v1.45.0

What's Changed

Notable changes

• Bump Buildah to v1.44.0, then to v1.45.0-dev by @TomSweeneyRedHat in #6877
• bump oc/selinux to v1.15.0, remove !linux wrappers by @kolyshkin in #6864
• Add a FollowSymlink option to AddAndCopyOptions to allow disabling deference of symlinks by @BenjaminSchubert in #6760
• new gha ci with lima by @timcoding1988 in #6884
• ci: install cached Docker debs for debian conformance by @timcoding1988 in #6889
• Re-enable git ADD escape directory test by @Honny1 in #6882
• Update to container-libs main by @nalind in #6904
• feat(manifest-push): add --timestamp parameter by @aeijdenberg in #6899
• CI image update and various CI improvements by @Luap99 in #6911
• Enable golangci-lint and codespell in CI and various CI and Makefile improvements by @Luap99 in #6912
• fix: typos in code comment by @yaacov in #6915
• ci: also run on release branches by @Luap99 in #6918
• parse: honor containers.conf seccomp_profile by @jiwahn in #6908
• Clean up TempDirForURL directories for --build-context and ADD git by @Honny1 in #6881
• Add support for symbolic chmod options by @nickjwhite in #6778
• copier: add PutOptions.Timestamp for timestamp override by @akca in #6930
• internal/mkcw.GenerateMeasurement(): check for libkrunfw-sev.so.5 by @nalind in #6934
• build: commit an empty layer instead of a layer with nothing in it by @nalind in #6873
• vendor: update container-libs to latest by @Luap99 in #6949
• golangci-lint: enable nilnesserr, modernize and more govet checks by @Luap99 in #6942
• seccomp: reject --security-opt seccomp=profile when support is unavailable by @leonardomoreira00 in #6960
• imagebuildah: default RUN --mount type to bind for cache checksums by @MayukhSobo in #6957
• docs: fix typo dns-option by @leonardomoreira00 in #6955
• docs: update description for no-new-privileges option by @leonardomoreira00 in #6952
• ci: make the automation release renovate managed by @Luap99 in #6963
• tests: fix "chroot with overlay root" flake by @Luap99 in #6970
• Fix a few typos by @nalind in #6971
• fix issue_pr_lock.yml workflow and do not run cronjobs at midnight by @Luap99 in #6973
• build: accept "FROM containers-storage:" prefixes again by @nalind in #6982
• Copier: add CreateDestPath option to PutOptions by @ajoshua2004 in #6976
• Add a workaround for using mount without privileges, re-enable rootless tests in CI by @nalind in #6933
• chroot: skip setgroups when namespace denies it by @ajoshua2004 in #6961
• fix: replace dead len > 2 guard with len != 2 in addSysctl by @immanuwell in #6883
• Copier: add Symlink() for creating symlinks with inline target by @ajoshua2004 in #7001
• tests: add link to coreutils bug workaround by @Luap99 in #6990
• Correct the handling of duplicate stage names by @nalind in #6774

Dependency updates

• Update module github.com/fsouza/go-dockerclient to v1.13.2 by @renovate[bot] in #6896
• Update module github.com/opencontainers/selinux to v1.15.1 by @renovate[bot] in #6897
• Update dependency macos to v26 by @renovate[bot] in #6898
• Update module golang.org/x/sync to v0.21.0 by @renovate[bot] in #6900
• Update module golang.org/x/crypto to v0.53.0 by @renovate[bot] in #6901
• [skip-ci] Update actions/checkout action to v6.0.3 by @renovate[bot] in #6895
• Update common, image, and storage deps to 9869b8f by @renovate[bot] in #6906
• Update module github.com/opencontainers/runc to v1.4.3 by @renovate[bot] in #6905
• Update module github.com/moby/buildkit to v0.31.0 by @renovate[bot] in #6914
• Update module github.com/opencontainers/cgroups to v0.0.7 by @renovate[bot] in #6913
• Update module github.com/cyphar/filepath-securejoin to v0.7.0 by @renovate[bot] in #6916
• chore(deps): update actions/checkout action to v7 by @renovate[bot] in #6919
• fix(deps): update module github.com/moby/moby/client to v0.5.0 by @renovate[bot] in #6920
• fix(deps): update module go.etcd.io/bbolt to v1.5.0 by @renovate[bot] in #6925
• fix(deps): update common, image, and storage deps to ebd3c74 by @renovate[bot] in #6924
• chore(deps): update actions/setup-go action to v6.5.0 by @renovate[bot] in #6926
• fix(deps): update module github.com/opencontainers/runc to v1.5.0 by @renovate[bot] in #6922
• fix(deps): update module github.com/moby/buildkit to v0.31.1 by @renovate[bot] in #6931
• fix(deps): update common, image, and storage deps to 5af159b by @renovate[bot] in #6935
• fix(deps): update module google.golang.org/grpc to v1.82.0 by @renovate[bot] in #6937
• chore(deps): update dorny/paths-filter action to v4.0.2 by @renovate[bot] in #6939
• fix(deps): update module github.com/containers/ocicrypt to v1.3.1 by @renovate[bot] in #6943
• fix(deps): update module golang.org/x/sync to v0.22.0 by @renovate[bot] in #6945
• fix(deps): update module golang.org/x/sys to v0.47.0 by @renovate[bot] in #6946
• fix(deps): update module golang.org/x/term to v0.45.0 by @renovate[bot] in #6948
• fix(deps): update module golang.org/x/crypto to v0.54.0 by @renovate[bot] in #6950
• fix(deps): update module github.com/mattn/go-shellwords to v1.0.14 by @renovate[bot] in #6953
• fix(deps): update common, image, and storage deps to 629dae5 by @renovate[bot] in #6956
• fix(deps): update module github.com/opencontainers/runc to v1.5.1 by @renovate[bot] in #6962
• fix(deps): update module google.golang.org/grpc to v1.82.1 by @renovate[bot] in #6965
• fix(deps): update module github.com/moby/buildkit to v0.31.2 by @renovate[bot] in #6968
• chore(deps): update actions/setup-go action to v7 by @renovate[bot] in #6966
• chore(deps): update actions/checkout action to v7.0.1 by @renovate[bot] in #6974
• fix(deps): update module github.com/opencontainers/cgroups to v0.0.8 by @renovate[bot] in #6978
• fix(deps): update module github.com/containers/ocicrypt to v1.3.2 by @renovate[bot] in #6977
• chore(deps): update dependency podman-container-tools/automation to v20260722 by @renovate[bot] in #6985
• fix(deps): update module github.com/pkg/sftp to v1.13.11 by @renovate[bot] in #6987
• fix(deps): update module github.com/docker/go-connections to v0.8.0 by @renovate[bot] in #6995
• fix(deps): update module github.com/docker/go-connections to v0.8.1 by @renovate[bot] in #7003
• fix(deps): update module github.com/moby/moby/client to v0.5.1 by @renovate[bot] in #7004
• chore(deps): update actions/stale action to v11 by @renovate[bot] in #7005

New Contributors

• @yaacov made their first contribution in #6915
• @jiwahn made their first contribution in #6908
• @nickjwhite made their first contribution in #6778
• @leonardomoreira00 made their first contribution in #6960
• @MayukhSobo made their first contribution in #6957
• @immanuwell made their first contribution in #6883

Full Changelog: v1.44.0...v1.45.0