Tekton

v1.9.4CI/CD & App Delivery

2026년 6월 15일

`v1.9.4`는 동작의 정확성을 다듬고 보안 관련 의존성을 갱신한 릴리스입니다. 리졸버 사용 환경은 지원 대상 객체 종류 변경의 영향을 받습니다.

조치 필요 (1)

securitycriticalgoogle.golang.org/grpc 1.79.3으로 업데이트
google.golang.org/grpc가 1.77.0에서 1.79.3으로 올라갔습니다. :path 헤더의 앞쪽 슬래시 누락으로 발생하는 gRPC-Go 인증 우회 문제 CVE-2026-33186을 수정합니다.

breakingTekton Resolvers의 객체 종류 제한
custom resolvers를 사용하거나 StepActions, Tasks, Pipelines 이외의 객체 종류에 ResolutionRequest와 Resolver API를 사용하는 경우에 적용됩니다.
이제 Tekton Resolvers는 StepActions, Tasks, Pipelines만 처리합니다. 비 Tekton 객체나 임의 데이터를 요청하면 ResolutionRequest가 실패합니다.

그 외 기록된 변경 24건 전체value changes 17 · fixes 6 · additions 1

build(deps): bump the all group in /tekton with 4 updates (#10262)
build(deps): bump the all group in /tekton with 4 updates (#10239)
build(deps): bump the all group across 1 directory with 4 updates (#10197)
build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.6 to 1.14.7 (#10151)
build(deps): bump the all group in /tekton with 4 updates (#10131)
build(deps): bump the all group in /tekton with 4 updates (#10088)
build(deps): bump the all group in /tekton with 4 updates (#10043)
build(deps): bump k8s.io/apimachinery from 0.33.11 to 0.33.12 (#10015)
build(deps): bump the all group across 1 directory with 4 updates (#9988)
build(deps): bump github.com/spiffe/spire-api-sdk from 1.14.0 to 1.14.6 (#9929)
build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 (#9917)
build(deps): bump k8s.io/apimachinery from 0.33.7 to 0.33.11 (#9916)
build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.8 (#9886)
build(deps): bump k8s.io/apiextensions-apiserver from 0.32.11 to 0.32.13 (#9884)
build(deps): bump k8s.io/api from 0.32.11 to 0.32.13 (#9879)
build(deps): bump k8s.io/client-go from 0.32.11 to 0.32.13 (#9876)
build(deps): bump the all group in /tekton with 4 updates (#9862)

fix(resolvers): Allow ResolutionRequests to resolve all Tekton kinds (#10253) efore this change, ResolutionRequests could only resolve Pipelines, Tasks, and StepActions. After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
Fix cross-arch platform command lookup in entrypoint (#10163) ix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads).
fix: surface clear errors when completed tasks miss referenced results (#9973) ipelineRun status now shows which specific results were missing when tasks are skipped due to uninitialized result references from completed tasks. A Warning event with reason ResultValidationFailed is also emitted for consistency with other failure modes.
fix: resolve goroutine leak from unbuffered channels in resolver reconcilers (#10112)
fix: convert pod latency metric to histogram and remove pod label (#10110)
fix(pipelinerun): use generateName for anonymous pipeline label (#10108)

Tekton 스택에 추가

조치가 필요한 릴리스가 나왔을 때 주간 메일로 알려드립니다. 이번 릴리스의 보안 패치와 브레이킹 체인지 같은 것들입니다.