Repository navigation
Update module github.com/tektoncd/pipeline to v1.12.3 (release-v0.7) - #3461
renovate[bot] wants to merge 1 commit into
Conversation
ℹ️ Artifact update noticeFile name: acceptance/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
File name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
|
|
🤖 Finished Review · ✅ Success · Started 2:24 AM UTC · Completed 2:29 AM UTC |
|
Looks good to me Previous run<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJhY3Rpb24iOiJhcHByb3ZlIiwiZmluZGluZ3MiOltdfQ== --> Looks good to me Previous run (2)<!-- fullsend:review-findings-v2:eyJ2ZXJzaW9uIjoyLCJhY3Rpb24iOiJhcHByb3ZlIiwiZmluZGluZ3MiOltdfQ== --> Looks good to me Previous run (3)Looks good to me Previous run (4)Looks good to me Previous run (5)Looks good to me Previous run (6)Looks good to me Previous run (7)ReviewRenovate patch bump for FindingsInfo
Previous run (8)ReviewFindingsInfo
Previous run (9)Looks good to me Previous run (10)Looks good to me Previous run (11)Looks good to me Previous run (12)Looks good to me Previous run (13)Looks good to me Labels: Dependency version bump in Go module files |
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
added
ready-for-merge
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more. 🚀 New features to boost your workflow:
|
398b81a to
ce8c9d2
Compare
|
🤖 Finished Review · ✅ Success · Started 3:23 PM UTC · Completed 3:29 PM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
ce8c9d2 to
efa5626
Compare
|
🤖 Finished Review · ✅ Success · Started 5:05 PM UTC · Completed 5:10 PM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
efa5626 to
4ad15d0
Compare
|
🤖 Finished Review · ✅ Success · Started 4:33 PM UTC · Completed 4:38 PM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
4ad15d0 to
3bc1c02
Compare
|
🤖 Finished Review · ✅ Success · Started 6:39 PM UTC · Completed 6:45 PM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fb437fa to
8b60bf8
Compare
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the
 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Superseded by updated review
fullsend-ai-review
Bot
added
the
ready-for-merge
8108e8e to
bdbeb30
Compare
renovate
Bot
changed the title
|
🤖 Finished Review · ✅ Success · Started 6:25 PM UTC · Completed 6:37 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.79 |
fullsend-ai-review
Bot
removed
the
ready-for-merge
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Superseded by updated review
fullsend-ai-review
Bot
added
the
ready-for-merge
bdbeb30 to
4f1c0b7
Compare
|
🤖 Finished Review · ✅ Success · Started 9:11 PM UTC · Completed 9:20 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.95 |
fullsend-ai-review
Bot
removed
the
ready-for-merge
Superseded by updated review
fullsend-ai-review
Bot
added
the
ready-for-merge
Pull request was closed
|
🤖 Finished Retro · ✅ Success · Started 12:01 PM UTC · Completed 12:12 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.76 |
|
As I said to my ex "See you never". |
Retro: PR #3461 — Renovate dependency bump with 14 redundant review runsPR #3461 is a Renovate bot dependency bump ( What happenedThe review agent ran 14 times between Aug 5 and Oct 28, each time approving with zero findings. Every run took 5–12 minutes and cost $1.55–$4.10, totaling an estimated ~$20 in review agent compute. Key waste patterns:
Systemic patternThis is not a one-off. Other long-lived Renovate PRs in this repo show the same pattern:
Short-lived PRs that merge quickly (e.g., #3651, merged in 2.5 hrs) get only 1–3 reviews. The waste scales with how long a Renovate PR stays open — and release-branch PRs tend to stay open longer. This retro run itself is evidence of the waste: running a full retro analysis on a trivial dependency bump PR with no meaningful code changes adds cost without value (covered by fullsend-ai/fullsend#4006 and related issues). No new proposals — existing issues cover this comprehensivelyThis is a well-documented systemic problem. The searches found 15+ open issues across
This PR provides additional evidence for those issues: 14 reviews and ~$20 in cost on a single trivial dependency bump, with the same commit reviewed up to 5 times. The |
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update ( If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
|
🤖 Finished Retro · ✅ Success · Started 12:14 PM UTC · Completed 12:21 PM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.92 |
Retro: PR #3461 — Duplicate retro on already-analyzed Renovate dependency bumpPR #3461 is a Renovate bot dependency bump ( A previous retro (workflow run 40869661102) already ran on this PR and comprehensively identified all waste patterns: same-commit re-reviews, rebase-triggered re-reviews, and the absence of a circuit breaker. It found 15+ existing open issues across This second retro (run 40871279120) was dispatched ~12 minutes after the first completed — itself an instance of the duplicate retro dispatch pattern. New evidence for existing issues
No new proposalsAll improvement opportunities are covered by existing open issues. The previous retro's analysis was thorough and correct. Filing additional proposals would create duplicates. |
This PR contains the following updates:
v1.12.0→v1.12.3Release Notes
tektoncd/pipeline (github.com/tektoncd/pipeline)
v1.12.3: Tekton Pipeline release v1.12.3 "Exotic Shorthair Elektrobots LTS"Compare Source
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677ab50b7c76294f1e52835451640e10a8b08939504c87748d0d8ae2c251c3784114Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
Misc
Update Go security dependencies.
Docs
Thanks
Thanks to these contributors who contributed to v1.12.3!
Extra shout-out for awesome release notes:
v1.12.2: Tekton Pipeline release v1.12.2 "Exotic Shorthair Elektrobots LTS"Compare Source
-Docs @ v1.12.2
-Examples @ v1.12.2
Installation one-liner
Attestation
The Rekor UUID for this release is
cb0a4d44223cf8dd164d8eec84c25d204f7a37a023c2d28f1f8dcde79ca3c187Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
Misc
Docs
Thanks
Thanks to these contributors who contributed to v1.12.2!
Extra shout-out for awesome release notes:
v1.12.1: Tekton Pipeline release v1.12.1 "Exotic Shorthair Elektrobots LTS"Compare Source
-Docs @ v1.12.1
-Examples @ v1.12.1
Installation one-liner
Attestation
The Rekor UUID for this release is
108e9186e8c5677a9cfc575e256441da4223e4767ebb840a62e4b5ad18ed6219842a81686a4a8586Obtain the attestation:
Verify that all container images in the attestation are in the release file:
Changes
Features
Fixes
efore this change, ResolutionRequests could only resolve Pipelines, Tasks, and StepActions. After this change, ResolutionRequests can resolve PipelineRuns, Pipelines, TaskRuns, Tasks, Runs, CustomRuns, and StepActions.
ix: TaskRun no longer gets stuck in Running when an init container (e.g. prepare) is OOMKilled while enableKubernetesSidecar is enabled. The TaskRun is now correctly marked as Failed immediately.
ix entrypoint command lookup when controller and worker nodes run on different CPU architectures (e.g., ARM controller with AMD64 workloads). The controller's CPU variant was leaking into TEKTON_PLATFORM_COMMANDS keys via platforms.NewPlatform(), causing "could not find command for platform" errors on worker nodes of a different architecture.
ffinity assistant StatefulSet no longer fails when workspace volumeClaimTemplate names exceed 63 characters. Long volume names are now automatically truncated with a hash suffix to stay within the Kubernetes limit.
Previously, TaskRuns'
tekton.dev/pipelinelabel for anonymous Pipelines would use their PipelineRun's name in theirtekton.dev/pipelinelabel andpipelinemetrics tag. After this change, TaskRun and PipelineRun which are created from anonymous Pipelines now reference a sanitizedmetadata.generateName, when present, for the labeltekton.dev/pipeline. Similarly, these TaskRruns and PipelineRuns will populate their respective metrics'pipelinetag with the sanitized generateName instead of usinganonymous.ix gen-crd-api-reference-docs go.mod require to use a fetchable upstream version, fixing module resolution failures for downstream consumers.
Fixes a bug which lets Tekton Resolvers resolve non-tekton objects and arbitrary data. After this change, resolving a non-tekton object causes the ResolutionRequest to fail.
Action Required: Tekton Resolvers are now only permitted to resolve StepActions, Tasks, and Pipelines. Custom resolvers or ResolutionRequest which use the Resolver API for other object types will no longer function.
Misc
7ec9277toa4477c3in /tekton in the all group (#9993)Docs
Thanks
Thanks to these contributors who contributed to v1.12.1!
Extra shout-out for awesome release notes:
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.