Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov"
π Released Container Images stored on ghcr.io π
-Docs @ v0.64.0
-Examples @ v0.64.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
Obtain the attestation:
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.64.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
- β¨ Implement set-security-context feature for affinity assistant containers (#8182)
Affinity Assistant containers will now have a securityContext when feature flag set-security-context
is enabled in ConfigMap feature-flags
.
Fixes
- π Fix isolated workspaces ignored when using StepTemplate (#8272)
Isolated workspaces are now correctly set when using in conjuction with StepTemplate
- π fix(TaskRun): fixed the issue where some step statuses might not be correctly updated in failed TaskRun (#8270)
fix: fixed the issue where some step statuses might not be correctly updated in failed TaskRun
- π fix(pipelinerun): resolve issue with PipelineRun not timing out successfully (#8236)
fix(pipelinerun): resolve issue with PipelineRun not timing out successfully
- π fix(e2e): stabilize TestTaskRunFailure test (#8174)
- π Mark steps as deleted when TaskRun fails (#8294)
Misc
- π¨ Bump the all group across 1 directory with 4 updates (#8300)
- π¨ Pin setup-go action (#8291)
- π¨ Simply the path for the base image (#8290)
- π¨ Bump github/codeql-action from 3.26.7 to 3.26.8 (#8289)
- π¨ Pin alpine image used in release pipeline (#8287)
- π¨ Update to the latest version of koparse for the release pipeline (#8285)
- π¨ Bump google.golang.org/grpc from 1.64.1 to 1.67.0 (#8281)
- π¨ Use the new version of koparse in the build (#8278)
- π¨ Bump step-security/harden-runner from 2.9.1 to 2.10.1 (#8269)
- π¨ Bump tj-actions/changed-files from 45.0.1 to 45.0.2 (#8268)
- π¨ Bump github/codeql-action from 3.26.6 to 3.26.7 (#8267)
- π¨ Bump the all group in /tekton with 4 updates (#8266)
- π¨ Adapt koparse step to handle no import path (#8261)
- π¨ Add KO_EXTRA_ARGS (#8260)
- π¨ Propagate image registry regions to publish (#8259)
- π¨ Fix the imageRegistryUser param usage in the release pipeline (#8256)
- π¨ build(deps): bump the all group in /tekton with 4 updates (#8253)
- π¨ Run build and tests conditionally (#8252)
- π¨ Support separate bucket and image reg creds (#8251)
- π¨ Add OCI source label to images (#8247)
- π¨ Make image registry regions configurable (#8246)
- π¨ build(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 (#8245)
- π¨ build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 (#8244)
- π¨ build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 (#8243)
- π¨ build(deps): bump the all group across 1 directory with 4 updates (#8235)
- π¨ build(deps): bump tj-actions/changed-files from 45.0.0 to 45.0.1 (#8233)
- π¨ build(deps): bump github/codeql-action from 3.26.3 to 3.26.6 (#8232)
Docs
- π Update releases for new Tekton Pipeline Releases 0.63 (#8229)
Thanks
Thanks to these contributors who contributed to v0.64.0!
- β€οΈ @AlanGreene
- β€οΈ @afrittoli
- β€οΈ @chitrangpatel
- β€οΈ @dependabot[bot]
- β€οΈ @kristofferchr
- β€οΈ @l-qing
- β€οΈ @vdemeester
Extra shout-out for awesome release notes:
- π @kristofferchr
- π @l-qing
- π @vdemeester