Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Nov 6, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/openshift-pipelines/pipelines-as-code v0.36.0 -> v0.39.2 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

openshift-pipelines/pipelines-as-code (github.com/openshift-pipelines/pipelines-as-code)

v0.39.2

Compare Source

Pipelines as Code version v0.39.2

OpenShift Pipelines as Code v0.39.2 has been released 🥳

This minor release add a feature for a setting to force users to add the commit SHA after /ok-to-test on e2e test, this helps to mitigate race conditions where a malicious actor could
push a commit after the /ok-to-test comment is made but before the CI
runs. #​2321

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.2/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.2/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-39-2.pipelines-as-code.pages.dev

Changelog

v0.39.1

Compare Source

Pipelines as Code version v0.39.1

OpenShift Pipelines as Code v0.39.1 has been released 🥳

Changes

This is a bugfix release, the most notable fix is cd576b1 fixing a crash of the controller when the gitlab token is invalid.

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.1/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.1/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-39-1.pipelines-as-code.pages.dev

Changelog

v0.39.0

Compare Source

Pipelines as Code version v0.39.0

OpenShift Pipelines as Code v0.39.0 has been released 🥳

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.0/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.39.0/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-39-0.pipelines-as-code.pages.dev

Here is the list of notable changes based on your input:

✨ Features

🐛 Bugs

⚙️ Misc

  • docs: correct docs for GitOps commands on GitLab d5774cdf
  • refactor: Migrate build tags from +build to //go:build directives d4dc56fd
  • chore: remove raw API response in log d46f5e8f
  • chore(deps): bump actions/upload-artifact from 4 to 5 d3ec0be4
  • chore: configure application id in CI via env variable d3434604
  • chore(goreleaser): use binaries field in homebrew d30048d2
  • chore: Add deprecation log for repository status field d1d37ef3
  • chore: Allow org members to trigger E2E workflow d0d750e1
  • docs: clarify repo_owner parameter semantics cf464831
  • docs: Clarify documentation for repository comment_strategy ce145f8d
  • docs: Restructure and enhance README for clarity cdb2b564
  • chore: Enhance text consistency across codebase cdb09d06
  • docs: improve English phrasing across upstream documentation cda97ff4
  • chore: Add new points in AI template for PR cda974e5
  • docs: Add AI assistance disclosure to PR template cd8a9d25

Changelog

v0.38.0

Compare Source

Pipelines as Code version v0.38.0

OpenShift Pipelines as Code v0.38.0 has been released 🥳

✨ Major changes and Features

  • Added an experimental CEL expression evaluator command: Introduced a new experimental command tkn pac cel for interactively evaluating CEL expressions, with support for various webhook payloads, headers, and provider auto-detection.
Screen.Recording.2025-09-08.at.22.mp4
  • Support PipelineRun re-triggering on git tag: Enables re-triggering PipelineRuns via GitOps comments on Git tags, allowing users to specify a tag for re-execution.
  • optimize GHApp installation ID retrieval: Optimized the retrieval of GitHub App installation IDs by removing unnecessary listings and directly fetching the installation using the repository URL, with fallback to organization installation. This improves performance and reduces API calls.

🐛 Bug Fixes

  • Revert on-path-change on pr merge in bitbucket: Reverted a change that caused the {{ revision }} variable to fetch incorrect commit IDs for Bitbucket merge commits, restoring expected behavior.
  • Prevent panic in EventEmitter when logger is nil: Added nil checks for the logger in EmitMessage to prevent panics and ensure robust initialization.
  • Check source project access for GitLab PRs: Ensures the GitLab token has read access to the source repository for pull requests, fixing potential build failures due to insufficient scope.
  • /ok-to-test /retest pipelineruns should not be created if last sha successful: Prevents the creation of new PipelineRuns for /retest or /ok-to-test commands if the last commit SHA was already successful.
  • ensure cancel-in-progress targets PR PipelineRuns only: Correctly targets PR-close cancellations to PR PipelineRuns and prevents accidental cancellation of push-triggered PipelineRuns.
  • use TargetProjectID for merge request comments (GitLab): Fixed an issue where GitLab merge request comments were not being posted correctly from forks due to incorrect ProjectID usage.
  • Improve GitLab commit status handling: Clarified documentation and improved code for GitLab commit status updates, ensuring comments are only posted when status updates fail due to permissions.
  • handle duplicate secret creation gracefully: Modified secret creation logic to reuse existing secrets instead of failing when a duplicate secret is encountered.

📚 Documentation Updates

  • Add CEL filter example for non-code changes: Provided a comprehensive example for using CEL expressions to filter PipelineRuns, specifically excluding changes to documentation or configuration files.
  • Add deprecation notice of Repository CR PipelineRun status: Added a prominent deprecation notice for the PipelineRun status field in the Repository CR, indicating its future removal.
  • Add tags available for every metric in PaC: Documented the available tags/keys for every metric in Pipelines-as-Code to help users filter metrics effectively.

⚙️ Chores

  • Add PR labeling with Gemini: Introduced an automated pull request labeling pipeline using Tekton and a Python script that leverages the Gemini AI model to analyze PRs and suggest labels.
  • Add check user permission step in e2e workflow: Added a step to the end-to-end workflow that checks the triggering user's repository permissions via the GitHub REST API.
  • ensure tmp dir for tests: Created the tmp/ directory before running unit tests to prevent potential test execution failures.
  • Re-enable tests for Global config changes: Re-enabled tests that were previously skipped due to flakiness, as the flakes were unrelated to the global config modifications.
  • Add AI assistance disclosure to PR template: Added a section to the pull request template for contributors to disclose the use of AI assistance.
  • Update Jira AI token secret names: Updated AI token secret names to gemini-api-key and api-key to align with .tekton/pr-labeler.yaml setup.
  • Add more unit tests for pr sorting: Added more test cases to improve the overall test coverage for the PipelineRun sorting logic.
  • Update dependencies: Updated various CI and tooling dependencies, including golang image versions and pre-commit hook configurations, and refined Vale style files for better accuracy with technical terms.
  • fix GEMINI rules: Adjusted Gemini rules to enforce code quality, formatting, and development processes, including rules for architecture, dependencies, documentation, and testing.
  • add mathur07 to E2E tests allowlist: Added a user to the allowlist for triggering E2E tests on pull requests to facilitate automated testing.
  • Use DeepEqual for map comparison in tests: Replaced manual map comparisons with DeepEqual in tests for more robust and accurate comparison.
  • Add tests for getExecutionOrderPatch func: Added unit tests for the getExecutionOrderPatch function to ensure it returns the correct value when called.
  • Use usernames for E2E trigger permissions: Updated E2E trigger permissions to use usernames, as GitHub has deprecated the author_association field.
  • Bump actions/setup-go from 5 to 6: Updated the actions/setup-go GitHub Action from version 5 to 6.
  • Bump actions/github-script from 7 to 8: Updated the actions/github-script GitHub Action from version 7 to 8.
  • Bump actions/checkout from 4 to 5: Updated the actions/checkout GitHub Action from version 4 to 5.

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.38.0/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.38.0/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-38-0.pipelines-as-code.pages.dev

Changelog

v0.37.3

Compare Source

Pipelines as Code version v0.37.3

OpenShift Pipelines as Code v0.37.3 has been released 🥳

This is a bugfix release, the most notable fix is 7e14293 fixing a crash of the controller when the gitlab token is invalid.

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.3/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.3/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-37-3.pipelines-as-code.pages.dev

Changelog

v0.37.2

Compare Source

Pipelines as Code version v0.37.2

OpenShift Pipelines as Code v0.37.2 has been released 🥳

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.2/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.2/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-37-2.pipelines-as-code.pages.dev

Changes Since v0.37.1

🐛 Bug Fixes

  • Prevented a potential nil pointer panic in EventEmitter, improving runtime stability and reliability. (#​2311)

Changelog

v0.37.1

Compare Source

Pipelines as Code version v0.37.1

OpenShift Pipelines as Code v0.37.1 has been released 🥳

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.1/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.1/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-37-1.pipelines-as-code.pages.dev

Changes Since v0.37.0

🐛 Bug Fixes

  • Improve GitLab commit status handling: Clarified documentation and improved code for GitLab commit status updates, ensuring comments are only posted when status updates fail due to permissions. (#​2253)
    Jira: SRVKP-8908

  • Check source project access for GitLab PRs: Ensures the GitLab token has read access to the source repository for pull requests, fixing potential build failures due to insufficient scope. (#​2251)
    Jira: SRVKP-8902, SRVKP-8910

  • Prevent panic in EventEmitter when logger is nil: Added nil checks for the logger in EmitMessage to prevent panics and ensure robust initialization. (#​2257)
    Jira: SRVKP-8910

  • Revert on-path-change on pr merge in bitbucket: Reverted a change that caused the {{ revision }} variable to fetch incorrect commit IDs for Bitbucket merge commits, restoring expected behavior. (#​2247)
    Jira: SRVKP-8616

Changelog

v0.37.0

Compare Source

Pipelines as Code version v0.37.0

OpenShift Pipelines as Code v0.37.0 has been released 🥳

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.0/release.yaml
Kubernetes
kubectl apply -f https://github.com/openshift-pipelines/pipelines-as-code/releases/download/v0.37.0/release.k8s.yaml
Documentation

The documentation for this release is available here :

https://release-v0-37-0.pipelines-as-code.pages.dev

Changes since v0.36.0

🚀 Features & Enhancements

  • 📜 Structured Logging: Structured logging now includes repository context for improved readability and debugging. (5949341)

  • 🏛️ Artifact Hub Support: Support has been added for resolving tasks and pipelines from Artifact Hub. (5034528)

  • 🎟️ Jira Integration: You can now create Jira tickets directly from pull request comments. (5e98945)

  • ✍️ Customizable CR Names: Added template support for customizing the names of auto-configured Repository CRs. (1ba08cf)

  • 🔗 Relative Task Resolution: Support has been added for fetching remote tasks using relative URLs. (8c752e3)

  • ⚠️ CEL Error Reporting: Invalid CEL expression errors are now reported as comments directly on the pull request. (c0f65c7)

  • 📊 GitHub API Monitoring: Implemented intelligent monitoring and instrumentation for GitHub API calls in E2E tests. (15d764c, 8346f33, bc8e716)

  • 💻 Cursor IDE Rules: Comprehensive development and linting rules have been added for the Cursor IDE. (32e2093)

  • 🧩 Payload Parsing Enhancement: The ParsePayload function has been enhanced to use a more direct client function for API calls. (db0e832)

  • 🧪 Improved Error Clarity: Error messages for commit info have been clarified and new tests have been added. (f3a73b4)

🐛 Bug Fixes

  • 🛡️ Webhook Secret Validation: A guard has been added to prevent a controller crash when checking webhook secrets for nil responses on GitHub. (e18edee)

  • 📎 Concurrency Deadlock: A deadlock in the concurrency tryAcquire method has been prevented. (d1ea889)

  • 📝 PipelineRun Annotation: The PipelineRun is now correctly annotated when the "started" status is reported. (a1d7e4e)

  • 🤔 Missing .tekton Directory: Fixed an issue where pull requests could remain in a 'pending' state indefinitely if the repository - was missing a .tekton directory. (846416e)

  • 🤫 YAML Validation Noise: Validation errors are no longer incorrectly reported for non-Tekton resources, reducing noise. (4f415fb)

  • 🍺 Homebrew Packaging: Resolved issues with Homebrew packaging and updated the cask installation documentation. (ecd0637, 3639f67)

  • 🗑️ Bitbucket DC Branch Deletion: Branch deletion events, which do not contain a commit SHA, are now correctly ignored to prevent processing errors. (7340740)

🧹 Housekeeping & CI

  • 🚦 E2E Test Triggers: E2E tests are now triggered more efficiently, running only when workflow files change and based on the author's association with the repository. (a5b9453, f120625)

  • ✅ Commit Validation: Commit and pull request title validation in the CI has been improved and unified. (fe32890, ce23998)

  • 🔧 Git-Clone Task Path: The git-clone task location has been updated to its new canonical path. (0ad67b6)

  • ♻️ Finalizer Naming: The controller's finalizer name has been updated to be more explicit. (a0bcb6f)

  • 🔗 Dependency Update: The jenkins-x/go-scm dependency has been updated to the latest version. (28a095f, 4ae3540)

  • 🧼 Code Cleanup: An unused ConvertPacStructToConfigMap function and its tests have been removed. (70eb7ba)

  • 🏃 Linter Fix: The noctx linter is now satisfied by using exec.CommandContext in the CI. (3e8fe4c)

  • 🐍 CI Python Image: The CI now uses a standard Python image to install ruff, improving portability. (cce78bb)

  • 📛 Linter Naming Fix: A var-naming error from the revive linter has been fixed. (87df55c)

  • 👥 E2E Test Permissions: E2E tests can now be triggered by a wider range of trusted contributors. (633f025, 78a7418)

  • 🏷️ Event Type Refactor: The internal event type LabelUpdate has been refactored to the more descriptive pull_request_labeled. (fdd6549)

  • 🏛️ Catalog ID Refactor: The default ArtifactHub catalog ID has been refactored to pacpipelines. ([542f1a0](https://redirect.github.com/openshift-pipelines/pipelines-as-cod


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/github.com-openshift-pipelines-pipelines-as-code-0.x branch from 57bb9f9 to b475b8b Compare November 18, 2025 13:07
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.0 chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.1 Nov 19, 2025
…s-code to v0.39.2

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/github.com-openshift-pipelines-pipelines-as-code-0.x branch from b475b8b to 4b48401 Compare November 19, 2025 13:03
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.1 chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 Nov 19, 2025
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 - autoclosed Nov 27, 2025
@red-hat-konflux red-hat-konflux bot closed this Nov 27, 2025
@red-hat-konflux red-hat-konflux bot deleted the konflux/mintmaker/main/github.com-openshift-pipelines-pipelines-as-code-0.x branch November 27, 2025 09:04
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 - autoclosed chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 Nov 27, 2025
@red-hat-konflux red-hat-konflux bot reopened this Nov 27, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/github.com-openshift-pipelines-pipelines-as-code-0.x branch from 4d666b9 to 4b48401 Compare November 27, 2025 17:05
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 - autoclosed Nov 29, 2025
@red-hat-konflux red-hat-konflux bot closed this Nov 29, 2025
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 - autoclosed chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 Nov 29, 2025
@red-hat-konflux red-hat-konflux bot reopened this Nov 29, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/github.com-openshift-pipelines-pipelines-as-code-0.x branch from 08e5cf6 to 4b48401 Compare November 29, 2025 20:48
@avinal avinal closed this Dec 4, 2025
@red-hat-konflux
Copy link
Contributor Author

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v0.39.2). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants