Tekton

v1.9.6CI/CD & App Delivery

Jul 8, 2026

Tekton v1.9.6 is a security patch that remediates CVEs by bumping Go and two key golang.org dependencies. A build hygiene fix replacing LICENSE symlinks with files is also included.

securityApply dependency CVE remediations
Tekton v1.9.6 bumps Go to 1.25.10 and updates golang.org/x/crypto to v0.52.0 and golang.org/x/net to v0.55.0 to address CVEs in those dependencies. Upgrade to receive these remediation fixes.

Key changes (2)

Go bumped to 1.25.10, golang.org/x/crypto to v0.52.0, and golang.org/x/net to v0.55.0 for CVE remediation
Build hygiene: kodata LICENSE symlinks replaced with actual files

Source ↗All Tekton releases →