Update module github.com/tektoncd/pipeline to v1.16.0 (release-v0.7) - #3564
Update module github.com/tektoncd/pipeline to v1.16.0 (release-v0.7)#3564renovate[bot] wants to merge 1 commit into
Conversation
ℹ️ Artifact update noticeFile name: acceptance/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
File name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
|
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
|
🤖 Finished Review · ✅ Success · Started 3:05 AM UTC · Completed 3:11 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $3.74 |
|
Looks good to me Previous runReviewRenovate PR bumping FindingsInfo
|
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
added
the
ready-for-merge
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
0f8f27c to
11a6ae7
Compare
|
🤖 Finished Review · ✅ Success · Started 3:19 PM UTC · Completed 3:26 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $4.20 |
This PR contains the following updates:
v1.12.0→v1.16.0Release Notes
tektoncd/pipeline (github.com/tektoncd/pipeline)
v1.16.0: Tekton Pipeline release v1.16.0 "Manx WALL-E"Compare Source
🎉 Secure by default, sharper traces 🎉
-Docs @ v1.16.0
-Examples @ v1.16.0
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677a13e773b2ae0f6c52943d2b44a284030efb9b43068a9927a698b4799e13342b14Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Upgrade Notices
set-security-contextenabled by defaultaction required:
set-security-contextnow defaults totrueand applies only to Tekton-injected TaskRun containers and Affinity Assistants (#9589, #10680). User-defined Steps and Sidecars must supply their own restricted-compatible security contexts. If the generated security contexts are incompatible with your images or Kubernetes implementation, setset-security-contextto"false".Changes
Features
Add tracing spans to the task parameter and workspace substitution pipeline in the TaskRun reconciler to improve observability and performance tracking. No user-facing changes.
Fixes
Update the golangci-lint installation URL
Fix root tracing span lifecycle in TaskRun and PipelineRun reconcilers to cover the full reconciliation cycle instead of ending immediately after initialization.
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.16.0!
Extra shout-out for awesome release notes:
v1.15.2: Tekton Pipeline release v1.15.2 "Toyger Orisa" LTSCompare Source
-Docs @ v1.15.2
-Examples @ v1.15.2
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677ad57a83fb64ccefa586efb4446b591b3a2d760972ce02657eb1929896879dbb74Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.15.2!
Extra shout-out for awesome release notes:
v1.15.1: Tekton Pipeline release v1.15.1 "Toyger Orisa" LTSCompare Source
-Docs @ v1.15.1
-Examples @ v1.15.1
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677a210b81c75be73c2949e8e917e1776229b8bb68bc95b532e51d8f2bf29219a9c1Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.15.1!
Extra shout-out for awesome release notes:
v1.15.0: Tekton Pipeline release v1.15.0 "Toyger Orisa" LTSCompare Source
🎉 Steady under pressure — configurable backoffs and battle-tested fixes 🎉
-Docs @ v1.15.0
-Examples @ v1.15.0
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677a045c87c57225dfff98b32437f52b89e344c449bcd535b462d41fff9004b89d29Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Enables the configuration of backoffs for git resolver requests.
Add
default-create-container-error-timeoutconfiguration option inconfig-defaultsto provide a grace period before failing TaskRuns on transientCreateContainerError/CreateContainerConfigErrorwith "context deadline exceeded". Default is 0 (fail fast, preserving existing behavior)Fixes
Prevent ResolutionRequest lifecycle updates from overwriting resolver-written status fields.
Fix resolver replicas processing ResolutionRequests outside their leader-election bucket.
Fixed an integer overflow in matrix combination counting that could let a very
large matrix bypass the max-matrix-combinations validation guard.
Fix PipelineRun remaining stuck in ResolvingTaskRef when a ResolutionRequest completion event is missed by periodically requeueing while remote resolution is in progress
Fixed a panic in the PipelineRun controller when a PipelineRun using an embedded (anonymous) pipeline spec sets a
generateNamethat contains no alphanumeric characters (for example--). Such names no longer crash the reconciler.Fix sidecar-logs result extraction dropping all TaskRun results when a single result's JSON exceeds 4096 bytes but is within the configured max-result-size. Regression since v1.9.0.
Fixed a bug where a Sidecar's
restartPolicy(native Kubernetes sidecar support)was dropped when converting a Task or TaskRun between the v1beta1 and v1 API
versions, causing a sidecar requested as a native sidecar to be created as an
ordinary sidecar.
Debug breakpoint scripts are now mounted read-only in step containers, so a step can no longer overwrite them before a user execs in to continue or fail a breakpoint.
Misc
Fix release pipeline
ko resolvefailure caused byko>= v0.19.0 rejectingthe
kodata/source.tar.gzsymlink used to bundle vendored source.Docs
Thanks
Thanks to these contributors who contributed to v1.15.0!
Extra shout-out for awesome release notes:
v1.14.1: Tekton Pipeline release v1.14.1 "Chartreux Cait Sith"Compare Source
Tekton Pipeline release v1.14.1 ""Chartreux Cait Sith""
-Docs @ v1.14.1
-Examples @ v1.14.1
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8aObtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
Fix pipeline validation rejecting $(results.*) variable references in pipeline task parameters
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.14.1!
Extra shout-out for awesome release notes:
v1.14.0: Tekton Pipeline release v1.14.0 "Chartreux Cait Sith"Compare Source
🎉 🐱 Pipelines in Pipelines by ref, leaner controllers & sturdier reconcilers 🤖 🎉
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677aa9d0ba4d268af76a6ffef1ad43d8ad6966ceef7663859284b3163eddafaa94abObtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Errors creating a Pod or updating a TaskRun are now recorded on the TaskRun reconciler trace spans, so failures are visible in distributed traces.
Errors creating a child TaskRun or CustomRun are now recorded on the PipelineRun reconciler trace spans, so failures are visible in distributed traces.
Add tracing spans to the PipelineRun cancel and timeout code paths, so cancellation and timeout of a run and its children are visible in distributed traces.
Inject traceID and spanID into structured log output for TaskRun and PipelineRun reconcilers when tracing is enabled, enabling log-to-trace correlation in observability platforms.
[ENHANCEMENT] notifications: add OTel tracing spans to CustomRun reconciler (ReconcileKind, ReconcileRunObject, EmitCloudEvents)
Fixes
Bump Go to 1.26.4 for CVE remediation.
Fixed a controller crash ("concurrent map writes") that could occur while resolving multiple StepAction references when the Task uses an object parameter with both a default and a TaskRun-provided value.
Fix Rekor EntryID extraction in release pipeline to publish correct 80-char EntryIDs instead of truncated 64-char hashes.
Before this change, ResolutionRequests could only resolve Pipelines, Tasks, and StepActions. After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
Fix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads). The controller's CPU variant was leaking into TEKTON_PLATFORM_COMMANDS keys via platforms.NewPlatform(), causing "could not find command for platform" errors on worker nodes of a different architecture.
Pipeline validation now rejects invalid variable references like
$(new_image)in task parameters with a clear error message, instead of silently accepting them or crashing the webhook. Users who accidentally use$()(Tekton variable syntax) instead of${}(shell variable syntax) in Pipeline param values will now receive a helpful validation error indicating the valid prefixes (params, tasks, finally, context, workspaces).Fix validation error when a Task uses both spec.results and spec.steps[].results in the same step script
Fix incorrect OCI image labels (title, url, description) inherited from base image in published pipeline images
Misc
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.