·
5 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Bug Fixes
- write fixture tars atomically [PR #712 @wagoodman]
- correct hardlink expectations for podman-built images [PR #701 @wagoodman]
Dependencies
95 dependency changes (49 updated, 41 added, 5 removed). 4 vulnerabilities remediated.
🟢 Remediated (4)
- GHSA-8wmf-6v46-5gfg (Low) — go.opentelemetry.io/otel/sdk
- GHSA-pg57-6jwg-q645 (Medium) — github.com/containerd/containerd/v2
- GO-2026-6179 (High) — golang.org/x/mod
- GO-2026-6180 (High) — golang.org/x/mod
Toolchains (1)
- Go minimum version:
1.26.3→1.26.8
Updated (49 packages)
- github.com/Microsoft/hcsshim
v0.15.0-rc.1→v0.15.0-rc.4 - github.com/anchore/go-logger
v0.1.1→v0.2.0 - github.com/aws/aws-sdk-go-v2
v1.41.2→v1.41.7 - github.com/aws/aws-sdk-go-v2/config
v1.32.10→v1.32.17 - github.com/aws/aws-sdk-go-v2/credentials
v1.19.10→v1.19.16 - github.com/aws/aws-sdk-go-v2/feature/ec2/imds
v1.18.18→v1.18.23 - github.com/aws/aws-sdk-go-v2/internal/configsources
v1.4.18→v1.4.23 - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2
v2.7.18→v2.7.23 - github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding
v1.13.5→v1.13.9 - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url
v1.13.18→v1.13.23 - github.com/aws/aws-sdk-go-v2/service/signin
v1.0.6→v1.0.11 - github.com/aws/aws-sdk-go-v2/service/sso
v1.30.11→v1.30.17 - github.com/aws/aws-sdk-go-v2/service/ssooidc
v1.35.15→v1.35.21 - github.com/aws/aws-sdk-go-v2/service/sts
v1.41.7→v1.42.1 - github.com/aws/smithy-go
v1.24.1→v1.25.1 - github.com/containerd/containerd/api
v1.11.1→v1.12.0 - github.com/containerd/containerd/v2
v2.3.5→v2.4.1(🟢 remediated GHSA-pg57-6jwg-q645) - github.com/containerd/log
v0.1.0→v0.2.0 - github.com/containerd/ttrpc
v1.2.8→v1.2.9 - github.com/containerd/typeurl/v2
v2.2.3→v2.3.0 - github.com/docker/cli
v29.8.0+incompatible→v29.8.1+incompatible - github.com/docker/docker-credential-helpers
v0.9.5→v0.9.8 - github.com/erofs/go-erofs
v0.3.0→v0.3.1 - github.com/felixge/httpsnoop
v1.0.4→v1.1.0 - github.com/go-logr/logr
v1.4.3→v1.4.4 - github.com/golang/mock
v1.1.1→v1.7.0-rc.1 - github.com/klauspost/compress
v1.19.2→v1.20.0 - github.com/mattn/go-colorable
v0.1.13→v0.1.14 - github.com/mattn/go-isatty
v0.0.17→v0.0.20 - github.com/moby/sys/user
v0.4.0→v0.4.1 - github.com/moby/sys/userns
v0.1.0→v0.2.1 - github.com/sirupsen/logrus
v1.9.4→v1.10.2 - github.com/ulikunitz/xz
v0.5.15→v0.5.16 - go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
v0.68.0→v0.71.0 - go.opentelemetry.io/otel
v1.44.0→v1.46.0 - go.opentelemetry.io/otel/metric
v1.44.0→v1.46.0 - go.opentelemetry.io/otel/sdk
v1.44.0→v1.46.0(🟢 remediated GHSA-8wmf-6v46-5gfg) - go.opentelemetry.io/otel/sdk/metric
v1.44.0→v1.46.0 - go.opentelemetry.io/otel/trace
v1.44.0→v1.46.0 - golang.org/x/crypto
v0.56.0→v0.57.0 - golang.org/x/mod
v0.39.0→v0.41.0(🟢 remediated GO-2026-6179, GO-2026-6180) - golang.org/x/net
v0.58.0→v0.59.0 - golang.org/x/sync
v0.22.0→v0.23.0 - golang.org/x/sys
v0.47.0→v0.48.0 - golang.org/x/term
v0.45.0→v0.46.0 - golang.org/x/text
v0.41.0→v0.42.0 - golang.org/x/tools
v0.49.0→v0.50.0 - google.golang.org/genproto/googleapis/rpc
v0.0.0-3dc84a4→v0.0.0-da73d73 - google.golang.org/protobuf
v1.36.12-0.f2248ac→v1.36.12
Added (41 packages)
- cyphar.com/go-pathrs
v0.2.5 - github.com/BurntSushi/toml
v1.6.0 - github.com/ProtonMail/go-crypto
v1.4.1 - github.com/VividCortex/ewma
v1.2.0 - github.com/acarl005/stripansi
v0.0.0-5a71ef0 - github.com/aws/aws-sdk-go-v2/internal/v4a
v1.4.24 - github.com/clipperhouse/uax29/v2
v2.7.0 - github.com/cloudflare/circl
v1.6.3 - github.com/containerd/log/otel
v0.1.0 - github.com/containerd/stargz-snapshotter/estargz
v0.18.2 - github.com/containers/libtrust
v0.0.0-c1716e8 - github.com/containers/ocicrypt
v1.3.2 - github.com/cyberphone/json-canonicalization
v0.0.0-19d51d7 - github.com/cyphar/filepath-securejoin
v0.7.0 - github.com/go-jose/go-jose/v4
v4.1.5 - github.com/google/go-intervals
v0.0.2 - github.com/json-iterator/go
v1.1.12 - github.com/klauspost/pgzip
v1.2.6 - github.com/mattn/go-runewidth
v0.0.27 - github.com/mattn/go-sqlite3
v1.14.48 - github.com/miekg/pkcs11
v1.1.2 - github.com/mistifyio/go-zfs/v4
v4.0.0 - github.com/moby/sys/capability
v0.4.0 - github.com/modern-go/concurrent
v0.0.0-bacd9c7 - github.com/modern-go/reflect2
v1.0.3-0.35a7c28 - github.com/opencontainers/selinux
v1.15.1 - github.com/proglottis/gpgme
v0.1.6 - github.com/secure-systems-lab/go-securesystemslib
v0.11.0 - github.com/sigstore/fulcio
v1.8.7 - github.com/sigstore/protobuf-specs
v0.5.1 - github.com/sigstore/sigstore
v1.10.8 - github.com/smallstep/pkcs7
v0.2.1 - github.com/stefanberger/go-pkcs11uri
v0.0.0-7828495 - github.com/tchap/go-patricia/v2
v2.3.3 - github.com/vbatts/tar-split
v0.12.3 - github.com/vbauerster/cupwriter
v0.0.4 - github.com/vbauerster/mpb/v8
v8.14.0 - github.com/youmark/pkcs8
v0.0.0-a2c0da2 - go.podman.io/image/v5
v5.41.2 - go.podman.io/storage
v1.64.1 - google.golang.org/genproto/googleapis/api
v0.0.0-da73d73
Removed (5 packages)
- github.com/aws/aws-sdk-go-v2/internal/ini
v1.8.4 - github.com/gogo/protobuf
v1.3.2 - github.com/golang/groupcache
v0.0.0-2c02b82 - github.com/moby/sys/sequential
v0.6.0 - go.opencensus.io
v0.24.0