What's Changed
- Podman v6 support by @navidys in #761
- Add keyboard shortcuts to command dialogs by @damiensawyer in #752
- BugFix (dialogs): prevent duplicate command-menu shortcut keys by @damiensawyer in #760
- Shortcuts key bugfix + command dialog header col change by @navidys in #763
- UI style minor update by @navidys in #764
- DOCS - SECURITY.md update by @navidys in #765
- Remote connections loading only from podman configuration by @navidys in #766
- e2e tests update by @navidys in #798
- Add ARM build release workflow by @tony-sol in #797
- Packit fix downstream build by @navidys in #729 and #731 and #795
- Golang update to 1.25.9 by @navidys in #794
- Bump go.podman.io/podman to v6.1.1 by @navidys in #799
- Bump go.podman.io/storage from 1.63.0 to 1.64.0 by @dependabot[bot] in #780
- Bump golang.org/x/crypto from 0.54.0 to 0.55.0 by @dependabot[bot] in #785
- Bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in #770
- Bump golang.org/x/crypto from 0.50.0 to 0.53.0 by @dependabot[bot] in #749
- Bump github.com/go-jose/go-jose/v4 from 4.0.5 to 4.1.4 by @dependabot[bot] in #734
- Bump github.com/rs/zerolog from 1.34.0 to 1.35.0 by @dependabot[bot] in #733
- Bump go.opentelemetry.io/otel from 1.36.0 to 1.41.0 by @dependabot[bot] in #743
- Bump github.com/rs/zerolog from 1.35.0 to 1.35.1 by @dependabot[bot] in #741
- Bump github.com/sigstore/fulcio from 1.7.1 to 1.8.5 by @dependabot[bot] in #714
- Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by @dependabot[bot] in #716
- Bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in #738
- Bump actions/checkout from 6 to 7 by @dependabot[bot] in #753
- Bump github.com/gdamore/tcell/v2 from 2.13.5 to 2.13.10 by @dependabot[bot] in #747
- Bump github.com/navidys/tvxwidgets from 0.12.1 to 0.14.0 by @dependabot[bot] in #757
- Bump actions/setup-go from 6 to 7 by @dependabot[bot] in #772
- Bump actions/setup-python from 6 to 7 by @dependabot[bot] in #773
- Bump actions/stale from 10 to 11 by @dependabot[bot] in #779
- Bump redhat-actions/push-to-registry from 2 to 3 by @dependabot[bot] in #782
- Bump redhat-actions/buildah-build from 2 to 3 by @dependabot[bot] in #781
- Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.2 by @dependabot[bot] in #793
- Bump github.com/moby/go-archive from 0.2.0 to 0.3.0 by @dependabot[bot] in #790
Security Fixes
- CVE-2026-39833 golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation
- CVE-2026-46597 golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs
- CVE-2026-39831 golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
- CVE-2026-41178 OpenTelemetry-Go: Denial of Service via oversized baggage headers
- CVE-2026-57231 Information disclosure via malicious container image environment variables
New Contributors
- @tony-sol made their first contribution in #797
- @damiensawyer made their first contribution in #752
Contributors
damiensawyer, navidys, and 2 other contributors