v0.27.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ac175456e0e0be623a43b669fc8aad27e4e2a6f362dd614e3ad634511a4f78f56 - attestation and
108e9186e8c5677a9ab09588ff6565fc7d5daf88fd05ab7876cb887c64af61d9cc7fe57d2042b589 - signature

v0.27.0 - 2026-08-10

Features

• bold failed task rows in the report comment table
• add a recreate report comment strategy
• resolve Codebases via gitUrlPathHash label with full-scan fallback
• resolve PipelineRun ServiceAccount from a Pipeline annotation
• pass gitServers annotations through to the GitServer resource
• allow disabling log publishing per PipelineRun or GitServer
• add a reporter flag to publish failed-step logs, off by default
• restrict GitHub review pipeline triggers to allowed authors
• add gitlab-set-label task for merge request label voting
• add re-run hint to report comments, drop emoji status icons
• add best-effort Argo CD diff preview to the GitOps review pipeline

Bug Fixes

• resolve the interceptor and reporter images from chart-wide image values
• remove the legacy Grafana/Prometheus integration from pipelines-library
• log permanent report skips at info level
• reduce pipeline, interceptor and reporter roles to exercised verbs
• exclude chart tests and python caches from the packaged chart
• scope every role to named secrets and drop configmap access
• restrict interceptor secret reads to known git server secrets
• deny host IPC access in the interceptor SCC
• remove blanket secret read access from tekton autotests role
• always post running as the GitLab start commit status
• report Completed aggregate without cancel reason as success
• bitbucket build reporters vote on the cloned commit
• github build reporters vote on the cloned commit
• gitlab build reporters vote on the cloned commit
• reserve a finally budget so timed-out pipelines report commit status
• restore Helm chart publishing to ECR
• skip Bitbucket review retriggers on metadata-only PR updates

Code Refactoring

• gate the diff preview on a single condition
• drop the unused TENANT_NAME result from init-values
• create SonarQube projects without the Kubernetes API
• remove dead gitsha param from build pipelines and trigger templates (#684)
• remove Jira integration from Tekton pipelines

Testing

• align pipeline tests with clone-first reporter order
• pin build reporters to clone-result voting (red)

Routine

• remove the Tekton pruner in favor of Tekton Results
• normalize CRLF line endings to LF
• bump common-library to 0.3.21 and refresh docs
• bump Go base image to golang:1.25-trixie
• Update current development version

v0.26.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677aa8278ce39d6e1463fabdcb8b7baeebd9f8ab5b83a5de5124ae8d32d50c78ffe3 - attestation and
108e9186e8c5677a7cc6beaf1616d69f15ba422079a7df284bea1bab8c91fd5c34a28658e502d027 - signature

v0.26.0 - 2026-07-20

Features

• post queued commit status at webhook time for review PipelineRuns
• report canceled commit status for superseded review PipelineRuns
• publish review PipelineRun results as pull request comments

Bug Fixes

• retrigger GitLab review pipelines only on code pushes and comment commands
• report Bitbucket logs as plain markdown, stop Gerrit reconcile loop
• report review pipeline status from a single aggregate-driven finally task
• tolerate GitLab commit status transition conflicts in gitlab-set-status
• use Review Pipeline status context in GitHub review pipelines

Code Refactoring

• address review findings on the reporter fixes
• move tekton-reporter into the pipelines-library chart

Routine

• Update current development version
• Update current development version
• Align tekton-cache chart version

v0.25.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a918fd65f2814bf0424331f445f5c77b54ac3b26e2087fa9739c6e97b4eb0837e - attestation and
108e9186e8c5677a2436b4d2d3685d92e3b2205b964b2027b383c7c8341b13a3d3d2df1104ec7237 - signature

v0.25.0 - 2026-07-13

Features

• cancel in-progress review PipelineRuns superseded by a new commit
• add optional HTTPRoute support for EventListeners

Bug Fixes

• isolate save-cache task from parallel push tasks in Maven pipelines

Code Refactoring

• Move clusterName to top-level configuration
• clean up defaulttype getversion tasks
• Extract pipelineUrl parameter to reusable Helm helper

Routine

• Align tekton-cache chart version
• Align tekton-cache image
• upgrade Node.js to 24.18.0 for npm/pnpm pipelines
• Update current development version

Documentation

• document lint targets in CLAUDE.md
• condense the new-language pipeline extension guide

v0.24.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ab681a804c1d127e05dd9cb6d8934e50d2ebebb05bcf9471b69dc8ce834cc3bcb - attestation and
108e9186e8c5677a45c075671fc1c2227747f0ba0cc2dfeb155045683dba662b196f350604a59d68 - signature

v0.24.0 - 2026-05-22

Routine

• Align tekton-cache version
• Align tekton-cache image
• Update current development version

v0.23.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ab0a98cda828ae6544adb61b186cbb37251f68291c141c9b0ba7873ba9e0aeaa5 - attestation and
108e9186e8c5677aa79ac8e2a6e5a99aefd1d17317c1fb4f2f396a72d317b49ab6579a6d6e4fdc61 - signature

v0.23.0 - 2026-05-21

Bug Fixes

• prevent APPLICATIONS_PAYLOAD from exceeding Tekton result size limit
• prevent tar file conflict in cache archive

Routine

• Update current development version
• Align krci-cache image
• Update current development version

v0.22.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677aa14e406d263bb46225638adf5711f7831d17167824686c2dc3a68c671c38dd63 - attestation and
108e9186e8c5677a0ba089645e53f0352fb68c9ef537004b63b01e63add5ad2d6a04c2a0f5d5c9b0 - signature

v0.22.0 - 2026-04-08

Bug Fixes

• add explicit kind: ClusterInterceptor to trigger interceptor refs

Routine

• support Jira-prefixed CHANGELOG format
• remove PR title length validation
• Update current development version

v0.21.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677ab2f7067c6595845e533c5c5605fed8d5e5877982393a446437e5a142579a83e1 - attestation and
108e9186e8c5677acf59afa7d1b43d4f0f8a5fbf8efe6ac8626509049c152ae9703fd3cfde09d80d - signature

v0.21.0 - 2026-03-27

Features

• Add support for Python 3.13.11 version in Tekton pipeline (#597)
• Add support for Java 25 version in autotests (#572)
• Add support for Java 25 version in Tekton pipeline (#572)

Bug Fixes

• update helm-lint and sonar configuration for compatibility (#604)
• Add support java21/25 for Deployment autotests (#599)
• Use branch name instead of SHA for tagging (#596)
• correct cdxgen image registry from docker.io to ghcr.io
• Refactor task scripts to POSIX sh for Alpine image compatibility
• Replace bash shebang with sh for POSIX shell compatibility
• Replacing the deprecated sonar.login
• Use merge_commit_sha for GitLab interceptor with fallback to last_commit (#569)
• Fix git-sha value for the GitLab when merge strategy doesn't create merge commit (#569)

Code Refactoring

• parameterize DefectDojo integration with per-branch scan isolation
• parameterize container images in security tasks for centralized management
• consolidate Bitbucket event processing to eliminate duplication

Routine

• Add Step Name Parameter Support for Autotest Execution in Deploy Pipeline
• Remove test ignore flag from maven (#601)
• Bump security scanner versions to latest
• Update chart-testing tool to v3.14.0 (#588)
• Bump kubectl image (#586)
• Add securityContext with runAsUser: 0 to sonar-scanner step (#577)
• Update kubectl image to 1.34.2 from deprecated bitnami image
• Bump version to 0.3.18 and update documentation
• Update Go dependencies for Kubernetes 1.34 compatibility (#580)
• Update sonar-scanner-cli version
• Migrate tekton resources from v1beta1 to v1 (#573)
• Update current development version (#566)

v0.20.0

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677accaa12fe349f60719be4eb37aefef68310690c590c28f39d12b0338171758439 - attestation and
108e9186e8c5677a5b166d77f90f737fb142e451699715b4e22c1b6f5fb7e84c1de2cd282affe895 - signature

v0.20.0 - 2025-12-19

Features

• Populate PipelineRun with Git metadata (#560)
• Added two tasks for building with Buildkit
• Update kric-ai to the latest version (#535)
• Add tekton agent (#535)
• Add support for pnpm build tool in tasks pipelines and tests(#525)

Bug Fixes

• Update vote step for bitbucket pipelines (#558)
• Disabling sonar tests in libs and apps
• Replacing the deprecated sonar.login
• Disabling sonar tests
• Update gradle version to gradle:7.6.5 (#549)
• Align values of pruner cron-job(#540)
• Rollback git-init image version (#538)
• Update Gitlab gitrevision parameter (#533)
• Update nexus path for components (#527)
• Fix invalid image parameter in Go review pipelines (#523)

Routine

• Update CI configuration (#560)
• Add PR link metadata to the PipelineRun annotation (#560)
• Add more metadata to the PipelineRun annotation (#560)
• Align to the Tekton Result approach on pushing custom annotations (#560)
• Update current development version (#547)
• Update current development version (#545)
• Migrate to bitnamilegacy image repository(#540)
• Remove Java8 and Java11 support (#536)
• Add multi-image support to image-scan-remote pipeline (#531)
• Update dotnet artifact push command (#529)
• Align Autotest pipelines steps (#521)

BREAKING CHANGE:

Tekton pipelines for Java 8 and Java 11 will not be available for all codebase types.

v0.19.2

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a24c7fa4dc42e61bf45522f2741d1c72af4f49d2502154ede57a73210687d005b - attestation and
108e9186e8c5677ad9365b2dfba40c636ca11f90b528d2419337f2625eae1ff9a906142fd4a61824 - signature

v0.19.2 - 2025-10-06

Bug Fixes

• Rollback git-init image version (#538)

v0.19.1

Deployment Certifications and Source Traceability

KubeRocketCI container images bear cosign signatures. Refer to the documentation for instructions on verification.
The Rekor UUID's for this release is 108e9186e8c5677a065315e2d9b8b51c6e366e0bff7de5b038e09f83377ba0e106d8cf37fac75b9a - attestation and
108e9186e8c5677a9e580cb18abe28435d9f4f48d97ccf788b7c936b1f3f63284460142320bd419c - signature

v0.19.1 - 2025-10-02

Routine

• Migrate to bitnamilegacy image repository(#540)