✓ No known CVEs patched in this version
Topics
Summary
AI summaryFixed automated draft release support in the release pipeline.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Adds automated draft release support to the release pipeline. Adds automated draft release support to the release pipeline. Source: llm_adapter@2026-06-15 Confidence: high |
— |
Full changelog
-Docs @ v1.2.1
-Examples @ v1.2.1
Installation one-liner
kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.2.1/release.yaml
Attestation
The Rekor UUID for this release is a7e97130e832144c91ee3691f32ac74724412ba43a15c036380d1cb237daebc9
Obtain the attestation:
REKOR_UUID=a7e97130e832144c91ee3691f32ac74724412ba43a15c036380d1cb237daebc9
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.2.1/release.yaml
REKOR_UUID=a7e97130e832144c91ee3691f32ac74724412ba43a15c036380d1cb237daebc9
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.2.1@sha256:" + .digest.sha256')
# Download the release file
curl -L "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- :bug: [release-v1.2.x] fix: add automated draft release support to release pipeline (#10211)
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.2.1!
- :heart: @vdemeester
Extra shout-out for awesome release notes:
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.13.1 Tekton no longer applies default resource requests or limits to internal containers when `default-container-resource-requirements` is unset.
- v1.9.4 Tekton Resolvers now only resolve StepActions, Tasks, and Pipelines; custom resolvers for other types will fail.
- v1.6.3 Restrict Tekton Resolvers to resolve only StepActions, Tasks, and Pipelines; custom resolvers for other types now fail.
Beta — feedback welcome: [email protected]