Tekton Dashboard release v0.30.0 LTS

This Dashboard LTS release supports Pipelines 0.38.x - 0.41.x and Triggers 0.21.x, bringing a number of features, enhancements, and bug fixes.

Attestation

The Rekor UUID for this release is 24296fb24b8ad77aaef70e10255e2ee22f52b1c7157b09eb4d2883540ff6f753f23357da0a95617f

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.30.0/tekton-dashboard-release.yaml
REKOR_UUID=24296fb24b8ad77aaef70e10255e2ee22f52b1c7157b09eb4d2883540ff6f753f23357da0a95617f

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.30.0@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Note

Two new release manifests have been added to facilitate some changes from v0.32.0 forward including switching to read-only as the default install mode.

release.yaml is the same as tekton-dashboard-release-readonly.yaml
release-full.yaml is the same as tekton-dashboard-release.yaml

The old files will be removed in a future release in favour of the new ones.

Features

• ✨ Move global namespaces filter dropdown to the application header #2468
  • Move the namespaces dropdown to the application header so that it appears on all pages, making it more clear that this affects the entire application, not just the current page
  • Some navigation changes have been introduced as a result to align with expected behaviour
• ✨ Remove managedFields from display of Pod resource and events #2554
  • Filter out managedFields when displaying the Pod resource and events on the PipelineRun and TaskRun details pages so users can focus on the more useful content provided in other fields. This filtering is already done on the ResourceDetails page when in the YAML view for a single resource so this updates PipelineRun and TaskRun to be consistent with that behaviour

Fixes

• 🐛 Update container security context to satisfy PSA restricted requirements #2553
  • Fix for the Dashboard pod failing to be scheduled on Kubernetes 1.22+ with Pod Security Admission level restricted enforced on the tekton-pipelines namespace

Misc

• 🔨 Capture video of failed E2E tests #2470
• 🔨 Remove step status tab #2472
  • All of the content from the step status tab is already included in the TaskRun status tab
• 🔨 Ensure E2E tests set default language to English #2474
• 🔨 Update prepare-kind-cluster script to pin Kubernetes 1.24 until both Triggers and Pipelines support 1.25+ #2473
• 🔨 Update error pages for PipelineRun, TaskRun, and Run resources #2475
• 🔨 Remove unused styles #2471
• 🔨 Bump carbon-components-react from 7.59.1 to 7.59.2 #2476
• 🔨 Provide default value for ARTIFACTS variable if missing #2482
• 🔨 Bump cypress from 10.7.0 to 10.8.0 #2477
• 🔨 Bump @babel/preset-env from 7.19.0 to 7.19.1 #2478
• 🔨 Bump @babel/core from 7.19.0 to 7.19.1 #2479
• 🔨 Bump @babel/plugin-transform-runtime from 7.18.10 to 7.19.1 #2480
• 🔨 Bump core-js from 3.25.1 to 3.25.2 #2481
• 🔨 Add display name to namespace context for improved debuggability #2483
• 🔨 Update dependencies #2484
• 🔨 Update to react-intl 6 #2485
• 🔨 Resolve proptypes warnings in stories #2486
• 🔨 Update tests to use latest Pipelines release #2487
• 🔨 Bump eslint from 8.23.1 to 8.24.0 #2490
• 🔨 Bump sass from 1.54.9 to 1.55.0 #2491
• 🔨 Remove dependency on classnames package #2489
• 🔨 Update kind script to install Pipelines remote resolution support #2493
• 🔨 Pin distroless base image to debian11 version #2494
• 🔨 Update tests to use latest Pipelines release #2496
• 🔨 Bump react-intl from 6.1.1 to 6.1.2 #2500
• 🔨 Bump react-router-dom from 5.3.3 to 5.3.4 #2501
• 🔨 Bump cypress from 10.8.0 to 10.9.0 #2502
• 🔨 Bump @babel/core from 7.19.1 to 7.19.3 #2503
• 🔨 Bump carbon-components-react from 7.59.2 to 7.59.3 #2504
• 🔨 Bump jest-environment-jsdom from 29.0.3 to 29.1.2 #2505
• 🔨 Simplify copyToClipboard util for modern browsers #2498
• 🔨 Switch functional components to useIntl hook #2499
• 🔨 Add links on new issue template picker #2497
• 🔨 Escape origin header before logging #2506
• 🔨 Remove unused argument #2507
• 🔨 Enable CodeQL analysis #2508
• 🔨 Enable golangci-lint in build tests #2509
• 🔨 Add OpenSSF best practices badge to the README #2510
• 🔨 Update dependencies #2511
• 🔨 Update k8s dependencies #2512
• 🔨 Replace fetch-mock with msw in tests #2513
• 🔨 Update to React Query 4 #2514
• 🔨 Add missing unit test #2515
• 🔨 Bump tlds from 1.231.0 to 1.233.0 #2517
• 🔨 Bump core-js from 3.25.4 to 3.25.5 #2518
• 🔨 Bump eslint from 8.24.0 to 8.25.0 #2519
• 🔨 Bump sass-loader from 13.0.2 to 13.1.0 #2520
• 🔨 Bump carbon-components from 10.58.1 to 10.58.3 #2521
• 🔨 Bump eslint-plugin-react from 7.31.8 to 7.31.9 #2523
• 🔨 Bump @babel/runtime from 7.19.0 to 7.19.4 #2525
• 🔨 Bump @tanstack/react-query-devtools from 4.10.1 to 4.11.0 #2524
• 🔨 Bump @babel/preset-env from 7.19.3 to 7.19.4 #2522
• 🔨 Bump react-intl from 6.1.2 to 6.2.0 #2528
• 🔨 Bump jest-environment-jsdom from 29.1.2 to 29.2.0 #2529
• 🔨 Bump @tanstack/react-query-devtools from 4.11.0 to 4.12.0 #2532
• 🔨 Bump @xmldom/xmldom and @mswjs/interceptors #2535
• 🔨 Bump jest from 29.1.2 to 29.2.0 #2530
• 🔨 Bump eslint-plugin-react from 7.31.9 to 7.31.10 #2531
• 🔨 Bump babel-plugin-formatjs from 10.3.29 to 10.3.30 #2538
• 🔨 Bump @svgr/webpack from 6.4.0 to 6.5.0 #2539
• 🔨 Bump carbon-components-react from 7.59.3 to 7.59.4 #2537
• 🔨 Bump k8s.io/client-go from 0.25.2 to 0.25.3 #2533
• 🔨 Skip recording E2E video if ARTIFACTS variable not set #2536
• 🔨 Update E2E image to latest Chrome release #2540
• 🔨 Add support for new environment variable to skip recording videos in E2E tests #2541
• 🔨 Bump react-intl from 6.2.0 to 6.2.1 #2543
• 🔨 Bump jest from 29.2.0 to 29.2.1 #2545
• 🔨 Bump @babel/core from 7.19.3 to 7.19.6 #2546
• 🔨 Bump eslint from 8.25.0 to 8.26.0 #2547
• 🔨 Bump @tanstack/react-query-devtools from 4.12.0 to 4.13.0 #2544
• 🔨 Update core-js to latest version #2548
• 🔨 Start adopting React Router v6 API using compatibility layer #2542
• 🔨 Bump @storybook/theming from 6.5.12 to 6.5.13 #2555
• 🔨 Bump jest from 29.2.1 to 29.2.2 #2559
• 🔨 Bump @storyb...

Tekton Dashboard release v0.29.2

This Dashboard release supports Pipelines 0.35.x - 0.39.x and Triggers 0.15.x - 0.21.x.

Attestation

The Rekor UUID for this release is 362f8ecba72f4326d08ee58cc59e34150bcb94d2c5dacecd3c8a3759284244e51801ca89cf0913a9

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.29.2/tekton-dashboard-release.yaml
REKOR_UUID=362f8ecba72f4326d08ee58cc59e34150bcb94d2c5dacecd3c8a3759284244e51801ca89cf0913a9

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.29.2@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Fixes

• 🐛 Fix for blank page in Safari #2466

Misc

• 🔨 Update Storybook to latest release #2464

Docs

• 📖 Add links to latest release in readme #2463

Thanks

Thanks to these contributors who contributed to v0.29.2!

• ❤️ @AlanGreene

Tekton Dashboard release v0.29.1

This Dashboard release supports Pipelines 0.35.x - 0.39.x and Triggers 0.15.x - 0.21.x.

Attestation

The Rekor UUID for this release is 362f8ecba72f4326a5e38aa40d3a9f9fca73aad69a9dff0245096d835a2cc31400ebfb882473a8b0

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.29.1/tekton-dashboard-release.yaml
REKOR_UUID=362f8ecba72f4326a5e38aa40d3a9f9fca73aad69a9dff0245096d835a2cc31400ebfb882473a8b0

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.29.1@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Features

• ✨ Add support for displaying object params (alpha) on the Run details page #2462

Thanks

Thanks to these contributors who contributed to v0.29.1!

• ❤️ @AlanGreene

Tekton Dashboard release v0.29.0

This Dashboard release supports Pipelines 0.35.x - 0.39.x and Triggers 0.15.x - 0.21.x, bringing a number of features, enhancements, and bug fixes.

Attestation

The Rekor UUID for this release is 362f8ecba72f43268483e83b112abaaad5342314d0cd3f419bad1aed8b04a44c6b7c417d6b53630a

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.29.0/tekton-dashboard-release.yaml
REKOR_UUID=362f8ecba72f43268483e83b112abaaad5342314d0cd3f419bad1aed8b04a44c6b7c417d6b53630a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.29.0@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Features

• ✨ Add list view and details page for Run resources (Custom Tasks) #2414 #2416 #2419
  • These are not yet displayed on the PipelineRun details page, that functionality will come in a future release
  • Includes the ability to rerun and cancel Runs #2418 #2422
• ✨ Add additional actions on the PipelineRun and TaskRun details pages #2420
  • Users can now rerun, stop, and delete a run directly from the details page

Fixes

• 🐛 Fix URL handling on first load of PipelineRun or TaskRun #2455

Misc

• 🔨 Update to Storybook 6.5 and enable webpack 5 performance improvements #2402
• 🔨 Update browserslist db #2403
• 🔨 Resolve all current production npm audit warnings #2404
• 🔨 Update terser to resolve npm audit warnings #2406
• 🔨 Update tests and docs to Pipelines v0.38.0 #2407
• 🔨 Update tests to latest Pipelines release #2408
• 🔨 Update tests to Trigger v0.20.2 #2409
• 🔨 Remove status and finalizers subresources from roles #2413
• 🔨 Remove managedFields from YAML display #2415
• 🔨 Update tests and docs to latest Pipelines release #2417
• 🔨 Update Storybook to latest release #2423
• 🔨 Prepare for running e2e tests in kind #2425
• 🔨 Add wrapper script to call integration tests from prow #2426
• 🔨 Make prow test script executable #2431
• 🔨 Add cypress e2e config and initial test #2433
• 🔨 Add Dockerfile and docs for e2e tests #2436
• 🔨 Add e2e tests to verify we have permission to read Tekton resources #2438
• 🔨 Replace Postman REST tests with Cypress browser e2e tests #2439
• 🔨 Bump go.uber.org/zap from 1.17.0 to 1.23.0 #2440
• 🔨 Update tests to latest Triggers release #2441
• 🔨 Update babel and eslint packages #2442
• 🔨 Update dependencies #2443 #2444 #2445 #2446
• 🔨 Update jest to latest version #2447
• 🔨 Update e2e tests to follow Cypress recommendations #2439 #2448
• 🔨 Update node-fetch to latest version #2450
• 🔨 Add dependabot config #2449
• 🔨 Update plumbing dep #2451
• 🔨 More preparation for React Router v6 update #2453
• 🔨 Bump eslint-plugin-react from 7.31.7 to 7.31.8 #2456
• 🔨 Bump jest-environment-jsdom from 29.0.2 to 29.0.3 #2457
• 🔨 Bump jest from 29.0.2 to 29.0.3 #2458
• 🔨 Add e2e test to validate translations are loaded #2454

Docs

• 📖 Add links to latest release in readme #2401
• 📖 Update tests and docs to Pipelines v0.38.0 #2407
• 📖 Update tests and docs to latest Pipelines release #2417
• 📖 Move legacy releases to separate page #2430
• 📖 Pin oauth2-proxy version in walk-through #2435
• 📖 Add Dockerfile and docs for e2e tests #2436
• 📖 Update tests to latest Triggers release #2441

Thanks

Thanks to these contributors who contributed to v0.29.0!

• ❤️ @AlanGreene
• ❤️ @dependabot[bot]

Tekton Dashboard release v0.28.0

This Dashboard release supports Pipelines 0.35.x - 0.37.x and Triggers 0.15.x - 0.20.x, bringing a number of features, enhancements, and bug fixes.

Attestation

The Rekor UUID for this release is 362f8ecba72f43260d889f3dc89b08bda122b9272886b0aef676fa92af4603c6d4862f3a0e7df62e

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.28.0/tekton-dashboard-release.yaml
REKOR_UUID=362f8ecba72f43260d889f3dc89b08bda122b9272886b0aef676fa92af4603c6d4862f3a0e7df62e

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.28.0@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Features

• ✨ Update PipelineRuns and PipelineRun components to support minimal status (TEP-0100) #2396
• ✨ Switch to new status value for cancelling a PipelineRun (TEP-0058) #2397
  • 🚨 Use the new Cancelled status instead of PipelineRunCancelled, this is supported by default since Pipelines v0.35 which is now the minimum supported version for this Dashboard release
• ✨ Add graceful cancel options for PipelineRuns (TEP-0058) #2398
  • Add support for the new CancelledRunFinally and StoppedRunFinally options when cancelling a PipelineRun

Fixes

• 🐛 Fix console warning about invalid prop navigate on anchor tag #2388

Misc

• 🔨 Update to the latest Carbon 10 release #2389
• 🔨 Remove the Condition resource pages #2393
  • Conditions have been deprecated since Pipelines v0.16 and were removed in Pipelines v0.37
• 🔨 Update CSP header to allow Plex font files to load from Akamai CDN #2394
• 🔨 Update tests to latest Pipelines release #2392
• 🔨 Add type to results of report task in release pipeline #2395
• 🔨 Cleanup e2e test scripts #2400

Docs

• 📖 Add links to latest release in readme #2386
• 📖 Update release cheat sheet to include website sync update #2387

Thanks

Thanks to these contributors who contributed to v0.28.0!

• ❤️ @AlanGreene

Tekton Dashboard release v0.27.0

This Dashboard release supports Pipelines 0.25.x - 0.36.x and Triggers 0.15.x - 0.20.x, bringing a number of features, enhancements, and bug fixes.

Features

• ✨ Update design of PipelineRuns and TaskRuns pages #2356
  Now includes error details and trigger information if present, as well as providing more space for long resource names
• ✨ Add support for specifying custom name on Create PipelineRun and Create TaskRun pages #2383

Fixes

• 🐛 Handle invalid params in Task spec #2363
• 🐛 Fix flash of error when loading PipelineRun details page #2375

Misc

• 🔨 Add support for injecting a custom icon into the PipelineRun header #2359
• 🔨 Remove references to the dist folder #2360
• 🔨 Update Triggers to latest release #2362
• 🔨 Update installer script to detect Apple M1 #2361
• 🔨 Update Pipelines to latest release #2364
• 🔨 Support different button kinds in Table toolbarButtons #2365
• 🔨 Add support for reporting custom duration on PipelineRuns #2367
• 🔨 Allow custom status detail on the PipelineRuns page #2369
• 🔨 Support custom tooltips for PipelineRun display name #2371
• 🔨 Disable compression in webpack-dev-server to enable log streaming #2376
• 🔨 Cleanup webpack-dev-server proxy config #2377
• 🔨 Add ability to inject custom icon after the PipelineRun name #2379
• 🔨 Pass PipelineRun metadata when getting icon #2381
• 🔨 Update tests to use latest Pipelines release #2384

Docs

• 📖 Add links to latest release in readme #2355
• 📖 Update doc links on About page #2357
• 📖 Update contributing doc to reflect the Dashboard process #2368
• 📖 Merge the readme from the project root to the docs folder #2368
• 📖 Update links to work both on GitHub and on the website #2368
• 📖 Update walkthroughs to pin Kubernetes version #2385

Thanks

Thanks to these contributors who contributed to v0.27.0!

• ❤️ @AlanGreene
• ❤️ @briangleeson

Tekton Dashboard release v0.26.0

This Dashboard release supports Pipelines 0.25.x - 0.35.x and Triggers 0.15.x - 0.19.x, bringing a number of features, enhancements, and bug fixes.

Attestation

The Rekor UUID for this release is 5938844a704d27b9fc05f20b25a6983149aea422782dca327dba7ad86d71262b

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.26.0/tekton-dashboard-release.yaml
REKOR_UUID=5938844a704d27b9fc05f20b25a6983149aea422782dca327dba7ad86d71262b

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.26.0@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Features

• ✨ Add client-side pagination #2327

Fixes

• 🐛 Fix positioning of buttons on Create PipelineResource page #2344
• 🐛 Prevent hidden batch actions from being read by screenreader #2349

Misc

• 🔨 Update go.mod to reference correct go version #2339
• 🔨 Update Storybook to latest release #2348
• 🔨 Avoid displaying stack trace for 404 with missing statusText #2347
• 🔨 Add pictograms to doc links on About page #2351
• 🔨 Add support for dynamic run action overflow menu #2352
• 🔨 Update kustomize to v4 #2353

Docs

• 📖 Add links to latest releases in readme #2336
• 📖 Update docs for npm package release process to include note about Windows config #2337
• 📖 Add getting started guide / tutorial #2342
• 📖 Add note to docs for manually running nightly release #2346
• 📖 Update kustomize to v4 #2353

Thanks

Thanks to these contributors who contributed to v0.26.0!

• ❤️ @AlanGreene
• ❤️ @LyndseyBu
• ❤️ @briangleeson

Tekton Dashboard release v0.25.0

This Dashboard release supports Pipelines 0.25.x - 0.34.x and Triggers 0.15.x - 0.19.x, bringing a number of features, enhancements, and bug fixes.

🚨 This release contains a security fix 🚨

Attestation

The Rekor UUID for this release is bc79e028b7148f6000c77d0bb9dd279f2f3c6fac53b58674a25a6edd17965b86

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.25.0/tekton-dashboard-release.yaml
REKOR_UUID=bc79e028b7148f6000c77d0bb9dd279f2f3c6fac53b58674a25a6edd17965b86

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.25.0@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Features

• ✨ Add support for displaying new Cancelled status introduced in TEP-0058 Graceful Termination #2316
• ✨ Add support for rendering PipelineRun header before a complete resource is available #2325

Fixes

• 🐛 Fix error in loading state when TaskRun hasn't fully started yet #2311
• 🐛 🚨 Validate Origin header on websocket connection upgrade to prevent cross-origin websocket hijacking #2333

Misc

• 🔨 Drop lerna and switch to npm workspaces #2304
• 🔨 Enable webpack cache for production builds #2305
• 🔨 Update deps to address npm audit warnings #2308
• 🔨 Fix LGTM issues #2310
• 🔨 Update size props for consitency and to prepare for Carbon 11 #2311
• 🔨 Remove useless conditionals #2311
• 🔨 Avoid use of concatenation when producing CSS classnames #2312
• 🔨 Update tests to latest releases #2314
• 🔨 Update prismjs to resolve warning #2315
• 🔨 Update to Carbon 10.52 #2317
• 🔨 Extract graph components and utils to separate package #2319
• 🔨 Fix component imports within components package #2322
• 🔨 Update tests to latest releases #2328
• 🔨 Remove clean-webpack-plugin #2329
• 🔨 Run npm audit fix #2330
• 🔨 Update tests to latest Pipelines release #2331

Docs

• 📖 Add v0.24.1 links to the readme #2301
• 📖 Document removal of default RBAC when using a reverse proxy for auth #2309
• 📖 Update oauth2-proxy walkthrough to use community charts #2332
• 📖 Update release docs to include process for patch releases #2334

Thanks

Thanks to these contributors who contributed to v0.25.0!

• ❤️ @AlanGreene
• ❤️ @mlbiam

Tekton Dashboard release v0.24.2

🚨 This release contains a security fix 🚨

Attestation

The Rekor UUID for this release is ad80c25971f6cb3a755f250354ce8e2f68ff24c978b4578428f64cebcbfa260a

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.24.2/tekton-dashboard-release.yaml
REKOR_UUID=ad80c25971f6cb3a755f250354ce8e2f68ff24c978b4578428f64cebcbfa260a

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.24.2@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Fixes

• 🐛 Validate Origin header on websocket connection upgrade to prevent cross-origin websocket hijacking #2333

Thanks

Thanks to these contributors who contributed to v0.24.2!

• ❤️ @AlanGreene

Tekton Dashboard release v0.23.1

🚨 This release contains a security fix 🚨

Attestation

The Rekor UUID for this release is b748ce5c88942b0c616e202837aa621a69d04187d547c9f95dcd6a7b4ee95dea

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/dashboard/previous/v0.23.1/tekton-dashboard-release.yaml
REKOR_UUID=b748ce5c88942b0c616e202837aa621a69d04187d547c9f95dcd6a7b4ee95dea

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | base64 --decode | jq -r '.subject[]|select(.name | startswith("gcr.io"))|.name + ":v0.23.1@sha256:" + .digest.sha256')

# Download the release file
curl -s "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Fixes

• 🐛 Validate Origin header on websocket connection upgrade to prevent cross-origin websocket hijacking #2333

Thanks

Thanks to these contributors who contributed to v0.23.1!

• ❤️ @AlanGreene