RATATOSKRATATOSK
Sign in

Tekton

v1.14.0CI/CD & App Delivery
Jun 30, 2026

ACTION 1OTHER 37

Release v1.14.0 adds tracing and observability capabilities and broadens `ResolutionRequest` resolution support. It also includes correctness fixes, a Go security-related update, and shipped dependency updates.

Action needed (1)

  • securityGo 1.26.4 update

    Go is updated to 1.26.4 in v1.14.0 for CVE remediation.

All 37 other recorded changesvalue changes 24 · additions 7 · fixes 6

value changes (24)

  • build(deps): bump knative.dev/pkg to release-1.22
  • build(deps): bump github.com/spiffe/go-spiffe/v2 from … to …×2
  • build(deps): bump the all group in /tekton with 4 updates×5
  • build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7
  • build(deps): bump the all group in /tekton with 3 updates
  • build(deps): bump github.com/jenkins-x/go-scm from 1.15.28 to 1.15.30
  • build(deps): bump github.com/prometheus/common from … to …×2
  • build(deps): bump k8s.io/apiextensions-apiserver from 0.35.5 to 0.35.6
  • build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.0 to 1.15.1
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8
  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
  • build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8
  • build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21
  • build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from … to …×2

additions (7)

  • Errors creating a Pod or updating a TaskRun are now recorded on the TaskRun reconciler trace spans, so failures are visible in distributed traces.
  • Errors creating a child TaskRun or CustomRun are now recorded on the PipelineRun reconciler trace spans, so failures are visible in distributed traces.
  • Add tracing spans to the PipelineRun cancel and timeout code paths, so cancellation and timeout of a run and its children are visible in distributed traces.
  • Inject traceID and spanID into structured log output for TaskRun and PipelineRun reconcilers when tracing is enabled, enabling log-to-trace correlation in observability platforms.
  • notifications: add OTel tracing spans to CustomRun reconciler (ReconcileKind, ReconcileRunObject, EmitCloudEvents)
  • add tracing spans to PipelineRun notifications reconciler
  • add spans to TaskRun validation functions

fixes (6)

  • Fixed a controller crash ("concurrent map writes") that could occur while resolving multiple StepAction references when the Task uses an object parameter with both a default and a TaskRun-provided value.
  • After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
  • Fix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads).
  • Pipeline validation now rejects invalid variable references like $(new_image) in task parameters with a clear error message, instead of silently accepting them or crashing the webhook.
  • Fix validation error when a Task uses both spec.results and spec.steps[].results in the same step script
  • Fix incorrect OCI image labels (title, url, description) inherited from base image in published pipeline images
Add Tekton to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Tekton releases →