Tekton v1.15.0
Pipeline release v1.15.0 "Toyger Orisa" LTS
security++~-************!!!
Changes
- :hammer: build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0security
- :book: docs: add security threat modelsecurity
- :book: docs(security): document workspace isolation across trust boundariessecurity
- :rotating_light: [Deprecation Notice Title]deprecated
- :rotating_light: [Change Title]changed
- :sparkles: Add configuration for custom git resolver backoffadded
- :sparkles: feat: add configurable grace period for transient CreateContainerErroradded
- :bug: fix(resolutionrequest): preserve resolver-written status fieldsfixed
- :bug: fix(resolvers): honor leader-election bucket ownershipfixed
- :bug: Prevent matrix combination count int overflowfixed
- :bug: Fix PipelineRun stuck in ResolvingTaskRef when ResolutionRequest enqueue is missedfixed
- :bug: Fix RestrictLength panic on all-symbol inputfixed
8 more lines
- :bug: Fix sidecar-logs result extraction for results exceeding 4096 bytesfixed
- :bug: Preserve Sidecar RestartPolicy on API conversionfixed
- :bug: Mount debug scripts read-only in step containersfixed
- :bug: fix(nightlies): restart webhook after CEL feature-flag patchfixed
- :bug: fix(deps): bump OTel SDK with knative.dev/pkg semconv alignmentfixed
- :bug: fix(nightlies): skip draft-release tasks when releaseMode=nightlyfixed
- :bug: Fix broken object param example links in API specfixed
- :bug: fix: resolve in-toto attestation UUID in wait-for-chainsfixed
49 maintenance lines (dependency bumps, CI, tests, docs)
- :hammer: fix(release): copy vendor tarball into kodata instead of symlinkmaintenance
- :hammer: Add branch prefix to Dependabot PR titles for release branchesmaintenance
- :hammer: Fix wrong Deprecated godoc in affinity assistantmaintenance
- :hammer: build(deps): bump github.com/prometheus/common from 0.70.0 to 0.70.1maintenance
- :hammer: build(deps): bump the kubernetes group with 5 updatesmaintenance
- :hammer: build(deps): bump the kubernetes group across 1 directory with 3 updatesmaintenance
- :hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1maintenance
- :hammer: build(deps): bump github.com/tektoncd/pipeline from 1.14.0 to 1.14.1 in /test/custom-task-ctrls/wait-task-betamaintenance
- :hammer: build(deps): bump actions/setup-go from 6.5.0 to 7.0.0maintenance
- :hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.26 to 1.6.27maintenance
- :hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.26 to 1.6.27maintenance
- :hammer: build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0maintenance
- :hammer: Ignore otel major/minor updates in dependabotmaintenance
- :hammer: build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1maintenance
- :hammer: ci(.github/workflows): enable Codecov coverage reportingmaintenance
- :hammer: build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.0maintenance
- :hammer: build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0maintenance
- :hammer: build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0maintenance
- :hammer: build(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0maintenance
- :hammer: build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.1 to 1.15.2maintenance
- :hammer: build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0maintenance
- :hammer: build(deps): bump github.com/google/cel-go from 0.29.1 to 0.29.2maintenance
- :hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.25 to 1.6.26maintenance
- :hammer: build(deps): bump ko-build/setup-ko from 0.9 to 0.10maintenance
- :hammer: build(deps): bump github.com/google/cel-go from 0.29.0 to 0.29.1maintenance
- :hammer: build(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3maintenance
- :hammer: build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3maintenance
- :hammer: build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0maintenance
- :hammer: build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3maintenance
- :hammer: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0maintenance
- :hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.25 to 1.6.26maintenance
- :hammer: build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0maintenance
- :hammer: build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0maintenance
- :hammer: build(deps): bump github.com/tektoncd/pipeline from 1.13.1 to 1.14.0 in /test/custom-task-ctrls/wait-task-betamaintenance
- :hammer: ci: fix mismatched setup-go version comment in dependabot-regenmaintenance
- :hammer: build(deps): bump actions/setup-go from 6.4.0 to 6.5.0maintenance
- :hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.24 to 1.6.25maintenance
- :hammer: build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7maintenance
- :hammer: build(deps): bump actions/cache from 5.0.5 to 6.1.0maintenance
- :hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.24 to 1.6.25maintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump github.com/jenkins-x/go-scm from 1.15.30 to 1.15.31maintenance
- :hammer: test: add e2e test for OpenCensus to OpenTelemetry metrics migrationmaintenance
- :hammer: [TEP-0056] Test ServiceAccount propagation in PinPmaintenance
- :book: Add PR template reminder to AGENTS.mdmaintenance
- :book: Use folder-level symlinks for agent skill discoverymaintenance
- :book: Fix moved example links in pipeline docsmaintenance
- :book: docs: add v1.14.0 release to releases.mdmaintenance
- :book: docs: document StepAction support in Hub Resolvermaintenance
69 lines3 security1 deprecated2 added1 changed13 fixed49 maintenancetyped from the source notes