Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update module github.com/tektoncd/pipeline to v0.57.0 #109

Closed
wants to merge 1 commit into from
Closed

chore(deps): update module github.com/tektoncd/pipeline to v0.57.0 #109

wants to merge 1 commit into from

Conversation

zregvart
Copy link
Owner

This PR contains the following updates:

Package Type Update Change
github.com/tektoncd/pipeline require minor v0.54.0 -> v0.57.0
github.com/tektoncd/pipeline require minor v0.56.1 -> v0.57.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

tektoncd/pipeline (github.com/tektoncd/pipeline)

v0.57.0: Tekton Pipeline release v0.57.0 "Burmilla Baymax"

Compare Source

-Docs @​ v0.57.0
-Examples @​ v0.57.0

Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.57.0/release.yaml
Attestation

The Rekor UUID for this release is 24296fb24b8ad77add7b0a9a7946185efd5c044009544db4ec1a3799c4b6a95285f979f1fd78cc75

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77add7b0a9a7946185efd5c044009544db4ec1a3799c4b6a95285f979f1fd78cc75
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.57.0/release.yaml
REKOR_UUID=24296fb24b8ad77add7b0a9a7946185efd5c044009544db4ec1a3799c4b6a95285f979f1fd78cc75

##### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.57.0@​sha256:" + .digest.sha256')

##### Download the release file
curl "$RELEASE_FILE" > release.yaml

##### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes
Features
  • ✨ Allow for the specified duration (#​7666)

Configure default-imagepullbackoff-timeout to allow imagePullBackOff to retry and wait for the specified duration before failing the pipeline.

  • ✨ Add granular termination reason in container termination message (#​7565)

Steps in a TaskRun will have more granular termination reasons indicating what exactly happened in new terminationReason field: Completed, Continued, Error, TimeoutExceeded, Skipped, TaskRunCancelled

Fixes
  • 🐛 fix(pipeline): correct warning path for duplicate param name in pipeline tasks (#​7651)

fix: correct warning path for duplicate param name in pipeline tasks

  • 🐛 The field in Final Task cannot parse ordinary Task status information. (#​7637)

The status of the referenced ordinary task is replaced before calculating the final task when.cel.

  • 🐛 fix: prevent modification of annotations on completed TaskRuns (#​7603)

fix: the pipeline controller will no longer modify any annotation it has set on completed pipelineruns

  • 🐛 allow pipeline runs whose task/custom runs have been deleted still timeout (#​7557)

PipelineRuns that timeout will no longer be blocked on reaching a terminal, cancelled state if their underlying TaskRuns or CustomRuns were deleted beforehand.

  • 🐛 update docker-in-docker testimage for s390x (#​7652)
Misc

Created v0.56 LTS release.

  • 🔨 matrix name updated to end with the instance count (#​7563)

taskRun names updated to end with the instance count for all fan out instances of matrix.

  • 🔨 Isolate new env nightly feature flag test (#​7686)
  • 🔨 chore(deps): bump github/codeql-action from 3.24.0 to 3.24.3 (#​7685)
  • 🔨 chore(deps): bump tj-actions/changed-files from 42.0.2 to 42.0.4 (#​7684)
  • 🔨 chore(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc6 to 1.1.0 (#​7682)
  • 🔨 chore(deps): bump github.com/google/cel-go from 0.19.0 to 0.20.0 (#​7681)
  • 🔨 chore(deps): bump k8s.io/client-go from 0.27.8 to 0.27.11 in /test/custom-task-ctrls/wait-task-beta (#​7673)
  • 🔨 chore(deps): bump google.golang.org/grpc from 1.61.0 to 1.61.1 (#​7670)
  • 🔨 Patch Release v0.56.1 (#​7665)
  • 🔨 Patch Release v0.56.1 (#​7663)
  • 🔨 chore(deps): bump go.opentelemetry.io/otel/sdk from 1.22.0 to 1.23.1 (#​7659)
  • 🔨 chore(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 (#​7658)
  • 🔨 Update e2e-test script for per-feature flag test (#​7657)
  • 🔨 Fix typo in publish task (#​7648)
  • 🔨 Bump github.com/golangci/golangci-lint from 1.55.1 to 1.56.1 in /tools (#​7646)
  • 🔨 Bump go.opentelemetry.io/otel from 1.22.0 to 1.23.1 (#​7645)
  • 🔨 Bump github.com/opencontainers/image-spec from 1.1.0-rc3 to 1.1.0-rc6 (#​7635)
  • 🔨 Bump github/codeql-action from 3.23.1 to 3.24.0 (#​7634)
  • 🔨 TEP-0138 New features to use Per-feature flag struct (#​7633)
  • 🔨 Bump github.com/containerd/containerd from 1.6.19 to 1.7.13 (#​7628)
  • 🔨 Per-feature Flag Test Suite (#​7627)
  • 🔨 Bump github.com/google/go-containerregistry from 0.18.0 to 0.19.0 (#​7624)
  • 🔨 Bump tj-actions/changed-files from 42.0.0 to 42.0.2 (#​7622)
  • 🔨 Bump actions/upload-artifact from 4.2.0 to 4.3.0 (#​7620)
  • 🔨 Bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 (#​7616)
  • 🔨 Bump google.golang.org/grpc from 1.60.1 to 1.61.0 (#​7612)
  • 🔨 Bump github.com/google/uuid from 1.5.0 to 1.6.0 (#​7611)
  • 🔨 Bump github.com/opencontainers/image-spec from 1.1.0-rc3 to 1.1.0-rc.6 (#​7610)
  • 🔨 Bump github.com/containerd/containerd from 1.6.19 to 1.7.12 (#​7609)
  • 🔨 Bump go.opentelemetry.io/otel/sdk from 1.21.0 to 1.22.0 (#​7606)
  • 🔨 Bump github.com/jenkins-x/go-scm from 1.14.25 to 1.14.26 (#​7605)
  • 🔨 Bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc.6 (#​7604)
  • 🔨 Bump code.gitea.io/sdk/gitea from 0.16.0 to 0.17.1 (#​7597)
  • 🔨 Bump github.com/containerd/containerd from 1.7.11 to 1.7.12 (#​7596)
  • 🔨 Bump github.com/google/cel-go from 0.18.1 to 0.19.0 (#​7594)
  • 🔨 Bump tj-actions/changed-files from 41.1.1 to 42.0.0 (#​7593)
  • 🔨 Bump github/codeql-action from 3.23.0 to 3.23.1 (#​7592)
  • 🔨 Bump actions/upload-artifact from 4.1.0 to 4.2.0 (#​7591)
  • 🔨 Bump go.opentelemetry.io/otel from 1.21.0 to 1.22.0 (#​7586)
  • 🔨 Bump github.com/jenkins-x/go-scm from 1.14.24 to 1.14.25 (#​7585)
  • 🔨 Bump github.com/spiffe/go-spiffe/v2 from 2.1.5 to 2.1.7 (#​7584)
  • 🔨 Bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 (#​7583)
  • 🔨 Bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0 (#​7582)
  • 🔨 Error sweep: fix error messages for timing out Runs (#​7572)
  • 🔨 Label user error for failed TaskRunStatus message (#​7543)
  • 🔨 Add pre-commit rules (#​7367)
Docs
  • 📖 Pipeline v0.44.x LTS End of Life (#​7613)

Release v0.44 LTS is EOL

Thanks

Thanks to these contributors who contributed to v0.57.0!

Extra shout-out for awesome release notes:

v0.56.1: Tekton Pipeline release v0.56.1 "Persian Terminator"

Compare Source

-Docs @​ v0.56.1
-Examples @​ v0.56.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77ad1e4c68a476e6b180257b4a6715315a2d40370f46ce4f36ce311c893d7bef2ba

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77ad1e4c68a476e6b180257b4a6715315a2d40370f46ce4f36ce311c893d7bef2ba
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.1/release.yaml
REKOR_UUID=24296fb24b8ad77ad1e4c68a476e6b180257b4a6715315a2d40370f46ce4f36ce311c893d7bef2ba

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.1@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes
  • 🐛 [release-v0.56.x] The field in Final Task cannot parse ordinary Task status information. (#​7661)

he status of the referenced ordinary task is replaced before calculating the final task when.cel.

  • 🐛 [release-v0.56.x] fix(pipeline): correct warning path for duplicate param name in pipeline tasks (#​7660)

ix: correct warning path for duplicate param name in pipeline tasks

  • 🐛 [release-v0.56.x] fix: ensure clustertask annotations are synced to taskrun (#​7654)

ix: ensure ClusterTask annotations and labels are synced to TaskRun

  • 🐛 [release-v0.56.x] do not allow negative requeue times (#​7638)

ipelineRuns and TaskRuns that disable timeouts will no longer experience rapid requeue reconciliations

  • 🐛 [release-v0.56.x] Exclude stopped injected sidecars from TaskRun status (#​7653)
Misc
Docs

Thanks

Thanks to these contributors who contributed to v0.56.1!

Extra shout-out for awesome release notes:

v0.56.0: Tekton Pipeline release v0.56.0 "Persian Terminator LTS"

Compare Source

-Docs @​ v0.56.0
-Examples @​ v0.56.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a0c94b8ccf25fa815c6b01ab90941b17a37373885d8f62efc99b17eea417bed4d

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a0c94b8ccf25fa815c6b01ab90941b17a37373885d8f62efc99b17eea417bed4d
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.56.0/release.yaml
REKOR_UUID=24296fb24b8ad77a0c94b8ccf25fa815c6b01ab90941b17a37373885d8f62efc99b17eea417bed4d

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.56.0@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ Support overriding the SCM type and server URL (#​7450)
    User are now able to override the global server URL when using the git resolver to allow fetching from multiple git providers.
  • ✨ TEP-0142: Introduce WorkingDir in StepActions (#​7461)
  • ✨ TEP-0075(object params and results) promoted to stable (#​7544)
    TEP-0075 promoted to stable - object params and results is now possible with enable-api-fields set to stable.
  • ✨ kind/feature : populate-params-and-results-to-workspace-bindings (#​7503)
  • ✨ TEP-0142: Passing StepResults between Steps (#​7458)
    Enable passing StepResults between Steps in a `Task.
  • ✨ param substitutions not allowed in StepAction's script (#​7459)
    Param substitutions not allowed directly in StepAction's script
Fixes
  • 🐛 fix: ensure global podTemplate configuration is merged correctly (#​7552)

Merge the env and volumes from the podTemplate in the pipelineRun or TaskRun with the global defaults, instead of only considering the specified in the Run's.

  • 🐛 Add back conversion for TaskRunStatus Resources (#​7507)

restore conversion functions from taskRun and taskRunStatus resources for backwards compatibility

  • 🐛 add default resource requirements to init-containers and containers of a pod (#​7003)

[Bug fix]: takes default values of a resource requirements from a config map and updates to a init-container and container resource requirements value, if the value is not present

  • 🐛 kind/bug allowExecution evaluation for when expression returns early when CEL is defined (#​7569)
  • 🐛 Fix broken import of go.opentelemetry.io/otel to v1.21.0 (#​7465)
Misc
  • 🔨 Label for failure PipelineRun Status Message (#​7475)

user error attributions can now be seen via PipelineRunStatus condition messages

  • 🔨 Error sweep: correct InvalidPipelineResultReference failure reason (#​7459)
  • 🔨 Bump github.com/sigstore/sigstore from 1.7.5 to 1.8.1 (#​7575)
  • 🔨 Bump github.com/spiffe/spire-api-sdk from 1.8.5 to 1.8.7 (#​7570)
  • 🔨 Bump tj-actions/changed-files from 41.0.1 to 41.1.1 (#​7567)
  • 🔨 Bump actions/upload-artifact from 4.0.0 to 4.1.0 (#​7566)
  • 🔨 Bump github/codeql-action from 3.22.12 to 3.23.0 (#​7548)
  • 🔨 Bump actions/checkout from 3.1.0 to 4.1.1 (#​7537)
  • 🔨 Bump ossf/scorecard-action from 2.1.2 to 2.3.1 (#​7536)
  • 🔨 Bump tj-actions/changed-files from 40.2.3 to 41.0.1 (#​7535)
  • 🔨 Bump actions/upload-artifact from 3.1.0 to 4.0.0 (#​7534)
  • 🔨 Bump github/codeql-action from 2.2.4 to 3.22.12 (#​7533)
  • 🔨 Bump github.com/containerd/containerd from 1.7.8 to 1.7.11 (#​7529)
  • 🔨 Bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#​7527)
  • 🔨 Hardened GitHub workflows a little bit (#​7524)
  • 🔨 Bump k8s.io/api from 0.27.8 to 0.27.9 in /test/custom-task-ctrls/wait-task-beta (#​7518)
  • 🔨 Bump github.com/jenkins-x/go-scm from 1.14.20 to 1.14.24 (#​7515)
  • 🔨 Bump google.golang.org/grpc from 1.59.0 to 1.60.1 (#​7506)
  • 🔨 Bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 (#​7462)
Docs

Thanks

Thanks to these contributors who contributed to v0.56.0!

Extra shout-out for awesome release notes:

v0.55.0: Tekton Pipeline release v0.55.0 "Bambino Alojzy Gąbka"

Compare Source

🎉 PipelineTask.OnError and bugfixes 🎉

-Docs @​ v0.55.0
-Examples @​ v0.55.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.55.0/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77acf6e7f5cf38da4c2178e88e08bc2f291dc52b756371a21d349ca985bd125ace9

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77acf6e7f5cf38da4c2178e88e08bc2f291dc52b756371a21d349ca985bd125ace9
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.55.0/release.yaml
REKOR_UUID=24296fb24b8ad77acf6e7f5cf38da4c2178e88e08bc2f291dc52b756371a21d349ca985bd125ace9

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.55.0@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ TEP-0142: Introduce WorkingDir in StepActions (#​7461)

Introduce WorkingDir in StepActions

  • ✨ Support overriding the SCM type and server URL (#​7450)

User are now able to override the global server URL when using the git resolver to allow fetching from multiple git providers.

  • ✨ [TEP-0050] Implement PipelineTask OnError (#​7422)

Implement "Ignore Task Failure" with new "PipelineTask.OnError" API field (TEP-0050). User can now set pipelineTask.onError: continue to ignore failure

Fixes
  • 🐛 Fix enum validation with multiple param references (#​7481)

bug fix: allow task-level param references multiple pipeline-level params with enum

  • 🐛 Fix: do not fail TaskRun for concurrent modification errors (#​7467)

fix: taskRuns will not fail for concurrent modification errors when stopping sideCars

  • 🐛 Fix validations for Sidecars to be consistent (#​7443)

sidecars are now validated at admission webhook

  • 🐛 fix: resolve issue where resolutionrequest defaulted to v1alpha1 vs v1beta1 (#​7438)

Resolved issue where resolutionrequest defaulted to v1alpha1 when it should be v1beta1

  • 🐛 Do not require for entrypoint cancellation (#​7430)

ntrypoint cancellation only requires keep-pod-on-cancel: true feature-flag.

  • 🐛 Freeze image sha for dind-sidecar example test. (#​7498)
  • 🐛 FIX: Prevent panic on parameter evaluation (#​7488)
  • 🐛 change ResultRef.ResultsIndex from int to *int (#​7460)
  • 🐛 don't return validation error when final tasks failed/skipped (#​7407)
Misc
  • 🔨 Tracing: Add credentialsSecret for basic authentication to remote endpoint (#​7238)

Tracing config now includes an additional optional field credentialsSecret where users can specify the name of a secret. The username and password fields from the secret will be used to authenticate against Tracing collector endpoint.

  • 🔨 [TEP-0131] Update Conformance Spec for v1 api types (#​7224)

Updates the conformance api spec with v1 api types in line with TEP-131

  • 🔨 Error sweep: complete user-facing error messages formats (#​7474)
  • 🔨 Replace PipelineRunReasonFailedValidation with more granular reasons (#​7417)
  • 🔨 Error sweep: Move TaskRun Reasons in pkg/pod to pkg/apis (#​7406)
  • 🔨 Cleanup error message for Step container status (#​7405)
  • 🔨 Error sweep: add more context for PipelineRunCouldntGetPipeline error message (#​7403)
  • 🔨 Error sweep: refactor steps termination when failing TaskRun (#​7386)
  • 🔨 Refactor common util functions for /test (#​7369)
  • 🔨 Fix showing error message when validation fail (#​7509)
  • 🔨 Git resolver: validate repo URL (#​7482)
  • 🔨 Bump github.com/spiffe/spire-api-sdk from 1.8.4 to 1.8.5 (#​7463)
  • 🔨 Fix some spelling in stepactions.md (#​7432)
  • 🔨 Remove .envrc and show an example in .envrc.sample (#​7429)
  • 🔨 Create scorecard.yml (#​7409)
  • 🔨 Add @​jeromeJu as a pipelines maintainer (#​7327)
  • 🔨 Bump github.com/google/uuid from 1.3.1 to 1.4.0 (#​7308)
Docs
  • 📖 Add stdoutConfig and stderrConfig to alpha features table (#​7494)
  • 📖 Fix step actions documentation (#​7492)
  • 📖 [TEP-0050] Add Ignore Task Failure to alpha table (#​7468)
  • 📖 Update Feature Flags Documentation (#​7445)
  • 📖 Update StepActions Documentation (#​7441)
  • 📖 Fix typos and broken links in StepActions doc (#​7431)
  • 📖 Make git resolver label explicit (#​7428)
  • 📖 Update release with v0.54.0 (#​7427)
  • 📖 Update release cheat sheet (#​7425)

Thanks

Thanks to these contributors who contributed to v0.55.0!

Extra shout-out for awesome release notes:

v0.54.2: Tekton Pipeline release v0.54.2 "Korat Bender"

Compare Source

-Docs @​ v0.54.2
-Examples @​ v0.54.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.2/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77a70414b954f5ea533eecb2a83f9a87997dc311d043ea27f6e609f4af5dcba94a1

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77a70414b954f5ea533eecb2a83f9a87997dc311d043ea27f6e609f4af5dcba94a1
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.2/release.yaml
REKOR_UUID=24296fb24b8ad77a70414b954f5ea533eecb2a83f9a87997dc311d043ea27f6e609f4af5dcba94a1

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.54.2@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes
  • 🐛 [release-v0.54.x] FIX: Prevent panic on parameter evaluation (#​7512)
Misc
Docs

Thanks

Thanks to these contributors who contributed to v0.54.2!

Extra shout-out for awesome release notes:

v0.54.1: Tekton Pipeline release v0.54.1 "Korat Bender"

Compare Source

-Docs @​ v0.54.1
-Examples @​ v0.54.1

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.1/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.54.1/release.yaml
REKOR_UUID=

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.54.1@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

Fixes
  • 🐛 [release-v0.54.x] don't return validation error when final tasks failed/skipped (#​7510)
Misc
Docs

Thanks

Thanks to these contributors who contributed to v0.54.1!

Extra shout-out for awesome release notes:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@zregvart zregvart closed this Feb 26, 2024
@zregvart zregvart deleted the renovate/github.com-tektoncd-pipeline-0.x branch April 19, 2024 13:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@zregvart @renovate-bot