Tekton Pipeline release v0.61.1 "Ragdoll Data"

-Docs @ v0.61.1
-Examples @ v0.61.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml
REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.61.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.61.x] Handle error conditions in CheckMissingResultReferences (#8105)

mproved error handling for some invalid result reference scenarios.

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.61.1!

• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @tekton-robot

Tekton Pipeline release v0.59.2 "Scottish Fold Sox"

-Docs @ v0.59.2
-Examples @ v0.59.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml
REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.59.x] fix: resolve issue where results may not be obtained from sidecar logs (#8097)

ix: resolve issue where results may not be obtained from sidecar logs

• 🐛 [release-v0.59.x] Handle error conditions in CheckMissingResultReferences (#8093)

mproved error handling for some invalid result reference scenarios.

• 🐛 [release-v0.59.x] Cleanup resolved object before validating through dry-run (#8063)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.2!

• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @tekton-robot
• 😍 @vdemeester

Tekton Pipeline release v0.56.6 "Persian Terminator"

-Docs @ v0.56.6
-Examples @ v0.56.6

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.6/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.6/release.yaml
REKOR_UUID=24296fb24b8ad77a05add089496f3ed6732de3f6804ba228904190bbf37d1a8c2d4c43ad6262e01e

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.6@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.56.x] Handle error conditions in CheckMissingResultReferences (#8094)

mproved error handling for some invalid result reference scenarios.

• 🐛 [release-v0.56.x] Cleanup resolved object before validating through dry-run (#8064)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.56.6!

• ❤️ @tekton-robot
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @tekton-robot
• 😍 @vdemeester

Tekton Pipeline release v0.61.0 "Ragdoll Data"

-Docs @ v0.61.0
-Examples @ v0.61.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.0/release.yaml
REKOR_UUID=24296fb24b8ad77a68cb504006aa006da7ebfef6d88e038545d3f4c2d314ba34f3c1d8a57dab26a8

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.61.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Promote Larger Results via Sidecar Logs to Beta (#8043)

Promote Larger Results via Sidecar Logs to Beta

• ✨ Add a flag on controllers to configure resyncPeriod (#8023)

Binary file (standard input) matches

Fixes

• 🐛 Cleanup resolved object before validating through dry-run (#8051)

Cleanup resolved object before attempting to validate it through api dry-run call

• 🐛 fix: resolve issue where results may not be obtained from sidecar logs (#8029)

fix: resolve issue where results may not be obtained from sidecar logs

• 🐛 Fix Validation Error Merging StepTemplates with StepRef (#7982)

Fix Validation Error Merging StepTemplates with Step's Ref

• 🐛 Bundle resolver can use ServiceAccount for auth (#7969)

Fix bundle resolver so it could pull OCI image (bundle) manifest from AWS ECR private registry

• 🐛 Fix: Example Test point to Catalog StepAction (#8044)

Misc

• 🔨 Remove taskref/pipelineref deprecated bundle field (#7789)

taskRef.bundle and pipelineRef.bundle are now removed from v1beta1 API version, as they were deprecated for about a year and half. Using them will result in a error when creating an object.

action required: make sure you migrate from taskRef.bundle and pipelineRef.bundle to the bundle resolver (see https://tekton.dev/docs/pipelines/migrating-v1beta1-to-v1/#replacing-taskrefbundle-and-pipelinerefbundle-with-bundle-resolver-a-idreplacing-taskrefbundle-and-pipelinerefbundle-with-bundle-resolver-a)

• 🔨 Bump to go 1.22 and fixes (#8035)

ektoncd/pipeline now requires go 1.22 to be built

• 🔨 Update knative/pkg to release-1.14 (#7989)

he minimum Kubernetes version supported by Tekton is now 1.28.

• 🔨 Bump k8s.io/code-generator from 0.29.2 to 0.29.6 (#8067)
• 🔨 Bump k8s.io/client-go from 0.29.2 to 0.29.6 (#8066)
• 🔨 Bump github/codeql-action from 3.25.8 to 3.25.10 (#8061)
• 🔨 Bump actions/checkout from 4.1.6 to 4.1.7 (#8060)
• 🔨 Bump github.com/spiffe/go-spiffe/v2 from 2.2.0 to 2.3.0 (#8059)
• 🔨 Bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 (#8058)
• 🔨 Bump the all group in /tekton with 4 updates (#8057)
• 🔨 Bump k8s.io/client-go from 0.27.14 to 0.27.15 in /test/custom-task-ctrls/wait-task-beta (#8049)
• 🔨 Bump k8s.io/apimachinery from 0.27.14 to 0.27.15 in /test/custom-task-ctrls/wait-task-beta (#8048)
• 🔨 Remove bobcatfish and lbernick from OWNERS 😿 (#8047)
• 🔨 Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 (#8046)
• 🔨 Tests before promoting LargerResults via Sidecarlogs to Beta (#8041)
• 🔨 Bump the all group across 1 directory with 4 updates (#8040)
• 🔨 Bump actions/dependency-review-action from 4.3.2 to 4.3.3 (#8039)
• 🔨 Bump github/codeql-action from 3.25.7 to 3.25.8 (#8038)
• 🔨 Bump step-security/harden-runner from 2.8.0 to 2.8.1 (#8037)
• 🔨 Bump github.com/golangci/golangci-lint from 1.59.0 to 1.59.1 in /tools (#8036)
• 🔨 README.md: fix Kubernetes min version (#8030)
• 🔨 Bump github.com/containerd/containerd from 1.7.17 to 1.7.18 (#8026)
• 🔨 Bump tj-actions/changed-files from 44.5.1 to 44.5.2 (#8014)
• 🔨 Bump actions/dependency-review-action from 2.5.1 to 4.3.2 (#8013)
• 🔨 Bump step-security/harden-runner from 2.7.0 to 2.8.0 (#8012)
• 🔨 Bump github/codeql-action from 3.25.6 to 3.25.7 (#8011)
• 🔨 Bump actions/checkout from 3.6.0 to 4.1.6 (#8010)
• 🔨 Bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.3 to 1.8.4 (#8007)
• 🔨 Bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.3 to 1.8.4 (#8001)
• 🔨 Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 (#8000)
• 🔨 Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.3 to 1.8.4 (#7999)
• 🔨 Bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.3 to 1.8.4 (#7998)
• 🔨 Bump the all group across 1 directory with 4 updates (#7995)
• 🔨 Bump step-security/harden-runner from 2.7.1 to 2.8.0 (#7993)
• 🔨 Bump tj-actions/changed-files from 44.4.0 to 44.5.1 (#7992)
• 🔨 Bump github.com/golangci/golangci-lint from 1.58.2 to 1.59.0 in /tools (#7991)
• 🔨 Bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#7985)
• 🔨 Update releases.md for v0.60 (#7976)
• 🔨 TEP0152 - Complete V1 conformance test suite (#7913)
• 🔨 .github/workflows: add a dependency-review workflow (#7846)

Docs

• 📖 Document that task results are not enforced (#8053)
• 📖 Fix the document: Task Level Comp Res is beta (#8004)
• 📖 Patch release v0.60.1 (#7997)

Thanks

Thanks to these contributors who contributed to v0.61.0!

• ❤️ @JeromeJu
• ❤️ @afrittoli
• ❤️ @chitrangpatel
• ❤️ @dependabot[bot]
• ❤️ @khrm
• ❤️ @l-qing
• ❤️ @vdemeester
• ❤️ @wilstdu

Extra shout-out for awesome release notes:

• 😍 @chitrangpatel
• 😍 @l-qing
• 😍 @vdemeester
• 😍 @wilstdu

Tekton Pipeline release v0.53.7 "Chartreux Rachael"

-Docs @ v0.53.7
-Examples @ v0.53.7

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.7/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.7/release.yaml
REKOR_UUID=24296fb24b8ad77a5e6c5b801847e38adbef6f904f009e88e04197f4ea8b1c264d904ee4a80332b1

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.7@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.53.x] Fix: Identify workspace usage in a Task (#8020)

Fix: Identify workspace usage in a Task

• 🐛 [release-v0.53.x] fix: when using remote resources, the related metrics tag name is wrong (#7957)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.53.7!

• ❤️ @chitrangpatel
• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @chitrangpatel

Tekton Pipeline release v0.60.2 "Chinchilla Tobor"

-Docs @ v0.60.2
-Examples @ v0.60.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.2/release.yaml
REKOR_UUID=24296fb24b8ad77a1b1da05e47cee68581daf1cd5823facc5b59b76edaf9ce986efe5c68bd1a4cbe

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.60.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.60.x] Fix: Identify workspace usage in a Task (#8021)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.60.2!

• ❤️ @tekton-robot, @chitrangpatel

Extra shout-out for awesome release notes:

• 😍 @tekton-robot

Tekton Pipeline release v0.59.1 "Scottish Fold Sox"

-Docs @ v0.59.1
-Examples @ v0.59.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.1/release.yaml
REKOR_UUID=24296fb24b8ad77ae4f504cabd702466f22af01eb77b6e7d131fbccfa54291a0438b7301f13f5180

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.59.x] fix: when using remote resources, the related metrics tag name is wrong (#7955)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.1!

• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @tekton-robot

Tekton Pipeline release v0.56.5 "Persian Terminator"

-Docs @ v0.56.5
-Examples @ v0.56.5

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.5/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a2f09bf689d71d460727a65204008bb91c9b764039990958e155058c4234aaecd

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a2f09bf689d71d460727a65204008bb91c9b764039990958e155058c4234aaecd
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.5/release.yaml
REKOR_UUID=24296fb24b8ad77a2f09bf689d71d460727a65204008bb91c9b764039990958e155058c4234aaecd

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.5@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.56.x] fix: stepresult intepolations does not accept multiple matches (#7875)

• fix: cannot use multiple step results at the same time for interpolation.

• 🐛 [release-v0.56.x] fix: when using remote resources, the related metrics tag name is wrong (#7956)

• [release-v0.56.x] Fix: Identify workspace usage in a Task (#8018)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.56.5!

• ❤️ @tekton-robot

Extra shout-out for awesome release notes:

• 😍 @tekton-robot

Tekton Pipeline release v0.60.1 "Chinchilla Tobor"

-Docs @ v0.60.1
-Examples @ v0.60.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a3c629b9f100be0eec857bdac47e80bdeacaf4cebba95adb7f9918b91b27842c5

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a3c629b9f100be0eec857bdac47e80bdeacaf4cebba95adb7f9918b91b27842c5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.1/release.yaml
REKOR_UUID=24296fb24b8ad77a3c629b9f100be0eec857bdac47e80bdeacaf4cebba95adb7f9918b91b27842c5

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.60.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

• 🐛 [release-v0.60.x] Fix: Allow less strict validation of the Resolver Name during Webhook. (#7996)
• 🐛 [release-v0.60.x] Fix: Update GetNameAndNamespace Parameters (#7994)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.60.1!

• ❤️ @tekton-robot, @Aleromerog

Extra shout-out for awesome release notes:
@Aleromerog

Tekton Pipeline release v0.60.0 "Chinchilla Tobor"

🎉 Artifacts through Sidecar Logs and Concise Resolver Syntax(Stage I)🎉

-Docs @ v0.60.0
-Examples @ v0.60.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a0f4210b40d70db3c3f419f177c49cdf9af22ac6e6f490d1141db7ca4ecb37796

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a0f4210b40d70db3c3f419f177c49cdf9af22ac6e6f490d1141db7ca4ecb37796
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.60.0/release.yaml
REKOR_UUID=24296fb24b8ad77a0f4210b40d70db3c3f419f177c49cdf9af22ac6e6f490d1141db7ca4ecb37796

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.60.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ feat: Surface artifacts through sidecar container logs. (#7883)

Surface artifacts through sidecar container logs.

• ✨ add namespace label/tag to non-deprecated throttle metrics (#7879)

Add 'namespace' label/tag to the 'tekton_pipelines_controller_running_taskruns_throttled_by_quota' and 'tekton_pipelines_controller_running_taskruns_throttled_by_node' metrics, as kubernetes quota definitions are namespace scoped, hence certain namespaces may be more susceptible to quota throttling than others, and in a multi-node environment, not all namespaces are necessarily on the same node.

To enable this new label/tag, set 'metrics.taskrun.throttle.enable-namespace' to 'true' in the 'config-observability' ConfigMap

• ✨ TEP-0154: Enable concise resolver syntax - stage 1 (#7845)

TEP-0154: Enable concise resolver syntax

• ✨ Add reason tag to duration metrics (#7812)

The reason tag has been added to the duration metrics of taskrun and pipelinerun.

Fixes

• 🐛 Propagate params in pipelines (#7930)

Enable propagating params in Pipelines.

• 🐛 Fix version mismatch of aws-sdk-go-v2 (#7921)

Fixing "401 Not Authorized" using Image from private AWS ECR without specifying "command" or "script" in Task.

• 🐛 allow for retry on typically transient k8s errors in both core controller and resolver for remote resolution (#7894)

This fix address the lack of retry on transient kubernetes errors during remote resolution for tasks, etc.

• 🐛 Fix: Faulty Remote Resource Accepted by Remote Resolution (#7952)
• 🐛 minor followup to PR 7894 (#7950)
• 🐛 fix: prevent repeated setting of pipeline name label (#7732)
• 🐛 fix: when using remote resources, the related metrics tag name is wrong (#7731)

Misc

• 🔨 Deprecate current resolution framework (#7945)

Mark current resolver framework as deprecated. Note: we are not removing the interface to be compatible with our Go policy.

• 🔨 misc: promote stepAction to beta (#7920)

promote StepActions to beta

• 🔨 fix: artifactsFlag (#7914)

fix defaultEnableArtifacts flag uses wrong name

• 🔨 Upgraded Remote Resolution Framework (#7910)

Upgraded remote resolution framework.

• 🔨 Bump go.opentelemetry.io/otel from 1.26.0 to 1.27.0 (#7975)
• 🔨 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.26.0 to 1.27.0 (#7972)
• 🔨 chore(deps): bump github/codeql-action from 3.25.5 to 3.25.6 (#7968)
• 🔨 chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#7967)
• 🔨 chore(deps): bump github.com/golangci/golangci-lint from 1.58.1 to 1.58.2 in /tools (#7966)
• 🔨 chore(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.17 (#7961)
• 🔨 chore(deps): bump k8s.io/client-go from 0.27.13 to 0.27.14 in /test/custom-task-ctrls/wait-task-beta (#7949)
• 🔨 chore(deps): bump k8s.io/api from 0.27.13 to 0.27.14 in /test/custom-task-ctrls/wait-task-beta (#7948)
• 🔨 chore(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 (#7947)
• 🔨 chore(deps): bump github.com/spiffe/spire-api-sdk from 1.9.4 to 1.9.6 (#7946)
• 🔨 chore(deps): bump the all group in /tekton with 3 updates (#7944)
• 🔨 chore(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 (#7943)
• 🔨 chore(deps): bump github/codeql-action from 3.25.3 to 3.25.5 (#7942)
• 🔨 chore(deps): bump tj-actions/changed-files from 44.3.0 to 44.4.0 (#7941)
• 🔨 Add image replacement for amd64 specific image for entrypoint-resolution test and update docker-in-docker test image for Power. (#7937)
• 🔨 chore(deps): bump github.com/golangci/golangci-lint from 1.58.0 to 1.58.1 in /tools (#7936)
• 🔨 chore(deps): bump step-security/harden-runner from 2.7.0 to 2.7.1 (#7934)
• 🔨 chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#7933)
• 🔨 chore(deps): bump the all group in /tekton with 4 updates (#7932)
• 🔨 chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 (#7931)
• 🔨 chore(deps): bump github.com/jenkins-x/go-scm from 1.14.30 to 1.14.34 (#7928)
• 🔨 chore(deps): bump github.com/golangci/golangci-lint from 1.57.2 to 1.58.0 in /tools (#7927)
• 🔨 chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 (#7926)
• 🔨 chore(deps): bump the all group in /tekton with 2 updates (#7925)
• 🔨 chore(deps): bump actions/checkout from 4.1.3 to 4.1.4 (#7924)
• 🔨 chore(deps): bump github/codeql-action from 3.25.1 to 3.25.3 (#7923)

Docs

• 📖 Update releases.md for v0.59 (#7917)
• 📖 v1beta1 fields updated to v1 in docs and examples (#7873)

Thanks

Thanks to these contributors who contributed to v0.60.0!

• ❤️ @Sachin-Itagi
• ❤️ @afrittoli
• ❤️ @chitrangpatel
• ❤️ @cugykw
• ❤️ @dependabot[bot]
• ❤️ @ericzzzzzzz
• ❤️ @gabemontero
• ❤️ @khrm
• ❤️ @ppitonak
• ❤️ @seternate

Extra shout-out for awesome release notes:

• 😍 @chitrangpatel
• 😍 @ericzzzzzzz
• 😍 @gabemontero
• 😍 @khrm
• 😍 @seternate