Tekton v1.12.0
Pipeline release v1.12.0 "Exotic Shorthair Elektrobots LTS"
security+++++++~~~-*!!!!!!
Changes
- :lock: fix: prevent git argument injection via revision parameter (GHSA-94jr-7pqp-xhcq)security
- :lock: Security: reject system API token with user-controlled serverURLsecurity
- :lock: fix: limit HTTP resolver response body size to prevent OOM DoSsecurity
- :lock: fix: normalize VolumeMount paths before /tekton/ restriction checksecurity
- :lock: fix: strip resolver prefixes and use non-capturing group for pattern anchoringsecurity
- :lock: fix: trim whitespace from source URI before pattern matchingsecurity
- :rotating_light: [TEP-0137] The send-cloudevents-for-runs feature flag is deprecated and will be removed in a future release. Its default has changed from false to true (#9774).deprecated
- :zap: perf: reduce reconcile churn for completed PipelineRunschanged
- :zap: perf: remove unnecessary SetDefaults from TaskRun done pathchanged
- :zap: perf: use maps.Equal instead of reflect.DeepEqual for label/annotation comparisonchanged
- Dev.tekton.event.pipelinerun.queued.v1 — sent when a PipelineRun is created but not yet processedadded
- Dev.tekton.event.taskrun.queued.v1 — sent when a TaskRun is created but not yet processedadded
6 more lines
- :sparkles: [TEP-0137] Move PipelineRun notifications to events controlleradded
- :sparkles: [TEP-0137] Move TaskRun notifications to events controlleradded
- :sparkles: [TEP-0137] Deprecate send-cloudevents-for-runs feature flagadded
- :sparkles: fix: surface specific TaskRun failure reasons when pod failsadded
- :sparkles: fix: surface clear errors when completed tasks miss referenced resultsadded
- :bug: Rework the events controller cachefixed
18 maintenance lines (dependency bumps, CI, tests, docs)
- :hammer: tekton: add draft release creation to release pipelinemaintenance
- :hammer: ci: remove compromised tj-actions/changed-files dependencymaintenance
- :hammer: ci: Automate Dependabot configuration generationmaintenance
- :hammer: Remove aws-sdk-go-v2 ECR replace directivesmaintenance
- :hammer: Simplify TestEmit by removing table-driven test structuremaintenance
- :hammer: test: add e2e test for TaskRun pending statusmaintenance
- :hammer: Regenerate code after k8s.io/code-generator 0.35.3 bumpmaintenance
- :book: docs: add bundle resolver configuration options default valuesmaintenance
- :book: docs: update metrics.md to reflect OpenTelemetry migrationmaintenance
- :book: docs(examples): remove stale v1beta1 references from examples READMEmaintenance
- :hammer: build(deps): bump k8s.io dependencies from 0.35.2 to 0.35.4maintenance
- :hammer: build(deps): bump github.com/google/cel-go from 0.27.0 to 0.28.0maintenance
- :hammer: build(deps): bump google.golang.org/grpc from 1.79.3 to 1.80.0maintenance
- :hammer: build(deps): bump go.uber.org/zap from 1.27.1 to 1.28.0maintenance
- :hammer: build(deps): bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0maintenance
- :hammer: build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5maintenance
- :hammer: build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4maintenance
- :hammer: build(deps): bump github.com/sigstore/sigstore from 1.10.4 to 1.10.5maintenance
36 lines6 security1 deprecated7 added3 changed1 fixed18 maintenancetyped from the source notes