v1.23.0

Please Note!

The Configuration File lookup behavior has changed. Callers of functions in this project that read configuration files should refer to containers-config(5) for details.

What's Changed

• Bump to v1.20.0 then v1.21.0-dev by @TomSweeneyRedHat in #2666
• chore(deps): update dependency golangci/golangci-lint to v2.3.1 by @renovate[bot] in #2668
• fix(deps): update module github.com/containers/storage to v1.59.1 by @renovate[bot] in #2670
• fix(deps): update module github.com/containers/image/v5 to v5.36.1 by @renovate[bot] in #2671
• fix(deps): update module github.com/containers/common to v0.64.1 by @renovate[bot] in #2672
• fix(deps): update module golang.org/x/term to v0.34.0 by @renovate[bot] in #2673
• Adding mohanboddu as community manager to MAINTAINERS.md by @mohanboddu in #2676
• chore(deps): update dependency golangci/golangci-lint to v2.4.0 by @renovate[bot] in #2677
• Update tests to work with the Sequoia c/image backend by @mtrmac in #2679
• Allow running CI from rawhide images by @mtrmac in #2681
• Migrate storage, image and common to monorepo and remote go.podman.io imports by @jankaluza in #2688
• fix(deps): update module github.com/stretchr/testify to v1.11.1 by @renovate[bot] in #2685
• fixes to have test-*-local Makefile targets work by @lsm5 in #2654
• Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY] by @renovate[bot] in #2691
• Update module github.com/spf13/pflag to v1.0.9 by @renovate[bot] in #2692
• Update module github.com/spf13/cobra to v1.10.1 by @renovate[bot] in #2693
• Follow up on #2654 by @lsm5 in #2687
• Add --force-compress-format option on copy by @XYenon in #2682
• Update module github.com/spf13/pflag to v1.0.10 by @renovate[bot] in #2696
• Update to tagged container-libs releases by @mtrmac in #2697
• Packit: re-enable ELN and CentOS Stream jobs on PRs by @lsm5 in #2698
• [skip-ci] Update actions/stale action to v10 by @renovate[bot] in #2699
• Update CONTRIBUTING.md by @bitoku in #2702
• Packit/RPM: build with sequoia for f43+ and couple of other changes for distro conditionals and easier testing by @lsm5 in #2700
• Update to Go1.24 by @mtrmac in #2706
• Update module golang.org/x/term to v0.35.0 by @renovate[bot] in #2705
• Add --sign-by-sq-fingerprint by @mtrmac in #2645
• test-integration-local: use SKOPEO_BINARY if set by @lsm5 in #2703
• sync: honor CLI/global tls-verify unless YAML explicitly sets tls-verify by @andya1lan in #2710
• Update github.com/opencontainers/image-spec digest to 6519a62 by @renovate[bot] in #2717
• Update dependency golangci/golangci-lint to v2.5.0 by @renovate[bot] in #2713
• Simplify tests for #2710 by @mtrmac in #2711
• fix(deps): update module golang.org/x/term to v0.36.0 by @renovate[bot] in #2722
• Add missing newline to the output of (skopeo generate-sigstore-key) by @mtrmac in #2719
• fix(deps): update module go.podman.io/storage to v1.61.0 by @renovate[bot] in #2728
• fix(deps): update module go.podman.io/image/v5 to v5.38.0 by @renovate[bot] in #2727
• fix(deps): update module go.podman.io/common to v0.66.0 by @renovate[bot] in #2726
• main: Add support for overriding HTTP User-Agent by @cgwalters in #2724
• chore(deps): update dependency golangci/golangci-lint to v2.6.0 by @renovate[bot] in #2734
• fix(deps): update github.com/opencontainers/image-spec digest to 26647a4 by @renovate[bot] in #2736
• chore(deps): update dependency golangci/golangci-lint to v2.6.1 by @renovate[bot] in #2737
• Fix test-system and remove stale Makefile target by @lsm5 in #2731
• Use retries in more cases of copying from external registries by @mtrmac in #2740
• Allow using sigstore keys with empty passphrases by @mtrmac in #2720
• Packit: Do not notify on podman-next copr build failure by @lsm5 in #2741
• fix(deps): update module golang.org/x/term to v0.37.0 by @renovate[bot] in #2742
• Packit: tmp disable ELN tests by @lsm5 in #2749
• golangci-lint: enable gofumpt formatter by @Luap99 in #2744
• Container libs vendor and Renovate config update by @lsm5 in #2746
• Update dependency golangci/golangci-lint to v2.6.2 by @renovate[bot] in #2743
• Update common, image, and storage deps to 22d50c5 by @renovate[bot] in #2753
• Try triggering an image rebuild by @mtrmac in #2758
• Update common, image, and storage deps to 63be353 by @renovate[bot] in #2757
• Bump version to 1.22.0-dev by @mtrmac in #2759
• chore(deps): update dependency golangci/golangci-lint to v2.7.0 by @renovate[bot] in #2761
• fix(deps): update module github.com/spf13/cobra to v1.10.2 by @renovate[bot] in #2762
• chore(deps): update dependency golangci/golangci-lint to v2.7.1 by @renovate[bot] in #2764
• skopeo inspect: support for sha512 images by @lsm5 in #2747
• Packit: use post-modifications hook to update downstream TMT plan by @lsm5 in #2763
• fix(deps): update module golang.org/x/term to v0.38.0 by @renovate[bot] in #2768
• chore(deps): update dependency golangci/golangci-lint to v2.7.2 by @renovate[bot] in #2766
• fix(deps): update common, image, and storage deps to afd10d8 by @renovate[bot] in #2765
• Update c/common to match #2765 by @mtrmac in #2770
• fix(deps): update common, image, and storage deps to b0f86df by @renovate[bot] in #2774
• skopeo: add --require-signed by @jlebon in #2714
• chore: fix function name in comment by @promalert in #2780
• Document the default of --retry-times by @mtrmac in #2781
• chore(deps): update dependency golangci/golangci-lint to v2.8.0 by @renovate[bot] in #2783
• fix(deps): update module golang.org/x/term to v0.39.0 by @renovate[bot] in #2785
• fix(deps): update common, image, and storage deps to e7626b7 by @renovate[bot] in #2786
• fix(deps): update module github.com/sirupsen/logrus to v1.9.4 by @renovate[bot] in #2787
• fix(deps): update common, image, and storage deps to b2572af by @renovate[bot] in #2790
• fix(deps): update common, image, and storage deps to b5801a6 by @renovate[bot] in #2792
• Update tests for a changed error message by @mtrmac in #2795
• fix(deps): update common, image, and storage deps to 0e2aefd by @renovate[bot] in #2794
• fix(deps): update module golang.org/x/term to v0.40.0 by @renovate[bot] in #2798
• chore(deps): update dependency golangci/golangci-lint to v2.9.0 by @renovate[bot] in #2801
• chore(deps): update dependency golangci/golangci-lint to v2.10.1 by @renovate[bot] in #2803
• Packit: fix downstream post-modifications action by @lsm5 in #2810
• Add --tls-details by @mtrmac in #2797
• Packit: Re-enable ELN tests by @lsm5 in #2809
• fix(deps)...

v1.11.5

What's Changed

• [release-1.11] CVE-2025-65637 Logrus by @TomSweeneyRedHat in #2789
• [release-1.11] Bump Go Jose to v3.0.5, CVE-2026-34986, Skopeo to v1.11.5 by @TomSweeneyRedHat in #2863

Full Changelog: v1.11.4...v1.11.5

v1.14.6

What's Changed

• [release-1.14] Bump Go Jose to v3.0.5, CVE-2026-34986 by @TomSweeneyRedHat in #2862
• [release-1.14] Fixes Listing tags in JFrog Artifactory may fail by @TomSweeneyRedHat in #2381
• [release-1.14] Support CI testing on non-x86_64 by @cevich in #2610
• [release-1.14] Add conditional release-checking system test by @cevich in #2642

Full Changelog: v1.14.5...v1.14.6

v1.20.1

Full Changelog: v1.20.0...v1.20.1

• [release-1.20] Bump Go Jose v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #2852

v1.18.2

What's Changed

• [release-1.18] Bump Go Jose v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #2853
• [release-1.18] Fix CVE-2025-27144, bump Skopeo to v1.18.1 by @TomSweeneyRedHat in #2543
• Move RHEL branches to TMT by @lsm5 in #2619

Full Changelog: v1.18.0...v1.18.2

v1.22.2

What's Changed

• Fixes signature verification of images which only sign the per-platform manifest in skopeo proxy, by @wking in #2847

New Contributors

• @wking made their first contribution in #2847

Full Changelog: v1.22.1...v1.22.2

v1.22.1

What's Changed

• [release-1.22] Skopeo v1.22.0 by @TomSweeneyRedHat in #2800
• Bump Skopeo to v1.22.1, CVE-2026-34986, c/common v067.1, c/image v5.39.2 by @TomSweeneyRedHat in #2842

Full Changelog: v1.22.0...v1.22.1

v1.9.5

What's Changed

• [release-1.9] 1.9 backports by @mtrmac in #1784
• [release-1.9] Bump ocicrypt and go-jose CVE-2024-28180 by @TomSweeneyRedHat in #2293
• [release-1.9] remove square/jose, and bump to ocicrypt v1.1.8 by @TomSweeneyRedHat in #2314
• [release-1.9] Support CI testing on non-x86_64 by @cevich in #2612
• [release-1.9] Add conditional release-checking system test by @cevich in #2644
• [release-1.9] Bump to release version 1.9.4 by @cevich in #2674
• [release-1.9] CVE-2025-65637 logrus to 1.9.3 by @TomSweeneyRedHat in #2805

Full Changelog: v1.9.3...v1.9.5

v1.22.0

What's Changed

• [release-1.22] Skopeo v1.22.0 by @TomSweeneyRedHat in #2800
• [release-1.21] Packit: use post-modifications hook to update downstream TMT plan by @lsm5 in #2767

Full Changelog: v1.21.0...v1.22.0

v1.11.4

What's Changed

• [release-1.11] CVE-2025-65637 Logrus by @TomSweeneyRedHat in #2789

Full Changelog: v1.11.3...v1.11.4