Releases: tektoncd/triggers
Tekton Triggers release v0.26.0 "Tekton Triggers"
-Docs @ v0.26.0
-Examples @ v0.26.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.26.0/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.26.0/interceptors.yamlAttestation
The Rekor UUID for this release is 24296fb24b8ad77adb2b758a907715ae9c12bd31be75af1e58f488fa6d02f6f29886e7bb1aa4046c
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77adb2b758a907715ae9c12bd31be75af1e58f488fa6d02f6f29886e7bb1aa4046c
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.26.0/release.yaml
REKOR_UUID=24296fb24b8ad77adb2b758a907715ae9c12bd31be75af1e58f488fa6d02f6f29886e7bb1aa4046c
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.26.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
- ✨ Add string translation to CEL interceptor. (#1686)
New translate function added to the CEL interceptor.
- ✨ Add first and last functions. (#1636)
Two new functions for the CEL interceptor, to allow easy access to the first and last elements in an array.
Breaking changes
In current release:
- 🚨
The decision to modify the tag from resourcetemplates to resourceTemplates within the triggerTemplate spec was made to align with JSON or YAML camelCase format standards. However, this alteration has caused a disruption in the upgrade process, as previous versions of Triggers relied on the resourcetemplates tag. which is a breaking change.
To address this issue, we reverted the change back and released Triggers version v0.26.1.
We will reintroduce the change when we support the new ApiVersion in Triggers. At that point, we'll utilize conversion functionality (convertTo and convertFrom) to ensure seamless transition. By incorporating the ApiVersion, we'll be able to adjust the tag accordingly. #1694
Fixes
- 🐛 Fix bitbucket server example when both SSH and HTTPS enabled (#1641)
Misc
- 🔨 Update Cel-go to v0.19.0 (#1688)
- 🔨 Bump Pipelines to v0.56.0 (#1683)
- 🔨 Bump tekton/pipelines v0.53.0 LTS release (#1671)
- 🔨 Add Triggers v0.25.2 and v0.24.2 to the release (#1669)
- 🔨 Follow naming conventions for resourceTemplates (#1650)
- 🔨 Remove Pipelineressources from integration test (#1643)
- 🔨 Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (#1679)
- 🔨 Bump knative.dev/serving from 0.30.1-0.20220402124840-21c05dc9d9a4 to 0.39.0 (#1677)
- 🔨 Bump GRPC from 1.56.2 to 1.59.0 (#1660)
Docs
- 📖 Add v0.25.0 to docs (#1635)
Thanks
Thanks to these contributors who contributed to v0.26.0!
- ❤️ @bigkevmcd
- ❤️ @dependabot[bot]
- ❤️ @khrm
- ❤️ @savitaashture
Extra shout-out for awesome release notes:
- 😍 @bigkevmcd
- 😍 @khrm
Contributors
Assets 6
Tekton Triggers release v0.25.3 "Tekton Triggers"
-Docs @ v0.25.3
-Examples @ v0.25.3
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.3/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.3/interceptors.yamlChanges
Security
-
🔒 Disable HTTP/2 for webhoook by updating Knative
Fixes: GHSA-qppj-fm5r-hxr3 -
🔒 Bump ko to go 1.20 in release task
Fixes: GHSA-4374-p667-p6c8
Fixes
- 🐛 Update triggers core interceptor to create secret when necessary
Now the core interceptor will create secrets in only 2 cases:- when there is no secret present in the cluster.
- when certificates expire within the existing secret.
If secret exist and have valid certificates no need to recreate secret every time
Thanks
Thanks to these contributors who contributed to v0.25.3!
- ❤️ @khrm
- ❤️ @savitaashture
Extra shout-out for awesome release notes:
- 😍 @khrm
- 😍 @savitaashture
Contributors
Assets 6
Tekton Triggers release v0.25.2 "Tekton Triggers"
-Docs @ v0.25.2
-Examples @ v0.25.2
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.2/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.2/interceptors.yamlChanges
Security
- [0.25.x] Bump GRPC to 1.56.3 (#1659)
Address the GHSA-qppj-fm5r-hxr3 - which involves HTTP/2 Stream Cancellation Attack
Thanks
Thanks to these contributors who contributed to v0.25.2!
- ❤️ @khrm
Extra shout-out for awesome release notes:
- 😍 @khrm
Tekton Triggers release v0.24.2 "Tekton Triggers"
-Docs @ v0.24.2
-Examples @ v0.24.2
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.2/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.2/interceptors.yamlChanges
Security
Address the GHSA-qppj-fm5r-hxr3 - which involves HTTP/2 Stream Cancellation Attack
Misc
- [release-v0.24.x] Fix integration Test by upgrading Knative (#1655)
Thanks
Thanks to these contributors who contributed to v0.24.2!
- ❤️ @khrm
Tekton Triggers release v0.23.2 "Tekton Triggers"
-Docs @ v0.23.2
-Examples @ v0.23.2
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.2/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.2/interceptors.yamlChanges
Fixes
Security
- [0.23.x] Bump GRPC to 1.56.3 (#1662)
- [v0.23.x] Bump golang.org/x/net from 0.11.0 to 0.17.0 (#1657)
Address the GHSA-qppj-fm5r-hxr3 - which involves HTTP/2 Stream Cancellation Attack
Misc
- [release-v0.23.x] Fix integration Test by upgrading Knative (#1656)
Thanks
Thanks to these contributors who contributed to v0.23.2!
- ❤️ @khrm
Extra shout-out for awesome release notes:
- ❤️ @khrm
Tekton Triggers release v0.25.1 "Tekton Triggers"
-Docs @ v0.25.1
-Examples @ v0.25.1
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.1/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.1/interceptors.yaml
Changes
Fixes
- Bump golang.org/x/net from 0.11.0 to 0.17.0 (#1653)
Address the CVE-2023-44487 - which involves HTTP/2 Stream Cancellation Attack
Thanks
Thanks to these contributors who contributed to v0.25.1!
- ❤️ @khrm
Extra shout-out for awesome release notes:
- 😍 @khrm
Tekton Triggers release v0.25.0 "Tekton Triggers"
-Docs @ v0.25.0
-Examples @ v0.25.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.0/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.0/interceptors.yamlAttestation
The Rekor UUID for this release is 24296fb24b8ad77a3b75040e94727f4d7a7246d5e704172f48f5969d1202903ecd5fb22a0cc5b0f5
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77a3b75040e94727f4d7a7246d5e704172f48f5969d1202903ecd5fb22a0cc5b0f5
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.0/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.25.0/interceptors.yaml
REKOR_UUID=24296fb24b8ad77a3b75040e94727f4d7a7246d5e704172f48f5969d1202903ecd5fb22a0cc5b0f5
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.25.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
- ✨ Add probes support in Triggers eventlistener (#1633)
Triggers now support probes setting on EventListener object
Triggers now have default value for failure-threshold as 3 for both readiness and liveness probes
- ✨ Change Leader Election Config Map for Controllers and Webhook (#1624)
- ✨ Move interceptor structs to their specific interceptor implementations (#1588)
Backwards incompatible changes
In current release:
- 🚨 There are changes to move Interceptors structure to their specific interceptor implementations (#1588)
So whoever depends on interceptor structure they have to change their import path
This change effects for those who build something using Triggers code
Example: Tekton CLI import path change and usage
Fixes
- 🐛 Fix EL Status URL for kubernetesresource.serviceport (#1632)
Misc
- 🔨 Remove third_party directory (#1579)
- 🔨 drop manual use of knative.dev/pkg::injection.Dynamic (#1594)
- 🔨 Fix SA1019 error by staticcheck due to deprecation (#1629)
- 🔨 Bump tekton/pipelines v0.50.1 LTS in preparation of release (#1625)
- 🔨 Update Cel-Go to v0.17.1 (#1622)
- 🔨 Fix integraion Test by upgrading Knative (#1616)
- 🔨 Update Cel-Go to v0.16.0 (#1613)
- 🔨 Add v0.23.1 and v0.24.0 (as LTS) to releases.md (#1582)
Docs
- 📖 Added clarification about escaping special character in TB (#1631)
- 📖 Add AWS CodeCommit examples for push request and also README to configure AWS CodeCommit (#1619)
- 📖 Add v0.24.1 to docs (#1608)
Thanks
Thanks to these contributors who contributed to v0.25.0!
- ❤️ @dibyom
- ❤️ @dprotaso
- ❤️ @kcloutie
- ❤️ @khrm
- ❤️ @savitaashture
Extra shout-out for awesome release notes:
Contributors
Assets 6
Tekton Triggers release v0.24.1 "Tekton Triggers"
-Docs @ v0.24.1
-Examples @ v0.24.1
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.1/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.1/interceptors.yamlAttestation
The Rekor UUID for this release is 24296fb24b8ad77a2d710a90da7f62da10b6c562208f9042953f121566a007a0bdcf2280135cae56
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77a2d710a90da7f62da10b6c562208f9042953f121566a007a0bdcf2280135cae56
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.1/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.1/interceptors.yaml
REKOR_UUID=24296fb24b8ad77a2d710a90da7f62da10b6c562208f9042953f121566a007a0bdcf2280135cae56
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.24.1@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Fixes
- 🐛 [release-v0.24.x] Add SetType and SetSubject to CE sink response (#1605)
- 🐛 [release-v0.24.x] Fix k8s Events generation (#1604)
Notice
- In EventListener Response to event from CloudEvent providers, the Source will be changed in CloudEvent response to what we provide to CloudEvent sink (provided in CloudEventURI) during the processing of Triggers.
Thanks
Thanks to these contributors who contributed to v0.24.1!
- ❤️ @khrm
Tekton Triggers release v0.24.0 "Tekton Triggers"
-Docs @ v0.24.0
-Examples @ v0.24.0
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.0/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.0/interceptors.yamlAttestation
The Rekor UUID for this release is 24296fb24b8ad77ad326130394b66644f55dcff5934aea2584561dbbc454134c61361188b50fd005
Obtain the attestation:
REKOR_UUID=24296fb24b8ad77ad326130394b66644f55dcff5934aea2584561dbbc454134c61361188b50fd005
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.0/release.yaml
INTERCEPTORS_FILE=https://storage.googleapis.com/tekton-releases/triggers/previous/v0.24.0/interceptors.yaml
REKOR_UUID=24296fb24b8ad77ad326130394b66644f55dcff5934aea2584561dbbc454134c61361188b50fd005
# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.24.0@sha256:" + .digest.sha256')
# Download the release file
curl "$RELEASE_FILE" > release.yaml
curl "$INTERCEPTORS_FILE" >> release.yaml
# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
doneChanges
Features
- ✨ Slack interceptor 1542 (#1548)
Added a Slack Interceptor that allows you to extract fields from a slack slash command payload which are sent in the http form-data section.
- ✨ Add support for Affinity and TopologySpreadConstraints (#1540)
Triggers now support Affinity and TopologySpreadConstraints as part of Kubernetes and Custom resource
Fixes
- 🐛 Add Default Informers setup to Event Listener Sink (#1584)
Kubernetes API requests performed by EventListeners are now cached.
Misc
- 🔨 Remove PipelineResource support and bump pipeline to 0.46.0 (#1577)
This will remove PipelineResource and it's all occurrence and also bump pipeline to 0.46.0
and add Swagger.json for Triggers with Pipelines v0.46
- 🔨 Remove comparing serviceaccount in tests (#1576)
Remove comparing serviceaccount in tests
-
🔨 Move wlynch to emeritus_approvers (#1585)
-
🔨 Update pull_request_template.md (#1580)
-
🔨 Upgrade Tekton Pipelines to v0.47.0 (#1590)
-
🔨 Bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#1581)
-
🔨 Fix Error by given linters during tests (#1578)
-
🔨 Adding Minimum Kubernetes version (#1560)
-
🔨 Upgrading Go to 1.19 (#1554)
-
🔨 Create codeql-analysis.yml (#1546)
-
🔨 Add the instruction for release attestation (#1545)
-
🔨 Add v0.23.0 to releases.md (#1544)
Docs
Thanks
Thanks to these contributors who contributed to v0.24.0!
- ❤️ @dependabot[bot]
- ❤️ @dibyom
- ❤️ @ilan-pinto
- ❤️ @khrm
- ❤️ @miguelvalerio
- ❤️ @piyush-garg
- ❤️ @pratap0007
- ❤️ @savitaashture
- ❤️ @wlynch
Extra shout-out for awesome release notes:
- 😍 @dibyom
- 😍 @ilan-pinto
- 😍 @miguelvalerio
- 😍 @piyush-garg
- 😍 @pratap0007
- 😍 @savitaashture
- 😍 @wlynch
Tekton Triggers release v0.23.1 "Tekton Triggers"
-Docs @ v0.23.1
-Examples @ v0.23.1
Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.1/release.yaml
kubectl apply -f https://storage.googleapis.com/tekton-releases/triggers/previous/v0.23.1/interceptors.yaml
Changes
Features
Fixes
Misc
- 🔨 [release-v0.23.x] Fix marshalJSON for lists of objects (#1557)
ix a bug in CEL interceptor's marshalJSON binding to allow marshaling of maps.
- 🔨 [release-v0.23.x] Upgrade to latest knative.dev/pkg 1.9 (#1558)
Docs
Thanks
Thanks to these contributors who contributed to v0.23.1!
- ❤️ @khrm
- ❤️ @savitaashture
Extra shout-out for awesome release notes: