v0.45.0

Pipelines as Code version v0.45.0

OpenShift Pipelines as Code v0.45.0 has been released 🥳

✨ Major changes and Features

• Implement GraphQL batch fetching for .tekton files: Introduced GraphQL-based batch fetching for .tekton directory files, significantly reducing GitHub API calls and improving performance for repositories with many pipeline files.
  • Link: #2423
  • Jira: SRVKP-11470

🐛 Bug Fixes

• Restore relative task path resolution for repository paths: Fixed a regression where relative task paths were not resolved correctly when using repository-based path references.
  • Link: #2554
  • Jira: SRVKP-11021
• Fix watcher secret creation log and OpenShift console link: Corrected watcher secret creation logging output and fixed the OpenShift console link generation.
  • Link: #2637
• Populate DefaultBranch for incoming webhooks: Fixed missing DefaultBranch field population when processing incoming webhook events, ensuring correct branch detection.
  • Link: #2647

📚 Documentation Updates

• Rearrange events in GitHub App docs: Reorganized the events section in GitHub App documentation for improved readability and discoverability.
  • Link: #2648

⚙️ Chores

• Move secret creation to reconciler: Refactored secret creation logic to the reconciler for improved code organization and separation of concerns.
  • Link: #2510
• Cache getPullRequest result in GitHub provider: Added internal caching of getPullRequest results in the GitHub provider to reduce redundant API calls.
  • Link: #2621
• Replace real time.Sleep with clockwork in unit tests: Substituted real time.Sleep calls with a fake clockwork clock in unit tests, reducing overall test execution time by 10–13 seconds.
  • Link: #2627
• Use ok-to-test action for E2E permission checks: Updated E2E CI pipeline to use the ok-to-test GitHub Action for safer permission handling.
  • Link: #2628
• Fix test execution and improve assertions: Fixed test execution issues and strengthened test assertions for better reliability.
  • Link: #2631
• Add zizmor and fix GitHub Actions security findings: Integrated the zizmor security scanner and resolved identified GitHub Actions security issues.
  • Link: #2632
• Update ok-to-test action commit SHA: Pinned the ok-to-test action to a specific commit SHA for improved CI security.
  • Link: #2634
• Bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5: Updated go-jose/v3 dependency to the latest patch release.
  • Link: #2638
• Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4: Updated go-jose/v4 dependency to the latest patch release.
  • Link: #2639
• Bump jaxxstorm/action-install-gh-release from 2.1.0 to 3.0.0: Updated jaxxstorm/action-install-gh-release GitHub Action to major version 3.
  • Link: #2640
• Bump actions/setup-go from 6.3.0 to 6.4.0: Updated actions/setup-go GitHub Action to the latest version.
  • Link: #2641
• Fix PR close condition in e2e tests: Corrected the PR close condition check in e2e tests to improve test reliability.
  • Link: #2645
• Allow actions token write permission on PR: Granted the required write permission for the actions token in PR CI workflows.
  • Link: #2650
• Fix GitHub token permissions in CI: Fixed GitHub token permission configuration in CI workflows.
  • Link: #2651

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift

kubectl apply -f https://github.com/tektoncd/pipelines-as-code/releases/download/v0.45.0/release.yaml

Kubernetes

kubectl apply -f https://github.com/tektoncd/pipelines-as-code/releases/download/v0.45.0/release.k8s.yaml

Documentation

The documentation for this release is available here :

https://docs.pipelinesascode.com/v0.45.0

What's Changed

• chore: replace real time.Sleep with clockwork in unit tests by @chmouel in #2627
• refactor: move secret creation to reconciler by @zakisk in #2510
• fix(resolve): restore relative task path resolution for repository paths by @theakshaypant in #2554
• feat: Implement GraphQL batch fetching for .tekton files by @chmouel in #2423
• perf(github): cache getPullRequest result in Provider by @theakshaypant in #2621
• test: fix test execution and improve assertions by @chmouel in #2631
• ci(e2e): use ok-to-test action for permission checks by @zakisk in #2628
• ci: update ok-to-test action commit SHA by @zakisk in #2634
• fix(gh): fix re-run button on Pull Requests by @chmouel in #2597
• fix: watcher secret creation log and osc link by @chmouel in #2637
• chore(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #2639
• chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 by @dependabot[bot] in #2638
• chore(deps): bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #2641
• chore(deps): bump jaxxstorm/action-install-gh-release from 2.1.0 to 3.0.0 by @dependabot[bot] in #2640
• fix: PR close condition in e2e tests by @zakisk in #2645
• docs: rearrange events in gh app docs by @zakisk in #2648
• ci: add zizmor and fix GHA security findings by @theakshaypant in #2632
• fix: populate DefaultBranch for incoming webhooks by @vdemeester in #2647
• fix(ci): allow actions token write permission on PR by @zakisk in #2650
• fix(ci): Fix permission for GitHub token by @zakisk in #2651

Full Changelog: v0.44.0...v0.45.0