Tekton

v1.14.0CI/CD & App Delivery

2026年6月30日

v1.14.0は、実行状況の追跡と解決処理の対応範囲を広げるリリースです。動作の修正や依存関係の更新に加え、`Go`の更新も含まれます。

要対応 (1)

その他の記録済み変更 37 件すべてvalue changes 24 · additions 7 · fixes 6

build(deps): bump knative.dev/pkg to release-1.22
build(deps): bump github.com/spiffe/go-spiffe/v2 from … to …×2
build(deps): bump the all group in /tekton with 4 updates×5
build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7
build(deps): bump the all group in /tekton with 3 updates
build(deps): bump github.com/jenkins-x/go-scm from 1.15.28 to 1.15.30
build(deps): bump github.com/prometheus/common from … to …×2
build(deps): bump k8s.io/apiextensions-apiserver from 0.35.5 to 0.35.6
build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.0 to 1.15.1
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8
build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from … to …×2

Errors creating a Pod or updating a TaskRun are now recorded on the TaskRun reconciler trace spans, so failures are visible in distributed traces.
Errors creating a child TaskRun or CustomRun are now recorded on the PipelineRun reconciler trace spans, so failures are visible in distributed traces.
Add tracing spans to the PipelineRun cancel and timeout code paths, so cancellation and timeout of a run and its children are visible in distributed traces.
Inject traceID and spanID into structured log output for TaskRun and PipelineRun reconcilers when tracing is enabled, enabling log-to-trace correlation in observability platforms.
notifications: add OTel tracing spans to CustomRun reconciler (ReconcileKind, ReconcileRunObject, EmitCloudEvents)
add tracing spans to PipelineRun notifications reconciler
add spans to TaskRun validation functions

Fixed a controller crash ("concurrent map writes") that could occur while resolving multiple StepAction references when the Task uses an object parameter with both a default and a TaskRun-provided value.
After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
Fix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads).
Pipeline validation now rejects invalid variable references like $(new_image) in task parameters with a clear error message, instead of silently accepting them or crashing the webhook.
Fix validation error when a Task uses both spec.results and spec.steps[].results in the same step script
Fix incorrect OCI image labels (title, url, description) inherited from base image in published pipeline images

Tektonをスタックに追加

対応が必要なリリースが出たときに、週次メールでお知らせします。今回のセキュリティパッチも、その一例です。