03 Sep 14:56

fd2fdf9

Tekton Pipeline release v0.62.3 "Birman HAL LTS"

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.3/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342

Obtain the attestation:

REKOR_UUID=108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.3/release.yaml
REKOR_UUID=108e9186e8c5677aa407357ea4e4be089c72e70eb6e12acb4d1bc92eec85f0c0fba54abc89790342

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.3@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.62.x] Fix Artifact type to a pointer (#8228)

Fix Artifact type to a pointer.

🐛 [release-v0.62.x] apply default-container-resource-requirements before LimitRange transformer (#8227)

[Bug fix]: default-container-resource-requirements will be applied to the container before LimtRange

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.62.3!

❤️ @tekton-robot
❤️ @vdemeester

Extra shout-out for awesome release notes:

😍 @tekton-robot
😍 @vdemeester

Contributors

vdemeester and tekton-robot

Assets 4

30 Aug 18:58

tekton-robot

v0.63.0

c910594

Tekton Pipeline release v0.63.0 "Abyssinian K-9" Latest

Latest

-Docs @ v0.63.0
-Examples @ v0.63.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml
REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.63.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

✨ cluster-reslover: add support for StepAction (#8199)

tepAction are now supported to a refered via the cluster resolver.

✨ Allow securityContext field for affinity assistant podtemplate (#8176)

Added the ability to set the pod-level securityContext for the AffinityAssistant StatefulSet.
This can be configured by providing a default-affinity-assistant-pod-template in the config-defaults ConfigMap or by specifying a pod template in TaskRun or PipelineRun.

✨ Add UID label to PipelineRun and TaskRun (#8166)

TaskRun pods have tekton.dev/taskRunUID and tekton.dev/pipelineRunUID labels

Fixes

🐛 Fix Artifact type to a pointer (#8226)

Fix Artifact type to a pointer.

🐛 fix task name show in metric (#8216)

fix clusterTask name show anonymous in metric

🐛 apply default-container-resource-requirements before LimitRange transformer (#8197)

[Bug fix]: default-container-resource-requirements will be applied to the container before LimtRange

🐛 fix(pipelinerun): resolve issue where canceling active pipelinerun fails (#8173)

fix(pipelinerun): resolve issue where canceling active pipelinerun fails

🐛 fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM (#8171)

fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM

🐛 fix: If the finally timeout is set to 0s, the calculates the next queue entry time according to the pipeline timeout. (#8056)

If the finally timeout is set to 0s, the reconciler calculates the next queue entry time according to the pipeline timeout.

🐛 feat(matrix): Fix matrix param type mismatch problem for ref array result from customrun scenario (#8024)

Misc

🔨 build(deps): bump tj-actions/changed-files from 44.5.7 to 45.0.0 (#8223)
🔨 build(deps): bump github.com/golangci/golangci-lint from 1.59.1 to 1.60.3 in /tools (#8219)
🔨 build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible (#8218)
🔨 Bump the all group in /tekton with 4 updates (#8212)
🔨 Bump github/codeql-action from 3.26.0 to 3.26.3 (#8211)
🔨 Bump the all group in /tekton with 4 updates (#8204)
🔨 Bump actions/upload-artifact from 4.3.5 to 4.3.6 (#8203)
🔨 Bump step-security/harden-runner from 2.9.0 to 2.9.1 (#8202)
🔨 Bump github/codeql-action from 3.25.15 to 3.26.0 (#8201)
🔨 {taskrun,pipelinerun}metrics: make sure config is up-to-date (#8187)
🔨 Bump the all group in /tekton with 2 updates (#8180)
🔨 Bump actions/upload-artifact from 4.3.4 to 4.3.5 (#8179)
🔨 Bump tj-actions/changed-files from 44.5.5 to 44.5.7 (#8178)
🔨 Bump github/codeql-action from 3.25.13 to 3.25.15 (#8162)
🔨 Bump ossf/scorecard-action from 2.3.3 to 2.4.0 (#8161)
🔨 Bump the all group in /tekton with 4 updates (#8160)
🔨 Bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0 (#8154)

Docs

📖 docs: fix links to Matrix examples (#7953)

Thanks

Thanks to these contributors who contributed to v0.63.0!

❤️ @AverageMarcus
❤️ @chengjoey
❤️ @chitrangpatel
❤️ @cugykw
❤️ @dependabot[bot]
❤️ @hittyt
❤️ @jkandasa
❤️ @khrm
❤️ @kristofferchr
❤️ @l-qing
❤️ @vdemeester

Extra shout-out for awesome release notes:

😍 @chengjoey
😍 @chitrangpatel
😍 @cugykw
😍 @jkandasa
😍 @khrm
😍 @kristofferchr
😍 @l-qing
😍 @vdemeester

Contributors

vdemeester, khrm, and 9 other contributors

Assets 4

23 Aug 10:14

tekton-robot

v0.62.2

ecad3fa

Tekton Pipeline release v0.62.2 "Birman HAL LTS"

-Docs @ v0.62.2
-Examples @ v0.62.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.2/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.2/release.yaml
REKOR_UUID=108e9186e8c5677a6e62d0e6c909ccb98a5768c17110fecb8c493b0a3c670644a0e1d3cdf4a584b5

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.62.x] check namespace config for node throttle metric (#8213)

ith this fix the 'config-observabilitiy' configmap setting 'metrics.taskrun.throttle.enable-namespace' is now checked before incrementing the 'tekton_pipelines_controller_running_taskruns_throttled_by_node', where previously that config value was not being checked for the metric.

🐛 [release-v0.62.x] {taskrun,pipelinerun}metrics: make sure config is up-to-date (#8198)
🐛 [release-v0.62.x] pkg/taskrunmetrics/fake shouldn't be imported… (#8188)

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.62.2!

❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @tekton-robot

Contributors

tekton-robot

Assets 4

06 Aug 08:27

tekton-robot

v0.56.7

064bafc

Tekton Pipeline release v0.56.7 "Persian Terminator"

-Docs @ v0.56.7
-Examples @ v0.56.7

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.7/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.7/release.yaml
REKOR_UUID=24296fb24b8ad77a4ec4894662098e70458099040db8cd51697bfec03fd2650c7285ce3a94c50119

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.7@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.56.x] Refine check if the result is from a matrix task (#8169)

ixed variable substitution of results from matrix TaskRuns with cardinality of 1.

🐛 [release-v0.56.x] Perform matrix results validation on only result ref params (#8120)

Perform matrix results validation on only result ref params

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.56.7!

❤️ @piyush-garg
❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @piyush-garg
😍 @tekton-robot

Contributors

piyush-garg and tekton-robot

Assets 4

06 Aug 08:26

tekton-robot

v0.62.1

e58ca13

Tekton Pipeline release v0.62.1 "Birman HAL LTS"

-Docs @ v0.62.1
-Examples @ v0.62.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.1/release.yaml
REKOR_UUID=24296fb24b8ad77a888f88120c037b3b7b9b3be97d8dd4ea1950235f44033f29dce4a1123992a3d9

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.62.x] Refine check if the result is from a matrix task (#8167)

ixed variable substitution of results from matrix TaskRuns with cardinality of 1.

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.62.1!

❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @tekton-robot

Contributors

tekton-robot

Assets 4

06 Aug 08:26

tekton-robot

v0.59.3

285ef2a

Tekton Pipeline release v0.59.3 "Scottish Fold Sox"

-Docs @ v0.59.3
-Examples @ v0.59.3

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.3/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.3/release.yaml
REKOR_UUID=24296fb24b8ad77a1e39558b26eb0148a2dd3ee8bb9a2f4627eba53d2766e7088a8009b173f94e28

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.3@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.59.x] Refine check if the result is from a matrix task (#8168)

ixed variable substitution of results from matrix TaskRuns with cardinality of 1.

🐛 [release-v0.59.x] Perform matrix results validation on only result ref params (#8119)

Perform matrix results validation on only result ref params

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.3!

❤️ @piyush-garg
❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @piyush-garg
😍 @tekton-robot

Contributors

piyush-garg and tekton-robot

Assets 4

25 Jul 23:24

tekton-robot

v0.62.0

95fbf31

Tekton Pipeline release v0.62.0 "Birman HAL LTS"

🎉 Ignore Task Failure Promoted and native sidecars adopted with k8s 1.29 🎉

-Docs @ v0.62.0
-Examples @ v0.62.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.62.0/release.yaml
REKOR_UUID=24296fb24b8ad77adbcee63512553d756997c4c7efad2e1163023bda8bd9ddecafde859fcb4ebb11

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.62.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

✨ access taskRun reason in addition to status in finally task (#8127)

Access reason in addition to the status using $(tasks.taskName.reason)

✨ Capture Remote StepAction Location in TaskRun Status (#8106)

Capture Remote StepAction Location in TaskRun Status

✨ Add isBuildArtifact field to Artifacts (#8103)

Add isBuildArtifact field to Artifacts.

✨ Promote Tasks to beta (#8090)

Promote Ignore Task Failure to Beta

✨ feat(K8s native sidecar): Add support for Kubernetes native Sidecars (#8052)

Introducing a feature to adopt Kubernetes-native sidecars, which designates sidecar containers as initContainers. This prevents the need to pull and replace a nop image, leading to faster termination of the sidecars without unnecessary pod errors. Set enable-kubernetes-sidecar to true for Kubernetes 1.29 and later to take advantage of this feature.

✨ kind/feat: passing artifacts between tasks (#7978)

Support passing artifacts between tasks in a pipeline

✨ feat: introduce when expressions to steps (#7746)

introduce when expressions to steps.

✨ [TEP-0094] Promote taskrun.spec's stepSpecs and sidecarSpecs to beta (#8006)

Fixes

🐛 fix(pipelinerun): block pipelinerun spec updates once the pipelinerun has started (#8149)

Fix: Once a PipelineRun is created, most of the fields in the spec is not allowed to be updated; only status can be updated.

🐛 fix(taskrun): block taskrun spec updates once the taskrun has started (#8147)

Fix: Once a TaskRun is created, most of the fields in the spec is not allowed to be updated; only status and statusMessage can be updated.

🐛 DryRunValidate returns the mutated object (#8108)

DryRunValidate returns the mutated object

🐛 Fix step action force replacing with default param (#8102)

Fix incorrect param type passed to stepaction makes it use default value

🐛 Perform matrix results validation on only result ref params (#8089)

Perform matrix results validation on only result ref params

🐛 Fix error message when a PipelineRun param is missing (#8072)

Improved error string when a param is missing from a PipelineRun

🐛 fix:when debug.breakpoints.onFailure is an empty string, redundant volumes appear (#7788)

debug.breakpoints.onFailure is not allowed to be set to an empty string.

Misc

🔨 Switch the image from docker.io to gcr mirror (#8146)
🔨 Bump github/codeql-action from 3.25.12 to 3.25.13 (#8144)
🔨 Bump step-security/harden-runner from 2.8.1 to 2.9.0 (#8143)
🔨 Bump the all group in /tekton with 2 updates (#8142)
🔨 Bump github.com/containerd/containerd from 1.7.18 to 1.7.20 (#8139)
🔨 Bump k8s.io/client-go from 0.27.15 to 0.27.16 in /test/custom-task-ctrls/wait-task-beta (#8138)
🔨 Bump k8s.io/code-generator from 0.29.6 to 0.29.7 (#8137)
🔨 Bump tekton-releases/dogfooding/koparse from e6641f2 to 0535413 in /tekton in the all group across 1 directory (#8135)
🔨 Bump the all group across 1 directory with 4 updates (#8134)
🔨 use tagged images to take advantage of the least expensive default image pull policy (#8133)
🔨 Bump k8s.io/api from 0.27.15 to 0.27.16 in /test/custom-task-ctrls/wait-task-beta (#8132)
🔨 Bump k8s.io/apimachinery from 0.29.6 to 0.29.7 (#8131)
🔨 Bump actions/dependency-review-action from 4.3.3 to 4.3.4 (#8125)
🔨 Bump github/codeql-action from 3.25.11 to 3.25.12 (#8124)
🔨 Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#8104)
🔨 Released patch release: v0.59.2 (#8098)
🔨 Bump go.opentelemetry.io/otel from 1.27.0 to 1.28.0 (#8092)
🔨 Bump the all group in /tekton with 4 updates (#8087)
🔨 Bump github/codeql-action from 3.25.10 to 3.25.11 (#8085)
🔨 chore: remove unsupported configurations ScopeWhenExpressionsToTask (#8078)
🔨 Create release v0.61.0. (#8077)
🔨 Bump the all group in /tekton with 4 updates (#8075)
🔨 Bump tj-actions/changed-files from 44.5.2 to 44.5.5 (#8074)
🔨 Bump github.com/spiffe/spire-api-sdk from 1.9.6 to 1.10.0 (#8073)
🔨 Using image with "full" reference in tests (#8070)
🔨 Bump github.com/jenkins-x/go-scm from 1.14.34 to 1.14.37 (#8032)
🔨 Correct error message to differentiate the cause (#8027)

Docs

📖 Update min kubernetes version in the install doc (#8122)
📖 document failureIgnored (#8111)
📖 update the doc since the onError is now promoted (#8109)

Thanks

Thanks to these contributors who contributed to v0.62.0!

❤️ @AlanGreene
❤️ @chitrangpatel
❤️ @cugykw
❤️ @dependabot[bot]
❤️ @ericzzzzzzz
❤️ @kgcarr
❤️ @khrm
❤️ @l-qing
❤️ @piyush-garg
❤️ @pritidesai
❤️ @samagana
❤️ @savitaashture
❤️ @vdemeester

Extra shout-out for awesome release notes:

😍 @chitrangpatel
😍 @cugykw
😍 @ericzzzzzzz
😍 @kgcarr
😍 @khrm
😍 @l-qing
😍 @piyush-garg
😍 @pritidesai
😍 @samagana

Contributors

vdemeester, pritidesai, and 11 other contributors

Assets 4

06 Aug 11:39

tekton-robot

v0.53.8

176b3e6

Tekton Pipeline release v0.53.8 "Chartreux Rachael"

-Docs @ v0.53.8
-Examples @ v0.53.8

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.53.8/release.yaml
REKOR_UUID=24296fb24b8ad77ae09db844d64be6cb23d0468e0b39f3e93fc559aa88aaa9d1e06b6d969e266854

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.53.8@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.53.x] Perform matrix results validation on only result ref params (#8121)

Perform matrix results validation on only result ref params

🐛 [release-v0.53.x] Handle error conditions in CheckMissingResultReferences (#8095)

mproved error handling for some invalid result reference scenarios.

🐛 [release-v0.53.x] Cleanup resolved object before validating through dry-run (#8065)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.53.8!

❤️ @piyush-garg
❤️ @tekton-robot
❤️ @vdemeester

Extra shout-out for awesome release notes:

Contributors

vdemeester, piyush-garg, and tekton-robot

Assets 4

09 Jul 14:57

tekton-robot

v0.61.1

969f5d3

Tekton Pipeline release v0.61.1 "Ragdoll Data"

-Docs @ v0.61.1
-Examples @ v0.61.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.61.1/release.yaml
REKOR_UUID=24296fb24b8ad77a7bf5b4e52e97f499e0dc71aed47d629395ba503bbc0cf8a16d8b49169d2db2f5

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.61.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.61.x] Handle error conditions in CheckMissingResultReferences (#8105)

mproved error handling for some invalid result reference scenarios.

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.61.1!

❤️ @tekton-robot

Extra shout-out for awesome release notes:

😍 @tekton-robot

Contributors

tekton-robot

Assets 4

04 Jul 23:40

tekton-robot

v0.59.2

84aa130

Tekton Pipeline release v0.59.2 "Scottish Fold Sox"

-Docs @ v0.59.2
-Examples @ v0.59.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.59.2/release.yaml
REKOR_UUID=24296fb24b8ad77ac678677fe186a9b6d21a42b5b48289d14aa198de26de9b29caae78240eb7431a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.59.2@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

🐛 [release-v0.59.x] fix: resolve issue where results may not be obtained from sidecar logs (#8097)

ix: resolve issue where results may not be obtained from sidecar logs

🐛 [release-v0.59.x] Handle error conditions in CheckMissingResultReferences (#8093)

mproved error handling for some invalid result reference scenarios.

🐛 [release-v0.59.x] Cleanup resolved object before validating through dry-run (#8063)

leanup resolved object before attempting to validate it through api dry-run call

Misc

Docs

Thanks

Thanks to these contributors who contributed to v0.59.2!

❤️ @tekton-robot
❤️ @vdemeester

Extra shout-out for awesome release notes:

😍 @tekton-robot
😍 @vdemeester

Contributors

vdemeester and tekton-robot

Assets 4

Releases: tektoncd/pipeline

Tekton Pipeline release v0.62.3 "Birman HAL LTS"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.63.0 "Abyssinian K-9"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.62.2 "Birman HAL LTS"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.56.7 "Persian Terminator"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.62.1 "Birman HAL LTS"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.59.3 "Scottish Fold Sox"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.62.0 "Birman HAL LTS"

🎉 Ignore Task Failure Promoted and native sidecars adopted with k8s 1.29 🎉

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs

Thanks

Contributors

Tekton Pipeline release v0.53.8 "Chartreux Rachael"

Installation one-liner

Attestation

Changes

Features

Fixes

Misc

Docs