v1.51.2

What's Changed

• [release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990
• [release-1.51] Backport CVE-2024-9676 fix by @mheon in #2146

Full Changelog: v1.51.1...v1.51.2

v1.55.1

What's Changed

• [release-1.55] backport fix for CVE-2026-9676 by @mheon in #2135

Full Changelog: v1.55.0...v1.55.1

v1.55.0

What's Changed

• Bump to v1.54.0 by @TomSweeneyRedHat in #1925
• Fix assignment of quota IDs for XFS quotas by @mheon in #1921
• Fix locking bugs from #1916, and one more by @mtrmac in #1927
• fix(deps): update module github.com/burntsushi/toml to v1.4.0 by @renovate in #1930
• composefs: add parent directory if missing by @giuseppe in #1929
• chore(deps): update dependency containers/automation_images to v20240529 by @renovate in #1932
• overlay: remove unreachable code by @giuseppe in #1934
• chunked: ignore the tar-split data if digest is empty by @giuseppe in #1936
• chunked: change auto merge threshold to 1024 by @giuseppe in #1937
• Trivial patches to minimize patches needed by NetBSD by @coypoop in #1935
• archive: always fix mode for root dir with ForceMask by @akihikodaki in #1931
• compression: Add some doc comments by @cgwalters in #1939
• chunked: fix deadlock by always consuming tar-split by @giuseppe in #1942
• dump: replace unicode package with custom functions by @giuseppe in #1940
• fix(deps): update module golang.org/x/sys to v0.21.0 by @renovate in #1946
• dump: use the sanitized path for root check by @giuseppe in #1948
• chunked: Set O_CLOEXEC by @cgwalters in #1947
• graphdriver: Clarify name of fsverity const, tweak docs by @cgwalters in #1949
• dump: handle duplicates by @giuseppe in #1951
• chunked: refactor file system ops in a new file and add some tests by @giuseppe in #1952
• chunked: Add helpers for /proc/self/fd accesses by @cgwalters in #1956
• chunked: use Fprint instead of Fprintf by @giuseppe in #1960
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.4 by @renovate in #1961
• Fix build failures by @mtrmac in #1954
• chunked: improve error messages for file system operations by @giuseppe in #1957
• compression: Fix Deprecated: and actually comment out unused bits by @cgwalters in #1958
• chunked: Fix two minor linter issues by @cgwalters in #1959
• overlay: extend overlayFileGetter to understand composefs by @giuseppe in #1950
• pkg/archive.statDifferent(): care about mtime for directories by @nalind in #1962
• chunked: add fuzzing tests for the cache by @giuseppe in #1963
• overlay: Fix root directoy state with extended attributes by @akihikodaki in #1953
• archive: use pigz|zstd if available by @giuseppe in #1964
• chunked: use existing buffer for io.Copy by @giuseppe in #1965
• chunked: honor store configuration by @giuseppe in #1966
• pkg/archive.statDifferent(): fix the previous change by @nalind in #1968
• Decide on tar-split usage based on trusted data in TOC by @mtrmac in #1967
• fix(deps): update module github.com/klauspost/compress to v1.17.9 by @renovate in #1969
• Fix warnings (SA9003, SA4023, SA1019) by @Honny1 in #1973
• Fix deprecated use of pwalk.Walk (SA1019) by @Honny1 in #1975
• Fix deprecated use of io/ioutil (SA1019) by @Honny1 in #1977
• chunked: honor the ForceMask setting by @giuseppe in #1971
• overlay: drop check for mount_program AND force_mask by @giuseppe in #1970
• Fix deprecated use of mountinfo.PidMountInfo (SA1019) by @Honny1 in #1981
• Fix deprecated use of capability.NewPid (SA1019) by @Honny1 in #1979
• Fix deprecated use of tar.TypeRegA (SA1019) by @Honny1 in #1980
• overlay: check for options != nil by @giuseppe in #1984
• Fix the issue where compiling containers-storage with exclude_disk_qu… by @xuegege5290 in #1982
• store: drop remap-[ug]ids by @giuseppe in #1976
• Fix the surrounding loop is unconditionally terminated (SA4004) by @Honny1 in #1986
• vfs: honor the specified mappings by @giuseppe in #1988
• Fix TestSafeLink on ARM64 by @Honny1 in #1989
• Add comented out example definition of driver_priority to storage.conf by @dcermak in #1987
• Fix deprecated use of hdr.Xattrs (SA1019) by @Honny1 in #1985
• chunked: skip setting time if empty by @giuseppe in #1996
• Move junkfile to ${TESTDIR} directory by @Honny1 in #1995
• Enable staticcheck linter by @Honny1 in #1991
• fix(deps): update module golang.org/x/sys to v0.22.0 by @renovate in #2000
• check: mount layer as read-only by @giuseppe in #1997
• Solve errcheck warnings (part 2) by @Honny1 in #1999
• Solve errcheck warnings (part 4) by @Honny1 in #2003
• Solve errcheck warnings (part 5) by @Honny1 in #2006
• Solve errcheck warnings (part 0) by @Honny1 in #1993
• Solve errcheck warnings (part 1) by @Honny1 in #1998
• Solve errcheck warnings (part 3) by @Honny1 in #2002
• chunked: store compressed digest if validated by @giuseppe in #2001
• Don't discard fields of LayerOptions by @mtrmac in #2008
• Clean up some warnings by @mtrmac in #2010
• Enable errcheck linter by @Honny1 in #2011
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.0 by @renovate in #2013
• drivers: drop modprobe calls by @giuseppe in #2021
• archive: report error from input stream by @giuseppe in #2012
• archive: improve filter error reporting by @giuseppe in #2025
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.5 by @renovate in #2029
• chunked, composefs: fix decoding of xattrs by @giuseppe in #2037
• fix(deps): update module github.com/moby/sys/mountinfo to v0.7.2 by @renovate in #2034
• Ensure chunked TOC and tar-split metadata are consistent by @mtrmac in #2035
• chunked: do not write cache file to RO store by @giuseppe in #2031
• overlay: use private merged directory for AIS by @giuseppe in #2036
• loopback: fix race condition opening loopback device by @giuseppe in #2039
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 by @renovate in #2040
• Add some error context in Changes codepaths by @cgwalters in #2043
• overlay: improve some composefs errors by @giuseppe in #2044
• fix(deps): update module github.com/moby/sys/user to v0.2.0 by @renovate in #2045

New Contributors

• @coypoop made their first contribution in #1935
• @akihikodaki made their first contribution in #1931
• @cgwalters made their first contribution in #1939
• @Honny1 made their first contribution in #1973
• @xuegege5290 made their first contribution in #1982

Full Changelog: v1.54.0...v1.55.0

v1.45.7

What's Changed

• [release-1.45] quota: unlink tmp file before creating it by @TomSweeneyRedHat in #1710
• [release-1.45] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1992

Full Changelog: v1.45.6...v1.45.7

v1.51.1

[release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990

Full Changelog: v1.51.0...v1.51.1

v1.54.0

What's Changed

• Bump to v1.53.0, and then to v1.53.1-dev by @TomSweeneyRedHat in #1852
• build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 by @dependabot in #1855
• overlay: create the merged path only if it does not exist by @giuseppe in #1858
• Cirrus-CI: Give success a name by @cevich in #1860
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in #1861
• chunked: skip file metadata for composefs-like links by @giuseppe in #1862
• chore(deps): update dependency containers/automation_images to v20240320 by @renovate in #1866
• chunked: use mmap to load cache files by @giuseppe in #1857
• build(deps): bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12 by @dependabot in #1874
• store: improve error from MountImage() by @giuseppe in #1873
• fix(deps): update module golang.org/x/sys to v0.19.0 by @renovate in #1876
• store: lock stores before calling Exists by @giuseppe in #1877
• chunked: fix unmarshaling of file names by @giuseppe in #1879
• bring read mappings proc into c/storage by @kannon92 in #1882
• build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 by @dependabot in #1880
• fileutils: new function to check for path existence by @giuseppe in #1875
• fileutils: make (Le|E)xists return os.PathError by @giuseppe in #1883
• Revert "bring read mappings proc into c/storage" by @giuseppe in #1884
• Refactor to make it clearer that we return the validated TOC value by @mtrmac in #1887
• Remove devicemapper storage driver by @kolyshkin in #1622
• pkg/parsers/kernel: simplify by @kolyshkin in #1889
• composefs: return mkcomposefs stderr as part of error by @Luap99 in #1890
• chunked: store cache as binary and use a bloom filter by @giuseppe in #1870
• chunked: fix escape of space by @giuseppe in #1895
• chunked: store original tar size for converted layers by @giuseppe in #1893
• Make ZstdChunkedFooterData write-only by @mtrmac in #1901
• chunked: fix divide by zero in bloom filter by @giuseppe in #1904
• chunked: downgrade loading cache file msg to info by @giuseppe in #1906
• Update to Go 1.21 by @mtrmac in #1907
• CI VMs: bump to new versions with tmpfs /tmp by @edsantiago in #1911
• build(deps): bump github.com/Microsoft/hcsshim from 0.12.0-rc.3 to 0.12.3 by @dependabot in #1898
• Remove dependabot, we use renovate now by @rhatdan in #1914
• chunked: skip cache file for non-partial layers by @giuseppe in #1910
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 by @renovate in #1917
• fix(deps): update module golang.org/x/sys to v0.20.0 by @renovate in #1918
• Update idtools.go by @paulcalabro in #1919
• overlay: lock staging directories by @giuseppe in #1916
• pkg/unshare: fix implicit declaration of basename function by @nmeum in #1920
• chore(deps): update dependency containers/automation_images to v20240513 by @renovate in #1922
• Ignore failure to ignore thinpool keys by @rhatdan in #1908
• [Additional Layer Store] Use TOCDigest as ID of each layer (patch for c/storage) by @ktock in #1924
• Move the tar-split digest into the TOC by @mtrmac in #1902

New Contributors

• @paulcalabro made their first contribution in #1919
• @nmeum made their first contribution in #1920

Full Changelog: v1.53.0...v1.54.0

v1.53.0

What's Changed

• overlay: use the default mode for the root directory by @giuseppe in #1799
• Bump to v1.52.0 and then 1.52.1-dev by @TomSweeneyRedHat in #1803
• chore(deps): update dependency containers/automation_images to v20240102 by @renovate in #1802
• overlay: move the fs-verity measurement to the chunked package by @giuseppe in #1804
• composefs: some fixes by @giuseppe in #1806
• Store: add ImageDirectory() and ImageRunDirectory() by @nalind in #1807
• fix(deps): update module github.com/klauspost/compress to v1.17.5 by @renovate in #1808
• Fix windows runtime dir by @ashley-cui in #1810
• homedir: use containers/storage on Windows by @giuseppe in #1812
• Run codespell on code by @rhatdan in #1809
• chunked: store UncompressedDigest if validated by @giuseppe in #1813
• fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] by @renovate in #1815
• Switch from libcontainer users package to moby/sys/user by @mheon in #1817
• fix(deps): update module github.com/klauspost/compress to v1.17.6 by @renovate in #1818
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.0-rc.3 by @renovate in #1819
• overlay: fix build of composefs without cgo by @giuseppe in #1824
• build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #1823
• chunked: report TOCDigest for converted layers by @giuseppe in #1825
• build(deps): bump github.com/opencontainers/runtime-spec from 1.1.0 to 1.2.0 by @dependabot in #1831
• Extend PutLayer to optimize reusing data from existing layers by @mtrmac in #1830
• Fix compilation on non-Linux by @mtrmac in #1832
• store: new API ApplyStagedLayer by @giuseppe in #1826
• storage: enable partial images by default by @giuseppe in #1833
• Fix missing newline from stdout of create-container command by @edbaunton in #1834
• overlay: drop FHGFSFs from network file systems by @giuseppe in #1840
• Synchronise documentation for convert_images flag by @edbaunton in #1835
• fix(deps): update module github.com/klauspost/compress to v1.17.7 by @renovate in #1841
• pkg/archive: avoid user lookups when generating tarball by @giuseppe in #1837
• overlay: delete backup file by @giuseppe in #1842
• Chunked cleanups by @mtrmac in #1844
• overlay: ignore chown errors in additionalimagestore by @giuseppe in #1828
• chunked: preserve the original value for symlinks by @giuseppe in #1845
• chunked: add chunk size to cache file by @giuseppe in #1843
• Revert commit that breaks podman backwards compatibility by @Luap99 in #1848
• Stop putting user.overlay.* into container layer by @ChristopherHX in #1847
• store: simplify imagestore implementation by @giuseppe in #1784
• chunked: improve function to merge chunks by @giuseppe in #1846
• fix(deps): update module github.com/stretchr/testify to v1.9.0 by @renovate in #1850

New Contributors

• @edbaunton made their first contribution in #1834
• @ChristopherHX made their first contribution in #1847

Full Changelog: v1.52.0...v1.53.0

v1.52.0

What's Changed

• fix(deps): update module github.com/klauspost/compress to v1.17.3 by @renovate in #1760
• Bump to v1.51.0 and then v1.51.1-dev by @TomSweeneyRedHat in #1758
• Embed text from VERSION for use in Store.Version() by @nalind in #1761
• chore(deps): update dependency containers/automation_images to v20231116 by @renovate in #1762
• Consolidate XDG_RUNTIME code by @giuseppe in #1740
• On Read/only additional stores, ignore Read/Only errors by @rhatdan in #1763
• fix(deps): update module golang.org/x/sys to v0.15.0 by @renovate in #1764
• Don't expose account names when creating tar files with hard-coded account IDs by @mtrmac in #1765
• chunked: reject unexpected data after TOC by @giuseppe in #1766
• fix(deps): update module github.com/klauspost/compress to v1.17.4 by @renovate in #1767
• layers: add new TOCDigest attribute by @giuseppe in #1719
• pkg/unshare: return true from IsRootless if user is not root by @dfr in #1770
• composefs: enable it at runtime by @giuseppe in #1769
• Fedora 39 is released by @rhatdan in #1775
• chunked: flush the input tarball to the output by @giuseppe in #1772
• chunked: disallow both zstd:chunked and eStargz TOCs by @giuseppe in #1778
• chore(deps): update dependency containers/automation_images to v20231208 by @renovate in #1777
• refactor: change socket warning to info by @pohlt in #1776
• build(deps): bump github.com/Microsoft/hcsshim from 0.12.0-rc.1 to 0.12.0-rc.2 by @dependabot in #1783
• build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.11 by @dependabot in #1786
• build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 by @dependabot in #1790
• fix(deps): update module golang.org/x/sys to v0.16.0 by @renovate in #1792
• Move minimal golang to v1.20 by @rhatdan in #1791
• graphtest: skip tests on insufficient permissions by @mvo5 in #1780
• homedir: drop check for ConfigHome mode by @giuseppe in #1793
• chunked: validate converted images by @giuseppe in #1794
• fix: "undefined: quota.BackingFsBlockDeviceLink" on non-cgo build by @ilya-lesikov in #1800

New Contributors

• @pohlt made their first contribution in #1776
• @mvo5 made their first contribution in #1780
• @ilya-lesikov made their first contribution in #1800

Full Changelog: v1.51.0...v1.52.0

v1.51.0

What's Changed

• Bump to v1.50.2 by @rhatdan in #1711
• overlay, composefs: mount loop device RO by @giuseppe in #1712
• Run codespell on code by @rhatdan in #1714
• fix(deps): update module github.com/klauspost/compress to v1.17.0 by @renovate in #1718
• store: serialize container deletion by @giuseppe in #1722
• pkg/system: reduce retry timeout for EnsureRemoveAll by @giuseppe in #1723
• overlay, composefs: use data-only lower layers by @giuseppe in #1713
• store: call RecordWrite() before graphDriver Cleanup() by @giuseppe in #1724
• fix(deps): update module golang.org/x/sys to v0.13.0 by @renovate in #1725
• store: fix error message by @giuseppe in #1726
• fix(deps): update module github.com/klauspost/compress to v1.17.1 by @renovate in #1730
• overlay, composefs: use mkcomposefs to generate composefs by @giuseppe in #1727
• overlay: select additional image store path when using image store by @sstosh in #1732
• overlay: do not precreate the composefs layers dir by @giuseppe in #1734
• fix(deps): update module github.com/klauspost/compress to v1.17.2 by @renovate in #1736
• chore(deps): update dependency containers/automation_images to v20231004 by @renovate in #1731
• Don't call UpdateLayerIDMap when creating a layer with no parent by @mtrmac in #1735
• build(deps): bump google.golang.org/grpc from 1.57.0 to 1.57.1 by @dependabot in #1738
• archive: fix mode for root dir with ForceMask by @giuseppe in #1739
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.15.0 by @renovate in #1741
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.15.1 by @renovate in #1742
• fix(deps): update module github.com/opencontainers/runc to v1.1.10 by @renovate in #1745
• fix(deps): update module github.com/moby/sys/mountinfo to v0.7.0 by @renovate in #1748
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.0-rc.1 by @renovate in #1746
• fix(deps): update module golang.org/x/sys to v0.14.0 by @renovate in #1747
• build(deps): bump github.com/moby/sys/mountinfo from 0.7.0 to 0.7.1 by @dependabot in #1754
• docs: document convert_images by @giuseppe in #1750
• unshare: export rootless GID by @giuseppe in #1755

Full Changelog: v1.50.2...v1.51.0

v1.50.2

What's Changed

• Bump to v1.50.1 by @rhatdan in #1708
• Add an OWNERS file for the merge bot to refer to by @nalind in #1709

Full Changelog: v1.50.1...v1.50.2