Automatic updates
The runner automatically updates itself with new features, improvements, and security patches. No action required.- Updates are non-disruptive to running environments
- Failed updates automatically roll back
- View current version at Settings → Runners
- Update activity is logged to CloudWatch
Set update window
By default, automatic updates can occur at any time. You can restrict updates to a specific daily time window (UTC) to align with your maintenance schedule.- Navigate to Settings → Runners and select your runner
- Scroll to Runner Configuration
- Enable Set update window
- Select a Start hour and End hour (UTC). The window must be at least 2 hours long. Overnight windows are supported (e.g., 22:00 to 04:00 UTC).
-
Click Save Configuration

The update window controls when routine automatic updates are applied. It does not affect manual infrastructure upgrades via CloudFormation.In rare cases, Ona may push a hotfix release that bypasses the update window. Hotfixes are reserved for fixes to functional degradation of the runner or critical security patches. You will be notified before a hotfix is applied.
Upgrade runner infrastructure
When a new CloudFormation template version is available, you can upgrade your runner infrastructure directly from the Ona dashboard.- Navigate to Settings → Runners and select your runner
-
Open the runner menu (three-dot icon) and click Upgrade runner

-
Follow the instructions in the upgrade dialog — it provides the template URL for your runner

- Open your runner’s CloudFormation stack in the AWS console
-
Click Update → Replace existing template and enter the template URL from the dialog

- Review parameters and complete the wizard
Templates from January 2025 or earlier have SSH port changes. Before upgrading, stop and discard existing environments, or add port 22 to your security group.
Update parameters
To change VPC, subnets, or other settings without updating the template:- Open your runner’s CloudFormation stack
-
Click Update → Use existing template

- Adjust parameters and complete the wizard
Expanding availability zones
Availability is determined by your subnets, not the AZ parameter. Use the VPC Resource Map in AWS console to find subnets for your desired AZs.
