Tekton

v1.14.0CI/CD & App Delivery

2026년 6월 30일

`v1.14.0`은 추적과 관찰 기능을 넓히고 `ResolutionRequest`가 처리할 수 있는 대상을 늘렸습니다. 여러 정확성 문제를 바로잡았으며 `Go` 업데이트와 제공 라이브러리 변경도 포함합니다.

조치 필요 (1)

그 외 기록된 변경 37건 전체value changes 24 · additions 7 · fixes 6

build(deps): bump knative.dev/pkg to release-1.22
build(deps): bump github.com/spiffe/go-spiffe/v2 from … to …×2
build(deps): bump the all group in /tekton with 4 updates×5
build(deps): bump github.com/google/go-containerregistry from 0.21.6 to 0.21.7
build(deps): bump the all group in /tekton with 3 updates
build(deps): bump github.com/jenkins-x/go-scm from 1.15.28 to 1.15.30
build(deps): bump github.com/prometheus/common from … to …×2
build(deps): bump k8s.io/apiextensions-apiserver from 0.35.5 to 0.35.6
build(deps): bump github.com/spiffe/spire-api-sdk from 1.15.0 to 1.15.1
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.6 to 1.10.8
build(deps): bump actions/checkout from 6.0.2 to 6.0.3
build(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0
build(deps): bump github.com/sigstore/sigstore from 1.10.6 to 1.10.8
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.6 to 1.10.8
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.6 to 1.10.8
build(deps): bump chainguard-dev/actions from 1.6.19 to 1.6.21
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from … to …×2

Errors creating a Pod or updating a TaskRun are now recorded on the TaskRun reconciler trace spans, so failures are visible in distributed traces.
Errors creating a child TaskRun or CustomRun are now recorded on the PipelineRun reconciler trace spans, so failures are visible in distributed traces.
Add tracing spans to the PipelineRun cancel and timeout code paths, so cancellation and timeout of a run and its children are visible in distributed traces.
Inject traceID and spanID into structured log output for TaskRun and PipelineRun reconcilers when tracing is enabled, enabling log-to-trace correlation in observability platforms.
notifications: add OTel tracing spans to CustomRun reconciler (ReconcileKind, ReconcileRunObject, EmitCloudEvents)
add tracing spans to PipelineRun notifications reconciler
add spans to TaskRun validation functions

Fixed a controller crash ("concurrent map writes") that could occur while resolving multiple StepAction references when the Task uses an object parameter with both a default and a TaskRun-provided value.
After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
Fix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads).
Pipeline validation now rejects invalid variable references like $(new_image) in task parameters with a clear error message, instead of silently accepting them or crashing the webhook.
Fix validation error when a Task uses both spec.results and spec.steps[].results in the same step script
Fix incorrect OCI image labels (title, url, description) inherited from base image in published pipeline images

Tekton 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치 같은 것들입니다.