Skip to content

chore: bump component versions - #4068

Open
tekton-robot wants to merge 38 commits into
mainfrom
bot-bump-payload
Open

chore: bump component versions#4068
tekton-robot wants to merge 38 commits into
mainfrom
bot-bump-payload

Conversation

@tekton-robot

@tekton-robot tekton-robot commented Sep 11, 2026

Copy link
Copy Markdown
Contributor

Component Version Updates

This PR updates the following component versions:

chains

manual-approval-gate

pipelines-as-code


This PR was automatically created by the bump-payload workflow.

jkhelil and others added 30 commits August 7, 2026 10:50
OLM v1 does not support NetworkPolicy resources in operator bundles.
Remove config/kubernetes/base/networkpolicy.yaml and
config/openshift/base/networkpolicy.yaml (and their kustomization
entries) added by #3714. The reconciler-managed NetworkPolicies for
operand namespaces (proxy-webhook, pipeline, triggers, chains, etc.)
are unaffected.

Reverts the static-manifest portion of #3714.

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Newer kustomize versions enforce a security restriction that
rejects direct file references pointing outside the kustomization
root. config/kubernetes/base and config/openshift/base both
referenced CRD files via ../../base/generated-crds/..., which
violates that restriction and caused kustomize build to silently
fail during releases (the error was swallowed because the pipeline
does not set pipefail).

Move tektondashboards and tektonaddons CRDs from their platform-
specific kustomization.yaml files into config/base/kustomization.yaml
where controller-gen already writes all generated CRDs. The extra
CRDs on each platform are harmless — their reconcilers are
platform-gated.

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
The pinned ko/koparse images baked in Go 1.26.4, but go.mod now
requires go >= 1.26.5, causing ko resolve to fail with
GOTOOLCHAIN=local on patch releases.

Bump both image digests to the latest plumbing images built from
golang:1.26.5-alpine (ko sha-a4f94ba, published 2026-08-10):
- ko:      sha256:976eb63...ffbeec3
- koparse: sha256:e060328...58c5bce

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Upgrade github.com/klauspost/compress v1.18.6 -> v1.18.7 to fix
GHSA-259r-337f-4rfw identified in GovCloud FedRAMP compliance scan.

Jira: SRVKP-13173

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Run go mod tidy && go mod vendor to sync vendor/ with the updated
go.mod entry for github.com/klauspost/compress v1.18.7.

Jira: SRVKP-13173

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
- scheduler: v0.3.1 → v0.4.0

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
- chains: v0.29.0 → v0.29.1

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from 2.6.4 to 2.6.5.
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.6.4...v2.6.5)

---
updated-dependencies:
- dependency-name: github.com/sigstore/cosign/v2
  dependency-version: 2.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Update go directive from 1.26.5 to 1.26.6 to address multiple
reachable stdlib vulnerabilities confirmed by govulncheck:
- GO-2026-6218: quadratic complexity in net/url.resolvePath
- GO-2026-6091: JS regexp context tracking in html/template
- GO-2026-6090: TLS post-handshake message limits in crypto/tls
- GO-2026-6089: ReadHeaderTimeout in HTTP/2 check in net/http
- GO-2026-6088: XML recursion depth guard in encoding/xml
- GO-2026-5972: ASN.1 recursion depth guard in encoding/asn1
- GO-2026-5026: net/http header handling

All unit tests pass with GOTOOLCHAIN=go1.26.6.

Resolves: SRVKP-13173, SRVKP-13178, SRVKP-13179

Co-Assisted-By: Claude Sonnet 4.6 <noreply@anthropic.com>
- chains: v0.29.1 → v0.29.2

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.35.7 to 0.35.8.
- [Commits](kubernetes/api@v0.35.7...v0.35.8)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.35.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
TektonDashboard is Kubernetes-only. Commit e18041d moved the
tektondashboards CRD into the shared config/base to satisfy
kustomize's path restrictions, which caused the OpenShift bundle
to start shipping it. OLM then advertised it as a Provided API
in the OpenShift console Provided APIs list.

Fix with two complementary layers:

1. Add a kustomize patch in config/openshift/base that marks
   tektondashboards CRD with config.kubernetes.io/local-config,
   which causes kustomize to drop it from the OpenShift build
   output entirely. Verified: kustomize build produces 0 matches
   for tektondashboards on OpenShift, and still 3 on Kubernetes.

2. Add tektondashboards.operator.tekton.dev to internal-objects
   in all OpenShift CSV templates so OLM hides it from the console
   even if the CRD appears in a bundle built via the
   release-manifest strategy (which bypasses kustomize overlays).

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.35.7 to 0.35.8.
- [Commits](kubernetes/code-generator@v0.35.7...v0.35.8)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-version: 0.35.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) from 0.36.3 to 0.36.4.
- [Commits](kubernetes/apimachinery@v0.36.3...v0.36.4)

---
updated-dependencies:
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.36.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
- syncer-service: v0.1.0 → v0.1.1

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.35.7 to 0.35.8.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.35.7...v0.35.8)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.35.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…th 5 updates

Bumps the github-actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.7` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.7` |
| [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.20.0` | `2.20.1` |
| [chainguard-dev/actions/kind-diag](https://github.com/chainguard-dev/actions) | `1.6.29` | `1.6.32` |
| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.1` | `0.6.2` |



Updates `github/codeql-action/init` from 4.37.3 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e4fba86...ff2f1c6)

Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.7
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e4fba86...ff2f1c6)

Updates `step-security/harden-runner` from 2.20.0 to 2.20.1
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@bf7454d...b09bb98)

Updates `chainguard-dev/actions/kind-diag` from 1.6.29 to 1.6.32
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@b2555de...7bd1e94)

Updates `zizmorcore/zizmor-action` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@6fc4b00...3dc1ecc)

---
updated-dependencies:
- dependency-name: chainguard-dev/actions/kind-diag
  dependency-version: 1.6.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: step-security/harden-runner
  dependency-version: 2.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
TektonAddon is OpenShift-only. Commit e4f5c9d moved the tektonaddons
CRD into the shared config/base to satisfy kustomize path restrictions,
which caused the Kubernetes bundle to start shipping it. OLM would then
advertise it as a Provided API in the Kubernetes OperatorHub console.

Add a kustomize patch in config/kubernetes/base that marks tektonaddons
CRD with config.kubernetes.io/local-config, causing kustomize to drop
it from the Kubernetes build output entirely.

Verified: kustomize build config/kubernetes/overlays/operatorhub
produces no CRD object for tektonaddons (RBAC rules only), while
tektonaddons CRD remains present in the OpenShift build.

This is the symmetric counterpart to the OpenShift fix in #3978, which
excluded tektondashboards (Kubernetes-only) from the OpenShift bundle.

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
- pipeline: v1.15.0 → v1.15.1

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps the all group in /tekton with 3 updates: [chainguard/crane](https://github.com/chainguard-images/images), [tektoncd/plumbing/ko](https://github.com/tektoncd/plumbing) and [tektoncd/plumbing/koparse](https://github.com/tektoncd/plumbing).


Updates `chainguard/crane` from `6fc6fcd` to `993b6cd`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `976eb63` to `c84f47a`
- [Commits](https://github.com/tektoncd/plumbing/commits)

Updates `tektoncd/plumbing/koparse` from `e060328` to `dc3e092`
- [Commits](https://github.com/tektoncd/plumbing/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: c84f47ab24ce22042b06134e8d3e4f4a16943f7b9d63286663691610431051c5
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: dc3e092bd165a1f72e8b1fe0e2a5c5dfcea419adbb7b90fa047967da49fd9a1d
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
- pruner: v0.4.1 → v0.4.3

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Bumps the github-actions group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [chainguard-dev/actions/kind-diag](https://github.com/chainguard-dev/actions).


Updates `github/codeql-action/init` from 4.37.7 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@ff2f1c6...db488dd)

Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.8
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@ff2f1c6...db488dd)

Updates `chainguard-dev/actions/kind-diag` from 1.6.32 to 1.6.33
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@7bd1e94...0ffab11)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: chainguard-dev/actions/kind-diag
  dependency-version: 1.6.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
- chains: v0.29.2 → v0.29.3

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Secure component metrics endpoints with mutual TLS on OpenShift.
Each reconciler syncs the Prometheus client CA bundle from
kube-system/extension-apiserver-authentication into the component
namespace as a metrics-client-ca ConfigMap.

OpenShift's serving-cert controller is triggered via annotation on
each metrics Service to provision a per-component TLS Secret.
Two new manifest transformers (InjectMetricsServingCert,
ApplyMetricsTLS) wire the Secret and ConfigMap as volumes and inject
METRICS_PROMETHEUS_TLS_* env vars so that the knative/pkg
prometheus.Server enables mTLS with require client auth.

ServiceMonitor resources are updated with scheme: https, scrapeClass
tls-client-certificate-auth, and tlsConfig.serverName. The existing
UpdateServiceMonitorTargetNamespace transformer is extended to also
patch the namespace segment inside serverName at runtime.

Relates-To: SRVKP-8172

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Add opt-in feature flag spec.platforms.openshift.enableMetricsMTLS
to TektonConfig. When false (default) all mTLS transformers are
skipped so existing clusters are unaffected.

Key changes:
- Add EnableMetricsMTLS *bool to OpenShift API struct + CRD schema
- EnsureMetricsClientCA (TektonConfig-only) returns a clear error
  when kube-system/extension-apiserver-authentication is absent,
  asking the user to disable mTLS or install CMO
- Add ResolveMetricsMTLS helper (flag check + CM existence in one
  call) used by all 6 component PreReconcile methods
- Gate all mTLS transformers behind metricsMTLSReady on each
  component extension struct
- Include MetricsCABundle content in GetPlatformData() hash so
  component CRs are automatically re-annotated when TektonConfig
  creates the CM, triggering immediate component re-reconciles
- Add unit tests for IsMetricsMTLSEnabled, AnnotateMetricsServingCert,
  RenameServicePort, UpdateServiceMonitorForMetricsMTLS

Fix tekton-results ServiceMonitor/Service port mismatch:
05-results-monitoring.yaml unconditionally hardcoded scheme: https
and https-* port names for both results ServiceMonitors, while the
underlying Services keep plain port names unless the flag is on.
This broke Prometheus scraping for tekton-results-api and
tekton-results-watcher by default, regardless of the flag. The
static manifest now stays plain HTTP, and tektonpipeline's
filterAndTransformMonitoring conditionally upgrades the
results-watcher ServiceMonitor to mTLS in lockstep with the
Service port rename, matching every other component.

tekton-results-api is excluded from the mTLS upgrade entirely: its
Prometheus metrics endpoint (cmd/api/main.go in tektoncd/results)
is a bare net/http server that never reads METRICS_PROMETHEUS_TLS_*
env vars, so it cannot serve mTLS. Its Service/ServiceMonitor stay
on plain HTTP regardless of this flag; this is a known upstream
limitation, not something this operator can fix.

Signed-off-by: Jawed khelil <jkhelil@redhat.com>
Assisted-by: Claude Sonnet 4.6 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Expose Prometheus metrics for tekton-pipelines-remote-resolvers
by adding a ServiceMonitor, matching the existing monitors for
the pipeline controller, webhook, triggers, and chains.

Signed-off-by: Deekshith Kumar Netha Bamandla N <dbamandl@redhat.com>
Assisted-by: Claude Sonnet 5 (via Cursor)
Co-authored-by: Cursor <cursoragent@cursor.com>
Add the missing UpdateServiceMonitorForMetricsMTLS entry for
openshift-pipelines-resolvers-monitor so it upgrades to
https-metrics in lockstep with the other five monitors when
metrics mTLS is enabled. Without this, the resolvers
ServiceMonitor would keep requesting the now-renamed
http-metrics port, breaking Prometheus scraping on
mTLS-enabled clusters.

Signed-off-by: Deekshith Kumar Netha Bamandla N <dbamandl@redhat.com>
Assisted-by: Claude Sonnet 5 (via Cursor)
enarha and others added 7 commits September 4, 2026 13:12
The results-retention-policy-agent NetworkPolicy allowed egress to
DNS and the database, but not to the Kubernetes API server. The
agent uses a ConfigMap watcher (informer) to load its schedule and
retention settings from tekton-results-config-results-retention-policy,
which requires talking to the API server, not just Postgres/DNS.

Signed-off-by: Emil Natan <ena@redhat.com>
Assisted-by: Claude <noreply@anthropic.com>
Regenerate Kubernetes and OpenShift operator bundles using
operator-sdk v1.37.0 (previously v1.21.0) on release-v0.81.x
branch.

Changes:
- Kubernetes and Openshift bundle updated to v0.81.1
- CRD schemas updated with controller-gen v0.18.0 annotations
- Removed deprecated version labels from CRD metadata
- Added new CRDs: ManualApprovalGate, OpenShiftPipelinesAsCode,
  SyncerService, TektonPruner, TektonScheduler, and others.

Signed-off-by: pratap0007 <shverma@redhat.com>
Bumps the github-actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action), [chainguard-dev/actions/kind-diag](https://github.com/chainguard-dev/actions) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action).


Updates `github/codeql-action/init` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@db488dd...cdf488f)

Updates `github/codeql-action/analyze` from 4.37.8 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@db488dd...cdf488f)

Updates `chainguard-dev/actions/kind-diag` from 1.6.33 to 1.6.34
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Commits](chainguard-dev/actions@0ffab11...a9d4aa7)

Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.3
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](zizmorcore/zizmor-action@3dc1ecc...70fb788)

---
updated-dependencies:
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: chainguard-dev/actions/kind-diag
  dependency-version: 1.6.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/tektoncd/pruner](https://github.com/tektoncd/pruner) from 0.4.1 to 0.4.3.
- [Release notes](https://github.com/tektoncd/pruner/releases)
- [Changelog](https://github.com/tektoncd/pruner/blob/main/releases.md)
- [Commits](tektoncd/pruner@v0.4.1...v0.4.3)

---
updated-dependencies:
- dependency-name: github.com/tektoncd/pruner
  dependency-version: 0.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the all group in /tekton with 3 updates: [chainguard/crane](https://github.com/chainguard-images/images), [tektoncd/plumbing/ko](https://github.com/tektoncd/plumbing) and [tektoncd/plumbing/koparse](https://github.com/tektoncd/plumbing).


Updates `chainguard/crane` from `993b6cd` to `8f40a0a`
- [Commits](https://github.com/chainguard-images/images/commits)

Updates `tektoncd/plumbing/ko` from `c84f47a` to `d5b1f55`
- [Commits](https://github.com/tektoncd/plumbing/commits)

Updates `tektoncd/plumbing/koparse` from `dc3e092` to `dc202b2`
- [Commits](https://github.com/tektoncd/plumbing/commits)

---
updated-dependencies:
- dependency-name: chainguard/crane
  dependency-version: latest-dev
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/ko
  dependency-version: d5b1f55955363c20e01c27f940692df77bf5520103012446af9900ac681fbc8c
  dependency-type: direct:production
  dependency-group: all
- dependency-name: tektoncd/plumbing/koparse
  dependency-version: dc202b2d066bb4453bf36a0d7b8e6242d52e9516313bb0026d5633b1efe44d29
  dependency-type: direct:production
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
@tekton-robot tekton-robot added the release-note-none Denotes a PR that doesnt merit a release note. label Sep 11, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor Author

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign anithapriyanatarajan after the PR has been reviewed.
You can assign the PR to them by writing /assign @anithapriyanatarajan in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Sep 11, 2026
@codecov

codecov Bot commented Sep 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 26.95%. Comparing base (f09782c) to head (cc7b487).

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #4068   +/-   ##
=======================================
  Coverage   26.95%   26.95%           
=======================================
  Files         467      467           
  Lines       25170    25170           
=======================================
  Hits         6785     6785           
  Misses      17648    17648           
  Partials      737      737           
Flag Coverage Δ
unit-tests 26.95% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@tekton-robot tekton-robot added size/S Denotes a PR that changes 10-29 lines, ignoring generated files. and removed size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Sep 11, 2026
@tekton-robot

Copy link
Copy Markdown
Contributor Author

@tekton-robot: PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@tekton-robot tekton-robot added needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Sep 11, 2026
- manual-approval-gate: v0.9.0 → v0.9.1
- pipeline: v1.15.1 → v1.16.0
- pipelines-as-code: v0.50.0 → v0.51.0
- chains: v0.29.3 → v0.29.4
- dashboard: v0.71.0 → v0.72.0

Signed-off-by: tekton-bot <tekton-bot@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown

Merging this branch will not change overall coverage

Impacted Packages Coverage Δ 🤖
github.com/tektoncd/operator/pkg/apis/operator/v1alpha1 38.38% (ø)
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektonchain 3.90% (ø)
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektonresult 46.85% (ø)
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektontrigger 0.00% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/common 61.22% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/openshiftpipelinesascode 38.69% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonchain 0.00% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonconfig 50.61% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonpipeline 5.75% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonpruner 21.74% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonresult 63.68% (ø)
github.com/tektoncd/operator/pkg/reconciler/openshift/tektontrigger 54.35% (ø)
github.com/tektoncd/operator/pkg/reconciler/shared/tektonconfig 0.00% (ø)
github.com/tektoncd/operator/pkg/reconciler/shared/tektonconfig/chain 67.12% (ø)

Coverage by file

Changed files (no unit tests)

Changed File Coverage Δ Total Covered Missed 🤖
github.com/tektoncd/operator/pkg/apis/operator/v1alpha1/openshift_platform.go 0.00% (ø) 0 0 0
github.com/tektoncd/operator/pkg/apis/operator/v1alpha1/zz_generated.deepcopy.go 15.96% (ø) 1529 244 1285
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektonchain/tektonchain.go 0.79% (ø) 381 3 378
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektonresult/networkpolicies.go 55.56% (ø) 18 10 8
github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektontrigger/reconcile.go 0.00% (ø) 85 0 85
github.com/tektoncd/operator/pkg/reconciler/openshift/common/metricsca.go 64.44% (ø) 45 29 16
github.com/tektoncd/operator/pkg/reconciler/openshift/common/metricstls.go 88.89% (ø) 90 80 10
github.com/tektoncd/operator/pkg/reconciler/openshift/common/transformer.go 65.16% (ø) 155 101 54
github.com/tektoncd/operator/pkg/reconciler/openshift/openshiftpipelinesascode/extension.go 17.46% (ø) 63 11 52
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonchain/extension.go 0.00% (ø) 13 0 13
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonconfig/extension.go 1.57% (ø) 127 2 125
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonpipeline/extension.go 5.81% (ø) 86 5 81
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonpruner/extension.go 22.73% (ø) 22 5 17
github.com/tektoncd/operator/pkg/reconciler/openshift/tektonresult/extension.go 64.02% (ø) 189 121 68
github.com/tektoncd/operator/pkg/reconciler/openshift/tektontrigger/extension.go 22.73% (ø) 22 5 17
github.com/tektoncd/operator/pkg/reconciler/shared/tektonconfig/chain/chain.go 67.12% (ø) 73 49 24
github.com/tektoncd/operator/pkg/reconciler/shared/tektonconfig/tektonconfig.go 0.00% (ø) 279 0 279

Please note that the "Total", "Covered", and "Missed" counts above refer to code statements instead of lines of code. The value in brackets refers to the test coverage of that file in the old version of the code.

Changed unit test files

  • github.com/tektoncd/operator/pkg/reconciler/kubernetes/tektonresult/networkpolicies_test.go
  • github.com/tektoncd/operator/pkg/reconciler/openshift/common/metricsca_test.go
  • github.com/tektoncd/operator/pkg/reconciler/openshift/common/metricstls_test.go

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. release-note-none Denotes a PR that doesnt merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants