Changelog

Step insight and flaky tests

• Every step in every job carries a timing, and each run is compared against its own history per workflow and matrix leg. Slower-than-usual steps are called out on the run.
• JUnit, TAP and CTRF reports are discovered in the job workspace with no workflow change. A test that disagreed with itself at one commit is named on the pull request as one warning — never a second failure.

Provenance and reproduction

• Every push leaves a verdict for every workflow file, including the ones that ran nothing, naming the filter that said no as the workflow wrote it.
• apex reproduce prints the exact command that reproduces a past run locally, with every secret named and never carried. It is not yet available to customer accounts.

Gates, environments, schedules and OIDC

• concurrency groups with cancel-in-progress, at run and job level.
• environment with required reviewers, wait timers and branch policies.
• on: schedule, on: workflow_run and on: repository_dispatch.
• permissions, resolved as GitHub resolves them, with id-token: write for short-lived cloud credentials. GITHUB_TOKEN is minted per job for its own repository and narrowed by permissions:.
• Remote reusable workflows.

Artifacts

• actions/upload-artifact and actions/download-artifact (v4), with retention.

Cache

• actions/cache and everything built on @actions/cache, with the same key and restore-key semantics.

Larger runners

• Named sizes apex-2core, apex-4core and apex-8core (arm64), and apex-2core-x64 and apex-4core-x64, included in every plan.