v1.27.5

What's Changed

• [release-1.27] Properly validate cache IDs and sources - (CVE-2024-9675) by @dashea in #5797
• [release-1.27] Adresses CVE-2024-1753 and CVE-2024-24786, bump to V1.27.4 by @TomSweeneyRedHat in #5435

Full Changelog: v1.27.4...v1.27.5

v1.26.8

What's Changed

• [release-1.26] CVE-2024-1753, Bump to Buildah v1.26.7 by @TomSweeneyRedHat in #5450
• [release-1.26] Properly validate cache IDs and sources by @dashea in #5794

Full Changelog: v1.26.7...v1.26.8

v1.33.10

What's Changed

• [release-1.33] Bump to Buildah v1.33.8, CVE-2024-3727 by @TomSweeneyRedHat in #5533
• [release-1.33] Cross-build on Fedora by @openshift-cherrypick-robot in #5577
• [release-1.33] Fixes Listing tags in JFrog Artifactory may fail by @TomSweeneyRedHat in #5631
• [release-1.33] vendor: update c/common to v0.57.7 by @Luap99 in #5766

Full Changelog: v1.33.8...v1.33.10

v1.37.5

What's Changed

Notable changes

• [release-1.37] Bump Buildah to v1.37.5 by @TomSweeneyRedHat
• [release-1.37] [skip-ci] Packit: constrain koji job to fedora package to avoid dupes by @openshift-cherrypick-robot in #5775
• [release-1.37] Properly validate cache IDs and sources - Resolves CVE-2024-9675 by @openshift-cherrypick-robot in #5780
• [release-1.37] Bump the containers/storage library to v1.55.1 - Resolves CVE-2024-9676 by @mheon in #5786

Full Changelog: v1.37.4...v1.37.5

v1.29.4

What's Changed

• [release-1.29] bump to v1.29.3, fix conformance, CVE-2024-1753, CVE-2024-24786 by @TomSweeneyRedHat in #5434

Full Changelog: v1.29.3...v1.29.4

v1.37.4

What's Changed

Notable changes

• [release-1.37] Fix CVE-2024-9407 and CVE-2024-9341 by @Luap99 in #5764

Full Changelog: v1.37.3...v1.37.4

v1.37.3

What's Changed

Notable changes

• [release-1.37] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2 by @TomSweeneyRedHat in #5696
• [release-1.37] Use Epoch: 2 and respect the epoch in dependencies. by @openshift-cherrypick-robot in #5699
• [release-1.37] imagebuildah.StageExecutor: clean up volumes/volumeCache by @nalind in #5740
• [release-1.37] manifest add --artifact: handle multiple values by @openshift-cherrypick-robot in #5739
• [skip-ci] Release 1.37 packit backports by @lsm5 in #5735
• [release-1.37] Do not error on trying to write IMA xattr as rootless by @mheon in #5746

Full Changelog: v1.37.2...v1.37.3

v1.37.2

What's Changed

Notable changes

• [release-1.37] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2 by @TomSweeneyRedHat in #5696

Full Changelog: v1.37.1...v1.37.2

v1.37.1

[release-1.37] Bump c/common v0.60.1, c/image v5.32.1
[release-1.37] Bump to Buildah v1.37.1

Full Changelog: v1.37.0...v1.37.1

v1.37.0

What's Changed

Notable changes

• Bump to Buildah v1.36.0 by @TomSweeneyRedHat in #5545
• fix secret mounts for env vars when using chroot isolation by @jonahbull in #5544
• CI: Clarify Debian use for conformance tests by @cevich in #5538
• imagebuildah: Support custom image reference lookup for cache push/pull by @aaronlehmann in #5532
• [skip-ci] Packit: enable c10s downstream sync by @lsm5 in #5514
• CI VMs: bump, to debian with cgroups v2 by @edsantiago in #5550
• Drop copyStringSlice() and copyStringStringMap() by @nalind in #5570
• Cross-build on Fedora by @cevich in #5572
• healthcheck: Add support for --start-interval by @flouthoc in #5472
• Re-enable two conformance tests by @nalind in #5566
• Clarify definition of --pull options by @rhatdan in #5407
• tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork by @nalind in #5574
• buildah: fix a nil pointer reference on FreeBSD by @dfr in #5580
• Add some NetBSD support by @coypoop in #5559
• CI VMs: bump by @edsantiago in #5600
• buildah copy: preserve owner info with --from= a container or image by @nalind in #5597
• containerImageRef.NewImageSource(): move the FROM comment to first by @nalind in #5595
• Update godoc for Builder.EnsureContainerPathAs by @nalind in #5594
• commit: set "parent" for docker format only when requested by @nalind in #5596
• imagebuildah.StageExecutor.prepare(): log the --platform flag by @nalind in #5599
• Rework parsing of --pull flags by @nalind in #5605
• Bump github.com/openshift/imagebuilder from v1.2.10 to v1.2.11 by @nalind in #5609
• Change default for podman build to --pull missing by @rhatdan in #5583
• Vendor in latest containers/(common, image, storage) by @rhatdan in #5585
• imagebuildah: make traditional volume handling not the default by @nalind in #5604
• Replace libimage.LookupReferenceFunc with the manifests version by @nalind in #5628
• Revert #5627 by @nalind in #5629
• CI: use local registry by @edsantiago in #5584
• Update github.com/openshift/imagebuilder to v1.2.14 by @nalind in #5641

Dependency updates

• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 by @renovate in #5546
• fix(deps): update golang.org/x/exp digest to fd00a4e by @renovate in #5558
• fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 by @renovate in #5563
• fix(deps): update module golang.org/x/crypto to v0.24.0 by @renovate in #5568
• fix(deps): update module github.com/containerd/containerd to v1.7.18 by @renovate in #5571
• fix(deps): update module github.com/docker/docker to v26.1.4+incompatible by @renovate in #5573
• fix(deps): update module github.com/containers/common to v0.59.1 by @renovate in #5567
• fix(deps): update module github.com/opencontainers/runc to v1.1.13 by @renovate in #5589
• fix(deps): update module github.com/spf13/cobra to v1.8.1 by @renovate in #5591
• fix(deps): update module github.com/containernetworking/cni to v1.2.0 by @renovate in #5475
• fix(deps): update module github.com/containers/image/v5 to v5.31.1 by @renovate in #5601
• fix(deps): update golang.org/x/exp digest to 7f521ea by @renovate in #5613
• fix(deps): update github.com/containers/luksy digest to a8846e2 by @renovate in #5612
• fix(deps): update module golang.org/x/sys to v0.22.0 by @renovate in #5618
• fix(deps): update module golang.org/x/term to v0.22.0 by @renovate in #5619
• fix(deps): update module github.com/containers/image/v5 to v5.31.1 by @renovate in #5627
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1 by @renovate in #5634
• fix(deps): update module github.com/docker/docker to v27.1.0+incompatible by @renovate in #5639
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 by @renovate in #5643
• fix(deps): update module github.com/docker/docker to v27.1.1+incompatible by @renovate in #5644

New Contributors

• @jonahbull made their first contribution in #5544
• @coypoop made their first contribution in #5559

Full Changelog: v1.36.0...v1.37.0