1.84.0

1.84.0

Release Date: February 14, 2026

Changes

• Upgrade golang-1.25-windows (1.25.7) - Author: App Platform Runtime Working Group CI Bot - SHA: 9f05bfb
• Upgrade golang-1.25-linux (1.25.7) - Author: App Platform Runtime Working Group CI Bot - SHA: ca187a8
• Merge pull request #388 from cloudfoundry/device-cgroup-rule - Author: Amin Jamali - SHA: 6a11d20
• Add device cgroup rule flag for garden job - Author: Maria Shaldybin - SHA: b62fa24
• Upgrade golang-1.25-windows (1.25.6) - Author: App Platform Runtime Working Group CI Bot - SHA: bebde95
• Upgrade golang-1.25-linux (1.25.6) - Author: App Platform Runtime Working Group CI Bot - SHA: 7204db0
• Update BusyBox to 1.37.0 to fix CVE-2022-48174 - Author: Naveen Sreeramachandra - SHA: 54411b5

Blob Updates

• Bumped blob 'busybox/busybox-1.36.1.tar.gz' to 'busybox/busybox-1.37.0.tar.gz'

Changes for guardian

• Merge pull request #497 from cloudfoundry/more-unmount-fix - Author: Karthick Udayakumar - SHA: 11bccf5
• Fix unmount in couple more places - Author: Maria Shaldybin - SHA: 45f3f74
• Merge pull request #496 from cloudfoundry/fix-device-busy - Author: Amelia Downs - SHA: 0cf6b3c
• Lazy unmount in tests in case if device is busy - Author: Maria Shaldybin - SHA: ea0166b
• Merge pull request #495 from cloudfoundry/revert-cgrou-changes - Author: Maria Shaldybin - SHA: 41caf13
• Revert "enable cgroupns on unified systems; mount cgroupv2 inside container" - Author: Maria Shaldybin - SHA: 646415b
• Revert "Do not include cgroups package on windows" - Author: Maria Shaldybin - SHA: a7356a5
• Merge pull request #494 from cloudfoundry/fix-cgroups-windows - Author: Maria Shaldybin - SHA: ef34276
• Do not include cgroups package on windows - Author: Maria Shaldybin - SHA: 5f80921
• Merge pull request #493 from plamen-bardarov/cgroup2_mount_in_container_cgroupns - Author: Maria Shaldybin - SHA: 8130b1d
• enable cgroupns on unified systems; mount cgroupv2 inside container - Author: Plamen Bardarov - SHA: d1e0751
• Increase the margin for test converting between cgroups v1 and v2 (#492) - Author: Maria Shaldybin - SHA: a1e044f
• Copy lib64 for image plugin tests (#491) - Author: Maria Shaldybin - SHA: ca0e4a7
• Include lib for binaries linked dynamically in rootfs - Author: Maria Shaldybin - SHA: 403a841

Go Package Updates for guardian

• Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.56.0' to 'v0.62.0'
• Bumped go.mod package 'code.cloudfoundry.org/clock' from 'v1.56.0' to 'v1.61.0'
• Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.53.0' to 'v0.57.0'
• Bumped go.mod package 'code.cloudfoundry.org/debugserver' from 'v0.79.0' to 'v0.85.0'
• Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20251217022801-f5e0d83c4fa9' to 'v0.0.0-20260211023825-fb202bdd1b27'
• Bumped go.mod package 'code.cloudfoundry.org/idmapper' from 'v0.0.0-20251217022935-d223132936ea' to 'v0.0.0-20260211024012-40002b8ede47'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.56.0' to 'v3.61.0'
• Bumped go.mod package 'code.cloudfoundry.org/localip' from 'v0.58.0' to 'v0.63.0'
• Bumped go.mod package 'cyphar.com/go-pathrs' from 'v0.2.2' to 'v0.2.3'
• Bumped go.mod package 'github.com/cloudfoundry/gosigar' from 'v1.3.112' to 'v1.3.116'
• Bumped go.mod package 'github.com/containerd/cgroups/v3' from 'v3.1.2' to 'v3.1.3'
• Bumped go.mod package 'github.com/coreos/go-systemd/v22' from 'v22.6.0' to 'v22.7.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/klauspost/compress' from 'v1.18.2' to 'v1.18.4'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'github.com/sirupsen/logrus' from 'v1.9.3' to 'v1.9.4'
• Bumped go.mod package 'go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp' from 'v0.64.0' to 'v0.65.0'
• Bumped go.mod package 'go.opentelemetry.io/otel' from 'v1.39.0' to 'v1.40.0'
• Bumped go.mod package 'go.opentelemetry.io/otel/metric' from 'v1.39.0' to 'v1.40.0'
• Bumped go.mod package 'go.opentelemetry.io/otel/trace' from 'v1.39.0' to 'v1.40.0'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'
• Bumped go.mod package 'google.golang.org/genproto/googleapis/rpc' from 'v0.0.0-20251222181119-0a764e51fe1b' to 'v0.0.0-20260209200024-4cfbd4190f57'
• Bumped go.mod package 'google.golang.org/grpc' from 'v1.78.0' to 'v1.79.1'

Go Package Updates for garden

• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.56.0' to 'v3.61.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Changes for garden-integration-tests

• Merge pull request #143 from navinms711/main - Author: Maria Shaldybin - SHA: eaf8307
• Update BusyBox to 1.37.0 to fix CVE-2022-48174 - Author: Naveen Sreeramachandra - SHA: 3b0c98e
• Add test to validate FD limits are applied to containers correctly - Author: Geoff Franks - SHA: 54f139f

Go Package Updates for garden-integration-tests

• Bumped go.mod package 'code.cloudfoundry.org/archiver' from 'v0.56.0' to 'v0.62.0'
• Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.53.0' to 'v0.57.0'
• Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20251217022801-f5e0d83c4fa9' to 'v0.0.0-20260211023825-fb202bdd1b27'
• Bumped go.mod package 'code.cloudfoundry.org/guardian' from 'v0.0.0-20251231023434-20d3d03800c4' to 'v0.0.0-20260213233528-11bccf5f5240'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.56.0' to 'v3.61.0'
• Bumped go.mod package 'github.com/cloudfoundry/gosigar' from 'v1.3.112' to 'v1.3.116'
• Bumped go.mod package 'github.com/coreos/go-systemd/v22' from 'v22.6.0' to 'v22.7.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'github.com/sirupsen/logrus' from 'v1.9.3' to 'v1.9.4'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Changes for grootfs

• Merge pull request #277 from cloudfoundry/fix-metrics-test - Author: Maria Shaldybin - SHA: 8c4e00cc368e82905f376e2d5c3b2e48d025e6fc
• adjust tolerance of downloaded image - Author: karthick udayakumar - SHA: 4ef977c3288997be16bede77d4705d3f264a36b1
• adjust tolerance of downloaded image - Author: karthick udayakumar - SHA: 8929d8f90ac733c7039573187e81040cb9573ff7

Go Package Updates for grootfs

• Bumped go.mod package 'code.cloudfoundry.org/commandrunner' from 'v0.53.0' to 'v0.57.0'
• Bumped go.mod package 'code.cloudfoundry.org/idmapper' from 'v0.0.0-20251217022935-d223132936ea' to 'v0.0.0-20260211024012-40002b8ede47'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.56.0' to 'v3.61.0'
• Bumped go.mod package 'github.com/docker/docker-credential-helpers' from 'v0.9.4' to 'v0.9.5'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'github.com/sirupsen/logrus' from 'v1.9.3' to 'v1.9.4'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Go Package Updates for idmapper

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Go Package Updates for dontpanic

• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Go Package Updates for garden-performance-acceptance-tests

• Bumped go.mod package 'code.cloudfoundry.org/garden' from 'v0.0.0-20251217022801-f5e0d83c4fa9' to 'v0.0.0-20260211023825-fb202bdd1b27'
• Bumped go.mod package 'code.cloudfoundry.org/lager/v3' from 'v3.56.0' to 'v3.61.0'
• Bumped go.mod package 'github.com/google/pprof' from 'v0.0.0-20251213031049-b05bdaca462f' to 'v0.0.0-20260202012954-cb029daf43ef'
• Bumped go.mod package 'github.com/onsi/ginkgo/v2' from 'v2.27.3' to 'v2.28.1'
• Bumped go.mod package 'github.com/onsi/gomega' from 'v1.38.3' to 'v1.39.1'
• Bumped go.mod package 'golang.org/x/mod' from 'v0.31.0' to 'v0.33.0'
• Bumped go.mod package 'golang.org/x/net' from 'v0.48.0' to 'v0.50.0'
• Bumped go.mod package 'golang.org/x/sys' from 'v0.39.0' to 'v0.41.0'
• Bumped go.mod package 'golang.org/x/text' from 'v0.32.0' to 'v0.34.0'
• Bumped go.mod package 'golang.org/x/tools' from 'v0.40.0' to 'v0.42.0'

Bosh Job Spec changes:

diff --git a/jobs/garden/spec b/jobs/garden/spec
index 86c8153f..40e7ffec 100644
--- a/jobs/garden/spec
+++ b/jobs/garden/spec
@@ -86,7 +86,7 @@ properties:
 
   garden.default_container_rootfs:
     description: "path to the rootfs to use when a container specifies no rootfs"
-    default: /var/vcap/packages/busybox/busybox-1.36.1.tar
+    default: /var/vcap/packages/busybox/busybox-1.37.0.tar
 
   garden.graph_cleanup_threshold_in_mb:
     description: "DEPRECATED in favour of grootfs.reserved_space_for_other_jobs_in_mb."
@@ -202,6 +202,10 @@ properties:
     description: AppArmor profile to use for unprivileged container processes
     default: garden-default
 
+  garden.device_cgroup_rules:
+    description: Device cgroup rules that will be applied to privileged containers. By default loop devices are allowed for privileged containers.
+    default: ["b 7:* rwm", "c 10:237 rwm"]
+
   # We believe this defaults to false to help concourse: https://github.com/cloudfoundry/garden-runc-release/releases/tag/v1.5.0
   # For diego/cf, this should be set to true
   garden.cleanup_process_dirs_on_wait:

✨ Built with go 1.25.7

Full Changelog: v1.83.0...v1.84.0

Resources

• Download release 1.84.0 from bosh.io.