Tekton
v1.12.1CI/CD & App Delivery2026年6月15日
Tekton v1.12.1 は、動作の正確性に関する修正と依存関係の更新を含むリリースです。`Tekton Resolvers` の解決対象には制限が加わっており、セキュリティアドバイザリや明示的な脆弱性の記載はありません。
影響確認 (1)
breaking
Tekton Resolversの解決対象を制限Tekton ResolversをStepActions、Tasks、Pipelines以外のオブジェクトに対して使う場合に適用されます。Tekton ResolversがStepActions、Tasks、Pipelines以外のオブジェクトに対して使われる場合が対象です。任意のデータや Tekton 以外のオブジェクトを解決できていた不具合を修正し、対象外の解決ではResolutionRequestが失敗するようになりました。解決対象はStepActions、Tasks、Pipelinesに限られるため、運用者による確認が必要です。
その他の記録済み変更 29 件すべてvalue changes 23 · fixes 5 · constraints 1
value changes (23)
- build(deps): bump the all group in /tekton with 4 updates (#10265)
- build(deps): bump the all group in /tekton with 4 updates (#10234)
- build(deps): bump the all group in /tekton with 4 updates (#10194)
- build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8 (#10168)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.6 to 1.10.8 (#10150)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8 (#10149)
- build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.6 to 1.14.7 (#10148)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8 (#10146)
- build(deps): bump the all group in /tekton with 4 updates (#10130)
- build(deps): bump the all group across 1 directory with 4 updates (#10094)
- build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 (#10070)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.5 to 1.10.6 (#10065)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.5 to 1.10.6 (#10064)
- build(deps): bump github.com/sigstore/sigstore from 1.10.5 to 1.10.6 (#10063)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.5 to 1.10.6 (#10062)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.5 to 1.10.6 (#10061)
- build(deps): bump the all group in /tekton with 4 updates (#10041)
- build(deps): bump k8s.io/apiextensions-apiserver from 0.35.4 to 0.35.5 (#10034)
- build(deps): bump github.com/jenkins-x/go-scm from 1.15.21 to 1.15.22 (#10018)
- build(deps): bump github.com/google/cel-go from 0.28.0 to 0.28.1 (#10017)
- build(deps): bump chainguard/go from
7ec9277toa4477c3in /tekton in the all group (#9993) - build(deps): bump the all group in /tekton with 4 updates (#9976)
- bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8
fixes (5)
- fix: TaskRun stuck in Running when init container is OOMKilled with enableKubernetesSidecar (#10186)
- Fix cross-arch platform command lookup in entrypoint (#10164)
- fix: truncate affinity assistant volume names to 63 characters (#10137)
- fix(pipelinerun): use generateName for anonymous pipeline label (#10079)
- Fix PipelineRun premature failure when TaskRun recovers after pod eviction (#10161)
constraints (1)
- fix(resolvers): Allow ResolutionRequests to resolve all Tekton kinds (#10252)
Tektonをスタックに追加
対応が必要なリリースが出たときに、週次メールでお知らせします。 今回の破壊的変更も、その一例です。