Skip to content

[v0.16.x] Update pipeline module - #1401

Open
enarha wants to merge 1 commit into
tektoncd:release-v0.16.xfrom
enarha:fix-cve-release-v0.16.x
Open

[v0.16.x] Update pipeline module#1401
enarha wants to merge 1 commit into
tektoncd:release-v0.16.xfrom
enarha:fix-cve-release-v0.16.x

Conversation

@enarha

@enarha enarha commented Jul 29, 2026

Copy link
Copy Markdown
Contributor

Update github.com/tektoncd/pipeline to latest v1.3.x

Changes

/kind misc

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you review them:

  • Has Docs included if any changes are user facing
  • Has Tests included if any functionality added or changed
  • Tested your changes locally (if this is a code change)
  • Follows the commit message standard
  • Meets the Tekton contributor standards (including functionality, content, code)
  • Has a kind label. You can add a comment on this PR that contains /kind <type>. Valid types are bug, cleanup, design, documentation, feature, flake, misc, question, tep
  • Release notes block below has been updated with any user-facing changes (API changes, bug fixes, changes requiring upgrade notices or deprecation warnings)
  • Release notes contain the string "action required" if the change requires additional action from users switching to the new release

Release Notes

NONE

Update github.com/tektoncd/pipeline to latest v1.3.x
@tekton-robot tekton-robot added kind/misc Categorizes issue or PR as a miscellaneuous one. release-note Denotes a PR that will be considered when it comes time to generate release notes. labels Jul 29, 2026
@tekton-robot
tekton-robot requested review from dibyom and khrm July 29, 2026 14:55
@tekton-robot tekton-robot added the size/L Denotes a PR that changes 100-499 lines, ignoring generated files. label Jul 29, 2026
@enarha
enarha requested a review from Copilot July 29, 2026 14:55

@khrm khrm left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jul 29, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the repository’s vendored dependency set (and go.mod/go.sum) to align with newer upstream releases, most notably moving github.com/tektoncd/pipeline to the latest v1.3.x on the v0.16.x branch.

Changes:

  • Bump github.com/tektoncd/pipeline to v1.3.6 and refresh vendored Tekton Pipeline API types accordingly.
  • Update key transitive dependencies (notably Kubernetes client-go/API packages, go.uber.org/zap, and github.com/google/cel-go) and refresh vendor/.
  • Pull in upstream vendor fixes/adjustments (e.g., certificate template behavior in client-go, zap core behaviors, CEL binding/validation behavior).

Reviewed changes

Copilot reviewed 1 out of 26 changed files in this pull request and generated no comments.

Show a summary per file
File Description
vendor/modules.txt Updates the vendored module version manifest to reflect bumped dependency versions.
vendor/k8s.io/client-go/util/cert/cert.go Adjusts self-signed CA cert template DNS SAN behavior (only sets DNSNames when CommonName is non-empty).
vendor/go.uber.org/zap/zapcore/level.go Updates log level text unmarshalling behavior as part of zap v1.27.1 refresh.
vendor/go.uber.org/zap/zapcore/lazy_with.go Refactors lazy core wrapping implementation (and adds method overrides for enabled/check/write/sync paths).
vendor/go.uber.org/zap/zapcore/entry.go Updates error-output formatting calls to explicitly ignore fmt.Fprintf errors.
vendor/go.uber.org/zap/zapcore/console_encoder.go Updates console encoder formatting call to explicitly ignore fmt.Fprint errors.
vendor/go.uber.org/zap/zapcore/buffered_write_syncer.go Changes Stop() behavior to avoid lock/wait patterns and sync after flush-loop termination.
vendor/go.uber.org/zap/sink.go Updates an internal comment to match the exported API naming (RegisterSink).
vendor/go.uber.org/zap/options.go Updates error-output formatting to ignore fmt.Fprintf errors in IncreaseLevel.
vendor/go.uber.org/zap/Makefile Updates vendored zap lint target invocation arguments.
vendor/go.uber.org/zap/logger.go Updates error-output formatting to ignore fmt.Fprintf errors in caller resolution failure path.
vendor/go.uber.org/zap/LICENSE Updates copyright year range.
vendor/go.uber.org/zap/http_handler.go Updates HTTP handler error response formatting to ignore fmt.Fprintf errors.
vendor/go.uber.org/zap/field.go Adds nil-handling for Object(...) and introduces DictObject(...) helper.
vendor/go.uber.org/zap/CODE_OF_CONDUCT.md Updates contributor covenant links to HTTPS.
vendor/go.uber.org/zap/CHANGELOG.md Adds zap 1.27.1 changelog entry to vendored docs.
vendor/go.uber.org/zap/.golangci.yml Updates govet linter name from niliness to nilness.
vendor/github.com/tektoncd/pipeline/pkg/apis/pipeline/v1beta1/stepaction_types.go Replaces repeated kind literal with a StepActionKind constant for GVK creation.
vendor/github.com/google/cel-go/common/types/pb/type.go Changes unwrapping behavior to use reflected/dynamic unwrap helper.
vendor/github.com/google/cel-go/cel/validator.go Updates validator config handling (notably numeric limit values coming from protobuf decoding).
vendor/github.com/google/cel-go/cel/templates/authoring.tmpl Improves authoring prompt template output with optional description rendering.
vendor/github.com/google/cel-go/cel/program.go Adds caching/once-only binding of function overloads onto the environment.
vendor/github.com/google/cel-go/cel/folding.go Updates exported comment wording for FoldKnownValues.
vendor/github.com/google/cel-go/cel/env.go Extends Env with cached function binding state for program planning.
go.sum Updates checksums for bumped modules.
go.mod Updates module requirements (pipeline, CEL, zap, k8s libs, cloudevents, etc.).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@divyansh42 divyansh42 closed this Aug 23, 2026
@divyansh42 divyansh42 reopened this Aug 23, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: divyansh42
To complete the pull request process, please ask for approval from enarha after the PR has been reviewed.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/misc Categorizes issue or PR as a miscellaneuous one. lgtm Indicates that a PR is ready to be merged. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants