Skip to content

Releases: tektoncd/pipeline

Tekton Pipeline release v0.59.3 "Scottish Fold Sox"

06 Aug 08:26
Compare
Choose a tag to compare

-Docs @ v0.59.3
-Examples @ v0.59.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.3/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.3/release.yaml
REKOR_UUID=24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.3@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.59.x] Refine check if the result is from a matrix task (#8168)

ixed variable substitution of results from matrix TaskRuns with cardinality of 1.

  • πŸ› [release-v0.59.x] Perform matrix results validation on only result ref params (#8119)

Perform matrix results validation on only result ref params

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.3!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.62.0 "Birman HAL LTS"

25 Jul 23:24
Compare
Choose a tag to compare

πŸŽ‰ Ignore Task Failure Promoted and native sidecars adopted with k8s 1.29 πŸŽ‰

-Docs @ v0.62.0
-Examples @ v0.62.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.0/release.yaml
REKOR_UUID=24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ access taskRun reason in addition to status in finally task (#8127)

Access reason in addition to the status using $(tasks.taskName.reason)

  • ✨ Capture Remote StepAction Location in TaskRun Status (#8106)

Capture Remote StepAction Location in TaskRun Status

  • ✨ Add isBuildArtifact field to Artifacts (#8103)

Add isBuildArtifact field to Artifacts.

  • ✨ Promote Tasks to beta (#8090)

Promote Ignore Task Failure to Beta

  • ✨ feat(K8s native sidecar): Add support for Kubernetes native Sidecars (#8052)

Introducing a feature to adopt Kubernetes-native sidecars, which designates sidecar containers as initContainers. This prevents the need to pull and replace a nop image, leading to faster termination of the sidecars without unnecessary pod errors. Set enable-kubernetes-sidecar to true for Kubernetes 1.29 and later to take advantage of this feature.

  • ✨ kind/feat: passing artifacts between tasks (#7978)

Support passing artifacts between tasks in a pipeline

  • ✨ feat: introduce when expressions to steps (#7746)

introduce when expressions to steps.

  • ✨ [TEP-0094] Promote taskrun.spec's stepSpecs and sidecarSpecs to beta (#8006)

Fixes

  • πŸ› fix(pipelinerun): block pipelinerun spec updates once the pipelinerun has started (#8149)

Fix: Once a PipelineRun is created, most of the fields in the spec is not allowed to be updated; only status can be updated.

  • πŸ› fix(taskrun): block taskrun spec updates once the taskrun has started (#8147)

Fix: Once a TaskRun is created, most of the fields in the spec is not allowed to be updated; only status and statusMessage can be updated.

  • πŸ› DryRunValidate returns the mutated object (#8108)

DryRunValidate returns the mutated object

  • πŸ› Fix step action force replacing with default param (#8102)

Fix incorrect param type passed to stepaction makes it use default value

  • πŸ› Perform matrix results validation on only result ref params (#8089)

Perform matrix results validation on only result ref params

  • πŸ› Fix error message when a PipelineRun param is missing (#8072)

Improved error string when a param is missing from a PipelineRun

  • πŸ› fix:when debug.breakpoints.onFailure is an empty string, redundant volumes appear (#7788)

debug.breakpoints.onFailure is not allowed to be set to an empty string.

Misc

  • πŸ”¨ Switch the image from docker.io to gcr mirror (#8146)
  • πŸ”¨ Bump github/codeql-action from 3.25.12 to 3.25.13 (#8144)
  • πŸ”¨ Bump step-security/harden-runner from 2.8.1 to 2.9.0 (#8143)
  • πŸ”¨ Bump the all group in /tekton with 2 updates (#8142)
  • πŸ”¨ Bump github.com/containerd/containerd from 1.7.18 to 1.7.20 (#8139)
  • πŸ”¨ Bump k8s.io/client-go from 0.27.15 to 0.27.16 in /test/custom-task-ctrls/wait-task-beta (#8138)
  • πŸ”¨ Bump k8s.io/code-generator from 0.29.6 to 0.29.7 (#8137)
  • πŸ”¨ Bump tekton-releases/dogfooding/koparse from e6641f2 to 0535413 in /tekton in the all group across 1 directory (#8135)
  • πŸ”¨ Bump the all group across 1 directory with 4 updates (#8134)
  • πŸ”¨ use tagged images to take advantage of the least expensive default image pull policy (#8133)
  • πŸ”¨ Bump k8s.io/api from 0.27.15 to 0.27.16 in /test/custom-task-ctrls/wait-task-beta (#8132)
  • πŸ”¨ Bump k8s.io/apimachinery from 0.29.6 to 0.29.7 (#8131)
  • πŸ”¨ Bump actions/dependency-review-action from 4.3.3 to 4.3.4 (#8125)
  • πŸ”¨ Bump github/codeql-action from 3.25.11 to 3.25.12 (#8124)
  • πŸ”¨ Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#8104)
  • πŸ”¨ Released patch release: v0.59.2 (#8098)
  • πŸ”¨ Bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 (#8092)
  • πŸ”¨ Bump the all group in /tekton with 4 updates (#8087)
  • πŸ”¨ Bump github/codeql-action from 3.25.10 to 3.25.11 (#8085)
  • πŸ”¨ chore: remove unsupported configurations ScopeWhenExpressionsToTask (#8078)
  • πŸ”¨ Create release v0.61.0. (#8077)
  • πŸ”¨ Bump the all group in /tekton with 4 updates (#8075)
  • πŸ”¨ Bump tj-actions/changed-files from 44.5.2 to 44.5.5 (#8074)
  • πŸ”¨ Bump github.com/spiffe/spire-api-sdk from 1.9.6 to 1.10.0 (#8073)
  • πŸ”¨ Using image with "full" reference in tests (#8070)
  • πŸ”¨ Bump github.com/jenkins-x/go-scm from 1.14.34 to 1.14.37 (#8032)
  • πŸ”¨ Correct error message to differentiate the cause (#8027)

Docs

  • πŸ“– Update min kubernetes version in the install doc (#8122)
  • πŸ“– document failureIgnored (#8111)
  • πŸ“– update the doc since the onError is now promoted (#8109)

Thanks

Thanks to these contributors who contributed to v0.62.0!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.53.8 "Chartreux Rachael"

06 Aug 11:39
Compare
Choose a tag to compare

-Docs @ v0.53.8
-Examples @ v0.53.8

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml
REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.8@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.53.x] Perform matrix results validation on only result ref params (#8121)

Perform matrix results validation on only result ref params

  • πŸ› [release-v0.53.x] Handle error conditions in CheckMissingResultReferences (#8095)

mproved error handling for some invalid result reference scenarios.

  • πŸ› [release-v0.53.x] Cleanup resolved object before validating through dry-run (#8065)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.53.8!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.61.1 "Ragdoll Data"

09 Jul 14:57
Compare
Choose a tag to compare

-Docs @ v0.61.1
-Examples @ v0.61.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml
REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.61.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.61.x] Handle error conditions in CheckMissingResultReferences (#8105)

mproved error handling for some invalid result reference scenarios.

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.61.1!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.59.2 "Scottish Fold Sox"

04 Jul 23:40
Compare
Choose a tag to compare

-Docs @ v0.59.2
-Examples @ v0.59.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml
REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.59.x] fix: resolve issue where results may not be obtained from sidecar logs (#8097)

ix: resolve issue where results may not be obtained from sidecar logs

  • πŸ› [release-v0.59.x] Handle error conditions in CheckMissingResultReferences (#8093)

mproved error handling for some invalid result reference scenarios.

  • πŸ› [release-v0.59.x] Cleanup resolved object before validating through dry-run (#8063)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.2!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.56.6 "Persian Terminator"

08 Jul 20:25
Compare
Choose a tag to compare

-Docs @ v0.56.6
-Examples @ v0.56.6

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.6/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.6/release.yaml
REKOR_UUID=24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.6@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.56.x] Handle error conditions in CheckMissingResultReferences (#8094)

mproved error handling for some invalid result reference scenarios.

  • πŸ› [release-v0.56.x] Cleanup resolved object before validating through dry-run (#8064)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.56.6!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.61.0 "Ragdoll Data"

25 Jun 22:43
Compare
Choose a tag to compare

-Docs @ v0.61.0
-Examples @ v0.61.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.0/release.yaml
REKOR_UUID=24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.61.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ Promote Larger Results via Sidecar Logs to Beta (#8043)

Promote Larger Results via Sidecar Logs to Beta

  • ✨ Add a flag on controllers to configure resyncPeriod (#8023)

Binary file (standard input) matches

Fixes

  • πŸ› Cleanup resolved object before validating through dry-run (#8051)

Cleanup resolved object before attempting to validate it through api dry-run call

  • πŸ› fix: resolve issue where results may not be obtained from sidecar logs (#8029)

fix: resolve issue where results may not be obtained from sidecar logs

  • πŸ› Fix Validation Error Merging StepTemplates with StepRef (#7982)

Fix Validation Error Merging StepTemplates with Step's Ref

  • πŸ› Bundle resolver can use ServiceAccount for auth (#7969)

Fix bundle resolver so it could pull OCI image (bundle) manifest from AWS ECR private registry

  • πŸ› Fix: Example Test point to Catalog StepAction (#8044)

Misc

  • πŸ”¨ Remove taskref/pipelineref deprecated bundle field (#7789)

taskRef.bundle and pipelineRef.bundle are now removed from v1beta1 API version, as they were deprecated for about a year and half. Using them will result in a error when creating an object.

action required: make sure you migrate from taskRef.bundle and pipelineRef.bundle to the bundle resolver (see https://tekton.dev/docs/pipelines/migrating-v1beta1-to-v1/#replacing-taskrefbundle-and-pipelinerefbundle-with-bundle-resolver-a-idreplacing-taskrefbundle-and-pipelinerefbundle-with-bundle-resolver-a)

  • πŸ”¨ Bump to go 1.22 and fixes (#8035)

ektoncd/pipeline now requires go 1.22 to be built

  • πŸ”¨ Update knative/pkg to release-1.14 (#7989)

he minimum Kubernetes version supported by Tekton is now 1.28.

  • πŸ”¨ Bump k8s.io/code-generator from 0.29.2 to 0.29.6 (#8067)
  • πŸ”¨ Bump k8s.io/client-go from 0.29.2 to 0.29.6 (#8066)
  • πŸ”¨ Bump github/codeql-action from 3.25.8 to 3.25.10 (#8061)
  • πŸ”¨ Bump actions/checkout from 4.1.6 to 4.1.7 (#8060)
  • πŸ”¨ Bump github.com/spiffe/go-spiffe/v2 from 2.2.0 to 2.3.0 (#8059)
  • πŸ”¨ Bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 (#8058)
  • πŸ”¨ Bump the all group in /tekton with 4 updates (#8057)
  • πŸ”¨ Bump k8s.io/client-go from 0.27.14 to 0.27.15 in /test/custom-task-ctrls/wait-task-beta (#8049)
  • πŸ”¨ Bump k8s.io/apimachinery from 0.27.14 to 0.27.15 in /test/custom-task-ctrls/wait-task-beta (#8048)
  • πŸ”¨ Remove bobcatfish and lbernick from OWNERS 😿 (#8047)
  • πŸ”¨ Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#8046)
  • πŸ”¨ Tests before promoting LargerResults via Sidecarlogs to Beta (#8041)
  • πŸ”¨ Bump the all group across 1 directory with 4 updates (#8040)
  • πŸ”¨ Bump actions/dependency-review-action from 4.3.2 to 4.3.3 (#8039)
  • πŸ”¨ Bump github/codeql-action from 3.25.7 to 3.25.8 (#8038)
  • πŸ”¨ Bump step-security/harden-runner from 2.8.0 to 2.8.1 (#8037)
  • πŸ”¨ Bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /tools (#8036)
  • πŸ”¨ README.md: fix Kubernetes min version (#8030)
  • πŸ”¨ Bump github.com/containerd/containerd from 1.7.17 to 1.7.18 (#8026)
  • πŸ”¨ Bump tj-actions/changed-files from 44.5.1 to 44.5.2 (#8014)
  • πŸ”¨ Bump actions/dependency-review-action from 2.5.1 to 4.3.2 (#8013)
  • πŸ”¨ Bump step-security/harden-runner from 2.7.0 to 2.8.0 (#8012)
  • πŸ”¨ Bump github/codeql-action from 3.25.6 to 3.25.7 (#8011)
  • πŸ”¨ Bump actions/checkout from 3.6.0 to 4.1.6 (#8010)
  • πŸ”¨ Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.3 to 1.8.4 (#8007)
  • πŸ”¨ Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.3 to 1.8.4 (#8001)
  • πŸ”¨ Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 (#8000)
  • πŸ”¨ Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.3 to 1.8.4 (#7999)
  • πŸ”¨ Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.3 to 1.8.4 (#7998)
  • πŸ”¨ Bump the all group across 1 directory with 4 updates (#7995)
  • πŸ”¨ Bump step-security/harden-runner from 2.7.1 to 2.8.0 (#7993)
  • πŸ”¨ Bump tj-actions/changed-files from 44.4.0 to 44.5.1 (#7992)
  • πŸ”¨ Bump github.com/golangci/golangci-lint from 1.58.2 to 1.59.0 in /tools (#7991)
  • πŸ”¨ Bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#7985)
  • πŸ”¨ Update releases.md for v0.60 (#7976)
  • πŸ”¨ TEP0152 - Complete V1 conformance test suite (#7913)
  • πŸ”¨ .github/workflows: add a dependency-review workflow (#7846)

Docs

  • πŸ“– Document that task results are not enforced (#8053)
  • πŸ“– Fix the document: Task Level Comp Res is beta (#8004)
  • πŸ“– Patch release v0.60.1 (#7997)

Thanks

Thanks to these contributors who contributed to v0.61.0!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.53.7 "Chartreux Rachael"

08 Jun 13:58
Compare
Choose a tag to compare

-Docs @ v0.53.7
-Examples @ v0.53.7

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.7/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.7/release.yaml
REKOR_UUID=24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.7@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.53.x] Fix: Identify workspace usage in a Task (#8020)

Fix: Identify workspace usage in a Task

  • πŸ› [release-v0.53.x] fix: when using remote resources, the related metrics tag name is wrong (#7957)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.53.7!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.60.2 "Chinchilla Tobor"

08 Jun 12:40
Compare
Choose a tag to compare

-Docs @ v0.60.2
-Examples @ v0.60.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.2/release.yaml
REKOR_UUID=24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.60.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.60.x] Fix: Identify workspace usage in a Task (#8021)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.60.2!

Extra shout-out for awesome release notes:

Tekton Pipeline release v0.59.1 "Scottish Fold Sox"

08 Jun 12:07
Compare
Choose a tag to compare

-Docs @ v0.59.1
-Examples @ v0.59.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.1/release.yaml
REKOR_UUID=24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • πŸ› [release-v0.59.x] fix: when using remote resources, the related metrics tag name is wrong (#7955)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.1!

Extra shout-out for awesome release notes: