PackageTrack
Sign in Get early access

github.com/tektoncd/pipeline

v1.15.0 #377 most downloaded on Go modules tektoncd/pipeline

What this package is like to depend on

Last release today

23 Aug 2026

Ships on a steady schedule

a new release about every 9 days

Rarely documented

notes for 10 of 253 stable releases

Nothing withdrawn

no release was ever pulled

8 years old

1869 releases · first in 2019

252 releases in the last 12 months

see the full history below

Release timeline

1869 releases · Mar 2022 to Aug 2026
2023 2024 2025 2026
Release Pre-release 669 older releases not drawn

Releases

latest 60 of 1869
  1. v1.15.1-0.20260820114235-3ee1745ae5b2 20 Aug 2026 pre-release

    Nothing published for this version

  2. v1.15.1-0.20260818144035-dd0937bac7d1 18 Aug 2026 pre-release

    Nothing published for this version

  3. v1.15.1-0.20260818105634-0769650effba 18 Aug 2026 pre-release

    Nothing published for this version

  4. v1.15.1-0.20260817081416-ea4026a50224 17 Aug 2026 pre-release

    Nothing published for this version

  5. v1.15.1-0.20260816073614-d01507a0936b 16 Aug 2026 pre-release

    Nothing published for this version

  6. v1.15.1-0.20260812172013-7acb4c2361bc 12 Aug 2026 pre-release

    Nothing published for this version

  7. v1.15.1-0.20260812054612-3c82f5cae772 12 Aug 2026 pre-release

    Nothing published for this version

  8. v1.15.1-0.20260806121810-a1272d45868e 06 Aug 2026 pre-release

    Nothing published for this version

  9. v1.15.1-0.20260803141009-df6cb1da4350 03 Aug 2026 pre-release

    Nothing published for this version

  10. v1.15.1-0.20260803111008-8c74a35c3ff4 03 Aug 2026 pre-release

    Nothing published for this version

  11. v1.15.1-0.20260731132606-db251bd37727 31 Jul 2026 pre-release

    Nothing published for this version

  12. v1.15.0 31 Jul 2026
    Release notes

    🎉 Steady under pressure — configurable backoffs and battle-tested fixes 🎉

    -Docs @ v1.15.0
    -Examples @ v1.15.0

    Installation one-liner

    kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.15.0/release.yaml

    Attestation

    The Rekor UUID for this release is 108e9186e8c5677a045c87c57225dfff98b32437f52b89e344c449bcd535b462d41fff9004b89d29

    Obtain the attestation:

    REKOR_UUID=108e9186e8c5677a045c87c57225dfff98b32437f52b89e344c449bcd535b462d41fff9004b89d29
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

    Verify that all container images in the attestation are in the release file:

    RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.15.0/release.yaml
REKOR_UUID=108e9186e8c5677a045c87c57225dfff98b32437f52b89e344c449bcd535b462d41fff9004b89d29

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.15.0@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

    Changes

    Features

    • ✨ Add configuration for custom git resolver backoff (#10422)

    Enables the configuration of backoffs for git resolver requests.

    • ✨ feat: add configurable grace period for transient CreateContainerError (#10326)

    Add default-create-container-error-timeout configuration option in config-defaults to provide a grace period before failing TaskRuns on transient CreateContainerError/CreateContainerConfigError with "context deadline exceeded". Default is 0 (fail fast, preserving existing behavior)

    Fixes

    • 🐛 fix(resolutionrequest): preserve resolver-written status fields (#10487)

    Prevent ResolutionRequest lifecycle updates from overwriting resolver-written status fields.

    • 🐛 fix(resolvers): honor leader-election bucket ownership (#10480)

    Fix resolver replicas processing ResolutionRequests outside their leader-election bucket.

    • 🐛 Prevent matrix combination count int overflow (#10431)

    Fixed an integer overflow in matrix combination counting that could let a very
    large matrix bypass the max-matrix-combinations validation guard.

    • 🐛 Fix PipelineRun stuck in ResolvingTaskRef when ResolutionRequest enqueue is missed (#10429)

    Fix PipelineRun remaining stuck in ResolvingTaskRef when a ResolutionRequest completion event is missed by periodically requeueing while remote resolution is in progress

    • 🐛 Fix RestrictLength panic on all-symbol input (#10421)

    Fixed a panic in the PipelineRun controller when a PipelineRun using an embedded (anonymous) pipeline spec sets a generateName that contains no alphanumeric characters (for example --). Such names no longer crash the reconciler.

    • 🐛 Fix sidecar-logs result extraction for results exceeding 4096 bytes (#10403)

    Fix sidecar-logs result extraction dropping all TaskRun results when a single result's JSON exceeds 4096 bytes but is within the configured max-result-size. Regression since v1.9.0.

    • 🐛 Preserve Sidecar RestartPolicy on API conversion (#10392)

    Fixed a bug where a Sidecar's restartPolicy (native Kubernetes sidecar support)
    was dropped when converting a Task or TaskRun between the v1beta1 and v1 API
    versions, causing a sidecar requested as a native sidecar to be created as an
    ordinary sidecar.

    • 🐛 Mount debug scripts read-only in step containers (#10362)

    Debug breakpoint scripts are now mounted read-only in step containers, so a step can no longer overwrite them before a user execs in to continue or fail a breakpoint.

    • 🐛 fix(nightlies): restart webhook after CEL feature-flag patch (#10475)
    • 🐛 fix(deps): bump OTel SDK with knative.dev/pkg semconv alignment (#10447)
    • 🐛 fix(nightlies): skip draft-release tasks when releaseMode=nightly (#10441)
    • 🐛 Fix broken object param example links in API spec (#10397)
    • 🐛 fix: resolve in-toto attestation UUID in wait-for-chains (#10363)

    Misc

    • 🔨 fix(release): copy vendor tarball into kodata instead of symlink (#10418)

    Fix release pipeline ko resolve failure caused by ko >= v0.19.0 rejecting
    the kodata/source.tar.gz symlink used to bundle vendored source.

    • 🔨 Add branch prefix to Dependabot PR titles for release branches (#10405)
    • 🔨 Fix wrong Deprecated godoc in affinity assistant (#10391)
    • 🔨 build(deps): bump github.com/prometheus/common from 0.70.0 to 0.70.1 (#10470)
    • 🔨 build(deps): bump the kubernetes group with 5 updates (#10469)
    • 🔨 build(deps): bump the kubernetes group across 1 directory with 3 updates (#10468)
    • 🔨 build(deps): bump github/codeql-action/upload-sarif from 4.37.0 to 4.37.1 (#10462)
    • 🔨 build(deps): bump github.com/tektoncd/pipeline from 1.14.0 to 1.14.1 in /test/custom-task-ctrls/wait-task-beta (#10461)
    • 🔨 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#10456)
    • 🔨 build(deps): bump chainguard-dev/actions/setup-kind from 1.6.26 to 1.6.27 (#10455)
    • 🔨 build(deps): bump chainguard-dev/actions/kind-diag from 1.6.26 to 1.6.27 (#10454)
    • 🔨 build(deps): bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 (#10453)
    • 🔨 Ignore otel major/minor updates in dependabot (#10450)
    • 🔨 build(deps): bump google.golang.org/grpc from 1.82.0 to 1.82.1 (#10446)
    • 🔨 ci(.github/workflows): enable Codecov coverage reporting (#10440)
    • 🔨 build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.0 (#10439)
    • 🔨 build(deps): bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 (#10437)
    • 🔨 build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 (#10436)
    • 🔨 build(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 (#10435)
    • 🔨 build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 (#10434)
    • 🔨 build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.1 to 1.15.2 (#10433)
    • 🔨 build(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 (#10432)
    • 🔨 build(deps): bump github.com/google/cel-go from 0.29.1 to 0.29.2 (#10423)
    • 🔨 build(deps): bump chainguard-dev/actions/kind-diag from 1.6.25 to 1.6.26 (#10417)
    • 🔨 build(deps): bump ko-build/setup-ko from 0.9 to 0.10 (#10416)
    • 🔨 build(deps): bump github.com/google/cel-go from 0.29.0 to 0.29.1 (#10415)
    • 🔨 build(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 (#10413)
    • 🔨 build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 (#10412)
    • 🔨 build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#10411)
    • 🔨 build(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 (#10410)
    • 🔨 build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 (#10407)
    • 🔨 build(deps): bump chainguard-dev/actions/setup-kind from 1.6.25 to 1.6.26 (#10406)
    • 🔨 build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 (#10404)
    • 🔨 build(deps): bump google.golang.org/grpc from 1.81.1 to 1.82.0 (#10399)
    • 🔨 build(deps): bump github.com/tektoncd/pipeline from 1.13.1 to 1.14.0 in /test/custom-task-ctrls/wait-task-beta (#10398)
    • 🔨 ci: fix mismatched setup-go version comment in dependabot-regen (#10389)
    • 🔨 build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#10384)
    • 🔨 build(deps): bump chainguard-dev/actions/setup-kind from 1.6.24 to 1.6.25 (#10378)
    • 🔨 build(deps): bump zizmorcore/zizmor-action from 0.5.6 to 0.5.7 (#10377)
    • 🔨 build(deps): bump actions/cache from 5.0.5 to 6.1.0 (#10376)
    • 🔨 build(deps): bump chainguard-dev/actions/kind-diag from 1.6.24 to 1.6.25 (#10375)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10374)
    • 🔨 build(deps): bump github.com/jenkins-x/go-scm from 1.15.30 to 1.15.31 (#10365)
    • 🔨 test: add e2e test for OpenCensus to OpenTelemetry metrics migration (#10355)
    • 🔨 [TEP-0056] Test ServiceAccount propagation in PinP (#10206)

    Docs

    • 📖 Add PR template reminder to AGENTS.md (#10428)
    • 📖 Use folder-level symlinks for agent skill discovery (#10426)
    • 📖 Fix moved example links in pipeline docs (#10400)
    • 📖 docs: add v1.14.0 release to releases.md (#10364)
    • 📖 docs: add security threat model (#10313)
    • 📖 docs: document StepAction support in Hub Resolver (#10275)
    • 📖 docs(security): document workspace isolation across trust boundaries (#10241)

    Thanks

    Thanks to these contributors who contributed to v1.15.0!

    Extra shout-out for awesome release notes:

    Open source →
  13. v1.14.1 20 Jul 2026
    Release notes

    Tekton Pipeline release v1.14.1 ""Chartreux Cait Sith""

    -Docs @ v1.14.1
    -Examples @ v1.14.1

    Installation one-liner

    kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml

    Attestation

    The Rekor UUID for this release is 108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a

    Obtain the attestation:

    REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

    Verify that all container images in the attestation are in the release file:

    RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.1/release.yaml
REKOR_UUID=108e9186e8c5677a5b65d09f2d5a25a1c1cc499f6dd152f80348422ff8fbe46a84ad47c0eba03a8a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.14.1@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

    Changes

    Features

    Fixes

    • 🐛 [cherry-pick: release-v1.14.x] Add results as a valid prefix to Pipeline task params (#10445)

    Fix pipeline validation rejecting $(results.*) variable references in pipeline task parameters

    Misc

    Docs

    Thanks

    Thanks to these contributors who contributed to v1.14.1!

    Extra shout-out for awesome release notes:

    Open source →
  14. v1.14.1-0.20260730145607-d961bad95049 30 Jul 2026 pre-release

    Nothing published for this version

  15. v1.14.1-0.20260730130006-cedd162ff1fa 30 Jul 2026 pre-release

    Nothing published for this version

  16. v1.14.1-0.20260730082606-e1fe24e78f21 30 Jul 2026 pre-release

    Nothing published for this version

  17. v1.14.1-0.20260727092204-6ebe2ddd664c 27 Jul 2026 pre-release

    Nothing published for this version

  18. v1.14.1-0.20260722090203-0a301ebc84a1 22 Jul 2026 pre-release

    Nothing published for this version

  19. v1.14.1-0.20260721060402-9b20b219bfaf 21 Jul 2026 pre-release

    Nothing published for this version

  20. v1.14.1-0.20260720181401-aa28e09810a6 20 Jul 2026 pre-release

    Nothing published for this version

  21. v1.14.1-0.20260720165201-f618b94ca9e4 20 Jul 2026 pre-release

    Nothing published for this version

  22. v1.14.1-0.20260718202801-7a2322246be0 18 Jul 2026 pre-release

    Nothing published for this version

  23. v1.14.1-0.20260714195643-83fa5681b706 14 Jul 2026 pre-release

    Nothing published for this version

  24. v1.14.1-0.20260714103244-d744bf6a6338 14 Jul 2026 pre-release

    Nothing published for this version

  25. v1.14.1-0.20260710123243-4f4ce2ddc180 10 Jul 2026 pre-release

    Nothing published for this version

  26. v1.14.1-0.20260709143642-8bf071037e23 09 Jul 2026 pre-release

    Nothing published for this version

  27. v1.14.1-0.20260709083043-87fd9205cc7a 09 Jul 2026 pre-release

    Nothing published for this version

  28. v1.14.1-0.20260708103842-381643890ba8 08 Jul 2026 pre-release

    Nothing published for this version

  29. v1.14.1-0.20260706072041-c7657f319135 06 Jul 2026 pre-release

    Nothing published for this version

  30. v1.14.1-0.20260703090440-5cb5e2be9f78 03 Jul 2026 pre-release

    Nothing published for this version

  31. v1.14.1-0.20260701083039-01ceadbd89c2 01 Jul 2026 pre-release

    Nothing published for this version

  32. v1.14.1-0.20260630191239-167d9ae9806b 30 Jun 2026 pre-release

    Nothing published for this version

  33. v1.14.0 30 Jun 2026
    Release notes

    🎉 🐱 Pipelines in Pipelines by ref, leaner controllers & sturdier reconcilers 🤖 🎉

    Installation one-liner

    kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.0/release.yaml

    Attestation

    The Rekor UUID for this release is 108e9186e8c5677aa9d0ba4d268af76a6ffef1ad43d8ad6966ceef7663859284b3163eddafaa94ab

    Obtain the attestation:

    REKOR_UUID=108e9186e8c5677aa9d0ba4d268af76a6ffef1ad43d8ad6966ceef7663859284b3163eddafaa94ab
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

    Verify that all container images in the attestation are in the release file:

    RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.14.0/release.yaml
REKOR_UUID=108e9186e8c5677aa9d0ba4d268af76a6ffef1ad43d8ad6966ceef7663859284b3163eddafaa94ab

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.14.0@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

    Changes

    Features

    • ✨ feat(tracing): record errors on TaskRun createPod and update spans (#10273)

    Errors creating a Pod or updating a TaskRun are now recorded on the TaskRun reconciler trace spans, so failures are visible in distributed traces.

    • ✨ feat(tracing): record errors on createTaskRun and createCustomRun spans (#10272)

    Errors creating a child TaskRun or CustomRun are now recorded on the PipelineRun reconciler trace spans, so failures are visible in distributed traces.

    • ✨ feat(tracing): add spans to PipelineRun cancel and timeout paths (#10269)

    Add tracing spans to the PipelineRun cancel and timeout code paths, so cancellation and timeout of a run and its children are visible in distributed traces.

    • ✨ feat(tracing): inject traceID and spanID into structured log output (#10140)

    Inject traceID and spanID into structured log output for TaskRun and PipelineRun reconcilers when tracing is enabled, enabling log-to-trace correlation in observability platforms.

    • ✨ feat(notifications): add tracing spans to CustomRun reconciler (#10097)

    [ENHANCEMENT] notifications: add OTel tracing spans to CustomRun reconciler (ReconcileKind, ReconcileRunObject, EmitCloudEvents)

    • ✨ feat(notifications): add tracing spans to PipelineRun notifications reconciler (#10266)
    • ✨ feat(tracing): add spans to TaskRun validation functions (#9907)

    Fixes

    • 🐛 fix: bump Go to 1.26.4 for CVEs (#10338)

    Bump Go to 1.26.4 for CVE remediation.

    • 🐛 fix(taskrun): prevent concurrent map writes when resolving StepAction refs (#10324)

    Fixed a controller crash ("concurrent map writes") that could occur while resolving multiple StepAction references when the Task uses an object parameter with both a default and a TaskRun-provided value.

    • 🐛 fix: extract correct full Rekor EntryID from API response (#10315)

    Fix Rekor EntryID extraction in release pipeline to publish correct 80-char EntryIDs instead of truncated 64-char hashes.

    • 🐛 fix(resolvers): Allow ResolutionRequests to resolve all Tekton kinds (#10242)

    Before this change, ResolutionRequests could only resolve Pipelines, Tasks, and StepActions. After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.

    • 🐛 Fix cross-arch platform command lookup in entrypoint (#10077)

    Fix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads). The controller's CPU variant was leaking into TEKTON_PLATFORM_COMMANDS keys via platforms.NewPlatform(), causing "could not find command for platform" errors on worker nodes of a different architecture.

    • 🐛 Fix #7756 - Validate variable references in Pipeline task params (#10050)

    Pipeline validation now rejects invalid variable references like $(new_image) in task parameters with a clear error message, instead of silently accepting them or crashing the webhook. Users who accidentally use $() (Tekton variable syntax) instead of ${} (shell variable syntax) in Pipeline param values will now receive a helpful validation error indicating the valid prefixes (params, tasks, finally, context, workspaces).

    • 🐛 fix issue #8255 - seperating step level and task level validation. Va… (#10007)

    Fix validation error when a Task uses both spec.results and spec.steps[].results in the same step script

    • 🐛 fix: override OCI labels in ko publish task (#9965)

    Fix incorrect OCI image labels (title, url, description) inherited from base image in published pipeline images

    • 🐛 ci: add missing issues:write permission to cherry-pick workflow (#10257)
    • 🐛 fix: replace symlinks with subpath params in create-draft-release (#10203)
    • 🐛 Fix race condition in TestStepTimeout (#10188)
    • 🐛 fix: correct alpine/k8s image reference in release pipeline (#10143)
    • 🐛 test: use mirror.gcr.io/busybox in step_when_test to avoid Docker Hub flakes (#10327)

    Misc

    • 🔨 chore: move patch release cron from Thursday to Tuesday (#10278)
    • 🔨 test(resolvers): cover resolved resource validation kinds (#10250)
    • 🔨 chore: switch base image to ghcr.io/tektoncd/plumbing/static-base (#10240)
    • 🔨 build(deps): bump tektoncd/pipeline to v1.13.0 in test modules (#10225)
    • 🔨 [TEP-0056] Reuse fixture in PinP parent-not-found test (#10207)
    • 🔨 chore: remove stale TODOs referencing closed issues #4723 and #6097 (#10187)
    • 🔨 chore: remove stale TODO referencing closed issue #4546 (#10171)
    • 🔨 build(deps): bump knative.dev/pkg to release-1.22 (#10158)
    • 🔨 refactor: remove placeholder URL workaround in hub resolver Validate() (#10048)
    • 🔨 ci: scope workflow permissions to least privilege (#9922)
    • 🔨 fix: replace kodata LICENSE symlinks with actual files (#10358)
    • 🔨 build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.7.0 to 2.8.1 (#10356)
    • 🔨 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#10354)
    • 🔨 build(deps): bump chainguard-dev/actions/setup-kind from 1.6.22 to 1.6.24 (#10347)
    • 🔨 build(deps): bump chainguard-dev/actions/kind-diag from 1.6.22 to 1.6.24 (#10346)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10345)
    • 🔨 build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7 (#10332)
    • 🔨 build(deps): bump the all group in /tekton with 3 updates (#10316)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10306)
    • 🔨 build(deps): bump github.com/jenkins-x/go-scm from 1.15.28 to 1.15.30 (#10304)
    • 🔨 build(deps): bump github.com/prometheus/common from 0.68.1 to 0.69.0 (#10301)
    • 🔨 chore: group Dependabot updates by dependency family (#10298)
    • 🔨 build(deps): bump k8s.io/code-generator from 0.35.5 to 0.35.6 (#10284)
    • 🔨 build(deps): bump k8s.io/api from 0.35.5 to 0.35.6 in /test/custom-task-ctrls/wait-task-beta (#10283)
    • 🔨 build(deps): bump k8s.io/client-go from 0.35.5 to 0.35.6 in /test/custom-task-ctrls/wait-task-beta (#10282)
    • 🔨 build(deps): bump k8s.io/apiextensions-apiserver from 0.35.5 to 0.35.6 (#10281)
    • 🔨 build(deps): bump github.com/tektoncd/pipeline from 1.13.0 to 1.13.1 in /test/custom-task-ctrls/wait-task-beta (#10279)
    • 🔨 build(deps): bump github.com/jenkins-x/go-scm from 1.15.22 to 1.15.28 (#10270)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10264)
    • 🔨 build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.6.0 to 2.7.0 (#10260)
    • 🔨 build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.0 to 1.15.1 (#10244)
    • 🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8 (#10243)
    • 🔨 build(deps): bump chainguard-dev/actions from 1.6.21 to 1.6.22 (#10232)
    • 🔨 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#10230)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10228)
    • 🔨 build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#10227)
    • 🔨 build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8 (#10226)
    • 🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8 (#10220)
    • 🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8 (#10205)
    • 🔨 build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21 (#10193)
    • 🔨 build(deps): bump the all group in /tekton with 4 updates (#10192)
    • 🔨 build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#10191)
    • 🔨 build(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#10190)
    • 🔨 build(deps): bump github.com/prometheus/common from 0.67.5 to 0.68.1 (#10167)
    • 🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.6 to 1.10.8 (#10145)
    • 🔨 build(deps): bump github.com/tektoncd/pipeline from 1.12.0 to 1.13.0 in /test/custom-task-ctrls/wait-task-beta (#10144)
    • 🔨 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 (#10124)
    • 🔨 build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.5 to 1.10.6 (#10059)

    Docs

    • 📖 chore(docs): fix "pipeline" typo in examples (#10344)
    • 📖 Remove duplicate step from release cheat sheet (#10204)
    • 📖 docs: update releases.md for v1.13.0 (#10142)
    • 📖 Add agent workflow context (#10139)

    Thanks

    Thanks to these contributors who contributed to v1.14.0!

    Extra shout-out for awesome release notes:

    Open source →
  34. v1.13.1 11 Jun 2026

    Nothing published for this version

  35. v1.13.1-0.20260626070038-39a8f935cd14 26 Jun 2026 pre-release

    Nothing published for this version

  36. v1.13.1-0.20260623175837-09a8a513ce44 23 Jun 2026 pre-release

    Nothing published for this version

  37. v1.13.1-0.20260622163035-7a38216316de 22 Jun 2026 pre-release

    Nothing published for this version

  38. v1.13.1-0.20260622103036-0e5d16e287dc 22 Jun 2026 pre-release

    Nothing published for this version

  39. v1.13.1-0.20260619164834-c633a258c2c6 19 Jun 2026 pre-release

    Nothing published for this version

  40. v1.13.1-0.20260618144634-894224e7a776 18 Jun 2026 pre-release

    Nothing published for this version

  41. v1.13.1-0.20260617230233-22f966fb7d4b 17 Jun 2026 pre-release

    Nothing published for this version

  42. v1.13.1-0.20260616071833-9c792ed0e4c9 16 Jun 2026 pre-release

    Nothing published for this version

  43. v1.13.1-0.20260614093031-4dcd673b99ea 14 Jun 2026 pre-release

    Nothing published for this version

  44. v1.13.1-0.20260612100231-336c8f4e59fe 12 Jun 2026 pre-release

    Nothing published for this version

  45. v1.13.1-0.20260611112031-2a84527d2cac 11 Jun 2026 pre-release

    Nothing published for this version

  46. v1.13.1-0.20260609221430-65ec0a6b5dd4 09 Jun 2026 pre-release

    Nothing published for this version

  47. v1.13.1-0.20260609200230-f2f93b5da8ae 09 Jun 2026 pre-release

    Nothing published for this version

  48. v1.13.1-0.20260607125429-ab5737cfdd7d 07 Jun 2026 pre-release

    Nothing published for this version

  49. v1.13.1-0.20260606203629-22f203cb3389 06 Jun 2026 pre-release

    Nothing published for this version

  50. v1.13.1-0.20260604161028-b5de08a4ed4d 04 Jun 2026 pre-release

    Nothing published for this version

  51. v1.13.1-0.20260601120228-addbcb8a2ffc 01 Jun 2026 pre-release

    Nothing published for this version

  52. v1.13.1-0.20260529193226-7af0078d6129 29 May 2026 pre-release

    Nothing published for this version

  53. v1.13.1-0.20260529175430-605d4a1821aa 29 May 2026 pre-release

    Nothing published for this version

  54. v1.13.0 29 May 2026

    Nothing published for this version

  55. v1.12.3-0.20260823184836-0fb9c5b3a0b6 23 Aug 2026 pre-release

    Nothing published for this version

  56. v1.12.3-0.20260822170835-ea21c2299a5c 22 Aug 2026 pre-release

    Nothing published for this version

  57. v1.12.2 16 Jun 2026
    Release notes

    -Docs @ v1.12.2
    -Examples @ v1.12.2

    Installation one-liner

    kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.12.2/release.yaml

    Attestation

    The Rekor UUID for this release is cb0a4d44223cf8dd164d8eec84c25d204f7a37a023c2d28f1f8dcde79ca3c187

    Obtain the attestation:

    REKOR_UUID=cb0a4d44223cf8dd164d8eec84c25d204f7a37a023c2d28f1f8dcde79ca3c187
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

    Verify that all container images in the attestation are in the release file:

    RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.12.2/release.yaml
REKOR_UUID=cb0a4d44223cf8dd164d8eec84c25d204f7a37a023c2d28f1f8dcde79ca3c187

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.12.2@sha256:" + .digest.sha256')

# Download the release file
curl -L "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

    Changes

    Features

    Fixes

    Misc

    • 🔨 build(deps): bump k8s.io/client-go from 0.35.5 to 0.35.6 (#10289)

    Docs

    Thanks

    Thanks to these contributors who contributed to v1.12.2!

    • ❤️ @app/dependabot

    Extra shout-out for awesome release notes:

    Open source →
  58. v1.12.1 11 Jun 2026

    Nothing published for this version

  59. v1.12.1-0.20260527084225-c220ac7d4fc2 27 May 2026 pre-release

    Nothing published for this version

  60. v1.12.1-0.20260525172425-fe38125b4fad 25 May 2026 pre-release

    Nothing published for this version

Every package, every release, already written down.

The archive is open and free. Watching your own project is what we are building next.

Browse the archive