Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov"

[afrittoli]

🎉 Released Container Images stored on ghcr.io 🎉

-Docs @ v0.64.0
-Examples @ v0.64.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8

Obtain the attestation:

REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.64.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ Implement set-security-context feature for affinity assistant containers (Implement set-security-context feature for affinity assistant containers #8182)

Affinity Assistant containers will now have a securityContext when feature flag set-security-context is enabled in ConfigMap feature-flags.

Fixes

• 🐛 Fix isolated workspaces ignored when using StepTemplate (Fix isolated workspaces ignored when using StepTemplate #8272)

Isolated workspaces are now correctly set when using in conjuction with StepTemplate

• 🐛 fix(TaskRun): fixed the issue where some step statuses might not be correctly updated in failed TaskRun (fix(TaskRun): fixed the issue where some step statuses might not be correctly updated in failed TaskRun #8270)

fix: fixed the issue where some step statuses might not be correctly updated in failed TaskRun

• 🐛 fix(pipelinerun): resolve issue with PipelineRun not timing out successfully (fix(pipelinerun): resolve issue with PipelineRun not timing out successfully #8236)

fix(pipelinerun): resolve issue with PipelineRun not timing out successfully

• 🐛 fix(e2e): stabilize TestTaskRunFailure test (fix(e2e): stabilize TestTaskRunFailure test #8174)
• 🐛 Mark steps as deleted when TaskRun fails (Mark steps as deleted when TaskRun fails #8294)

Misc

• 🔨 Bump the all group across 1 directory with 4 updates (Bump the all group across 1 directory with 4 updates #8300)
• 🔨 Pin setup-go action (Pin setup-go action #8291)
• 🔨 Simply the path for the base image (Simply the path for the base image #8290)
• 🔨 Bump github/codeql-action from 3.26.7 to 3.26.8 (Bump github/codeql-action from 3.26.7 to 3.26.8 #8289)
• 🔨 Pin alpine image used in release pipeline (Pin alpine image used in release pipeline #8287)
• 🔨 Update to the latest version of koparse for the release pipeline (Update to the latest version of koparse for the release pipeline #8285)
• 🔨 Bump google.golang.org/grpc from 1.64.1 to 1.67.0 (Bump google.golang.org/grpc from 1.64.1 to 1.67.0 #8281)
• 🔨 Use the new version of koparse in the build (Use the new version of koparse in the build #8278)
• 🔨 Bump step-security/harden-runner from 2.9.1 to 2.10.1 (Bump step-security/harden-runner from 2.9.1 to 2.10.1 #8269)
• 🔨 Bump tj-actions/changed-files from 45.0.1 to 45.0.2 (Bump tj-actions/changed-files from 45.0.1 to 45.0.2 #8268)
• 🔨 Bump github/codeql-action from 3.26.6 to 3.26.7 (Bump github/codeql-action from 3.26.6 to 3.26.7 #8267)
• 🔨 Bump the all group in /tekton with 4 updates (Bump the all group in /tekton with 4 updates #8266)
• 🔨 Adapt koparse step to handle no import path (Adapt koparse step to handle no import path #8261)
• 🔨 Add KO_EXTRA_ARGS (Add KO_EXTRA_ARGS #8260)
• 🔨 Propagate image registry regions to publish (Propagate image registry regions to publish #8259)
• 🔨 Fix the imageRegistryUser param usage in the release pipeline (Fix the imageRegistryUser param usage in the release pipeline #8256)
• 🔨 build(deps): bump the all group in /tekton with 4 updates (build(deps): bump the all group in /tekton with 4 updates #8253)
• 🔨 Run build and tests conditionally (Run build and tests conditionally #8252)
• 🔨 Support separate bucket and image reg creds (Support separate bucket and image reg creds #8251)
• 🔨 Add OCI source label to images (Add OCI source label to images #8247)
• 🔨 Make image registry regions configurable (Make image registry regions configurable #8246)
• 🔨 build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 #8245)
• 🔨 build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 #8244)
• 🔨 build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 (build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 #8243)
• 🔨 build(deps): bump the all group across 1 directory with 4 updates (build(deps): bump the all group across 1 directory with 4 updates #8235)
• 🔨 build(deps): bump tj-actions/changed-files from 45.0.0 to 45.0.1 (build(deps): bump tj-actions/changed-files from 45.0.0 to 45.0.1 #8233)
• 🔨 build(deps): bump github/codeql-action from 3.26.3 to 3.26.6 (build(deps): bump github/codeql-action from 3.26.3 to 3.26.6 #8232)

Docs

• 📖 Update releases for new Tekton Pipeline Releases 0.63 (Update releases for new Tekton Pipeline Releases 0.63 #8229)

Thanks

Thanks to these contributors who contributed to v0.64.0!

• ❤️ @AlanGreene
• ❤️ @afrittoli
• ❤️ @chitrangpatel
• ❤️ @dependabot[bot]
• ❤️ @kristofferchr
• ❤️ @l-qing
• ❤️ @vdemeester

Extra shout-out for awesome release notes:

• 😍 @kristofferchr
• 😍 @l-qing
• 😍 @vdemeester

---

This discussion was created from the release Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov".