Pipeline release v1.17.0 "Egyptian Mau Robocop"
Tekton Pipelines v1.17.0 was released with 62 changes in total. The notable items include new tracing span attributes for TaskRun reconcile and cancel/timeout, pod event surfacing, and six bug fixes covering Windows script placement, task resolution error messages, parameter references, and resolver request handling. The security entry is a version bump of the step-security/harden-runner GitHub Action in the build pipeline, and the release notes also list a deprecation and a change whose headings are unfilled placeholders with no details.
platform teams Platform teams running Tekton get better tracing on reconcile and cancellation and clearer error messages on task resolution failures. The source does not describe the deprecation or the changed item, so teams should read the full release notes before upgrading.
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
- !:hammer: build(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1security
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- +:sparkles: feat(tracing): record reconcile.write_intent span attributeadded
- +:sparkles: Feat/10373 surface pod events/srvkp 13129added
- +:sparkles: feat(tracing): tag TaskRun ReconcileKind span on cancel/timeoutadded
- *:bug: fix: use non-expandable here-string for windows script placementfixed
- *:bug: fix: add task name in error on task resolution failurefixed
- *:bug: Allow tt.params as a valid variable-reference prefixfixed
- *:bug: Enqueue only a resolver's own ResolutionRequestsfixed
- *:bug: fix: correct verb in controller startup panic logsfixed
- *:bug: Fix release_names.go: update regex for Wikipedia HTML changes and fix bugsfixed
1 more lines
49 maintenance lines (dependency bumps, CI, tests, docs)
- ·Docs @ v1.17.0maintenance
- ·:hammer: chore: delete dead code in test/per_feature_flags_test.go filemaintenance
- ·:hammer: chore: group sigstore dependency updates in dependabotmaintenance
- ·:hammer: Eliminate discontinued gopkg.in/yaml.v3 librarymaintenance
- ·:hammer: build(deps): bump the kubernetes group with 5 updatesmaintenance
- ·:hammer: build(deps): bump the kubernetes group in /test/custom-task-ctrls/wait-task-beta with 3 updatesmaintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.35 to 1.6.36maintenance
- ·:hammer: build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1maintenance
- ·:hammer: build(deps): bump agilepathway/label-checker from 1.6.66 to 1.6.98maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.35 to 1.6.36maintenance
- ·:hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- ·:hammer: test: Fix tracing test to honor custom SYSTEM_NAMESPACEmaintenance
- ·:hammer: build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.8.1 to 2.8.2maintenance
- ·:hammer: build(deps): bump the sigstore group with 5 updatesmaintenance
- ·:hammer: build(deps): bump github.com/jenkins-x/go-scm from 1.16.0 to 1.16.3maintenance
- ·:hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- ·:hammer: build(deps): bump agilepathway/label-checker from 1.6.65 to 1.6.66maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.34 to 1.6.35maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.34 to 1.6.35maintenance
- ·:hammer: build(deps): bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4maintenance
- ·:hammer: build(deps): bump the codeql-action group with 3 updatesmaintenance
- ·:hammer: build(deps): bump the all group in /tekton with 6 updatesmaintenance
- ·:hammer: build(deps): bump github.com/jenkins-x/go-scm from 1.15.32 to 1.16.0maintenance
- ·:hammer: build(deps): bump golang.org/x/crypto from 0.56.0 to 0.57.0maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.9 to 1.10.10maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.9 to 1.10.10maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.9 to 1.10.10maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore from 1.10.9 to 1.10.10maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.9 to 1.10.10maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.32 to 1.6.34maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.33 to 1.6.34maintenance
- ·:hammer: build(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3maintenance
- ·:hammer: build(deps): bump the codeql-action group across 1 directory with 2 updatesmaintenance
- ·:hammer: build(deps): bump golang.org/x/crypto from 0.55.0 to 0.56.0maintenance
- ·:hammer: build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0maintenance
- ·:hammer: build(deps): bump github.com/prometheus/common from 0.70.1 to 0.71.0maintenance
- ·:hammer: build(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1maintenance
- ·:hammer: build(deps): bump github.com/tektoncd/pipeline from 1.15.1 to 1.16.0 in /test/custom-task-ctrls/wait-task-betamaintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.32 to 1.6.33maintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9maintenance
- ·:hammer: build(deps): bump the all group across 1 directory with 4 updatesmaintenance
- ·:hammer: build(deps): bump github.com/prometheus/client_model from 0.6.2 to 0.6.3maintenance
- ·:hammer: deps: use new import path for google/cel-go libmaintenance
- ·:hammer: build(deps): bump github.com/google/go-containerregistry from 0.21.9 to 0.22.0maintenance
- ·:hammer: fix(CI): group github/codeql-action/* dependabot updatesmaintenance
- ·:hammer: Bump plumbing ref for github_release_oci taskmaintenance
- ·:book: docs: add v1.16.0 release to releases.mdmaintenance
- ·:book: docs: clarify config-tracing and config-observability are separate tracing pathsmaintenance
62 lines1 security1 deprecated3 added1 changed6 fixed1 other49 maintenancetyped from the source notes
Pipeline release v1.15.3 "Toyger Orisa" LTS
Tekton Pipelines v1.15.3, an LTS patch release, was published. The condensed notes list one deprecation notice, one change, and one fix, but the entries are placeholder titles without detail. The fix allows tt.params as a valid variable-reference prefix, cherry-picked to the release-v1.15.x line.
platform teams Platform teams on the v1.15 LTS line can take the patch for the variable-reference fix. The deprecation and change entries lack titles or details in the source text, so their impact cannot be assessed from it; check the upstream release notes before upgrading.
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [cherry-pick: release-v1.15.x] Allow tt.params as a valid variable-reference prefixfixed
- ·Examples @ v1.15.3other
19 maintenance lines (dependency bumps, CI, tests, docs)
- ·Docs @ v1.15.3maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore from 1.10.10 to 1.10.11 in the sigstore groupmaintenance
- ·:hammer: [release-v1.15.x] bump the all group in /tekton with 4 updatesmaintenance
- ·:hammer: [release-v1.15.x] bump agilepathway/label-checker from 1.6.65 to 1.6.66maintenance
- ·:hammer: [release-v1.15.x] bump zizmorcore/zizmor-action from 0.6.3 to 0.6.4maintenance
- ·:hammer: [release-v1.15.x] bump the sigstore group with 2 updatesmaintenance
- ·:hammer: [release-v1.15.x] bump the all group in /tekton with 6 updatesmaintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore from 1.10.9 to 1.10.10maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.9 to 1.10.10maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.9 to 1.10.10maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/kind-diag from 1.6.33 to 1.6.35maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/analyze from 4.37.7 to 4.37.9 in the codeql-action group across 1 directorymaintenance
- ·:hammer: [release-v1.15.x] bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/setup-kind from 1.6.32 to 1.6.35maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.9maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/init from 4.37.7 to 4.37.9maintenance
- ·:hammer: [release-v1.15.x] bump github.com/prometheus/client_model from 0.6.2 to 0.6.3maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/kind-diag from 1.6.32 to 1.6.33maintenance
- ·:hammer: [release-v1.15.x] bump the all group in /tekton with 4 updatesmaintenance
23 lines1 deprecated1 changed1 fixed1 other19 maintenancetyped from the source notes
Pipeline release v1.15.2 "Toyger Orisa" LTS
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
25 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [release-v1.15.x] bump google.golang.org/grpc from 1.82.1 to 1.82.2maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/setup-kind from 1.6.31 to 1.6.32maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/kind-diag from 1.6.31 to 1.6.32maintenance
- ·:hammer: [release-v1.15.x] bump the kubernetes group with 5 updatesmaintenance
- ·:hammer: [release-v1.15.x] bump the kubernetes group in /test/custom-task-ctrls/wait-task-beta with 3 updatesmaintenance
- ·:hammer: [release-v1.15.x] bump github.com/spiffe/spire-api-sdk from 1.15.2 to 1.15.3maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/analyze from 4.37.6 to 4.37.7maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/init from 4.37.0 to 4.37.7maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7maintenance
- ·:hammer: [release-v1.15.x] bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/kind-diag from 1.6.30 to 1.6.31maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/setup-kind from 1.6.30 to 1.6.31maintenance
- ·:hammer: [release-v1.15.x] bump ossf/scorecard-action from 2.4.3 to 2.4.4maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/analyze from 4.37.5 to 4.37.6maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6maintenance
- ·:hammer: [release-v1.15.x] bump fgrosse/go-coverage-report from 1.3.0 to 1.3.1maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/kind-diag from 1.6.27 to 1.6.30maintenance
- ·:hammer: [release-v1.15.x] bump github.com/google/go-containerregistry from 0.21.7 to 0.21.9maintenance
- ·:hammer: [release-v1.15.x] bump chainguard-dev/actions/setup-kind from 1.6.27 to 1.6.30maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/analyze from 4.37.0 to 4.37.5maintenance
- ·:hammer: [release-v1.15.x] bump github.com/jenkins-x/go-scm from 1.15.31 to 1.15.36maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.8 to 1.10.9maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.8 to 1.10.9maintenance
- ·:hammer: [release-v1.15.x] bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2maintenance
- ·:hammer: [release-v1.15.x] bump actions/checkout from 7.0.0 to 7.0.1maintenance
27 lines1 deprecated1 changed25 maintenancetyped from the source notes
Pipeline release v1.9.8 "Devon Rex Dreadnought"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [release-v1.9.x] bump google.golang.org/grpc from 1.82.1 to 1.82.2maintenance
3 lines1 deprecated1 changed1 maintenancetyped from the source notes
Pipeline release v1.16.0 "Manx WALL-E"
- !:hammer: build(deps): bump step-security/harden-runner from 2.20.1 to 2.21.0security
- !:hammer: build(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1security
- !:hammer: build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0security
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- +:sparkles: feat(tracing): add spans for task parameter and workspace substitution #9801added
- +:sparkles: test(notifications): cover CustomRun initTracing span propagationadded
- +:sparkles: feat: enable set-security-context feature flag by defaultadded
- *:bug: fix(CI): update golang-ci install URL to use main branchfixed
- *:bug: fix(nightlies): pass previousReleaseTag/releaseName to tkn pipeline startfixed
- *:bug: fix(ci): bump codeql-action/analyze to match initfixed
- *:bug: fix: end root tracing span at reconciliation completionfixed
1 more lines
- ·:rotating_light: set-security-context enabled by defaultother
48 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: Use larger GitHub-hosted runners for CI and E2Emaintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.31 to 1.6.32maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.31 to 1.6.32maintenance
- ·:hammer: build(deps): bump github.com/tektoncd/pipeline from 1.15.0 to 1.15.1 in /test/custom-task-ctrls/wait-task-betamaintenance
- ·:hammer: Bump github/codeql-action to v4.37.7maintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1maintenance
- ·:hammer: build(deps): bump the kubernetes group with 5 updatesmaintenance
- ·:hammer: build(deps): bump the kubernetes group in /test/custom-task-ctrls/wait-task-beta with 3 updatesmaintenance
- ·:hammer: build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.2 to 1.15.3maintenance
- ·:hammer: build(deps): bump github.com/allegro/bigcache/v3 from 3.1.0 to 3.2.0maintenance
- ·:hammer: build(deps): bump github/codeql-action/init from 4.37.5 to 4.37.7maintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7maintenance
- ·:hammer: build(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0maintenance
- ·:hammer: fix: exclude generated and non-library code from codecov coveragemaintenance
- ·:hammer: build(deps): bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.30 to 1.6.31maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.30 to 1.6.31maintenance
- ·:hammer: build(deps): bump github.com/google/cel-go from 0.30.0 to 0.31.0maintenance
- ·:hammer: Regenerate dependabot.yml configurationmaintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.5 to 4.37.6maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.27 to 1.6.30maintenance
- ·:hammer: build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4maintenance
- ·:hammer: Move v1.3.x to End of Life releasesmaintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.27 to 1.6.30maintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.5maintenance
- ·:hammer: build(deps): bump zizmorcore/zizmor-action from 0.6.0 to 0.6.2maintenance
- ·:hammer: build(deps): bump github/codeql-action/init from 4.37.3 to 4.37.5maintenance
- ·:hammer: build(deps): bump github/codeql-action/analyze from 4.37.3 to 4.37.5maintenance
- ·:hammer: build(deps): bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9maintenance
- ·:hammer: Regenerate dependabot.yml configurationmaintenance
- ·:hammer: build(deps): bump github.com/tektoncd/pipeline from 1.14.1 to 1.15.0 in /test/custom-task-ctrls/wait-task-betamaintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.8 to 1.10.9maintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.0maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.8 to 1.10.9maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.8 to 1.10.9maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9maintenance
- ·:hammer: build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.8 to 1.10.9maintenance
- ·:hammer: build(deps): bump github.com/jenkins-x/go-scm from 1.15.31 to 1.15.32maintenance
- ·:hammer: build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8maintenance
- ·:hammer: build(deps): bump github.com/google/cel-go from 0.29.2 to 0.30.0maintenance
- ·:hammer: build(deps): bump actions/download-artifact from 4.2.1 to 8.0.1maintenance
- ·:hammer: build(deps): bump actions/checkout from 7.0.0 to 7.0.1maintenance
- ·:hammer: build(deps): bump fgrosse/go-coverage-report from 1.3.0 to 1.3.1maintenance
- ·:hammer: build(deps): bump github/codeql-action/init from 4.37.0 to 4.37.3maintenance
- ·:book: docs: clarify set-security-context scope and rollbackmaintenance
- ·:book: docs: include command to apply optional config to run e2e locally in development documentationmaintenance
- ·:book: docs: add v1.15.0 release to releases.mdmaintenance
61 lines3 security1 deprecated3 added1 changed4 fixed1 other48 maintenancetyped from the source notes
Pipeline release v1.15.1 "Toyger Orisa" LTS
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
4 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.8 to 1.10.9maintenance
- ·:hammer: [release-v1.15.x] bump github/codeql-action/upload-sarif from 4.37.1 to 4.37.5maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9maintenance
- ·:hammer: [release-v1.15.x] bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.8 to 1.10.9maintenance
6 lines1 deprecated1 changed4 maintenancetyped from the source notes
Pipeline release v1.9.7 "Devon Rex Dreadnought"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [cherry-pick: release-v1.9.x] Fix PipelineRun stuck in ResolvingTaskRef when ResolutionRequest enqueue is missedfixed
- *:bug: [cherry-pick: release-v1.9.x] fix(resolvers): honor leader-election bucket ownershipfixed
- *:bug: [cherry-pick: release-v1.9.x] fix(resolvers): skip re-resolution when ResolutionRequest data is already presentfixed
2 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [release-v1.9.x] bump google.golang.org/protobuf from 1.36.11 to 1.36.12maintenance
- ·:hammer: [release-v1.9.x] bump ossf/scorecard-action from 2.4.3 to 2.4.4maintenance
7 lines1 deprecated1 changed3 fixed2 maintenancetyped from the source notes
Pipeline release v1.6.7 "Sphynx Sentinels"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [release-v1.6.x] Fix PipelineRun stuck in ResolvingTaskRef when RR enqueue is missedfixed
- *:bug: [cherry-pick: release-v1.6.x] fix(resolvers): honor leader-election bucket ownershipfixed
- *:bug: [cherry-pick: release-v1.6.x] fix(resolvers): skip re-resolution when ResolutionRequest data is already presentfixed
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [release-v1.6.x] bump ossf/scorecard-action from 2.4.3 to 2.4.4maintenance
6 lines1 deprecated1 changed3 fixed1 maintenancetyped from the source notes
v1.15.02026-07-31minorsecurity++~-************!!!sharesource Pipeline release v1.15.0 "Toyger Orisa" LTS
- !:hammer: build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0security
- !:book: docs: add security threat modelsecurity
- !:book: docs(security): document workspace isolation across trust boundariessecurity
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- +:sparkles: Add configuration for custom git resolver backoffadded
- +:sparkles: feat: add configurable grace period for transient CreateContainerErroradded
- *:bug: fix(resolutionrequest): preserve resolver-written status fieldsfixed
- *:bug: fix(resolvers): honor leader-election bucket ownershipfixed
- *:bug: Prevent matrix combination count int overflowfixed
- *:bug: Fix PipelineRun stuck in ResolvingTaskRef when ResolutionRequest enqueue is missedfixed
- *:bug: Fix RestrictLength panic on all-symbol inputfixed
8 more lines
- *:bug: Fix sidecar-logs result extraction for results exceeding 4096 bytesfixed
- *:bug: Preserve Sidecar RestartPolicy on API conversionfixed
- *:bug: Mount debug scripts read-only in step containersfixed
- *:bug: fix(nightlies): restart webhook after CEL feature-flag patchfixed
- *:bug: fix(deps): bump OTel SDK with knative.dev/pkg semconv alignmentfixed
- *:bug: fix(nightlies): skip draft-release tasks when releaseMode=nightlyfixed
- *:bug: Fix broken object param example links in API specfixed
- *:bug: fix: resolve in-toto attestation UUID in wait-for-chainsfixed
49 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: fix(release): copy vendor tarball into kodata instead of symlinkmaintenance
- ·:hammer: Add branch prefix to Dependabot PR titles for release branchesmaintenance
- ·:hammer: Fix wrong Deprecated godoc in affinity assistantmaintenance
- ·:hammer: build(deps): bump github.com/prometheus/common from 0.70.0 to 0.70.1maintenance
- ·:hammer: build(deps): bump the kubernetes group with 5 updatesmaintenance
- ·:hammer: build(deps): bump the kubernetes group across 1 directory with 3 updatesmaintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1maintenance
- ·:hammer: build(deps): bump github.com/tektoncd/pipeline from 1.14.0 to 1.14.1 in /test/custom-task-ctrls/wait-task-betamaintenance
- ·:hammer: build(deps): bump actions/setup-go from 6.5.0 to 7.0.0maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.26 to 1.6.27maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.26 to 1.6.27maintenance
- ·:hammer: build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0maintenance
- ·:hammer: Ignore otel major/minor updates in dependabotmaintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1maintenance
- ·:hammer: ci(.github/workflows): enable Codecov coverage reportingmaintenance
- ·:hammer: build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.0maintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0maintenance
- ·:hammer: build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0maintenance
- ·:hammer: build(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0maintenance
- ·:hammer: build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.1 to 1.15.2maintenance
- ·:hammer: build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0maintenance
- ·:hammer: build(deps): bump github.com/google/cel-go from 0.29.1 to 0.29.2maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.25 to 1.6.26maintenance
- ·:hammer: build(deps): bump ko-build/setup-ko from 0.9 to 0.10maintenance
- ·:hammer: build(deps): bump github.com/google/cel-go from 0.29.0 to 0.29.1maintenance
- ·:hammer: build(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3maintenance
- ·:hammer: build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3maintenance
- ·:hammer: build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0maintenance
- ·:hammer: build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3maintenance
- ·:hammer: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.25 to 1.6.26maintenance
- ·:hammer: build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0maintenance
- ·:hammer: build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0maintenance
- ·:hammer: build(deps): bump github.com/tektoncd/pipeline from 1.13.1 to 1.14.0 in /test/custom-task-ctrls/wait-task-betamaintenance
- ·:hammer: ci: fix mismatched setup-go version comment in dependabot-regenmaintenance
- ·:hammer: build(deps): bump actions/setup-go from 6.4.0 to 6.5.0maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/setup-kind from 1.6.24 to 1.6.25maintenance
- ·:hammer: build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7maintenance
- ·:hammer: build(deps): bump actions/cache from 5.0.5 to 6.1.0maintenance
- ·:hammer: build(deps): bump chainguard-dev/actions/kind-diag from 1.6.24 to 1.6.25maintenance
- ·:hammer: build(deps): bump the all group in /tekton with 4 updatesmaintenance
- ·:hammer: build(deps): bump github.com/jenkins-x/go-scm from 1.15.30 to 1.15.31maintenance
- ·:hammer: test: add e2e test for OpenCensus to OpenTelemetry metrics migrationmaintenance
- ·:hammer: [TEP-0056] Test ServiceAccount propagation in PinPmaintenance
- ·:book: Add PR template reminder to AGENTS.mdmaintenance
- ·:book: Use folder-level symlinks for agent skill discoverymaintenance
- ·:book: Fix moved example links in pipeline docsmaintenance
- ·:book: docs: add v1.14.0 release to releases.mdmaintenance
- ·:book: docs: document StepAction support in Hub Resolvermaintenance
69 lines3 security1 deprecated2 added1 changed13 fixed49 maintenancetyped from the source notes
Pipeline release v1.6.6 "Sphynx Sentinels"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [cherry-pick: release-v1.6.x] fix: surface clear errors when completed tasks miss referenced resultsfixed
3 lines1 deprecated1 changed1 fixedtyped from the source notes
Pipeline release v1.9.6 "Devon Rex Dreadnought"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [release-v1.9.x] fix: bump Go and x deps for CVEsfixed
1 maintenance lines (dependency bumps, CI, tests, docs)
- ·:hammer: [cherry-pick: release-v1.9.x] fix: replace kodata LICENSE symlinks with actual filesmaintenance
4 lines1 deprecated1 changed1 fixed1 maintenancetyped from the source notes
Pipeline release v1.6.5 "Sphynx Sentinels"
- -:rotating_light: [Deprecation Notice Title]deprecated
- ~:rotating_light: [Change Title]changed
- *:bug: [release-v1.6.x] fix: bump Go for CVEsfixed
3 lines1 deprecated1 changed1 fixedtyped from the source notes
16 older releases
| v1.12.2 | 2026-06-23 | patch | ~- 3 lines |
| v1.9.5 | 2026-06-23 | patch | ~- 5 lines |
| v1.6.4 | 2026-06-23 | patch | ~- 5 lines |
| v1.3.6 | 2026-06-23 | patch | ~- 4 lines |
| v1.0.4 | 2026-06-23 | patch | ~-* 3 lines |
| v1.13.1 | 2026-06-15 | patch | ~-***** 7 lines |
| v1.12.1 | 2026-06-15 | patch | security ~-*********!!! 46 lines |
| v1.10.3 | 2026-06-15 | minor | ~-* 3 lines |
| v1.9.4 | 2026-06-15 | minor | security ~-********!! 37 lines |
| v1.6.3 | 2026-06-15 | minor | security ~-*******!! 36 lines |
| v1.3.5 | 2026-06-15 | minor | security ~-***! 40 lines |
| v1.2.1 | 2026-06-15 | minor | ~-* 3 lines |
| v1.0.3 | 2026-06-11 | patch | security *! 15 lines |
| v1.13.0 | 2026-05-29 | minor | security +++~-**********!!! 65 lines |
| v1.12.0 | 2026-05-04 | minor | security +++++++~~~-*!!!!!! 36 lines |
| v1.11.1 | 2026-04-21 | minor | security !!!!! 6 lines |