Tekton

v1.17.0CI/CD & App Delivery

2026년 10월 1일

선택적으로 활성화하는 관측 기능과 매개변수 지원이 추가된 기능 및 유지보수 릴리스입니다. 정확성 문제를 바로잡고 의존성을 갱신했으며, 운영 환경에 폭넓은 조정이 필요한 변경은 아닙니다.

조치 필요 (1)

securityWindows 스크립트 주입 방어의 빈틈 수정
placeScriptInContainer가 확장되지 않는 PowerShell here-string을 사용하도록 바뀌었습니다. 이제 스크립트 본문에 리터럴 "@ 줄이 있어도 생성된 명령을 일찍 끝낼 수 없습니다.

그 외 기록된 변경 28건 전체value changes 20 · fixes 4 · additions 2 · removals 1 · renames 1

Add a reconcile.write_intent attribute (no-op, status-only, metadata-only, metadata-and-status) to PipelineRun and TaskRun reconcile spans so operators can distinguish reconciliations that intend an etcd write.
build(deps): bump the kubernetes group with 5 updates
build(deps): bump google.golang.org/grpc from 1.83.2 to 1.84.0
build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.8.1 to 2.8.2
build(deps): bump the sigstore group with 5 updates
build(deps): bump github.com/jenkins-x/go-scm from … to …×2
build(deps): bump the all group in /tekton with 4 updates
build(deps): bump the all group in /tekton with 6 updates
build(deps): bump golang.org/x/crypto from … to …×2
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.10.9 to 1.10.10
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.10.9 to 1.10.10
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.9 to 1.10.10
build(deps): bump github.com/sigstore/sigstore from 1.10.9 to 1.10.10
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.10.9 to 1.10.10
build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0
build(deps): bump github.com/prometheus/common from 0.70.1 to 0.71.0
build(deps): bump github.com/google/go-containerregistry from … to …×2

Before this update, when resolver fails to get any task, controller showed the error message without containing the task name which was hard to detect which one is failed or having bad resolution config. Now task name is added to the error message from template.
Pipelines can now reference $(tt.params.<name>) in task params, when expressions, and matrix params/includes. This lets a PipelineSpec embedded by Tekton Triggers keep its tt.params.* substitutions without failing pipeline validation.
Resolvers no longer fail ResolutionRequests belonging to a different resolver after a leader election or a resolver pod restart.
Fixed controller startup panic messages that printed a malformed %!w(...) marker instead of the underlying error when an informer event handler failed to register.

Gated behind the new surface-pod-events alpha feature flag (disabled by default).
feat(tracing): tag TaskRun ReconcileKind span on cancel/timeout

Tekton 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치 같은 것들입니다.