tektoncd/pipeline v0.43.1 on GitHub

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.43.1/release.yaml

Attestation

The Rekor UUID for this release is 24296fb24b8ad77aafc26483b3dd67610086643ab88bb7166bfd137136fbdf182dc3bc8d76987194

Obtain the attestation:

REKOR_UUID=24296fb24b8ad77aafc26483b3dd67610086643ab88bb7166bfd137136fbdf182dc3bc8d76987194
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.43.1/release.yaml
REKOR_UUID=24296fb24b8ad77aafc26483b3dd67610086643ab88bb7166bfd137136fbdf182dc3bc8d76987194

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.43.1@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Fixes

🐛 [release-v0.43.x] Register informers for v1 TaskRun and PipelineRun (#5948)

bug fix: register informers for v1 TaskRun and PipelineRun

🐛 [release-v0.43.x] ChildReference status helper functions should support both CustomRuns and Runs (#5941)

Status helper functions now properly support both CustomRuns and Runs.

🐛 [release-v0.43.x] tekton: fix KO_CONFIG_PATH on release pipeline (#5958)

Windows support.

Misc

🔨 [release-v0.43.x] Use the golangci-lint configured in Makefile in build tests (#5951)

Thanks

Thanks to these contributors who contributed to v0.43.1!

❤️ @vdemeester
❤️ @abayer
❤️ @lbernick

Extra shout-out for awesome release notes:

tektoncd/pipeline v0.43.1 Tekton Pipeline release v0.43.1 "British-Shorthair Jarvis" on GitHub