chore(deps): update module github.com/openshift-pipelines/pipelines-as-code to v0.39.2 #679
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.36.0->v0.39.2Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
openshift-pipelines/pipelines-as-code (github.com/openshift-pipelines/pipelines-as-code)
v0.39.2Compare Source
Pipelines as Code version v0.39.2
OpenShift Pipelines as Code v0.39.2 has been released 🥳
This minor release add a feature for a setting to force users to add the commit SHA after /ok-to-test on e2e test, this helps to mitigate race conditions where a malicious actor could
push a commit after the
/ok-to-testcomment is made but before the CIruns. #2321
Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-39-2.pipelines-as-code.pages.dev
Changelog
2386222: feat: Require SHA for /ok-to-test comments (@chmouel)v0.39.1Compare Source
Pipelines as Code version v0.39.1
OpenShift Pipelines as Code v0.39.1 has been released 🥳
Changes
This is a bugfix release, the most notable fix is
cd576b1fixing a crash of the controller when the gitlab token is invalid.Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-39-1.pipelines-as-code.pages.dev
Changelog
a8212d3: chore: increase logs lines to check for string in e2e (@zakisk)76770ef: docs(resolver): Reorganize in-repo pipeline and task documentation (@aThorp96)2946d77: enhance: add PipelineRun name in pr json marshalling (@zakisk)f1112fd: fix: Update Gemini model to non-preview version (@chmouel)cd576b1: fix: crash on gl provider when token is invalid (@chmouel)f8992de: test(gitlab): add comprehensive ACL test coverage (@theakshaypant)v0.39.0Compare Source
Pipelines as Code version v0.39.0
OpenShift Pipelines as Code v0.39.0 has been released 🥳
Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-39-0.pipelines-as-code.pages.dev
Here is the list of notable changes based on your input:
✨ Features
namespaceparameter in incoming webhook SRVKP-5837 d1565533🐛 Bugs
⚙️ Misc
repo_ownerparameter semantics cf464831comment_strategyce145f8dChangelog
71e6994: chore(deps): bump actions/upload-artifact from 4 to 5 (@dependabot[bot])2106ee6: chore(goreleaser): use binaries field in homebrew (@theakshaypant)8a3103c: chore(linter): enforce British spelling 'cancelled' over 'canceled' (@ab-ghosh)e6889e3: chore: Add deprecation log for repository status field (@zakisk)0bacb90: chore: Add formatting checklist to AGENTS.md (@chmouel)dd3f552: chore: Enhance text consistency across codebase (@chmouel)9c097be: chore: Remove obsolete Tekton trigger PipelineRun (@chmouel)a7b73ac: chore: add new points in AI template for PR (@zakisk)9a418d7: chore: configure application id in CI via env variable (@zakisk)96b7476: chore: remove raw API response in log (@zakisk)6740f8b: feat(ci): skip PR checks for MIRRORED PRs (@chmouel)e45ee14: feat(gitlab): Cache results acl project membership (@chmouel)840cce8: feat(incoming): Set default secret key for incoming webhooks (@zakisk)f0042c7: feat: Add GitOps command support for tags in GitLab (@zakisk)99eecad: feat: Add release note and PR URL to JIRA custom fields (@chmouel)6fc679e: feat: Add support for optionalnamespaceparameter in incoming webhook (@aThorp96)b9067e1: feat: Create JIRA tickets from PRs with Gemini AI (@chmouel)b4d37f6: feat: Exclude tag push events from skip-pr-commits logic (@zakisk)b42d36d: feat: Honor gitops in GitLab threads replies (@chmouel)269d2a7: feat: Introduce AI/LLM-powered pipeline analysis (@chmouel)d3bc3b2: feat: Introduce PR CI automation via AI (@chmouel)7aa1b46: feat: Introduce error log snippet line config (@chmouel)a8e6b9c: feat: Refactor JIRA generation to use Google GenAI SDK (@chmouel)e18390d: feat: support glob in incoming webhook targets (@theakshaypant)e4e992b: fix(ci): Remove duplicate context declaration in e2e workflow (@chmouel)212a4f5: fix(ci): Use correct context variable in github-script (@chmouel)f8c4367: fix(cli): correct namespace flag binding in tkn-pac (#2284) (@theakshaypant)b14b004: fix(cli): respect forceInstallGosmee in bootstrap (@theakshaypant)baea213: fix(github): handle check run status for validation errors (@zakisk)8c707c3: fix(gitlab): add explicit mapping for cancelled status (@ab-ghosh)d5eee06: fix: Correct python formatting command (@chmouel)f28aac7: fix: Improve E2E failure reporting in GitHub Actions (@chmouel)6f0d774: fix: Refactor GH Actions script permission checks (@chmouel)6a02e5e: fix: increase number of lines of logs from pac-controller (@zakisk)860c901: fix: prevent nil pointer panic in EventEmitter (@chmouel)2dd2629: fix: prevent stale failure statuses on commits (@zakisk)6a0184b: fix: resolve templating placeholder evaluation bug (@chmouel)f3db57f: refactor: Migrate build tags from +build to //go:build directives (@chmouel)v0.38.0Compare Source
Pipelines as Code version v0.38.0
OpenShift Pipelines as Code v0.38.0 has been released 🥳
✨ Major changes and Features
tkn pac celfor interactively evaluating CEL expressions, with support for various webhook payloads, headers, and provider auto-detection.Screen.Recording.2025-09-08.at.22.mp4
🐛 Bug Fixes
{{ revision }}variable to fetch incorrect commit IDs for Bitbucket merge commits, restoring expected behavior.EmitMessageto prevent panics and ensure robust initialization./retestor/ok-to-testcommands if the last commit SHA was already successful.📚 Documentation Updates
PipelineRunstatus field in theRepositoryCR, indicating its future removal.⚙️ Chores
tmp/directory before running unit tests to prevent potential test execution failures.gemini-api-keyandapi-keyto align with.tekton/pr-labeler.yamlsetup.golangimage versions andpre-commithook configurations, and refined Vale style files for better accuracy with technical terms.DeepEqualin tests for more robust and accurate comparison.getExecutionOrderPatchfunction to ensure it returns the correct value when called.author_associationfield.actions/setup-goGitHub Action from version 5 to 6.actions/github-scriptGitHub Action from version 7 to 8.actions/checkoutGitHub Action from version 4 to 5.Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-38-0.pipelines-as-code.pages.dev
Changelog
440cf02: Add e2e test for GitlabMergeRequestValidationErrors (@infernus01)8cdbaff: Revert "fix: Re-enable tests for Global config changes" (@zakisk)95d7eda: Revert on-path-change on pr merge in bitbucket (@zakisk)61ba239: chore(deps): bump actions/checkout from 4 to 5 (@dependabot[bot])8f2b37a: chore(deps): bump actions/github-script from 7 to 8 (@dependabot[bot])018026a: chore(deps): bump actions/setup-go from 5 to 6 (@dependabot[bot])3dab622: chore(deps): update Go dependencies (@chmouel)bae62a5: chore: Add tests for getExecutionOrderPatch func (@zakisk)b037c29: chore: Update pre-commit hooks to v6.0.0 (@chmouel)bbd98c2: chore: Upgrade Go image to 1.24 (@chmouel)bc5dd61: chore: add mathur07 to E2E tests allowlist (@mathur07)79c8e77: chore: update vale rules from RedHat (@chmouel)03a1885: chore: use deep equal for map comparison (@zakisk)d810742: docs(.github): Add AI assistance disclosure to PR template (@chmouel)c379ccd: feat: Add CEL expression evaluator command (@chmouel)86a29ea: feat: Add GEMINI rules for code quality and processes (@chmouel)accff8e: feat: Add PR labeling with Gemini (@chmouel)a0b2c6f: feat: Add check user permission step in e2e workflow (@zakisk)c8644f3: feat: Introduce add-llm-coauthor script (@chmouel)fbb4d9e: feat: Support PipelineRun re-triggering on git tag (@zakisk)11953f2: feat: improve pr-labeler (@chmouel)cc3c49d: fix(gitlab): use TargetProjectID for merge request comments (@infernus01)c5b32f0: fix: Check source project access for GitLab PRs (@chmouel)4e56944: fix: Create tmp directory for unit tests (@chmouel)49df439: fix: Improve GitLab commit status handling (@chmouel)42fdcdf: fix: Prevent panic in EventEmitter when logger is nil (@chmouel)ba4a587: fix: Re-enable tests for Global config changes (@chmouel)717b4a0: fix: Update Jira AI token secret names (@chmouel)6b55d0e: fix: commit status for unauthorized user in Bitbucket Data Center (@zakisk)8fcfe51: fix: correct CEL expression syntax in filtering example (@chmouel)cd437c5: fix: don't restart successful pipelineruns on /retest /ok-to-test (@waveywaves)c5d07bb: fix: ensure cancel-in-progress targets PR PipelineRuns only (@zakisk)ee9da52: handle duplicate secret creation gracefully (@ab-ghosh)e76ae6c: refactor: Use usernames for E2E trigger permissions (@zakisk)90903ee: refactor: optimize GHApp installation ID retrieval (@chmouel)1da22b4: test(sort): add more unit tests for pr sorting (@chmouel)1483793: use ListProjectForks instead of creating forks in e2e test (@infernus01)v0.37.3Compare Source
Pipelines as Code version v0.37.3
OpenShift Pipelines as Code v0.37.3 has been released 🥳
This is a bugfix release, the most notable fix is
7e14293fixing a crash of the controller when the gitlab token is invalid.Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-37-3.pipelines-as-code.pages.dev
Changelog
3ac6e58: Release yaml generated from8195b9dfor release v0.37.2 ( <>)383ea6c: docs(resolver): Reorganize in-repo pipeline and task documentation (@aThorp96)1b16020: enhance: add PipelineRun name in pr json marshalling (@zakisk)7e14293: fix: crash on gl provider when token is invalid (@chmouel)v0.37.2Compare Source
Pipelines as Code version v0.37.2
OpenShift Pipelines as Code v0.37.2 has been released 🥳
Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-37-2.pipelines-as-code.pages.dev
Changes Since v0.37.1
🐛 Bug Fixes
Changelog
23eee70: Release yaml generated fromeb0d9b1for release v0.37.1 ( <>)3725c38: chore(goreleaser): use binaries field in homebrew (@theakshaypant)8195b9d: fix: delete go build tag for CI (@zakisk)5fbebdf: fix: prevent nil pointer panic in EventEmitter (@chmouel)ac8e45c: refactor: Migrate build tags from +build to //go:build directives (@chmouel)v0.37.1Compare Source
Pipelines as Code version v0.37.1
OpenShift Pipelines as Code v0.37.1 has been released 🥳
Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-37-1.pipelines-as-code.pages.dev
Changes Since v0.37.0
🐛 Bug Fixes
Improve GitLab commit status handling: Clarified documentation and improved code for GitLab commit status updates, ensuring comments are only posted when status updates fail due to permissions. (#2253)
Jira: SRVKP-8908
Check source project access for GitLab PRs: Ensures the GitLab token has read access to the source repository for pull requests, fixing potential build failures due to insufficient scope. (#2251)
Jira: SRVKP-8902, SRVKP-8910
Prevent panic in EventEmitter when logger is nil: Added nil checks for the logger in EmitMessage to prevent panics and ensure robust initialization. (#2257)
Jira: SRVKP-8910
Revert on-path-change on pr merge in bitbucket: Reverted a change that caused the {{ revision }} variable to fetch incorrect commit IDs for Bitbucket merge commits, restoring expected behavior. (#2247)
Jira: SRVKP-8616
Changelog
b78ba64: Revert on-path-change on pr merge in bitbucket (@zakisk)3823319: feat: Add check user permission step in e2e workflow (@zakisk)3bd52ba: fix: Check source project access for GitLab PRs (@chmouel)239f25f: fix: Improve GitLab commit status handling (@chmouel)9c2edcc: fix: Prevent panic in EventEmitter when logger is nil (@chmouel)eb0d9b1: fix: increase controller logs lines to detect message (@zakisk)v0.37.0Compare Source
Pipelines as Code version v0.37.0
OpenShift Pipelines as Code v0.37.0 has been released 🥳
Installation
To install this version you can install the release.yaml with
kubectlfor your platform :Openshift
Kubernetes
Documentation
The documentation for this release is available here :
https://release-v0-37-0.pipelines-as-code.pages.dev
Changes since v0.36.0
🚀 Features & Enhancements
📜 Structured Logging: Structured logging now includes repository context for improved readability and debugging. (
5949341)🏛️ Artifact Hub Support: Support has been added for resolving tasks and pipelines from Artifact Hub. (
5034528)🎟️ Jira Integration: You can now create Jira tickets directly from pull request comments. (
5e98945)✍️ Customizable CR Names: Added template support for customizing the names of auto-configured Repository CRs. (
1ba08cf)🔗 Relative Task Resolution: Support has been added for fetching remote tasks using relative URLs. (
8c752e3)c0f65c7)📊 GitHub API Monitoring: Implemented intelligent monitoring and instrumentation for GitHub API calls in E2E tests. (
15d764c,8346f33,bc8e716)💻 Cursor IDE Rules: Comprehensive development and linting rules have been added for the Cursor IDE. (
32e2093)🧩 Payload Parsing Enhancement: The ParsePayload function has been enhanced to use a more direct client function for API calls. (
db0e832)🧪 Improved Error Clarity: Error messages for commit info have been clarified and new tests have been added. (
f3a73b4)🐛 Bug Fixes
🛡️ Webhook Secret Validation: A guard has been added to prevent a controller crash when checking webhook secrets for nil responses on GitHub. (
e18edee)📎 Concurrency Deadlock: A deadlock in the concurrency tryAcquire method has been prevented. (
d1ea889)📝 PipelineRun Annotation: The PipelineRun is now correctly annotated when the "started" status is reported. (
a1d7e4e)🤔 Missing .tekton Directory: Fixed an issue where pull requests could remain in a 'pending' state indefinitely if the repository - was missing a .tekton directory. (
846416e)🤫 YAML Validation Noise: Validation errors are no longer incorrectly reported for non-Tekton resources, reducing noise. (
4f415fb)🍺 Homebrew Packaging: Resolved issues with Homebrew packaging and updated the cask installation documentation. (
ecd0637,3639f67)🗑️ Bitbucket DC Branch Deletion: Branch deletion events, which do not contain a commit SHA, are now correctly ignored to prevent processing errors. (
7340740)🧹 Housekeeping & CI
🚦 E2E Test Triggers: E2E tests are now triggered more efficiently, running only when workflow files change and based on the author's association with the repository. (
a5b9453,f120625)✅ Commit Validation: Commit and pull request title validation in the CI has been improved and unified. (
fe32890,ce23998)🔧 Git-Clone Task Path: The git-clone task location has been updated to its new canonical path. (
0ad67b6)♻️ Finalizer Naming: The controller's finalizer name has been updated to be more explicit. (
a0bcb6f)🔗 Dependency Update: The jenkins-x/go-scm dependency has been updated to the latest version. (
28a095f,4ae3540)🧼 Code Cleanup: An unused ConvertPacStructToConfigMap function and its tests have been removed. (
70eb7ba)🏃 Linter Fix: The noctx linter is now satisfied by using exec.CommandContext in the CI. (
3e8fe4c)🐍 CI Python Image: The CI now uses a standard Python image to install ruff, improving portability. (
cce78bb)📛 Linter Naming Fix: A var-naming error from the revive linter has been fixed. (
87df55c)👥 E2E Test Permissions: E2E tests can now be triggered by a wider range of trusted contributors. (
633f025,78a7418)🏷️ Event Type Refactor: The internal event type LabelUpdate has been refactored to the more descriptive pull_request_labeled. (
fdd6549)🏛️ Catalog ID Refactor: The default ArtifactHub catalog ID has been refactored to pacpipelines. ([
542f1a0](https://redirect.github.com/openshift-pipelines/pipelines-as-codConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.