1.4.1

This release addresses two security issues in the Containerization package:

• GHSA-4587-w9mm-xxvh - OCI image load follows symlinks for oci-layout and index.json outside the extraction directory
• GHSA-rgqp-277h-gcwj - UnixType.init(path:) uses a macOS length limit longer than the sockaddr_un.sun_path buffer it copies into

There was no 1.4.0 release, we had to discard that tag so this release contains every change since 1.3.1.

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • New container clean command
  • 👩‍💻 container system status now reports host, client, paths, and resources
  • JSON output no longer escapes forward slashes
  • Updated Containerization to 0.45.0

What's Changed

• Avoid escaping slashes in JSON output by @taljeon in #2205
• Enhance container system status command output by @muk2 in #1769
• Updates containerization to 0.43.0. by @jglogan in #2208
• [container]: add clean command by @saehejkang in #1949
• fix: handle container clean failing on read-only named volume mounts by @zdk in #2228
• ci: bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in #2226
• Fix a compilation error by @dkovba in #2234
• Remove security markdown in favor of inherited security guidelines by @katiewasnothere in #2249
• docs: remove broken troubleshooting.md link in technical overview by @zdk in #2227
• Fix compilation warnings by @dkovba in #2235
• docs: Add k8s plugin reference by @egernst in #2244
• Bump CZ to 0.45.0 by @realrajaryan in #2250

New Contributors

• @taljeon made their first contribution in #2205
• @muk2 made their first contribution in #1769

Full Changelog: 1.3.1...1.4.1