v0.37.2

v0.37.2 Release 🎉

This patch release fixes CVEs GO-2025-3488, GO-2025-3553, GO-2025-3487, and GO-2024-2887.

Changelog

• 9df524b New version v0.37.2

Full Changelog: v0.37.1...v0.37.2

v0.43.0

v0.43.0 Release 🎉

This release adds support for Pipelines v1.6.0, Triggers v0.34.0, and Chains v0.26.0. It introduces the new --resolvertype flag in tkn p start --last command to rerun resolver-based PipelineRuns, fixes command usage text and lint errors, optimizes cross-compilation to reduce disk usage in CI, and updates various dependencies.

Changelog📋

• f622481 New version v0.43.0

Features ✨

• Add --resolvertype flag to rerun a resolver based pipelinerun by @pratap0007 in #2615

Fixes 🐛

• Fix pronoun in command usage text by @st3penta in #2617
• Fix lint errors by @pratap0007 in #2656

Misc 🔨

• Add Shiv (pratap0007) as a maintainer by @vdemeester in #2591

• Update README and choco with latest release by @vinamra28 in #2602

• Bump github/codeql-action from 3.29.10 to 3.30.0 by @dependabot[bot] in #2603

• Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in #2599

• Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #2609

• Bump github/codeql-action from 3.30.0 to 3.30.3 by @dependabot[bot] in #2612

• Bump step-security/harden-runner from 2.13.0 to 2.13.1 by @dependabot[bot] in #2613

• fix: optimize cross-compilation to prevent disk space exhaustion by @pratap0007 in #2621

• Bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by @dependabot[bot] in #2606

• Bump github/codeql-action from 3.30.3 to 4.30.8 by @dependabot[bot] in #2622

• Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /tools by @dependabot[bot] in #2597

• Bump github.com/spf13/cobra from 1.9.1 to 1.10.1 by @dependabot[bot] in #2605

• Bump github.com/golangci/golangci-lint/v2 from 2.1.6 to 2.5.0 in /tools by @dependabot[bot] in #2614

• Bump github.com/tektoncd/pipeline from 1.3.1 to 1.5.0 by @dependabot[bot] in #2618

• Bump the go-k8s-dependencies group with 3 updates by @dependabot[bot] in #2623

• Bump github.com/tektoncd/hub from 1.22.2 to 1.22.4 by @dependabot[bot] in #2611

• Bump golang.org/x/term from 0.34.0 to 0.36.0 by @dependabot[bot] in #2624

• Bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #2628

• Bump the go-docker-dependencies group with 2 updates by @dependabot[bot] in #2607

• Bump github.com/in-toto/go-witness from 0.8.1 to 0.9.1 by @dependabot[bot] in #2627

• Pin actions by commit SHA by @AlanGreene in #2620

• Bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in #2629

• Bump github/codeql-action from 4.30.9 to 4.31.0 by @dependabot[bot] in #2630

• Bump chainguard-dev/actions from 1.5.3 to 1.5.7 by @dependabot[bot] in #2631

• Bump github.com/golangci/golangci-lint/v2 from 2.5.0 to 2.6.0 in /tools by @dependabot[bot] in #2632

• Bump github.com/tektoncd/pipeline from 1.5.0 to 1.6.0 by @dependabot[bot] in #2633

• Bump github/codeql-action from 4.31.0 to 4.31.2 by @dependabot[bot] in #2634

• Bump github.com/golangci/golangci-lint/v2 from 2.6.0 to 2.6.1 in /tools by @dependabot[bot] in #2636

• Bump github.com/tektoncd/hub from 1.22.4 to 1.22.5 by @dependabot[bot] in #2635

• Bump github.com/tektoncd/hub from 1.22.5 to 1.23.0 by @dependabot[bot] in #2638

• Bump github.com/tektoncd/triggers from 0.33.0 to 0.34.0 by @dependabot[bot] in #2641

• Bump step-security/harden-runner from 2.13.1 to 2.13.2 by @dependabot[bot] in #2643

• Bump chainguard-dev/actions from 1.5.7 to 1.5.8 by @dependabot[bot] in #2642

• Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by @dependabot[bot] in #2644

• Bump the go-docker-dependencies group with 2 updates by @dependabot[bot] in #2639

• Bump golang.org/x/term from 0.36.0 to 0.37.0 by @dependabot[bot] in #2645

• Bump github.com/golangci/golangci-lint/v2 from 2.6.1 to 2.6.2 in /tools by @dependabot[bot] in #2647

• Bump the go-k8s-dependencies group with 3 updates by @dependabot[bot] in #2646

• Bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #2650

• Bump chainguard-dev/actions from 1.5.8 to 1.5.9 by @dependabot[bot] in #2651

• Bump github.com/docker/cli from 29.0.0+incompatible to 29.0.1+incompatible in the go-docker-dependencies group by @dependabot[bot] in #2649

• Bump github.com/tektoncd/chains from 0.25.1 to 0.26.0 and fix tests by @pratap0007 in #2640

• Bump github.com/sigstore/cosign/v2 from 2.6.0 to 2.6.1 by @dependabot[bot] in #2625

• Bump github.com/docker/cli from 29.0.1+incompatible to 29.0.2+incompatible in the go-docker-dependencies group by @dependabot[bot] in #2652

• Bump github.com/tektoncd/hub from 1.23.0 to 1.23.1 by @dependabot[bot] in #2654

• Bump the go-k8s-dependencies group with 3 updates by @dependabot[bot] in #2653

• Bump golang.org/x/crypto from 0.43.0 to 0.45.0 by @dependabot[bot] in #2655

Thanks ❤️

• @st3penta
• @AlanGreene
• @pratap0007
• @vinamra28
• @vdemeester

Full Changelog: v0.42.0...v0.43.0

v0.42.0

v0.42.0 Release 🎉

This release comes with support for Pipelines v1.3.1, Triggers v0.33.0 and Hub v1.22.2. Also in this release, there are couple of bug fixes, we are now defaulting to print the log source during logs streaming and also we are deprecating the chains sub-command.

ChangeLog 📋

Deprecation ⚠️

• Deprecate the chain command #2550

Features ✨

• Add flag to prefix log lines with log source (task and step name) by default #2525

Fixes 🐛

• fix panic when trying to read pod logs when pod is already deleted #2595
• fix: update Pending color of PipelineRunPending #2553
• Fix deadlock issue when following logs #2556

Misc 🔨

• Migrate CI into GitHub workflows #2516
• Update CLI docs for tkn v0.41.0 #2544
• Bump the go-docker-dependencies group with 2 updates #2548
• Bump the go-docker-dependencies group with 2 updates #2549
• Bump github.com/cloudflare/circl from 1.3.7 to 1.6.1 #2552
• Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools #2561
• Bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2 #2560
• Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #2562
• Bump github.com/sigstore/sigstore from 1.9.4 to 1.9.5 #2554
• Update golangci-lint to v2 #2566
• Bump github.com/docker/docker from 28.2.2+incompatible to 28.3.3+incompatible #2572
• Bump github.com/docker/cli from 28.2.2+incompatible to 28.3.3+incompatible in the go-docker-dependencies group across 1 directory #2573
• Bump github.com/tektoncd/pipeline from 1.0.0 to 1.2.0 #2563
• Bump ko-build/setup-ko from 0.8 to 0.9 #2579
• Bump github/codeql-action from 3.28.11 to 3.29.5 #2580
• Bump actions/setup-go from 5.3.0 to 5.5.0 #2578
• Bump step-security/harden-runner from 2.11.0 to 2.13.0 #2581
• Bump github.com/sigstore/cosign/v2 from 2.5.0 to 2.5.3 #2565
• Bump github.com/ktr0731/go-fuzzyfinder from 0.8.0 to 0.9.0 #2531
• Bump the go-k8s-dependencies group with 3 updates #2574
• Bump github.com/spf13/pflag from 1.0.6 to 1.0.7 #2586
• Bump tektoncd/pipeline, tektoncd/hub and tektoncd/triggers #2592
• Bump golang.org/x/term from 0.32.0 to 0.34.0 #2582
• Bump actions/checkout from 4.2.2 to 5.0.0 #2593
• Bump github/codeql-action from 3.29.7 to 3.29.10 #2594
• Bump the go-k8s-dependencies group with 3 updates #2596

Thanks ❤️

• @pratap0007
• @ab-ghosh
• @divyansh42
• @chmouel
• @vdemeester

v0.41.1

v0.41.1 Release 🎉

This is a bugfix release which comes with a patch fix for tkn logs command where there was a deadlock when following logs for pipelineruns and taskruns.

Fixes 🐛

• Fix deadlock issue when following logs #2556

Thanks ❤️

• @divyansh42

Full Changelog: v0.41.0...v0.41.1

v0.41.0

v0.41.0 Release 🎉

This release comes with support for Pipelines LTS v1.0.0, Triggers v0.32.0, Chains v0.25.1 and Hub v1.21.0 CLI. Also in this release, couple of dependencies have been bumped to their respective stable versions.

Removal Notice ❗

Support for ClusterTask has been removed in this release #2523

ChangeLog 📋

Misc 🔨

• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2504
• Update readme for latest release by @piyush-garg in #2505
• Bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 by @dependabot in #2506
• Bump github.com/sigstore/sigstore from 1.8.15 to 1.9.0 by @dependabot in #2508
• Bump golang.org/x/term from 0.29.0 to 0.30.0 by @dependabot in #2509
• Bump golang.org/x/net from 0.35.0 to 0.36.0 by @dependabot in #2515
• Bump the go-k8s-dependencies group with 4 updates by @dependabot in #2513
• Bump github.com/golangci/golangci-lint from 1.64.5 to 1.64.7 in /tools by @dependabot in #2514
• Bump github.com/tektoncd/pipeline from 0.68.0 to 0.69.0 by @dependabot in #2510
• Bump github.com/golangci/golangci-lint from 1.64.7 to 1.64.8 in /tools by @dependabot in #2517
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2518
• Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #2522
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2524
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #2521
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2526
• Bump github.com/sigstore/sigstore from 1.9.0 to 1.9.1 by @dependabot in #2511
• Bump golang.org/x/net from 0.36.0 to 0.38.0 by @dependabot in #2532
• Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 by @dependabot in #2529
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2536
• Bump the go-k8s-dependencies group with 3 updates by @dependabot in #2537
• Update pipelines to v1.0.0 and hub to v1.21.0 by @divyansh42 in #2535
• Bump github.com/tektoncd/triggers from 0.31.0 to 0.32.0 by @dependabot in #2541
• Bump github.com/tektoncd/chains from 0.24.0 to 0.25.1 by @dependabot in #2543

Thanks ❤️

• @divyansh42
• @pratap0007
• @piyush-garg

Full Changelog: v0.40.0...v0.41.0

v0.40.0

v0.40.0 Release 🎉

This release comes with support for Pipelines LTS v0.68.0, Triggers v0.31.0, Chains v0.24.0 and Hub v1.20.0 CLI. This release contains bug fix around logs and list commands of pipelinerun and taskrun.

ChangeLog 📋

Fixes 🐛

• Add buffer for pod event by @icloudnote in #2468
• Do not print twice Cancelled when listing by @chmouel in #2438

Misc 🔨

• Fix debbuild by @piyush-garg in #2440
• Update choco and release docs to v0.39.0 by @vinamra28 in #2441
• Bump github.com/tektoncd/pipeline from 0.65.2 to 0.65.3 by @dependabot in #2442
• Bump golang.org/x/term from 0.26.0 to 0.27.0 by @dependabot in #2443
• Bump the go-k8s-dependencies group with 4 updates by @dependabot in #2446
• Bump github.com/tektoncd/pipeline from 0.65.3 to 0.66.0 by @dependabot in #2444
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2445
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 by @dependabot in #2447
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2449
• Bump github.com/golangci/golangci-lint from 1.62.2 to 1.63.2 in /tools by @dependabot in #2455
• Bump github.com/sigstore/sigstore from 1.8.10 to 1.8.11 by @dependabot in #2448
• Add pratap0007 and divyansh42 as reviewer by @pratap0007 in #2439
• Bump golang.org/x/term from 0.27.0 to 0.28.0 by @dependabot in #2459
• Bump github.com/golangci/golangci-lint from 1.63.2 to 1.63.4 in /tools by @dependabot in #2460
• Bump github.com/tektoncd/hub from 1.19.0 to 1.19.1 by @dependabot in #2463
• Remove create clusterrole in triggers test by @piyush-garg in #2471
• Bump github.com/sigstore/sigstore from 1.8.11 to 1.8.12 by @dependabot in #2466
• Bump the go-docker-dependencies group across 1 directory with 2 updates by @dependabot in #2472
• Bump golang.org/x/net from 0.30.0 to 0.33.0 by @dependabot in #2473
• Bump github.com/tektoncd/triggers from 0.30.0 to 0.30.1 by @dependabot in #2458
• Bump github.com/tektoncd/hub from 1.19.1 to 1.19.2 by @dependabot in #2467
• Bump the go-k8s-dependencies group with 4 updates by @dependabot in #2474
• Bump github.com/tektoncd/chains from 0.23.0 to 0.23.1 by @dependabot in #2476
• feat(rpmbuild): update bash-completion handling by @chmouel in #2465
• Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 by @dependabot in #2477
• Bump readme for v0.39.1 by @piyush-garg in #2478
• Bump github.com/tektoncd/pipeline from 0.66.0 to 0.68.0 by @dependabot in #2479
• Bump clockwork from 0.4.0 to 0.5.0 by @divyansh42 in #2482
• Bump golang.org/x/term from 0.28.0 to 0.29.0 by @dependabot in #2481
• Bump github.com/google/go-containerregistry from 0.20.2 to 0.20.3 by @divyansh42 in #2483
• Bump github.com/tektoncd/hub from 1.19.2 to 1.20.0 by @dependabot in #2486
• Bump github.com/tektoncd/triggers from 0.30.1 to 0.31.0 by @dependabot in #2487
• Bump gotest.tools/v3 from 3.5.1 to 3.5.2 by @dependabot in #2488
• Bump github.com/tektoncd/chains from 0.23.1 to 0.24.0 by @dependabot in #2490
• Bump github.com/golangci/golangci-lint from 1.63.4 to 1.64.4 in /tools by @dependabot in #2492
• Bump github.com/golangci/golangci-lint from 1.64.4 to 1.64.5 in /tools by @dependabot in #2495
• Bump the go-k8s-dependencies group with 4 updates by @dependabot in #2493
• Use go v1.23.4 and bump goreleaser to v2.5.0 by @divyansh42 in #2496
• Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 by @dependabot in #2497
• Bump github.com/sigstore/cosign/v2 from 2.4.2 to 2.4.3 by @dependabot in #2500
• Bump the go-docker-dependencies group with 2 updates by @dependabot in #2499
• Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in #2502
• Bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by @dependabot in #2503

New Contributors

• @icloudnote made their first contribution in #2468

Thanks ❤️

• @chmouel
• @divyansh42
• @icloudnote
• @piyush-garg
• @pratap0007
• @vinamra28

Full Changelog: v0.39.0...v0.40.0

v0.37.1

v0.37.1 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋

Misc 🔨

• Bump golang.org/x/net from 0.30.0 to 0.33.0 #2473
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #2447

v0.35.3

v0.35.3 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋

Misc 🔨

• Bump golang.org/x/net from 0.30.0 to 0.33.0 #2473
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #2447

v0.39.1

v0.39.1 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋

Misc 🔨

• Bump golang.org/x/net from 0.30.0 to 0.33.0 #2473
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #2447

v0.38.2

v0.38.2 Release 🎉

This is a bug fix release for CVEs GHSA-w32m-9786-jp63 on golang.org/x/net and GHSA-v778-237x-gjrc on golang.org/x/crypto.

ChangeLog 📋

Misc 🔨

• Bump golang.org/x/net from 0.30.0 to 0.33.0 #2473
• Bump golang.org/x/crypto from 0.28.0 to 0.31.0 #2447