v0.32.2

v0.32.2 Release 🎉

This is a patch release addressing a security issue on the github.com/grpc/grpc-go dependency:

• This addresses GHSA-qppj-fm5r-hxr3 by not allowing more server handlers to be run than the HTTP/2 MAX_CONCURRENT_STREAMS setting.

ChangeLog 📋

Misc 🔨

• Bump pipeline, triggers, hub and grpc ea6221d

Thanks ❤️

• @piyush-garg

v0.31.3

v0.31.3 Release 🎉

This is a patch release addressing a security issue on the golang.org/x/net and github.com/grpc/grpc-go dependency:

• HTTP/2 rapid reset can cause excessive work in net/http - commits
• This addresses GHSA-qppj-fm5r-hxr3 by not allowing more server handlers to be run than the HTTP/2 MAX_CONCURRENT_STREAMS setting.

ChangeLog 📋

Misc 🔨

• Bump tektoncd/pipeline to v0.47.5 e26d96a
• Bump hub to v1.13.2 6077d23
• Bump chains to v0.16.1 2f4ab15

Thanks ❤️

• @piyush-garg

v0.30.2

v0.30.2 Release 🎉

This is a patch release addressing a security issue on the golang.org/x/net and github.com/grpc/grpc-go dependency:

• HTTP/2 rapid reset can cause excessive work in net/http - commits
• This addresses GHSA-qppj-fm5r-hxr3 by not allowing more server handlers to be run than the HTTP/2 MAX_CONCURRENT_STREAMS setting.

ChangeLog 📋

Misc 🔨

• Bump tektoncd/pipeline to v0.44.5 acaf6b0
• Bump hub to v1.12.4 6e45473
• Bump grpc to v1.56.3 0c7e872
• Bump tektoncd/triggers to v0.23.2 2419aa6

Thanks ❤️

• @piyush-garg

v0.32.1

v0.32.1 Release 🎉

This is a minor release addressing a security issue on the golang.org/x/net dependency:

• HTTP/2 rapid reset can cause excessive work in net/http - commits

ChangeLog 📋

Misc 🔨

• Bump github.com/tektoncd/pipeline from 0.50.1 to 0.50.2 2ed095c
• Bump github.com/tektoncd/triggers from 0.25.0 to 0.25.1 6bb26ed
• Bump github.com/tektoncd/hub from 0.14.0 to 0.14.1 bade624
• Bump github.com/tektoncd/chains from 0.17.0 to 0.17.1 da97809

Thanks ❤️

• @piyush-garg

v0.32.0

v0.32.0 Release 🎉

This is a major LTS release which comes with Pipelines version v0.50.x (LTS), Triggers version v0.25.0, Chains version v0.17.0 and Hub version v0.14.0. This release not only covers bumping up of dependencies to most recent versions but a couple of feature and fixes such as now tkn pipelinerun logs command now supports streaming of logs from PIpelineRun resolvers and we can now add annotations which pushing the tekton bundles. There were of couple of bugs fixes as well such as while streaming PipelineRun logs with invalid Task selected, there was an infinite loop instead of throwing error and couple of other bugs fixes.

ChangeLog 📋

Features ✨

• Add resolver support in tkn pr log commands #2083
• Support for Manifest annotations in bundle push #2105

Fixes 🐛

• Fix tkn p start --showlog by handling informer ResourceEventHandler #2048
• Fix tkn p start command for --timeout flag #2058
• Use only sigs.k8s.io/yaml for yaml usecases #2080
• Use text/template consistently #2081
• Show error when there is an invalid filtered task #2102

Misc 🔨

• Bump tkn version in README to latest #2030
• Use golang 1.19 in release pipeline #2031
• Bump github.com/tektoncd/triggers from 0.23.1-0.20230420080448-bf603123cc0f to 0.24.0 #2032
• Bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 #2033
• Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible #2034
• Bump github.com/docker/cli from 23.0.6+incompatible to 24.0.0+incompatible #2036
• Bump go.uber.org/multierr from 1.9.0 to 1.11.0 #1968
• Bump github.com/docker/docker from 23.0.6+incompatible to 24.0.0+incompatible #2039
• Bump k8s.io/cli-runtime from 0.25.9 to 0.25.10 #203
• Bump k8s.io/apimachinery from 0.26.4 to 0.26.5 #2040
• Bump k8s.io/api from 0.26.4 to 0.26.5 #2041
• Bump github.com/docker/cli from 24.0.0+incompatible to 24.0.1+incompatible #2042
• Bump github.com/docker/docker from 24.0.0+incompatible to 24.0.1+incompatible #2043
• Bump golang to 1.19 #2044
• Bump chains to latest main #2045
• Bump github.com/docker/cli from 24.0.1+incompatible to 24.0.2+incompatible #2050
• Bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 #2052
• Bump github.com/tektoncd/pipeline from 0.47.0 to 0.48.0 #2049
• Bump github.com/docker/docker from 24.0.1+incompatible to 24.0.2+incompatible #2051
• Bump github.com/golangci/golangci-lint from 1.52.2 to 1.53.1 in /tools #2055
• Bump github.com/golangci/golangci-lint from 1.53.1 to 1.53.2 in /tools #2056
• Bump github.com/tektoncd/triggers from 0.24.0 to 0.24.1 #2057
• Bump github.com/AlecAivazis/survey/v2 from 2.3.6 to 2.3.7 #2060
• Bump golang.org/x/term from 0.8.0 to 0.9.0 #2061
• Bump tkn to v0.31.1 in docs #2062
• Bump k8s.io/apimachinery from 0.26.5 to 0.26.6 #2064
• Bump k8s.io/cli-runtime from 0.25.10 to 0.25.11 #2066
• Bump k8s.io/api from 0.26.5 to 0.26.6 #2067
• Bump github.com/golangci/golangci-lint from 1.53.2 to 1.53.3 in /tools #2065
• Bump golangci-lint to 1.53.3 #2068
• Bump gotest.tools/v3 from 3.4.0 to 3.5.0 #2073
• Bump golang.org/x/term from 0.9.0 to 0.10.0 #2074
• Bump deps #2075
• Bump github.com/docker/cli from 24.0.2+incompatible to 24.0.3+incompatible #2076
• Bump github.com/docker/docker from 24.0.2+incompatible to 24.0.3+incompatible #2077
• Bump github.com/docker/docker from 24.0.3+incompatible to 24.0.4+incompatible #2078
• Bump github.com/docker/cli from 24.0.3+incompatible to 24.0.4+incompatible #2079
• Bump k8s.io/cli-runtime from 0.25.11 to 0.25.12 #2082
• Bump github.com/theupdateframework/go-tuf from 0.5.2 to 0.6.0 #2084
• Bump github.com/docker/cli from 24.0.4+incompatible to 24.0.5+incompatible #2085
• Bump github.com/docker/docker from 24.0.4+incompatible to 24.0.5+incompatible #2087
• Update release #2090
• Bump golang.org/x/term from 0.10.0 to 0.11.0 #2094
• Bump go.uber.org/zap from 1.24.0 to 1.25.0 #2092
• Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 #2093
• Bump github.com/sigstore/sigstore from 1.7.1 to 1.7.2 #2095
• Bump github.com/golangci/golangci-lint from 1.53.3 to 1.54.0 in /tools #2096
• Bump github.com/theupdateframework/go-tuf from 0.6.0 to 0.6.1 #2098
• Bump github.com/golangci/golangci-lint from 1.54.0 to 1.54.1 in /tools #2097
• Bump github.com/golangci/golangci-lint from 1.54.1 to 1.54.2 in /tools #2101
• Bump tektoncd/pipeline to v0.50.0 LTS #2104
• Bump github.com/tektoncd/chains from 0.16.1-0.20230519214917-07aacf584d01 to 0.17.0 #2088
• Bump k8s.io/cli-runtime from 0.25.12 to 0.25.13 #2106
• Bump triggers to v0.25.0 #2108
• Bump github.com/sigstore/sigstore from 1.7.2 to 1.7.3 #2110
• Bump golang.org/x/term from 0.11.0 to 0.12.0 #2112
• Bump cosign to v2.2.0 and pin knative #2113
• Bumps golang version to 1.20.7 #2116
• Bumps Hub to v1.14.0 #2114
• Bump github.com/docker/docker from 24.0.5+incompatible to 24.0.6+incompatible #2117
• Bump github.com/docker/cli from 24.0.5+incompatible to 24.0.6+incompatible #2118

Thanks ❤️

• @pratap0007
• @piyush-garg
• @vinamra28
• @PuneetPunamiya
• @chmouel
• @zregvart

v0.31.2

v0.31.2 Bug Fix Release 🎉

In this release, we fixed the logs command failing for pipelinerun which is referencing the pipeline using the resolver.

Changelog 📋

Fixes 🐛

• #2083 Add resolver support for tkn pr logs command

Thanks ♥️

• @pratap0007

v0.31.1

v0.31.1 Bug Fix Release 🎉

In this release, we fixed the logs command failing with --showlog flag and tkn pipeline start command failing with --timeout flag

Changelog 📋

Fixes 🐛

• #2048 Fix tkn p start --showlog by handling informer ResourceEventHandler
• #2058 Fix tkn p start command for --timeout flag

Thanks ♥️

• @pratap0007

v0.31.0

v0.31.0 Release 🎉

This is a major LTS release which comes with Pipelines version v0.47.0 (LTS), Triggers version v0.23.1, Chains version v0.16.0 and Hub version v0.13.0. Also we have a breaking change, the support of PipelineResources andfull embedded status support has been removed.

Removal Notice 🚨

• Remove PipelineResource support in clustertask #1983
• Remove PipelineResource support in task #1984
• Remove PipelineResource support in pipeline #1988
• remove e2e pipeline resource tests #1987
• Remove resource comand #1989
• Remove input and output resource in clustertask describe command #1994
• Remove all occurrence of PipelineResource and move pipeline to 0.46.0 in CI #1997
• Remove docs related to PipelineResource #2000
• Remove PipelineResource in the describe command test #2005
• Removed support for status.taskruns field #1985

ChangeLog 📋

Fixes 🐛

• Fix tkn pr/tr delete command for keep flag #2010
• Fix tkn tr delete command not deleting trs of completed pr #1974
• Remove flags from chains payload command as not used #2014
• Upgrade golangci version to v1.52.2 and fix lint errors #2018
• Use own FakeClock func instead of from library #1993
• Remove default value info for true flag in delete command #2006

Misc 🔨

• Update readme, release date and choco for 0.30 #1965
• Replace github.com/ghodss/yaml with sigs.k8s.io/yaml #1996
• Update to cosign v2 #2001
• Bump github.com/docker/docker from 23.0.1+incompatible to 23.0.2+incompatible #1966
• Bump github.com/docker/cli from 23.0.1+incompatible to 23.0.2+incompatible #1967
• Bump github.com/tektoncd/triggers from 0.23.0 to 0.23.1 #1971
• Bump github.com/spf13/cobra from 1.6.1 to 1.7.0 #1973
• Bump github.com/docker/cli from 23.0.2+incompatible to 23.0.3+incompatible #1975
• Bump github.com/docker/docker from 23.0.2+incompatible to 23.0.3+incompatible #1977
• Bump golang.org/x/term from 0.6.0 to 0.7.0 #1978
• Bump golang.org/x/net from 0.8.0 to 0.9.0 #1979
• Bump golang.org/x/crypto from 0.7.0 to 0.8.0 #1980
• Bump versions in README to v0.30.1 #1981
• Bump k8s.io/apimachinery from 0.26.3 to 0.26.4 #1991
• Bump k8s.io/client-go from 0.25.8 to 0.25.9 #1992
• Bump github.com/tektoncd/chains from 0.15.1-0.20230426145251-865c4be64b4d to 0.16.0 #2024
• Bump cosign to v2.0.2 #2025
• Bump github.com/docker/cli from 23.0.5+incompatible to 23.0.6+incompatible #2027
• Bump github.com/docker/docker from 23.0.5+incompatible to 23.0.6+incompatible #2028
• Bump github.com/tektoncd/hub from 1.12.1 to 1.13.0 #2029
• Bump tektoncd/pipeline to 0.47.0 #2009
• Bump github.com/docker/cli from 23.0.4+incompatible to 23.0.5+incompatible #2012
• Bump github.com/docker/docker from 23.0.4+incompatible to 23.0.5+incompatible #2011
• Bump golang.org/x/term from 0.7.0 to 0.8.0 #2023
• Bump k8s.io/cli-runtime from 0.25.8 to 0.25.9 #1995
• Bump github.com/docker/cli from 23.0.3+incompatible to 23.0.4+incompatible #1999
• Bump k8s.io/api from 0.26.1 to 0.26.4 #2002
• Bump github.com/sigstore/sigstore from 1.6.1 to 1.6.3 #2004
• Bump github.com/docker/docker from 23.0.3+incompatible to 23.0.4+incompatible #1998

Thanks ❤️

• @Basavaraju-G
• @Juneezee
• @pratap0007
• @piyush-garg
• @vinamra28
• @PuneetPunamiya
• @lcarva
• @zregvart

v0.30.1

v0.30.1 Bug Fix Release 🎉

In this release, we fixed the TaskRuns delete command which was not deleting the completed TaskRuns associated with completed PipelineRuns.

Changelog 📋

Fixes 🐛

• Fix tkn tr delete command not deleting trs of completed pr #1974

Thanks ♥️

• @pratap0007

v0.30.0

v0.30.0 Release 🎉

This release comes with support for v1 CRDs of Pipeline, PipelineRun, Task and TaskRun. This is an LTS release with Pipelines v0.44.0 and Triggers v0.23.0 spec fields, Chains v0.15.0 features and Hub v1.12.1 CLI. In this release, support added for object type params in start and describe commands. Also, there are few deprecations done with respect to PipelineResources and ClusterTasks which are mentioned in deprecation notice and one breaking change regarding PipelineResources, lot of dependency bumps and few bug fixes.

Deprecation Notice ⚠️

• ClusterTask commands are now marked deprecated, will be removed ones it is removed from API.
• tkn task create command is marked deprecated as ClusterTask is deprecated.
• Flags -i and -o for providing input and output resources respectively in tkn task start command are deprecated as v1 does not support pipelineresources.
• Flag -r for providing resources in tkn pipeline start command are deprecated as v1 does not support pipelineresources.
  • #1959 Add deprecations for resources and clustertask

Removal Notice 🚨

• Remove support for cluster and cloudevent pipeline resources
  • #1876 Remove cluster and cloudevent pipelineresource

ChangeLog 📋

Features ✨

• #1873 Add v1 support for task and pipeline list
• #1898 Add v1 support for taskrun list
• #1915 Bump pipelinerun list command for v1 CRDs
• #1906 Add v1 support for taskrun and pipelinerun cancel
• #1918 Add v1 support for delete command
• #1930 Move pipeline describe to v1 CRDs
• #1936 Add support for v1 CRD in export cmd
• #1941 Move pr desc to v1 CRDs
• #1943 Migrate task describe command from v1beta1 to v1
• #1944 Move taskrun describe to v1 CRD
• #1953 Make task and clustertask start commands to work with v1 apis
• #1954 Make pipeline start commands to work with v1 apis
• #1955 Make changes in clustertask describe
• #1958 Add test and make dry-run output for start cmd compatible with v1
• #1961 Add support for v1 CRD in taskrun logs
• #1960 Add v1 support for pr logs
• #1960 Move e2e test to pipeline 0.44 and v1 resources

Fixes 🐛

• #1875 Fix for taskrun list command not working
• #1892 Fixes List command for task and pipeline with --all-namespaces and --output=yaml
• #1905 remove kubernetes requirements for sign and verify

Misc 🔨

• #1846 Bump readme to point to latest release v0.29.0
• #1838 Bump tektoncd/pipeline to v0.43.1
• #1851 Bump github.com/tektoncd/pipeline from 0.43.1 to 0.43.2
• #1850 Bump google.golang.org/grpc from 1.51.0 to 1.52.0
• #1853 Bump github.com/tektoncd/hub from 1.11.1 to 1.11.2
• #1855 Bump github.com/tektoncd/triggers from 0.22.0 to 0.22.1
• #1854 Bump github.com/hashicorp/vault/sdk from 0.6.2 to 0.7.0
• #1856 Bump github.com/sigstore/sigstore from 1.5.0 to 1.5.1
• #1857 update choco nuspec for v0.29.0
• #1862 Bump github.com/docker/cli
• #1863 Bump github.com/docker/docker
• #1864 Bump github.com/fatih/color from 1.13.0 to 1.14.0
• #1870 Bump google.golang.org/grpc from 1.52.0 to 1.52.3
• #1872 Bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0
• #1871 Bump github.com/fatih/color from 1.14.0 to 1.14.1
• #1876 Bump tektoncd/pipeline to v0.44.0
• #1878 Bump github.com/tektoncd/hub from 1.11.2 to 1.11.3
• #1879 Update Release Notes and Chocolatey to 0.29.1
• #1881 Bump github.com/docker/docker
• #1882 Bump github.com/docker/cli
• #1885 Bump golang.org/x/sys from 0.4.0 to 0.5.0
• #1883 Bump google.golang.org/grpc from 1.52.3 to 1.53.0
• #1884 Bump golang.org/x/term from 0.4.0 to 0.5.0
• #1886 Bump golang.org/x/net from 0.5.0 to 0.6.0
• #1887 Bump golang.org/x/crypto from 0.5.0 to 0.6.0
• #1889 Bump github.com/docker/cli
• #1890 Bump github.com/docker/docker
• #1891 Bump github.com/hashicorp/vault/sdk to v0.8.1
• #1893 Bump golang.org/x/net from 0.6.0 to 0.7.0
• #1894 Bump github.com/hashicorp/go-kms-wrapping/v2 from 2.0.7 to 2.0.8
• #1899 Enable dependabot on tools and run daily
• #1900 Bump github.com/golangci/golangci-lint from 1.47.2 to 1.51.2 in /tools
• #1901 Bump github.com/tektoncd/triggers from 0.22.1 to 0.22.2
• #1912 Not use io/ioutil package anymore
• #1910 Bump github.com/sigstore/sigstore from 1.5.1 to 1.5.2
• #1911 Bump github.com/theupdateframework/go-tuf
• #1913 Update chains to v0.15.0
• #1909 Fix the EL logging e2e test
• #1917 Update clustertask list refactoring
• #1925 Bump github.com/tektoncd/triggers from 0.22.2 to 0.23.0
• #1926 Bump golang.org/x/net from 0.7.0 to 0.8.0
• #1929 Bump github.com/tektoncd/hub from 1.11.3 to 1.12.0
• #1927 Bump golang.org/x/crypto from 0.6.0 to 0.7.0
• #1932 Bump google.golang.org/protobuf from 1.28.1 to 1.29.0
• #1937 Bump github.com/fatih/color from 1.14.1 to 1.15.0
• #1938 dependabot: do not update k8s.io/* major/minor updates
• #1940 Bump k8s.io/cli-runtime from 0.25.4 to 0.25.7
• #1942 Bump google.golang.org/protobuf from 1.29.0 to 1.29.1
• #1945 Add v1 version in pr cancel test
• #1946 Refactoring : move chain cmd to new func
• #1947 Bump google.golang.org/protobuf from 1.29.1 to 1.30.0
• #1948 Bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0
• #1949 Bump k8s.io/apimachinery from 0.26.2 to 0.26.3
• #1950 Bump k8s.io/client-go from 0.25.7 to 0.25.8
• #1951 Bump k8s.io/cli-runtime from 0.25.7 to 0.25.8
• #1952 Bump github.com/golangci/golangci-lint from 1.51.2 to 1.52.0 in /tools
• #1957 Bump github.com/golangci/golangci-lint from 1.52.0 to 1.52.1 in /tools
• #1956 Bump google.golang.org/grpc from 1.53.0 to 1.54.0
• #1963 Bump github.com/golangci/golangci-lint from 1.52.1 to 1.52.2 in /tools
• #1964 Bump to go 1.18 as minimum required version

Thanks ❤️

• @danielhelfand
• @khrm
• @piyush-garg
• @pratap007
• @vdemeester
• @vinamra28
• @Yongxuanzhang