Installation one-liner
kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.12.3/release.yamlAttestation
The Rekor UUID for this release is 108e9186e8c5677ab50b7c76294f1e52835451640e10a8b08939504c87748d0d8ae2c251c3784114
Obtain the attestation:
REKOR_UUID=108e9186e8c5677ab50b7c76294f1e52835451640e10a8b08939504c87748d0d8ae2c251c3784114
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.12.3/release.yaml
REKOR_UUID=108e9186e8c5677ab50b7c76294f1e52835451640e10a8b08939504c87748d0d8ae2c251c3784114
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.12.3@sha256:" + .digest.sha256')
# Download the release file
curl -L "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
Fixes
- 🐛 [release-v1.12.x] fix(release): copy vendor tarball into kodata instead of symlink (#10943)
- 🐛 [release-v1.12.x] fix: bump plumbing ko image to Go 1.27.3 (#10940)
Misc
- 🔨 [release-v1.12.x] build(deps): bump golang.org/x/crypto to 0.55.0 (#10861)
Update Go security dependencies.
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.40 to 1.6.41 (#10927)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.40 to 1.6.41 (#10925)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 4 updates (#10924)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.39 to 1.6.40 (#10899)
- 🔨 [release-v1.12.x] bump actions/upload-artifact from 7.0.1 to 7.0.2 (#10897)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 4 updates (#10894)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.37 to 1.6.39 (#10873)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 4 updates (#10872)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.37 to 1.6.40 (#10871)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.36 to 1.6.37 (#10851)
- 🔨 [release-v1.12.x] bump agilepathway/label-checker from 1.6.98 to 1.6.115 (#10850)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.36 to 1.6.37 (#10849)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 4 updates (#10847)
- 🔨 [release-v1.12.x] bump the kubernetes group with 4 updates (#10831)
- 🔨 [release-v1.12.x] bump the kubernetes group in /test/custom-task-ctrls/wait-task-beta with 2 updates (#10830)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.35 to 1.6.36 (#10814)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.35 to 1.6.36 (#10812)
- 🔨 [release-v1.12.x] bump agilepathway/label-checker from 1.6.66 to 1.6.98 (#10811)
- 🔨 [release-v1.12.x] bump k8s.io/apimachinery from 0.35.8 to 0.35.9 in the kubernetes group (#10809)
- 🔨 [release-v1.12.x] bump k8s.io/apimachinery from 0.35.8 to 0.35.9 in /test/custom-task-ctrls/wait-task-beta in the kubernetes group across 1 directory (#10806)
- 🔨 [release-v1.12.x] bump the all group across 1 directory with 4 updates (#10804)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 4 updates (#10784)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.34 to 1.6.35 (#10774)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.34 to 1.6.35 (#10773)
- 🔨 [release-v1.12.x] bump agilepathway/label-checker from 1.6.65 to 1.6.66 (#10770)
- 🔨 [release-v1.12.x] bump the all group in /tekton with 6 updates (#10768)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.32 to 1.6.34 (#10727)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.32 to 1.6.34 (#10726)
- 🔨 [release-v1.12.x] bump the all group across 1 directory with 4 updates (#10703)
- 🔨 [release-v1.12.x] bump google.golang.org/grpc from 1.82.1 to 1.82.2 (#10675)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.31 to 1.6.33 (#10668)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.31 to 1.6.32 (#10667)
- 🔨 [release-v1.12.x] bump the kubernetes group across 1 directory with 4 updates (#10655)
- 🔨 [release-v1.12.x] bump the kubernetes group in /test/custom-task-ctrls/wait-task-beta with 2 updates (#10651)
- 🔨 [release-v1.12.x] bump k8s.io/apimachinery from 0.35.7 to 0.35.8 in the kubernetes group (#10648)
- 🔨 [release-v1.12.x] bump k8s.io/apimachinery from 0.35.7 to 0.35.8 in /test/custom-task-ctrls/wait-task-beta in the kubernetes group (#10647)
- 🔨 [release-v1.12.x] bump google.golang.org/protobuf from 1.36.12-0.20260120151049-f2248ac996af to 1.36.12 (#10623)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.30 to 1.6.31 (#10613)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.30 to 1.6.31 (#10612)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/setup-kind from 1.6.28 to 1.6.30 (#10580)
- 🔨 [release-v1.12.x] bump chainguard-dev/actions/kind-diag from 1.6.29 to 1.6.30 (#10578)
- 🔨 [release-v1.12.x] bump github.com/google/go-containerregistry from 0.21.8 to 0.21.9 (#10575)
- 🔨 [release-v1.12.x] fix: update gRPC dependencies (#10556)
- 🔨 [release-v1.12.x] bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.8 to 1.10.9 (#10534)
- 🔨 [release-v1.12.x] bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.8 to 1.10.9 (#10533)
- 🔨 [release-v1.12.x] bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.8 to 1.10.9 (#10525)
- 🔨 [release-v1.12.x] bump github.com/sigstore/sigstore from 1.10.8 to 1.10.9 (#10521)
- 🔨 [release-v1.12.x] bump github.com/google/go-containerregistry from 0.21.7 to 0.21.8 (#10520)
Docs
Thanks
Thanks to these contributors who contributed to v1.12.3!
- ❤️ @app/dependabot
- ❤️ @vdemeester
- ❤️ @waveywaves
Extra shout-out for awesome release notes: