Skip to content

chore(deps): bump github.com/openshift-pipelines/pipelines-as-code from 0.46.0 to 0.47.0#3460

Merged
tekton-robot merged 1 commit into
mainfrom
dependabot/go_modules/github.com/openshift-pipelines/pipelines-as-code-0.47.0
Jun 3, 2026
Merged

chore(deps): bump github.com/openshift-pipelines/pipelines-as-code from 0.46.0 to 0.47.0#3460
tekton-robot merged 1 commit into
mainfrom
dependabot/go_modules/github.com/openshift-pipelines/pipelines-as-code-0.47.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Bumps github.com/openshift-pipelines/pipelines-as-code from 0.46.0 to 0.47.0.

Release notes

Sourced from github.com/openshift-pipelines/pipelines-as-code's releases.

v0.47.0

Pipelines as Code version v0.47.0

OpenShift Pipelines as Code v0.47.0 has been released 🥳

✨ Major changes and Features

  • CEL string and list extension functions: Unlocks join(), replace(), substring(), split(), trim(), upperAscii(), lowerAscii() and other standard CEL string/list operations in on-cel-expression annotations and {{ cel: }} template expressions.
  • GitHub API rate limit Kubernetes event: Emits a Kubernetes Repository event when the GitHub API rate limit is exhausted, surfacing the issue to operators via kubectl describe.

🐛 Bug Fixes

  • Bitbucket Data Center: detect file changes on merged PR push: Fixes on-path-change and on-cel-expression filters silently skipping PipelineRuns when the push event is a merge commit with no listed file changes; the Bitbucket /changes API is now used to diff the actual modified files.
  • Skip key=value arguments as PipelineRun names in /test: When a user posts /test custom1=value, the key=value argument was incorrectly treated as a PipelineRun name and bypassed on-comment annotation matching; it is now correctly passed through as a parameter.
  • Label value sanitization and normalization: Ensures Kubernetes label values (e.g. branch names) are sanitized to comply with the 63-character limit and valid character set rules, preventing label validation errors.
  • Reconciler: skip watcher status updates: Fixes a regression introduced in #2667 that caused forbidden errors on clusters where the watcher service account lacks pipelineruns/status update permissions; the generated status sync is now disabled for the watcher.
  • GitLab: post informative comment on inaccessible fork MR: When a merge request originates from a fork the bot cannot access, PAC now posts a comment on the MR explaining the situation rather than silently failing.

⚙️ Chores

  • Fix documentation reference in formatting package: Corrected the godoc comment in CleanValueKubernetes to point to the right Kubernetes label specification.
  • Update golangci-lint configuration: Replaced deprecated gomodguard linter with gomodguard_v2 and disabled the inline govet check to reduce false positives.
  • Update golangci-lint to v2.12.2: Bumped the CI golangci-lint image to match the updated linter configuration.

Installation

To install this version you can install the release.yaml with kubectl for your platform :

Openshift

kubectl apply -f https://github.com/tektoncd/pipelines-as-code/releases/download/v0.47.0/release.yaml

Kubernetes

kubectl apply -f https://github.com/tektoncd/pipelines-as-code/releases/download/v0.47.0/release.k8s.yaml
</tr></table> 

... (truncated)

Commits
  • 529a725 fix(gitlab): post MR comment on inaccessible fork
  • 4c7b0e0 fix(reconciler): skip watcher status updates
  • 2b9a6f1 ci: update golangci-lint to v2.12.2
  • 9db1fec chore: update golangci linter configuration
  • 445941b feat(cel): enable string and list extension functions in CEL expressions
  • f841d2d fix(bitbucket-datacenter): detect changes on merged PR push
  • f05bcd0 fix: point to the right doc in formatting
  • a43ae55 fix: remove unneeded check
  • 5226968 fix: linter complaints
  • e75942f fix: move from RFC1123 to LabelValue
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. labels Jun 2, 2026
@tekton-robot tekton-robot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Jun 2, 2026
@jkhelil
Copy link
Copy Markdown
Member

jkhelil commented Jun 3, 2026

@dependabot rebase

Bumps [github.com/openshift-pipelines/pipelines-as-code](https://github.com/openshift-pipelines/pipelines-as-code) from 0.46.0 to 0.47.0.
- [Release notes](https://github.com/openshift-pipelines/pipelines-as-code/releases)
- [Commits](tektoncd/pipelines-as-code@v0.46.0...v0.47.0)

---
updated-dependencies:
- dependency-name: github.com/openshift-pipelines/pipelines-as-code
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/openshift-pipelines/pipelines-as-code-0.47.0 branch from 9a2a45f to 3980d02 Compare June 3, 2026 05:38
@aiagentforlab-source
Copy link
Copy Markdown

/approve

@aiagentforlab-source
Copy link
Copy Markdown

/lgtm

@tekton-robot
Copy link
Copy Markdown
Contributor

@aiagentforlab-source: changing LGTM is restricted to collaborators

Details

In response to this:

/lgtm

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@jkhelil
Copy link
Copy Markdown
Member

jkhelil commented Jun 3, 2026

/approve

@jkhelil
Copy link
Copy Markdown
Member

jkhelil commented Jun 3, 2026

/lgtm

@tekton-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aiagentforlab-source, jkhelil

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@tekton-robot tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 3, 2026
@tekton-robot tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Jun 3, 2026
@tekton-robot tekton-robot merged commit cdcccd7 into main Jun 3, 2026
16 checks passed
@dependabot dependabot Bot deleted the dependabot/go_modules/github.com/openshift-pipelines/pipelines-as-code-0.47.0 branch June 3, 2026 11:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Used by dependabot - identifies all PRs created by dependabot kind/misc Categorizes issue or PR as a miscellaneuous one. lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesnt merit a release note. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants