Skip to content

Tekton Results release v0.18.0

Latest

Choose a tag to compare

@tekton-robot tekton-robot released this 11 Feb 10:42

-Docs @ v0.18.0

Installation one-liner

kubectl apply -f https://infra.tekton.dev/tekton-releases/results/previous/v0.18.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/results/previous/v0.18.0/release.yaml
REKOR_UUID=108e9186e8c5677a10268b4a7ac74efdd0da76e60a934fbb3ae72e3615c6c8ac7dda7bf007179ca7

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.18.0@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ Add explicit TLS configuration support (#1187)

Fixes

Misc

  • 🔨 Update GolangCI lint to 2.8.0 (#1196)

  • 🔨 Fix golangci-lint errors and warnings (#1193)

  • 🔨 temp pull the git history when using golangci-lint (#1191)

  • 🔨 Fix link to latest Tekton Pipeline release (#1186)

  • 🔨 Move adambkaplan to Alumni (#1183)

  • 🔨 Bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 (#1195)

  • 🔨 Bump google.golang.org/api from 0.255.0 to 0.264.0 (#1190)

  • 🔨 Bump github.com/tektoncd/pipeline from 1.6.0 to 1.9.0 (#1188)

  • 🔨 Bump gocloud.dev from 0.40.0 to 0.44.0 (#1175)

  • 🔨 Bump k8s.io/apiserver from 0.32.9 to 0.32.11 (#1173)

  • 🔨 Bump github.com/jackc/pgx/v5 from 5.7.5 to 5.7.6 (#1160)

  • 🔨 Fix release pipeline for oracle cloud (#1159)

Docs

  • 📖 docs(retention): clarify that TTL applies to DB records and not Run age (#1182)

Thanks

Thanks to these contributors who contributed to v0.18.0!

Extra shout-out for awesome release notes: