Shipwright Build release v0.12.0

Release changes since v0.11.0

Features

#1398 by @apoorvajagtap: The Strategy struct does not have an APIVersion field anymore.

#1384 by @SaschaSchwarze0: Installing a nightly release now requires you to run a post-script that sets up the TLS certificate of the conversion webhook

#1370 by @apoorvajagtap: The BuildAh sample build strategies now do not anymore run privileged containers

#1342 by @SaschaSchwarze0: The shipwright-build namespace is now configured to enforce restricted PodSecurity. The shipwright-build-controller deployment was updated to fulfill all requirements.

#1323 by @SaschaSchwarze0: Buildpacks sample build strategies are updated to the latest Heroku version and a newer platform API version

#1302 by @qu1queee: Introduce conversion-webhook to convert SHP Custom Resources from v1beta1 to v1alpha1.

#1268 by @SaschaSchwarze0: Introduce a common base image for all supporting steps

#1266 by @SaschaSchwarze0: You can now define a securityContext on build strategy level to control the runAs user for all steps including the shipwright-managed steps. This allows you to use any runAs user for your build strategy steps while still being able to run without any runAsRoot steps.

#1235 by @qu1queee: API additions: Introduce Shipwright Build v1beta1 API types

#1046 by @SaschaSchwarze0: Shipwright is now capable of pushing the image built by the strategy steps to the container registry

Fixes

#1407 by @qu1queee: Downgrade k8s.io/utils/ptr to k8s.io/utils/pointer due to dependency conflicts with controller-runtime pkg

#1390 by @isibeni: The logic to detect whether a BuildRun failed due to an evicted Pod was improved

#1277 by @SaschaSchwarze0: The platform support for the ko build strategy is functional again

#1239 by @mjgallag: Fix buildkit cluster build strategy's cache import from insecure registry.

#1219 by @SaschaSchwarze0: The ko sample build strategy now makes the source directory a Git safe directory so that Go builds can retrieve version control information

#1176 by @HeavyWombat: The Git source step of a build strategy now returns a more elaborate error in case basic authentication (username and password) are used in combination with a HTTP URI. Instead of a generic error, an error message with an explanation is presented to be more clear and helpful. Also, inline credentials used in the URL will be redacted in the log output.

#1156 by @dalbar: Fixes cancelation of buildruns without a build reference.

API Changes

#1403 by @qu1queee: Add conversion logic for local type of sources. BuildRun CRs now support a .spec.source object that can only be of the type Local. Build CRs now make it explicit on support for the .spec.source of the type Local.

#1266 by @SaschaSchwarze0: You can now define a securityContext on build strategy level to control the runAs user for all steps including the shipwright-managed steps. This allows you to use any runAs user for your build strategy steps while still being able to run without any runAsRoot steps.

#1235 by @qu1queee: API additions: Introduce Shipwright Build v1beta1 API types

#1046 by @SaschaSchwarze0: Shipwright is now capable of pushing the image built by the strategy steps to the container registry

Docs

#1403 by @qu1queee: Add conversion logic for local type of sources. BuildRun CRs now support a .spec.source object that can only be of the type Local. Build CRs now make it explicit on support for the .spec.source of the type Local.

#1388 by @apoorvajagtap: Documentation was updated to describe the beta version of the custom resources

#1196 by @qu1queee: Marks BuildSpec volumes description field as deprecated.

#1117 by @dheerajodha: Deprecated support for passwords. Use Personal Access Tokens instead.

Misc

#1401 by @SaschaSchwarze0: Updates google.golang.org/grpc to address CVE-2023-44487

#1397 by @SaschaSchwarze0: The supported Kubernetes releases are now 1.25 to 1.28. The supported Tekton versions are 0.47 and 0.50

#1371 by @qu1queee: Add action to cleanup nightly assets regularly

#1362 by @SaschaSchwarze0: The BuildKit sample build strategy now does not cause BuildKit to tar the image to then untar it

#1361 by @SaschaSchwarze0: The Kaniko sample build strategy now uses the --snapshot-mode and --tar-path command line flags instead of the deprecated --snapshotMode and --tarPath

#1351 by @SaschaSchwarze0: Golang 1.20 is used to compile

#1202 by @SaschaSchwarze0: Updated the Kubernetes support to v1.24, v1.25, and v1.26, and Tekton to v0.41 and v0.44.