-Docs @ v0.76.0
-Examples @ v0.76.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/operator/previous/v0.76.0/release.yaml

Attestation

The Rekor UUID for this release is ``

Obtain the attestation:

REKOR_UUID=
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/operator/previous/v0.76.0/release.yaml
REKOR_UUID=

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.76.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• Add TektonPruner CRD,CR and Type Specs
• Add Controller for TektonPruner
• Support custom DB secret in Results
• Add html_url to github-push CTB to fix clone issue Git clone was failing with a 403 error when using git-repo-url because body.repository.url points to the GitHub API URL. To resolve this, a new parameter git-repo-html-url has been introduced, which uses body.repository.html_url — the correct URL for cloning the repository.
• Add KUBERNETES_MIN_VERSION env to kuberneted based installation
• Convert result watcher deployment to statefulset ordinals
• chore: Add pac cancel-in-progress setting in docs and tests
• update: Added skip-push-event settings for PaC
• Add LoggingPluginMultipartRegex for ResultsAPI
• Improve operator logging for installerset reconcile operations
• Improve operator logging for trigger reconcile operations
• Improve operator logging for result reconcile operations
• Improve operator logging for dashboard reconcile operations
• Improve operator logging for mag reconcile operations
• Improve operator logging for pipeline reconcile operations
• Improve operator logging for chains reconcile operations
• Improve operator logging for tektonconfig reconcile operations
• enforce stricter securityContext rules on operator and webhook containers

Fixes

• 🐛 Fix the rbac for ecosystem tasks and stepactions (#2732)

• 🐛 Update Result API container env (#2622)

Before this fix, changes in Result API properties didn't used to apply to running results API server pod and required a manual start.

• 🐛 fix(docs): correct configuration error in TektonResult (#2604)

docs: corrected the configuration error in the example of TektonResult

Misc

• 🔨 Fix subpath capitalisation (#2729)

• 🔨 Bump k8s.io/apiextensions-apiserver from 0.32.4 to 0.32.5 (#2741)

• 🔨 Bump github.com/open-policy-agent/opa from 1.1.0 to 1.4.0 (#2713)

• 🔨 Bump golang.org/x/sync from 0.13.0 to 0.14.0 (#2711)

• 🔨 Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 (#2686)

• 🔨 Bump golang.org/x/sync from 0.12.0 to 0.13.0 (#2676)

• 🔨 Bump github.com/spf13/viper from 1.20.0 to 1.20.1 (#2667)

• 🔨 Bump github.com/spf13/viper from 1.19.0 to 1.20.0 (#2656)

• 🔨 Bump k8s.io/apiextensions-apiserver from 0.29.14 to 0.29.15 (#2655)

• 🔨 Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#2652)

• 🔨 [bot] bump payload versions (#2646)

• 🔨 Bump golang.org/x/net from 0.35.0 to 0.36.0 (#2629)

• 🔨 Bump gomodules.xyz/jsonpatch/v2 from 2.4.0 to 2.5.0 (#2628)

• 🔨 Bump golang.org/x/mod from 0.23.0 to 0.24.0 (#2627)

• 🔨 Bump golang.org/x/sync from 0.11.0 to 0.12.0 (#2626)

• 🔨 Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#2609)

• 🔨 Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 (#2608)

• 🔨 Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#2607)

• 🔨 Bump github.com/sigstore/cosign/v2 from 2.4.2 to 2.4.3 (#2606)

Docs

• 📖 Add ghcr.io migration banner to README.md. (#2681)

Thanks

Thanks to these contributors who contributed to v0.76.0!

• ❤️ @AlanGreene
• ❤️ @PuneetPunamiya
• ❤️ @Tamronimus
• ❤️ @ab-ghosh
• ❤️ @anithapriyanatarajan
• ❤️ @dependabot[bot]
• ❤️ @enarha
• ❤️ @github-actions[bot]
• ❤️ @infernus01
• ❤️ @jkhelil
• ❤️ @khrm
• ❤️ @l-qing
• ❤️ @mbpavan
• ❤️ @pramodbindal
• ❤️ @pratap0007
• ❤️ @savitaashture
• ❤️ @twoGiants
• ❤️ @vdemeester
• ❤️ @zakisk

Extra shout-out for awesome release notes:

• 😍 @AlanGreene
• 😍 @PuneetPunamiya
• 😍 @ab-ghosh
• 😍 @enarha
• 😍 @jkhelil
• 😍 @khrm
• 😍 @l-qing
• 😍 @mbpavan
• 😍 @pramodbindal
• 😍 @pratap0007
• 😍 @savitaashture
• 😍 @twoGiants
• 😍 @zakisk