OCI Security Policies, appStack-Owned Modules, and Dashboards GA
The July 2026 weekly v2026.7.11 release adds security policies for OCI, and lets Project DevOps users create and publish appStack-owned custom modules. Project and Admin (Tenant) Dashboards are available to all customers. Bug fixes cover the OCI security policy provider icon, saving attributes when a required tag is empty, and Backstage plugin reliability.
Aiden updates for this release, including Aiden for DevOps, Slack app interaction, workspace chat, and GitHub Knowledge Hub, are in Aiden v2026.7.11.
Explore the sections below to see what's new, enhanced, and fixed in this update.
| Feature | Link | |
|---|---|---|
| What's New | Governance | OCI Security Policies |
| Custom Modules | Project DevOps appStack-Owned Module Publishing | |
| What's Enhanced | Dashboards | Project and Admin Dashboards General Availability |
| What's Fixed | Governance | OCI Security Policy Provider Icon |
| Topology | Save Attributes with Empty Required Tag | |
| Integrations | Backstage Plugin Reliability |
What's New
OCI Security Policies
Click to view
We've added support for security policies on Oracle Cloud Infrastructure (OCI).
Previously, early-access OCI work focused on provider support, custom modules, and CLI plan and apply (v2026.7.3 and follow-on fixes). Now, you can author and use security policies for OCI the same way you govern other supported providers with OPA/Rego security policies.
Key Features
- OCI Security Policy Support - Create and apply security policies that target OCI modules or resources in your governance setup.
- Same Governance Path - Assign policies through Governance Configurations so projects and appStacks pick them up like other security policies.
Why It Matters
OCI appStacks can be checked against organization security and compliance rules inside StackGen, not only built and provisioned.
Read more in Custom Policies and OCI provider early access.
Project DevOps appStack-Owned Module Publishing
Click to view
We've expanded who can own the appStack-owned custom module lifecycle inside a project.
Previously, creating and publishing appStack-owned custom modules often needed a higher-scoped Admin or Enterprise DevOps role. Now, the DevOps role at project scope can create appStack-owned modules and publish them back to the appStack from the Custom Module Editor.
Key Features
- Create in Project Scope - Project DevOps users can create appStack-owned custom modules for appStacks in their project.
- Publish to appStack - After you edit Terraform source or
.stackgen/stackgen.yaml, click Publish to appStack. Placed instances on the Topology canvas pick up the updated schema. - In-Place Sync - Existing attribute values on placed nodes stay in place when you publish. New required fields show a warning until you fill them.
Why It Matters
Project DevOps teams can iterate on appStack-local modules without waiting on enterprise-scoped roles, while catalog and enterprise sharing rules for shared modules stay unchanged.
Read more in Edit and Sync appStack-Owned Modules, Custom Module, and RBAC for Custom Modules.
What's Enhanced
Project and Admin Dashboards General Availability
Click to view
We've made the Project Dashboard and Admin (Tenant) Dashboard available to all customers.
Previously, these dashboards were introduced earlier and were not rolled out to every tenant. Now, every customer can use them for project and tenant landing views, setup checklists, and quick links into the areas that still need attention.
Key Features
- Project Dashboard - Project Admins and DevOps see project health (appStacks, members, modules, environments), a setup guide, and quick actions. Developers do not see this dashboard, by design.
- Admin / Tenant Dashboard - Admin and DevOps users get a tenant-level view of projects, members, governance, and onboarded modules, plus a tenant setup guide.
- Setup Continuity - If you skip optional steps during project or tenant setup, finish them later from the dashboard checklist.
Why It Matters
Admins and DevOps users in every tenant get the same landing pages and setup follow-up paths.
Read more in Project Dashboard and StackGen UI.
What's Fixed
OCI Security Policy Provider Icon
Click to view
We fixed an issue where security policies for OCI modules showed the wrong cloud provider icon.
Previously, an OCI security policy could display a GCP, Azure, or AWS icon instead of the OCI icon. OCI security policies now show the correct OCI provider icon.
Read more in Custom Policies.
Save Attributes with Empty Required Tag
Click to view
We fixed an issue that blocked saving attributes when a required tag attribute was left empty.
Previously, leaving a required tag empty could prevent you from saving other attribute changes on the resource. You can now save attributes even when a required tag attribute is still empty. Complete required tags before you rely on plan or apply if your module or policy expects them.
Read more in Custom Module Rendering.
Backstage Plugin Reliability
Click to view
We shipped reliability and behavior fixes for the StackGen Backstage plugin based on customer-reported issues.
Previously, some Backstage plugin flows needed follow-up fixes for stability and expected behavior. Those updates are included in this release window.
Read more in Install StackGen-Backstage Plugin and Backstage User Guide.