chore: bump tekton pipeline dependency to v1.6.1

[l-qing]

• Upgrade github.com/tektoncd/pipeline from v1.6.0 to v1.6.1 in go.mod
• Refresh transitive module versions including grpc and envoy related packages
• Regenerate go.sum entries to keep dependency checksums in sync

Changes

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

• Includes tests (if functionality changed/added)
• Run the code checkers with make check
• Regenerate the manpages, docs and go formatting with make generated
• Commit messages follow commit message best practices

See the contribution guide
for more details.

Release Notes

[alaudabot]

🤖 AI Code Review

Property	Value
Model	z-ai/glm-4.7:free
Style	strict
Issues Found	3
Warnings/Errors	0
Personalized Prompt	❌ No
Reviewed at	2026-03-20 02:21:54 UTC

---

Summary

This PR updates the tektoncd/pipeline dependency from v1.6.0 to v1.6.1 along with transitive dependencies including cel.dev/expr, envoyproxy, grpc, and opentelemetry. The changes are primarily in go.mod/go.sum and the vendor directory containing regenerated protobuf code. Given the dependency-only nature with no application code changes, this PR is a routine maintenance update.

Review Statistics

Category	Count
Critical Issues	0
Warnings	2
Suggestions	1
Files Reviewed	178

Critical Issues

No critical issues found.

Warnings

• [go.mod:276] cel.dev/expr updated from v0.24.0 to v0.25.1 - this crosses a minor version boundary. Verify that CEL expression evaluation behavior remains compatible in your use cases.

• [go.mod:323] google.golang.org/grpc updated from v1.78.0 to v1.79.3 - this is a notable version jump (~1 minor version). Ensure grpc connectivity and any custom interceptors remain compatible.

Suggestions

• [go.mod] Consider running your full test suite after merging this dependency update to verify no regressions, especially for CEL expression evaluation and gRPC-based Tekton API interactions.

Positive Feedback

• Clean dependency version bump following standard Go module practices
• All transitive dependency hashes properly updated in go.sum
• Vendored protobuf code regenerated consistently with updated protoc-gen-go v1.36.10
• Appropriate use of chore: commit type for dependency maintenance

---

Note: This review focused on dependency changes as the PR contains no application code modifications. The vendor directory changes are mechanically generated from dependency updates.

---

ℹ️ About this review

This review was automatically generated using the run-actions workflow.

• Shared prompt: .github/prompts/code-review.md
• No repository-specific prompt configured

[alaudabot]

[WARNING] dependency/version-jump

google.golang.org/grpc updated from v1.78.0 to v1.79.3 - notable version jump. gRPC major version changes may affect connectivity behavior, interceptors, or API compatibility.

[lentil1016]

/lgtm