Release changes since v0.11.0
Features
#1398 by @apoorvajagtap: The Strategy struct does not have an APIVersion field anymore.
#1384 by @SaschaSchwarze0: Installing a nightly release now requires you to run a post-script that sets up the TLS certificate of the conversion webhook
#1370 by @apoorvajagtap: The BuildAh sample build strategies now do not anymore run privileged containers
#1342 by @SaschaSchwarze0: The shipwright-build namespace is now configured to enforce restricted PodSecurity. The shipwright-build-controller deployment was updated to fulfill all requirements.
#1323 by @SaschaSchwarze0: Buildpacks sample build strategies are updated to the latest Heroku version and a newer platform API version
#1302 by @qu1queee: Introduce conversion-webhook to convert SHP Custom Resources from v1beta1 to v1alpha1.
#1268 by @SaschaSchwarze0: Introduce a common base image for all supporting steps
#1266 by @SaschaSchwarze0: You can now define a securityContext on build strategy level to control the runAs user for all steps including the shipwright-managed steps. This allows you to use any runAs user for your build strategy steps while still being able to run without any runAsRoot steps.
#1235 by @qu1queee: API additions: Introduce Shipwright Build v1beta1 API types
#1046 by @SaschaSchwarze0: Shipwright is now capable of pushing the image built by the strategy steps to the container registry
Fixes
#1407 by @qu1queee: Downgrade k8s.io/utils/ptr to k8s.io/utils/pointer due to dependency conflicts with controller-runtime pkg
#1390 by @isibeni: The logic to detect whether a BuildRun failed due to an evicted Pod was improved
#1277 by @SaschaSchwarze0: The platform support for the ko build strategy is functional again
#1239 by @mjgallag: Fix buildkit cluster build strategy's cache import from insecure registry.
#1219 by @SaschaSchwarze0: The ko sample build strategy now makes the source directory a Git safe directory so that Go builds can retrieve version control information
#1176 by @HeavyWombat: The Git source step of a build strategy now returns a more elaborate error in case basic authentication (username and password) are used in combination with a HTTP URI. Instead of a generic error, an error message with an explanation is presented to be more clear and helpful. Also, inline credentials used in the URL will be redacted in the log output.
#1156 by @dalbar: Fixes cancelation of buildruns without a build reference.
API Changes
#1403 by @qu1queee: Add conversion logic for local type of sources. BuildRun CRs now support a .spec.source object that can only be of the type Local. Build CRs now make it explicit on support for the .spec.source of the type Local.
#1266 by @SaschaSchwarze0: You can now define a securityContext on build strategy level to control the runAs user for all steps including the shipwright-managed steps. This allows you to use any runAs user for your build strategy steps while still being able to run without any runAsRoot steps.
#1235 by @qu1queee: API additions: Introduce Shipwright Build v1beta1 API types
#1046 by @SaschaSchwarze0: Shipwright is now capable of pushing the image built by the strategy steps to the container registry
Docs
#1403 by @qu1queee: Add conversion logic for local type of sources. BuildRun CRs now support a .spec.source object that can only be of the type Local. Build CRs now make it explicit on support for the .spec.source of the type Local.
#1388 by @apoorvajagtap: Documentation was updated to describe the beta version of the custom resources
#1196 by @qu1queee: Marks BuildSpec volumes description field as deprecated.
#1117 by @dheerajodha: Deprecated support for passwords. Use Personal Access Tokens instead.
Misc
#1401 by @SaschaSchwarze0: Updates google.golang.org/grpc to address CVE-2023-44487
#1397 by @SaschaSchwarze0: The supported Kubernetes releases are now 1.25 to 1.28. The supported Tekton versions are 0.47 and 0.50
#1371 by @qu1queee: Add action to cleanup nightly assets regularly
#1362 by @SaschaSchwarze0: The BuildKit sample build strategy now does not cause BuildKit to tar the image to then untar it
#1361 by @SaschaSchwarze0: The Kaniko sample build strategy now uses the --snapshot-mode and --tar-path command line flags instead of the deprecated --snapshotMode and --tarPath
#1351 by @SaschaSchwarze0: Golang 1.20 is used to compile
#1202 by @SaschaSchwarze0: Updated the Kubernetes support to v1.24, v1.25, and v1.26, and Tekton to v0.41 and v0.44.
