Tekton
v1.12.1CI/CD & App Delivery2026년 6월 15일
Tekton v1.12.1은 동작 오류를 바로잡고 의존성을 갱신한 릴리스입니다. `Tekton Resolvers` 사용 환경에서는 해석 대상 범위가 바뀌었는지 확인이 필요하며, 보안 권고나 명시된 취약점 수정은 포함되지 않습니다.
영향 확인 (1)
breaking
Tekton Resolvers의 해석 대상 제한Tekton Resolvers를 사용하면서StepActions,Tasks,Pipelines이외의 객체를 다루는 경우에 적용됩니다.Tekton Resolvers가 비Tekton 객체와 임의의 데이터를 해석하던 오류를 수정했습니다. 이제 허용되지 않은 객체를 해석하면ResolutionRequest가 실패하며, 해석 대상은StepActions,Tasks,Pipelines로 제한됩니다.
그 외 기록된 변경 29건 전체value changes 23 · fixes 5 · constraints 1
value changes (23)
- build(deps): bump the all group in /tekton with 4 updates (#10265)
- build(deps): bump the all group in /tekton with 4 updates (#10234)
- build(deps): bump the all group in /tekton with 4 updates (#10194)
- build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8 (#10168)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.6 to 1.10.8 (#10150)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8 (#10149)
- build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.6 to 1.14.7 (#10148)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8 (#10146)
- build(deps): bump the all group in /tekton with 4 updates (#10130)
- build(deps): bump the all group across 1 directory with 4 updates (#10094)
- build(deps): bump github.com/google/go-containerregistry from 0.21.5 to 0.21.6 (#10070)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.5 to 1.10.6 (#10065)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.5 to 1.10.6 (#10064)
- build(deps): bump github.com/sigstore/sigstore from 1.10.5 to 1.10.6 (#10063)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.5 to 1.10.6 (#10062)
- build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.5 to 1.10.6 (#10061)
- build(deps): bump the all group in /tekton with 4 updates (#10041)
- build(deps): bump k8s.io/apiextensions-apiserver from 0.35.4 to 0.35.5 (#10034)
- build(deps): bump github.com/jenkins-x/go-scm from 1.15.21 to 1.15.22 (#10018)
- build(deps): bump github.com/google/cel-go from 0.28.0 to 0.28.1 (#10017)
- build(deps): bump chainguard/go from
7ec9277toa4477c3in /tekton in the all group (#9993) - build(deps): bump the all group in /tekton with 4 updates (#9976)
- bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8
fixes (5)
- fix: TaskRun stuck in Running when init container is OOMKilled with enableKubernetesSidecar (#10186)
- Fix cross-arch platform command lookup in entrypoint (#10164)
- fix: truncate affinity assistant volume names to 63 characters (#10137)
- fix(pipelinerun): use generateName for anonymous pipeline label (#10079)
- Fix PipelineRun premature failure when TaskRun recovers after pod eviction (#10161)
constraints (1)
- fix(resolvers): Allow ResolutionRequests to resolve all Tekton kinds (#10252)
Tekton 스택에 추가
조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 브레이킹 체인지 같은 것들입니다.