Skip to main content
October 30, 2026

​
Scoped credentials

  • Service account tokens replace personal tokens for API and CI access, each with one role in one org
  • Runners use short-lived credentials, scoped to each job
Move CI and scripts to service account tokens. Personal tokens keep working until you revoke them.

Nuon's security model

​
One-click drift fixes

  • See drift and undeployed changes together on each install
  • Redeploy just the component that drifted
An install's Components page with Changes not applied and State drift detected groups, each resource showing a Resolve drift button

Drift detection docs

​
Other updates in this release

​
Upgrade the CLI

CLI login got a security update, so nuon auth login fails on versions older than v0.19.1261. Run brew upgrade nuonco/tap/nuon.

​
More accurate change previews

Change previews now catch edits in nested settings, like deployment options, health checks, permissions, secrets, actions and runbooks.

​
Skip applies with policies

Give a policy check custom.action: skip_apply, and Nuon skips the apply for any Terraform component or sandbox it matches. Components that depend on it still get its last outputs.

Configuring policies

​
Pull request previews

See what a pull request would change before you merge it. Each open pull request on an app branch gets a page with its config diff, commit, and preview step status.
Pull request previews are in early access. Contact us to turn them on for your org.

​
CLI versions for BYOC control planes

If you run a Nuon BYOC control plane in your own cloud, install the CLI version that matches it alongside the latest. The control plane can also set the oldest CLI it accepts. Teammates and CI on an older CLI get a warning or an error that names the version to install.