✓ No known CVEs patched in this version
Topics
Summary
AI summaryAdded automated draft release support to the release pipeline.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Adds automated draft release support to the release pipeline. Adds automated draft release support to the release pipeline. Source: llm_adapter@2026-06-15 Confidence: high |
— |
Full changelog
-Docs @ v1.10.3
-Examples @ v1.10.3
Installation one-liner
kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.10.3/release.yaml
Attestation
The Rekor UUID for this release is 943a51591356d2f120d270034183ce53533d3aab43c97279bbee1baf58ddb97f
Obtain the attestation:
REKOR_UUID=943a51591356d2f120d270034183ce53533d3aab43c97279bbee1baf58ddb97f
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.10.3/release.yaml
REKOR_UUID=943a51591356d2f120d270034183ce53533d3aab43c97279bbee1baf58ddb97f
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.10.3@sha256:" + .digest.sha256')
# Download the release file
curl -L "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- :bug: [release-v1.10.x] fix: add automated draft release support to release pipeline (#10215)
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.10.3!
- :heart: @vdemeester
Extra shout-out for awesome release notes:
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.13.1 Tekton no longer applies default resource requests or limits to internal containers when `default-container-resource-requirements` is unset.
- v1.9.4 Tekton Resolvers now only resolve StepActions, Tasks, and Pipelines; custom resolvers for other types will fail.
- v1.6.3 Restrict Tekton Resolvers to resolve only StepActions, Tasks, and Pipelines; custom resolvers for other types now fail.
Beta — feedback welcome: [email protected]