✓ No known CVEs patched in this version
Topics
Summary
AI summaryFix pipeline validation rejecting $(results.*) variable references in task parameters
Full changelog
Tekton Pipeline release v1.14.1 ""Chartreux Cait Sith""
-Docs @ v1.14.1
-Examples @ v1.14.1
Installation one-liner
kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml
Attestation
The Rekor UUID for this release is 108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a
Obtain the attestation:
REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml
REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.14.1@sha256:" + .digest.sha256')
# Download the release file
curl -L "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
Fixes
- :bug: [cherry-pick: release-v1.14.x] Add results as a valid prefix to Pipeline task params (#10445)
Fix pipeline validation rejecting $(results.*) variable references in pipeline task parameters
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.14.1!
- :heart: @tekton-robot
Extra shout-out for awesome release notes:
- :heart_eyes: @tekton-robot
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Earlier breaking changes
- v1.13.1 Tekton no longer applies default resource requests or limits to internal containers when `default-container-resource-requirements` is unset.
- v1.9.4 Tekton Resolvers now only resolve StepActions, Tasks, and Pipelines; custom resolvers for other types will fail.
- v1.6.3 Restrict Tekton Resolvers to resolve only StepActions, Tasks, and Pipelines; custom resolvers for other types now fail.
Beta — feedback welcome: [email protected]