Skip to content

pipeline

v1.14.1 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 4d Pipelines
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

cdf kubernetes pipeline tekton

Summary

AI summary

Fix pipeline validation rejecting $(results.*) variable references in task parameters

Full changelog

Tekton Pipeline release v1.14.1 ""Chartreux Cait Sith""

-Docs @ v1.14.1
-Examples @ v1.14.1

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml
REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.14.1@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes

  • :bug: [cherry-pick: release-v1.14.x] Add results as a valid prefix to Pipeline task params (#10445)

Fix pipeline validation rejecting $(results.*) variable references in pipeline task parameters

Misc

Docs

Thanks

Thanks to these contributors who contributed to v1.14.1!

  • :heart: @tekton-robot

Extra shout-out for awesome release notes:

  • :heart_eyes: @tekton-robot

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track pipeline

Get notified when new releases ship.

Sign up free

About pipeline

A cloud-native Pipeline resource.

All releases →

Related context

Earlier breaking changes

  • v1.13.1 Tekton no longer applies default resource requests or limits to internal containers when `default-container-resource-requirements` is unset.
  • v1.9.4 Tekton Resolvers now only resolve StepActions, Tasks, and Pipelines; custom resolvers for other types will fail.
  • v1.6.3 Restrict Tekton Resolvers to resolve only StepActions, Tasks, and Pipelines; custom resolvers for other types now fail.

Beta — feedback welcome: [email protected]