Tekton v1.9.4
Pipeline release v1.9.4 "Devon Rex Dreadnought"
security~-********!!
Changes
- :bug: [cherry-pick: release-v1.9.x] fix: bump google.golang.org/grpc to 1.79.3 (CVE-2026-33186)security
- :hammer: build(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2security
- :rotating_light: [Deprecation Notice Title]deprecated
- :rotating_light: [Change Title]changed
- :bug: [cherry-pick: release-v1.9.x] fix(resolvers): Allow ResolutionRequests to resolve all Tekton kindsfixed
- :bug: [cherry-pick: release-v1.9.x] Fix cross-arch platform command lookup in entrypointfixed
- :bug: [release-v1.9.x] fix: surface clear errors when completed tasks miss referenced resultsfixed
- :bug: [cherry-pick: release-v1.9.x] fix(resolvers): validate data is Tekton object in resolver frameworkfixed
- :bug: [release-v1.9.x] fix: add automated draft release support to release pipelinefixed
- :bug: [Cherry-pick release-v1.9.x] fix: resolve goroutine leak from unbuffered channels in resolver reconcilersfixed
- :bug: [Cherry-pick release-v1.9.x] fix: convert pod latency metric to histogram and remove pod labelfixed
- :bug: [Cherry-pick Release-v1.9.x] fix(pipelinerun): use generateName for anonymous pipeline labelfixed
25 maintenance lines (dependency bumps, CI, tests, docs)
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump actions/checkout from 6.0.2 to 6.0.3maintenance
- :hammer: build(deps): bump the all group across 1 directory with 4 updatesmaintenance
- :hammer: build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.6 to 1.14.7maintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1maintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump k8s.io/apimachinery from 0.33.11 to 0.33.12maintenance
- :hammer: build(deps): bump the all group across 1 directory with 4 updatesmaintenance
- :hammer: build(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3maintenance
- :hammer: build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.0 to 1.14.6maintenance
- :hammer: build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5maintenance
- :hammer: build(deps): bump k8s.io/apimachinery from 0.33.7 to 0.33.11maintenance
- :hammer: build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.8maintenance
- :hammer: build(deps): bump k8s.io/apiextensions-apiserver from 0.32.11 to 0.32.13maintenance
- :hammer: build(deps): bump k8s.io/api from 0.32.11 to 0.32.13maintenance
- :hammer: build(deps): bump k8s.io/client-go from 0.32.11 to 0.32.13maintenance
- :hammer: build(deps): bump github/codeql-action from 4.32.0 to 4.32.6maintenance
- :hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- :hammer: build(deps): bump tj-actions/changed-files from 47.0.1 to 47.0.6maintenance
- :hammer: build(deps): bump github.com/tektoncd/pipeline from 0.53.1 to 0.53.9 in /test/custom-task-ctrls/wait-task-betamaintenance
- :hammer: build(deps): bump chainguard-dev/actions from 1.5.13 to 1.5.16maintenance
- :hammer: build(deps): bump actions/cache from 4.2.3 to 4.2.4maintenance
37 lines2 security1 deprecated1 changed8 fixed25 maintenancetyped from the source notes