Skip to content

Conversation

@waveywaves
Copy link
Collaborator

@waveywaves waveywaves commented Jan 29, 2026

Summary

Add release YAML templates for OpenShift Pipelines 1.15.4 patch release.

  • Stage and prod release YAMLs for core, cli, operator
  • FBC release YAMLs for OCP 4.14, 4.16-4.21 (dropped 4.12/4.15)
  • Added new OCP versions: 4.19, 4.20, 4.21
  • Snapshots from Jan 29 2026 builds (updated CSV + FBC catalog content)
  • Release type: RHSA

Files

Stage (10 files)

  • openshift-pipelines-core-1-15-4-release.yaml
  • openshift-pipelines-cli-1-15-4-release.yaml
  • openshift-pipelines-operator-1-15-4-release.yaml
  • openshift-pipelines-1-15-4-fbc-4-{14,16,17,18,19,20,21}-release.yaml

Prod (10 files)

  • Same structure as stage with prod releasePlans

- Stage and prod release YAMLs for core, cli, operator
- FBC release YAMLs for OCP 4.14, 4.16-4.21
- Snapshots from Jan 29 2026 builds (with updated CSV + FBC catalog)
- Jira fixed issues updated for 1.15.4 fixVersion
- Release type: RHBA (patch release)
…ype to RHSA

The 1.15.4 release includes fixes for:
- SRVKP-7344: jwt-go memory allocation CVE (jwt-go v4.5.2)
- SRVKP-7201: oauth2 memory consumption CVE (oauth2 v0.27.0)
- SRVKP-7198: x/crypto DoS CVE (x/crypto v0.35.0)

Since CVE fixes are included, advisory type changed from RHBA to RHSA
for core, cli, and operator release YAMLs in both stage and prod.
@waveywaves waveywaves force-pushed the add-release-yamls-1.15.4 branch from 41aa721 to 566a7e2 Compare January 29, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants