🎉 Resolvers caching, Pipeline in Pipeline, and better ARM64 support & tested releases 🎉

-Docs @ v1.6.0 -Examples @ v1.6.0

Installation one-liner

:::shell
kubectl apply -f https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.6.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a288ca8343f66259e4a615801fa37703480d82893d1c6a45a2935a6632beb4164

Obtain the attestation:

:::shell
REKOR_UUID=108e9186e8c5677a288ca8343f66259e4a615801fa37703480d82893d1c6a45a2935a6632beb4164
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

:::shell
RELEASE_FILE=https://infra.tekton.dev/tekton-releases/pipeline/previous/v1.6.0/release.yaml
REKOR_UUID=108e9186e8c5677a288ca8343f66259e4a615801fa37703480d82893d1c6a45a2935a6632beb4164

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v1.6.0@sha256:" + .digest.sha256')

# Download the release file
curl "$RELEASE_FILE" > release.yaml

# For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• :sparkles: feat: implement shared cache for bundle, git, and cluster resolvers (#9051)

Support caching for bundle, git, and cluster resolvers, reducing redundant fetches and improving pipeline performance.

Key Features: - Automatic caching for immutable references (digest-based bundles, git SHAs) - Three cache modes: always (cache everything), never (disable caching),auto (cache only immutable references - default) - Configurable via ConfigMap: Set cache size and TTL without restarting controllers - Per-task override: Tasks can override global cache settings using the cache parameter - Observability: Cache hits/misses and timestamps added to resource annotations

This helps reduce external API calls, improves pipeline exec speed, and provides better resilience during remote resource resolution.

• :sparkles: feat: resolve array values in Input of When expressions (#9038)

Array values can now be resolved in the Input attribute of When expressions

• :sparkles: Issue 9032 - Add support for step display name (#9033)

add displayName field to Step.

• :sparkles: Implement Pipelines-in-Pipelines. (#8873 [#8878] [#8879])

A Pipeline can now execute embedded Pipelines (Pipelines-in-Pipelines) using the PipelineSpec field under tasks. Refer to the TEP-0056 for more details.

Fixes

• :bug: fix: do not fail PipelineRun when TaskRef reconciles with retryable err (#9099)

With this change, unknown DryRunValidation errors during TaskRef and PipelineRef resolution no longer cause PipelineRuns and TaskRuns to fail. Explicit Validation errors will still cause the Run to fail.

• :bug: Added signal handling in SidecarLog results to support Kubernetes-native sidecar functionality (#9095)

Added signal handling to SidecarLog to support Kubernetes-native sidecar functionality, preventing repeated restarts of the init container.

• :bug: Pods for timed out TaskRuns should not be deleted when keep-pod-on-cancel feature flag is true (#9075)

If Feature flag "keep-pod-on-cancel" is set to true then pods corresponding to TaskRun will be not be deleted when TaskRun Times Out. Earlier pod was retained only if it taskrun was canceled.

• :bug: fix(taskrun): ensure status steps are ordered correctly when using StepAction (#9039)

Binary file (standard input) matches

• :bug: entrypoint: handle linux in pkgs/platforms (#9096)
• :bug: test/e2e: remove data race on global variable requireAlphaFeatureFlag (#9067)
• :bug: tests: pdate csi-node-driver-registrar image reference (#9089)
• :bug: ci: Ensure e2e setup errors fail tests, add retries during e2e setup (#9082)
• :bug: test/e2e: Fix TestLargerResultsSidecarLogs and TestWaitCustomTask_V1_PipelineRun flakyness (#9072)

Misc

• :hammer: e2e: migrate wait.PollImmediate deprecated functions (#9073)
• :hammer: chore: centralize ko base image configuration (#9110)
• :hammer: build(deps): bump k8s.io/code-generator from 0.32.8 to 0.32.9 (#9106)
• :hammer: build(deps): bump the all group in /tekton with 4 updates (#9105)
• :hammer: build(deps): bump chainguard-dev/actions from 1.5.3 to 1.5.7 (#9104)
• :hammer: build(deps): bump github/codeql-action from 4.30.9 to 4.31.0 (#9103)
• :hammer: build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#9102)
• :hammer: build(deps): bump tj-actions/changed-files from [d03a93] to [dbf178] (#9101)
• :hammer: build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.10 (#9097)
• :hammer: e2e: tests against 1.34 as well (#9091)
• :hammer: ci/e2e: run one e2e on arm64 (#9090)
• :hammer: build(deps): bump github/codeql-action from 3.30.1 to 4.30.9 (#9088)
• :hammer: build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#9087)
• :hammer: build(deps): bump actions/dependency-review-action from 4.8.0 to 4.8.1 (#9086)
• :hammer: build(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0 (#9085)
• :hammer: build(deps): bump the all group in /tekton with 2 updates (#9081)
• :hammer: build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.2 (#9079)
• :hammer: build(deps): bump actions/cache from 4.2.4 to 4.3.0 (#9078)
• :hammer: build(deps): bump peter-evans/create-or-update-comment from 4.0.0 to 5.0.0 (#9077)
• :hammer: build(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#9076)
• :hammer: test/e2e: update kubernetes versions we test against (#9068)
• :hammer: Pin actions by commit SHA or image digest (#9061)
• :hammer: build(deps): bump tj-actions/changed-files from [2036da] to [d03a93] (#9058)
• :hammer: build(deps): bump chainguard-dev/actions from 1.4.12 to 1.5.3 (#9057)
• :hammer: Add GitHub Actions workflow for go coverage job (#9055)
• :hammer: build(deps): bump actions/dependency-review-action from 4.7.2 to 4.8.0 (#9047)
• :hammer: build(deps): bump step-security/harden-runner from 2.13.0 to 2.13.1 (#9036)
• :hammer: build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#9027)
• :hammer: fix: fix %w formatting leak in user-facing error (#9003)
• :hammer: build(deps): bump the all group in /tekton with 3 updates (#8990)
• :hammer: build(deps): bump github.com/spiffe/go-spiffe/v2 from 2.5.0 to 2.6.0 (#8988)

Docs

• :book: document the latest release - 1.5 (#9054)
• :book: Remove broken example link from TaskRuns doc (#9023)

Thanks

Thanks to these contributors who contributed to v1.6.0! * :heart: @AlanGreene * :heart: @Maximilien-R * :heart: @aThorp96 * :heart: @dependabot[bot] * :heart: @lcarva * :heart: @pramodbindal * :heart: @pritidesai * :heart: @twoGiants * :heart: @valAndre07 * :heart: @vdemeester * :heart: @waveywaves * :heart: @yuzichen12123

Extra shout-out for awesome release notes: * :heart_eyes: @Maximilien-R * :heart_eyes: @aThorp96 * :heart_eyes: @lcarva * :heart_eyes: @pramodbindal * :heart_eyes: @pritidesai * :heart_eyes: @twoGiants * :heart_eyes: @valAndre07