v7.9.0

7.9.0 (2026-07-04)

Features

• add bidirectionalLabelMatch option and deprecate exactMatch (#5031) (4ccbde6)
• runners: tag EC2 fleets (#5197) (7c0b62b)
• support dedicated host ec2 overrides (#5191) (37fa3a8)
• support per-runner-flavor SQS batch size and window in multi_runner_config (#5108) (ecfdfdb)
• tag runners with github labels (#5185) (d3097b4)
• webhook: configurable queue selection for matching runners (#5190) (5f69910)

Bug Fixes

• deps: bump step-security/harden-runner from 2.17.0 to 2.19.4 (#5200) (c00d4c2)
• deps: bump the github group with 4 updates (#5198) (43d77fe)
• deps: bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#5199) (521efb7)
• examples: disable background apt services in multi-runner user-data (#5141) (b738b86)
• lambda: bump form-data from 2.5.5 to 2.5.6 in /lambdas (#5196) (a487f7d)
• pool: clamp pool top-up to runners_maximum_count (#5187) (a4ecd11)
• prevent EC2 termination when GitHub runner de-registration fails (#5061) (8068fa6)
• remove unused aws-lambda package to eliminate aws-sdk v2 dependency (#5088) (56f9ae8)
• runner: handle long prefixes in pool scheduler and IAM resource names (#5139) (76a572a)
• scale-down: respect bypass-removal tag for orphaned runners (#5194) (5c9f9b4)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/33865270
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.8.0

7.8.0 (2026-06-24)

Features

• runners: add volume_initialization_rate to block_device_mappings (#5165) (449df46), closes #5163
• support dynamic EC2 placement and block device overrides (#5178) (58fd1c2)
• webhook: enforce per-runner dynamic labels policy in dispatcher (#5172) (d624d96)

Bug Fixes

• ci: restore persist-credentials for gh-pages deploy (#5162) (9955d73)
• codeowners: require admin review for nested .github paths (#5164) (83ea30c)
• mac: handle RunInstances scale errors (#5183) (7d8c576)
• scale-up: prevent runnerLabels accumulation across dynamic label groups (#5176) (246949e), closes #5175

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/32494955
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.7.1

7.7.1 (2026-06-11)

Bug Fixes

• runners: fix type mismatch in pool role conditional (#5156) (60de50f)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/30790016
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.7.0

7.7.0 (2026-06-11)

Features

• Add feature to enable dynamic ec2 config via workflow labels (#5003) (c68445d)
• add support for macos runners (#4930) (3e179a3)
• Introduce Amazon Linux 2023 ARM image (#4780) (e572ae5)
• relax cpu_options schema and add amd_sev_snp + nested_virtualization support (#5039) (5a3746d)
• runner-role: Enable using separate IAM role for runners (#4875) (6642e57)

Bug Fixes

• ci: sign auto-generated docs commits (#5154) (a6af4d2)
• runners: wire job_retry.lambda_memory_size and lambda_timeout (#5120) (404785e)
• scale-up: Add ec2:TerminateInstances permission to scale-up Lambda IAM policy (#5152) (94c4e12)
• scale-up: prevent negative TotalTargetCapacity when runners exceed maximum (#5062) (9ab7410)
• webhook: Fix publish events to EventBridge (#5143) (a72b737)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/30739770
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.6.1

7.6.1 (2026-06-10)

Bug Fixes

• lambda: bump @babel/plugin-transform-modules-systemjs from 7.23.9 to 7.29.4 in /lambdas (#5119) (b57166a)
• lambda: bump axios from 1.12.2 to 1.17.0 in /lambdas (#5149) (e9e888e)
• lambda: bump axios from 1.13.5 to 1.16.0 in /lambdas (#5144) (8b3002a)
• lambda: bump fast-uri from 3.0.6 to 3.1.2 in /lambdas (#5118) (6111418)
• lambda: bump fast-xml-builder from 1.1.4 to 1.2.0 in /lambdas (#5117) (ab5eda4)
• lambda: bump lodash-es from 4.17.23 to 4.18.1 in /lambdas (#5090) (b47bd2a)
• lambda: bump postcss from 8.5.6 to 8.5.15 in /lambdas (#5147) (cb099e5)
• lambda: bump qs from 6.14.2 to 6.15.2 in /lambdas (#5127) (753f7fb)
• lambda: bump tmp from 0.2.4 to 0.2.7 in /lambdas (#5138) (3507ca9)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/30561099
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.6.0

7.6.0 (2026-04-01)

Features

• runner: add source parameter to distinguish between scale-up and pool lambda (#5054) (efbaa6f)

Bug Fixes

• lambda: bump flatted from 3.3.1 to 3.4.2 in /lambdas (#5075) (67a70d7)
• lambda: bump path-to-regexp from 8.2.0 to 8.4.0 in /lambdas (#5082) (25ec471)
• lambda: bump the aws group in /lambdas with 7 updates (#5071) (c3dcce2)
• logging: update log_class to log_group_class in CloudWatch agent configuration (#5073) (6d3b7db)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/23221586
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.5.0

7.5.0 (2026-03-11)

Features

• lambdas: add batch SSM parameter fetching to reduce API calls (#5017) (24857c2)
• logging: add log_class parameter to runner log files configuration (#5036) (3509d4c)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/21060713
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.4.1

7.4.1 (2026-03-09)

Bug Fixes

• gracefully handle JIT config failures and terminate unconfigured instance (#4990) (c171550)
• install-runner.sh: support Debian (#5027) (7755b7f) @gmccue
• lambda: add jti claim to GitHub App JWTs to prevent concurrent collisions (#5056) (07bd193), closes #5025
• lambda: bump @octokit/auth-app from 8.1.2 to 8.2.0 in /lambdas in the octokit group (#5035) (1c8083e)
• lambda: bump axios from 1.13.2 to 1.13.5 in /lambdas (#5028) (0335e3a)
• lambda: bump qs from 6.14.1 to 6.14.2 in /lambdas (#5032) (6dc97d5)
• lambda: bump rollup from 4.46.2 to 4.59.0 in /lambdas (#5052) (1e798b1)
• lambda: bump the aws group in /lambdas with 7 updates (#5021) (c3c158d)
• lambda: bump the aws-powertools group in /lambdas with 4 updates (#5022) (e8369cf)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/20850648
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.4.0

7.4.0 (2026-02-04)

Features

• control-plane: tag control plane created SSM Parameters (#4833) (#4834) (7e1a0a1) @wadherv
• use prefix variable for POWERTOOLS_SERVICE_NAME in Lambda functions (#4948) (8bd61d2) @alexalbu001

Bug Fixes

• add SSM AMI parameter permissions and environment-based naming (#5016) (1a7158b)
• job retry mechanism not triggering (#4961) (5039ae5)
• lambda: bump diff from 4.0.2 to 4.0.4 in /lambdas (#5004) (cd86fe6)
• lambda: bump lodash-es from 4.17.21 to 4.17.23 in /lambdas (#5006) (c638e38)
• lambda: bump the aws group in /lambdas with 7 updates (#4998) (d373bcc)

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/18192758
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner

v7.3.0

7.3.0 (2026-01-13)

Features

• add bypass-removal tag to prevent runner scale-down (#4995) (c0a9766)

Bug Fixes

• cache GitHub App ID to reduce SSM calls (#4994) (0fb6f4a)
• change runner_placement host_resource_group_arn type to be a string instead of a number (#4979) (5405a04)
• lambda: bump the aws group in /lambdas with 7 updates (#4985) (5eacb0f)
• runners: correct regex pattern for extracting AMI ID from SSM parameter ARN (#4981) (174293c), closes #4959

Attestation

Attestation url: https://github.com/github-aws-runners/terraform-aws-github-runner/attestations/16551868
Verify the artifacts by running gh attestation verify <name_of_artifact> --repo github-aws-runners/terraform-aws-github-runner