v0.71.0 LTS

Tekton Dashboard v0.71.0 LTS

This Dashboard release supports Pipelines v1.15.x LTS, and Triggers v0.36.x LTS.

Attestation

The Rekor UUID for this release is 108e9186e8c5677af71bd5e994ae6be6315a92461b648cc649117fccfeda5cf4539fcb102cbbc2bf

Verify that all container images in the release file are in the attestation:

RELEASE_FILE=https://infra.tekton.dev/tekton-releases/dashboard/previous/v0.71.0/release.yaml
REKOR_UUID=108e9186e8c5677af71bd5e994ae6be6315a92461b648cc649117fccfeda5cf4539fcb102cbbc2bf

# Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGE=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|select(.name | startswith("ghcr.io"))|.name + ":v0.71.0@sha256:" + .digest.sha256')

# Download the release file
curl -s -L "$RELEASE_FILE" -o release.yaml

# Match the image used in the release file to an image in the attestation
DASHBOARD_IMAGE=$(cat release.yaml | grep image: | awk -F' ' '{print $2}')
echo
printf $DASHBOARD_IMAGE
if [[ "${REKOR_ATTESTATION_IMAGE}" = "${DASHBOARD_IMAGE}" ]]; then
  echo " ===> ok"
else
  echo " ===> no match"
fi

Misc

• 🔨 Bump step-security/harden-runner from 2.19.4 to 2.20.0 #5100
• 🔨 Bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0 #5101
• 🔨 Bump the all group across 2 directories with 2 updates #5104
• 🔨 Bump @formatjs/cli from 6.16.11 to 6.16.13 #5107
• 🔨 Bump the vitest group across 1 directory with 2 updates #5106
• 🔨 Bump msw from 2.14.6 to 2.15.0 #5108
• 🔨 Bump @uiw/react-codemirror from 4.25.10 to 4.25.11 #5113
• 🔨 Bump @eslint/js from 9.39.4 to 9.39.5 #5114
• 🔨 Bump the storybook group across 1 directory with 6 updates #5105
• 🔨 Bump @carbon/react from 1.111.0 to 1.111.1 #5110
• 🔨 Bump vite from 8.1.3 to 8.1.4 #5111
• 🔨 Bump eslint from 9.39.4 to 9.39.5 #5112
• 🔨 Bump linkify-it from 5.0.2 to 6.0.0 #5109
• 🔨 Bump github/codeql-action/- 🔨 from 4.36.2 to 4.37.0 #5116
• 🔨 Bump systeminformation from 5.31.6 to 5.31.17 in /packages/e2e #5118
• 🔨 Bump actions/setup-go from 6.5.0 to 7.0.0 #5123
• 🔨 Bump @formatjs/cli from 6.16.13 to 6.16.14 #5131
• 🔨 Bump the all group across 3 directories with 3 updates #5126
• 🔨 Bump prettier from 3.9.4 to 3.9.5 #5130
• 🔨 Bump eslint-plugin-cypress from 6.4.2 to 6.4.3 #5129
• 🔨 Bump vite from 8.1.4 to 8.1.5 #5132
• 🔨 Bump elkjs from 0.11.1 to 0.12.0 #5133
• 🔨 Bump the storybook group across 1 directory with 6 updates #5127
• 🔨 Bump cypress from 15.18.0 to 15.18.1 in /packages/e2e #5134
• 🔨 Add dependabot group for CodeQL actions #5117
• 🔨 Bump @carbon/react from 1.111.1 to 1.112.0 #5128
• 🔨 Bump the codeql group with 4 updates #5136
• 🔨 Bump the all group across 2 directories with 1 update #5138
• 🔨 Bump actions/setup-node from 6.4.0 to 7.0.0 #5137
• 🔨 Bump immutable from 5.1.5 to 5.1.9 #5139
• 🔨 Bump dompurify from 3.4.11 to 3.4.12 #5140
• 🔨 Bump the k8s group with 2 updates #5142
• 🔨 Bump actions/checkout from 7.0.0 to 7.0.1 #5145
• 🔨 Bump the codeql group with 4 updates #5143
• 🔨 Bump ossf/scorecard-action from 2.4.3 to 2.4.4 #5146
• 🔨 Bump the all group across 2 directories with 2 updates #5147
• 🔨 Bump globals from 17.7.0 to 17.8.0 #5150
• 🔨 Bump prettier from 3.9.5 to 3.9.6 #5149
• 🔨 Bump docker/login-action from 4.4.0 to 4.5.1 #5144
• 🔨 Bump linkify-it from 6.0.0 to 6.1.0 #5151
• 🔨 Bump @vitejs/plugin-react-swc from 4.3.1 to 4.3.2 #5152
• 🔨 Bump cypress from 15.18.1 to 15.19.0 in /packages/e2e #5153
• 🔨 Bump the storybook group across 1 directory with 6 updates #5148
• 🔨 Bump brace-expansion from 1.1.13 to 1.1.16 and from 5.0.6 to 5.0.8 #5154
• 🔨 chore: switch base image to ghcr.io/tektoncd/plumbing/static-base #5028
• 🔨 Bump cypress/factory from cd17b95 to 355e716 in /packages/e2e/base-image in the all group across 1 directory #5156
• 🔨 Bump the storybook group across 1 directory with 6 updates #5157
• 🔨 Bump vite from 8.1.5 to 8.2.0 #5160
• 🔨 Bump jsdom from 29.1.1 to 30.0.1 #5161
• 🔨 Bump @vitejs/plugin-react-swc from 4.3.2 to 4.3.3 #5162
• 🔨 Bump the codeql group with 4 updates #5163
• 🔨 Bump docker/login-action from 4.5.1 to 4.6.0 #5164
• 🔨 fix: upgrade golang.org/x/text to 0.39.0 (CVE-2026-56852) #5165
• 🔨 Update E2E tests to Pipelines v1.15.0 #5155
• 🔨 Bump @carbon/react from 1.112.0 to 1.113.0 #5159

Docs

• 📖 Add v0.70.0 to the releases doc #5098

Thanks

Thanks to these contributors who contributed to v0.71.0!

• ❤️ @AlanGreene
• ❤️ @anupamme
• ❤️ @dependabot[bot]
• ❤️ @vdemeester