu9lvWKuxpVNPcGY/kR3G897Qn+6vE3yuVwbD4reu0IHAWZzBgt7e3we5
    -----END RSA PRIVATE KEY-----

bitrise.yml

format_version: 5
default_step_lib_source: https://github.com/bitrise-io/bitrise-steplib.git

workflows:
  primary:
    steps:
    - script:
        inputs:
        - content: |
            #!/usr/bin/env bash
            echo "My ssh key: $MY_SSH_KEY"

bitrise run primary

+------------------------------------------------------------------------------+
| (0) script                                                                   |
+------------------------------------------------------------------------------+
| id: script                                                                   |
| version: 1.1.5                                                               |
| collection: https://github.com/bitrise-io/bitrise-steplib.git                |
| toolkit: bash                                                                |
| time: 2018-04-10T10:10:35+02:00                                              |
+------------------------------------------------------------------------------+
|                                                                              |
WARN[10:10:36] Secret filtering enabled
My ssh key: [REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
[REDACTED]
|                                                                              |
+---+---------------------------------------------------------------+----------+
| ✓ | script                                                        | 2.46 sec |
+---+---------------------------------------------------------------+----------+

2. Step Development Guideline updated with Step icon convention section

3. bitrise update command got improvements

  • better log messages
  • avoid updating if the current version is the latest

4. Tools update

  • envman update to version 1.1.12
  • stepman update to version 0.9.40

5. Default plugins update

  • workflow-editor plugin update to version 1.1.14

6. Go version for toolkit bumped to 1.10.1

7. Go dependencies update


New version of Stepman (0.9.40)

go dependencies update


New version of Envman (1.1.12)

go dependencies update


New steps

  • android-lint 0.9.0
  • android-unit-test 0.9.0
  • appcenter-codepush-release-react-native 0.0.1
  • create-zip 0.9.0
  • dropbox 1.0.3
  • microsoft-teams-integration 1.0.1

Step updates

  • android-build 0.9.1:
    • initial version of the step
    • updated type_tags
  • authenticate-with-github-oauth 0.9.1:
    • added github assets domain
  • change-android-versioncode-and-versionname 1.0.1:
    • updated step input descriptions
  • deploy-to-itunesconnect-deliver 2.13.2:
    • NEW INPUT: itms_upload_parameters - Transporter delivery method
    • step definition update
    • copy the .ipa/.pkg to tmp folder
  • fabric-crashlytics-beta-deploy 2.2.3:
    • fix project type tags
  • git-clone 4.0.10:
    • fetch only the affected branches
  • github-status 2.1.0:
    • New input: description - A short description of the status
  • gitlab-status 0.9.5:
  • google-play-deploy 1.4.3:
    • updated untrack blocking versions logic
    • added internal option
  • ios-auto-provision 1.0.1:
    • fix for missing TargetAttributes issue
    • fixed new device registration
    • fixed older certificate warning
    • check if the managed profile is not expired and contains the provided certificate
    • better error message if manages profile does not yet exist on dev portal
    • support iOS projects with Xcode’s Automatically manage signing option
  • npm 0.9.1:
    • added printing npm version
  • parse-composer-results 0.0.2:
    • add COMPOSER_ prefix to output variable names
    • initial release
  • project-scanner 1.6.3:
    • dependency update
  • twitter-message 1.0.2:
  • yarn 0.0.7:
2 Likes

Weekly Virtual Machine / Stack updates - 2018.04.14
Protected secrets are printed in logs when used as arguments to xcodebuild