v2.11.28

Changelog:

• Upgrade Tekton version to 0.68.0
• Upgrade Config Connector to 1.129.2
• Upgrade upload-pages-artifact dependency

Dependencies

Dependency	Version
Tekton	v0.68.0
Anthos Service Mesh	1.23.3
Config Connector	1.129.2

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.27

Changelog:

• Unpinned Cloud SDK image - to allow it to pick upgrades to Cloud SDK
• Added gcloud upgrade to integration and acceptance tests
• Changed ASM version to 1.23.3
• Changed Tekton version to 0.65.1
• Changed go version to 1.23
• Changed version of php-buildpack used from latest to v4.6.23 as a workaround to github.com/cloudfoundry/php-buildpack/issues/1110

Dependencies

Dependency	Version
Tekton	v0.65.1
Anthos Service Mesh	1.23.3
Config Connector	1.111.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.26

Changelog

• Changed: increased source package size limit from 1 GB to 3 GB

Dependencies

Dependency	Version
Tekton	v0.53.3
Anthos Service Mesh	1.19.3-asm.4+config1
Config Connector	1.111.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.25

Updated Tekton Pipelines dependency to the newest patch of current LTS release (v0.53.3)

v2.11.24

Changelog

• Changed: Upgraded server-side dependencies

Dependencies

Dependency	Version
Tekton	v0.53.2
Anthos Service Mesh	1.19.3-asm.4+config1
Config Connector	1.111.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.23

Changelog

• Changed: rolled back capitalization of env var names in kf set-env

Dependencies

Dependency	Version
Tekton	v0.47.1
Anthos Service Mesh	1.17.4-asm.2+config1
Config Connector	1.105.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.22

Changelog

• Changed: MEMORY_LIMIT environment variable was used twice in environment section of container specification. One of usages has been renamed to MEMORY_LIMIT_IN_MB to ensure that each variable name appears just once.

Risks and mitigations

• New environment variable MEMORY_LIMIT_IN_MB is automatically added to container specification. Workload's behaviour may be affected if it depends on the existence or value of such an environment variable.

Dependencies

Dependency	Version
Tekton	v0.47.1
Anthos Service Mesh	1.17.4-asm.2+config1
Config Connector	1.105.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.21

Changelog

• Security: Updated several packages with security updates.
• Security: Removed permissions on auditor roles that they could use to exec in containers.
• Changed: kf third-party-licenses no longer includes specific versions of dependencies to make automatic security patches smoother. Versions are available in the Kf source downloads for each release.
• Changed: When spaces are updated, apps in the affected space will be enqueued on a best-effort basis to avoid blocking the main queue.
• Added: Logging for upload time to kf push.
• Added: Logging for extracted file counts to file extraction build steps.
• Fixed: The featureflag controller will no longer enqueue all namespaces when feature flags are changed, significantly reducing the load on the controller.
• Added: Ability to change the snapshot modes for Kaniko for faster snapshots.
• Changed: The default snapshot mode for Kaniko builds in the v2 buildpacks is now fast rather than robust.

Risks and mitigations

• The new snapshot mode for Kaniko should result in reduced build times and I/O on build nodes. However, applications may see incorrect containers if they were overwriting system files during build in a way that doesn't change their timestamp or size. This shouldn't be the case for any standard applications that are using buildpacks correctly. If applications start to have errors, the behavior can be disabled by turning on the "Robust Build Snapshot" feature: https://kf.dev/docs/v2.11/operator/customizing/customizing-features/#robust-build-snapshots.

Dependencies

Dependency	Version
Tekton	v0.47.1
Anthos Service Mesh	1.17.4-asm.2+config1
Config Connector	1.105.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's safe to roll back this server version to the previous version.

v2.11.20

v2.11.20

Changelog

Added: Support for Tekton 0.47.1
Added: Support for KCC 1.105.0
Added: Support for ASM 1.17
Added: RBAC to manage service account to Space

Dependencies

Dependency	Version
Tekton	v0.47.1
Anthos Service Mesh	1.17.4-asm.2+config1
Config Connector	1.105.0

Compatibility

Kf should be upgraded first to v2.11.20 before upgrading Tekton and KCC.

v2.11.19

Changelog

• Added: The ability to override KSAs for applications. This allows consistent KSAs to be used for blue/green applications, and for integrations like GCP's workload identity to work with the KSAs in Kf -- supporting Kf users who want to move away from Service Brokers and use rotating creds.

Dependencies

Dependency	Version
Tekton	v0.32.1
Anthos Service Mesh	1.16.4-asm.2+config1
Config Connector	1.66.0

Compatibility

• It's safe to use this version of the Kf CLI with the previous server version.
• It's safe to use the previous version of the Kf CLI with this server version.
• It's not safe to roll back this server version to the previous version, apps may revert to their original service accounts.