RATATOSKRATATOSK
Sign in

Tekton

v1.12.1CI/CD & App Delivery
Jun 15, 2026

CHECK 1OTHER 29

Tekton v1.12.1 is a correctness-focused release with resolver behavior changes and dependency updates. Operators using Tekton Resolvers should review the narrowed set of objects that can be resolved; no security advisories or explicitly described vulnerabilities are identified.

Check if affected (1)

  • breakingResolutionRequest resolver constraints

    Applies when Tekton Resolvers are used with objects other than StepActions, Tasks, or Pipelines.

    The fix prevents Tekton Resolvers from resolving non-Tekton objects and arbitrary data. A ResolutionRequest for such an object fails, and resolvers are limited to StepActions, Tasks, and Pipelines in Tekton v1.12.1.

All 29 other recorded changesvalue changes 23 · fixes 5 · constraints 1

value changes (23)

  • build(deps): bump the all group in /tekton with 4 updates (#10265)
  • build(deps): bump the all group in /tekton with 4 updates (#10234)
  • build(deps): bump the all group in /tekton with 4 updates (#10194)
  • build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8 (#10168)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.6 to 1.10.8 (#10150)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8 (#10149)
  • build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.6 to 1.14.7 (#10148)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8 (#10146)
  • build(deps): bump the all group in /tekton with 4 updates (#10130)
  • build(deps): bump the all group across 1 directory with 4 updates (#10094)
  • build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 (#10070)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.5 to 1.10.6 (#10065)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.5 to 1.10.6 (#10064)
  • build(deps): bump github.com/sigstore/sigstore from 1.10.5 to 1.10.6 (#10063)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.5 to 1.10.6 (#10062)
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.5 to 1.10.6 (#10061)
  • build(deps): bump the all group in /tekton with 4 updates (#10041)
  • build(deps): bump k8s.io/apiextensions-apiserver from 0.35.4 to 0.35.5 (#10034)
  • build(deps): bump github.com/jenkins-x/go-scm from 1.15.21 to 1.15.22 (#10018)
  • build(deps): bump github.com/google/cel-go from 0.28.0 to 0.28.1 (#10017)
  • build(deps): bump chainguard/go from 7ec9277 to a4477c3 in /tekton in the all group (#9993)
  • build(deps): bump the all group in /tekton with 4 updates (#9976)
  • bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8

fixes (5)

  • fix: TaskRun stuck in Running when init container is OOMKilled with enableKubernetesSidecar (#10186)
  • Fix cross-arch platform command lookup in entrypoint (#10164)
  • fix: truncate affinity assistant volume names to 63 characters (#10137)
  • fix(pipelinerun): use generateName for anonymous pipeline label (#10079)
  • Fix PipelineRun premature failure when TaskRun recovers after pod eviction (#10161)

constraints (1)

  • fix(resolvers): Allow ResolutionRequests to resolve all Tekton kinds (#10252)
Add Tekton to your stack

A weekly email arrives when a release needs action. Like the breaking changes in this release.

Add to stack →
Official release note ↗All Tekton releases →