8000 Pull Request RCOS by suyashamatya · Pull Request #3 · suyashamatya/pipeline · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Pull Request RCOS #3

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 914 commits into
base: main
Choose a base branch
from
Open

Pull Request RCOS #3

wants to merge 914 commits into from

Conversation

suyashamatya
Copy link
Owner

Changes

Submitter Checklist

As the author of this PR, please check off the items in this checklist:

  • Has Docs if any changes are user facing, including updates to minimum requirements e.g. Kubernetes version bumps
  • Has Tests included if any functionality added or changed
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including functionality, content, code)
  • Has a kind label. You can add one by adding a comment on this PR that contains /kind <type>. Valid types are bug, cleanup, design, documentation, feature, flake, misc, question, tep
  • Release notes block below has been updated with any user facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings). See some examples of good release notes.
  • Release notes contains the string "action required" if the change requires additional action from users 8000 switching to the new release

Release Notes

NONE

dependabot bot and others added 30 commits January 22, 2025 12:29
@dependabot @tekton-robot
build(deps): bump github/codeql-action from 3.28.0 to 3.28.1
dc1e9af 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.0 to 3.28.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@48ab28a...b6a472f)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump go.opentelemetry.io/otel/trace from 1.33.0 to 1.34.0
1656910 
Bumps [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) from 1.33.0 to 1.34.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.34.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/google/cel-go from 0.20.1 to 0.22.1
72aef6c 
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.20.1 to 0.22.1.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.20.1...v0.22.1)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/spiffe/spire-api-sdk from 1.10.0 to 1.11.1
3897ed1 
Bumps [github.com/spiffe/spire-api-sdk](https://github.com/spiffe/spire-api-sdk) from 1.10.0 to 1.11.1.
- [Commits](spiffe/spire-api-sdk@v1.10.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/spiffe/spire-api-sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/o…
6cd9b2e 
…tlptracehttp

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) from 1.27.0 to 1.34.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.27.0...v1.34.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
4f175cb 
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.1.1 to 6.2.0.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@971e284...ec5d184)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@aThorp96 @tekton-robot
Add PipelineRun pipeline-timeout note to pipeline docs
04bb42b 
The Pipelines docs' timeout section did not mention that the Pipeline
itself had its timeout configured by the PipelineRun, causing some
confusion in #8114. Without adding a whole section, linking to the
PipelineRun timeout docs in a note about Task vs Pipeline timeout
precedence both documents where the pipeline timeout is configured
while also clarifying the misconception of timeout precedence.
@dependabot @tekton-robot
build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4
d44621d 
Bumps google.golang.org/protobuf from 1.36.3 to 1.36.4.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/go-git/go-git/v5 from 5.13.1 to 5.13.2
895bdd8 
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.13.1 to 5.13.2.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.13.1...v5.13.2)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github/codeql-action from 3.28.1 to 3.28.5
cf61014 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.1 to 3.28.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@b6a472f...f6091c0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
10000
84574ee 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.4 to 1.70.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.69.4...v1.70.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@waveywaves @tekton-robot
enforce step param substitution order and better step result referencing
7d779dc 
- ensure all parameters are hydrated with their respective values before parsing results from steps
- add check in replacementsFromStepResults to only parse the paramter if it starts with '$(steps.' else it throws the error
"must be one of the form 1).steps.<stepName>.results.<resultName> 2).steps.<stepName>.results.<objectResultName>.<individualAttribute>"
@waveywaves @tekton-robot
test: invalid step result reference
7d5a534
@waveywaves @tekton-robot
fix: check for duplicates after applying the substitutions
68d09e3
@waveywaves @tekton-robot
docs: parameter substitution precedence
8777a96
@waveywaves @tekton-robot
fix: inline error check and assert invalid step result ref error
cef86d1
@chmouel @tekton-robot
Fix deprecated golangci-lint configuration
7021f7b 
Fix deprecated golangci-lint configuration
```
% ./.bin/golangci-lint-v1.63.4 run ./... --modules-download-mode=vendor
WARN [config_reader] The configuration option `output.uniq-by-line` is
deprecated, please use `issues.uniq-by-line`
```

Signed-off-by: Chmouel Boudjnah <chmouel@redhat.com>
@Ccheers @tekton-robot
fix(computeresource/tasklevel): Fixed a bug where abnormal calculatio…
3f8855a 
…ns caused requested resources to exceed limits when Resource type was Memory or EphemeralStorage
@dependabot @tekton-robot
build(deps): bump the all group in /tekton with 2 updates
f6259fd 
Bumps the all group in /tekton with 2 updates: [chainguard/crane](https://github.com/chainguard-images/images) and [chainguard/go](https://github.com/chainguard-images/images).


Updates `chainguard/crane` from `3939279` to `2db37dc`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `chainguard/go` from `b1d89ba` to `4c637bb`
- [Commits](https://github.com/chainguard-images/images/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-type: direct:production
  dependency-group: all
- dependency-name: chainguard/go
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/google/cel-go from 0.22.1 to 0.23.1
cc7f613 
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.22.1 to 0.23.1.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.22.1...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@waveywaves @tekton-robot
fix: reference params in default values, allow chained references
8df0a96 
- parameter defaults can now reference other parameters in chain
- validate if the default parameter references are correct
- ensure that no referenced parameter goes unresolved, including the chains
- ensure that there are no circular dependencies with param referencing
- multipass replacement from default params to ensure both referenced and non reference default values are processed
- add tests
@waveywaves @tekton-robot
test: check for circular dependency in stepaction validation
c6d38c9 
Signed-off-by: Vibhav Bobade <vibhav.bobde@gmail.com>
@vdemeester @tekton-robot
tekton: fix micro typo on release-cheat-sheet
a3ee865 
Signed-off-by: Vincent Demeester <vdemeest@redhat.com>
@dependabot @tekton-robot
build(deps): bump github/codeql-action from 3.28.5 to 3.28.8
09bb603 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.5 to 3.28.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f6091c0...dd74661)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump the all group in /tekton with 2 updates
5c74773 
Bumps the all group in /tekton with 2 updates: [chainguard/crane](https://github.com/chainguard-images/images) and [chainguard/go](https://github.com/chainguard-images/images).


Updates `chainguard/crane` from `2db37dc` to `e276994`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `chainguard/go` from `4c637bb` to `96e4137`
- [Commits](https://github.com/chainguard-images/images/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-type: direct:production
  dependency-group: all
- dependency-name: chainguard/go
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0
0844233 
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.10.0 to 0.11.0.
- [Commits](golang/sync@v0.10.0...v0.11.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/google/cel-go from 0.23.1 to 0.23.2
ff8501c 
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.23.1 to 0.23.2.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.23.1...v0.23.2)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@vdemeester @tekton-robot
releases.md: add 0.68.0 LTS and update other releases
4416b4f
@dependabot @tekton-robot
build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5
e34b540 
Bumps google.golang.org/protobuf from 1.36.4 to 1.36.5.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump the all group in /tekton with 2 updates
2b50c4c 
Bumps the all group in /tekton with 2 updates: [chainguard/crane](https://github.com/chainguard-images/images) and [chainguard/go](https://github.com/chainguard-images/images).


Updates `chainguard/crane` from `e276994` to `6ffe372`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `chainguard/go` from `96e4137` to `36fee4a`
- [Commits](https://github.com/chainguard-images/images/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-type: direct:production
  dependency-group: all
- dependency-name: chainguard/go
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
infernus01 and others added 30 commits June 11, 2025 14:09
@infernus01 @tekton-robot
mark go-multierror as indirect via go mod tidy
5f95811
@infernus01 @tekton-robot
Removed unnecessary commits
cefc8ab
@infernus01 @tekton-robot
Refactoring status.go and status_test.go files according to suggestions
afeaeef
@l-qing @tekton-robot
docs: clarify container entrypoint behavior
4f35d6b 
fix #8647

The Pipelines controller retrieves the entrypoint value from the registry, which means
the container will execute using the default entrypoint defined in the image.

Changes:
- Update documentation to clarify that containers use their default entrypoints
- Add comments explaining the default entrypoints for gcloud and docker images
- Remove explicit command specifications in the example
- Fix minor formatting issues in the text
@infernus01 @tekton-robot
fix #8775:Remove testify usage from pkg/spire/
412d5d3
@infernus01 @tekton-robot
mark testify as indirect in go.mod via go mod tidy
5d05200
@arthur-c @tekton-robot
fix(docs): remove duplicated block from artifacts.md
fcc364d
@twoGiants @tekton-robot
refactor: improve names and fix typos
f747ba8 
While working on TEP-0056 small sets of typo fixes and minor
refactorings are extracted as small separated PRs to reduce the
cognitive load for the actual TEP-0056 code changes in following PRs.

Issues #8760, #7166.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@tricktron @tekton-robot
fix: update crd schemas command errors
2804278 
Changes the following Kubernetes controller annotations so that the
`controller-gen:schemapatch` command works without any errors:

- Removes the duplicated list type annotation from struct fields where
  the annotation is already set on the type.
- Create a type alias and set the list type annotation there (mainly
  with `[]corev1.Volume`).
- Set the `storageversion` annotation to the most stable version.

As a result, we can then simplify the update-schema.sh script.
@alex-cobas @tekton-robot
fix(lint): resolve golangci-lint errors in testing context
c12a36e 
Since Go 1.24, the golangci-lint linter 'usetesing' reports errors when
"context.Background()" or "context.TODO()" are used in tests.
This commit updates the codebase to use "t.Context()" as recommended
by Go 1.24 release documentation.

Refactor some 'TestRealWaiter*' functions to send errors through a
'chan error' instead of calling 't.Errorf' inside goroutines. This
ensures that all logging and test assertions occur in the main test
thread to avoid panics caused by logging after test has completed.

Signed-off-by: Alexander Cobas Rodríguez <alexander.cobas@ibm.com>
@twoGiants @tekton-robot
refactor: move Step artifacts flag tests
0cc310c 
Now that `Step` implements the `Validatable` interface the tests for the
`Step` validation are moved from `task_validation_test.go` to
`container_validation_test.go`.

The following two tests are moved and renamed:
- `TestTaskSpecValidateErrorWithArtifactsRefFlagNotEnabled`
  - > `TestStepValidateErrorWithArtifactsRefFlagNotEnabled`
- `TestTaskSpecValidateSuccessWithArtifactsRefFlagEnabled`
  - > `TestStepValidateSuccessWithArtifactsRefFlagEnabled`

Issue #8700.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@dependabot @tekton-robot
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/azure
9bd3dcd 
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) from 1.9.4 to 1.9.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.4...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@tekton-robot
build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2
4514ea9 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@f49aabe...05b42c6)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/gcp
fe0df5f 
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) from 1.9.4 to 1.9.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.4...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@twoGiants @tekton-robot
refactor: move Step Ref tests
fb60939 
Now that `Step` implements the `Validatable` interface the tests for the
`Step` validation are moved from `task_validation_test.go` to
`container_validation_test.go`.

The following two tests are moved and renamed:
- `TestTaskSpecValidateErrorWithStepActionRef`
  - > `TestStepValidateErrorWithStepActionRef`

Issue #8700.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@dependabot @tekton-robot
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/hash…
f7787e9 
…ivault

Bumps [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) from 1.9.4 to 1.9.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.4...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@twoGiants @tekton-robot
refactor: move Step onError and API version tests
ffb7111 
Now that `Step` implements the `Validatable` interface the tests for the
`Step` validation are moved from `task_validation_test.go` to
`container_validation_test.go`.

`TestStepOnError` is moved.

`TestIncompatibleAPIVersions` is broken down and the Step fields
related tests i.e. "windows script support", "stdout stream support" and
"stderr stream support" are moved to a new test
`TestStepIncompatibleAPIVersions`.

Issue #8700.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@dependabot @tekton-robot
build(deps): bump github.com/sigstore/sigstore/pkg/signature/kms/aws
d438f79 
Bumps [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) from 1.9.4 to 1.9.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.4...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@twoGiants @tekton-robot
refactor: move ResultRef and ArtifactsRef tests
2306719 
Now that `Step` implements the `Validatable` interface the tests for the
`Step` validation are moved from `task_validation_test.go` to
`container_validation_test.go`.

The following two tests are moved and renamed:
- `TestTaskSpecValidateErrorWithArtifactsRef`
  - > `TestStepValidateErrorWithArtifactsRef`
- `TestTaskSpecValidateErrorWithStepResultRef`
  - > `TestStepValidateErrorWithStepResultRef`

Issue #8700.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@twoGiants @tekton-robot
refactor: move Step StepActionReference test
c9678ee 
Now that `Step` implements the `Validatable` interface the tests for the
`Step` validation are moved from `task_validation_test.go` to
`container_validation_test.go`.

The following tests is moved and renamed:
- `TestTaskSpecStepActionReferenceValidate`
  - `TestStepWithStepActionReferenceValidate`

Issue #8700.

Signed-off-by: Stanislav Jakuschevskij <stas@two-giants.com>
@dependabot @tekton-robot
build(deps): bump github.com/sigstore/sigstore from 1.9.4 to 1.9.5
b86ab22 
Bumps [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) from 1.9.4 to 1.9.5.
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.9.4...v1.9.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/sigstore
  dependency-version: 1.9.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump tj-actions/changed-files
7ccbea3 
Bumps [tj-actions/changed-files](https://github.com/tj-actions/changed-files) from 4140eb99d2cced9bfd78375c2088371853262f79 to d52d20fa3f981cb852b861fd8f55308b5fe29637.
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@4140eb9...d52d20f)

---
updated-dependencies:
- dependency-name: tj-actions/changed-files
  dependency-version: d52d20fa3f981cb852b861fd8f55308b5fe29637
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github/codeql-action from 3.28.19 to 3.29.0
60afc72 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.19 to 3.29.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@fca7ace...ce28f5b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump step-security/harden-runner from 2.12.0 to 2.12.1
9244de6 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.12.0 to 2.12.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@0634a26...002fdce)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump the all group in /tekton with 4 updates
8d4ae4b 
Bumps the all group in /tekton with 4 updates: [chainguard/crane](https://github.com/chainguard-images/images), [chainguard/go](https://github.com/chainguard-images/images), tektoncd/plumbing/ko and tektoncd/plumbing/koparse.


Updates `chainguard/crane` from `016a40f` to `ea0fb2c`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `chainguard/go` from `0dc54e7` to `19a5c05`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `62bbb6b` to `81006d2`

Updates `tektoncd/plumbing/koparse` from `05a1fff` to `852241a`

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: chainguard/go
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: 81006d2f7f32196fc39d386dce2184de7e6c24dab7716bee14f4644ec74b3569
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: 852241a4061cf9400cec03a43f2316867683d303f51944a460ad5ac40723c441
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/google/go-containerregistry
5b2eba1 
Bumps [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) from 0.20.5 to 0.20.6.
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.5...v0.20.6)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump github.com/cloudevents/sdk-go/v2 from 2.16.0 to 2.16.1
f187aef 
Bumps [github.com/cloudevents/sdk-go/v2](https://github.com/cloudevents/sdk-go) from 2.16.0 to 2.16.1.
- [Release notes](https://github.com/cloudevents/sdk-go/releases)
- [Commits](cloudevents/sdk-go@v2.16.0...v2.16.1)

---
updated-dependencies:
- dependency-name: github.com/cloudevents/sdk-go/v2
  dependency-version: 2.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump k8s.io/client-go from 0.32.5 to 0.32.6
09efb4d 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.32.5 to 0.32.6.
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.5...v0.32.6)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-version: 0.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump k8s.io/apiextensions-apiserver from 0.32.5 to 0.32.6
87e29d8 
Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.32.5 to 0.32.6.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.5...v0.32.6)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.32.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @tekton-robot
build(deps): bump the all group in /tekton with 4 updates
03a3fa9 
Bumps the all group in /tekton with 4 updates: [chainguard/crane](https://github.com/chainguard-images/images), [chainguard/go](https://github.com/chainguard-images/images), tektoncd/plumbing/ko and tektoncd/plumbing/koparse.


Updates `chainguard/crane` from `ea0fb2c` to `d2c0669`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `chainguard/go` from `19a5c05` to `4124bbd`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `81006d2` to `a7e41c2`

Updates `tektoncd/plumbing/koparse` from `852241a` to `a546c4f`

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: chainguard/go
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: a7e41c21decfd8e02de151248a3422724903acc3f0eca8173046f43a854dee48
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: a546c4f879e9b19bf1b48d64f3a517f068910d5ad8037f903ef02b47230ac89b
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0