Skip to content

chore(build): bump apiVersion v1beta1 → v1 for 8 build/automation tasks - #1401

Merged
tekton-robot merged 1 commit into
tektoncd:mainfrom
gferreir:chore/build-automation-api-v1-bump
Sep 25, 2026
Merged

tekton-robot merged 1 commit into
tektoncd:mainfrom
gferreir:chore/build-automation-api-v1-bump

Conversation

@gferreir

Copy link
Copy Markdown
Contributor

Changes

API version bump for 8 build and automation tasks, continuing the v1beta1 → v1 migration tracked in #1381.

Tasks updated

Task Old → New Changes
generate-build-id 0.1 → 0.2 apiVersion v1, minVersion 0.50.0
gradle 0.4 → 0.5 apiVersion v1, minVersion 0.50.0
npm 0.1 → 0.2 apiVersion v1, minVersion 0.50.0
bentoml 0.1 → 0.2 apiVersion v1, minVersion 0.50.0
jenkins 0.1 → 0.2 apiVersion v1, minVersion 0.50.0, image pinned
trigger-jenkins-job 0.1 → 0.2 apiVersion v1, minVersion 0.50.0, image pinned
goreleaser 0.2 → 0.3 apiVersion v1, minVersion 0.50.0
tekton-operator-install 0.1 → 0.2 apiVersion v1, minVersion 0.50.0

Each new version was created using copy-then-modify per CONTRIBUTING.md.

Image pinning

Two tasks in this batch hardcode mutable UBI8 images. Both were pinned with skopeo inspect:

  • jenkins: registry.access.redhat.com/ubi8:8.2 → pinned with @sha256:d748c21a55796827da82c61f162b505c59451cba24f1874e5185f21275b6bddc
  • trigger-jenkins-job: registry.access.redhat.com/ubi8/ubi:8.2 → pinned with @sha256:d748c21a55796827da82c61f162b505c59451cba24f1874e5185f21275b6bddc
  • generate-build-id, bentoml, tekton-operator-install: images already pinned by sha256 digest
  • gradle, npm: image provided via task params
  • goreleaser: image provided via task params (both steps)

Additional changes

  • Tests: generate-build-id, gradle, npm, bentoml, jenkins, and trigger-jenkins-job test manifests bumped to v1
  • Samples: generate-build-id (3 samples), jenkins, trigger-jenkins-job, and goreleaser samples bumped to v1
  • tekton-operator-install: internal operator.tekton.dev/v1alpha1 CRD reference left as-is (Tekton Operator API, not Pipeline API)

Validation

  • Zero remaining v1beta1 references across all 8 new version directories (36 files)
  • File count matches between old and new versions for every task
  • Semantic diff confirms only expected fields changed in task YAMLs (plus the two UBI8 image pins)
  • Original versions untouched
  • Single commit, DCO signed

Note on pre-existing conditions

jenkins and trigger-jenkins-job interpolate $(params.*) directly in script: blocks.
These patterns are inherited from previous versions and not introduced by this PR.
Script injection hardening will be addressed in a separate batch as part of #1381.

Ref: #1381

/kind cleanup

Submitter Checklist

Bumps apiVersion from tekton.dev/v1beta1 to tekton.dev/v1 for:
generate-build-id (0.1 → 0.2), gradle (0.4 → 0.5),
npm (0.1 → 0.2), bentoml (0.1 → 0.2),
jenkins (0.1 → 0.2), trigger-jenkins-job (0.1 → 0.2),
goreleaser (0.2 → 0.3), tekton-operator-install (0.1 → 0.2).

Each new version was created using copy-then-modify per CONTRIBUTING.md.
jenkins: pinned ubi8:8.2 image with sha256 digest.
trigger-jenkins-job: pinned ubi8/ubi:8.2 image with sha256 digest.
tekton-operator-install: operator.tekton.dev/v1alpha1 CRD reference
preserved (not a Pipeline API resource).

Ref: tektoncd#1381

Signed-off-by: gferreir <guilherme.nmf@gmail.com>
@tekton-robot tekton-robot added the kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. label Sep 23, 2026
@tekton-robot tekton-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Sep 23, 2026
@gferreir

Copy link
Copy Markdown
Contributor Author

/assign @vdemeester

@vdemeester vdemeester left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Sep 25, 2026
@tekton-robot

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: vdemeester

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Sep 25, 2026
@tekton-robot
tekton-robot merged commit 2495e62 into tektoncd:main Sep 25, 2026
9 checks passed
@gferreir
gferreir deleted the chore/build-automation-api-v1-bump branch September 25, 2026 13:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. kind/cleanup Categorizes issue or PR as related to cleaning up code, process, or technical debt. lgtm Indicates that a PR is ready to be merged. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants