fix(deps): update all dependencies #52

kjuulh · 2023-01-11T14:40:05+01:00

kjuulh commented

2023-01-11 14:40:05 +01:00

This PR contains the following updates:

Package	Type	Update	Change
@svgr/webpack (source)	dependencies	major	`6.5.1` -> `8.1.0`
actions/add-to-project	action	major	`v0.4.0` -> `v1.0.0`
actions/checkout	action	major	`v3` -> `v4`
actions/setup-go	action	major	`v3` -> `v5`
actions/stale	action	major	`v7` -> `v9`
actions/upload-artifact	action	major	`v3` -> `v4`
amplitude-js	dependencies	patch	`8.21.3` -> `8.21.9`
bats	devDependencies	minor	`1.8.2` -> `1.11.0`
clsx	dependencies	major	`1.2.1` -> `2.1.0`
concurrently	devDependencies	major	`7.6.0` -> `8.2.2`
crazy-max/ghaction-github-runtime	action	major	`v2` -> `v3`
cuelang.org/go	require	minor	`v0.4.3` -> `v0.8.1`
cypress (source)	devDependencies	major	`12.3.0` -> `13.7.2`
cypress-localstorage-commands	devDependencies	patch	`2.2.2` -> `2.2.5`
dagger/dagger-for-github	action	major	`v3` -> `v5`
docusaurus-plugin-sass	dependencies	patch	`0.2.3` -> `0.2.5`
github.com/Microsoft/go-winio	require	patch	`v0.6.0` -> `v0.6.1`
github.com/containerd/console	require	patch	`v1.0.3` -> `v1.0.4`
github.com/containerd/containerd	require	minor	`v1.6.15` -> `v1.7.15`
github.com/docker/buildx	require	minor	`v0.10.0` -> `v0.13.1`
github.com/docker/distribution	require	patch	`v2.8.1+incompatible` -> `v2.8.3`
github.com/docker/docker	replace	major	`v20.10.22+incompatible` -> `v26.0.0`
github.com/go-git/go-git/v5	require	minor	`v5.5.2` -> `v5.12.0`
github.com/google/uuid	require	minor	`v1.3.0` -> `v1.6.0`
github.com/moby/buildkit	require	minor	`v0.11.0` -> `v0.13.1`
github.com/opencontainers/image-spec	require	patch	`v1.1.0-rc2.0.20221116213201-188d3a4e1942` -> `v1.1.0`
github.com/rs/zerolog	require	minor	`v1.28.0` -> `v1.32.0`
github.com/sergi/go-diff	require	minor	`v1.2.0` -> `v1.3.1`
github.com/sirupsen/logrus	require	patch	`v1.9.0` -> `v1.9.3`
github.com/spf13/cobra	require	minor	`v1.6.1` -> `v1.8.0`
github.com/spf13/viper	require	minor	`v1.14.0` -> `v1.18.2`
github.com/stretchr/testify	require	minor	`v1.8.2` -> `v1.9.0`
github.com/tonistiigi/fsutil	require	digest	`fb43384` -> `7525a1a`
github.com/tonistiigi/vt100	require	digest	`8066bb9` -> `f9a4f7e`
golang	final	minor	`1.19.4-alpine` -> `1.22.2-alpine`
golang.org/x/mod	require	minor	`v0.7.0` -> `v0.17.0`
golang.org/x/sync	require	minor	`v0.1.0` -> `v0.7.0`
golang.org/x/term	require	minor	`v0.4.0` -> `v0.19.0`
golang.org/x/time	require	minor	`v0.3.0` -> `v0.5.0`
google.golang.org/grpc	require	minor	`v1.51.0` -> `v1.63.0`
goreleaser/goreleaser-action	action	major	`v4` -> `v5`
lewagon/wait-on-check-action	action	minor	`v1.2.0` -> `v1.3.4`
react-social-login-buttons (source)	dependencies	major	`3.6.1` -> `4.1.0`
remark-code-import	dependencies	minor	`1.1.1` -> `1.2.0`
sass	dependencies	minor	`1.57.1` -> `1.74.1`
start-server-and-test	devDependencies	major	`1.15.2` -> `2.0.3`

Release Notes

gregberge/svgr

`v8.1.0`

Compare Source

Bug Fixes

cli: fix default dimensions, prettier & svgo (571d5c8)
config: prefer cli config over rc config (#845) (8b97248)
react-native: fix duplicate import (#894) (e612b6a)

Features

esm: add support for svgo.config.cjs (#879) (ae91e2e)

8.0.1 (2023-05-09)

Bug Fixes

fix peer dependencies (2e05255)

`v8.0.1`

Compare Source

Bug Fixes

fix peer dependencies (2e05255)

`v8.0.0`

Compare Source

Bug Fixes

parseObject error causes website broken (05f2946)

Features

add snake_case filename option (#857) (428b0c7)
make index template more flexible (#861) (003009c)
types: change SVGProps from import to import type (#853) (095f021)

BREAKING CHANGES

index template now receives an array of objects containing both the created
component path (path) and the original SVG path (originalPath)

`v7.0.0`

Compare Source

Features

allow specifying jsxRuntimeImport in config (86bb86f), closes #801 #801
remove @svgr/plugin-jsx from core (a0f078d)
upgrade to svgo v3 (#798) (21b6209)

BREAKING CHANGES

plugin-jsx is no longer included by default in core
svgr now requires Node.js v14+

6.5.1 (2022-10-27)

Reverts

Revert "feat(a11y): add attribute role="img" to the svg element (#750)" (1382232), closes #750

actions/add-to-project

`v1.0.0`

Compare Source

Summary

This release promotes actions/add-to-projects to a major version 1 and marks the public API stable.

actions/checkout

`v4`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

actions/setup-go

`v5`

Compare Source

`v4`

Compare Source

actions/stale

`v9`

Compare Source

`v8`

Compare Source

actions/upload-artifact

`v4`

Compare Source

amplitude/amplitude-javascript

`v8.21.9`

Compare Source

Bug Fixes

do not overwrite flushIntervalMillis=0 with default value (10 seconds) (#589) (9c96890)

`v8.21.8`

Compare Source

Bug Fixes

upgrade to @amplitude/ua-parser-js @0.7.33 (#588) (d2dec38)

`v8.21.7`

Compare Source

Bug Fixes

reset referring_domain (eaa7446)

`v8.21.6`

Compare Source

Bug Fixes

skip top domain when cookie is disabled (#580) (a9ff324)

`v8.21.5`

Compare Source

Bug Fixes

wait to create cookie storage based on user options in init() (#579) (a682c5b)

`v8.21.4`

Compare Source

Bug Fixes

remove events when 200, no need to check response (#572) (5b52d16)
upgrade dependencies to resolve dependabot vulnerability alerts (#567) (9207b46)

bats-core/bats-core

`v1.11.0`

Compare Source

Added:

hardened CI scripts by using hashes instead of versions for actions and restricting permissions (#754, #770)
add security.md (#762)
add codespell CI checks (#720)
dynamic test registration via bats_test_function (#349)
add check that Bats is executed with Bash >= 3.2 (#873)

Fixed:

install.sh now works for deviating lib/ dirs (like lib32,lib64) (#487)
catch unset BATS_TEST_SOURCE in lib/bats-core/tracing.bash so
set -u/set -o nounset works as expected (#827)
fix --gather-test-outputs-in fails on tests with multiple / (#789)
install does not create unused /usr/share/bats anymore (#857)
ensure IFS is unchanged in {setup,teardown}{_suite,_file,}, @test and free code (#879)
junit formatter: remove ANSI Codes to avoid invalid XML character (#886)

Changed:

update Docker image with the latest bats-file version 0.4.0 (#780)
update Docker image with the latest bats-detik version 1.3.0 (#876)

Documentation

clarify docker usage (#741)
update Arch Linux package URL in installation.rst (#821)
rename bash-bats to bats for Arch Linux in installation.rst (#836)
fix FAQ entry about setup-/teardown_suite, as they are available now (#861)
added logo (#881)

`v1.10.0`

Compare Source

Added:

add ${BATS_TEST_TAGS[@]} for querying the tags during a test (#705)
print tags on failing tests (#705)
test for negative arguments to --jobs (#693)
add tests for --formatter cat (#710)
test coverage in CI (#718)
Support for rush as alternative to GNU parallel (#729)
add bats_pipe helper function for run that executes \| as pipes (#663)
publish docker images to ghcr.io (additionally to Dockerhub) (#740)

Documentation:

clarify use cases of --formatter cat (#710)

Fixed:

fix run with options overwriting the value of i (#726, #727)
fix ${BATS_TEST_NAMES[@]} containing only --tags instead of test name since Bats v1.8.0 (#705)
fix run --keep-empty-lines counting trailing \n as (empty) new line (#711)
fix short flag unpacker creating bogus command lines with valued flags (#732)
fix formatter becoming confused with retries (#734)
fix --gather-test-outputs-in fails on tests with / (#735)
fix overriding date breaks --timing (#736)

Documentation

typos, minor edits (#704)
simplified contributing.md (#718)

`v1.9.0`

Compare Source

Added:

add installation instructions for Debian, Fedora, Gentoo, and OpenSUSE (#659)
add --line-reference-format to switch file/line references in stack traces (#665)
- comma_line (default): file.bats, line 1
- colon: file.bats:1
- uri: file:///path/to/file.bats:1
- custom: define your own formatter in bats_format_file_line_reference_custom
add bats:focus tag to run only focused tests (#679)
add bats-support, bats-assert, bats-file and bats-detik to Dockerfile (#674)

Documentation:

add --help text and man page content for --filter-tags (#679)

Fixed:

explicitly check for GNU parallel (#691)
wait for report-formatter to finish before ending bats' execution,
to fix empty files with --report-fomatter junit under Docker (#692)

Documentation

improved clarity of section about output in free code (#671)
fixed typos (#673)
clarify use cases of run (#366)

lukeed/clsx

`v2.1.0`

Compare Source

Features

Add new clsx/lite submodule for string-only usage: 1a49142

This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:

clsx('foo bar', props.maybe && 'conditional classes', props.className);

Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!

import { clsx } from 'clsx';
import { clsx as lite } from 'clsx/lite';

// strings-only usage is identical
clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"

// clsx/lite ignores all non-strings
clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
lite('foo', { a: true, b: false, c: true }); //=> "foo"

Full Changelog: https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0

`v2.0.1`

Compare Source

Patches

(perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b
Adds 5 bytes (+2%) for ~3% avg performance gain
Thank you @jalalazimi

Chores

Update module size: bf64e71
Update benchmark results: 855eec2, 6e3b2b9,
Replace nyc with c8 in CI: 6e2468e
Update Node CI matrix: 308a238
Fix readme typos (#76, #82): 42354d3, 4c9a55d
Thank you @andipaetzold and @acusti

Full Changelog: https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1

`v2.0.0`

Compare Source

Breaking

Add "exports" map for native ESM support (#57): 3ec8e9f, 0949868
Also supports TypeScript's node16/nodenext module resolution
Maintains CommonJS support (with fixed TS definitions)
Thank you @remcohaszing~!

Chores

Add Tailwind Support section to README (#65, #68): 496db1d, 4a4eadd
Thank you @kevinlowe0x3F7 & @kevinlowe0x3F7
Add tests for numbers & variadic number arguments: c520353
Update package module size: 03e1cf9

Full Changelog: https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0

open-cli-tools/concurrently

`v8.2.2`

Compare Source

What's Changed

fix(suggestion): prefixColors API type to embrace string type by @SeiwonPark in https://github.com/open-cli-tools/concurrently/pull/439
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/441
Test against Node.js v20 instead of v19 by @paescuj in https://github.com/open-cli-tools/concurrently/pull/442
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/449

New Contributors

@SeiwonPark made their first contribution in https://github.com/open-cli-tools/concurrently/pull/439

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2

`v8.2.1`

Compare Source

What's Changed

Delay summary timings output until finished by @kayahr in https://github.com/open-cli-tools/concurrently/pull/431
Replace deprecated RxJS code by @paescuj in https://github.com/open-cli-tools/concurrently/pull/343

New Contributors

@kayahr made their first contribution in https://github.com/open-cli-tools/concurrently/pull/431

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1

`v8.2.0`

Compare Source

What's Changed

Support REPL languages that use colons by @wyattades in https://github.com/open-cli-tools/concurrently/pull/393
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/427

New Contributors

@wyattades made their first contribution in https://github.com/open-cli-tools/concurrently/pull/393

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0

`v8.1.0`

Compare Source

What's Changed

fix: move types condition to the front by @Andarist in https://github.com/open-cli-tools/concurrently/pull/422
Allow setting raw per command when using the API by @chbiel in https://github.com/open-cli-tools/concurrently/pull/411

New Contributors

@Andarist made their first contribution in https://github.com/open-cli-tools/concurrently/pull/422
@chbiel made their first contribution in https://github.com/open-cli-tools/concurrently/pull/411

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0

`v8.0.1`

Compare Source

What's Changed

Fix release workflow by @paescuj in https://github.com/open-cli-tools/concurrently/pull/408
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/409

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1

`v8.0.0`

Compare Source

What's Changed

Breaking change: Drop support for Node.js v12 & add support for Node.js v18 by @paescuj in https://github.com/open-cli-tools/concurrently/pull/342
Add support for Bun by @jakeboone02 in https://github.com/open-cli-tools/concurrently/pull/406
Add --kill-signal option by @paulsmithkc in https://github.com/open-cli-tools/concurrently/pull/402
Fixed broken link in the readme by @abstractpoint in https://github.com/open-cli-tools/concurrently/pull/390

New Contributors

@abstractpoint made their first contribution in https://github.com/open-cli-tools/concurrently/pull/390
@jakeboone02 made their first contribution in https://github.com/open-cli-tools/concurrently/pull/406
@paulsmithkc made their first contribution in https://github.com/open-cli-tools/concurrently/pull/402

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0

crazy-max/ghaction-github-runtime

`v3`

Compare Source

cue-lang/cue

`v0.8.1`

Compare Source

This release includes a number of fixes detailed below:

CL 1186144 fixes a number of evaluator panics which could be triggered by calling the cue.Value.Expr method, which also happened when using the OpenAPI encoder.

CL 1173100 fixes cue get go panics which might occur when any Go packages are vendored or use imported alias declarations.

CL 1185281 fixes a regression introduced in v0.8.0 which led to some incorrect failures in tools/flow and cue cmd.

Full list of changes since v0.8.0

internal/cueversion: bump for v0.8.1 by @mvdan in 95bed3d
cue: adjust Environment for comprehensions by @mpvl in 4cdb317
Revert "tools/flow: check and return errors from task values" by @rogpeppe in 0630a37
cmd/cue: find packages by canonical path in get go by @uhthomas in 773ab2d

`v0.8.0`

Compare Source

This release includes experimental support for CUE Modules (more details below), as well as a number of improvements and fixes.

More CLs and refactors have also landed for the core evaluator's performance work. These aren't enabled yet as the work isn't complete; subscribe to the performance umbrella issue to read regular updates.

As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. It continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Modules

This release includes experimental support for CUE modules in cmd/cue, as outlined in the updated Modules and package management proposal v3.

Alongside this release, we have published a tutorial on the new website which shows how to publish and fetch modules with a custom module registry.

We have also published the first version of the Modules reference documentation, the canonical documentation page describing how CUE modules work in detail.

Note that support for CUE modules is still experimental and subject to change, and needs to be explicitly enabled via CUE_EXPERIMENT=modules. See cue help environment for more information on the environment variables used below.

CUE maps modules to registries via $CUE_REGISTRY, which supports a simple string configuration format as well as a more detailed CUE configuration format which can be read from disk. See cue help registryconfig for more details.

The new cue mod tidy command rewrites cue.mod/module.cue in its canonical format, adds any missing module dependency requirements, and removes unused ones.

The new cue mod publish command publishes the current module to a module registry.

The new cue mod get command can add a new module dependency, update an existing one, or downgrade an existing one as long as it does not cause any conflict.

When running commands like cue export with CUE_EXPERIMENT=modules, dependencies are automatically fetched from module registries following $CUE_REGISTRY and cached on disk inside $CUE_CACHE_DIR.

CUE Language Server Protocol Implementation

This release includes the first early version of an experimental Language Server Protocol (LSP) implementation for CUE. Whilst it remains experimental, the cmd/cuepls binary is separate from cmd/cue. However at a later date it will most likely to become a subcommand of cmd/cue like cue lsp serve.

We are working on updating the VSCode plugin to use cmd/cuepls, as well as supporting an initial version of a plugin for Neovim. For JetBrains users, we are working with the author of the CUE plugin to understand how best to integrate cmd/cuepls with JetBrains.

We will share announcements once the editor integrations are ready for use, and once more LSP features beyond formatting files are available. Subscribe to the LSP announce discussion, or join us in #cuepls on CUE Slack.

Go API

Note that this version of CUE requires Go 1.21 or later, following our policy to support the latest two stable Go releases just like upstream.

The cue/load package supports the CUE Modules experiment out of the box with the environment variable CUE_EXPERIMENT=modules. Alternatively, a custom registry and authorizer can be configured with the Config.Registry field via the modconfig.NewRegistry API.

cue/load also has a new Config.Env struct field to provide the environment variables used to load CUE modules from registries. It defaults to using os.Environ.

We have also added new Go examples to the cue/load package, including an example demonstrating the use of a CUE modules registry.

CL 1173271 drops support for legacy pkg directories, which have been deprecated since the transition to a cue.mod directory in 2019.

CL 1174069 replaces a few more uses of the deprecated cue.Instance type with cue.InstanceOrValue.

CL 1175779 deprecates the FileOffset and File.Base APIs in cue/token, which were inherited from go/token but never had any effect.

Language

There are no changes to the language in this version.

Spec

CL 1173197 makes the use of the term "builtin function" consistent across the document.

Core Evaluator

CL 1173262 fixes a regression introduced by v0.7.0's upgrade to github.com/cockroachdb/apd/v3 where some arithmetic operations would result in an extra 0 digit.

Encoders

CL 1173689 fixes the YAML encoder so that strings looking like hexadecimal numbers are properly quoted.

Builtins

CL 1173735 replaces the uses of Go's net package with net/netip when dealing with IP addresses, which makes them immutable, comparable, and take less memory.

CL 1173926 adds an IPv6 API to net to check that a value is a valid IPv6 address, mirroring IPv4 and taking advantage of the switch to the Go net/netip package.

CL 1174339 fixes tool/exec so that it correctly applies env defaults in CUE values.

CL 1174623 fixes tool/exec so that it accepts env list values as documented.

`cmd/cue`

CL 1176194 adds a language.version field to cue.mod/module.cue to track what CUE language version a module was written for. This will become necessary to make future language changes as smooth as possible for CUE users. For example, running cue mod init or cue mod tidy with the v0.8.0 release should add language: version: "v0.8.0" when the field isn't present.

CL 1173892 adds a cue help environment section to document the environment variables used by the CLI, such as CUE_EXPERIMENT and CUE_REGISTRY.

CL 1176665 fixes cue cmd so that legacy commands always get the corresponding CUE schema unified.

CL 1177330 fixes a bug where some evaluation errors in tools/flow and cue cmd were omitted, causing unintended results.

CL 1177546 tweaks cmd/cue so that it obeys the --package flag when the output format is CUE.

Full list of changes since v0.7.1

internal/cueversion: bump fallbackVersion for v0.8.0 by @mvdan in 7d75741
cue/load: make packages specified as args work correctly by @rogpeppe in c399d88
internal/mod/modresolve: do not use regular field in registry config schema by @rogpeppe in d272140
update cuelabs.dev/oci/ociregistry to pull in fix for #2934 by @mvdan in 0e33883
cmd/cue: mod init should only add @v0 with the experiment by @mvdan in 24f93c9
cmd/cue: repurpose modinit test for language.version by @mvdan in 77741ff
cmd/cue: mention CUE_DEBUG in cue help environment by @rogpeppe in d5ecd6c
internal/mod/modresolve: fix stripPrefix for exact match by @rogpeppe in fa65317
internal/_e2e: remove cleanup.go and tools.go by @mvdan in ec6cc09
internal/e2e: join into the root Go module by @mvdan in 31e47e2
internal/e2e: test that we can't replace published versions by @mvdan in d1104bd
internal/e2e: stop creating GitHub repositories by @mvdan in ba698de
all: prevent tests from using the host's docker/config.json by @mvdan in d48dcbe
internal/cueversion: bump fallbackVersion for v0.8.0-rc.1 by @mvdan in ccb64b1
doc/tutorial: skip module.cue as a golden file to avoid churn by @mvdan in d97e914
cmd/cue: use CUE_VERSION_OVERRIDE in script tests to avoid churn by @mvdan in e529ce6
cmd/cue: fix "login" on a clean environment, and add tests by @mvdan in f6238e5
internal/cueversion: convert spaces to underscore in Go version by @rogpeppe in 0b7c434
cmd/cue,mod/modconfig: send User-Agent header by @rogpeppe in 6db0b7f
internal/cueversion: new package by @rogpeppe in 5dbbbcb
cmd/cue: enable HTTP logging for cue login by @rogpeppe in 9f556fe
cmd/cue: implement cue mod tidy --check by @rogpeppe in 9789ee6
internal/modload: implement tidiness checker by @rogpeppe in 405511d
mod/modfile: check canonical language version by @rogpeppe in 2e503e0
internal/mod/modload: split Tidy from UpdateVersions by @rogpeppe in 0a23647
bump ociregistry dependency to pull in a panic fix by @mvdan in 382ea51
cmd/cue: implement support for HTTP logging by @rogpeppe in 9c8b09a
internal/httplog: new package by @rogpeppe in 893798b
Revert "internal/e2e: partially revert using cue mod init modpath@version" by @mvdan in b1e40ae
cmd/cue: use fallbackVersion when built via a directory replace by @mvdan in e54fb85
cmd/cue: hard-code a fallback CUE semver version by @mvdan in fc7038a
update golang.org/x/... dependencies for v0.8.0 by @mvdan in 6afa3ef
internal/ci: update the pinned Go version for v0.8 by @mvdan in a1e8429
internal/cuedebug: new package by @rogpeppe in 6ad495d
cue/load: fix race in testing by @rogpeppe in ee26ee2
mod/modconfig: make http transport configurable by @rogpeppe in 0ef11fc
internal/core/adt: set nonRooted by @mpvl in 28ae97d
internal/core/debug: more state in formation by @mpvl in 2273c7d
internal/core/adt: make runner a struct instead of func by @mpvl in 0651453
internal/core/adt: fix conjunct index by @mpvl in 2554094
internal/core/adt: implement new evaluator by @mpvl in 5f55954
internal/core/adt: only error if inspected node missed counters by @mpvl in c547590
internal/core/adt: closedness improvements by @mpvl in b7f76be
internal/core/adt: add lifetime check for closedness by @mpvl in cdcb6fa
internal/core/adt: mark functions only used in old evaluator by @mpvl in f55405b
internal/core/adt: exclude tests with disjunctions by @mpvl in 145b436
internal/core/adt: propagate closedness up by @mpvl in 9d951f6
internal/core/adt: introduce visual CUE debugger by @mpvl in 37c0260
mod/...: API tweaks by @rogpeppe in 7d4d90d
cmd/cue: implement cue mod get by @rogpeppe in 93643a3
cue/load: implement UpdateRequirements by @rogpeppe in 2dc8879
cue/load,mod/modconfig: support custom environment variables by @rogpeppe in bab5d3a
bump ociregistry dependency by @rogpeppe in 50c2472
mod/...: remove three somewhat unnecessary APIs by @mvdan in 6cba4c0
mod/module: assume Go 1.21 or later by @mvdan in aa60650
cue/load: delete unexported funcs only used in tests by @mvdan in 812bd85
internal/str: remove as it only had one trivial use by @mvdan in 77d5973
cue/load: remove unused code from the modules refactors by @mvdan in c5e67f2
cmd/cue: fix bad variable reference by @rogpeppe in 77936ec
cmd/cue: add registryconfig help by @rogpeppe in 91c72d9
internal/e2e: partially revert using cue mod init modpath@version by @mvdan in 94a444f
cmd/cue: support --package flag when output is CUE by @myitcv in 93acaa3
cue/load: add runnable example for external modules by @rogpeppe in cc98a77
mod/modconfig: factor out from cmd/cue by @rogpeppe in 59e6fd0
mod/...: mark as experimental by @rogpeppe in 3210353
mod/modcache: move from internal/mod/modcache by @rogpeppe in 4232562
internal/par: move from internal/mod/internal/par by @rogpeppe in d1fba4f
mod/modregistry: move from internal/mod/modregistry by @rogpeppe in aabff10
mod/modfile: move from internal/mod/modfile by @rogpeppe in 8533c7d
mod/module: move from internal/mod/module by @rogpeppe in 2727766
cue: fix typos in the Hid function documentation by @kharf in 723438a
cue/load: add a runnable package example by @mvdan in 5b4a581
internal/ci: fix reference to tool/file.RemoveAll by @mvdan in d42ab3d
tools/flow: check and return errors from task values by @nickfiggins in 9ef35eb
cmd/cue: stop trying to set $HOME in script_test.go by @mvdan in ff8d497
cmd/cue: skip the logins.json authorizer if no file is found by @mvdan in 32a72ae
bump ociregistry module version by @rogpeppe in 30cae5b
internal/ci: fix goreleaser when using gomod.proxy by @mvdan in d779310
internal/ci: print goreleaser config yaml before using it by @mvdan in 3b9da48
bump ociregistry dependency by @rogpeppe in 44fbc2a
cmd/cue: improve error message when modules experiment not enabled by @rogpeppe in d1f1793
hide testdata cue files to allow cue mod tidy to pass by @mvdan in bd96660
cmd/cue: clarify prefix matching semantics by @rogpeppe in 7a9e47c
cue.mod: add language.version to the root module by @mvdan in ac53f42
cmd/cue: add language version in "mod init" by @rogpeppe in eb5dc6a
all: replace uses of deprecated ioutil APIs by @mvdan in d6ecc3d
bump golang.org/x dependencies for v0.8 by @mvdan in 88431ee
cmd/cue: use CUE_CACHE_DIR instead of CUE_MODCACHE by @mvdan in 8bc8b1e
cmd/cue: support registry file configuration by @rogpeppe in c1e1a52
internal/mod/modresolve: use same registry representation as CUE_REGISTRY by @rogpeppe in cbf84aa
cmd/cue: update mod docs by @rogpeppe in fa30d88
all: replace mpvl/unique with slices.Compact by @mvdan in 057c324
cmd/cue: use single implementation of CUE_REGISTRY logic by @rogpeppe in 59b92a4
cmd/cue: fix other commands to work with modules by @rogpeppe in 3d9e272
internal/mod/modresolve: add config file functionality by @rogpeppe in be5d706
doc/tutorial: fix broken install.md link by @TheCoreMan in 6691137
all: start taking advantage of Go 1.21+ by @mvdan in 40d5162
cmd/cue: use immutable tags in cue mod registry by @rogpeppe in e0c253b
internal/ci: add cuepls to goreleaser config by @myitcv in c36b959
cuepls: support formatting of CUE files by @myitcv in d185263
cuepls: support .cue filetype by @myitcv in 55f965d
cuepls: remove more server implementation by @myitcv in 1ae88a6
cuepls: first integration test by @myitcv in 181a537
cuepls: renaming gopls -> cuepls by @myitcv in 0b6bc2f
cuepls: initial version of cmd/cuepls by @myitcv in 6a435cf
cuepls: slim down to single format command by @myitcv in 3e7e903
cuepls: remove any mention of vulnerability analysis by @myitcv in 821973b
cuepls: minimal changes to telemetry by @myitcv in ae69f66
cuepls: remove gopls hooks by @myitcv in 09f11f9
cuepls: run internal/golangorgx/revendorToolsInternal.sh by @myitcv in 6229d62
cuepls: initial version of "vendor" script by @myitcv in c207a2d
README: briefly document that we support two Go versions by @mvdan in e69d893
cue/interpreter/wasm: rework the way we test Wasm by @4ad in 41b9e66
cue/interpreter/wasm: remove Wazero global state by @4ad in 6d68b3a
cue/interpreter/wasm: add support for Wasm functions that take and return structs by @4ad in 2ce1036
cue/interpreter/wasm: add support for arbitrary types in extern attributes by @4ad in c896078
internal/core/runtime: expand runtime.Compile signature to accomodate non-builtins by @4ad in 063b8c1
cmd/cue,pkg/tool/exec: rely on cue schema for exec.Run defaults by @nickfiggins in b460e71
cmd/cue: unhide mod tidy and mod publish by @myitcv in d37ea66
internal/ci: run the end-to-end tests with -race by @mvdan in a948eb5
cmd/cue: add testscript for registry auth via logins.json by @mvdan in 64c5656
cmd/cue: fix registry client race by @rogpeppe in 3d1c0cb
cmd/cue: add mod registry server command by @rogpeppe in 649c7f6
clarify that we require Go 1.21 or later now by @mvdan in bef7c4e
internal/ci: upgrade Go matrix include go1.22.0 by @myitcv in 63dbc2d
internal/ci: use node.js 20-compatible action versions by @myitcv in 15a4b3e
README: simplify "install from source" instructions by @mvdan in 5037afc
README: add Docker badge and instructions by @mvdan in b6a6f67
bump cuelabs.dev/go/oci/ociregistry dependency by @mvdan in 0eb0106
cmd/cue: simplify exec trimming in TestX by @nnnkkk7 in eafeb11
pkg/path: fix package comment by @jpluscplusm in 4818cf7
cue/load: allow conversion of module-local paths to OS paths by @rogpeppe in 20451a6
cmd/cue: add test for self import in modules mode by @rogpeppe in 707c6d7
internal/e2e: switch all tests to cue mod publish by @mvdan in 2930a8e
README: remove obsolete mention of Google by @jpluscplusm in 64a117c
cue/load: make the tests less noisy by @mvdan in 079532c
cue/load: use fewer absolute paths in tests by @mvdan in a25c24b
cue/parser: make the example self-contained by @mvdan in fc77363
internal/mod/modload: fix panic on error in tidy by @rogpeppe in 3146f22
internal/mod: fix tidy in the presence of local code by @rogpeppe in 2a56875
cmd/cue: make the config directory configurable by @mvdan in 22b1ca3
internal/e2e: start using cue mod tidy by @mvdan in 34db9eb
cmd/cue: add version to module.cue file by @rogpeppe in 9ceec10
cue/load: fix crash when there is no module file by @rogpeppe in ec7ca0a
internal/e2e: start using cue mod init modpath@version by @mvdan in 7855e15
cue/token: deprecate base offset by @rogpeppe in b0358a6
cmd/cue/cmd: support major versions in module path by @rogpeppe in e8efa7e
internal/mod/modload: support adding language version by @rogpeppe in 2120803
internal/mod/modpkgload: support gen directories by @rogpeppe in c6e4adf
internal/e2e: tweak expected error string after the cue/load changes by @mvdan in b67300b
cue/load: use modpkgload to resolve dependencies by @rogpeppe in fa12218
cmd/cue/cmd: add (failing) submodule test by @rogpeppe in 8889d6a
cue/load: implement io/fs.FS for overlay filesystem by @rogpeppe in 83a70c6
cue/load: remove unused code by @rogpeppe in 2be5931
cmd/cue: use tokens from "cue login" before docker's config.json by @mvdan in 0e4ec67
cmd/cue: store tokens once "cue login" succeeds by @mvdan in 786095f
internal/mod: track dependencies at package level by @rogpeppe in af405f0
cue/load: use module.ParseImportPath by @rogpeppe in 36a4ce4
internal/mod/module: add ParseImportPath by @rogpeppe in 22cf402
cmd/cmd: add environment help by @rogpeppe in ed4fcdc
internal/mod/modpkgload: add test for package-level dependencies by @rogpeppe in b6032be
pkg/tool/exec: update env spec to support lists by @nickfiggins in 92d99d0
internal/core/adt: use ConjunctGroup in fields by @mpvl in a849212
internal/mod/modresolve: allow other forms of IPv6 localhost by @rogpeppe in 522eb97
cue/errors: remove unused field by @rogpeppe in 693cc0e
internal/mod: remove TODOs that have been done by @rogpeppe in 1fff098
internal/core/adt: remove disallowedField by @mpvl in 657ae6b
internal/core/adt: use OpContext instead of nodeContext for decDependant by @mpvl in 1df027b
pkg: fix CUE source escaping TODO by @mvdan in 1dda25a
internal/e2e: write the rest of an inline comment by @mvdan in 97826df
tools/flow: use atomic.Bool by @mvdan in fefadfc
internal/ci: add a TODO about "goreleaser test" by @mvdan in 21086d0
cue: replace Instance.value with Instance.Value by @mvdan in 20a4505
encoding/gocode: replace cue.Instance with InstanceOrValue by @mvdan in dbf2b75
internal/ci: support co-authors in the signed-off-by check by @mvdan in 87a2e5c
pkg/tool/exec: support defaults in env values by @nickfiggins in e7c2ede
internal/core/adt: implement checks for closedness counters by @mpvl in 928ff3e
internal/core/adt: reorganize for field checks by @mpvl in 2b483d7
internal/core/adt: move rootCloseContext to Vertex by @mpvl in 596adda
internal/core/adt: copy node method for comprehensions by @mpvl in 122b11f
internal/core/adt: only show stats for old evaluator by @mpvl in ce798a7
internal/core/adt: pass flags needed for new evaluator by @mpvl in 7fcc936
internal/core/adt: fix typo in insertion.txtar by @mpvl in 409ab1e
internal/core/adt: add positions of ConjunctGroup by @mpvl in d06d126
internal/core/adt: handle comprehension cycle errors by @mpvl in 0b90ccc
internal/core/adt: add tests to pass for new evaluator by @mpvl in 7453a50
internal/code/adt: hoist position to different line by @mpvl in 106ce1a
internal/core/adt: bail out early from resolve upon error by @mpvl in 6ead06a
internal/core/adt: hoist hasConjuncts by @mpvl in cbcabcf
internal/core/adt: don't match patters for non-regular fields by @mpvl in ca725a8
internal/core/runtime: move EvaluatorVersion to Runtime by @mpvl in 53ed0f6
internal/core/adt: move OpContext out of nodeContext by @mpvl in 200c994
internal/core/adt: add scheduler implementation by @mpvl in 9728b7d
all: update Wazero to 1.6.0 by @4ad in 5c5d291
internal/cli: improve error message on parse issue by @cedricgc in b55e471
internal/core/adt: hoist getNonCyclicCount by @mpvl in 4cc7bc7
internal/cuetxtar: use go-internal diff by @mpvl in 54e1699
internal/core/adt: include ConjunctGroup in addPositions by @mpvl in d5431b2
internal/core/adt: modify some tests by @mpvl in 82e4cef
internal/core/adt: prep for new evaluator by @mpvl in 8146191
internal/core/adt: introduce ConjunctGroup by @mpvl in afed6ae
internal/core/adt: unroll Evaluate in OpContext.concrete by @mpvl in 8933b8c
internal/core/adt: add String implementation for ArcType by @mpvl in cc76012
pkg/net: add IPv6 check by @martingreber in bc91ca7
internal/core: remove unused argument by @mpvl in da0eab4
internal/e2e: use cue mod publish by @rogpeppe in 3d09a4a
cmd/cue: add hidden login command by @mvdan in 0a5e225
cmd/cue/cmd: amend the default for CUE_REGISTRY by @mvdan in b01d129
cmd/cue: rename mod upload to mod publish by @rogpeppe in cc1eaf0
cmd/cue: allow cue mod tidy in non-module root by @rogpeppe in f260855
internal/registrytest: upload deterministically by @rogpeppe in c4c064d
internal/mod/modfile: avoid unnecessary braces by @rogpeppe in 7bcfd0b
internal/mod/modregistry: add Module.Version method by @rogpeppe in 72766c2
internal/registrytest: add Upload function by @rogpeppe in 414695f
internal/mod/modregistry: add GetModuleWithManifest method by @rogpeppe in 76298d4
pkg/net: replace net with net/netip by @martingreber in 87a3b17
internal/cmd: add cue-ast-print to visualize syntax trees by @mvdan in bf94b66
deps: upgrade to latest cuelabs.dev/go/oci/ociregistry by @myitcv in c84175b
go.mod: bump non-user-facing dependencies by @mvdan in 3594d13
internal/encoding/yaml: quote hexadecimal-looking strings by @vikstrous in 0b3455c
internal/e2e: set CUE_MODCACHE in TestScript's Setup by @mvdan in db98219
cue/load: use cached registry by @rogpeppe in 7dc80ff
cmd/cue: use cached registry for cue mod tidy by @rogpeppe in 400f829
internal/mod/modfile: guard against cue.Value race by @rogpeppe in 53d036a
internal/mod/modcache: use robustio by @rogpeppe in c5e1342
internal/mod/modcache: new package by @rogpeppe in c3ec30c
cmd/cue: remove a stale TODO on marshaler types by @mvdan in a567677
internal/mod/modregistry: avoid round trip by @rogpeppe in e090abf
internal/mod/module: add support for escaping by @rogpeppe in 576c564
internal/mod/modregistry: add ManifestDigest by @rogpeppe in 3c187c5
doc/ref: use builtin instead of built-in by @jpluscplusm in 7ed1bca
internal/mod/modload: support major version defaults by @rogpeppe in ac248f4
internal/maps: new package by @rogpeppe in 1958c32
internal/mod/modpkgload: support packages without major versions by @rogpeppe in 3cfb6e2
internal/mod/modrequirements: support major version defaults by @rogpeppe in 7afd472
internal/mod/modregistry: support cross-major-version queries by @rogpeppe in 4773bf6
modfile: support major version defaults by @rogpeppe in faf7cd5
cmd/cue: prevent failures if /tmp/cue.mod exists by @mvdan in c8073f4
cue/load: drop support for legacy pkg directories by @mvdan in e81d181
cmd/cue: cue mod tidy command by @rogpeppe in 2635119
internal/mod/modload: new package by @rogpeppe in 6bd89dc
internal/mod/modpkgload: new package by @rogpeppe in 3632c1f
internal/core: use precise apd.Decimal by @myitcv in 8271724
internal/mod/modrequirements: add GraphIsLoaded and RootModules by @rogpeppe in 74d7664
internal/mod/module: add Version.IsValid by @rogpeppe in 71ab88a
internal/mod/modregistry: return no tags for non-existent repo by @rogpeppe in 0c2c730
internal/mod/modfile: add Format by @rogpeppe in 7d588b9
internal/mod/modimports: discard package qualifier in import paths by @rogpeppe in 4edbf9d
README: drop golangci badge by @mvdan in 967c9c6
update ociregistry dependency by @rogpeppe in e07c4b8
internal/slices: add Equal by @rogpeppe in 4f4f718
internal/mod/modimports: support scanning single directory by @rogpeppe in 413d0d5
internal/mod/modrequirements: new package by @rogpeppe in 0e0d638
internal/ci: limit goreleaser to doing release drafts by @mvdan in f3411b4

`v0.7.1`

Compare Source

This release is a re-build of CUE v0.7.0 with Go 1.22.0 to prevent cue get go panics; see https://github.com/cue-lang/cue/issues/2802.

`v0.7.0`

Compare Source

This release comprises a number of bug fixes and small improvements, as well as more ground work for Modules, WebAssembly, and the core evaluator's performance refactors.

Note that v0.7 was originally planned to center around the core evaluator's performance improvements. Since those refactors are not ready, and we have other fixes and improvements we want to release, we have slightly altered the release plan accordingly. We will share more details on our next community call.

As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. Unity continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Thank you to @SteVwonder, @bozaro, @cedricgc, @howardjohn, @mpvl, @mvdan, @myitcv, @nickfiggins, @rogpeppe, @rudifa, and @uhthomas for contributing to this release!

And a special thanks to all who joined the recent contributor office hours calls on our community calendar, as well as our #contributing channel on Slack! Thanks to their involvement, more issues can be investigated and fixed each release.

Go API

Note that this version of CUE requires Go 1.20 or later, per our policy to support the latest two stable Go releases just like upstream.

CL 1172105 fixes a regression introduced in v0.6.0 where calling Iterator.Selector.Index while iterating over a list would incorrectly panic.

CL 1167597 fixes cue/load so it now errors on package import cycles, following the spec.

CL 1167647 adjusts cue.Value.Decode to decode empty CUE lists into a Go interface{} as a non-nil empty slice.

CL 547369 teaches cue.Value.Decode how to decode values which aren't entirely concrete into a Go type by using cue.Value as part of the destination type.

Language

There are no changes to the language in this version.

Spec

CL 1171216 fixes two errors in a dynamic fields example.

Core Evaluator

CL 1172014 disallows the direct use of unary operators with basic types, since they would result in confusing bounds which seemed incorrect.

CL 1172013 fixes a closedness bug where close did not properly apply when used inside definitions.

CL 1172874 fixes a panic in cue export introduced by v0.6.0.

Encoders

CL 1172314 teaches encoding/protobuf to follow the field_behavior annotation marking a field as either optional or required when decoding.

Builtins

CL 1172991 adds a mustSucceed boolean parameter to tool/exec.Run, which can be set to false to allow a command to fail and set its own field success to false.

CL 557322 fixes the values of math's Log2E and Log10E constants, which were being incorrectly truncated.

`cmd/cue`

CLs 1170966 and 1171302 fix a number of issues in cue fmt (and by extension the cue/format package), resulting in better and more consistent formatting of CUE files.

CLs 1171292, 1171015, 1170115, and 1171971 implement a variety of improvements and bug fixes for cue get go.

CL 1172017 fixes a number of issues with the line and column positions reported by our YAML decoder, which could result in weird CUE formatting when using cue import or misleading positions being shown to the user.

CL 1169709 increases the robustness of cue export -o, which in some situations could ignore file errors or incorrectly replace an existing file without the -f flag.

CL 1173072 fixes a panic when using cue import --list with empty YAML input.

CL 1168436 updates the cue export documentation to add the missing cue and binary supported export formats.

Modules

A number of changes are included to support an experimental implementation of the proposed modules and package management support. These aren't enabled by default, and will be announced soon.

Full list of changes since v0.6.0

internal/ci: bump to Go 1.21.5 for the upcoming release by @mvdan in ce1ad81
cmd/cue: fix panic when importing empty files as a list by @uhthomas in b36b477
internal/core/adt: change semantics of unary_op(basictype) by @mpvl in e1ceed4
internal/core/adt: fix closedness bug by @mpvl in 886eefd
internal/core/adt: add test to prepare for fix by @mpvl in 145764d
CONTRIBUTING: mention the Slack channel and office hours calls by @mvdan in 16a0cda
pkg/tool/exec: add a Run.mustSucceed parameter by @nickfiggins in 10c4796
cue: explicitly document values are not safe for concurrent use by @mvdan in d805c22
internal/ci: bump Go and GoReleaser for v0.7.0-rc.1 by @mvdan in 8f88dcb
internal/slices: move from internal/mod/mvs/internal/slices by @rogpeppe in 0e51dbb
internal/mod/internal/par: move from internal/mod/mvs/internal/par by @rogpeppe in fe0e04a
internal/registrytest: do not check that dependencies exist by @rogpeppe in 99bdbad
internal/mod/modimports: new package by @rogpeppe in 79033c2
internal/core/export: fix a recent nil pointer regression by @rudifa in 141925a
internal/core/adt: use state directly by @mpvl in bba2263
internal/core/adt: expand on permutations for test by @mpvl in 596fdc9
internal/cuetxtar: include diff between test and fallback test by @mpvl in 6774d0d
internal/txtarfs: factor out from registrytest by @rogpeppe in 265a7a0
internal/cueimports: export API and fix for CUE syntax by @rogpeppe in 47d6dce
internal/cueimports: copy code from cue/load by @rogpeppe in 9e55783
cue/load: remove unused functionality by @rogpeppe in b727189
all: replace html/template by text/template by @mvdan in 361ae4f
encoding/protobuf: support field_behavior "required" option by @howardjohn in 80b0eee
cmd/cue: fix incorrect position in yaml import by @uhthomas in d97b0c3
all: adopt .gitignore for new delve binary naming by @mpvl in 68e9d5d
internal/core/adt: make ListMarker Src an expression by @mpvl in f59894c
internal/core/adt: changes needed for new evaluator by @mpvl in fb88beb
cue: don't panic on Iterator.Selector.Index with lists by @mvdan in 9dd0f82
cue: allow top level JSON marshalers in EncodeType by @rogpeppe in 8f796bf
cue: support decoding into cue.Value fields by @rogpeppe in b25fc05
internal/mod/mvs: discard copied par tests by @mvdan in 4e30101
CONTRIBUTING: fix repo reference rendering by @cedricgc in 7a4ea86
internal/e2e: make unique module names more robust by @mvdan in a404c89
cmd/cue: support optional comments in get go by @uhthomas in 67ea9cf
cmd/cue: ignore complex types in get go by @uhthomas in 112b0b2
pkg/internal/builtintest: don't print superfluous newlines by @uhthomas in 8b32c49
internal/tdtest: document how the name field is used by @rogpeppe in deab307
internal/e2e: add a test for a private github repo by @mvdan in 4d2ba88
internal/ci: add gcloud auth to the e2e tests by @mvdan in 95a88a5
CONTRIBUTING: clarify two sections by @cedricgc in d947a69
internal/e2e: add a "cue mod upload" end-to-end test with gcloud by @mvdan in a060f85
internal/e2e: rename existing testscript and add a summary by @mvdan in 4dba8dd
internal/e2e: tweak how we use secret env vars by @mvdan in d3efde7
internal/mod/modfile: add copyright message by @rogpeppe in f9c8d98
cmd/cue: cue mod upload command by @rogpeppe in ca20656
internal/ci: enforce vet and mod tidy on all modules by @mvdan in 2ae1a9e
internal/e2e: run go mod tidy by @mvdan in 8b95971
cue/load: do not format registry as a string by @rogpeppe in 4fd631d
internal/mod/modzip: rename from internal/mod/zip by @rogpeppe in 5365838
cmd/cue: wire up OCI authorization by @rogpeppe in b2ac3f7
internal/registrytest: remove _registry remnants by @rogpeppe in 273602f
internal/ci: only run e2e tests in source repo by @myitcv in b15fcb0
internal/ci: test internal/e2e on protected branches by @mvdan in d72997f
cmd/format: be consistent with whitespace in lists by @uhthomas in d70007c
internal/e2e: first version of the end-to-end module tests by @mvdan in 8c826bc
cmd/cue: support type parameters in get go by @uhthomas in 3b4e03d
cue: add more godoc links by @mvdan in 286dfcb
cmd/cue: support unsafe pointer in get go by @uhthomas in 05ceba6
spec: fix two errors in the dynamic fields example by @SteVwonder in 200a8ec
README: add a direct mention of the community calendar by @mvdan in 8a98ac0
cmd/cue/cmd: wire up modmux by @rogpeppe in ac1b433
internal/mod/modmux: new package by @rogpeppe in 8e24597
cue/format: indent list elements correctly by @uhthomas in eddccfc
internal/registrytest: do not assume subdirectory by @rogpeppe in f892345
internal/mod/modregistry: remove error return from New by @rogpeppe in 1e26aa2
internal/mod/modresolve: new package by @rogpeppe in 2a7d1d6
internal/mod/module: add CheckPathWithoutVersion by @rogpeppe in c6da768
cue: make use of some godoc links by @mvdan in 63307bd
internal/registrytest: support prefix by @rogpeppe in 6c71b2c
cmd/cue/cmd: support CUE_REGISTRY by @rogpeppe in d5c0745
update ociregistry dependency by @rogpeppe in a43792c
internal/mod: kick off WIP doc to track FAQs, points to document by @myitcv in b664f0c
pkg/path: use a subtest helper to test for each OS value by @mvdan in 1227a83
internal/core/adt: avoid chatty tests by @mvdan in 55c6db6
internal/mod/zip: skip SizeLimit tests with -race by @mvdan in 91d9766
internal/mod/zip: silence "err value not used" warnings by @mvdan in 665d19a
internal/mod/zip: use testing.T.TempDir by @mvdan in fd8d5f9
internal/mod/zip: make all tests parallel by @mvdan in b004dd6
internal/mod/zip: remove duplicate test case by @mvdan in 6c51cf0
cue/load: make Config.Registry an ociregistry.Interface by @mvdan in fefeb36
internal/registrytest: rewrite in terms of io/fs by @mvdan in 5f19042
internal/registrytest: move from cue/load/internal by @mvdan in 633874c
internal/semver: copy from golang.org/x/mod by @rogpeppe in a9a6965
internal/cueexperiment: parse CUE_EXPERIMENT by @rogpeppe in b4583de
cue/load: update for OCI modules by @rogpeppe in b951b07
internal/mod/modregistry: new package by @rogpeppe in 3c368d3
update testscript so that it propagates GORACE by @mvdan in e3d42af
cmd/cue: do not ignore Encoder.Close errors on export by @mvdan in f3a515e
cmd/cue: add more test case for exporting to a filename by @mvdan in 388f9a1
internal/ci: set GORACE=atexit_sleep_ms=10 for go test -race by @mvdan in cbdd996
internal/core/export: fix a few staticcheck warnings by @mvdan in 6923617
cmd/cue/cmd: remove a few unused parameters by @mvdan in 2f6b27b
go.mod: update a few dependencies by @mvdan in c08344a
cue: simplify the reflect checks in Value.Decode by @mvdan in 8709d8a
cue/ast/astutil: use generics to remove some reflect by @mvdan in b8cb9a4
cue/load: use tdtest for TestLoad by @rogpeppe in 7389fe9
internal/tdtest: clean filenames before comparison by @rogpeppe in 28f34a2
internal/cuetxtar: report full result for cuetxtar test failures by @rogpeppe in bfa250d
internal/mod/modfile: new package by @rogpeppe in 551fe68
internal/mod/module: improve error message by @rogpeppe in 0e95843
internal/mod/zip: adapt to CUE semantics by @rogpeppe in 3142030
internal/mod/mvs: adapt to CUE semantics by @rogpeppe in 4eca0c7
internal/mod/mvs/internal/...: remove ignore build tags by @rogpeppe in a102419
internal/mod/module: adapt to CUE semantics by @rogpeppe in 38cf584
internal/mod/mvs: copy from cue/load/internal/mvs by @rogpeppe in 204665c
internal/mod/module: split module.go by @rogpeppe in c6e91b1
internal/mod: copy files from golang.org/x/mod by @rogpeppe in 6f5b370
cmd/cue: update the list of output formats by @mvdan in 42ae8e4
cue: minor drive-by cleanups by @mvdan in a44c805
all: fix two minor printf bugs spotted by staticcheck by @mvdan in 7b49758
all: fix issues spotted by nilness by @mvdan in 382449b
pkg/math: reuse Ln2 and Ln10 in Log2E and Log10E by @mvdan in fe2f216
pkg: teach gen.go about go/types by @mvdan in 2091170
pkg: swap go/build for go/packages in gen.go by @mvdan in e9a412d
bump golang.org/x dependencies by @mvdan in bf3ac20
all: clean up some TODOs for old Go versions by @mvdan in 106fc3a
cue: make use of Go 1.20+ APIs by @mvdan in fae9c82
internal/core/adt: change slice type of notify by @mpvl in 3165a5e
internal/core/adt: rename node to vertex by @mpvl in 0b96e3b
internal/cuetxtar: allow using a fallback golden set by @mpvl in 826f28c
internal/core/adt: hoist the test body of TestEval by @mpvl in ca254d6
internal/core/adt: add new closedness implementation by @mpvl in 5062118
internal/tdtest: make function detection more robust by @mpvl in 49728f7
internal/tdtest: mimic replacement of testing.Run in Select by @mpvl in 1763cea
cue/load: add package import cycle error by @bozaro in 220b44e
cue: decode empty list as empty slice instead of slice-typed nil by @bozaro in 66ebe0f
internal/core/adt: fix nil pointer dereference by @bozaro in 3286ead
pkg/math: fix Log2E and Log10E constant expressions by @mvdan in a1038f7
pkg/math: add tests which show the API constants by @mvdan in 63a4256
all: add Go 1.21, drop Go 1.19 by @mvdan in 3a101ba
all: minor wins with strings.Cut and utf8.AppendRune by @mvdan in 72ba066
cmd/cue: fix up fmt_multi comparison by @mvdan in d4d109e
encoding/gocode: don't require output to be stable by @mvdan in 3bf3dbd

`v0.6.0`

Compare Source

The main focus of this release is the introduction of required fields, as well as fixing a number of issues and regressions introduced in the v0.5.0 release.

As a reminder: users can register their projects with unity, our regression and performance testing setup. unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. unity continues to catch multiple issues with each release. Adding your project to unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Thank you to @4ad, @Abirdcfly, @alexandear, @chee-zaram, @eraserhd, @ghostwheel42, @joanlopez, @jpluscplusm, @kcburge, @mpvl, @mvdan, @myitcv, @rogpeppe, @toshi0607, and @zeithaste for contributing to this release!

API

CL 543335 adds arch to set of injectable system variables understood by cue/load. The text at cue help injection explains how this in more detail.

CL 552142 adds support for zero values in cue.Value.Float64, which has the effect of fixing the error when attempting to use strconv.FormatFloat with a zero value.

CL 548783 fixes a long-standing bug to make HTML escaping in JSON an opt-in. This means that cue export now respects the --escape flag when set, and encoding/json only escapes HTML when HTMLEscape is used.

Language

Required fields

The main focus of the v0.6.0 release is the introduction of required fields.

CUE already supports the “optional field constraint”, denoted foo?: value.

Required fields add a “required field constraint”, denoted foo!: value, which is like foo?: value, but requires a regular field be provided for foo (a field foo: without !: or ?:).

We refer to optional field constraints and required field constraints collectively as “field constraints”.

As a general rule, all data and data templating should be defined with regular fields, whereas schemas would be defined in terms of field constraints. Of course, CUE being CUE, mixing these two fields is allowed: this rule is not a restriction but suggested as a matter of style and proper usage.

Here are some examples of how exclamation marks can be used to express things that were previously not possible.

#Def: {
    kind!: "def"
    intList!: [...int]
}

Using required fields can also result in better error messages. Consider this schema:

#Person: {
    name: string
    age?: int
}

Note that this is non-idiomatic, because our new guidelines suggest schemas should only be defined in terms of field constraints, but we will use this for illustration purposes.

Now consider this usage of #Person:

jack: #Person & {age: 3}

In data mode, the error message here is currently jack.name: incomplete value string, which does not provide much actionable information to the user to help them fix the problem.

Now consider how #Person looks with required fields, idiomatically only using field constraints:

#Person: {
    name!: string
    age?:  int
}

jack: #Person & {age: 3}

Now the error message reads:

jack.name: field is required but not present

which more closely reflects the underlying problem..

This error could be resolved by adding jack: name: "Jack".

For more details and background on the change, please see the original required fields proposal.

Other changes

Whilst it should not be a breaking change from a CUE perspective, we have upgraded to use github.com/cockroachdb/apd/v3. We have also increased apd.Context precision from 24 to 34.

CL 551207 adds support for making dynamic fields optional or required. For example, the following is now possible:

x:	"y"
(x):  "foo"
(x)?: "foo"
(x)!: "foo"

and yields:

x: "y"
y: "foo"

CL 546886 removes support for old-style :: definitions. This also includes deprecation support. In a similar vein, CL 547011 removes the last vestiges of <foo>: T. This was once the notation for pattern constraints.

Spec

Various bug fixes, with special thanks to @nicuveo for raising many of these.

Builtins

The following four functions have been added to the net package:

PathEscape
PathUnescape
QueryEscape
QueryUnescape

Thanks to @eraserhd for this change.

CL 549087 reimplements pkg/list.Sort. The resulting reduction in the number of allocations and other work gives rise to a ~80% reduction in running time against CUE benchmarks.

`cmd/cue`

CL 547212 improves the documentation for the -l flag passed to cue import. This addresses a frequent point of confusion in questions to GitHub Discussions and on Slack.

CL 550616 fixes cue get go to respect the --exclude flag for constants. This makes it possible to (for example) exclude all unexported identifiers from a cue get go run.

CL 555576 fixed an important bug where cmd/cue vet was not properly consuming all input data.

CL 556526 fixed a bug where CUE files beginning with an underscore were not being loaded when explicitly given as filename arguments.

WebAssembly (Wasm)

We have added preliminary support for Wasm. Users can compile code from any language and toolchain that supports Wasm into plugins that are dynamically loaded by CUE. Users can then call and use functions from these Wasm modules, just like they can use standard library functions.

See the documentation at cuelang.org/go/cue/interpreter/wasm to learn more about Wasm and its current limitations.

Changelog

Expand for the full changelog

internal/core/dep: always introduce Environment for Comprehension Value to fix panic by @mpvl in 99e8578
internal/core/dep: adapt Recurse to mimic dep.Visit by @mvdan in 97d7109
internal/ci: use cue-lang/cuelang.org workflow_dispatch for tip by @myitcv in 33b7393
cmd/cue: fix regression when injecting vars with cue cmd by @mvdan in da3ee7d
internal/core/adt: lets of comprehensions are multi lets by @mpvl in 43b4674
internal/core/adt: always mark let in comprehension as "complete" by @mpvl in 5123737
cue/ast: clarify what is a valid identifier by @mvdan in c4ced5e
internal/core/adt: find late-stage conflict errors by @mpvl in 0c48837
internal/core/adt: add tests to fix 2481 by @mpvl in d3444e3
internal/core/adt: fix stack overflow with comprehensions by @mpvl in 33071c0
deps: upgrade to go1.20.6 for release builds by @myitcv in 538eb9c
internal/core/compile: reject "_" as an alias name by @mvdan in bcbe967
all: remove a few more unused bits of code by @mvdan in c8e51a5
internal/core/dep: prevent passing "empty" vertices to tools/flow by @mvdan in c3eda1d
internal/core/adt: do not delay processing of fields by @mpvl in e7cfb50
internal/core/adt: add tests for upcoming issues by @mpvl in cabc1db
CONTRIBUTING: fix references to the old Unity repo by @mvdan in 23e265d
cmd/cue: print returned error by @mpvl in 450ff90
deduplicate content between README and CONTRIBUTING by @mvdan in 4c48cee
move doc/contribute.md to CONTRIBUTING.md by @mvdan in db28ec6
readme: warn new contributors not to use SSH auth by @jpluscplusm in f4c5639
internal/core/adt: pass state to addList by @mpvl in b38aece
internal/core/adt: set scalar more proactively by @mpvl in ab15bb8
internal/core/adt: better error message for cycles by @mpvl in 5e84a6d
internal/ci: count number of Signed-off-by lines by @myitcv in 4ba1b15
internal: remove a few unused APIs by @mvdan in 1c1a7b3
cue/load: fix Instances race by @rogpeppe in c10d7cb
cue/load: allow _*.cue files when explicitly listed by @myitcv in b16f6ce
internal/core/dep: fix recursive let processing by @mpvl in ca1f812
internal/core/dep: add Dependency.Recurse by @mpvl in f6e49bd
internal/core/dep: prepare for public APi by @mpvl in 0554d4e
internal/core/adt: mark comprehension key as dynamic by @mpvl in d4fd104
internal/core/dep: further improve dependency analysis by @mpvl in f513654
internal/core/dep: add more tests ahead of changes by @mpvl in 202eb3e
cue: fix some low hanging fruit from staticcheck by @mvdan in 41b38fe
all: replace godebug/diff with go-cmp/cmp by @mvdan in fa6e229
encoding/gocode/gocodec: use different generic type signature by @rogpeppe in 1a98ee1
internal/core/dep: add references and line in test output by @mpvl in 518bafa
internal: use Scanner API to parse attributes by @rogpeppe in 3400e74
internal/core/dep: require importPath argument by @mpvl in 4fcf29c
internal/core/dep: handle inline composite literals by @mpvl in 07ae1be
cue: report useful error for uninitalized Context by @mpvl in b8e2bf0
cue: add extra TestAttributeString test by @rogpeppe in 876af7a
internal/core/export: avoid _#def if unnecessary by @mpvl in d112f64
cmd/cue/cmd: add test for issue 2251 by @mpvl in 19af1e9
cue/scanner: add Offset method and export DontInsertCommas by @rogpeppe in de9e760
cue: add more attribute tests by @rogpeppe in d8a0e26
internal: change attribute tests to be less implementation-specific by @rogpeppe in 7741d21
encoding/gocode/gocodec: allow cue.Context by @rogpeppe in 1e76095
internal/core/dep: add and modify some tests for issue 2247 by @mpvl in 24e8d56
internal/core/export: fix panic converting int label to identifier by @mpvl in 24f3fb3
encoding/json: check that required fields are present by @mpvl in adbe80e
pkg/encoding/json: add tests that needs to be fixed by @mpvl in 8df1034
pkg/encoding/json: add more structure to tests by @mpvl in 6922e14
cue: document UnifyAccept by @mpvl in c054274
internal/core/export: preserve original field aliases by @mpvl in 7be6224
internal/core/compile: fix offset error in pattern alias by @mpvl in 914d64d
internal/ci: consistently trigger Unity as porcuepine by @mvdan in a0510ac
internal/ci: bump Go and GoReleaser prior to alpha.2 by @mvdan in b6a32da
correct misleading phrases in documentation by @chee-zaram in 0755dc8
internal/core/export: avoid panics on computed comprehensions by @mvdan in 6db2253
internal/core/adt: return from Accept earlier for hidden fields by @mpvl in c724eef
cue/ast: fix staticcheck warnings by @mvdan in cc6b544
internal/core/adt: add missed error by @mpvl in 19749aa
internal/core/adt: fail on missing required field in comprehension by @mpvl in a991bd6
cue: allow iterating hidden fields and definitions of embedded scalars by @mpvl in de44cab
internal/core/adt: add position for required field error by @mpvl in 452e143
internal/core/validate: allow required fields in definitions by @mpvl in 317f88d
cue/ast: support specifying required fields in NewStruct by @mpvl in 1432683
tools/flow: check cycle marker by @mpvl in 9a566ed
spec: add definition for dynamic fields by @mpvl in 3a635fc
spec: various fixes by @mpvl in e46324e
cmd/cue: properly consume all data input in vet by @mvdan in b22ec6a
cmd/cue: add AllocBytes and AllocObjects to stats by @mvdan in 03d85b8
increase apd.Context precision from 24 to 34 by @mvdan in 7bcbcd6
update to cockroachdb/apd v3 by @mvdan in 4728223
cue: add a "decimal" benchmark by @mvdan in f3be10a
deps: switch to use quicktest instead of testify by @myitcv in 12908b3
cue/testdata: add regression test for #2244 by @mvdan in 442c023
internal/cuetest: remove support for CUE_LONG by @mvdan in cb461fd
all: sed-replace all trivial uses of ioutil by @mvdan in f56ccf0
pkg/path: remove unused code by @rogpeppe in ab48c0f
encoding/protobuf/jsonpb: remove unused code by @rogpeppe in b2476bd
encoding/protobuf: remove unused code by @rogpeppe in b41f26f
tools/fix: remove unused code by @rogpeppe in 1f888b5
all: use strings.Builder in a few more places by @mvdan in 97cba0b
internal/encoding: remove unused code by @rogpeppe in 251790e
encoding/openapi: remove unused code by @rogpeppe in 36645d1
all: go fix to remove old build tags by @mvdan in 8868ae6
internal/ci: trigger Unity on master as porcuepine by @mvdan in 2148aed
internal/ci: remove cue-unity/unity from codereview.cfg by @mvdan in c341427
internal/core/conver: make use of reflect.Value.IsZero by @mvdan in 5318af1
internal/ci: further tidy up by @myitcv in 82f96c5
cue/interpreter/wasm: add user-level docs by @4ad in 40fb30d
cue/interpreter/wasm: add Wasm support for abi=c by @4ad in 0520a3f
internal/pkg: move pkg/internal to internal/pkg by @4ad in 88922d1
codereview.cfg: add cue-unity-new by @mvdan in a670427
doc/tutorial: fix typo by @toshi0607 in 2304cb5
cue/load: replace go-internal/semver with x/mod by @mvdan in 6c92698
internal/cuetxtar: print error details by @rogpeppe in 80d6ea0
tools/flow: support tasks inside slices by @rogpeppe in 6e0366f
internal/core/convert: split the cue tag commas after the last quote by @ghostwheel42 in 49a64f4
pkg/net: add Path{E,Une}sape and Query{E,Une}scape by @eraserhd in 9082446
cmd/cue: refactor our use of cobra by @mvdan in 59080b6
cmd/cue: do not defer closing files in fmt's loop by @mvdan in 7f79469
cmd/cue: check all file I/O errors in fmt by @mvdan in 8c6d9ba
docs/tutorial: revert to using cue eval -i by @myitcv in 5e66c83
all: move pkg/gen and internal/cmd/qgo to build-ignored files by @mvdan in bad36b2
internal/ci: use go1.20.3 for releases by @myitcv in 9db1b95
internal/tdtest: use field name in default error message by @mpvl in 401cab2
internal/core/adt: fix Definition closedness bug in API by @mpvl in c3c8eb7
update txtpbfmt to drop indirect dependency on glog by @mvdan in 410eea1
internal/core/adt: fix NotEqualOp for lists with differing lengths by @mvdan in 6e185bb
cmd/cue: remove skipped test scripts for fixing old definitions by @mvdan in 9505e90
all: make HTML escaping in JSON an opt-in by @mvdan in 48207fb
all: add tests to cover HTML escaping via encoding/json by @mvdan in 1aefd09
cue/build: remove context.Context field by @rogpeppe in 1932295
cue/ast: fix IsValidIdent for _0 by @rogpeppe in 9422314
internal/diff: remove unused code by @rogpeppe in 9e22283
cmd/cue/cmd: remove unused code by @rogpeppe in aa8c66f
internal/core/adt: fix let closedness issue with API use by @mpvl in 731ddd9
internal/core/export: avoid introducing shadowing by @mpvl in 1c9a3b2
internal/tdtest: new table-driven test package by @mpvl in 102150d
cue: more support for required fields for selectors by @mpvl in 0e16084
internal/core: fail on missing required only when concrete by @mpvl in f85172a
cue: fail on required field in various cases by @mpvl in e7d7c6a
internal/core/adt: add wrapper for inline Vertex by @mpvl in 071c4ab
internal/core/export: always export required fields by @mpvl in d5dd9ec
cue: remove field type by @mpvl in d05d9c1
cmd/cue: avoid loading the current package in cue help by @mvdan in 143b102
all: remove duplicate words in comments by @Abirdcfly in d8c71fa
internal/ci: fix cache eviction by @myitcv in 53d3bc7
internal/ci: address review feedback from CL 551352 by @myitcv in 06397b5
cue: add support for zero values in Value.Float64 by @kcburge in 8d31dad
cue/load/tags: add arch to set of injectable system variables by @jpluscplusm in 752b8e4
internal/ci: allow trybot workflows to be workflow_dispatch-ed by @myitcv in 09221a3
internal/core/adt: required fields checked for closedness by @mpvl in 42580d5
doc/ref/spec.md: fix uint16 and uint32 values range by @joanlopez in c67fe60
all: correct typos and duplicate words in comments by @alexandear in 2e28b01
cue/errors: remove redundant Sort call in list.sanitize by @zeithaste in f106acf
internal/ci: refactor CI workflows by @myitcv in d71a76c
internal/ci: remove hard-codings in base package by @myitcv in f881884
internal/core/adt: change addList signature by @mpvl in 0c840f6
internal/core/adt: introduce ArcNotPresent by @mpvl in e3a7fcf
internal/core/adt: use value array for Disjunction by @mpvl in 166ac88
internal/core/adt: specialize injectComprehension by @mpvl in fa4f2d3
internal/core/adt: hoist comprehension loop body by @mpvl in e0f5681
internal/ci: move evict_caches to base by @myitcv in cef63a3
internal/ci: remove mention of matrix and runner from base by @myitcv in 3ed9f92
internal/ci: remove trybot from push branches by @myitcv in 5cd427a
internal/ci: refactor base caching pattern by @myitcv in 92b28c4
internal/ci: drop pullThroughProxy step by @myitcv in 79aceb7
cue/errors: better vetting of error formats by @rogpeppe in c630554
internal/ci: improve push_tip_to_trybot defaults by @myitcv in be0601b
internal/ci/github: rename repo -> _repo by @myitcv in 646e965
internal/ci: import repo package once in github package by @myitcv in 7aec30c
internal/ci: drop parameter from trybotDispatchWorkflow by @myitcv in 6318def
cue/load: minimal module fetching implementation by @rogpeppe in cb9d6ed
bump golang.org/x and go-internal deps by @mvdan in 3f51337
internal/ci: bump GoReleaser to v1.16.2 ahead of v0.5.0 release by @myitcv in 5ec06d9
internal/ci: rename core -> repo by @myitcv in 6d6ffb4
start using Go 1.20, drop Go 1.18 by @mvdan in d1a6da8
internal/ci: switch to actions/setup-go@v4 by @mvdan in d9c354b
internal/ci: always force push to trybot repo by @myitcv in ed2a9c7
cue/load: avoid using ioutil.ReadDir to list directories by @mvdan in d077202
pkg/tool: small fixes to CUE docs by @mvdan in 3d08fb2
internal/ci: use unity and cuelang.org config from core by @myitcv in 4cbb563
internal/ci: DRY up core based on new base defaults by @myitcv in 1195b3d
internal/ci: establish better defaults in base by @myitcv in af02a2c
internal/ci: move away from using defs in github by @myitcv in 7a7ca81
internal/ci: move away from using definitions in base by @myitcv in d7a1740
internal/ci: use core directly instead of _base alias by @myitcv in f446b87
internal/ci: move away from using defs as params in base by @myitcv in 305dc1d
internal/ci: collapse gerrithub package into base by @myitcv in 9729270
internal/ci: tweak gerrithub package "params" ahead of move to base by @myitcv in 1980621
internal/ci: split base into separate files by @myitcv in 3a52c19
internal/ci: rename base parameter field name by @myitcv in cdd5730
internal/ci: move pushTipToTryBot workflow to gerrithub package by @myitcv in 0290e04
internal/ci: rename gerrithub #dispatchWorkflow by @myitcv in 0cfd8c5
internal/ci: remove hard-codings in gerrithub package by @myitcv in f5277b9
internal/ci: move configuration from workflows.cue to core by @myitcv in 1bb7e10
internal/ci: remove workflow files pre generate by @myitcv in b418955
Revert "internal/ci: move pushTipToTryBot workflow to gerrithub package" by @myitcv in 87db1a5
Revert "internal/ci: rename base parameter field name" by @myitcv in 2461c51
Revert "internal/ci: move configuration from workflows.cue to core" by @myitcv in 26ff449
Revert "internal/ci: rename gerrithub #dispatchWorkflow" by @myitcv in 38156f2
Revert "internal/ci: remove workflow files pre generate" by @myitcv in 0d89b9b
Revert "internal/ci: split base into separate files" by @myitcv in ee7509f
internal/ci: split base into separate files by @myitcv in d638a35
internal/ci: remove workflow files pre generate by @myitcv in f723eb7
internal/ci: rename gerrithub #dispatchWorkflow by @myitcv in d276f58
internal/ci: move configuration from workflows.cue to core by @myitcv in 5a0922e
internal/ci: rename base parameter field name by @myitcv in 584f3f0
internal/ci: move pushTipToTryBot workflow to gerrithub package by @myitcv in e440409
internal/ci: hoist dispatch keys to base by @myitcv in e3ed297
internal/ci: move workflows.cue defs to better places by @myitcv in 0250807
internal/ci: hoist cache steps to base package by @myitcv in 019f6dd
internal/ci: improve base package docs by @myitcv in 57066d4
internal/ci: make our checkout step configurable by @myitcv in ee093e2
internal/ci: specify githubRepositoryPath directly by @myitcv in 9c075ca
internal/ci: move core._#URLPath to base by @myitcv in dd965ad
internal/ci: move core.#codeReview to base by @myitcv in 8b14836
internal/ci: move core package away from definitions by @myitcv in 5475370
internal/ci: improve core package docs by @myitcv in e1a8bee
internal/ci: refactor the way we declare workflows by @myitcv in 09b06ff
internal/core/adt: hoist value validation by @mpvl in eea60b9
internal/core/adt: hoist comprehension code by @mpvl in 47f0025
internal/core/adt: reorganize nodeContext fields by @mpvl in f807ee8
internal/core/adt: unexport more methods by @mpvl in ce65141
internal/core/adt: unexport VertexStatus by @mpvl in 185eed7
internal/core/adt: remove state arg from Err, SetValue, and UpdateValue by @mpvl in 97904e3
internal/core/adt: unexport Unify by @mpvl in 7851142
internal/core/adt: clone arcMap by @mpvl in dbf7bb8
internal/ci: remove the cachePost steps by @myitcv in 6843415
internal/ci: bump default of cue version to v0.5.0-beta.5 by @myitcv in 3121a27
internal/ci: update base early git checks from alpha.cuelang.org by @myitcv in 4509e7f
internal/core/adt: allow required dynamic fields by @mpvl in c3138e3
internal/ci: skip test cache on protected branches by @myitcv in 21f494d
internal/core/adt: implement required fields. by @mpvl in 0b681f5
cue/ast: prepare for required fields by @mpvl in 1da0fd9
internal/core/adt: merge OptionalField and Field types by @mpvl in 1822d52
internal/ci: bump pinned version of Go for releases by @mvdan in e5cd9ac
internal/ci: use a group of cue commands for go:generate by @mvdan in d16b575
cmd/cue: remove fallback version code for Go 1.17 by @mvdan in e806bba
internal/ci: rerun trybot workflows post eviction by @myitcv in a632d16
internal/ci: tidy up use of curl for GitHub API calls by @myitcv in f4d0802
internal/ci: do not evict caches on push to ci/test by @myitcv in 254f0f1
internal/ci: evict workflow caches on a daily basis by @myitcv in ee81e77
internal/ci: bump to use ubuntu-22.04 as our linux machine by @myitcv in 4686700
internal/ci: use actions/cache/restore for non-protected branch by @myitcv in 38ee1c2
cue/load: don't read parent directories in tests by @mvdan in 9e014c3
internal/ci: reset git directory timestamps faster by @mvdan in c7fd893
internal/ci: fix up modified times for all directories by @mvdan in e31b8f7
internal/ci: run long tests on linux when testing CLs by @mvdan in daa4022
cmd/cue: remove go install long tests by @mvdan in fa1f369
internal/ci: restore git modified times after cloning by @mvdan in 829bd64
doc/tutorial/kubernetes: fix build breakage by @mpvl in b05585b
internal/core/adt: use ? in debug output by @mpvl in 5fe040a
internal/core/adt: optional field rewrite by @mpvl in 19bfdb9
internal/ci/gerrithub: update comment to be clearer by @mvdan in 4fed730
internal/core/adt: finalize earlier for arcs by @mpvl in c80a690
internal/core/adt: pass member type to insertField by @mpvl in 27b096c
internal/core/adt: remove duplicate statement by @mpvl in 383ff3e
internal/core/adt: export arcType and friends by @mpvl in 4f32fb4
internal/core/adt: revert fix for 2209 by @mpvl in c8e580e
cue/ast, cue/parser: parse function types by @4ad in 8f0fe77
cmd/cue: add CUE_DEBUG_PARSER_TRACE environment variable by @4ad in 34a27bb
internal/core/adt: fix possible infinte loop for API usage by @mpvl in 782cae0
internal/core/adt: fix regression in comparing to bottom by @mpvl in 9954cc2
internal/core/adt: remove unnecessary check by @mpvl in 1a0a81b
internal/core/adt: detect closed lists as fatal errors by @mpvl in 06fbefe
internal/core/adt: sharpen condition for scalar setting by @mpvl in 9b1f222
cmd/cue: respect --exclude for constants by @rogpeppe in b44e16d
cmd/cue: add test case for --exclude by @rogpeppe in 2fa4ee6
cue/context: support internal interpreters by @mpvl in 7617de2
internal/cuetxtar: configurable load.Config by @rogpeppe in 7485f58
cue/load/internal/...: copy pkgs from Go source by @rogpeppe in 5723470
cue/load: refactor loader by @rogpeppe in c28d75a
cue/load: move code before refactoring by @rogpeppe in 87b91c9
internal/ci: use simpler "go get" to pull a version through the proxy by @mvdan in eff0108
cue/stats: use int64 for stats counters by @mvdan in 7073554
cmd/cue: remove use of stderr directive by @mpvl in 7d89acd
doc/ref/spec.md: add required fields by @mpvl in 9a7c8fb
pkg/list: simply template for Ascending by @mpvl in 9dbb373
cue/testdata/benchmarks: add benchmark for sort by @mpvl in 9f538a6
cue/load: add initial module.cue schema by @rogpeppe in b2087b9
internal/ci: only run release workflow on main repo by @myitcv in ce37b63
cue/load: use cue package to interpret module.cue file by @rogpeppe in 1b6fb4e
cue/load: minor tweaks by @rogpeppe in d78f1a2
.github: clarify what we mean by "latest release" by @mvdan in 03e8f29
internal/ci: do not release "zero" releases in release workflow by @myitcv in 02e19c8
internal/ci: fix goreleaser in non-snapshot mode again by @mvdan in ae0d7ca
cmd/cue: include Go in the version command by @mvdan in 879f902
internal/ci: fix and test the release workflow on branches by @mvdan in 266bb32
cmd/cue: mention doc location for -l flag by @rogpeppe in 56caeaf
internal/core/adt: fix 2235 by @mpvl in 3c8f0ad
pkg/list: reimplement sort by @mpvl in 2e70ac7
cue/scanner: remove block comment scanning by @mpvl in 5d0a6f2
internal/core/adt: add tests for 2235 by @mpvl in 125e40b
cue/parser: remove last vestiges of : T by @mpvl in fd170da
all: remove support for :: by @mpvl in a6055ea
internal/encoding/{json|yaml}: disallow non-regular fields by @mpvl in 76e0be4
cmd/cue: add tests for issue 1926 by @mpvl in 9b573be

`v0.5.0`

Compare Source

This release focuses on changes to the implementation of comprehensions, the algorithm for detecting cycles in CUE, and the reimplementation of let comprehensions as fields.

Also included are a number of bug fixes and changes to help the KubeVela project upgrade off CUE v0.2.2 to the latest release. v0.5.0 is the first release since v0.4.3 back in April 2022. It has been a long time in the making, and is comprised of 277 commits.

It is worth noting that we do not plan nor wish for such long gaps between releases. For more details on upcoming releases and steps we are taking to increase release cadence as well as our confidence in each release, please see this discussion.

As a reminder: users can register their projects with unity, our regression and performance testing setup. unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. unity continues to catch multiple issues with each release. Adding your project to unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. We are currently in the process of releasing Unity as a GitHub App on the public Marketplace. Sign up to receive updates; we will be in touch as soon as the GitHub App is ready.

Thank you to @djosephsen, @joaopapereira, @mpvl, @mvdan, @myitcv, @qequ, @rogpeppe, @rytswd, @satotake, @spachava753, and @tmm1 for contributing to this release!

Project-level changes

Various CI-related changes have been made to simplify and streamline the GerritHub-based CI setup across the various CUE repositories. A common base package is vendored into each repository and used as a template for GitHub workflows and other configuration. For those interested in studying the setup, please see the files beneath internal/ci.

This release drops support for go1.16.x , go1.17.x and go1.18.x, is tested against go1.19.x and go1.20.x, and is built using go1.20.2.

Our dependency on github.com/rogpeppe/go-internal is upgraded to v1.9.0 and various testscript-related improvements have been made to CUE's tests.

GoReleaser has been upgrade to v1.16.2 as part of the release workflow. In a related change, CL 546920 moves us to a CUE-based source configuration for GoReleaser. This allows us to define the concept of 'latest', state which indicates whether we should perform the homebrew release and the Docker manifest latest steps. This fixes a long-standing bug whereby homebrew taps and Docker images were created for the latest release, regardless of whether that was a pre-release, or indeed a patch version of a non-current minor version.

As of CL 547507, CUE build artefacts published on GitHub are entirely reproducible, thanks to Go's support for reproducible, verifiable and verified builds.

Encoders

When cue import-ing YAML, the -R recursive flag now only recursively interprets text as YAML if it contains a newline CL 536902.

API

Various APIs have been transitioned to drop use of the deprecated cue.Runtime type, as well as migrating away from cue.Instance via cue.InstanceOrValue. Some use of these deprecated types remains: #1035, #1735, #1806. These will be tidied up in later releases as the API surface matures towards v1.0.0.

The cue package now supports InlineImports for Value.Syntax CL 541561. This leverages new support within the internal exporter to creating self-contained CUE. This change also deprecates Value.ResolveReferences().

Package cue adds Selector.Type to make it easier to pull out selector-specific information from a selector (for example, it makes it possible and cheap to retrieve the unquoted string label from a regular field selector) CL 542738.

Package cue adds Value.BuildInstance(). If a cue.Value exactly represents a package, BuildInstance() returns the build instance corresponding to the value CL 542769.

cue/stats is introduced as a new package for getting CUE operation statistics. The functionality is hoisted from internal/core/adt, but the package should for all practical purposes be seen as a new implementation. The stats have been aggregated as experimental functionality to the tools/flow package.

CL 546763 disallowed deprecated language features in the Go API. These features had long been deprecated in cmd/cue. This means that API operations will now fail on deprecated features whereas before they were handled in compatibility mode. The parser.FromVersion feature can be used to reenable these deprecated features.

Language

This release does not introduce any language changes. CL 537264 made some minor adjustments to the language specification to improve readability.

CL 541457 removes support for re-writing of old-style let declarations. This had already been deprecated for a long time and this change was made to enable support for aliases of embeddings.

Core evaluator

Per-field comprehensions

One of the major changes introduced in this release is how comprehensions are handled. CL 529524 move the evaluator to a model of per-field comprehensions.

Comprehensions are expanded for, if, and let clauses that yield zero or more structs to be embedded in the enclosing list or struct.

CUE does not allow cyclic dependencies between comprehensions if they result in an ambiguous set of fields. It does allow cascading insertions as in:

a?: int
b?: int
if a != _|_ {
    b: 2
}
if b != _|_ {
    c: 3
    d: 4
}

The way this works is that for fields with a fixed prefix path in a comprehension value, the comprehension is assigned to these respective fields.

More concretely, the above example is rewritten to:

a?: int
b: if a != _|_ { 2 }
c: if b != _|_ { 3 }
d: if b != _|_ { 4 }

where the fields with if clause are only inserted if their condition resolves to true. Note that this is not valid CUE; it may be in the future.

With this rewrite, dependencies in comprehension expressions are handled analogously to other expressions.

Note that a single comprehension may be distributed across multiple fields. The evaluator will ensure, however, that a comprehension is only evaluated once.

Analogous to reference cycles, as of CL 544129 we allow comprehensions to use the struct in which they are defined as source, as long as they do not introduce new fields, which would alter the source on which they iterate.

Reimplementation of cycle detection

The new algorithm is inspired by the cycle detection used by Tomabechi's ¹ and Van Lohuizen's ² graph unification algorithms.

Unlike with traditional graph unification, however, CUE uses references, which, unlike node equivalence, are unidirectional. This means that the technique to track equivalence through dereference, as common in graph unification algorithms like Tomabechi's, does not work unaltered.

The unidirectional nature of references imply that each reference equates an exact copy of the value it points to. This renders the original approach of node-pointer equivalence useless.

The new algorithm, a variant of Tomabechi's and Van Lohuizen's algorithm, looks at references equality on conjuncts, instead of node equality. This simplifies the accounting and allows for far simpler and precise accounting when using references instead of the traditional node equivalence.

More background info on cycles

We have to define when a cycle is detected. CUE implementations MUST report an error upon a structural cycle, and SHOULD report cycles at the shortest possible paths at which they occur, but MAY report these at deeper paths. For instance, the following CUE has a structural cycle:

f: g: f

The shortest path at which the cycle can be reported is f.g, but as all failed configurations are logically equal, it is fine for implementations to report them at f.g.g, for instance.

It is not, however, correct to assume that a reference to a parent is always a cycle. Consider this case:

a: [string]: b: a

Even though reference a refers to a parent node, the cycle needs to be fed by a concrete field in struct a to persist, meaning it cannot result in a cycle as defined in the spec as it is defined here. Note however, that a specialization of this configuration can result in a cycle. Consider

a: [string]: b: a
a: c: _

Here reference a is guaranteed to result in a structural cycle, as field c will match the pattern constraint unconditionally.

In other words, it is not possible to exclude tracking references across pattern constraints from cycle checking.

It is tempting to try to find a complete set of these edge cases with the aim to statically determine cases in which this occurs. But as Carpenter [^Carpenter] demonstrates, it is possible for cycles to be created as a result of unifying two graphs that are themselves acyclic. The following example is a translation of Carpenters example to CUE:

y: {
	f: h: g
	g: _
}
x: {
	f: _
	g: f
}

Even though the above contains no cycles, the result of x & y is cyclic:

f: h: g
g: f

This means that, in practice, cycle detection has at least partially a dynamic component to it.

The language specification contains a higher-level and more complete overview of structural cycles.

Hideto Tomabechi. 1992. Quasi-Destructive Graph Unification with
Structure-Sharing. In COLING 1992 Volume 2: The 14th International
Conference on Computational Linguistics.

Marcel P. van Lohuizen. 2000. "Memory-Efficient and Thread-Safe
Quasi-Destructive Graph Unification". In Proceedings of the 38th Annual
Meeting of the Association for Computational Linguistics, pages 352–359,
Hong Kong. Association for Computational Linguistics.

^Carpenter]:
Bob Carpenter, "The logic of typed feature structures."
Cambridge University Press, ISBN:0-521-41932-8

##### Reimplementation of `let` comprehensions

[CL 543362](https://cuelang.org/cl/543362) made a change to `internal/core` to reimplement `let` comprehensions as fields. This makes it easier to track context as `let` comprehensions then follow the same paradigm as fields. It also allows debug information to be shown as to where lets are added in the tree. This change was accompanied by number of others that refined the approach.

##### Self-contained export

`internal/core/export` now implements an algorithm for generating self-contained CUE on export, an option that can further be refined by asking the exporter to inline imports.  These internal changes manifest in changes to `cue def` and `cuelang.org/go/cue` that are described elsewhere.

##### Other changes

[CL 545897](https://cuelang.org/cl/545897) started tracking stats within the core CUE tests. This book keeping helps to spot likely regressions in performance early by collocating the stats with the CUE that is being evaluated.

#### Builtins

In the `strconv` package, `strconv.FormatInt` and `strconv.FormatUint` now support arbitary-precision format; see [CL 538512](https://cuelang.org/cl/538512).

[CL 545898](https://cuelang.org/cl/545898) improved the error messages for `pkg` builtins, by including the path in error in many cases, and passing a wrapped message for `encoding/yaml`.

[CL 546237](https://cuelang.org/cl/546237) allows incomplete `list.MinItems` constraints. Before it either returned `false` or `true`, ignoring that making a configuration more specific might still satisfy `MinItems` later on. [CL 546238](https://cuelang.org/cl/546238) made a similar change for `struct.MinFields`.

#### Tooling layer

Standard input is now parsed correctly in `cue cmd`-declared command tasks; see [CL 541898](https://cuelang.org/cl/541898).

#### `cmd/cue`

Version control system (VCS) information is included in `cue version` as of [CL 540297](https://cuelang.org/cl/540297). The Go version used to build `cmd/cue` is included as of [CL 549302](https://cuelang.org/cl/549302).

`cue def` now supports an `--inline-imports` flag which resolves imports to print a self-contained version of the command input. For example, given the `txtar` input:

    -- cue.mod/module.cue --
    module: "example.com/a"

    -- in.cue --
    package a

    import "example.com/a/pkg"
    import "list"

    v: pkg.v

    -- pkg/pkg.cue --
    package pkg

    v: { x: 3, y: x }

The running `cue def --inline-imports in.cue` will give:

    package a

    import "list"

    v: {
    	x: 3
    	y: x
    }

[CL 546243](https://cuelang.org/cl/546243) fixed a long-standing bug whereby the `--ignore` errors flag was not observed by `cue eval`.

#### Changelog

-   \[release-branch.v0.5] internal/ci: use go1.19.8 for the release of v0.5.0 by [@&#8203;myitcv](https://github.com/myitcv) in [`d780488`](https://github.com/cue-lang/cue/commit/d780488159bd082f9f9d027ab42dd4d9b5d95d5e)
-   internal/ci: fix cache eviction by [@&#8203;myitcv](https://github.com/myitcv) in [`a1d9054`](https://github.com/cue-lang/cue/commit/a1d9054ffa5b292763538a3fa6cf057a062a145d)
-   internal/ci: address review feedback from CL 551352 by [@&#8203;myitcv](https://github.com/myitcv) in [`af01db1`](https://github.com/cue-lang/cue/commit/af01db1892e650a55d62d7423fe96732d6fb911d)
-   internal/ci: allow trybot workflows to be workflow_dispatch-ed by [@&#8203;myitcv](https://github.com/myitcv) in [`22156ef`](https://github.com/cue-lang/cue/commit/22156efdb892e80b7e92b4a2785ceb831470abc1)
-   internal/ci: refactor CI workflows by [@&#8203;myitcv](https://github.com/myitcv) in [`a4403eb`](https://github.com/cue-lang/cue/commit/a4403eb12b04c6cb9ca19ac03561199912fc66e5)
-   internal/ci: remove hard-codings in base package by [@&#8203;myitcv](https://github.com/myitcv) in [`0eaee71`](https://github.com/cue-lang/cue/commit/0eaee7137e10cf1ca23ab263d872dcaf0fa97aeb)
-   internal/ci: move evict_caches to base by [@&#8203;myitcv](https://github.com/myitcv) in [`584b21e`](https://github.com/cue-lang/cue/commit/584b21e968ba7941ff4a03d5784fd37dcd9cca06)
-   internal/ci: remove mention of matrix and runner from base by [@&#8203;myitcv](https://github.com/myitcv) in [`7c07680`](https://github.com/cue-lang/cue/commit/7c07680633f8644441d9ae80f150ac5a471abd8a)
-   internal/ci: remove trybot from push branches by [@&#8203;myitcv](https://github.com/myitcv) in [`9f3af8f`](https://github.com/cue-lang/cue/commit/9f3af8f084f97838999f6cd5bba545054fba85f1)
-   internal/ci: refactor base caching pattern by [@&#8203;myitcv](https://github.com/myitcv) in [`390bca5`](https://github.com/cue-lang/cue/commit/390bca5ce528e3a6408171b79961508f00e56f12)
-   internal/ci: drop pullThroughProxy step by [@&#8203;myitcv](https://github.com/myitcv) in [`a14fbf4`](https://github.com/cue-lang/cue/commit/a14fbf49856399c7a6737e1495f7d8dde994be88)
-   \[release-branch.v0.5] internal/ci: bring inline with [`be0601b`](https://github.com/cue-lang/cue/commit/be0601bf) by [@&#8203;myitcv](https://github.com/myitcv) in [`f4d04a7`](https://github.com/cue-lang/cue/commit/f4d04a7e5dc569836900c77b6aa4c26f20fcc9d1)
-   internal/ci: bump pinned version of Go for releases by [@&#8203;mvdan](https://github.com/mvdan) in [`374a2cc`](https://github.com/cue-lang/cue/commit/374a2cc382856da74e5634341e3fbb2fd9fa84d1)
-   internal/core/adt: revert fix for 2209 by [@&#8203;mpvl](https://github.com/mpvl) in [`c0421b4`](https://github.com/cue-lang/cue/commit/c0421b44e58cedad9200162a6fb6fae065da2d2b)
-   internal/core/adt: fix possible infinte loop for API usage by [@&#8203;mpvl](https://github.com/mpvl) in [`1ce9120`](https://github.com/cue-lang/cue/commit/1ce91202faf3d4de930e1c75c491c332c7b9d11a)
-   internal/core/adt: fix regression in comparing to bottom by [@&#8203;mpvl](https://github.com/mpvl) in [`87c79ef`](https://github.com/cue-lang/cue/commit/87c79efa8f37e1441b8ea67cff0bf5027bf1daaf)
-   internal/core/adt: remove unnecessary check by [@&#8203;mpvl](https://github.com/mpvl) in [`28321f6`](https://github.com/cue-lang/cue/commit/28321f6b49947b993823fb445835f560f0464b69)
-   internal/core/adt: detect closed lists as fatal errors by [@&#8203;mpvl](https://github.com/mpvl) in [`5d42c6c`](https://github.com/cue-lang/cue/commit/5d42c6cee285c44bb4af1cda5b31227f65364c99)
-   internal/core/adt: sharpen condition for scalar setting by [@&#8203;mpvl](https://github.com/mpvl) in [`3ba76ba`](https://github.com/cue-lang/cue/commit/3ba76baf9b432e15f110c49be701a5d0600c2412)
-   internal/ci: fix goreleaser in non-snapshot mode again by [@&#8203;mvdan](https://github.com/mvdan) in [`576d0e4`](https://github.com/cue-lang/cue/commit/576d0e461a990ddcdab9da7a10375a1c6d87a865)
-   internal/core/adt: fix 2235 by [@&#8203;mpvl](https://github.com/mpvl) in [`ca411de`](https://github.com/cue-lang/cue/commit/ca411dedecdf08f2d0b99931c61a6d37ea93c985)
-   internal/core/adt: add tests for 2235 by [@&#8203;mpvl](https://github.com/mpvl) in [`89693e1`](https://github.com/cue-lang/cue/commit/89693e1ff31881d90500db4d34b05c7685575d76)
-   cmd/cue: include Go in the version command by [@&#8203;mvdan](https://github.com/mvdan) in [`9b1f248`](https://github.com/cue-lang/cue/commit/9b1f248845fabfda2ed70cc3c1c823baef5da69f)
-   internal/ci: fix and test the release workflow on branches by [@&#8203;mvdan](https://github.com/mvdan) in [`63749fe`](https://github.com/cue-lang/cue/commit/63749fe7d1fc40011564d54da9826050fd5a6239)
-   cmd/cue: add evaluator stats support by [@&#8203;mpvl](https://github.com/mpvl) in [`d573e0c`](https://github.com/cue-lang/cue/commit/d573e0c2f0419f3a32e9d7bc1f3000cc365a240d)
-   cmd/cue: add tests for issue 345 by [@&#8203;mpvl](https://github.com/mpvl) in [`352a736`](https://github.com/cue-lang/cue/commit/352a7363b1b22ed4490d328bbc9275bf4dd2b779)
-   internal/core/adt: filter more disjunctions by [@&#8203;mpvl](https://github.com/mpvl) in [`5a6bd19`](https://github.com/cue-lang/cue/commit/5a6bd1910821112123897c2b553b848c15f6eae2)
-   internal/core/adt: add tests for 2209 by [@&#8203;mpvl](https://github.com/mpvl) in [`6b45d7e`](https://github.com/cue-lang/cue/commit/6b45d7e520a8e1b0f9ba287967fdb8b059e49fdc)
-   internal/core/adt: improve mechanism for conjunct insertion by [@&#8203;mpvl](https://github.com/mpvl) in [`887f564`](https://github.com/cue-lang/cue/commit/887f56497cbc2178e9cb1e9be78d8abae78ea0cd)
-   internal/core/adt: add tests for conjunct insertion by [@&#8203;mpvl](https://github.com/mpvl) in [`81e4cba`](https://github.com/cue-lang/cue/commit/81e4cba186c65ada5018d71c80bf63ce00bf08e7)
-   internal/core/adt: only set scalar if not already defined by [@&#8203;mpvl](https://github.com/mpvl) in [`f23e3d5`](https://github.com/cue-lang/cue/commit/f23e3d565c499c1a220b94edcbc18f83c1438836)
-   github: bring the bug report template up to date by [@&#8203;mvdan](https://github.com/mvdan) in [`b75fdc8`](https://github.com/cue-lang/cue/commit/b75fdc8bf307185c20b9107082ce0d8c205c36f5)
-   internal/ci: make github CLI shell invocations safer by [@&#8203;mvdan](https://github.com/mvdan) in [`94765d6`](https://github.com/cue-lang/cue/commit/94765d6a9756fc83be553779fef8e1faaba226b5)
-   internal/core: clone let upon use of for var references by [@&#8203;mpvl](https://github.com/mpvl) in [`3a79e96`](https://github.com/cue-lang/cue/commit/3a79e96aa6bb406475e7d121d65caa87ae463ce4)
-   internal/core/debug: change notation for "multi" lets by [@&#8203;mpvl](https://github.com/mpvl) in [`fd05908`](https://github.com/cue-lang/cue/commit/fd05908d444bd4132b2137cd3aa84918c4366227)
-   internal/core/adt: don't add errors to "void" arcs by [@&#8203;mpvl](https://github.com/mpvl) in [`0b41dbb`](https://github.com/cue-lang/cue/commit/0b41dbb875537a04fce46a4a56f7b625fa2cc6f1)
-   cue/testdata/benchmarks: add benchmark for let key by [@&#8203;mpvl](https://github.com/mpvl) in [`a8d7c59`](https://github.com/cue-lang/cue/commit/a8d7c59f176a28936cc6d8231050630ec5498f19)
-   internal/core/adt: evaluate expressions directly by [@&#8203;mpvl](https://github.com/mpvl) in [`8fb13d4`](https://github.com/cue-lang/cue/commit/8fb13d4c31d145b54c203ebbd1a69e84db2db35a)
-   internal/core/eval: node should not finalize itself mid flight by [@&#8203;mpvl](https://github.com/mpvl) in [`9d27e0d`](https://github.com/cue-lang/cue/commit/9d27e0d992ae50da72244c2210252cb4248a8048)
-   cmd/cue: don't panic in vet if a schema has incomplete errors by [@&#8203;mvdan](https://github.com/mvdan) in [`f6841d1`](https://github.com/cue-lang/cue/commit/f6841d1f026cefd964c1f5b2e0e331ff8e8ce9db)
-   internal/ci: deploy [tip.cuelang.org](http://tip.cuelang.org/) via repository_dispatch by [@&#8203;myitcv](https://github.com/myitcv) in [`632cc62`](https://github.com/cue-lang/cue/commit/632cc622744b2a17db22932c8c7319a3e6b5e4fb)
-   internal/ci: enable push_to_tip_trybot by [@&#8203;myitcv](https://github.com/myitcv) in [`fe692c5`](https://github.com/cue-lang/cue/commit/fe692c55eccb1efcd6b5ea181430d38479c4f4e7)
-   internal/ci: apply various CI-related changes from [cuelang.org](http://cuelang.org/) repo by [@&#8203;myitcv](https://github.com/myitcv) in [`4eaa946`](https://github.com/cue-lang/cue/commit/4eaa9465d0287a7cf9de0ca73189d6084449ba1e)
-   internal/ci/goreleaser: actually make builds reproducible by [@&#8203;myitcv](https://github.com/myitcv) in [`45aa5c0`](https://github.com/cue-lang/cue/commit/45aa5c093e71660b341fa15a8a41d77eb64a0121)
-   internal/ci/goreleaser: make builds reproducible by [@&#8203;myitcv](https://github.com/myitcv) in [`16edb00`](https://github.com/cue-lang/cue/commit/16edb00a2504c92b09e43721f96a166109b1c2a4)
-   cue/export/extract: fix comments with comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`959dc46`](https://github.com/cue-lang/cue/commit/959dc46d5ac976bd2fc9b6f4bf0cd596c00fd0c5)
-   internal/core/adt: don't evaluate inlined structs prematurely by [@&#8203;mpvl](https://github.com/mpvl) in [`45ff282`](https://github.com/cue-lang/cue/commit/45ff2823f7d071b803a8b55d96ad4bcf7c1647ef)
-   internal/core/adt: add tests for issue [#&#8203;2163](https://github.com/cue-lang/cue/issues/2163) by [@&#8203;mpvl](https://github.com/mpvl) in [`a9f4fc3`](https://github.com/cue-lang/cue/commit/a9f4fc3ec3b9e7f0f91df16a86b2295a3a66e546)
-   internal/ci: review follow-up changes to goreleaser_tool.cue by [@&#8203;mvdan](https://github.com/mvdan) in [`7ea44a3`](https://github.com/cue-lang/cue/commit/7ea44a3f045decf221f86fbd91c9abd566fa6680)
-   internal/ci: switch to CUE based definition for goreleaser by [@&#8203;myitcv](https://github.com/myitcv) in [`79a476b`](https://github.com/cue-lang/cue/commit/79a476b8c16c8900ff84811de1f2c8e769e8ebab)
-   internal/ci: import for current goreleaser configuration by [@&#8203;myitcv](https://github.com/myitcv) in [`e69c517`](https://github.com/cue-lang/cue/commit/e69c5174ae19e8842bc34af1553189dd7a48e4b2)
-   internal/ci: upgrade to later GitHub workflow schema by [@&#8203;myitcv](https://github.com/myitcv) in [`f036b34`](https://github.com/cue-lang/cue/commit/f036b34ca756c2afd061ef9a1a763f670092b048)
-   internal/ci: upgrade to latest GoReleaser version by [@&#8203;myitcv](https://github.com/myitcv) in [`248f2b3`](https://github.com/cue-lang/cue/commit/248f2b30c8702c9b5ed012e6ac0961c109d69cb3)
-   goreleaser: formatting changes in Yaml file by [@&#8203;myitcv](https://github.com/myitcv) in [`e93b5ed`](https://github.com/cue-lang/cue/commit/e93b5ed61fc6998ad8b9b1bf5f50ab94b57e5e26)
-   internal/ci: use newer versions of the docker github actions by [@&#8203;mvdan](https://github.com/mvdan) in [`f56600d`](https://github.com/cue-lang/cue/commit/f56600dcb932fb5bef421a43ac32c8cd260f4fc0)
-   internal/core/adt: base error mode on requested state by [@&#8203;mpvl](https://github.com/mpvl) in [`214e112`](https://github.com/cue-lang/cue/commit/214e11278cbe09e8ae1cbeff83bb7e61cfe1894c)
-   internal/core/adt: only set validation result when safe by [@&#8203;mpvl](https://github.com/mpvl) in [`88857e0`](https://github.com/cue-lang/cue/commit/88857e0058cf744dcf0506da39d75eb946af1976)
-   internal/core/adt: pass desired state to more functions by [@&#8203;mpvl](https://github.com/mpvl) in [`55cdb74`](https://github.com/cue-lang/cue/commit/55cdb7420b791aeb2b63413aeabe1bcd3dae57ba)
-   internal/core/adt: pass more state around by [@&#8203;mpvl](https://github.com/mpvl) in [`3dfeb41`](https://github.com/cue-lang/cue/commit/3dfeb4112ffcd9d3267c2dc8e0950e3f095bb210)
-   internal/core/adt: pass state to validation by [@&#8203;mpvl](https://github.com/mpvl) in [`0954c6f`](https://github.com/cue-lang/cue/commit/0954c6f8888daf741e7d40860db2f165af05b6d4)
-   internal/core/adt: pass state to evaluate by [@&#8203;mpvl](https://github.com/mpvl) in [`7d50228`](https://github.com/cue-lang/cue/commit/7d5022852075821ea04d21854b372ee3bb73a42b)
-   internal/core/adt: avoid duplicate insertion of conjuncts by [@&#8203;mpvl](https://github.com/mpvl) in [`d341814`](https://github.com/cue-lang/cue/commit/d341814a6e0fe9eef963c26956527c0b75e85286)
-   internal/core/adt: tighten uniqueness of conjuncts by [@&#8203;mpvl](https://github.com/mpvl) in [`a68c6ce`](https://github.com/cue-lang/cue/commit/a68c6ce64f3b69ef09fe91aca7c4c067101bda73)
-   cue/parser: disallow deprecated language features in API by [@&#8203;mpvl](https://github.com/mpvl) in [`67ace83`](https://github.com/cue-lang/cue/commit/67ace837da2b061c05be7f1189abb0e96107a2f2)
-   internal/core/adt: remove nested comprehension special casing by [@&#8203;mpvl](https://github.com/mpvl) in [`3c0b2ec`](https://github.com/cue-lang/cue/commit/3c0b2ecd089da711f3fb1a9b9f3109a36ccdce1c)
-   README: fix the stale GitHub Actions badge by [@&#8203;mvdan](https://github.com/mvdan) in [`4fee020`](https://github.com/cue-lang/cue/commit/4fee020034c66d74c2a0d68d56c72f7728bd8ea3)
-   internal/core/adt: disambiguate let cache by [@&#8203;mpvl](https://github.com/mpvl) in [`43fc681`](https://github.com/cue-lang/cue/commit/43fc68115618c5070357dd482530a42ba208e4b1)
-   internal/core/adt: update stats to fix build breakage by [@&#8203;mpvl](https://github.com/mpvl) in [`a800e6f`](https://github.com/cue-lang/cue/commit/a800e6fadcfd2a30bda3f1ef330574c11c292499)
-   internal/core/adt: merge Conjunct and Partial processing by [@&#8203;mpvl](https://github.com/mpvl) in [`121894c`](https://github.com/cue-lang/cue/commit/121894c5c4616bc972b60e484989cab321b75800)
-   internal/core/adt: remove assertion by [@&#8203;mpvl](https://github.com/mpvl) in [`129c343`](https://github.com/cue-lang/cue/commit/129c3439c62fd3ee3165bd2c1e3e64198fe066b1)
-   internal/core/adt: add test cases for issue 2119 by [@&#8203;mpvl](https://github.com/mpvl) in [`2499719`](https://github.com/cue-lang/cue/commit/2499719dc992d8182f5669c829735623e3826d8e)
-   internal/core/adt: add tests related to Issue [#&#8203;2113](https://github.com/cue-lang/cue/issues/2113) by [@&#8203;mpvl](https://github.com/mpvl) in [`525648d`](https://github.com/cue-lang/cue/commit/525648d853bb7dbb9187bff2649c03db8d865be8)
-   internal/core/adt: evaluate let fields earlier in comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`e5fb5af`](https://github.com/cue-lang/cue/commit/e5fb5afcd1a935f8d2ce662a9267d9660f4771cd)
-   internal/core/adt: detect cycles in patterns by [@&#8203;mpvl](https://github.com/mpvl) in [`c048135`](https://github.com/cue-lang/cue/commit/c04813590f244fab54ce69a08df1ddf7f95b0993)
-   cue: update Value.Source doc comment by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`45ce7a3`](https://github.com/cue-lang/cue/commit/45ce7a3652a39c81593b069ad56cbe4589f00c01)
-   tools/flow: add debug support via CUE_DEBUG_TOOLS_FLOW by [@&#8203;myitcv](https://github.com/myitcv) in [`d85f950`](https://github.com/cue-lang/cue/commit/d85f950102eef401adfad76f56d01d776e3537b9)
-   internal/core/adt: fix comprehension cycle regression by [@&#8203;mpvl](https://github.com/mpvl) in [`32bfffd`](https://github.com/cue-lang/cue/commit/32bfffd0aa538d63757efeef393bc37a06c8c9a4)
-   internal/core/adt: add tests to address regressions by [@&#8203;mpvl](https://github.com/mpvl) in [`82bf036`](https://github.com/cue-lang/cue/commit/82bf03685cf19981bbd2641fdc2e4c71924359c4)
-   internal/core/adt: split some tests into files by [@&#8203;mpvl](https://github.com/mpvl) in [`69ee994`](https://github.com/cue-lang/cue/commit/69ee994fd01d14e97d42f15a1056e0d0aba452ec)
-   infra: upgrade goreleaser by [@&#8203;myitcv](https://github.com/myitcv) in [`7bdeb14`](https://github.com/cue-lang/cue/commit/7bdeb14af88c7bb78cae4cb000341b679ac11849)
-   doc: simple whitespace change to track down GerritHub replication issue by [@&#8203;myitcv](https://github.com/myitcv) in [`1bb7fed`](https://github.com/cue-lang/cue/commit/1bb7fed608fd273b3d9c581074908e022cf76231)
-   cmd/cue: fix --ignore errors flag by [@&#8203;mpvl](https://github.com/mpvl) in [`ab14c86`](https://github.com/cue-lang/cue/commit/ab14c8681d666b9ecc2092546e94946d488e8ad0)
-   pkg/list: make error of MaxItems consistent with MinItems by [@&#8203;mpvl](https://github.com/mpvl) in [`c5fbbab`](https://github.com/cue-lang/cue/commit/c5fbbabd6bde15901a845e3d9d69b0d134f0b4d9)
-   pkg/struct: fix MinFields analogously to MinItems by [@&#8203;mpvl](https://github.com/mpvl) in [`849371d`](https://github.com/cue-lang/cue/commit/849371d983e827cbe7c58bcf02f83ad65b935542)
-   all: remove mistakenly added file by [@&#8203;mpvl](https://github.com/mpvl) in [`68445d8`](https://github.com/cue-lang/cue/commit/68445d839bf0d62aa807388d4ec94007ef7c6820)
-   internal/core/adt: fix panic using builtin validators by [@&#8203;mpvl](https://github.com/mpvl) in [`9bbc14b`](https://github.com/cue-lang/cue/commit/9bbc14bc7bce485af1bb3c1b79b87a01c03e3d30)
-   internal/core/adt: don't bump state by [@&#8203;mpvl](https://github.com/mpvl) in [`b18d00f`](https://github.com/cue-lang/cue/commit/b18d00f5369c6e42f500ec46218dedf9ef7a2100)
-   internal/core/adt: prevent early error assignment by [@&#8203;mpvl](https://github.com/mpvl) in [`27b6e87`](https://github.com/cue-lang/cue/commit/27b6e87efbde0d14b31eeb59943ff79b90fb92ec)
-   internal/core/adt: relax cycle tracking by [@&#8203;mpvl](https://github.com/mpvl) in [`9c761dd`](https://github.com/cue-lang/cue/commit/9c761dd5571d3f34bde4a9992e733f1415f0c071)
-   pkg/internal: allow incomplete list.MinItems by [@&#8203;mpvl](https://github.com/mpvl) in [`354f4e6`](https://github.com/cue-lang/cue/commit/354f4e6fee32792386d7187079a3c0222248afbc)
-   internal/core/adt: add tests for [#&#8203;2052](https://github.com/cue-lang/cue/issues/2052) by [@&#8203;mpvl](https://github.com/mpvl) in [`6162b95`](https://github.com/cue-lang/cue/commit/6162b95f494dad6eedb336a38e8b96129c6fd903)
-   internal/core/adt: fix redundant errors in calls by [@&#8203;mpvl](https://github.com/mpvl) in [`959605e`](https://github.com/cue-lang/cue/commit/959605e053076884efb689583c572ebe4f074728)
-   drop support for Go 1.17.x ahead of the v0.5 release by [@&#8203;mvdan](https://github.com/mvdan) in [`0292e7f`](https://github.com/cue-lang/cue/commit/0292e7f4c3eeabd9e9cf4971d96157ac00519c2b)
-   internal/core/adt: improved reporting disjunction errors by [@&#8203;mpvl](https://github.com/mpvl) in [`a8d68ad`](https://github.com/cue-lang/cue/commit/a8d68ad05ab615bafacc07d0ccaf12ba0d9f669a)
-   internal/core/adt: avoid uninformative cyclic error by [@&#8203;mpvl](https://github.com/mpvl) in [`1d8d8ff`](https://github.com/cue-lang/cue/commit/1d8d8ffea6b95e2b0d555bd6999004268eb14d16)
-   internal/core/adt: remove over-aggressive deduplication by [@&#8203;mpvl](https://github.com/mpvl) in [`74b4288`](https://github.com/cue-lang/cue/commit/74b4288a36ae47acbd1b09a24ca86cda7f0f85ef)
-   internal/core/adt: fix error checking bug by [@&#8203;mpvl](https://github.com/mpvl) in [`28088ac`](https://github.com/cue-lang/cue/commit/28088ac8e83ee123e329663a533b0b22f47c4c95)
-   internal/core/adt: add cycle detection for alt evaluation path by [@&#8203;mpvl](https://github.com/mpvl) in [`4eb2280`](https://github.com/cue-lang/cue/commit/4eb2280f2dca883b2db7a7cde2937fed8cd1caa6)
-   internal/core/adt: errors in let expressions are okay by [@&#8203;mpvl](https://github.com/mpvl) in [`30b2007`](https://github.com/cue-lang/cue/commit/30b2007b58507c3e4c3b6f21d88f9e3a2df1d78e)
-   pkg: improve error messages by [@&#8203;mpvl](https://github.com/mpvl) in [`fa36be4`](https://github.com/cue-lang/cue/commit/fa36be403849715004c2d143afb3e77a29ac6238)
-   internal/core/adt: add stats by [@&#8203;mpvl](https://github.com/mpvl) in [`e2a0ef6`](https://github.com/cue-lang/cue/commit/e2a0ef60402692f9f08690fb55fa24aa53367062)
-   internal/core/dep: handle recursive lets by [@&#8203;mpvl](https://github.com/mpvl) in [`1d8663e`](https://github.com/cue-lang/cue/commit/1d8663e67324a7c9623b8c1562936db9a0598172)
-   internal/core/adt: fix comprehension bug by [@&#8203;mpvl](https://github.com/mpvl) in [`87347d2`](https://github.com/cue-lang/cue/commit/87347d212f153094980e507fe1c78185d3b8382c)
-   internal/core/adt: remove redundant state change by [@&#8203;mpvl](https://github.com/mpvl) in [`24576a0`](https://github.com/cue-lang/cue/commit/24576a0ff2af6929d43394df9deb7e2e9f3dfee2)
-   cue/ast: fix StructLit.End by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`b23ece3`](https://github.com/cue-lang/cue/commit/b23ece37510a9043871c8d5dac035ddd2032a206)
-   internal/third_party/yaml: fix float parsing by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`a4941ed`](https://github.com/cue-lang/cue/commit/a4941ed62de064238bb7dd3cb343ab9e4e87f008)
-   internal/third_party/yaml: slim down API by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`794d078`](https://github.com/cue-lang/cue/commit/794d078602d62d2496c9783554a6bb815ae75ef5)
-   doc/ref/spec.md: binary literals support `_` separators as well by [@&#8203;spachava753](https://github.com/spachava753) in [`712d8c6`](https://github.com/cue-lang/cue/commit/712d8c62644dfdab62c01d68314c65eb12300be7)
-   internal/core/adt: recursively pre-expand comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`102b034`](https://github.com/cue-lang/cue/commit/102b0341dae9420a6cd125678c96b3cd8c32ed2f)
-   internal/core/adt: represent comprehension clauses as list by [@&#8203;mpvl](https://github.com/mpvl) in [`b3bcc7a`](https://github.com/cue-lang/cue/commit/b3bcc7aaf3d0e6074a4cad6e725113cf2aa36640)
-   internal/core/dep: remove useless code by [@&#8203;mpvl](https://github.com/mpvl) in [`309b965`](https://github.com/cue-lang/cue/commit/309b9655d60fea3cfde50004650d8742c37e696e)
-   internal/core/adt: fix cycle detection bug for lets by [@&#8203;mpvl](https://github.com/mpvl) in [`f2b9479`](https://github.com/cue-lang/cue/commit/f2b94794ad54347b92a97a8c69ae3f931efd975e)
-   internal/core/adt: allow self-referential comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`f1daf4b`](https://github.com/cue-lang/cue/commit/f1daf4b823aa7fedc668add92686dbcbf0141909)
-   internal/core/adt: update state constants and docs by [@&#8203;mpvl](https://github.com/mpvl) in [`e4f4900`](https://github.com/cue-lang/cue/commit/e4f4900c5728d22815a71ca1fdcbbe86d8e91d83)
-   internal/core/adt: add conjuncts to dynamic list as well by [@&#8203;mpvl](https://github.com/mpvl) in [`637a325`](https://github.com/cue-lang/cue/commit/637a3258c48923c7120cf4ec4d88fb7611879763)
-   internal/core/adt: report cycle error in comprehension source by [@&#8203;mpvl](https://github.com/mpvl) in [`6668dc8`](https://github.com/cue-lang/cue/commit/6668dc8e1f94477ec6378f309ba8b8f498f17de5)
-   internal/core/adt: rename test by [@&#8203;mpvl](https://github.com/mpvl) in [`f30a8e7`](https://github.com/cue-lang/cue/commit/f30a8e71e6dfc4014ed717edb9b78b0cf73f3cba)
-   internal/core/adt: add IsDefined to filter out void arcs by [@&#8203;mpvl](https://github.com/mpvl) in [`2ae37df`](https://github.com/cue-lang/cue/commit/2ae37df09d57c432f865338e1ec4e86de2070ba9)
-   internal/core/adt: fix closedness regression by [@&#8203;mpvl](https://github.com/mpvl) in [`ed4f885`](https://github.com/cue-lang/cue/commit/ed4f8850d35a6ca4012c16db0cbf42b6e2d52af0)
-   internal/core/dep: fix comprehension environment binding by [@&#8203;mpvl](https://github.com/mpvl) in [`6824f7d`](https://github.com/cue-lang/cue/commit/6824f7d3cb3c4e4fa5e58359c051c207aeada9a2)
-   deps: bump [golang.org/x/text](http://golang.org/x/text) dependency by [@&#8203;joaopapereira](https://github.com/joaopapereira) in [`dd1169c`](https://github.com/cue-lang/cue/commit/dd1169c686c9e45358fa87fcdb9530fe3f6a799f)
-   .gitignore: add .DS_Store by [@&#8203;mpvl](https://github.com/mpvl) in [`79d80ef`](https://github.com/cue-lang/cue/commit/79d80efc288208410f77d47ae9aedd37e106d84b)
-   internal/core/adt: fix broken let lookup in embedded scalars by [@&#8203;mpvl](https://github.com/mpvl) in [`cad3f23`](https://github.com/cue-lang/cue/commit/cad3f2394c591d95747d0d965a7d48638b17bf01)
-   internal/core/adt: optimize cycle detection for disjunctions by [@&#8203;mpvl](https://github.com/mpvl) in [`830b138`](https://github.com/cue-lang/cue/commit/830b138ebfb6b81ecc5ec2bbcc14adaf7665d756)
-   internal/ci: test and release on Go 1.19.x by [@&#8203;mvdan](https://github.com/mvdan) in [`fe50dff`](https://github.com/cue-lang/cue/commit/fe50dff0dce87c9a8bfa6f15f8df64b9172d2533)
-   internal/core/adt: remove problematic Ref deletion by [@&#8203;mpvl](https://github.com/mpvl) in [`7518952`](https://github.com/cue-lang/cue/commit/75189525aabd2bcf2d8738855b187adb4713a393)
-   cue/testdata/benchmarks: add stats by [@&#8203;mpvl](https://github.com/mpvl) in [`3bcf4a4`](https://github.com/cue-lang/cue/commit/3bcf4a477733ea2a754837df1b0ba7d1cedce0a2)
-   encoding/gocode: encode hex consistently like Go 1.19+ by [@&#8203;mvdan](https://github.com/mvdan) in [`f5c3e4e`](https://github.com/cue-lang/cue/commit/f5c3e4eeb64ad6e4c3a2a33f0152ef00a58773f9)
-   doc/tutorial/kubernetes: mark both tests as long by [@&#8203;mvdan](https://github.com/mvdan) in [`06aaef6`](https://github.com/cue-lang/cue/commit/06aaef66df030ff0e63fb633847850008d558fe4)
-   internal/core/adt: add test for issue 1837 by [@&#8203;mpvl](https://github.com/mpvl) in [`839e33b`](https://github.com/cue-lang/cue/commit/839e33b3dc64ca2234b54a1fa8451650eb3a18f5)
-   internal/core/adt: make some errors semi-permanent by [@&#8203;mpvl](https://github.com/mpvl) in [`4a3a494`](https://github.com/cue-lang/cue/commit/4a3a494e8db538f8689ff9c0d3a882c93cafcc59)
-   internal/core/adt: reduce size of ErrorCode by [@&#8203;mpvl](https://github.com/mpvl) in [`53dfffa`](https://github.com/cue-lang/cue/commit/53dfffae81d2e91494e0dbc03a2565debf50a90e)
-   internal/core/export: fix crash in dynamic fields by [@&#8203;mpvl](https://github.com/mpvl) in [`ad253ed`](https://github.com/cue-lang/cue/commit/ad253ed099e94ddcffd07e6f73a76735a96cfaf8)
-   all: apply and follow Go 1.19's gofmt by [@&#8203;mvdan](https://github.com/mvdan) in [`519d326`](https://github.com/cue-lang/cue/commit/519d326df357904f95bc704d48d594a3f26c2319)
-   internal/core: implement let as fields by [@&#8203;mpvl](https://github.com/mpvl) in [`36bd656`](https://github.com/cue-lang/cue/commit/36bd6562f7ba43afbd850abfa565da5576117154)
-   pkg: reuse pkg/gen to generate package godocs by [@&#8203;mvdan](https://github.com/mvdan) in [`df148ee`](https://github.com/cue-lang/cue/commit/df148ee6b6133e0466f7964eec027f2e0349cdbe)
-   internal/core/adt: eliminate disjuncts for incomplete errors by [@&#8203;mpvl](https://github.com/mpvl) in [`c556a19`](https://github.com/cue-lang/cue/commit/c556a196ad43bcd0ff4fad4f938cabc03ee5e433)
-   doc/tutorial/kubernetes: only run as a long test by [@&#8203;mvdan](https://github.com/mvdan) in [`6551ea5`](https://github.com/cue-lang/cue/commit/6551ea5dd7890757afdbf6823443357bc96f4e5f)
-   internal/core/adt: fix test by [@&#8203;mpvl](https://github.com/mpvl) in [`d3959eb`](https://github.com/cue-lang/cue/commit/d3959ebce9168f9b922e72e711bac71532e5bd44)
-   internal/core/adt: add tests for let by [@&#8203;mpvl](https://github.com/mpvl) in [`7c7056c`](https://github.com/cue-lang/cue/commit/7c7056cd8964d9cb8f4da1c021165630ab091d49)
-   internal/core/compile: prepare for let change by [@&#8203;mpvl](https://github.com/mpvl) in [`739713c`](https://github.com/cue-lang/cue/commit/739713c849262af5d5681fbd5dab5aa77787d738)
-   internal/core/...: fix various attributes printing issues by [@&#8203;mpvl](https://github.com/mpvl) in [`82933ad`](https://github.com/cue-lang/cue/commit/82933ad1f9ef0dd68aaa8c1a52d8f56a3ad7f4e5)
-   internal/core/adt: remove StructInfo for unused structs by [@&#8203;mpvl](https://github.com/mpvl) in [`c89ab8b`](https://github.com/cue-lang/cue/commit/c89ab8b4534144edd9e4313666a7967cb40270d5)
-   internal/core/compile: add missing import in test by [@&#8203;mpvl](https://github.com/mpvl) in [`be9cc0d`](https://github.com/cue-lang/cue/commit/be9cc0dfe2efcc9ae76f84f0e21afd83b9bd1349)
-   internal/cuetxtar: add method for getting a single instance by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`e5f21db`](https://github.com/cue-lang/cue/commit/e5f21dbb163c8b864dc1e518dc86e16d8aa0bbf9)
-   internal/filetypes: not a file extension if the file starts with a dot by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`db0897b`](https://github.com/cue-lang/cue/commit/db0897b6b21f16d4dcd3503af51e2f2592b5cc03)
-   internal/core/adt: defensive use of CloseInfo by [@&#8203;mpvl](https://github.com/mpvl) in [`9e9786e`](https://github.com/cue-lang/cue/commit/9e9786e93b63af979d9f105a12c8519a6216e56f)
-   internal/filetypes: fix TestParseFile tests by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`3290797`](https://github.com/cue-lang/cue/commit/3290797d2b2b1f41355b6a06d5e9efccf2509a7c)
-   internal/cuetxtar: improve docs by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`d2250b9`](https://github.com/cue-lang/cue/commit/d2250b9bc1870a2488ee3f33b4e8e4fd0561a5f3)
-   encoding/gocode: be resilient to Go string literal changes by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`1cfb57c`](https://github.com/cue-lang/cue/commit/1cfb57cd7485c72d155968cf9a054ac91c6119c7)
-   doc/tutorial/basics: make test scripts run again by [@&#8203;mvdan](https://github.com/mvdan) in [`6cb877e`](https://github.com/cue-lang/cue/commit/6cb877ecdd50ec5a4141b4b5a4e0a50b5ac06c60)
-   encoding/openapi: update API by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`74566cf`](https://github.com/cue-lang/cue/commit/74566cff8b973ffa3833ec2f217833f182571c13)
-   cue/stats: new package for getting operation statistics by [@&#8203;mpvl](https://github.com/mpvl) in [`535d188`](https://github.com/cue-lang/cue/commit/535d188e024a150de6093a18bee639915e612394)
-   errors: make Errors and Print respect wrapped errors by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`4007775`](https://github.com/cue-lang/cue/commit/4007775eb33da64db9dd38f43da31b39d1bbfc58)
-   internal/core/path: package for Selector to Feature conversion by [@&#8203;mpvl](https://github.com/mpvl) in [`4c9d0ac`](https://github.com/cue-lang/cue/commit/4c9d0ac139d02d5ac3208d3268af4ee92916d70f)
-   cue: tweaks to selector API by [@&#8203;mpvl](https://github.com/mpvl) in [`cd27b12`](https://github.com/cue-lang/cue/commit/cd27b125bb2e70bc8075d083aebde0a9f8efe940)
-   cue: add Value.BuildInstance method by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`a552c1f`](https://github.com/cue-lang/cue/commit/a552c1fce216865669537591e182add604677252)
-   encoding/yaml: be clearer about the role of the src argument by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`351a9fb`](https://github.com/cue-lang/cue/commit/351a9fbaa8aa7f0482e162f20c4d5a49165b15f9)
-   internal/core/adt: fix cycles in evaluation by [@&#8203;mpvl](https://github.com/mpvl) in [`ac11215`](https://github.com/cue-lang/cue/commit/ac1121593d7ab5b3beff5b36f7e77e1cb3fab0c1)
-   internal/core/adt: tighten structural cycle detection by [@&#8203;mpvl](https://github.com/mpvl) in [`f8e363e`](https://github.com/cue-lang/cue/commit/f8e363e55bbd91a3ca56b3620edfa41854bc5269)
-   internal/core/adt: tighten structural cycle detection by [@&#8203;mpvl](https://github.com/mpvl) in [`68152ec`](https://github.com/cue-lang/cue/commit/68152ec4619731d1d718757571d238eaf94516f8)
-   internal/core/adt: fix spurious cycle for inline recursion by [@&#8203;mpvl](https://github.com/mpvl) in [`c997044`](https://github.com/cue-lang/cue/commit/c99704419ffce8b90f9c60c0148152e04d044ec6)
-   internal/core/adt: fix issue with references cycles by [@&#8203;mpvl](https://github.com/mpvl) in [`cd4bf2b`](https://github.com/cue-lang/cue/commit/cd4bf2b46c3234ba2e6ba649df8633efd0483eb7)
-   internal/core/adt: some fixes to structural cycle detection by [@&#8203;mpvl](https://github.com/mpvl) in [`8133f55`](https://github.com/cue-lang/cue/commit/8133f552636371d32edf9c972e135bc274184c66)
-   internal/core/compile: fix aliases to dynamic fields by [@&#8203;mpvl](https://github.com/mpvl) in [`353833c`](https://github.com/cue-lang/cue/commit/353833c0a26a411febdacf8096e378ecbd214e5e)
-   cue: add Selector.Type API by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`8e8f1cf`](https://github.com/cue-lang/cue/commit/8e8f1cfff0aeed7575cd362336da134e2890a311)
-   cue/load: deterministically sort CUE files when loading by [@&#8203;mvdan](https://github.com/mvdan) in [`295786e`](https://github.com/cue-lang/cue/commit/295786ef80b0dfd14eacc66f4c0babbbfc832f99)
-   internal/core/adt: count conjuncts by [@&#8203;mpvl](https://github.com/mpvl) in [`1a12916`](https://github.com/cue-lang/cue/commit/1a129169283720446cc3cb279f7e8b7adf282bca)
-   internal/core/adt: finalize arcs that are almost done by [@&#8203;mpvl](https://github.com/mpvl) in [`8ee1127`](https://github.com/cue-lang/cue/commit/8ee11275c50edf03df202f86cf7b0d0087da0de4)
-   internal/core/adt: remove redundant line by [@&#8203;mpvl](https://github.com/mpvl) in [`37ee967`](https://github.com/cue-lang/cue/commit/37ee967c3abff6f18e0a7de3e1558e4af40957f4)
-   internal/core/adt: clean up some span logic and add a comment by [@&#8203;mpvl](https://github.com/mpvl) in [`ce30e67`](https://github.com/cue-lang/cue/commit/ce30e6728aa80c9e21e04863107b4cc19263672e)
-   internal/core/adt: move Label for better bin packing by [@&#8203;mpvl](https://github.com/mpvl) in [`e398e10`](https://github.com/cue-lang/cue/commit/e398e10f2359b35b88f532113468578fe21035ab)
-   internal/core/adt: clean up some closedness code by [@&#8203;mpvl](https://github.com/mpvl) in [`9e15ca1`](https://github.com/cue-lang/cue/commit/9e15ca15750c6efe53c36c6b64684cafcea1e220)
-   internal/core/adt: fix spurious child error by [@&#8203;mpvl](https://github.com/mpvl) in [`830847b`](https://github.com/cue-lang/cue/commit/830847bf692effdc626929a7d59913ae9e90aaf9)
-   all: start using testscript.Params.RequireExplicitExec by [@&#8203;mvdan](https://github.com/mvdan) in [`37a2a07`](https://github.com/cue-lang/cue/commit/37a2a07006fd18e751be160c2065facb9f286b54)
-   internal/core/adt: pick defaults for label evaluation by [@&#8203;mpvl](https://github.com/mpvl) in [`83d37e7`](https://github.com/cue-lang/cue/commit/83d37e79367ee589d797787b7328ab17a14d39e6)
-   cmd/cue/cmd: testscript moved its gopath location by [@&#8203;mvdan](https://github.com/mvdan) in [`4a73630`](https://github.com/cue-lang/cue/commit/4a73630583dbb4c4708502de9d275b59fae13d20)
-   internal/core/adt: SpawnRef loop optimization by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`7292034`](https://github.com/cue-lang/cue/commit/7292034f3ba2c7ea0fb3df4d2c40b5c643c46ac4)
-   all: use txtar filename extensions consistently by [@&#8203;mvdan](https://github.com/mvdan) in [`c1689bb`](https://github.com/cue-lang/cue/commit/c1689bb0513916bb39709ba7eac6c889949c07a9)
-   mod: drop x/xerrors from the module graph by [@&#8203;mvdan](https://github.com/mvdan) in [`0460b47`](https://github.com/cue-lang/cue/commit/0460b47b66065f415a76c96672c55b4d32ae1f49)
-   mod: drop apd v1 from the module graph by [@&#8203;mvdan](https://github.com/mvdan) in [`d663a8c`](https://github.com/cue-lang/cue/commit/d663a8c62f8540abd656f32745a3875f499f565d)
-   all: apply Go 1.19's gofmt by [@&#8203;mvdan](https://github.com/mvdan) in [`3f3f181`](https://github.com/cue-lang/cue/commit/3f3f18168373298c1580006de52303e06135fcc8)
-   internal/core/adt: fix spurious cycle by [@&#8203;mpvl](https://github.com/mpvl) in [`e187f9f`](https://github.com/cue-lang/cue/commit/e187f9fe5d456f14073645670a98803d3048849e)
-   internal/core/adt: reimplementation of cycle algorithm by [@&#8203;mpvl](https://github.com/mpvl) in [`6b3fd65`](https://github.com/cue-lang/cue/commit/6b3fd657900412db28bc4270aa0bd31d12fa3c48)
-   internal/core/adt: hoist cycle logic by [@&#8203;mpvl](https://github.com/mpvl) in [`eab8c8e`](https://github.com/cue-lang/cue/commit/eab8c8ea5c60ce284b4297ca707fa91cbce11b59)
-   internal/core/adt: pass Conjunct instead of Environment to Resolve by [@&#8203;mpvl](https://github.com/mpvl) in [`428d395`](https://github.com/cue-lang/cue/commit/428d3955064ca586fd855d4505ab4fe2cf7163f7)
-   internal/core/adt: don't spawn duplicate locations by [@&#8203;mpvl](https://github.com/mpvl) in [`3bedf8e`](https://github.com/cue-lang/cue/commit/3bedf8ea89bed806257bb62f56cced9dbb993c30)
-   internal/core/adt: fix env linking for comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`b00f5d6`](https://github.com/cue-lang/cue/commit/b00f5d6beac35769cc101e3e4e60894c88a0e2f1)
-   cmd/cue: remove all stdin buffering by [@&#8203;mvdan](https://github.com/mvdan) in [`b4d1b16`](https://github.com/cue-lang/cue/commit/b4d1b16ccf8944599eec6870da400d2b56da979b)
-   all: use the .test TLD for module paths in tests by [@&#8203;mvdan](https://github.com/mvdan) in [`5a08d2f`](https://github.com/cue-lang/cue/commit/5a08d2f7a9a7595def05c5486cbb5276e66391cb)
-   CI: only pull master commits through a proxy on Linux by [@&#8203;mvdan](https://github.com/mvdan) in [`395df20`](https://github.com/cue-lang/cue/commit/395df20f0fe6983b18ca30f03f1c5caa6d144ca3)
-   CI: try "pull through proxy" go get up to five times by [@&#8203;mvdan](https://github.com/mvdan) in [`4f15036`](https://github.com/cue-lang/cue/commit/4f150368159fdb18df5d5fc3306b6598b8ca9ac9)
-   all: fix migration to x/tools/txtar by [@&#8203;myitcv](https://github.com/myitcv) in [`0a46a16`](https://github.com/cue-lang/cue/commit/0a46a1624353da7327d356040a5612251e01659f)
-   cmd/cue/cmd: add --inline-imports flag by [@&#8203;mpvl](https://github.com/mpvl) in [`974a09b`](https://github.com/cue-lang/cue/commit/974a09bb69aaf6b4d22f3a6e6a6929d7e306c605)
-   cue: support InlineImports for Syntax by [@&#8203;mpvl](https://github.com/mpvl) in [`ae56267`](https://github.com/cue-lang/cue/commit/ae56267956abf38f79b66fc9809d61abab0a50d1)
-   internal/core/export: don't inline for errors by [@&#8203;mpvl](https://github.com/mpvl) in [`e87bc25`](https://github.com/cue-lang/cue/commit/e87bc251364ca2ac93055befed518207771bc660)
-   internal/core/export: enhancements for import inlining by [@&#8203;mpvl](https://github.com/mpvl) in [`62fedc3`](https://github.com/cue-lang/cue/commit/62fedc345677e3205bbbe23e8f2a99223ab5fa21)
-   internal/core/export: implement self-contained algo for export by [@&#8203;mpvl](https://github.com/mpvl) in [`c71f674`](https://github.com/cue-lang/cue/commit/c71f6745235d5d2dc48ad044d93efc50485fdd7a)
-   all: fix common pattern of calling cuextxtar.Load by [@&#8203;myitcv](https://github.com/myitcv) in [`bdaadc9`](https://github.com/cue-lang/cue/commit/bdaadc9c872bd204940e41e15ec1dc5fb2378f13)
-   pkg/tool/cli: rework Stdin and make Ask read an entire line by [@&#8203;mvdan](https://github.com/mvdan) in [`4432aa6`](https://github.com/cue-lang/cue/commit/4432aa66244b1c704143327709741edfc803cc82)
-   all: swap rogpeppe/go-internal/txtar for x/tools/txtar by [@&#8203;mvdan](https://github.com/mvdan) in [`9f3d9d2`](https://github.com/cue-lang/cue/commit/9f3d9d204ffe2e26ff4a104406b585df0d42023c)
-   internal/ci: use consistent name for CUELANGORGTIPREBUILDHOOK by [@&#8203;myitcv](https://github.com/myitcv) in [`a9f8bd2`](https://github.com/cue-lang/cue/commit/a9f8bd2e84e4b76f8bff33d05856c19269f2d314)
-   cmd/cue/cmd: remove bits of unused code by [@&#8203;mvdan](https://github.com/mvdan) in [`4d7edeb`](https://github.com/cue-lang/cue/commit/4d7edeb14282847c88d36ce02e1a2852279352c2)
-   internal/diff: two different errors are equal by [@&#8203;mpvl](https://github.com/mpvl) in [`6e95220`](https://github.com/cue-lang/cue/commit/6e95220b64bffd37f1a4aee40054aa0d010fa2c1)
-   interal/diff: skip hidden fields by default by [@&#8203;mpvl](https://github.com/mpvl) in [`5151417`](https://github.com/cue-lang/cue/commit/5151417cdd411a470585149041d6bcb72793b841)
-   .gitignore: ignore some binaries by [@&#8203;mpvl](https://github.com/mpvl) in [`2d10d0f`](https://github.com/cue-lang/cue/commit/2d10d0f19cff3eff21f5bc20d9203610ff775b5d)
-   internal/core/export: cleanup of initialization and finalize by [@&#8203;mpvl](https://github.com/mpvl) in [`8a7ebf9`](https://github.com/cue-lang/cue/commit/8a7ebf930b080ab9d14d8d23755d2ec39d1194b1)
-   internal/core/export: simplify dynamic labels by [@&#8203;mpvl](https://github.com/mpvl) in [`8edd739`](https://github.com/cue-lang/cue/commit/8edd739a9501e2198e5b171158786ebb34ed6477)
-   internal/core/export: refactor uniqueFeature by [@&#8203;mpvl](https://github.com/mpvl) in [`9777511`](https://github.com/cue-lang/cue/commit/9777511749aef21ffdc2addf79ad9f7738b0baab)
-   internal/core/export: fix bug exporting dynamic references by [@&#8203;mpvl](https://github.com/mpvl) in [`360ef5f`](https://github.com/cue-lang/cue/commit/360ef5f88bfd0caa06b4db3d4e21e88b9d264032)
-   internal/core/adt: clarify examples for references by [@&#8203;mpvl](https://github.com/mpvl) in [`5cb52c8`](https://github.com/cue-lang/cue/commit/5cb52c862ffacc20e4d56c2d14dfa4e112be204c)
-   internal/core/export: hoist FieldReference logic by [@&#8203;mpvl](https://github.com/mpvl) in [`82a2513`](https://github.com/cue-lang/cue/commit/82a25134453d2ae49dde27edb49ebe37b50491d6)
-   internal/core/export: pass Environment by [@&#8203;mpvl](https://github.com/mpvl) in [`254d0de`](https://github.com/cue-lang/cue/commit/254d0ded1cdcd614304a53082bc5296fe1ac1daa)
-   internal/core/export: move tests to subdir by [@&#8203;mpvl](https://github.com/mpvl) in [`08c0689`](https://github.com/cue-lang/cue/commit/08c06896d5d3c5f4378f5ab5c357b03d041a1d3b)
-   tools/fix: remove rewriting support for old-style let by [@&#8203;mpvl](https://github.com/mpvl) in [`9a66c51`](https://github.com/cue-lang/cue/commit/9a66c51a1bd05277605e15690881f08793d50212)
-   internal/core/export: hoist reference logic by [@&#8203;mpvl](https://github.com/mpvl) in [`580edf4`](https://github.com/cue-lang/cue/commit/580edf46b0f30089e8b4f4594a49a16354237d89)
-   cue/format: fix `StructLit` trailing comma bug by [@&#8203;satotake](https://github.com/satotake) in [`d16c799`](https://github.com/cue-lang/cue/commit/d16c7998541098bb304910add474bfb76308db96)
-   internal/ci/github: skip non-race tests when running race tests by [@&#8203;myitcv](https://github.com/myitcv) in [`4113ec3`](https://github.com/cue-lang/cue/commit/4113ec34607a913703694b8a4c4996ffb4552d92)
-   internal/ci: refactor CI workflows by [@&#8203;myitcv](https://github.com/myitcv) in [`236a565`](https://github.com/cue-lang/cue/commit/236a565379907bc92997645e4113ca1ed6c499b6)
-   internal/ci: split github workflows into separate files by [@&#8203;myitcv](https://github.com/myitcv) in [`9d366cd`](https://github.com/cue-lang/cue/commit/9d366cd68db61d461d752db8d649734ba08bd7fa)
-   internal/ci: write netrc file for triggering trybots by [@&#8203;myitcv](https://github.com/myitcv) in [`62ccbc0`](https://github.com/cue-lang/cue/commit/62ccbc0f983c3e6abdd786a6f2342b4f7b46d6c4)
-   internal/ci: move to using gerritstatusupdater by [@&#8203;myitcv](https://github.com/myitcv) in [`f28ad41`](https://github.com/cue-lang/cue/commit/f28ad41e9ed5918933123c17bab0dd62614c7399)
-   internal/ci: rename test and repository_dispatch workflows by [@&#8203;myitcv](https://github.com/myitcv) in [`d4526fe`](https://github.com/cue-lang/cue/commit/d4526fe916326dc69e216864d936e26ce7aef2bb)
-   cuego: fix example in docs by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`2fea90a`](https://github.com/cue-lang/cue/commit/2fea90a631b14946ca0ffac025e64da2d09d3e27)
-   internal/ci: move workflow declarations to their own package by [@&#8203;myitcv](https://github.com/myitcv) in [`2795dcc`](https://github.com/cue-lang/cue/commit/2795dcc4db87bb3355de0a49d6596c87f9c2e3d4)
-   cue/load: actually apply the latest doc wording per the reviews by [@&#8203;mvdan](https://github.com/mvdan) in [`f32ea8e`](https://github.com/cue-lang/cue/commit/f32ea8e85e21e7472b0ca6ca1f6aa526a3650d65)
-   cue/load: remove old reference to a "query tool" by [@&#8203;mvdan](https://github.com/mvdan) in [`03ed417`](https://github.com/cue-lang/cue/commit/03ed417512087bc72e9af50ab14a1a5e336a91b9)
-   internal/ci: stop using txtar tests for GitHub actions workflows by [@&#8203;myitcv](https://github.com/myitcv) in [`1876276`](https://github.com/cue-lang/cue/commit/18762768e25c6b8ad1da50af250cebe640e82c92)
-   cmd/cue: support buildinfo in version sub-command by [@&#8203;djosephsen](https://github.com/djosephsen) in [`b8703c8`](https://github.com/cue-lang/cue/commit/b8703c81a42138361e24e76ea989e7c8b7c03d18)
-   doc/spec: minor adjustments after a careful read by [@&#8203;mvdan](https://github.com/mvdan) in [`cf3ba23`](https://github.com/cue-lang/cue/commit/cf3ba23211d397d7232e531090d7074146d4bbbd)
-   pkg/gen: remove unreachable code by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`2f05fc9`](https://github.com/cue-lang/cue/commit/2f05fc92404e0c47dd62c8f769c8881f87ae9bec)
-   pkg/gen: generate (almost) all pkg.go files in one call by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`23dc354`](https://github.com/cue-lang/cue/commit/23dc354ff7ad0ed477a733f6d04866d12f5f9330)
-   all: use go-cmp.Diff more consistently by [@&#8203;mvdan](https://github.com/mvdan) in [`b30eb99`](https://github.com/cue-lang/cue/commit/b30eb998836590adaa22abdd5f628aaddb0fb0cb)
-   cmd/cue: use `cue` in test scripts rather than `exec cue` by [@&#8203;mvdan](https://github.com/mvdan) in [`621f437`](https://github.com/cue-lang/cue/commit/621f437aef4f344582476f4b6731c906d6160de5)
-   internal/core/adt: remove stutter in error by [@&#8203;mpvl](https://github.com/mpvl) in [`41ceff3`](https://github.com/cue-lang/cue/commit/41ceff3c78eb0ed13e60c673a6a4b002366d473d)
-   internal/core/adt: keep arc on comprehension error by [@&#8203;mpvl](https://github.com/mpvl) in [`309f8e7`](https://github.com/cue-lang/cue/commit/309f8e7b1ac5bed017b6b4b8f6dc8e1e512b8614)
-   internal/core/adt: use per-field comprehensions by [@&#8203;mpvl](https://github.com/mpvl) in [`748a685`](https://github.com/cue-lang/cue/commit/748a68589747fed6273d6338eb7e275a4fb116c6)
-   cmd/cue/cmd: remove usage of cue.Runtime by [@&#8203;mpvl](https://github.com/mpvl) in [`0b0f1d3`](https://github.com/cue-lang/cue/commit/0b0f1d30c967172b69df59f869156f3d154d9cc3)
-   tools/flow: get rid of deprecated cue.Runtime by [@&#8203;mpvl](https://github.com/mpvl) in [`3ac85dc`](https://github.com/cue-lang/cue/commit/3ac85dc3ca89ff621150aad1b50fb736ea0b5f9f)
-   internal/core/adt: move closedness check by [@&#8203;mpvl](https://github.com/mpvl) in [`abd2ba3`](https://github.com/cue-lang/cue/commit/abd2ba347d8d706c7ae371c7d0c19ba7f102ff33)
-   internal/core/adt: prepare for comprehension change by [@&#8203;mpvl](https://github.com/mpvl) in [`38b5fe2`](https://github.com/cue-lang/cue/commit/38b5fe26c487becef1e2cab6267e4f05b85175ec)
-   internal/core/adt: remove redundant indirection by [@&#8203;mpvl](https://github.com/mpvl) in [`5201fde`](https://github.com/cue-lang/cue/commit/5201fde5ac039dd9c87290cd8382796d5aa3189e)
-   internal/core/adt: add convenience logging method by [@&#8203;mpvl](https://github.com/mpvl) in [`ee36170`](https://github.com/cue-lang/cue/commit/ee36170a79613b52933fe8122e6531918950aba5)
-   internal/encoding: always validate when exporting by [@&#8203;qequ](https://github.com/qequ) in [`5b8860a`](https://github.com/cue-lang/cue/commit/5b8860ae5306b51bf38e7ea4b6e536a7477cff29)
-   cue/pkg/strconv: support arbitary-precision format by [@&#8203;satotake](https://github.com/satotake) in [`9bda220`](https://github.com/cue-lang/cue/commit/9bda22051dd8d9dbe1539e6b2f7205512e64f303)
-   pkg/internal: make it clearer that const is exclusive to func by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`e77a879`](https://github.com/cue-lang/cue/commit/e77a8790de2b2e7e9bed632594de0e0cf14521fa)
-   cue/format: escape tabs when printing comments, literals, and attributes by [@&#8203;mvdan](https://github.com/mvdan) in [`dac4917`](https://github.com/cue-lang/cue/commit/dac491717c1e21e40b0fbd5030ac2435507353d7)
-   all: replace filepath.Walk with WalkDir by [@&#8203;mvdan](https://github.com/mvdan) in [`79b324d`](https://github.com/cue-lang/cue/commit/79b324d14be06b57bcd0a4644fb28155bd8267c7)
-   cmd/cue: initialize toTop and toString without go/packages by [@&#8203;mvdan](https://github.com/mvdan) in [`0f66c58`](https://github.com/cue-lang/cue/commit/0f66c58a0ae826040fa35461ae8567aba6f5c327)
-   doc/contribute.md: simplify code backticks by [@&#8203;rytswd](https://github.com/rytswd) in [`193e320`](https://github.com/cue-lang/cue/commit/193e320762afa09334d4514883f3a95a15ced2fa)
-   internal/ci: avoid merge commits when testing GitHub PRs by [@&#8203;mvdan](https://github.com/mvdan) in [`6de1c17`](https://github.com/cue-lang/cue/commit/6de1c17620c78a19bf78d64498bc248b79ce82cc)
-   internal/encoding/yaml: update dependencies by [@&#8203;myitcv](https://github.com/myitcv) in [`ef1b8aa`](https://github.com/cue-lang/cue/commit/ef1b8aaa282a263b8634d7333bdb01868ff4e7f0)
-   encoding/protobuf: update dependencies by [@&#8203;mvdan](https://github.com/mvdan) in [`31be9e3`](https://github.com/cue-lang/cue/commit/31be9e32f88c1442cfe0e5f2cdb546ad89ee2415)
-   Revert "all: avoid using too many packages.Need bits" by [@&#8203;mvdan](https://github.com/mvdan) in [`87408d7`](https://github.com/cue-lang/cue/commit/87408d7d0c61bf6ff2711fd202727639aac97290)
-   all: avoid using too many packages.Need bits by [@&#8203;mvdan](https://github.com/mvdan) in [`aa9b1bd`](https://github.com/cue-lang/cue/commit/aa9b1bd076a6b54fcdcef92838f73c982a356d67)
-   all: fix a few more staticcheck nits by [@&#8203;mvdan](https://github.com/mvdan) in [`92b9a06`](https://github.com/cue-lang/cue/commit/92b9a06a99a7e27eaf91345545c75054c6279342)
-   cmd/cue: remove the need for embedpkg by [@&#8203;mvdan](https://github.com/mvdan) in [`89c6cdc`](https://github.com/cue-lang/cue/commit/89c6cdc1973da4edd97918bca19d959970f616a8)
-   all: make use of t.TempDir and t.Setenv by [@&#8203;mvdan](https://github.com/mvdan) in [`6634a00`](https://github.com/cue-lang/cue/commit/6634a00a80472ff0204427592b5d24f94fd55fc9)
-   pkg/strconv: Revert "pkg/strconv: allow string argument for format" by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`1ed6195`](https://github.com/cue-lang/cue/commit/1ed6195cd8d0051bb2a59c68be8d6a9234ea7138)
-   pkg/strconv: allow string argument for format by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`053c4ac`](https://github.com/cue-lang/cue/commit/053c4acc845c1726aca9e7974112d9bf296892c7)
-   internal/core: comment improvements by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`34782fe`](https://github.com/cue-lang/cue/commit/34782fe0bb8cb65b5dda49c377d24089cb131987)
-   cue/literal: allow escaped newlines in multiline strings by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`618e530`](https://github.com/cue-lang/cue/commit/618e5301ec0a5875d1b95d06800a4962c150d857)
-   all: drop support for Go 1.16.x by [@&#8203;mvdan](https://github.com/mvdan) in [`bd9ae53`](https://github.com/cue-lang/cue/commit/bd9ae5371cc23c54cb3cb90c0bd5a1fa4d82bc92)
-   all: make vet happy by [@&#8203;mvdan](https://github.com/mvdan) in [`a58ac53`](https://github.com/cue-lang/cue/commit/a58ac536005e7347332a26c911d2c3fa43453fc9)
-   doc/ref: mention that newlines can be escaped in multiline strings by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`13918dd`](https://github.com/cue-lang/cue/commit/13918ddeb0b0bb58ebbe92f91fd87e5d364a5844)
-   all: check the filepath.Walk error parameter by [@&#8203;mvdan](https://github.com/mvdan) in [`2caf6e0`](https://github.com/cue-lang/cue/commit/2caf6e0f648d40b9072beb875b4ac74017ce415f)
-   bump x/tools and x/net dependencies by [@&#8203;mvdan](https://github.com/mvdan) in [`79a3fa7`](https://github.com/cue-lang/cue/commit/79a3fa7e3eab9c18cab54f376cfa24600489e319)
-   all: fix a few minor typos spotted by gospel by [@&#8203;mvdan](https://github.com/mvdan) in [`7881588`](https://github.com/cue-lang/cue/commit/78815882e5f3234873f4ca4774e2919f27b594c0)
-   cue/scanner: allow leading double-quote in #-quoted string by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`db398ad`](https://github.com/cue-lang/cue/commit/db398ad39a34334a3431c66d504a0f9929faf55a)
-   internal/ci: remove gorelease check step by [@&#8203;mvdan](https://github.com/mvdan) in [`c942d0a`](https://github.com/cue-lang/cue/commit/c942d0afb0e7d38468328fad387a524403cd9799)
-   internal/ci: enforce Signed-off-by temporarily by [@&#8203;mvdan](https://github.com/mvdan) in [`7dd325d`](https://github.com/cue-lang/cue/commit/7dd325d2690f84331c5ff8d5636f1bf4d520236e)
-   all: remove redundant interface type assertions by [@&#8203;mvdan](https://github.com/mvdan) in [`74d55b7`](https://github.com/cue-lang/cue/commit/74d55b75af75f803103e9e24408f2521b936b41d)
-   pkg/list/sort: fix syntax in docs by [@&#8203;tmm1](https://github.com/tmm1) in [`00c5ddf`](https://github.com/cue-lang/cue/commit/00c5ddf5e4ed1781cbf07b9b941a1c7c36a62d87)
-   internal/ci: bump GitHub Actions OS versions by [@&#8203;mvdan](https://github.com/mvdan) in [`db3e6ac`](https://github.com/cue-lang/cue/commit/db3e6ace8c735f5bb05b1e13a7acfd7d8b72726b)
-   cmd/cue: remove duplicate files from get_go_types.txt by [@&#8203;mvdan](https://github.com/mvdan) in [`eb0a4ff`](https://github.com/cue-lang/cue/commit/eb0a4ff1aee987da38e528240533ba89af738c8a)
-   internal/cuetest: drive long tests via an env var by [@&#8203;mvdan](https://github.com/mvdan) in [`33b18be`](https://github.com/cue-lang/cue/commit/33b18be9eddd72ea356a913117bb1327a04242fd)
-   cmd/cue: import -R: don't treat text with no newlines as YAML by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`f207b0b`](https://github.com/cue-lang/cue/commit/f207b0b9285ad043221ff9f3c2207d04e8c32cc0)
-   cmd/cue: better test for import --recursive by [@&#8203;rogpeppe](https://github.com/rogpeppe) in [`7f3c0a2`](https://github.com/cue-lang/cue/commit/7f3c0a2b435d8597a4378fb56a07e5afe2847b35)

</details>

<details>
<summary>cypress-io/cypress</summary>

### [`v13.7.2`](https://github.com/cypress-io/cypress/releases/tag/v13.7.2)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.1...v13.7.2)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-7-2

### [`v13.7.1`](https://github.com/cypress-io/cypress/releases/tag/v13.7.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.0...v13.7.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-7-1

### [`v13.7.0`](https://github.com/cypress-io/cypress/releases/tag/v13.7.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.6...v13.7.0)

Changelog: <https://docs.cypress.io/guides/references/changelog#&#8203;13-7-0>

### [`v13.6.6`](https://github.com/cypress-io/cypress/releases/tag/v13.6.6)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.5...v13.6.6)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-6

### [`v13.6.5`](https://github.com/cypress-io/cypress/releases/tag/v13.6.5)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.4...v13.6.5)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-5

### [`v13.6.4`](https://github.com/cypress-io/cypress/releases/tag/v13.6.4)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.3...v13.6.4)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-4

### [`v13.6.3`](https://github.com/cypress-io/cypress/releases/tag/v13.6.3)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.2...v13.6.3)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-3

### [`v13.6.2`](https://github.com/cypress-io/cypress/releases/tag/v13.6.2)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.1...v13.6.2)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-2

### [`v13.6.1`](https://github.com/cypress-io/cypress/releases/tag/v13.6.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.0...v13.6.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-1

### [`v13.6.0`](https://github.com/cypress-io/cypress/releases/tag/v13.6.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.1...v13.6.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-6-0

### [`v13.5.1`](https://github.com/cypress-io/cypress/releases/tag/v13.5.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.0...v13.5.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-5-1

### [`v13.5.0`](https://github.com/cypress-io/cypress/releases/tag/v13.5.0): v.13.5.0

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.4.0...v13.5.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-5-0

### [`v13.4.0`](https://github.com/cypress-io/cypress/releases/tag/v13.4.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.3...v13.4.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-4-0

### [`v13.3.3`](https://github.com/cypress-io/cypress/releases/tag/v13.3.3)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.2...v13.3.3)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-3-3

### [`v13.3.2`](https://github.com/cypress-io/cypress/releases/tag/v13.3.2)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.1...v13.3.2)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-3-2

### [`v13.3.1`](https://github.com/cypress-io/cypress/releases/tag/v13.3.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.0...v13.3.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-3-1

### [`v13.3.0`](https://github.com/cypress-io/cypress/releases/tag/v13.3.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.2.0...v13.3.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-3-0

### [`v13.2.0`](https://github.com/cypress-io/cypress/releases/tag/v13.2.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.1.0...v13.2.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-2-0

### [`v13.1.0`](https://github.com/cypress-io/cypress/releases/tag/v13.1.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v13.0.0...v13.1.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-1-0

### [`v13.0.0`](https://github.com/cypress-io/cypress/releases/tag/v13.0.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.4...v13.0.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;13-0-0

### [`v12.17.4`](https://github.com/cypress-io/cypress/releases/tag/v12.17.4)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.3...v12.17.4)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-17-4

### [`v12.17.3`](https://github.com/cypress-io/cypress/releases/tag/v12.17.3)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.2...v12.17.3)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-17-3

### [`v12.17.2`](https://github.com/cypress-io/cypress/releases/tag/v12.17.2)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.1...v12.17.2)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-17-2

### [`v12.17.1`](https://github.com/cypress-io/cypress/releases/tag/v12.17.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.0...v12.17.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-17-1

### [`v12.17.0`](https://github.com/cypress-io/cypress/releases/tag/v12.17.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.16.0...v12.17.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-17-0

### [`v12.16.0`](https://github.com/cypress-io/cypress/releases/tag/v12.16.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.15.0...v12.16.0)

Changelog: <https://docs.cypress.io/guides/references/changelog#&#8203;12-16-0>

### [`v12.15.0`](https://github.com/cypress-io/cypress/releases/tag/v12.15.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.14.0...v12.15.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-15-0

### [`v12.14.0`](https://github.com/cypress-io/cypress/releases/tag/v12.14.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.13.0...v12.14.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-14-0

### [`v12.13.0`](https://github.com/cypress-io/cypress/releases/tag/v12.13.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.12.0...v12.13.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-13-0

### [`v12.12.0`](https://github.com/cypress-io/cypress/releases/tag/v12.12.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.11.0...v12.12.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-12-0

### [`v12.11.0`](https://github.com/cypress-io/cypress/releases/tag/v12.11.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.10.0...v12.11.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-11-0

### [`v12.10.0`](https://github.com/cypress-io/cypress/releases/tag/v12.10.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.9.0...v12.10.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-10-0

### [`v12.9.0`](https://github.com/cypress-io/cypress/releases/tag/v12.9.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.1...v12.9.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-9-0

### [`v12.8.1`](https://github.com/cypress-io/cypress/releases/tag/v12.8.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.0...v12.8.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-8-1

### [`v12.8.0`](https://github.com/cypress-io/cypress/releases/tag/v12.8.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.7.0...v12.8.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12.8.0

### [`v12.7.0`](https://github.com/cypress-io/cypress/releases/tag/v12.7.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.6.0...v12.7.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12.7.0

### [`v12.6.0`](https://github.com/cypress-io/cypress/releases/tag/v12.6.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.1...v12.6.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12.6.0

### [`v12.5.1`](https://github.com/cypress-io/cypress/releases/tag/v12.5.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.0...v12.5.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-5-1

### [`v12.5.0`](https://github.com/cypress-io/cypress/releases/tag/v12.5.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.1...v12.5.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-5-0

### [`v12.4.1`](https://github.com/cypress-io/cypress/releases/tag/v12.4.1)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.0...v12.4.1)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-4-1

### [`v12.4.0`](https://github.com/cypress-io/cypress/releases/tag/v12.4.0)

[Compare Source](https://github.com/cypress-io/cypress/compare/v12.3.0...v12.4.0)

Changelog: https://docs.cypress.io/guides/references/changelog#&#8203;12-4-0

</details>

<details>
<summary>javierbrea/cypress-localstorage-commands</summary>

### [`v2.2.5`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#&#8203;225---2023-11-15)

[Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.4...v2.2.5)

##### Changed

-   chore(deps): Update devDependencies

### [`v2.2.4`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#&#8203;224---2023-08-14)

[Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.3...v2.2.4)

##### Changed

-   chore(deps): Update devDependencies

### [`v2.2.3`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#&#8203;223---2023-04-03)

[Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.2...v2.2.3)

##### Changed

-   chore(deps): Update devDependencies

</details>

<details>
<summary>dagger/dagger-for-github</summary>

### [`v5`](https://github.com/dagger/dagger-for-github/compare/v4...v5)

[Compare Source](https://github.com/dagger/dagger-for-github/compare/v4...v5)

### [`v4`](https://github.com/dagger/dagger-for-github/compare/v3...v4)

[Compare Source](https://github.com/dagger/dagger-for-github/compare/v3...v4)

</details>

<details>
<summary>rlamana/docusaurus-plugin-sass</summary>

### [`v0.2.5`](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5)

[Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5)

### [`v0.2.4`](https://github.com/rlamana/docusaurus-plugin-sass/releases/tag/v0.2.4)

[Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4)

#### What's Changed

-   fix: resolve sass-loader to avoid phantom dependencies by [@&#8203;ChrisCindy](https://github.com/ChrisCindy) in https://github.com/rlamana/docusaurus-plugin-sass/pull/25
-   Bump semver from 7.3.5 to 7.5.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/rlamana/docusaurus-plugin-sass/pull/31

#### New Contributors

-   [@&#8203;ChrisCindy](https://github.com/ChrisCindy) made their first contribution in https://github.com/rlamana/docusaurus-plugin-sass/pull/25

**Full Changelog**: https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4

</details>

<details>
<summary>Microsoft/go-winio</summary>

### [`v0.6.1`](https://github.com/microsoft/go-winio/releases/tag/v0.6.1)

[Compare Source](https://github.com/Microsoft/go-winio/compare/v0.6.0...v0.6.1)

#### What's Changed

-   Soften linter by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/264
-   Bump linter, remove structcheck, ignore unhandled_errors by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/265
-   pkg/etw/sample: remove dependency on github.com/sirupsen/logrus by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/microsoft/go-winio/pull/267
-   Update go.mod dependencies by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/277
-   Add some basic bind filter functions by [@&#8203;gabriel-samfira](https://github.com/gabriel-samfira) in https://github.com/microsoft/go-winio/pull/274
-   Apply two upstream CL to mkwinsyscall by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/278
-   Unable to create named pipe on certain WS2012, Win 10 Pro machines by [@&#8203;rcarman-r7](https://github.com/rcarman-r7) in https://github.com/microsoft/go-winio/pull/280
-   Add `fs.ResolvePath` to resolve symbolic links by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/275
-   update linter and fix lint errors by [@&#8203;helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/284

#### New Contributors

-   [@&#8203;gabriel-samfira](https://github.com/gabriel-samfira) made their first contribution in https://github.com/microsoft/go-winio/pull/274
-   [@&#8203;rcarman-r7](https://github.com/rcarman-r7) made their first contribution in https://github.com/microsoft/go-winio/pull/280

**Full Changelog**: https://github.com/microsoft/go-winio/compare/v0.6.0...v0.6.1

</details>

<details>
<summary>containerd/console</summary>

### [`v1.0.4`](https://github.com/containerd/console/releases/tag/v1.0.4)

[Compare Source](https://github.com/containerd/console/compare/v1.0.3...v1.0.4)

#### What's Changed

-   gha: update to go 1.17, update golangci-lint to v1.44, and gofmt by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/61
-   remove solaris implementation by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/62
-   zos: share implementation with unix (less DRY) by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/63
-   Update GitHub actions CI workflow by [@&#8203;austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/68
-   Add containerd project checks to CI by [@&#8203;austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/69
-   fix: don't abort on first encountered error when resetting Windows console by [@&#8203;muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/67
-   Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/containerd/console/pull/72
-   fix: don't print to stdout when initializing console fails on Windows by [@&#8203;muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/66
-   \[Doc]update links to main by [@&#8203;fangn2](https://github.com/fangn2) in https://github.com/containerd/console/pull/74
-   fix: add shim for js by [@&#8203;paralin](https://github.com/paralin) in https://github.com/containerd/console/pull/60
-   docs: fix typo in the comment of Console.Reset by [@&#8203;davidhsingyuchen](https://github.com/davidhsingyuchen) in https://github.com/containerd/console/pull/73
-   tc_unix.go: Make cfmakeraw compatible to Linux by [@&#8203;ktock](https://github.com/ktock) in https://github.com/containerd/console/pull/77

#### New Contributors

-   [@&#8203;austinvazquez](https://github.com/austinvazquez) made their first contribution in https://github.com/containerd/console/pull/68
-   [@&#8203;muesli](https://github.com/muesli) made their first contribution in https://github.com/containerd/console/pull/67
-   [@&#8203;dependabot](https://github.com/dependabot) made their first contribution in https://github.com/containerd/console/pull/72
-   [@&#8203;fangn2](https://github.com/fangn2) made their first contribution in https://github.com/containerd/console/pull/74
-   [@&#8203;paralin](https://github.com/paralin) made their first contribution in https://github.com/containerd/console/pull/60
-   [@&#8203;davidhsingyuchen](https://github.com/davidhsingyuchen) made their first contribution in https://github.com/containerd/console/pull/73
-   [@&#8203;ktock](https://github.com/ktock) made their first contribution in https://github.com/containerd/console/pull/77

**Full Changelog**: https://github.com/containerd/console/compare/v1.0.3...v1.0.4

</details>

<details>
<summary>containerd/containerd</summary>

### [`v1.7.15`](https://github.com/containerd/containerd/releases/tag/v1.7.15): containerd 1.7.15

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.14...v1.7.15)

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a
regression introduced in v1.7.14 in the way process exits were handled.

##### Highlights

-   Adds mediatype to OCI index record on export ([#&#8203;9990](https://github.com/containerd/containerd/pull/9990))

##### Runtime

-   Fix runc shim to only defer init process exits ([#&#8203;10037](https://github.com/containerd/containerd/pull/10037))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Phil Estes
-   Austin Vazquez
-   Laura Brehm
-   Sebastiaan van Stijn
-   Talon

##### Changes

<details><summary>12 commits</summary>
<p>

-   Prepare for v1.7.15 release ([#&#8203;10039](https://github.com/containerd/containerd/pull/10039))
    -   [`4d4759b54`](https://github.com/containerd/containerd/commit/4d4759b54df2a2ce5abb2aaa117ebc1857406380) Prep v1.7.15 release
-   Fix runc shim to only defer init process exits ([#&#8203;10037](https://github.com/containerd/containerd/pull/10037))
    -   [`21df46766`](https://github.com/containerd/containerd/commit/21df4676621559e46b46810de3c900d105f10210) runc-shim: only defer init process exits
-   Fix compile from version control system (source) use case ([#&#8203;10012](https://github.com/containerd/containerd/pull/10012))
    -   [`2a054213e`](https://github.com/containerd/containerd/commit/2a054213e7d167d697a27bbe8409872c67e8df46) Fix compile from version control system (source) use case
-   Adds mediatype to OCI index record on export ([#&#8203;9990](https://github.com/containerd/containerd/pull/9990))
    -   [`6605c47a4`](https://github.com/containerd/containerd/commit/6605c47a4156171580458fa035133f2739046822) adds mediatype to oci index record
-   vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#&#8203;9975](https://github.com/containerd/containerd/pull/9975))
    -   [`e6d91d843`](https://github.com/containerd/containerd/commit/e6d91d843fcc26c04e0d33144211aef965f79295) vendor: github.com/golang/protobuf v1.5.4
    -   [`2d136c5f5`](https://github.com/containerd/containerd/commit/2d136c5f5eb7092b458a07e14c53ccb7e5f429f0) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    -   [`a1a7af7a3`](https://github.com/containerd/containerd/commit/a1a7af7a39da32ea0e38bb8ddd5b219c9cf6848e) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

</p>
</details>

##### Dependency Changes

-   **github.com/golang/protobuf**  v1.5.3 -> v1.5.4
-   **google.golang.org/protobuf**  v1.31.0 -> v1.33.0

Previous release can be found at [v1.7.14](https://github.com/containerd/containerd/releases/tag/v1.7.14)

### [`v1.7.14`](https://github.com/containerd/containerd/releases/tag/v1.7.14): containerd 1.7.14

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14)

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

##### Highlights

-   Update builds to use go 1.21.8 ([#&#8203;9933](https://github.com/containerd/containerd/pull/9933))
-   Fix various timing issues with docker pusher ([#&#8203;9921](https://github.com/containerd/containerd/pull/9921))
-   Register imagePullThroughput and count with MiB ([#&#8203;9855](https://github.com/containerd/containerd/pull/9855))
-   Move high volume event logs to Trace level ([#&#8203;9823](https://github.com/containerd/containerd/pull/9823))

##### Container Runtime Interface (CRI)

-   Handle pod transition states gracefully while listing pod stats ([#&#8203;9905](https://github.com/containerd/containerd/pull/9905))

##### Runtime

-   Update runc-shim to process exec exits before init ([#&#8203;9928](https://github.com/containerd/containerd/pull/9928))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Wei Fu
-   Derek McGowan
-   Maksym Pavlenko
-   Krisztian Litkey
-   Akihiro Suda
-   Justin Chadwell
-   Sebastiaan van Stijn
-   Phil Estes
-   Kirtana Ashok
-   Akhil Mohan
-   Austin Vazquez
-   Etienne Champetier
-   Jordan Liggitt
-   Kohei Tokunaga
-   Mike Brown
-   Samuel Karp
-   Davanum Srinivas
-   Edgar Lee
-   Henry Wang
-   James Sturtevant
-   Laura Brehm
-   Nashwan Azhari
-   Robbie Buxton
-   Robert-André Mauchin
-   Shukui Yang

##### Changes

<details><summary>70 commits</summary>
<p>

-   Prepare release notes for v1.7.14 ([#&#8203;9953](https://github.com/containerd/containerd/pull/9953))
    -   [`1babe6b58`](https://github.com/containerd/containerd/commit/1babe6b582911fe90b93fc01491f2f4b130b7a3a) Prepare release notes for v1.7.14
-   Backport use Go toolchain in CI matrix to build binaries ([#&#8203;9951](https://github.com/containerd/containerd/pull/9951))
    -   [`a9bbbefcf`](https://github.com/containerd/containerd/commit/a9bbbefcf2feba3eaf1da39b70ed28032a7d8a65) Use the Go toolchain in CI matrix to build binaries
-   Update builds to use go 1.21.8 ([#&#8203;9933](https://github.com/containerd/containerd/pull/9933))
    -   [`1ca9a643a`](https://github.com/containerd/containerd/commit/1ca9a643a1ad206f074300e235c959213854fff1) update to go 1.21.8, 1.22.1
-   Move inline PS scripts into files ([#&#8203;9938](https://github.com/containerd/containerd/pull/9938))
    -   [`39caf532e`](https://github.com/containerd/containerd/commit/39caf532e7f60ff21050221fda627bab02de2ce8) Move inline PS scripts into files
-   Disable OOM set score unpriv test temporarily ([#&#8203;9944](https://github.com/containerd/containerd/pull/9944))
    -   [`630226bb4`](https://github.com/containerd/containerd/commit/630226bb431ec98dbfca279c3416abf5047d9858) Disable OOM set score unpriv test temporarily
-   Update runc-shim to process exec exits before init ([#&#8203;9928](https://github.com/containerd/containerd/pull/9928))
    -   [`de7b6bae9`](https://github.com/containerd/containerd/commit/de7b6bae9e2e44676ae63a13ab130812a6db56b6) runc-shim: process exec exits before init
-   update to go 1.21.6, test 1.22.0 ([#&#8203;9860](https://github.com/containerd/containerd/pull/9860))
    -   [`3b3e537ea`](https://github.com/containerd/containerd/commit/3b3e537eab7f81e32f34c95833caa2af9bc8753f) Uninstall mingw before attempting upgrade
    -   [`9e24388b2`](https://github.com/containerd/containerd/commit/9e24388b209e519d7cc3805b3266b9a4a82e59cc) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
    -   [`5b23a4127`](https://github.com/containerd/containerd/commit/5b23a412759f27465906f86196c686cd0925be15) seccomp, apparmor: add go:noinline
    -   [`753422ac1`](https://github.com/containerd/containerd/commit/753422ac11e3485b14a62bfdfcc75a0001f3dd70) Drop go 1.20 and build against 1.22
    -   [`a2d64218c`](https://github.com/containerd/containerd/commit/a2d64218c5a5abc676556925d63b222dbd606469) Fix windows integration tests
    -   [`6379dd6f4`](https://github.com/containerd/containerd/commit/6379dd6f428fc3f55cb4625d7741b84751d42278) Update workflow files to install Go via composite action
    -   [`a5c0d061c`](https://github.com/containerd/containerd/commit/a5c0d061cd3a4154f31fd5a5c8a4f77da5da1dcd) Extract a composite action to install Go
-   Fix various timing issues with docker pusher ([#&#8203;9921](https://github.com/containerd/containerd/pull/9921))
    -   [`52a1402df`](https://github.com/containerd/containerd/commit/52a1402df64ca286b5084b1b150c4219343ad6d7) copy: prevent potential deadlock if close before fully written
    -   [`872746386`](https://github.com/containerd/containerd/commit/872746386237b1076f8449a7f7d3d5a07ed30a42) copy: setError should imply Close
    -   [`a8004007a`](https://github.com/containerd/containerd/commit/a8004007a2ababa6ac7dbf508edf1c49faf06110) copy: remove max number of ErrResets
    -   [`0465472ed`](https://github.com/containerd/containerd/commit/0465472ed3807b6dcf785d160783019e3fed5cf6) pushWriter: refactor reset pipe logic into separate function
    -   [`2577207cc`](https://github.com/containerd/containerd/commit/2577207cc0611f36e582111f88f16fd5ae777068) copy: improve error detection from closed pipes
    -   [`d081da86b`](https://github.com/containerd/containerd/commit/d081da86bfc3b1b65efacdefba0e48aadaac4d91) copy: check if writer was closed before setting a pipe
    -   [`2a25c085b`](https://github.com/containerd/containerd/commit/2a25c085b21e074667bf6ded0dbb6ebf892a889c) copy: remove wrapping io.NopCloser from push writer pipe
-   Register imagePullThroughput and count with MiB ([#&#8203;9855](https://github.com/containerd/containerd/pull/9855))
    -   [`711cebd48`](https://github.com/containerd/containerd/commit/711cebd484d44da363ca451cdaaad0c6ec9810d2) Register imagePullThroughput and count with MiB
-   Update golangci-lint to v1.56.1 ([#&#8203;9900](https://github.com/containerd/containerd/pull/9900))
    -   [`926ceb036`](https://github.com/containerd/containerd/commit/926ceb036223d8ac05cd918c7a4c0825bb9c0640) fix golangci-lint errors
    -   [`4030ae235`](https://github.com/containerd/containerd/commit/4030ae2350fee10557fe52a5b8f86761afb01a1d) Update golangci-lint to v1.56.1
    -   [`6620d6bfd`](https://github.com/containerd/containerd/commit/6620d6bfd7c5e6e8ffc0c6047c3602ac0ab05a16) ci: bump up golangci-lint to v1.55.2
    -   [`b16ca72b2`](https://github.com/containerd/containerd/commit/b16ca72b2e1e105e475537a450f0c6509e95ca32) Bump up golangci-lint to v1.54.2
-   Handle pod transition states gracefully while listing pod stats ([#&#8203;9905](https://github.com/containerd/containerd/pull/9905))
    -   [`39db3f18b`](https://github.com/containerd/containerd/commit/39db3f18b29ab9efb671404a1030628af560c614) adjust test cases to run for windows
    -   [`579d8b463`](https://github.com/containerd/containerd/commit/579d8b463bd9cdcdc4425ac7279033056c1d0433) \[cri] Handle Windows pod transitions gracefully
-   Backport GitHub actions package updates ([#&#8203;9876](https://github.com/containerd/containerd/pull/9876))
    -   [`8d6f0f2ae`](https://github.com/containerd/containerd/commit/8d6f0f2aecd6962163fbaac6f6d2bbb6e12e9c85) build(deps): bump golangci/golangci-lint-action from 3 to 4
    -   [`7929592b9`](https://github.com/containerd/containerd/commit/7929592b96e2e4e2e0150a890048f612b623fb7d) build(deps): bump actions/upload-artifact from 3 to 4
    -   [`e11de777d`](https://github.com/containerd/containerd/commit/e11de777dcfdf5914b102830d66e6fbed6ceea7d) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
    -   [`2b40a4074`](https://github.com/containerd/containerd/commit/2b40a40741dfa865683f25d76ac4e03457449ecc) build(deps): bump actions/checkout from 3 to 4
    -   [`22feefa57`](https://github.com/containerd/containerd/commit/22feefa570111de80812a493685fb767c3a6c6b4) build(deps): bump actions/setup-go from 3 to 5
    -   [`b96aa4012`](https://github.com/containerd/containerd/commit/b96aa4012d4a491869f26f570f9dfbbf1835eb70) build(deps): bump actions/upload-artifact from 1 to 3
    -   [`97763f91d`](https://github.com/containerd/containerd/commit/97763f91d6e8013d5c1e2c5ad7214cd956808742) build(deps): bump docker/setup-buildx-action from 2 to 3
    -   [`6875bb14f`](https://github.com/containerd/containerd/commit/6875bb14f1841de6d89c689a2e393697c1e6c89c) build(deps): bump github/codeql-action from 2 to 3
    -   [`87f9adb6b`](https://github.com/containerd/containerd/commit/87f9adb6b9ed2bd9a0b72879c5a9bc5eb1b51586) build(deps): bump actions/download-artifact from 3 to 4
-   .github: windows should use fix critool version ([#&#8203;9874](https://github.com/containerd/containerd/pull/9874))
    -   [`d9c099a9a`](https://github.com/containerd/containerd/commit/d9c099a9ac39956aee0a720be8b3b6af8861351b) .github: windows should use fix critool version
-   ci: update crun version to 1.14.3 ([#&#8203;9850](https://github.com/containerd/containerd/pull/9850))
    -   [`dc594b01d`](https://github.com/containerd/containerd/commit/dc594b01d28d3a6a896b66274fb75b1f54aecaa3) ci: update crun version to 1.14.3
-   Add WithMetaStore to overlay snapshotter and missing unpacker.Wait for image import ([#&#8203;9837](https://github.com/containerd/containerd/pull/9837))
    -   [`8fe0b26f1`](https://github.com/containerd/containerd/commit/8fe0b26f198163fb88a6bd194382c502d5756fb1) Add missing unpacker.Wait for image import
    -   [`31ea2d7d9`](https://github.com/containerd/containerd/commit/31ea2d7d9114fee156f37dc9e6f38538aca58447) Add WithMetaStore to overlay snapshotter to allow bringing your own
-   Move high volume event logs to Trace level ([#&#8203;9823](https://github.com/containerd/containerd/pull/9823))
    -   [`982e0cffb`](https://github.com/containerd/containerd/commit/982e0cffbeb31768655ba1ed89620e27551fc49f) Move high volume event logs to Trace level
-   cri: propagate deprecation list to runtime status ([#&#8203;9818](https://github.com/containerd/containerd/pull/9818))
    -   [`c79ffa277`](https://github.com/containerd/containerd/commit/c79ffa2773d29e81f7a905fc1242301c5ee7e556) cri: propagate deprecation list to runtime status
-   ctr: print deprecation warnings on every invocation ([#&#8203;9820](https://github.com/containerd/containerd/pull/9820))
    -   [`eaebe23de`](https://github.com/containerd/containerd/commit/eaebe23de407600ff81b9466165294eacc3575f5) ctr: print deprecation warnings on every invocation
-   bug fix: make sure cri image is pinned when it is pulled outside cri ([#&#8203;9784](https://github.com/containerd/containerd/pull/9784))
    -   [`26c057423`](https://github.com/containerd/containerd/commit/26c057423c614deb0c510ceea84ed22bbe4f7f1d) bug fix: make sure cri image is pinned when it is pulled outside cri
-   go.{mod,sum}: update NRI dependency, fixing a potential fd double close error. ([#&#8203;9783](https://github.com/containerd/containerd/pull/9783))
    -   [`d3e997556`](https://github.com/containerd/containerd/commit/d3e9975563f4dd2182526188f6c2331a192a07d5) go.{mod,sum}: update NRI dependency, re-vendor.
-   Add option to perform syncfs after pull ([#&#8203;9769](https://github.com/containerd/containerd/pull/9769))
    -   [`ea0a92ec3`](https://github.com/containerd/containerd/commit/ea0a92ec30c9e61bd45b777a27ee4849b1716522) \*: introduce image_pull_with_sync_fs in CRI
    -   [`4caf44032`](https://github.com/containerd/containerd/commit/4caf44032b61ecef0c2e38eb38395a3969377296) api: introduce sync_fs to diff.ApplyRequest
-   Move certain debug logs to trace logs ([#&#8203;9761](https://github.com/containerd/containerd/pull/9761))
    -   [`3f75af7bf`](https://github.com/containerd/containerd/commit/3f75af7bf20fc6d1456e282e31c51d32d086b9ec) Move certain debug logs to trace logs

</p>
</details>

##### Changes from containerd/nri
<details><summary>23 commits</summary>
<p>

-   socketpair_windows: remove implementation for now ([containerd/nri#&#8203;69](https://github.com/containerd/nri/pull/69))
    -   [`e47f09b`](https://github.com/containerd/nri/commit/e47f09b2abe155cf5c0caaf7d0df7651447d2660) socketpair_windows: remove implementation for now
-   adaptation, stub: allow extra ttrpc client and server options. ([containerd/nri#&#8203;67](https://github.com/containerd/nri/pull/67))
    -   [`45b9e3f`](https://github.com/containerd/nri/commit/45b9e3f1437fff2bb9bc26d89da34ee1b298cc86) plugins: update dependencies.
    -   [`f600cf6`](https://github.com/containerd/nri/commit/f600cf681e94c8f8b65dead5e57fe0981571bea9) go.{mod,sum}: update dependencies.
    -   [`13ee978`](https://github.com/containerd/nri/commit/13ee97879885d8fe4c0dbbf5c0a04716a8654247) pkg/stub: add support for extra ttrpc options.
    -   [`c4e2f81`](https://github.com/containerd/nri/commit/c4e2f81f94b35bee5b9d35c80f28490b6f3ebb76) pkg/adaptation: add support for extra ttrpc options.
-   socketpair_unix: avoid double close(), set FD_CLOEXEC ([containerd/nri#&#8203;66](https://github.com/containerd/nri/pull/66))
    -   [`5d0b52b`](https://github.com/containerd/nri/commit/5d0b52bc45c998c5fcb1a60a7289f86d9c92f836) sockerpair_unix: avoid double close(), set FD_CLOEXEC
-   Task: fix typo in godoc ([containerd/nri#&#8203;61](https://github.com/containerd/nri/pull/61))
    -   [`ae7840b`](https://github.com/containerd/nri/commit/ae7840bf9910649194e1a556b8cc7a66bc19d817) Task: fix typo in godoc
-   Take pkg/hooks from github.com/containers/common (carry 46) ([containerd/nri#&#8203;55](https://github.com/containerd/nri/pull/55))
    -   [`b4ac58c`](https://github.com/containerd/nri/commit/b4ac58c1a5b0cffa51448ed060095dd5dc6f4b54) Take pkg/hooks from github.com/containers/common
-   gha: remove GOPATH and workingdir, update actions/setup-go@v4, actions/checkout@v4 ([containerd/nri#&#8203;53](https://github.com/containerd/nri/pull/53))
    -   [`ee96969`](https://github.com/containerd/nri/commit/ee969691b8e4bdc2b7c3e384b22c203fcf948ab7) gha: update actions/checkout@v4
    -   [`7b33fbf`](https://github.com/containerd/nri/commit/7b33fbf7685a7c0d27d186f89f6027373e54e3f0) gha: update actions/setup-go@v4
    -   [`e33ac3e`](https://github.com/containerd/nri/commit/e33ac3e43394ead24dbb4a407dd76c00c5780737) gha: remove working-dir and GOPATH
-   remove containerd as dependency ([containerd/nri#&#8203;51](https://github.com/containerd/nri/pull/51))
    -   [`da8a7e5`](https://github.com/containerd/nri/commit/da8a7e53614c60c106f824caf3d120ea582a0cbe) remove containerd as dependency
-   make plugins/ulimit-adjuster a separate module ([containerd/nri#&#8203;54](https://github.com/containerd/nri/pull/54))
    -   [`934815e`](https://github.com/containerd/nri/commit/934815e56ede6d603d1b17cbce86ad98a973eaf1) make plugins/ulimit-adjuster a separate module
-   scripts: fix protobuf URL on arm64 ([containerd/nri#&#8203;52](https://github.com/containerd/nri/pull/52))
    -   [`9b43daa`](https://github.com/containerd/nri/commit/9b43daaeceae6750053c5693a15edc59819886b9) scripts: fix protobuf URL on arm64

</p>
</details>

##### Changes from containerd/ttrpc
<details><summary>21 commits</summary>
<p>

-   Fix streaming with empty payloads ([containerd/ttrpc#&#8203;157](https://github.com/containerd/ttrpc/pull/157))
    -   [`44ca009`](https://github.com/containerd/ttrpc/commit/44ca0096e1b2b638ead24b4898cc34aa3b603926) Add comment
    -   [`6615f15`](https://github.com/containerd/ttrpc/commit/6615f159bad5b522b7322408fcf5ae8bb58b0843) Fix linter
    -   [`dea99e9`](https://github.com/containerd/ttrpc/commit/dea99e9d052d7b86500e6e3f9e6a214d2111d1a9) Fix handling of empty payloads
    -   [`336fc1b`](https://github.com/containerd/ttrpc/commit/336fc1b6b472ea8df89cd109b7e8dfb99fe8828e) Add integration test to reproduce issue with empty payloads
-   Bump google.golang.org/grpc from 1.57.0 to 1.57.1 ([containerd/ttrpc#&#8203;156](https://github.com/containerd/ttrpc/pull/156))
    -   [`1e51c46`](https://github.com/containerd/ttrpc/commit/1e51c4681df2ab54ad15226a125228ac7639d2e0) Bump google.golang.org/grpc from 1.57.0 to 1.57.1
-   Bump golang.org/x/net from 0.10.0 to 0.17.0 ([containerd/ttrpc#&#8203;155](https://github.com/containerd/ttrpc/pull/155))
    -   [`bea960d`](https://github.com/containerd/ttrpc/commit/bea960d9fea8eb25d11ff5e024c734e46a9a6c3e) Bump golang.org/x/net from 0.10.0 to 0.17.0
-   Implement support for unary interceptor chaining. ([containerd/ttrpc#&#8203;152](https://github.com/containerd/ttrpc/pull/152))
    -   [`40f227d`](https://github.com/containerd/ttrpc/commit/40f227ddbb9e05bf4d04179991f809df0546c6f6) server: implement UnaryServerInterceptor chaining.
    -   [`f984c9b`](https://github.com/containerd/ttrpc/commit/f984c9b178e595292d4a6934ce229c9854c2fe77) client: implement UnaryClientInterceptor chaining.
-   Fix grammar in comment for UserOnCloseWait. ([containerd/ttrpc#&#8203;153](https://github.com/containerd/ttrpc/pull/153))
    -   [`8ca4110`](https://github.com/containerd/ttrpc/commit/8ca4110ebc91819c5b0e2f17c9ded818b2462c50) Fix comment for UserOnCloseWait.
-   Bump genproto dependency ([containerd/ttrpc#&#8203;154](https://github.com/containerd/ttrpc/pull/154))
    -   [`a2fbc14`](https://github.com/containerd/ttrpc/commit/a2fbc14815b5a707579072aa0edaa59bdaf762f9) go.mod: google.golang.org/genproto/googleapis/rpc v0.0.0-20230731190214-cbb8c96f2d6d
    -   [`cf2b85d`](https://github.com/containerd/ttrpc/commit/cf2b85de12df0368cf0c6a24446b25c079caf0f5) go.mod: bump to supported go version
-   server_test: wait for OnClose in TestClientEOF. ([containerd/ttrpc#&#8203;150](https://github.com/containerd/ttrpc/pull/150))
    -   [`e0cd801`](https://github.com/containerd/ttrpc/commit/e0cd8011167557f2ddb1b976e604cfd94d8b393d) server_test: wait for OnClose in TestClientEOF.
-   .github: give more slack for build+tests. ([containerd/ttrpc#&#8203;151](https://github.com/containerd/ttrpc/pull/151))
    -   [`8d47846`](https://github.com/containerd/ttrpc/commit/8d4784675e72e1880aa5bb9c817875891e670d41) .github: give more slack for build+tests.

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/nri**                  v0.4.0 -> v0.6.0
-   **github.com/containerd/ttrpc**                v1.2.2 -> v1.2.3
-   **google.golang.org/genproto/googleapis/rpc**  [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) -> [`cbb8c96`](https://github.com/containerd/containerd/commit/cbb8c96f2d6d)

Previous release can be found at [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13)

### [`v1.7.13`](https://github.com/containerd/containerd/releases/tag/v1.7.13): containerd 1.7.13

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.12...v1.7.13)

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary
in the release builds to address CVE-2024-21626

##### Notable Updates

-   **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv))
-   **Update seccomp profile for new syscalls added since Linux 5.16** ([#&#8203;9693](https://github.com/containerd/containerd/pull/9693))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Akihiro Suda
-   Evan Lezar
-   Paweł Gronowski
-   Phil Estes
-   Wei Fu

##### Changes

<details><summary>9 commits</summary>
<p>

-   Prepare v1.7.13 and update runc to v1.1.12 ([#&#8203;9724](https://github.com/containerd/containerd/pull/9724))
    -   [`b97e611b9`](https://github.com/containerd/containerd/commit/b97e611b9b931225f2385d5fcc31873577464edd) Prepare release notes for v1.7.13
    -   [`2e7fa14db`](https://github.com/containerd/containerd/commit/2e7fa14db7f4448751280520fef2c628ed07b0eb) Update runc binary to v1.1.12
-   \[release/1.7] seccomp: kernel 6.7 ([#&#8203;9693](https://github.com/containerd/containerd/pull/9693))
    -   [`1bed37871`](https://github.com/containerd/containerd/commit/1bed3787162521aeb179895c29f7cc6a6bcd8013) seccomp: kernel 6.7
-   \[release/1.7] Update container-device-interface to v0.6.2 ([#&#8203;9685](https://github.com/containerd/containerd/pull/9685))
    -   [`14628d4aa`](https://github.com/containerd/containerd/commit/14628d4aaa1138f2fd10f23d26f3810ba5d65ab2) Update container-device-interface to v0.6.2
-   \[release/1.7] content: Add InfoReaderProvider ([#&#8203;9658](https://github.com/containerd/containerd/pull/9658))
    -   [`836477930`](https://github.com/containerd/containerd/commit/836477930ed9e6a81980b5bd2150f638cb39adf6) content: Add InfoReaderProvider

</p>
</details>

##### Dependency Changes

-   **tags.cncf.io/container-device-interface**           v0.6.2 ***new***
-   **tags.cncf.io/container-device-interface/specs-go**  v0.6.0 ***new***

Previous release can be found at [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12)

### [`v1.7.12`](https://github.com/containerd/containerd/releases/tag/v1.7.12): containerd 1.7.12

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.11...v1.7.12)

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **Fix on dialer function for Windows** ([#&#8203;9501](https://github.com/containerd/containerd/pull/9501))
-   **Improve `/etc/group` handling when appending groups** ([#&#8203;9544](https://github.com/containerd/containerd/pull/9544))
-   **Update shim pidfile permissions to 0644** ([#&#8203;9548](https://github.com/containerd/containerd/pull/9548))
-   **Update runc binary to v1.1.11** ([#&#8203;9596](https://github.com/containerd/containerd/pull/9596))
-   **Allow import and export to reference missing content** ([#&#8203;9600](https://github.com/containerd/containerd/pull/9600))
-   **Remove runc import** ([#&#8203;9605](https://github.com/containerd/containerd/pull/9605))
-   **Update Go version to 1.20.13** ([#&#8203;9624](https://github.com/containerd/containerd/pull/9624))

##### Deprecation Warnings

-   **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#&#8203;9567](https://github.com/containerd/containerd/pull/9567))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Sebastiaan van Stijn
-   Wei Fu
-   Derek McGowan
-   Paweł Gronowski
-   Jaroslav Jindrak
-   Maksym Pavlenko
-   Samuel Karp
-   Anthony Nandaa
-   Bjorn Neergaard
-   Djordje Lukic
-   Kay Yan

##### Changes

<details><summary>34 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.12 ([#&#8203;9632](https://github.com/containerd/containerd/pull/9632))
    -   [`775d544fe`](https://github.com/containerd/containerd/commit/775d544fe51cb3bb9ed735fdf3e56ec45a84d78a) Prepare release notes for v1.7.12
-   \[release/1.7] update to go1.20.13, test go1.21.6 ([#&#8203;9624](https://github.com/containerd/containerd/pull/9624))
    -   [`a5dc5b894`](https://github.com/containerd/containerd/commit/a5dc5b894d2bd9bc8bff7c95bdde7564747b138f) update to go1.20.13, test go1.21.6
-   \[release/1.7] shim: Create pid-file and address with 0644 permissions ([#&#8203;9548](https://github.com/containerd/containerd/pull/9548))
    -   [`8d82242eb`](https://github.com/containerd/containerd/commit/8d82242eb525f87b91bbc2c2499559855dd363cf) shim: Create address file with 0644 permissions
    -   [`260963a35`](https://github.com/containerd/containerd/commit/260963a354d972201ffe9a6ce882f1c0e9b319d9) shim: Create pid-file with 0644 permissions
-   \[release/1.7 backport] switch back from golang.org/x/sys/execabs to os/exec (go1.19) ([#&#8203;9602](https://github.com/containerd/containerd/pull/9602))
    -   [`872af82f5`](https://github.com/containerd/containerd/commit/872af82f572a2f2ff17107dd714c61b0eee2081a) remove remaining uses of golang.org/x/sys/execabs
    -   [`2ad2a2e83`](https://github.com/containerd/containerd/commit/2ad2a2e835f27417749c1a0adc47f58e9cae8aa7) switch back from golang.org/x/sys/execabs to os/exec (go1.19)
-   \[release/1.7] update to CDI v0.6.1, and remove github.com/opencontainers/runc dependency ([#&#8203;9605](https://github.com/containerd/containerd/pull/9605))
    -   [`9251072f7`](https://github.com/containerd/containerd/commit/9251072f784dccd9016109c0864ff11c836c9af7) remove github.com/opencontainers/runc dependency
    -   [`4e67213d4`](https://github.com/containerd/containerd/commit/4e67213d4fa02a64b7bb9ed689d68cfc0c4d104a) vendor: github.com/cncf-tags/container-device-interface v0.6.1
    -   [`e0ee0be0d`](https://github.com/containerd/containerd/commit/e0ee0be0df3d3e3a951e24f616f2afc92e665c23) go.mod: github.com/opencontainers/runtime-spec v1.1.0
    -   [`02be2236a`](https://github.com/containerd/containerd/commit/02be2236a26ac6d72a0d5375e61ddd648fa1261c) go.mod: github.com/.../container-device-interface v0.6.0
    -   [`91f953bb4`](https://github.com/containerd/containerd/commit/91f953bb476936d13881781a83b491216d21e3e1) go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2
-   \[release/1.7 backport] import/export: Support references to missing content  ([#&#8203;9600](https://github.com/containerd/containerd/pull/9600))
    -   [`6089b05d9`](https://github.com/containerd/containerd/commit/6089b05d9300c231b2f15cfd50426b97e1f77050) images/Export: Revert signature change
    -   [`6b4b760c3`](https://github.com/containerd/containerd/commit/6b4b760c39b3b63755138357d72e0acedb3bee4e) integration/import-export: Add WithSkipMissing tests
    -   [`abb3c5ef9`](https://github.com/containerd/containerd/commit/abb3c5ef943148198998a94c44d74cd01e00ad5e) export: Copy distribution source labels to manifest annotations
    -   [`9609f04f6`](https://github.com/containerd/containerd/commit/9609f04f6bb9fd203b3955d561d976f34b0d4f4f) import/export: Support references to missing content
    -   [`42b60d865`](https://github.com/containerd/containerd/commit/42b60d865296ef1bda5c0f981ef06844e1f58c5d) images/archive: use mediatype helpers
-   \[release/1.7 backport] update runc binary to v1.1.11 ([#&#8203;9596](https://github.com/containerd/containerd/pull/9596))
    -   [`23516a99c`](https://github.com/containerd/containerd/commit/23516a99c6fc64812a3719ea54004e1a92e9e61d) update runc binary to v1.1.11
-   \[release/1.7 backport] go.mod: dario.cat/mergo v1.0.0 ([#&#8203;9569](https://github.com/containerd/containerd/pull/9569))
    -   [`428714e32`](https://github.com/containerd/containerd/commit/428714e320b12dd1474c836fa15e79f824edfe2a) go.mod: dario.cat/mergo v1.0.0
-   \[release/1.7] restart: containerd.io/restart.logpath warning ([#&#8203;9567](https://github.com/containerd/containerd/pull/9567))
    -   [`03fed557e`](https://github.com/containerd/containerd/commit/03fed557e38f3cfeca0652607100c40c86806288) restart: containerd.io/restart.logpath warning
-   \[release 1.7] backport: fix on dialer function for windows ([#&#8203;9501](https://github.com/containerd/containerd/pull/9501))
    -   [`68d237392`](https://github.com/containerd/containerd/commit/68d2373926bc0a9dcc2fb6cdf49dd2188a327b9f) fix(pkg/dialer): minor fix on dialer function for windows
-   \[release/1.7] \*: enable ARM64 runner ([#&#8203;9502](https://github.com/containerd/containerd/pull/9502))
    -   [`c63165123`](https://github.com/containerd/containerd/commit/c63165123374eaba96616b6ecdd2bb34aaae8e36) \*: enable ARM64 runner
-   \[release/1.7 backport] WithAppendAdditionalGroups: better /etc/group handling ([#&#8203;9544](https://github.com/containerd/containerd/pull/9544))
    -   [`55e570844`](https://github.com/containerd/containerd/commit/55e570844473d689572d68cff7f7bcc5bdcba2ce) WithAppendAdditionalGroups: better /etc/group handling

</p>
</details>

##### Dependency Changes

-   **dario.cat/mergo**                                                       v1.0.0 ***new***
-   **github.com/container-orchestrated-devices/container-device-interface**  v0.5.4 -> v0.6.1
-   **github.com/moby/sys/user**                                              v0.1.0 ***new***
-   **github.com/opencontainers/runtime-spec**                                v1.1.0-rc.1 -> v1.1.0

Previous release can be found at [v1.7.11](https://github.com/containerd/containerd/releases/tag/v1.7.11)

### [`v1.7.11`](https://github.com/containerd/containerd/releases/tag/v1.7.11): containerd 1.7.11

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.10...v1.7.11)

Welcome to the v1.7.11 release of containerd!

The eleventh patch release for containerd 1.7 contains various fixes and updates including
one security issue.

##### Notable Updates

-   **Fix Windows default path overwrite issue** ([#&#8203;9440](https://github.com/containerd/containerd/pull/9440))
-   **Update push to always inherit distribution sources from parent** ([#&#8203;9452](https://github.com/containerd/containerd/pull/9452))
-   **Update shim to use net dial for gRPC shim sockets** ([#&#8203;9458](https://github.com/containerd/containerd/pull/9458))
-   **Fix otel version incompatibility** ([#&#8203;9483](https://github.com/containerd/containerd/pull/9483))
-   **Fix Windows snapshotter blocking snapshot GC on remove failure** ([#&#8203;9482](https://github.com/containerd/containerd/pull/9482))
-   **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c))

##### Deprecation Warnings

-   **Emit deprecation warning for AUFS snapshotter** ([#&#8203;9436](https://github.com/containerd/containerd/pull/9436))
-   **Emit deprecation warning for v1 runtime** ([#&#8203;9450](https://github.com/containerd/containerd/pull/9450))
-   **Emit deprecation warning for deprecated CRI configs** ([#&#8203;9469](https://github.com/containerd/containerd/pull/9469))
-   **Emit deprecation warning for CRI v1alpha1 usage** ([#&#8203;9479](https://github.com/containerd/containerd/pull/9479))
-   **Emit deprecation warning for CRIU config in CRI** ([#&#8203;9481](https://github.com/containerd/containerd/pull/9481))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Samuel Karp
-   Derek McGowan
-   Phil Estes
-   Bjorn Neergaard
-   Danny Canter
-   Sebastiaan van Stijn
-   ruiwen-zhao
-   Akihiro Suda
-   Amit Barve
-   Charity Kathure
-   Maksym Pavlenko
-   Milas Bowman
-   Paweł Gronowski
-   Wei Fu

##### Changes

<details><summary>39 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.11 ([#&#8203;9491](https://github.com/containerd/containerd/pull/9491))
    -   [`dfae68bc3`](https://github.com/containerd/containerd/commit/dfae68bc3e614a091d0a468c9026da370e3de0d9) Prepare release notes for v1.7.11
-   \[release/1.7] update to go1.20.12, test go1.21.5 ([#&#8203;9352](https://github.com/containerd/containerd/pull/9352))
    -   [`0d314401d`](https://github.com/containerd/containerd/commit/0d314401d9b9ad470153dc3d09f6d9cd7d527697) update to go1.20.12, test go1.21.5
    -   [`1ec1ae2c6`](https://github.com/containerd/containerd/commit/1ec1ae2c6b6458b5d000af1ec6263b4ee337cd58) update to go1.20.11, test go1.21.4
-   Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)
    -   [`cb804da21`](https://github.com/containerd/containerd/commit/cb804da2101074c769a2a327597c9595b38bb4f0) contrib/apparmor: deny /sys/devices/virtual/powercap
    -   [`40162a576`](https://github.com/containerd/containerd/commit/40162a576232b7d95325f85334590ea295d2ed2e) oci/spec: deny /sys/devices/virtual/powercap
-   \[release/1.7] Don't block snapshot garbage collection on Remove failures ([#&#8203;9482](https://github.com/containerd/containerd/pull/9482))
    -   [`ed7c6895b`](https://github.com/containerd/containerd/commit/ed7c6895bd3b33ccc7cfbc8cbd43f6a31333328a) Don't block snapshot garbage collection on Remove failures
-   \[release/1.7] Add warning for CRIU config usage ([#&#8203;9481](https://github.com/containerd/containerd/pull/9481))
    -   [`1fdefdd22`](https://github.com/containerd/containerd/commit/1fdefdd2242fcf704a11f1d6b5149e056ce98ed3) Add warning for CRIU config usage
-   \[release/1.7] Fix otel version incompatibility ([#&#8203;9483](https://github.com/containerd/containerd/pull/9483))
    -   [`f8f659e66`](https://github.com/containerd/containerd/commit/f8f659e66c6ec56fef092dced085d129c0e67176) Add HTTP client update function to tracing library
    -   [`807ddd658`](https://github.com/containerd/containerd/commit/807ddd658b4cd6c0325204e7a19a4561a10906d2) fix(tracing): use latest version of semconv
-   \[release/1.7] Add cri-api v1alpha2 usage warning to all api calls ([#&#8203;9479](https://github.com/containerd/containerd/pull/9479))
    -   [`dc45bc838`](https://github.com/containerd/containerd/commit/dc45bc8381fa2cd903e871c81ce7b4c08e82ca3b) Add cri-api v1alpha2 usage warning to all api calls
-   \[release/1.7] cri: add deprecation warnings for deprecated CRI configs ([#&#8203;9469](https://github.com/containerd/containerd/pull/9469))
    -   [`9d1bad62e`](https://github.com/containerd/containerd/commit/9d1bad62e16f31e0b06c75e1007a623879529a6d) deprecation: fix missing spaces in warnings
    -   [`51a604c07`](https://github.com/containerd/containerd/commit/51a604c0733437f4b7a20aa5ec1e6d4b4f0ab96e) cri: add deprecation warning for runtime_root
    -   [`8040e74bf`](https://github.com/containerd/containerd/commit/8040e74bf8e6c25c02bb461b82f482cff24ce611) cri: add deprecation warning for rutnime_engine
    -   [`99adc40eb`](https://github.com/containerd/containerd/commit/99adc40eb28db7cb93c378ff8bceb8e77559ae09) cri: add deprecation warning for default_runtime
    -   [`afef7ec64`](https://github.com/containerd/containerd/commit/afef7ec646910ce1db3e824bfe17848428f3b47b) cri: add warning for untrusted_workload_runtime
    -   [`6220dc190`](https://github.com/containerd/containerd/commit/6220dc1909883119a960bc96c496ae2361b94749) cri: add warning for old form of systemd_cgroup
-   \[release/1.7] runtime/v2: net.Dial gRPC shim sockets before trying grpc ([#&#8203;9458](https://github.com/containerd/containerd/pull/9458))
    -   [`80f96cd18`](https://github.com/containerd/containerd/commit/80f96cd188949bd9fa16256a8ff0b858ef692f20) runtime/v2: net.Dial gRPC shim sockets before trying grpc
-   \[release/1.7] tasks: emit warning for v1 runtime and runc v1 runtime ([#&#8203;9450](https://github.com/containerd/containerd/pull/9450))
    -   [`f471bb2b8`](https://github.com/containerd/containerd/commit/f471bb2b8e5a902ad8901c7c0db85ecead8c1730) tasks: emit warning for runc v1 runtime
    -   [`329e1d487`](https://github.com/containerd/containerd/commit/329e1d487e7cc5c2773a2472df56b6eb75ae9194) tasks: emit warning for v1 runtime
-   \[release/1.7] push: always inherit distribution sources from parent ([#&#8203;9452](https://github.com/containerd/containerd/pull/9452))
    -   [`4464fde12`](https://github.com/containerd/containerd/commit/4464fde12985d98a9edbf124c54afa1156415572) push: always inherit distribution sources from parent
-   \[release/1.7] Update tar tests to run on Darwin ([#&#8203;9451](https://github.com/containerd/containerd/pull/9451))
    -   [`7e069ee25`](https://github.com/containerd/containerd/commit/7e069ee25868e5c8a67610720f8280c3451a3103) Update tar tests to run on Darwin
-   \[release/1.7] ctr: Add sandbox flag to ctr run ([#&#8203;9449](https://github.com/containerd/containerd/pull/9449))
    -   [`5fc0e4e61`](https://github.com/containerd/containerd/commit/5fc0e4e6151dafa4d5ca8837f3d99b6a8e816866) ctr: Add sandbox flag to ctr run
-   \[release/1.7] Windows default path overwrite fix ([#&#8203;9440](https://github.com/containerd/containerd/pull/9440))
    -   [`31fe03764`](https://github.com/containerd/containerd/commit/31fe03764c436677a1db9be24c25f7c11780eceb) Fix windows default path overwrite issue
-   \[release/1.7] snapshots: emit deprecation warning for aufs ([#&#8203;9436](https://github.com/containerd/containerd/pull/9436))
    -   [`625b35e4b`](https://github.com/containerd/containerd/commit/625b35e4bb26ee021713f2692143bf37f9a98bdd) snapshots: emit deprecation warning for aufs

</p>
</details>

##### Dependency Changes

-   **github.com/felixge/httpsnoop**                                   v1.0.3 ***new***
-   **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**  v0.45.0 ***new***

Previous release can be found at [v1.7.10](https://github.com/containerd/containerd/releases/tag/v1.7.10)

### [`v1.7.10`](https://github.com/containerd/containerd/releases/tag/v1.7.10): containerd 1.7.10

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.9...v1.7.10)

Welcome to the v1.7.10 release of containerd!

The tenth patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **Enhance container image unpack client logs** ([#&#8203;9379](https://github.com/containerd/containerd/pull/9379))
-   **cri: fix using the pinned label to pin image** ([#&#8203;9381](https://github.com/containerd/containerd/pull/9381))
-   **fix: ImagePull should close http connection if there is no available data to read.** ([#&#8203;9409](https://github.com/containerd/containerd/pull/9409))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Wei Fu
-   Iceber Gu
-   Austin Vazquez
-   Derek McGowan
-   Phil Estes
-   Samuel Karp
-   ruiwen-zhao

##### Changes

<details><summary>11 commits</summary>
<p>

-   Add release notes for v1.7.10 ([#&#8203;9426](https://github.com/containerd/containerd/pull/9426))
    -   [`a995fe3a8`](https://github.com/containerd/containerd/commit/a995fe3a81a933c984ba13dc8bef0271d1aca171) Add release notes for v1.7.10
-   \[release/1.7] fix: ImagePull should close http connection if there is no available data to read. ([#&#8203;9409](https://github.com/containerd/containerd/pull/9409))
    -   [`206806128`](https://github.com/containerd/containerd/commit/206806128917276994f0949dc599e4c8b8ad8f14) remotes/docker: close connection if no more data
    -   [`328493962`](https://github.com/containerd/containerd/commit/32849396263f9c68f7c4f43a2abc1319488546de) integration: reproduce [#&#8203;9347](https://github.com/containerd/containerd/issues/9347)
    -   [`d1aab27cb`](https://github.com/containerd/containerd/commit/d1aab27cbd8ae75d90ad962a256d6af092dcf451) fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter
-   \[release/1.7] cri: fix using the pinned label to pin image ([#&#8203;9381](https://github.com/containerd/containerd/pull/9381))
    -   [`a2b16d7f9`](https://github.com/containerd/containerd/commit/a2b16d7f9cd44f81ebdcffe92dee107b2ebdca8a) cri: fix update of pinned label for images
    -   [`8dc861844`](https://github.com/containerd/containerd/commit/8dc8618442ad99a254de79200c89eb12284dac6e) cri: fix using the pinned label to pin image
-   \[release/1.7] Enhance container image unpack client logs ([#&#8203;9379](https://github.com/containerd/containerd/pull/9379))
    -   [`5930a3750`](https://github.com/containerd/containerd/commit/5930a3750c5db69abf7668e4df003aae8f0beace) Enhance container image unpack client logs

</p>
</details>

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.7.9](https://github.com/containerd/containerd/releases/tag/v1.7.9)

### [`v1.7.9`](https://github.com/containerd/containerd/releases/tag/v1.7.9): containerd 1.7.9

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.8...v1.7.9)

Welcome to the v1.7.9 release of containerd!

The ninth patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **update runc binary to v1.1.10::** ([#&#8203;9359](https://github.com/containerd/containerd/pull/9359))
-   **vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0** ([#&#8203;9301](https://github.com/containerd/containerd/pull/9301))
-   **Expose usage of cri-api v1alpha2** ([#&#8203;9336](https://github.com/containerd/containerd/pull/9336))
-   **integration: deflake TestIssue9103** ([#&#8203;9354](https://github.com/containerd/containerd/pull/9354))
-   **fix: shimv1 leak issue** ([#&#8203;9344](https://github.com/containerd/containerd/pull/9344))
-   **cri: add deprecation warnings for mirrors, auths, and configs** ([#&#8203;9327](https://github.com/containerd/containerd/pull/9327))
-   **Update hcsshim tag to v0.11.4** ([#&#8203;9326](https://github.com/containerd/containerd/pull/9326))
-   **Expose usage of deprecated features** ([#&#8203;9315](https://github.com/containerd/containerd/pull/9315))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Samuel Karp
-   Kazuyoshi Kato
-   Wei Fu
-   Kirtana Ashok
-   Derek McGowan
-   Milas Bowman
-   Sebastiaan van Stijn
-   ruiwen-zhao

##### Changes

<details><summary>28 commits</summary>
<p>

-   \[release/1.7] Add release notes for v1.7.9 ([#&#8203;9333](https://github.com/containerd/containerd/pull/9333))
    -   [`4b912af52`](https://github.com/containerd/containerd/commit/4b912af5246060ddfe3a49065f50ebe2cccc1bb3) Add release notes for v1.7.9
-   \[release/1.7 backport] update runc binary to v1.1.10 ([#&#8203;9359](https://github.com/containerd/containerd/pull/9359))
    -   [`eff291713`](https://github.com/containerd/containerd/commit/eff29171398e411ab054367f6d9f1892b9d70f67) update runc binary to v1.1.10
-   \[release/1.7] vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 ([#&#8203;9301](https://github.com/containerd/containerd/pull/9301))
    -   [`bd9428ff7`](https://github.com/containerd/containerd/commit/bd9428ff711bda05efecddafe8ca07f568cd994e) vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
-   \[release/1.7] Expose usage of cri-api v1alpha2 ([#&#8203;9336](https://github.com/containerd/containerd/pull/9336))
    -   [`d62cba40c`](https://github.com/containerd/containerd/commit/d62cba40c833f0dacb58084749105fd6cd61283a) Expose usage of cri-api v1alpha2
-   \[release/1.7] integration: deflake TestIssue9103 ([#&#8203;9354](https://github.com/containerd/containerd/pull/9354))
    -   [`5dbc258a8`](https://github.com/containerd/containerd/commit/5dbc258a81c236040b7ff27382f812c7179d6cd3) integration: deflake TestIssue9103
-   \[release/1.7] fix: shimv1 leak issue ([#&#8203;9344](https://github.com/containerd/containerd/pull/9344))
    -   [`449912857`](https://github.com/containerd/containerd/commit/449912857d8191c986537af00325d9999922fce3) fix: shimv1 leak issue
-   \[release/1.7] cri: add deprecation warnings for mirrors, auths, and configs ([#&#8203;9327](https://github.com/containerd/containerd/pull/9327))
    -   [`152c57e91`](https://github.com/containerd/containerd/commit/152c57e918a8374ce2fa20d4eb6ba5896a314529) cri: add deprecation warning for configs
    -   [`689a1036d`](https://github.com/containerd/containerd/commit/689a1036dda32e79643b151f632c8da5bac2f149) cri: add deprecation warning for auths
    -   [`8c38975bf`](https://github.com/containerd/containerd/commit/8c38975bf22f138f00ddf0fafd4803bbade098a3) cri: add deprecation warning for mirrors
    -   [`1fbce40c4`](https://github.com/containerd/containerd/commit/1fbce40c4a7dfad845770580eb146ea2fc64cc46) cri: add ability to emit deprecation warnings
-   \[release/1.7] Update hcsshim tag to v0.11.4 ([#&#8203;9326](https://github.com/containerd/containerd/pull/9326))
    -   [`73f15bdb6`](https://github.com/containerd/containerd/commit/73f15bdb63e25a13bf99f192f39984e22bc7dbc9) Update hcsshim tag to v0.11.4
-   \[release/1.7] Expose usage of deprecated features ([#&#8203;9315](https://github.com/containerd/containerd/pull/9315))
    -   [`60d48ffea`](https://github.com/containerd/containerd/commit/60d48ffea657d7d7059dcf497c75d3347e1fd1ab) ctr: new deprecations command
    -   [`74a06671a`](https://github.com/containerd/containerd/commit/74a06671ab9396ee94cfee2a588c5d0e170fb698) plugin: record deprecation for dynamic plugins
    -   [`fa5f3c91a`](https://github.com/containerd/containerd/commit/fa5f3c91a946795de0173e10a5a3eba4c18aa4c3) server: add ability to record config deprecations
    -   [`f7880e7f0`](https://github.com/containerd/containerd/commit/f7880e7f0873024d5307a16d4db8c7a2f360ad49) pull: record deprecation warning for schema 1
    -   [`1dd2f2c02`](https://github.com/containerd/containerd/commit/1dd2f2c028bc0bf9b9301a142e09488815c2fb95) introspection: add support for deprecations
    -   [`aaf000c18`](https://github.com/containerd/containerd/commit/aaf000c18c047895a891a5dfc7127dc87c034fc9) api/introspection: deprecation warnings in server
    -   [`9b7ceee54`](https://github.com/containerd/containerd/commit/9b7ceee540206e6ff6f690676566a73f4f8d443f) warning: new service for deprecations
    -   [`b708f8bfa`](https://github.com/containerd/containerd/commit/b708f8bfadcbf95e2acba22ffdeb7d8f8a974151) deprecation: new package for deprecations

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**                                                 v0.11.1 -> v0.11.4
-   **github.com/cenkalti/backoff/v4**                                               v4.2.0 -> v4.2.1
-   **github.com/go-logr/logr**                                                      v1.2.3 -> v1.2.4
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 -> v2.16.0
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.40.0 -> v0.45.0
-   **go.opentelemetry.io/otel**                                                     v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/otel/metric**                                              v0.37.0 -> v1.19.0
-   **go.opentelemetry.io/otel/sdk**                                                 v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/otel/trace**                                               v1.14.0 -> v1.19.0
-   **go.opentelemetry.io/proto/otlp**                                               v0.19.0 -> v1.0.0

Previous release can be found at [v1.7.8](https://github.com/containerd/containerd/releases/tag/v1.7.8)

### [`v1.7.8`](https://github.com/containerd/containerd/releases/tag/v1.7.8): containerd 1.7.8

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.7...v1.7.8)

Welcome to the v1.7.8 release of containerd!

The eighth patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **Fix ambiguous TLS fallback** ([#&#8203;9299](https://github.com/containerd/containerd/pull/9299))
-   **Update Go to 1.20.10** ([#&#8203;9265](https://github.com/containerd/containerd/pull/9265))
-   **Add a new image label on converted schema 1 images** ([#&#8203;9252](https://github.com/containerd/containerd/pull/9252))
-   **Fix handling for missing basic auth credentials** ([#&#8203;9235](https://github.com/containerd/containerd/pull/9235))
-   **Fix potential deadlock in create handler for containerd-shim-runc-v2** ([#&#8203;9209](https://github.com/containerd/containerd/pull/9209))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Sebastiaan van Stijn
-   Derek McGowan
-   Phil Estes
-   Chen Yiyang
-   Wei Fu
-   Akihiro Suda
-   Maksym Pavlenko
-   Marat Radchenko
-   Milas Bowman
-   Qiutong Song
-   Samuel Karp

##### Changes

<details><summary>27 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.8 ([#&#8203;9278](https://github.com/containerd/containerd/pull/9278))
    -   [`48dbdf871`](https://github.com/containerd/containerd/commit/48dbdf871b43ca94f243779bd641fcda49c94f66) Prepare release notes for v1.7.8
-   \[release/1.7] Fix ambiguous tls fallback ([#&#8203;9299](https://github.com/containerd/containerd/pull/9299))
    -   [`68abc543b`](https://github.com/containerd/containerd/commit/68abc543b1eb4a8196842de6c83115ba4e5698b0) Check scheme and host of request on push redirect
    -   [`35c7634e3`](https://github.com/containerd/containerd/commit/35c7634e33651053a934bbcb831c90ddc65ede2e) Avoid TLS fallback when protocol is not ambiguous
-   \[release/1.7] vendor: google.golang.org/grpc v1.58.3 ([#&#8203;9281](https://github.com/containerd/containerd/pull/9281))
    -   [`f36948cad`](https://github.com/containerd/containerd/commit/f36948cad712b9f813518ceaa5ac5441b6e10347) vendor: gRPC v1.58.3
-   \[release/1.7 backport] vendor: golang.org/x/net v0.17.0 ([#&#8203;9276](https://github.com/containerd/containerd/pull/9276))
    -   [`c67a53190`](https://github.com/containerd/containerd/commit/c67a5319050614a947c9e5c133e44164e487a223) vendor: golang.org/x/net v0.17.0
    -   [`71f4b36ca`](https://github.com/containerd/containerd/commit/71f4b36ca7a420d53a9f6c1b3f846a4a94b739de) vendor: golang.org/x/text v0.13.0
    -   [`a7b3b7090`](https://github.com/containerd/containerd/commit/a7b3b70909a99f47845b74a3dbe58032c17bd1e0) vendor: golang.org/x/sys v0.13.0
-   \[release/1.7] vendor: google.golang.org/grpc v1.56.3 ([#&#8203;9248](https://github.com/containerd/containerd/pull/9248))
    -   [`26736d6e1`](https://github.com/containerd/containerd/commit/26736d6e1af5f45386ae9382a6a951aee33c9ca7) vendor: google.golang.org/grpc v1.56.3
    -   [`54a69a6e4`](https://github.com/containerd/containerd/commit/54a69a6e448d61fe88ad90bd476f8f65cf21277f) vendor: golang.org/x/oauth2 v0.7.0
    -   [`ac15a7f5b`](https://github.com/containerd/containerd/commit/ac15a7f5b9da1b45ffc66bb8ccdcaed2f571c73a) vendor: google.golang.org/protobuf v1.30.0
-   \[release/1.7] update to go1.20.10, test go1.21.3 ([#&#8203;9265](https://github.com/containerd/containerd/pull/9265))
    -   [`2479c3321`](https://github.com/containerd/containerd/commit/2479c332173014f3086d9b016214c536a7c03f39) \[release/1.7] update to go1.20.10, test go1.21.3
    -   [`11f40e9d8`](https://github.com/containerd/containerd/commit/11f40e9d80409b8dfa9dcb3eb81934e08384dd8e) \[release/1.7] update to go1.20.9, test go1.21.2
-   \[release/1.7] Add a new image label if it is docker schema 1 ([#&#8203;9252](https://github.com/containerd/containerd/pull/9252))
    -   [`cac1bab79`](https://github.com/containerd/containerd/commit/cac1bab797ed8d1245bff49aa90e6c80d8714899) Add a new image label if it is docker schema 1
-   \[release/1.7] remotes: add handling for missing basic auth credentials ([#&#8203;9235](https://github.com/containerd/containerd/pull/9235))
    -   [`6cd2cc4a8`](https://github.com/containerd/containerd/commit/6cd2cc4a8f035162e06d5ffbf868c540e7eb40eb) remotes: add handling for missing basic auth credentials
-   \[release/1.7 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#&#8203;9209](https://github.com/containerd/containerd/pull/9209))
    -   [`d0a1fedb5`](https://github.com/containerd/containerd/commit/d0a1fedb5a4828daddff330a345780d0222e47e8) \*: add runc-fp as runc wrapper to inject failpoint
    -   [`04491240a`](https://github.com/containerd/containerd/commit/04491240af1766337e0fbb5145405f74a39f5ad5) containerd-shim-runc-v2: avoid potential deadlock in create handler
    -   [`6982a0df5`](https://github.com/containerd/containerd/commit/6982a0df5bc0d31ae82f0810518550006bf90931) containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
    -   [`0e2320398`](https://github.com/containerd/containerd/commit/0e2320398f0fb9974232ef68ea70625645f42661) Uncopypaste parsing of OCI Bundle spec file

</p>
</details>

##### Dependency Changes

-   **golang.org/x/crypto**                        v0.11.0 -> v0.14.0
-   **golang.org/x/mod**                           v0.9.0 -> v0.11.0
-   **golang.org/x/net**                           v0.13.0 -> v0.17.0
-   **golang.org/x/oauth2**                        v0.4.0 -> v0.10.0
-   **golang.org/x/sync**                          v0.1.0 -> v0.3.0
-   **golang.org/x/sys**                           v0.10.0 -> v0.13.0
-   **golang.org/x/term**                          v0.10.0 -> v0.13.0
-   **golang.org/x/text**                          v0.11.0 -> v0.13.0
-   **golang.org/x/tools**                         v0.7.0 -> v0.10.0
-   **google.golang.org/genproto**                 [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4) -> [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98)
-   **google.golang.org/genproto/googleapis/api**  [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new***
-   **google.golang.org/genproto/googleapis/rpc**  [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new***
-   **google.golang.org/grpc**                     v1.53.0 -> v1.58.3
-   **google.golang.org/protobuf**                 v1.29.1 -> v1.31.0

Previous release can be found at [v1.7.7](https://github.com/containerd/containerd/releases/tag/v1.7.7)

### [`v1.7.7`](https://github.com/containerd/containerd/releases/tag/v1.7.7): containerd 1.7.7

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.6...v1.7.7)

Welcome to the v1.7.7 release of containerd!

The seventh patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **Require plugins to succeed after registering readiness** ([#&#8203;9165](https://github.com/containerd/containerd/pull/9165))
-   **Handle unexpected shim kill events** ([#&#8203;9132](https://github.com/containerd/containerd/pull/9132))
-   **Build binaries with Go 1.21.1** ([#&#8203;9167](https://github.com/containerd/containerd/pull/9167))
-   **cri: Stop recommending disable_cgroup** ([#&#8203;9168](https://github.com/containerd/containerd/pull/9168))
-   **remotes/docker: Fix MountedFrom prefixed with target repository** ([#&#8203;9193](https://github.com/containerd/containerd/pull/9193))
-   **remotes: always try to establish tls connection when tls configured** ([#&#8203;9188](https://github.com/containerd/containerd/pull/9188))
-   **NRI: Add support for rlimits** ([#&#8203;48](https://github.com/containerd/nri/pull/48))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Samuel Karp
-   Krisztian Litkey
-   Wei Fu
-   Phil Estes
-   Sebastiaan van Stijn
-   Iceber Gu
-   Mike Brown
-   Akihiro Suda
-   Paweł Gronowski
-   Steve Griffith
-   Aditya Ramani
-   Austin Vazquez
-   Danny Canter
-   James Sturtevant
-   Kern Walster
-   ZP-AlwaysWin

##### Changes

<details><summary>31 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.7 ([#&#8203;9194](https://github.com/containerd/containerd/pull/9194))
    -   [`a34fa5681`](https://github.com/containerd/containerd/commit/a34fa5681a8cf8a250cdb638e29f54be44b7554f) Prepare release notes for v1.7.7
-   \[release/1.7] Allow for images with artifacts to pull ([#&#8203;9149](https://github.com/containerd/containerd/pull/9149))
    -   [`6ca0aebf0`](https://github.com/containerd/containerd/commit/6ca0aebf0c40c3a2ea59c0ede440f9b6be5d1ded) Allow for images with artifacts to pull
-   \[release 1.7] remotes/docker: Fix MountedFrom prefixed with target repository ([#&#8203;9193](https://github.com/containerd/containerd/pull/9193))
    -   [`7df492a95`](https://github.com/containerd/containerd/commit/7df492a95c7283a3f402b5a0e96030e42724d9d0) remotes/docker: Fix MountedFrom prefixed with target repository
-   \[release/1.7] Update x/net to 0.13 ([#&#8203;9134](https://github.com/containerd/containerd/pull/9134))
    -   [`b3db314a5`](https://github.com/containerd/containerd/commit/b3db314a58311b3e754906baf356ec83d05015d6) Bump x/net to 0.13
-   \[release/1.7] remotes: always try to establish tls connection when tls configured ([#&#8203;9188](https://github.com/containerd/containerd/pull/9188))
    -   [`7779ce64e`](https://github.com/containerd/containerd/commit/7779ce64e563f366199e7b22972ca18ec060b944) remotes: always try to establish tls connection when tls configured
-   \[release/1.7] cri: stop recommending disable_cgroup ([#&#8203;9168](https://github.com/containerd/containerd/pull/9168))
    -   [`6013b5e03`](https://github.com/containerd/containerd/commit/6013b5e03ebadfc70eb711118a05e24891f8e2dc) cri: stop recommending disable_cgroup
-   \[release/1.7] Require plugins to succeed after registering readiness ([#&#8203;9165](https://github.com/containerd/containerd/pull/9165))
    -   [`a83c66813`](https://github.com/containerd/containerd/commit/a83c66813f908c861ad3d908755d4c4b0a86778c) Require plugins to succeed after registering readiness
    -   [`171d76849`](https://github.com/containerd/containerd/commit/171d76849393a3efa3b244f84c7dceff8c7d5026) cri: call RegisterReadiness after NewCRIService
-   \[release/1.7] Handle unexpected shim kill events ([#&#8203;9132](https://github.com/containerd/containerd/pull/9132))
    -   [`3d27bc738`](https://github.com/containerd/containerd/commit/3d27bc738a6e6762a9c240f420491632e3eaae3d) Handle unexpected shim kill events
-   \[release/1.7] Build binaries with 1.21.1 ([#&#8203;9167](https://github.com/containerd/containerd/pull/9167))
    -   [`4ffa3ed29`](https://github.com/containerd/containerd/commit/4ffa3ed2940b122cf5191746edeb30e177ea9820) Build binaries with 1.21.1
-   \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 ([#&#8203;9127](https://github.com/containerd/containerd/pull/9127))
    -   [`5756f6064`](https://github.com/containerd/containerd/commit/5756f6064b89c4c403439b49353d5dd035ba8c4f) \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
-   \[release/1.7 backport] alias log package to github.com/containerd/log v0.1.0 ([#&#8203;9106](https://github.com/containerd/containerd/pull/9106))
    -   [`09633b539`](https://github.com/containerd/containerd/commit/09633b539fad441c730569050e66a87d713a14a9) deprecate logs package, but disable linter (for transitioning)
    -   [`cb201519f`](https://github.com/containerd/containerd/commit/cb201519f8757f4272d88f3a785a4cb56215095c) alias log package to github.com/containerd/log v0.1.0
    -   [`a5024e6dd`](https://github.com/containerd/containerd/commit/a5024e6dd9f797051a465516066b248294c434e1) vendor: github.com/stretchr/testify v1.8.4
    -   [`7bd976af3`](https://github.com/containerd/containerd/commit/7bd976af3fe068a79fec23d9fc05a69e26aa18c3) vendor: github.com/sirupsen/logrus v1.9.3
-   \[release/1.7] remotes/docker: Add MountedFrom and Exists push status ([#&#8203;9097](https://github.com/containerd/containerd/pull/9097))
    -   [`8cd2d33c2`](https://github.com/containerd/containerd/commit/8cd2d33c2aaa730717be1b75a4d2f3629e493c55) \[release/1.7] remotes/docker: Add MountedFrom and Exists push status
-   \[release/1.7] vendor: update github.com/containerd/nri@v0.4.0 ([#&#8203;9099](https://github.com/containerd/containerd/pull/9099))
    -   [`3ca015e55`](https://github.com/containerd/containerd/commit/3ca015e55672c128d9f021d14f49ef96c247cd5b) nri: update mock plugin handlers
    -   [`4cd208c1f`](https://github.com/containerd/containerd/commit/4cd208c1f2d80d863776c1947881d5283f3b25fc) vendor: update github.com/containerd/nri@v0.4.0

</p>
</details>

##### Changes from containerd/log
<details><summary>9 commits</summary>
<p>

-   Update golangci to 1.49 ([#&#8203;1](https://github.com/containerd/log/pull/1))
    -   [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49
    -   [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README
    -   [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details
    -   [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow
    -   [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module
    -   [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest
    -   [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README
    -   [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file

</p>
</details>

##### Changes from containerd/nri
<details><summary>35 commits</summary>
<p>

-   releases: update note about 0.4.0 ([#&#8203;50](https://github.com/containerd/nri/pull/50))
    -   [`5f13915`](https://github.com/containerd/nri/commit/5f139156d546cb68a8495c9c36cfc6a574ba3a55) releases: update note about 0.4.0
-   Add support for rlimits ([#&#8203;48](https://github.com/containerd/nri/pull/48))
    -   [`5ecea04`](https://github.com/containerd/nri/commit/5ecea042d15be1ba5e0b988a40a4c90fb2210a7f) ulimit-adjuster: add validation for hard limits
    -   [`db3de10`](https://github.com/containerd/nri/commit/db3de101ccaba370f9238188da0d8e05039efdee) test: exclude ulimit-adjuster from ginkgo
    -   [`f0deb59`](https://github.com/containerd/nri/commit/f0deb59b4fbf7bcc62597a1299f4544638daa81a) ulimit-adjuster: new sample plugin
    -   [`d2dd708`](https://github.com/containerd/nri/commit/d2dd708de134cfe0617821142557b3e55b0bdf64) Add support for rlimits
    -   [`efaf36e`](https://github.com/containerd/nri/commit/efaf36e49f30c4ca0bfb0bba2c412e87241674c1) api: add POSIXRlimit type
-   .github: add test build to CI workflow. ([#&#8203;47](https://github.com/containerd/nri/pull/47))
    -   [`3f092c2`](https://github.com/containerd/nri/commit/3f092c29cf62a77c9eadaa9d7ff9ac28ece3d180) .github: add test build to CI workflow.
-   stub: pass context to plugins, pass updated resources to UpdateContainers. ([#&#8203;40](https://github.com/containerd/nri/pull/40))
    -   [`01d5f14`](https://github.com/containerd/nri/commit/01d5f14d96708830f232b2744742fc14763816b1) Add a note about NRI API stability and release notes.
    -   [`ea9976d`](https://github.com/containerd/nri/commit/ea9976d8dae3a6e630da76a26dbef44b5c8a3de3) adaptation: add UpdateContainer tests.
    -   [`d042d24`](https://github.com/containerd/nri/commit/d042d24bc4a96fa5fcf1aa0d2195ff75833d7d4e) stub: fix plugin UpdateContainerInterface.
    -   [`f5d0f51`](https://github.com/containerd/nri/commit/f5d0f513608b2afc3fcc5e6bdf76b10b3004c14c) plugins: update plugins for stub changes.
    -   [`b4bd301`](https://github.com/containerd/nri/commit/b4bd301a1ead4d277af088e321c05e76102c8769) adaptation: update tests with stub changes.
    -   [`9d86150`](https://github.com/containerd/nri/commit/9d86150fce4318491481e354d0f34c6b76e8806e) stub: pass context to plugin event handlers.
-   Updated the OCI Hook Injector README to resovle broken links to the p… ([#&#8203;34](https://github.com/containerd/nri/pull/34))
    -   [`5eee915`](https://github.com/containerd/nri/commit/5eee9158f7fab6294bdbc5c76b2793f2dbe9faec) removed link
    -   [`c783fc7`](https://github.com/containerd/nri/commit/c783fc76a80b315253d407f1e74ff9263cf5ce21) Resolves broken podman links and adds details to help better guide people in testing.
-   Fix ParseEventMask to produce proper masks for 'pod' and 'container' shorthand event notations. ([#&#8203;39](https://github.com/containerd/nri/pull/39))
    -   [`da291a6`](https://github.com/containerd/nri/commit/da291a66180b6989a6dcc6bcffcc3257c185f8f8) Fix ParseEventMask to produce proper masks
-   fix the `NRI_PLUGIN_NAME` env value when launching a pre-installed plugin ([#&#8203;42](https://github.com/containerd/nri/pull/42))
    -   [`4a4cea6`](https://github.com/containerd/nri/commit/4a4cea6142a5a34301b796a36355e3b38bb98522) fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin
    -   [`a67478e`](https://github.com/containerd/nri/commit/a67478ed7c0b38454f3ef4e86f36d870c365c0d5) stub: update setIdentify to ensureIdentify
-   update module name of the logger plugin ([#&#8203;41](https://github.com/containerd/nri/pull/41))
    -   [`841f5ed`](https://github.com/containerd/nri/commit/841f5ed96067b8d737e39e9df16c55231c350d1d) update module name of the logger plugin
-   Add gitignore for build artifacts ([#&#8203;32](https://github.com/containerd/nri/pull/32))
    -   [`8d9c64d`](https://github.com/containerd/nri/commit/8d9c64def7f2ba89a065990e89c2bf39f8046bac) Add gitignore for build artifacts
-   Makefile: fix 'install-\*' targets. ([#&#8203;38](https://github.com/containerd/nri/pull/38))
    -   [`c03d1be`](https://github.com/containerd/nri/commit/c03d1bee1efca43e4b59395622510844b36cd26c) Makefile: fix 'install-\*' targets.
-   docs: add a chapter about security considerations. ([#&#8203;36](https://github.com/containerd/nri/pull/36))
    -   [`ab28e71`](https://github.com/containerd/nri/commit/ab28e7136bbf3c41c7344b0430087c1aed47b05a) docs: add a chapter about security considerations.
-   api: initialize OCI LinuxMemory resources to empty. ([#&#8203;37](https://github.com/containerd/nri/pull/37))
    -   [`2862d98`](https://github.com/containerd/nri/commit/2862d98443ccdb1162963ee979639fd973ddc37b) api: initialize OCI LinuxMemory resources to empty.

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**  v0.11.0 -> v0.11.1
-   **github.com/containerd/log**     v0.1.0 ***new***
-   **github.com/containerd/nri**     v0.3.0 -> v0.4.0
-   **github.com/sirupsen/logrus**    v1.9.0 -> v1.9.3
-   **github.com/stretchr/testify**   v1.8.2 -> v1.8.4
-   **golang.org/x/crypto**           v0.1.0 -> v0.11.0
-   **golang.org/x/net**              v0.8.0 -> v0.13.0
-   **golang.org/x/sys**              v0.7.0 -> v0.10.0
-   **golang.org/x/term**             v0.6.0 -> v0.10.0
-   **golang.org/x/text**             v0.8.0 -> v0.11.0

Previous release can be found at [v1.7.6](https://github.com/containerd/containerd/releases/tag/v1.7.6)

##### Which file should I download?

-   `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
-   `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
-   `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
-   `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)

In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.

See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

### [`v1.7.6`](https://github.com/containerd/containerd/releases/tag/v1.7.6): containerd 1.7.6

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.5...v1.7.6)

Welcome to the v1.7.6 release of containerd!

The sixth patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **Fix log package for clients overwriting the global logger** ([#&#8203;9032](https://github.com/containerd/containerd/pull/9032))
-   **Fix blockfile snapshotter copy on Darwin** ([#&#8203;9047](https://github.com/containerd/containerd/pull/9047))
-   **Add support for Linux usernames on non-Linux platforms** ([#&#8203;9015](https://github.com/containerd/containerd/pull/9015))
-   **Update Windows platform matcher to invoke stable ABI compability function** ([#&#8203;9069](https://github.com/containerd/containerd/pull/9069))
-   **Update Golang to 1.20.8** ([#&#8203;9074](https://github.com/containerd/containerd/pull/9074))
-   **Update push to inherit distribution sources from parent** ([#&#8203;9084](https://github.com/containerd/containerd/pull/9084))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Kirtana Ashok
-   Phil Estes
-   Akihiro Suda
-   Danny Canter
-   Sebastiaan van Stijn
-   Akhil Mohan
-   Maksym Pavlenko
-   Samuel Karp
-   Wei Fu

##### Changes

<details><summary>20 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for 1.7.6 ([#&#8203;9085](https://github.com/containerd/containerd/pull/9085))
    -   [`3e09c65b2`](https://github.com/containerd/containerd/commit/3e09c65b21bdda743f5f5de9fb392a25f6a342be) Prepare release notes for v1.7.6
-   \[release/1.7] Invoke Stable ABI compatibility function in windows platform matcher ([#&#8203;9069](https://github.com/containerd/containerd/pull/9069))
    -   [`c7a35ccdc`](https://github.com/containerd/containerd/commit/c7a35ccdcc674e42c2364f062890b1e40507f543) Fix transfer service dependencies:
    -   [`38d4e506d`](https://github.com/containerd/containerd/commit/38d4e506dd261b48bffbdd04e775d2b687290e2f) Invoke Stable ABI compatibility function in windows platform matcher
-   \[release/1.7] push: inherit distribution sources from parent ([#&#8203;9084](https://github.com/containerd/containerd/pull/9084))
    -   [`5ebf05d97`](https://github.com/containerd/containerd/commit/5ebf05d97e2ef1b09d427118911a89c55059b0fe) push: inherit distribution sources from parent
    -   [`d206896dd`](https://github.com/containerd/containerd/commit/d206896ddd965ab72605aca4337293c056fdd21b) content: add InfoProvider interface
-   \[release/1.7] update to go1.20.8 ([#&#8203;9074](https://github.com/containerd/containerd/pull/9074))
    -   [`423693d7b`](https://github.com/containerd/containerd/commit/423693d7b481e4bd8adb7b0ed76cec0b2cb96724) \[release/1.7] update to go1.20.8
-   \[release/1.7] Update hcsshim tag to v0.11.0 ([#&#8203;9063](https://github.com/containerd/containerd/pull/9063))
    -   [`ddffc7c9a`](https://github.com/containerd/containerd/commit/ddffc7c9a1e5b6d73953a7f5f8a04170dc45c62a) Update hcsshim tag to v0.11.0
-   \[release/1.7] CRI: Support Linux usernames for !linux platforms ([#&#8203;9015](https://github.com/containerd/containerd/pull/9015))
    -   [`b449440a4`](https://github.com/containerd/containerd/commit/b449440a40896d5c8f78460354eb2f5506432180) CRI: Support Linux usernames for !linux platforms
-   \[release/1.7] Blockfile: Enlighten blockfile copy on Darwin ([#&#8203;9047](https://github.com/containerd/containerd/pull/9047))
    -   [`ed4bac11e`](https://github.com/containerd/containerd/commit/ed4bac11e5a60aaa3283f998313522d19d54c7f8) Blockfile: Enlighten blockfile copy on Darwin
-   \[release/1.7 backport] Revert "log: define G() as a function instead of a variable" ([#&#8203;9032](https://github.com/containerd/containerd/pull/9032))
    -   [`4d1cfbbdd`](https://github.com/containerd/containerd/commit/4d1cfbbddb57ec10a3e55f71ae5a590091b6e3ab) Revert "log: define G() as a function instead of a variable"
-   \[release/1.7 backport] make repositories of install dependencies configurable ([#&#8203;9025](https://github.com/containerd/containerd/pull/9025))
    -   [`a34e93241`](https://github.com/containerd/containerd/commit/a34e93241254112f8bab49a27f5aeee1f2317d9f) make repositories of install dependencies configurable

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**  v0.10.0-rc.8 -> v0.11.0

Previous release can be found at [v1.7.5](https://github.com/containerd/containerd/releases/tag/v1.7.5)

### [`v1.7.5`](https://github.com/containerd/containerd/releases/tag/v1.7.5): containerd 1.7.5

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.4...v1.7.5)

Welcome to the v1.7.5 release of containerd!

The fifth patch release for containerd 1.7 fixes a versioning issue from
the previous release and includes some internal logging API changes.

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Sebastiaan van Stijn
-   Derek McGowan
-   Akihiro Suda
-   Antonio Huete Jimenez
-   Phil Estes
-   Samuel Karp

##### Changes

<details><summary>18 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for 1.7.5 ([#&#8203;9010](https://github.com/containerd/containerd/pull/9010))
    -   [`93b23eb10`](https://github.com/containerd/containerd/commit/93b23eb106f416179ea2fa9c0db621a9fa19c8e9) Prepare release notes for v1.7.5
    -   [`fb1292c8d`](https://github.com/containerd/containerd/commit/fb1292c8de8b4ca8b273f9c500ef5da0f541c4fa) Bump version to v1.7.4
-   \[release/1.7 backport] go.mod: github.com/containerd/continuity v0.4.2 ([#&#8203;9012](https://github.com/containerd/containerd/pull/9012))
    -   [`503ab21bf`](https://github.com/containerd/containerd/commit/503ab21bfc4c5be65cba0b6b58aa2968a44bbe65) go.mod: github.com/containerd/continuity v0.4.2
-   \[release/1.7 backport] log: cleanups and improvements to decouple more from logrus ([#&#8203;9001](https://github.com/containerd/containerd/pull/9001))
    -   [`2a9ae3c51`](https://github.com/containerd/containerd/commit/2a9ae3c51132080940d40343175e0d3eb2a111fc) log: swap logrus functions with their equivalent on default logger
    -   [`01445bb73`](https://github.com/containerd/containerd/commit/01445bb7386b98271b383b76e3d9007dabee03e8) log: add package documentation and summary of package's purpose
    -   [`932795f45`](https://github.com/containerd/containerd/commit/932795f4526ad4dd5d76e2d9b4c1daeaeab19172) log: make Fields type a generic map\[string]any
    -   [`707ca94d8`](https://github.com/containerd/containerd/commit/707ca94d890dbea1be767312483522a98f6c5969) log: add log.Entry type
    -   [`0a79e67e4`](https://github.com/containerd/containerd/commit/0a79e67e4f7bff1128c81ee14a8b2a74a8c55c51) log: define OutputFormat type
    -   [`dbbe28b7d`](https://github.com/containerd/containerd/commit/dbbe28b7d1cc6137ed9fff1bcd8ed5e3ec442059) log: define G() as a function instead of a variable
    -   [`93b6cb784`](https://github.com/containerd/containerd/commit/93b6cb78456b642a5470b24e9ec1fca17ec12e49) log: add all log-levels that are accepted
    -   [`e8e086e02`](https://github.com/containerd/containerd/commit/e8e086e02bbcb078297302bc77a126647606c898) log: group "enum" consts and touch-up docs
    -   [`7aa4f8fdc`](https://github.com/containerd/containerd/commit/7aa4f8fdccea58b2816fe7fe818653100cadfb98) log: WithLogger: remove redundant intermediate var
    -   [`bfdce4ce4`](https://github.com/containerd/containerd/commit/bfdce4ce4bc922ab4990a71f4a5f31a8e2c0224d) log: SetFormat: include returns in switch
    -   [`6621e0888`](https://github.com/containerd/containerd/commit/6621e08887d94b90d3c9b3756acff02573cdc147) log: remove testify dependency
    -   [`df76aaede`](https://github.com/containerd/containerd/commit/df76aaede4b741e9436ced76dea71946d8f29684) removes/docker: remove unnecessary conversion (unconvert)

</p>
</details>

##### Changes from containerd/continuity
<details><summary>2 commits</summary>
<p>

-   Add initial DragonFly BSD support ([#&#8203;230](https://github.com/containerd/continuity/pull/230))
    -   [`bcc6e25`](https://github.com/containerd/continuity/commit/bcc6e254708e0ace144a3d590a631db61da0a659) dragonfly: Initial porting work

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/continuity**  [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381) -> v0.4.2

Previous release can be found at [v1.7.4](https://github.com/containerd/containerd/releases/tag/v1.7.4)

### [`v1.7.4`](https://github.com/containerd/containerd/releases/tag/v1.7.4): containerd 1.7.4

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.4)

Welcome to the v1.7.4 release of containerd!

The fourth patch release for containerd 1.7 contains remote differ plugin support,
a new block file based snapshotter, and various fixes and updates.

##### Notable Updates

-   **Add blockfile snapshotter** ([#&#8203;8986](https://github.com/containerd/containerd/pull/8986))
-   **Add remote/proxy differ** ([#&#8203;8985](https://github.com/containerd/containerd/pull/8985))
-   **Update runc binary to v1.1.9** ([#&#8203;8965](https://github.com/containerd/containerd/pull/8965))
-   **Cri: Don't use rel path for image volumes** ([#&#8203;8926](https://github.com/containerd/containerd/pull/8926))
-   **Allow attaching to any combination of stdin/out/err** ([#&#8203;8910](https://github.com/containerd/containerd/pull/8910))
-   **Fix ro mount option being passed** ([#&#8203;8887](https://github.com/containerd/containerd/pull/8887))
-   **Fix leaked shim caused by high IO pressure** ([#&#8203;9003](https://github.com/containerd/containerd/pull/9003))
-   **Add configurable mount options to overlay snapshotter** ([#&#8203;9005](https://github.com/containerd/containerd/pull/9005))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Wei Fu
-   Derek McGowan
-   Akihiro Suda
-   Kazuyoshi Kato
-   Cardy.Tang
-   Phil Estes
-   Ben Foster
-   Danny Canter
-   Hsing-Yu (David) Chen
-   James Jenkins
-   James Sturtevant
-   Maksym Pavlenko
-   Rodrigo Campos
-   Sebastiaan van Stijn
-   rongfu.leng

##### Changes

<details><summary>43 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.4 ([#&#8203;9000](https://github.com/containerd/containerd/pull/9000))
    -   [`7a0cae3ca`](https://github.com/containerd/containerd/commit/7a0cae3ca1acf9a5ab4df4f77ee1b7cc6c3306ce) \[release/1.7] Prepare release notes for v1.7.4
-   \[releases/1.7] \*: fix leaked shim caused by high IO pressure ([#&#8203;9003](https://github.com/containerd/containerd/pull/9003))
    -   [`537d7526e`](https://github.com/containerd/containerd/commit/537d7526e44bcefe509614abc04930345fbdb941) integration: issue7496 case should work for runc.v2 only
    -   [`5add172be`](https://github.com/containerd/containerd/commit/5add172be5d27d1f98b430a6775da0256afc1e82) Vagrantfile: add strace tool
    -   [`207e28f36`](https://github.com/containerd/containerd/commit/207e28f36dd9daa7ef412c0c2b7b32af3356a2da) integration: add ShouldRetryShutdown case based on [#&#8203;7496](https://github.com/containerd/containerd/issues/7496)
    -   [`b4f480fb3`](https://github.com/containerd/containerd/commit/b4f480fb30f71ec15055cab0421aa16258ac4b58) pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
    -   [`88ff575c5`](https://github.com/containerd/containerd/commit/88ff575c5cecf81ea7ef78079941521123b451de) pkg/cri/server: fix leaked shim issue
    -   [`9f61dfb7c`](https://github.com/containerd/containerd/commit/9f61dfb7c50dea7bdf4326cf7b04a2ec088b81a5) integration: add case to reproduce [#&#8203;7496](https://github.com/containerd/containerd/issues/7496)
-   \[release/1.7] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#&#8203;9005](https://github.com/containerd/containerd/pull/9005))
    -   [`0f4885c16`](https://github.com/containerd/containerd/commit/0f4885c1660d2b1a855e79751daf5367fc679079) Add configurable mount options to overlay
    -   [`8804a27d7`](https://github.com/containerd/containerd/commit/8804a27d72275497e4a590b92832d4f1076b43dc) feat: make overlay sync removal configurable
-   \[release/1.7] Remove temporary replace ([#&#8203;8997](https://github.com/containerd/containerd/pull/8997))
    -   [`1c2dd5198`](https://github.com/containerd/containerd/commit/1c2dd5198e5d3d6d111d37a68ad67ae37adf6101) Remove temporary replace
-   \[release/1.7] Add blockfile snapshotter ([#&#8203;8986](https://github.com/containerd/containerd/pull/8986))
    -   [`2bf6bd143`](https://github.com/containerd/containerd/commit/2bf6bd1431512c59f91318e817ee83c4adfcd282) vendor: update github.com/containerd/continuity
    -   [`30a163086`](https://github.com/containerd/containerd/commit/30a163086959b89459b8193884f669561bb56f9e) snapshots|pkg: umount without DETACH and nosync after umount
    -   [`c9eebe3d1`](https://github.com/containerd/containerd/commit/c9eebe3d1151ba3e523c2f0473e61132edf95a72) mount: support direct-io for loopback device
    -   [`1c2977db0`](https://github.com/containerd/containerd/commit/1c2977db01efdd4a5aaff79d72d7e21b19d0f59a) Modify loopback size
    -   [`cf9c78d2d`](https://github.com/containerd/containerd/commit/cf9c78d2d9eb7c3d66d1a94768d63b4f8482c4b2) snapshots/blockfile: fix lint issue
    -   [`b823b4f54`](https://github.com/containerd/containerd/commit/b823b4f546cec4a9d92f9a8ed5b606cbffa287f9) snapshots/blockfile: deflaky the testsuite
    -   [`6daeceb11`](https://github.com/containerd/containerd/commit/6daeceb1168303548ddc0d1af420813ad8475ceb) snapshots/blockfile: use passed in dst in scratchGenerator
    -   [`99b61aee3`](https://github.com/containerd/containerd/commit/99b61aee341fa89370524e49b42212cea79d9fbc) snapshots/blockfile: use loop if options is empty
    -   [`fd39769ac`](https://github.com/containerd/containerd/commit/fd39769ac70a382a0b4459080cb2f10c40842182) Add mount options to blockfile snapshotter
    -   [`8d732c6c2`](https://github.com/containerd/containerd/commit/8d732c6c22d6e723f65be957427b16d48e1d488d) Add sync before unmount on snapshotter layer test
    -   [`8472a407e`](https://github.com/containerd/containerd/commit/8472a407e0eb91f4e10d9e446bdfd439d11cfd55) Add blockfile snapshotter to snapshotters doc
    -   [`6740d77ca`](https://github.com/containerd/containerd/commit/6740d77cae44522820e7575eb9d105e6c5b8d56b) Add blockfile as a builtin
    -   [`07cc24b32`](https://github.com/containerd/containerd/commit/07cc24b32a319fb72622453f40ee8c338062df95) Add blockfile snapshotter
-   \[release/1.7] Backport remote/proxy differ ([#&#8203;8985](https://github.com/containerd/containerd/pull/8985))
    -   [`32e3b76ee`](https://github.com/containerd/containerd/commit/32e3b76ee70fea42234b95ef01f78a13ac7c5c1d) Add diffservice to contrib
    -   [`661e505c8`](https://github.com/containerd/containerd/commit/661e505c8239e97710bac220edf735f06027dbda) Add proxy differ
-   \[release/1.7 backport] update runc binary to v1.1.9 ([#&#8203;8965](https://github.com/containerd/containerd/pull/8965))
    -   [`af79c07fd`](https://github.com/containerd/containerd/commit/af79c07fd69cd20b97b37a903ee6c6957e4628ec) update runc binary to v1.1.9
-   \[release/1.7] Port fix for Linux Integration test failure ([#&#8203;8950](https://github.com/containerd/containerd/pull/8950))
    -   [`c0b1c8f74`](https://github.com/containerd/containerd/commit/c0b1c8f74aa5616c5e27845d18d4dca5ab30f9fd) fix ci Linux Integration test fail
-   \[release/1.7] cri: Don't use rel path for image volumes ([#&#8203;8926](https://github.com/containerd/containerd/pull/8926))
    -   [`4e97a115f`](https://github.com/containerd/containerd/commit/4e97a115f702bd7de43ee17442a96f3537007a07) cri: Don't use rel path for image volumes
-   \[release/1.7] fix: allow attaching to any combination of stdin/stdout/stderr ([#&#8203;8910](https://github.com/containerd/containerd/pull/8910))
    -   [`34a5d0330`](https://github.com/containerd/containerd/commit/34a5d033007eaae0530a89470407fbe920eec033) fix: allow attaching to any combination of stdin/stdout/stderr
-   \[release/1.7 backport] update to go1.20.7, go1.19.12 ([#&#8203;8906](https://github.com/containerd/containerd/pull/8906))
    -   [`c5e7b84c0`](https://github.com/containerd/containerd/commit/c5e7b84c08b507f93b2df6d393eede3ff75f4e2f) update to go1.20.7, go1.19.12
-   \[release/1.7] cherry-pick: Fix ro mount option being passed ([#&#8203;8887](https://github.com/containerd/containerd/pull/8887))
    -   [`2eaeb3205`](https://github.com/containerd/containerd/commit/2eaeb3205a1bd61b385a259d43f29ccc09993e18) Fix ro mount option being passed

</p>
</details>

##### Changes from containerd/continuity
<details><summary>4 commits</summary>
<p>

-   fs: use io.Copy because go supports CopyFileRange ([#&#8203;227](https://github.com/containerd/continuity/pull/227))
    -   [`4b8bec5`](https://github.com/containerd/continuity/commit/4b8bec5682b6d50a6fba026303fb42a6369851a6) fs: use io.Copy because go supports CopyFileRange
-   fs/fstest: CreateFile should use sync ([#&#8203;228](https://github.com/containerd/continuity/pull/228))
    -   [`3fa7d7a`](https://github.com/containerd/continuity/commit/3fa7d7a5ec66805f9f099001d3fe83f11fb80c0c) fs/fstest: CreateFile should use sync

</p>
</details>

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**    [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf) -> [`ced1acd`](https://github.com/containerd/containerd/commit/ced1acdcaa24)
-   **github.com/AdamKorcz/go-118-fuzz-build**  [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) -> [`8075edf`](https://github.com/containerd/containerd/commit/8075edf89bb0)
-   **github.com/containerd/continuity**        v0.4.1 -> [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381)

Previous release can be found at [v1.7.3](https://github.com/containerd/containerd/releases/tag/v1.7.3)

### [`v1.7.3`](https://github.com/containerd/containerd/releases/tag/v1.7.3): containerd 1.7.3

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.2...v1.7.3)

Welcome to the v1.7.3 release of containerd!

The third patch release for containerd 1.7 contains various fixes and updates.

##### Notable Updates

-   **RunC: Update runc binary to v1.1.8** ([#&#8203;8843](https://github.com/containerd/containerd/pull/8843))
-   **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#&#8203;8824](https://github.com/containerd/containerd/pull/8824))
-   **CRI: write generated CNI config atomically** ([#&#8203;8825](https://github.com/containerd/containerd/pull/8825))
-   **Port-Forward: Correctly handle known errors** ([#&#8203;8806](https://github.com/containerd/containerd/pull/8806))
-   **Resolve docker.NewResolver race condition** ([#&#8203;8799](https://github.com/containerd/containerd/pull/8799))
-   **Fix net.ipv4.ping_group_range with userns** ([#&#8203;8786](https://github.com/containerd/containerd/pull/8786))
-   **Runtime/V2/RunC: handle early exits w/o big locks** ([#&#8203;8712](https://github.com/containerd/containerd/pull/8712))
-   **SecComp: always allow name_to_handle_at** ([#&#8203;8753](https://github.com/containerd/containerd/pull/8753))
-   **CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running** ([#&#8203;8654](https://github.com/containerd/containerd/pull/8654))
-   **Task: don't `close()` io before `cancel()`** ([#&#8203;8658](https://github.com/containerd/containerd/pull/8658))
-   **Remove CNI conf_template deprecation** ([#&#8203;8638](https://github.com/containerd/containerd/pull/8638))
-   **Fix issue for HPC pod metrics** ([#&#8203;8634](https://github.com/containerd/containerd/pull/8634))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Phil Estes
-   Sebastiaan van Stijn
-   Wei Fu
-   Derek McGowan
-   Kazuyoshi Kato
-   Austin Vazquez
-   Samuel Karp
-   Shingo Omura
-   Jin Dong
-   Maksym Pavlenko
-   Aditi Sharma
-   Danny Canter
-   James Sturtevant
-   Laura Brehm
-   Rodrigo Campos
-   Akhil Mohan
-   Andrey Epifanov
-   Bjorn Neergaard
-   Cory Snider
-   Madhav Jivrajani
-   Mahamed Ali
-   Priyanka Saggu
-   Qasim Sarfraz
-   wangxiang
-   zounengren

##### Changes

<details><summary>63 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.3 ([#&#8203;8871](https://github.com/containerd/containerd/pull/8871))
    -   [`4cb2f1515`](https://github.com/containerd/containerd/commit/4cb2f1515a39a8a6b704b74e58b96f8a1ef9840c) \[release/1.7] Add release notes for v1.7.3
-   \[release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory ([#&#8203;8869](https://github.com/containerd/containerd/pull/8869))
    -   [`b461ecacf`](https://github.com/containerd/containerd/commit/b461ecacfa155befd259877e04b9835bdd04e0d9) cri: memory.memsw.limit_in_bytes: no such file or directory
-   \[release/1.7] migrate to community owned bucket for node e2e tests ([#&#8203;8875](https://github.com/containerd/containerd/pull/8875))
    -   [`14328ae03`](https://github.com/containerd/containerd/commit/14328ae03b51ade0512496e3a4b0c2bf33ca5ffd) migrate to community owned bucket
-   \[release/1.7 backport] update runc binary to v1.1.8 ([#&#8203;8843](https://github.com/containerd/containerd/pull/8843))
    -   [`b985f7ef1`](https://github.com/containerd/containerd/commit/b985f7ef15b6dbb6d5ea302584dcfe491b99d70c) update runc binary to v1.1.8
-   \[release/1.7 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#&#8203;8824](https://github.com/containerd/containerd/pull/8824))
    -   [`083f57160`](https://github.com/containerd/containerd/commit/083f571609a83be94785b77a822aa7c332eeabfd) capture desc variable in range variable just in case that it run in parallel mode
    -   [`a9440ce6b`](https://github.com/containerd/containerd/commit/a9440ce6b5a150be998c70549984b508231a6dbe) Use t.TempDir instead of os.MkdirTemp
    -   [`eea3440d8`](https://github.com/containerd/containerd/commit/eea3440d899f6ce74fca5257dcc53e6cecc4fce4) use strings.Cut instead of strings.Split for parsing imageConfig.User
    -   [`eace67180`](https://github.com/containerd/containerd/commit/eace671808e39d351c54e917fed86a58b92fe43b) fix userstr for dditionalGids on Linux
-   \[release/1.7 backport] cri: write generated CNI config atomically ([#&#8203;8825](https://github.com/containerd/containerd/pull/8825))
    -   [`7353c0286`](https://github.com/containerd/containerd/commit/7353c02869507eb28e571125db05c7597bf92f27) ctr: update WritePidFile to use atomicfile
    -   [`ae7021300`](https://github.com/containerd/containerd/commit/ae70213003a84301ff7dc171569e8ab3adffca35) shim: WritePidFile & WriteAddress use atomicfile
    -   [`186eb64b7`](https://github.com/containerd/containerd/commit/186eb64b7c7a0fbef9c1b11837056ecb2e130d38) cri: write generated CNI config atomically on Unix
    -   [`64c3dcd8e`](https://github.com/containerd/containerd/commit/64c3dcd8e25ae02f6803d4131cb3e40c0c2849c7) atomicfile: new package for atomic file writes
-   \[release/1.7 backport] Move logrus setup code to log package ([#&#8203;8831](https://github.com/containerd/containerd/pull/8831))
    -   [`f7a20e17c`](https://github.com/containerd/containerd/commit/f7a20e17c3e96324cdf83388be289c4c2db1ba55) Move logrus setup code to log package
-   \[release/1.7 backport] Cirrus CI: configure apt-get to wait for locks ([#&#8203;8814](https://github.com/containerd/containerd/pull/8814))
    -   [`60a6db9c2`](https://github.com/containerd/containerd/commit/60a6db9c2627018aef6484d6ca5898a09aa9888e) Cirrus CI: configure apt-get to wait for locks
-   \[release/1.7 backport] Update Go to 1.20.6,1.19.11 ([#&#8203;8815](https://github.com/containerd/containerd/pull/8815))
    -   [`973778193`](https://github.com/containerd/containerd/commit/973778193b54a73b6975388efbdfcbbd33ca3212) Update Go to 1.20.6,1.19.11
-   \[release/1.7 backport] update go to go1.20.5, go1.19.10 ([#&#8203;8716](https://github.com/containerd/containerd/pull/8716))
    -   [`403033e52`](https://github.com/containerd/containerd/commit/403033e52782716aa444d8d43a5c7e25efdfd4e5) update go to go1.20.5, go1.19.10
-   \[release/1.7 backport] bugfix(port-forward): Correctly handle known errors ([#&#8203;8806](https://github.com/containerd/containerd/pull/8806))
    -   [`6b6b0c828`](https://github.com/containerd/containerd/commit/6b6b0c828051ecafc0653e271cda8cab2cbd59bd) bugfix(port-forward): Correctly handle known errors
-   \[release/1.7] Resolve docker.NewResolver race condition ([#&#8203;8799](https://github.com/containerd/containerd/pull/8799))
    -   [`898eca21e`](https://github.com/containerd/containerd/commit/898eca21e3c7d12351c26891b1813dd51a423e82) Change http.Header copy to builtin Clone
    -   [`fa2efc406`](https://github.com/containerd/containerd/commit/fa2efc406f09950b466ff3f5d00a5b0a924ef738) Resolve docker.NewResolver race condition
-   \[release/1.7] Fix net.ipv4.ping_group_range with userns ([#&#8203;8786](https://github.com/containerd/containerd/pull/8786))
    -   [`241514815`](https://github.com/containerd/containerd/commit/241514815d278865199a701f23b83a20efe169be) pkg/cri/server: Test net.ipv4.ping_group_range works with userns
    -   [`801e8c806`](https://github.com/containerd/containerd/commit/801e8c8069c4613de305c756c0f497f271ef3648) pkg/cri/server: Fix net.ipv4.ping_group_range with userns
-   \[release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 ([#&#8203;8782](https://github.com/containerd/containerd/pull/8782))
    -   [`d5639a5a8`](https://github.com/containerd/containerd/commit/d5639a5a867c45a0c6c5b4f2e65e7ebda0aa02ff) vendor: github.com/containerd/zfs v1.1.0
-   \[release/1.7 backport] ci: remove libseccomp-dev installation for nightly ([#&#8203;8772](https://github.com/containerd/containerd/pull/8772))
    -   [`15d65709e`](https://github.com/containerd/containerd/commit/15d65709ee8f239de6b908026a51481eaeab6066) ci: remove libseccomp-dev installation for nightly
-   \[release/1.7] go.mod: Update cgroups to 3.0.2 ([#&#8203;8769](https://github.com/containerd/containerd/pull/8769))
    -   [`a08ae718c`](https://github.com/containerd/containerd/commit/a08ae718c47ed2069ab077fc99b4951776fc41ff) \[release/1.7] go.mod: Update cgroups to 3.0.2
-   \[release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks ([#&#8203;8712](https://github.com/containerd/containerd/pull/8712))
    -   [`18c6503d9`](https://github.com/containerd/containerd/commit/18c6503d98f4de37ebbd39443bde958d8b6dc367) runtime/v2/runc: handle early exits w/o big locks
-   \[release/1.7 backport] integration/client: add timeout to `TestShimOOMScore` ([#&#8203;8750](https://github.com/containerd/containerd/pull/8750))
    -   [`3bf3996d9`](https://github.com/containerd/containerd/commit/3bf3996d921c7466ad194ef5ac26bbddb3a89a33) integration/client: add timeout to `TestShimOOMScore`
-   \[release/1.7 backport] Update ginkgo to match cri-tools' version ([#&#8203;8760](https://github.com/containerd/containerd/pull/8760))
    -   [`c2c54af9d`](https://github.com/containerd/containerd/commit/c2c54af9ddff6f26cc5ebefb2634ed5ca4cf15c3) Update ginkgo to match cri-tools' version
-   \[release/1.7 backport] seccomp: always allow name_to_handle_at ([#&#8203;8753](https://github.com/containerd/containerd/pull/8753))
    -   [`6281d46df`](https://github.com/containerd/containerd/commit/6281d46df9cc1df891ef1ca68b3e1a2b11dd96cd) seccomp: always allow name_to_handle_at
-   \[release/1.7] Pinned image support ([#&#8203;8718](https://github.com/containerd/containerd/pull/8718))
    -   [`699d6701a`](https://github.com/containerd/containerd/commit/699d6701ae17bd3c12a7f86f5d9470cedf210169) Pinned image support
-   \[release/1.7] cherry-pick: No more nondistributable layers in MS registry ([#&#8203;8690](https://github.com/containerd/containerd/pull/8690))
    -   [`dafbeb5b1`](https://github.com/containerd/containerd/commit/dafbeb5b1ffdaa6c227fddeacf2b39816e61660f) No more nondistributable layers in MS registry
-   \[release/1.7] \[cri] Windows Pod Stats: Add a check to skip stats for containers that are not running ([#&#8203;8654](https://github.com/containerd/containerd/pull/8654))
    -   [`58b6b99cd`](https://github.com/containerd/containerd/commit/58b6b99cd6fde4f173df25c09b20682e29acebf5) Add a check to skip stats for containers that are not running
-   \[release/1.7 backport] task: don't `close()` io before `cancel()` ([#&#8203;8658](https://github.com/containerd/containerd/pull/8658))
    -   [`e5b2a0131`](https://github.com/containerd/containerd/commit/e5b2a0131ba26b4366957bea07c67c171a11f52a) task: don't `close()` io before `cancel()`
-   \[release/1.7 backport] move to CRI-TOOLS v1.27.0 ([#&#8203;8656](https://github.com/containerd/containerd/pull/8656))
    -   [`a6a15afe3`](https://github.com/containerd/containerd/commit/a6a15afe3e9dd2de89ddf0c1bdde73b42ae9720d) move to CRI-TOOLS v1.27.0
-   \[release/1.7] Remove cni conf_template deprecation ([#&#8203;8638](https://github.com/containerd/containerd/pull/8638))
    -   [`0b2b96479`](https://github.com/containerd/containerd/commit/0b2b9647992dc4238e2a7d98c721dacb6cf753bf) RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
    -   [`a24267b28`](https://github.com/containerd/containerd/commit/a24267b28973821c3056b43270362bec5b8471ec) Remove cni conf_template deprecation
-   \[release/1.7] Fix issue for HPC pod metrics ([#&#8203;8634](https://github.com/containerd/containerd/pull/8634))
    -   [`89415fe36`](https://github.com/containerd/containerd/commit/89415fe36162576fb88b0fd7c117238834f2c967) Fix issue for HPC pod metrics

</p>
</details>

##### Changes from containerd/zfs
<details><summary>49 commits</summary>
<p>

-   gofumpt and update status badges ([#&#8203;75](https://github.com/containerd/zfs/pull/75))
    -   [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir()
    -   [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges
    -   [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code
-   go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#&#8203;73](https://github.com/containerd/zfs/pull/73))
    -   [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
-   gha: fix golangci-lint, and upgrade to v1.52.2 ([#&#8203;74](https://github.com/containerd/zfs/pull/74))
    -   [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin
    -   [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2
-   Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#&#8203;72](https://github.com/containerd/zfs/pull/72))
    -   [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
-   Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#&#8203;69](https://github.com/containerd/zfs/pull/69))
    -   [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
-   Add CodeQL analysis workflow ([#&#8203;67](https://github.com/containerd/zfs/pull/67))
    -   [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow
-   Update GitHub actions CI workflow ([#&#8203;66](https://github.com/containerd/zfs/pull/66))
    -   [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow
-   Upgrade compiler to Go 1.19 and update dependencies ([#&#8203;68](https://github.com/containerd/zfs/pull/68))
    -   [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies
    -   [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19
-   Remove references to io/ioutil package ([#&#8203;65](https://github.com/containerd/zfs/pull/65))
    -   [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package
-   Update go.mod and move to supported Go version ([#&#8203;62](https://github.com/containerd/zfs/pull/62))
    -   [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version
    -   [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest
-   go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#&#8203;59](https://github.com/containerd/zfs/pull/59))
    -   [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0
-   go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#&#8203;58](https://github.com/containerd/zfs/pull/58))
    -   [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
-   Update vendoring to containerd 1.6.x ([#&#8203;57](https://github.com/containerd/zfs/pull/57))
    -   [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x
-   Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#&#8203;55](https://github.com/containerd/zfs/pull/55))
    -   [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
-   Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#&#8203;54](https://github.com/containerd/zfs/pull/54))
    -   [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
-   [follow-up-#&#8203;52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#&#8203;53](https://github.com/containerd/zfs/pull/53))
    -   [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#&#8203;52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf
-   replace pkg/errors ([#&#8203;52](https://github.com/containerd/zfs/pull/52))
    -   [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors
-   Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#&#8203;51](https://github.com/containerd/zfs/pull/51))
    -   [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
-   Bump containerd to 1.5.2 ([#&#8203;50](https://github.com/containerd/zfs/pull/50))
    -   [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2
-   Rename branches from master to main ([#&#8203;49](https://github.com/containerd/zfs/pull/49))
    -   [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main
-   sync up with containerd 1.5 GA  ([#&#8203;47](https://github.com/containerd/zfs/pull/47))
    -   [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga
-   README.md: fix CI badge ([#&#8203;46](https://github.com/containerd/zfs/pull/46))
    -   [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/cgroups/v3**  v3.0.1 -> v3.0.2
-   **github.com/containerd/zfs**         v1.0.0 -> v1.1.0
-   **github.com/mistifyio/go-zfs/v3**    v3.0.1 ***new***

Previous release can be found at [v1.7.2](https://github.com/containerd/containerd/releases/tag/v1.7.2)

### [`v1.7.2`](https://github.com/containerd/containerd/releases/tag/v1.7.2): containerd 1.7.2

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.1...v1.7.2)

Welcome to the v1.7.2 release of containerd!

The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode,
Windows snapshot mounting support, and CRI and container IO bug fixes.

##### CRI/Sandbox Updates

-   **Publish sandbox events** ([#&#8203;8613](https://github.com/containerd/containerd/pull/8613))
-   **Make stats respect sandbox's platform** ([#&#8203;8604](https://github.com/containerd/containerd/pull/8604))

##### Other Notable Updates

-   **Mount snapshots on Windows** ([#&#8203;8616](https://github.com/containerd/containerd/pull/8616))
-   **Notify readiness when registered plugins are ready** ([#&#8203;8584](https://github.com/containerd/containerd/pull/8584))
-   **Fix cio.Cancel() should close pipes** ([#&#8203;8624](https://github.com/containerd/containerd/pull/8624))
-   **CDI: Use CRI Config.CDIDevices field for CDI injection** ([#&#8203;8519](https://github.com/containerd/containerd/pull/8519))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Gabriel Adrian Samfira
-   Derek McGowan
-   Paul "TBBle" Hampson
-   Maksym Pavlenko
-   Phil Estes
-   Austin Vazquez
-   Akihiro Suda
-   Kazuyoshi Kato
-   Danny Canter
-   Samuel Karp
-   Sebastiaan van Stijn
-   Ed Bartosh
-   Henry Wang
-   Hsing-Yu (David) Chen
-   Jan Dubois
-   Mike Brown
-   Wei Fu
-   helen

##### Changes

<details><summary>59 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.2 ([#&#8203;8629](https://github.com/containerd/containerd/pull/8629))
    -   [`0e41daaea`](https://github.com/containerd/containerd/commit/0e41daaeabefcf7c61034024b4507ceee139761b) \[release/1.7] Prepare release notes for v1.7.2
-   \[1.7 backport] Fix panic when remote differ returns empty result ([#&#8203;8631](https://github.com/containerd/containerd/pull/8631))
    -   [`e134b6393`](https://github.com/containerd/containerd/commit/e134b639396ab07513fecfa221fc4ad8634b2154) Fix panic when remote differ returns empty result
-   \[release/1.7 backport] Mount snapshots on Windows ([#&#8203;8616](https://github.com/containerd/containerd/pull/8616))
    -   [`313c226b8`](https://github.com/containerd/containerd/commit/313c226b8b9c30995b90d9a6535b2972707afbd4) Update continuity to a tagged version
    -   [`8dd16285a`](https://github.com/containerd/containerd/commit/8dd16285a0558c56255f7d88a509d0e8d930efe3) UnmountAll is a no-op for missing mount points
    -   [`acff3eefa`](https://github.com/containerd/containerd/commit/acff3eefa69b6d0238062396fb91df5cfb699603) Improve error messages and remove check
    -   [`b4dd3bf4e`](https://github.com/containerd/containerd/commit/b4dd3bf4e291b6be928de1be272740c6a9f2dd3e) Make ReadOnly() available on all platforms
    -   [`08d8baf3f`](https://github.com/containerd/containerd/commit/08d8baf3f4d82d5917e8acc94e50d25b4d7d6500) Increase integration test tmieout to 20m
    -   [`1f0dbd011`](https://github.com/containerd/containerd/commit/1f0dbd011ae5b635039646f29bba2e0b288d95ca) Remove bind code path in mount()
    -   [`8f37b1c63`](https://github.com/containerd/containerd/commit/8f37b1c63712aefeef8e3c357e85ebde8f670ba8) Remove "bind" code path from diff
    -   [`9139208b3`](https://github.com/containerd/containerd/commit/9139208b319828e0cafe8110743fa455dc3b75f1) Properly mount base layers
    -   [`e61e7b312`](https://github.com/containerd/containerd/commit/e61e7b31263ca717d2ff00b37abdc83ff0f5346f) Skip parent layer options on bind mounts
    -   [`e4307926f`](https://github.com/containerd/containerd/commit/e4307926f327e35cc5fcd012ac4854cf85cbee07) Add ReadOnly() function
    -   [`0277b9b01`](https://github.com/containerd/containerd/commit/0277b9b01a4992ba315f379ca599bf080dd6495b) Remove escalated privileges
    -   [`d5c18dfb7`](https://github.com/containerd/containerd/commit/d5c18dfb7ed449e0232ccafcc6f4cb9a2473221d) Use DefaultSnapshotter
    -   [`853179366`](https://github.com/containerd/containerd/commit/853179366b2aa7bebd17903faa0ada9dcf9297cc) use t.Fatal if we cannot enable process privileges
    -   [`5b3ee413f`](https://github.com/containerd/containerd/commit/5b3ee413f49fac47017cfacf09176e9701052096) Update continuity
    -   [`375172604`](https://github.com/containerd/containerd/commit/375172604df61e312810efbb7fc0080df5a0ab2c) Fix go.mod, simplify boolean logic, add logging
    -   [`600abd137`](https://github.com/containerd/containerd/commit/600abd13791fcc6b3dd23c7f78f8c8c796340e33) Ignore ERROR_NOT_FOUND error when removing mount
    -   [`df7295dcd`](https://github.com/containerd/containerd/commit/df7295dcdf00839423109ac65b1dc9429f632e00) Update continuity, go-winio and hcsshim
    -   [`0db78c482`](https://github.com/containerd/containerd/commit/0db78c48269f54b9335183b2b0d7b6138253e9e5) Remove unused function
    -   [`219058766`](https://github.com/containerd/containerd/commit/2190587661ded992f2b0a55a08e3201b93e0b5a2) Grant needed privileges for snapshotter tests
    -   [`96fbe5bc8`](https://github.com/containerd/containerd/commit/96fbe5bc882658780ca36499a0e0a79d095b83e8) Fix layer comparison and enable read-only checks
    -   [`279e0d3c9`](https://github.com/containerd/containerd/commit/279e0d3c9ab199458387b670c19301a94dac8032) Use bind filer for mounts
    -   [`93e94da40`](https://github.com/containerd/containerd/commit/93e94da4084f3fbe2d89f3145a8e56c8c24dc458) Enable TestSnapshotterClient on Windows
    -   [`3a3da693a`](https://github.com/containerd/containerd/commit/3a3da693aee68afdc84ca42c0191cee88ee9c21f) Run Windows snapshotter through the test suite
    -   [`e7b62322f`](https://github.com/containerd/containerd/commit/e7b62322f9218387e6f715442b2235c9feec2e01) Fix misspelling of 'Native' as 'Naive'
    -   [`e1f999a18`](https://github.com/containerd/containerd/commit/e1f999a1827242a31fa85cbb4a44ee31eeebfb30) Add paired 'mount' log for 'unmount'
    -   [`5788d6e52`](https://github.com/containerd/containerd/commit/5788d6e520cef08aaf2d15ceaf5c4c6b1ce735e6) Don't use all-upper-case filenames in snapshot tests
    -   [`3cdcb2f10`](https://github.com/containerd/containerd/commit/3cdcb2f1088eab8d18075b0549ae59688bf15792) Skip tests that do not apply to WCOW on Windows
    -   [`b0968b8bb`](https://github.com/containerd/containerd/commit/b0968b8bb920c99d341cb212bde9a4d15c050dfc) Ensure mounts are unmounted before leaving the test
    -   [`b57424851`](https://github.com/containerd/containerd/commit/b57424851cc56745d677ee41e0d5a02dde29bc41) Unify testutil.Unmount on Windows and Unix
    -   [`b9a8aad45`](https://github.com/containerd/containerd/commit/b9a8aad45149c40c8b5c327657a5320de29231c5) Implement Windows mounting for bind and windows-layer mounts
    -   [`1a64ee183`](https://github.com/containerd/containerd/commit/1a64ee1835544d37903f667415c821526200ed8b) Implement WCOW parentless active snapshots and view snapshots
-   \[release/1.7] fix: cio.Cancel() should close the pipes ([#&#8203;8624](https://github.com/containerd/containerd/pull/8624))
    -   [`99582fb1a`](https://github.com/containerd/containerd/commit/99582fb1a32e9d051585219d11146afb07805abf) fix: cio.Cancel() should close the pipes
-   \[release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#&#8203;8621](https://github.com/containerd/containerd/pull/8621))
    -   [`eeda70fb0`](https://github.com/containerd/containerd/commit/eeda70fb04814f240c7e5d0f59a6369b1fdae69e) remotes/docker: ResolverOptions: fix deprecation comments
-   \[release/1.7] Publish sandbox events ([#&#8203;8613](https://github.com/containerd/containerd/pull/8613))
    -   [`e21c8beee`](https://github.com/containerd/containerd/commit/e21c8beee6c07fd289af2cf0011e0aa8156882e4) Post cherry-pick fixes
    -   [`246240f71`](https://github.com/containerd/containerd/commit/246240f71ce2adcfc5b161343f21a72fa32c1273) Move PLEG event back to CRI
    -   [`16f3726dd`](https://github.com/containerd/containerd/commit/16f3726dd61ba8fa71d04957681b53a14cc5b055) Generate sandbox exit events from CRI
    -   [`0c8cfb1a7`](https://github.com/containerd/containerd/commit/0c8cfb1a7c0f852842016ad0805bf8a121ede970) Move pod sandbox recovery to podsandbox/ package
    -   [`91d9f5c64`](https://github.com/containerd/containerd/commit/91d9f5c643c4bc6d44964c161a56eb04201fc885) Publish sandbox events
    -   [`4b77683b4`](https://github.com/containerd/containerd/commit/4b77683b46182fcdf756509767660389d2eb7169) Add sandbox events protos
-   \[release/1.7] notify readiness when registered plugins are ready ([#&#8203;8584](https://github.com/containerd/containerd/pull/8584))
    -   [`2c38cad77`](https://github.com/containerd/containerd/commit/2c38cad77cdb2644ebf8f56a2e3f094344ef0f41) notify readiness when registered plugins are ready
-   \[release/1.7] Backport CRI sandbox server stats changes ([#&#8203;8604](https://github.com/containerd/containerd/pull/8604))
    -   [`7851b0a9f`](https://github.com/containerd/containerd/commit/7851b0a9f27c6a2223538abe05bf23edbd790fca) CRI: Make stats respect sandbox's platform
    -   [`8d7c340ca`](https://github.com/containerd/containerd/commit/8d7c340ca8cb83fda1f02e443a1fdebd04df4bd5) \[sbserver] handle missing cpu stats
    -   [`d08b2a088`](https://github.com/containerd/containerd/commit/d08b2a088c4446ee9bb3af6b431f7969d6a8c07e) \[sbserver] Refactor usageNanoCores be to used for all OSes
-   \[release/1.7] Cherry-pick: Update volume-ownership image with latest hashes ([#&#8203;8574](https://github.com/containerd/containerd/pull/8574))
    -   [`08de6e7b8`](https://github.com/containerd/containerd/commit/08de6e7b8c80e8815002eecc778c422764e87e13) Update volume-ownership image with latest hashes
-   \[release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection ([#&#8203;8519](https://github.com/containerd/containerd/pull/8519))
    -   [`6a5e54c15`](https://github.com/containerd/containerd/commit/6a5e54c15a38b90fbfa2c6a8ce9ef1fb26037c7c) Get CDI devices from CRI Config.CDIDevices field
-   \[release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility ([#&#8203;8510](https://github.com/containerd/containerd/pull/8510))
    -   [`9e60300ea`](https://github.com/containerd/containerd/commit/9e60300ea0b1635d8d7798fc99c824cab82926f3) snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility

</p>
</details>

##### Changes from containerd/continuity
<details><summary>31 commits</summary>
<p>

-   Fall back to Copyfile when Clonefile detects a cross-device request ([#&#8203;225](https://github.com/containerd/continuity/pull/225))
    -   [`7df79f5`](https://github.com/containerd/continuity/commit/7df79f562b5757ce7953302d8b80017a60dfaedf) Fall back to Copyfile when Clonefile detects a cross-device request
-   Support darwin clonefile ([#&#8203;223](https://github.com/containerd/continuity/pull/223))
    -   [`30cf84d`](https://github.com/containerd/continuity/commit/30cf84dfb5e0d30120e388e2e2481adad18ea27a) Add support for Darwin clonefile
    -   [`ebdd069`](https://github.com/containerd/continuity/commit/ebdd069b5520106abe138eee143fb310df314afd) Add copy benchmark
-   Update golang.org/x/sys to v0.1.0 ([#&#8203;222](https://github.com/containerd/continuity/pull/222))
    -   [`2db84b9`](https://github.com/containerd/continuity/commit/2db84b9393154fccd9c968665b00255c688a7d00) Update golang.org/x/sys to v0.1.0
-   Enable tests for all platforms ([#&#8203;220](https://github.com/containerd/continuity/pull/220))
    -   [`b449cd0`](https://github.com/containerd/continuity/commit/b449cd0f764c0dc97ed496c2d3b5f8d673c6b7a6) Fix tests on Windows
    -   [`eb05879`](https://github.com/containerd/continuity/commit/eb058795cb5ebba43e2a0a33f540bbc2c37945c4) Fix Darwin tests
    -   [`9cd17be`](https://github.com/containerd/continuity/commit/9cd17bee62e96e79fd579ef64d86b86ec6ac6cc8) Enable tests for all platforms
-   Add more Windows metadata files ([#&#8203;219](https://github.com/containerd/continuity/pull/219))
    -   [`cdfbe61`](https://github.com/containerd/continuity/commit/cdfbe61803aad33055dce1b557b2bdf323860244) Add more Windows metadata files
-   atomicWriteFile: file defer close ([#&#8203;213](https://github.com/containerd/continuity/pull/213))
    -   [`9eb2a49`](https://github.com/containerd/continuity/commit/9eb2a492babfeb69786473a95a5de4bbc249c71d) atomicWriteFile: file defer close
-   Update GitHub Actions runner images ([#&#8203;216](https://github.com/containerd/continuity/pull/216))
    -   [`ad9c903`](https://github.com/containerd/continuity/commit/ad9c9033bc0d70f0c8ec837cd7cc5a237aa53503) Update GitHub Actions runner images
-   Add CodeQL security scan workflow ([#&#8203;215](https://github.com/containerd/continuity/pull/215))
    -   [`c8de034`](https://github.com/containerd/continuity/commit/c8de034f336e5434007cf541f850a2289463dae9) Add CodeQL security scan workflow
-   Add Go 1.20 support to CI ([#&#8203;214](https://github.com/containerd/continuity/pull/214))
    -   [`be62cc1`](https://github.com/containerd/continuity/commit/be62cc19f81856e329418bf36084ba7dade19af6) Add Go 1.20 support to CI
-   Add paths to windows metadataFiles ([#&#8203;212](https://github.com/containerd/continuity/pull/212))
    -   [`68f7b34`](https://github.com/containerd/continuity/commit/68f7b34f5e115fe81b09971f79bf59897805e99c) Add paths to windows metadataFiles
-   Remove references to io/ioutil package ([#&#8203;211](https://github.com/containerd/continuity/pull/211))
    -   [`e22f001`](https://github.com/containerd/continuity/commit/e22f0013e31f7d7acfdfdfe03c3fc216cd7814c7) Remove references to io/ioutil package
-   Update GitHub actions CI workflow ([#&#8203;210](https://github.com/containerd/continuity/pull/210))
    -   [`1c3fa33`](https://github.com/containerd/continuity/commit/1c3fa33439810d944467f2cf3a4b61be3b048296) Update GitHub actions CI workflow
-   format code with gofumpt ([#&#8203;209](https://github.com/containerd/continuity/pull/209))
    -   [`f5d245e`](https://github.com/containerd/continuity/commit/f5d245e404beb0f7e0403288f4bf0bff7b1c26b4) format code with gofumpt
-   Correctly ignore error wrapping `ErrNotSupported` ([#&#8203;207](https://github.com/containerd/continuity/pull/207))
    -   [`1ee38b5`](https://github.com/containerd/continuity/commit/1ee38b500a97d2b2eaac33a002dabf7b25886c22) Correctly ignore error wrapping ErrNotSupported

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/continuity**  v0.3.0 -> v0.4.1

Previous release can be found at [v1.7.1](https://github.com/containerd/containerd/releases/tag/v1.7.1)

### [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1): containerd 1.7.1

[Compare Source](https://github.com/containerd/containerd/compare/v1.7.0...v1.7.1)

Welcome to the v1.7.1 release of containerd!

The first patch release for containerd 1.7 includes many fixes to CRI
sandbox mode, various other fixes, runc update, and important fixes in
core dependencies such as ttrpc and typeurl.

##### CRI/Sandbox Updates

-   **Throw not supported error when UID or GID mappings provided** ([#&#8203;8211](https://github.com/containerd/containerd/pull/8211))
-   **Cleanup shim on start failure** ([#&#8203;8282](https://github.com/containerd/containerd/pull/8282))
-   **Fix premature close of CRI service when there are no CNI configuration monitors** ([#&#8203;8282](https://github.com/containerd/containerd/pull/8282))
-   **Avoid UID lookup from mount on Darwin** ([#&#8203;8314](https://github.com/containerd/containerd/pull/8314))
-   **Keep Linux mounts for Linux sandboxes on non-Linux hosts** ([#&#8203;8331](https://github.com/containerd/containerd/pull/8331))
-   **Add `noexec`,`nodev`,`nosuid` to `/etc/resolv.conf` bind mount** ([#&#8203;8336](https://github.com/containerd/containerd/pull/8336))
-   **Remove entry for container from container store on error** ([#&#8203;8457](https://github.com/containerd/containerd/pull/8457))
-   **Fix unmarshal in container metrics** ([#&#8203;8472](https://github.com/containerd/containerd/pull/8472))

##### Other Notable Updates

-   **Use readonly for temporary mounts** ([#&#8203;8300](https://github.com/containerd/containerd/pull/8300) [#&#8203;8358](https://github.com/containerd/containerd/pull/8358))
-   **Fix skip docker manifest option on image exporter** ([#&#8203;8344](https://github.com/containerd/containerd/pull/8344))
-   **Update runc binary to v1.1.7** ([#&#8203;8451](https://github.com/containerd/containerd/pull/8451))
-   **Fix runtime path task option** ([#&#8203;8453](https://github.com/containerd/containerd/pull/8453))
-   **Fix panic from nil checkpoint options** ([#&#8203;8475](https://github.com/containerd/containerd/pull/8475))
-   **Fix transfer service configuration options** ([#&#8203;8491](https://github.com/containerd/containerd/pull/8491))
-   **Fix server-side goroutine leak on receive message error** ([ttrpc#&#8203;141](https://github.com/containerd/ttrpc/pull/141))
-   **Fix panic caused by race to close send channel** ([ttrpc#&#8203;140](https://github.com/containerd/ttrpc/pull/140))
-   **Fix unmarshal to return non-nil object when nil value** ([ttrpc#&#8203;140](https://github.com/containerd/typeurl/pull/41))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Sebastiaan van Stijn
-   Akihiro Suda
-   Iceber Gu
-   Phil Estes
-   Maksym Pavlenko
-   Wei Fu
-   Danny Canter
-   Kirtana Ashok
-   Rodrigo Campos
-   Samuel Karp
-   Vinayak Goyal
-   Austin Vazquez
-   Justin Chadwell
-   Kazuyoshi Kato
-   Brad Davidson
-   Djordje Lukic
-   Ethan Lowman
-   Laura Brehm
-   Michael Crosby

##### Changes

<details><summary>68 commits</summary>
<p>

-   \[release/1.7] Prepare release notes for v1.7.1 ([#&#8203;8501](https://github.com/containerd/containerd/pull/8501))
    -   [`27a0d957b`](https://github.com/containerd/containerd/commit/27a0d957be722eaaf34cdcc9c9a5b47d843b7a9c) Prepare release notes for v1.7.1
-   \[release/1.7] Update ttrpc v1.2.2 ([#&#8203;8499](https://github.com/containerd/containerd/pull/8499))
    -   [`7b288e2d7`](https://github.com/containerd/containerd/commit/7b288e2d77d323cf07a210a9ed02f62235e6f41e) Update ttrpc to v1.2.2
-   \[release/1.7] runtime/shim: fix the nil checkpoint options ([#&#8203;8475](https://github.com/containerd/containerd/pull/8475))
    -   [`3ef5b689a`](https://github.com/containerd/containerd/commit/3ef5b689a7b7f6bb670ad59345c290114e5e29ef) runtime/shim: fix the nil checkpoint options
-   \[release/1.7] bump typeurl to v2.1.1 ([#&#8203;8495](https://github.com/containerd/containerd/pull/8495))
    -   [`0e0532eb2`](https://github.com/containerd/containerd/commit/0e0532eb28eb8a1f5d34e89f6ba94eba684c8be1) bump typeurl to v2.1.1
-   \[release/1.7] Transfer service backports ([#&#8203;8491](https://github.com/containerd/containerd/pull/8491))
    -   [`35e86f96c`](https://github.com/containerd/containerd/commit/35e86f96c24da795b3977f181b16a493a7400fdb) \[transfer] avoid setting limiters when max is 0
    -   [`f7233811f`](https://github.com/containerd/containerd/commit/f7233811f6fb2d521e65ecf5b156f82a1aba2f91) Update transfer configuration
    -   [`4510eac00`](https://github.com/containerd/containerd/commit/4510eac009eb066501761a1dae05d4e126ef88e0) Fix image pulling with Transfer service
-   \[release/1.7]Update hcsshim tag to v0.10.0-rc.8 ([#&#8203;8480](https://github.com/containerd/containerd/pull/8480))
    -   [`aaa65e8c1`](https://github.com/containerd/containerd/commit/aaa65e8c1461ae7187357ea6b7f2807667eada6e) Update hcsshim tag to v0.10.0-rc.8
-   \[release/1.7] cri: Fix umarshal metrics ([#&#8203;8472](https://github.com/containerd/containerd/pull/8472))
    -   [`95ef67e19`](https://github.com/containerd/containerd/commit/95ef67e19552aaec3618cdfa06d6d3ffb57d085b) Fix umarshal metrics for CRI server
-   \[release/1.7 backport] update go to go1.20.4, go1.19.9 ([#&#8203;8471](https://github.com/containerd/containerd/pull/8471))
    -   [`021bba28b`](https://github.com/containerd/containerd/commit/021bba28b50e445c4a0a8e79b458db7116dc50e7) update go to go1.20.4, go1.19.9
-   \[release/1.7] fix the task setting the runtime path ([#&#8203;8453](https://github.com/containerd/containerd/pull/8453))
    -   [`c0e128624`](https://github.com/containerd/containerd/commit/c0e128624a8d6a02bb7d2ab3d29369f54791b68e) skip TestContainerStartWithAbsRuntimePath if the runtime is v1
    -   [`aa3c63c15`](https://github.com/containerd/containerd/commit/aa3c63c15f379eec906cb89f7e1204a42a5d1317) integration: add container start test using abs runtime path
    -   [`d2d9eedb1`](https://github.com/containerd/containerd/commit/d2d9eedb1d1b2d047fbdd847ce7c67724f27bde4) WithRuntimePath uses the TaskInfo.RuntimePath field
-   \[release/1.7] Remove entry for container from container store on error  ([#&#8203;8457](https://github.com/containerd/containerd/pull/8457))
    -   [`6b3ae0129`](https://github.com/containerd/containerd/commit/6b3ae01297d2cb39c8018fc783751baba513b390) Remove entry for container from container store on error
-   \[release/1.7 backport] update runc binary to v1.1.7 ([#&#8203;8451](https://github.com/containerd/containerd/pull/8451))
    -   [`fae4b6223`](https://github.com/containerd/containerd/commit/fae4b6223a597cf456b63c4272ed85f625eef9f0) update runc binary to v1.1.7
-   \[release/1.7] cri: Vendor v0.27.1 ([#&#8203;8444](https://github.com/containerd/containerd/pull/8444))
    -   [`571715a9d`](https://github.com/containerd/containerd/commit/571715a9df043d0f75d16dcc17fd0c2c41999290) cri: Vendor v0.27.1
-   \[release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#&#8203;8404](https://github.com/containerd/containerd/pull/8404))
    -   [`1bbf98e53`](https://github.com/containerd/containerd/commit/1bbf98e53ec77bad5dabc2a762f4407e99f527c9) oci: partially restore comment on read-only mounts for uid/gid uses
-   \[release/1.7] Fix argsEscaped tests ([#&#8203;8405](https://github.com/containerd/containerd/pull/8405))
    -   [`a6d336c1f`](https://github.com/containerd/containerd/commit/a6d336c1f6674c2b342d65ca78fba7fac955eaf1) Fix argsEscaped tests
-   \[release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings ([#&#8203;8211](https://github.com/containerd/containerd/pull/8211))
    -   [`7de8629be`](https://github.com/containerd/containerd/commit/7de8629be0e62c4d8164cd873baf14b64bcbb90b) cri: Throw an error if idmap mounts is requested
    -   [`75ac7e0d8`](https://github.com/containerd/containerd/commit/75ac7e0d8200539ff444b952bc060ffa23582a87) cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
-   \[release/1.7] go.mod: remove redundant replace, and some cleaning-up ([#&#8203;8396](https://github.com/containerd/containerd/pull/8396))
    -   [`8f6e86fec`](https://github.com/containerd/containerd/commit/8f6e86fecad5c11871df20e516ae181d7abf4a7c) go.mod: add comment explaining go-fuzz-headers replace rule
    -   [`1ece0cb50`](https://github.com/containerd/containerd/commit/1ece0cb50f7f2f6fc9c59a76ae49227a84a92f1e) go.mod: remove replace for github.com/opencontainers/runtime-tools
    -   [`e9f962187`](https://github.com/containerd/containerd/commit/e9f96218795ef6a527fc8cac550ae90b9b09fe5c) go.mod: integration: use non-pre-release of containerd
    -   [`84393b005`](https://github.com/containerd/containerd/commit/84393b005f76c085ad62c62dff980dc13d13b131) go.mod: integration: move indirect dependencies to the right group
-   \[release/1.7 backport] update runc binary to v1.1.6 ([#&#8203;8386](https://github.com/containerd/containerd/pull/8386))
    -   [`dec2595af`](https://github.com/containerd/containerd/commit/dec2595afe92800fbf8e4e506398b00ff532332f) update runc binary to v1.1.6
-   \[release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#&#8203;8358](https://github.com/containerd/containerd/pull/8358))
    -   [`54d12b872`](https://github.com/containerd/containerd/commit/54d12b872132d56feca792051abdce87a2077988) oci: Use WithReadonlyTempMount when adding users/groups
-   \[release/1.7 backport] update go to go1.20.3, go1.19.8 ([#&#8203;8354](https://github.com/containerd/containerd/pull/8354))
    -   [`624327651`](https://github.com/containerd/containerd/commit/6243276515454617f58eafaa85352b6e6fcac96e) update go to go1.20.3, go1.19.8
-   \[release/1.7] archive: consistently respect value of WithSkipDockerManifest ([#&#8203;8344](https://github.com/containerd/containerd/pull/8344))
    -   [`1d6641b7c`](https://github.com/containerd/containerd/commit/1d6641b7c92d8854548c7a07bdaa07979ad0eb68) export: add test for WithSkipDockerManifest
    -   [`0e0d84f6b`](https://github.com/containerd/containerd/commit/0e0d84f6bb7a0226480dd5ead7c894175d2edcc8) archive: consistently respect value of WithSkipDockerManifest
-   \[release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. ([#&#8203;8336](https://github.com/containerd/containerd/pull/8336))
    -   [`9b4935d86`](https://github.com/containerd/containerd/commit/9b4935d86436419670febe9695787a3aaf5ceeb7) Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
    -   [`5e953cfa6`](https://github.com/containerd/containerd/commit/5e953cfa62abb90b2c4dc775907cbb276637bfe8) Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
    -   [`0aad93f08`](https://github.com/containerd/containerd/commit/0aad93f08ca4da8f33ad709dbe49593f6ff5c59c) Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
-   \[release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 ([#&#8203;8335](https://github.com/containerd/containerd/pull/8335))
    -   [`1a64f1b43`](https://github.com/containerd/containerd/commit/1a64f1b4341ebda4b8f8cf67cac543394a10a4c3) ctr/tasks: fix unmarshal the task metrics for cgroups v1
-   \[release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin ([#&#8203;8331](https://github.com/containerd/containerd/pull/8331))
    -   [`17c52a26d`](https://github.com/containerd/containerd/commit/17c52a26d63d6105e9918fb2d90ff346e4e4c463) Keep linux mounts for linux sandboxes on Windows/Darwin
-   \[release/1.7] update runc binary to v1.1.5 ([#&#8203;8325](https://github.com/containerd/containerd/pull/8325))
    -   [`d81fc15af`](https://github.com/containerd/containerd/commit/d81fc15affe09dbb621be16bda805801a98cab4b) update runc binary to v1.1.5
    -   [`755efbe64`](https://github.com/containerd/containerd/commit/755efbe6402acdaf5832e36b7c6f4e15cc2a406d) go.mod: github.com/opencontainers/runc v1.1.5
-   \[backport 1.7] Defer uid lookups on Darwin ([#&#8203;8314](https://github.com/containerd/containerd/pull/8314))
    -   [`90591db47`](https://github.com/containerd/containerd/commit/90591db47c70db29386b8d9e58ffa1005b560dc0) Defer uid lookups on Darwin
-   \[release/1.7 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#&#8203;8300](https://github.com/containerd/containerd/pull/8300))
    -   [`b7d87b190`](https://github.com/containerd/containerd/commit/b7d87b190d013929377bb85df8301fade73b0298) Add `WithReadonlyTempMount` to create readonly temporary mounts
-   \[release/1.7] Backport Sandbox/CRI fixes ([#&#8203;8282](https://github.com/containerd/containerd/pull/8282))
    -   [`1c1b6bcb2`](https://github.com/containerd/containerd/commit/1c1b6bcb2b4a47053855bd7adaed5d9bfdf2a5f5) CRI: Don't always close netConfMonitor channel
    -   [`cf2e454bf`](https://github.com/containerd/containerd/commit/cf2e454bf052bee63c0582552566c96357bd2250) Sandbox: Correct/add some fields to Status()
    -   [`ce68e8e0d`](https://github.com/containerd/containerd/commit/ce68e8e0db47174580fc74ecdeb66c26695ecd0b) Sandbox: Cleanup shim on Start failure

</p>
</details>

##### Changes from containerd/ttrpc
<details><summary>8 commits</summary>
<p>

-   First process the pending messages in recv channel ([#&#8203;144](https://github.com/containerd/ttrpc/pull/144))
    -   [`c51165f`](https://github.com/containerd/ttrpc/commit/c51165f20d52c5b19c76cd8a1d16ead701146e89) First process the pending messages in recv channel
-   Add recvClose channel to stream ([#&#8203;140](https://github.com/containerd/ttrpc/pull/140))
    -   [`471297e`](https://github.com/containerd/ttrpc/commit/471297eed95365134cb1a15defdf42334fd4c85a) Add recvClose channel to stream
-   Unwrap IO errors in server connection error handling ([#&#8203;141](https://github.com/containerd/ttrpc/pull/141))
    -   [`9599fad`](https://github.com/containerd/ttrpc/commit/9599fadcd66ef7b6a3aec840be59a3a38203bc2c) Unwrap io errors in server connection receive error handling
-   Update GitHub actions CI workflow ([#&#8203;124](https://github.com/containerd/ttrpc/pull/124))
    -   [`c7b5a32`](https://github.com/containerd/ttrpc/commit/c7b5a322eda63419e2dafa8dd215b08739ebe9f5) Update GitHub actions CI workflow

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/go-winio**            v0.6.0 -> v0.6.1
-   **github.com/Microsoft/hcsshim**             v0.10.0-rc.7 -> v0.10.0-rc.8
-   **github.com/containerd/ttrpc**              v1.2.1 -> v1.2.2
-   **github.com/containerd/typeurl/v2**         v2.1.0 -> v2.1.1
-   **github.com/golang/protobuf**               v1.5.2 -> v1.5.3
-   **github.com/opencontainers/runc**           v1.1.4 -> v1.1.5
-   **github.com/opencontainers/runtime-tools**  [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) -> [`2e043c6`](https://github.com/containerd/containerd/commit/2e043c6bd626)
-   **golang.org/x/mod**                         v0.7.0 -> v0.9.0
-   **golang.org/x/net**                         v0.7.0 -> v0.8.0
-   **golang.org/x/sys**                         v0.6.0 -> v0.7.0
-   **golang.org/x/term**                        v0.5.0 -> v0.6.0
-   **golang.org/x/text**                        v0.7.0 -> v0.8.0
-   **golang.org/x/tools**                       v0.5.0 -> v0.7.0
-   **google.golang.org/protobuf**               v1.28.1 -> v1.29.1
-   **k8s.io/cri-api**                           v0.26.2 -> v0.27.1

Previous release can be found at [v1.7.0](https://github.com/containerd/containerd/releases/tag/v1.7.0)

### [`v1.7.0`](https://github.com/containerd/containerd/releases/tag/v1.7.0): containerd 1.7.0

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.31...v1.7.0)

Welcome to the v1.7.0 release of containerd!

The eighth major release of containerd includes new functionality alongside many improvements.
This release is the last major release of containerd 1.x before 2.0.
Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.

##### Highlights

##### Sandbox API *(experimental)*

The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.

-   **Sandbox API** ([#&#8203;6703](https://github.com/containerd/containerd/pull/6703))
-   **CRI Sandbox API Implementation** ([#&#8203;7228](https://github.com/containerd/containerd/pull/7228))

##### Transfer Service *(experimental)*

-   **Transfer Service** ([#&#8203;7320](https://github.com/containerd/containerd/pull/7320))

The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
to allow for further plugin development and integration into existing plugins.

See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md)

##### NRI *(experimental)*

-   **Extend NRI scope** ([nri#&#8203;16](https://github.com/containerd/nri/pull/16))
-   **Support for updated NRI** ([#&#8203;6019](https://github.com/containerd/containerd/pull/6019))

The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.

This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.

See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md)

##### Platform Support

-   **Linux containers on FreeBSD** ([#&#8203;7000](https://github.com/containerd/containerd/pull/7000))

##### Runtime Features

-   **Add support for CDI device injection** ([#&#8203;6654](https://github.com/containerd/containerd/pull/6654))
-   **Support for cgroups blockio** ([#&#8203;5490](https://github.com/containerd/containerd/pull/5490))
-   **Add restart policy for enhanced restart manager** ([#&#8203;6744](https://github.com/containerd/containerd/pull/6744))

##### gRPC Shim Support *(experimental)*

-   **Initial gRPC shim support** ([#&#8203;8052](https://github.com/containerd/containerd/pull/8052))

Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
away and will continue to be recommended for the best performance and lowest shim memory overhead.
The gRPC support allows implementation of a wider range of shim implementations which may not
have access to a stable ttrpc library in the implementation language. The shim protocol is also
updated to allow the shims to specify the protocol which is supported.

##### Road to 2.0

##### Refactoring

There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.

The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
but it also being done for image and network management.

The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.

-   **Remove gogoproto.customtype** ([#&#8203;6699](https://github.com/containerd/containerd/pull/6699))
-   **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#&#8203;6708](https://github.com/containerd/containerd/pull/6708))
-   **Remove all gogoproto extensions** ([#&#8203;6829](https://github.com/containerd/containerd/pull/6829))
-   **Migrate off from github.com/gogo/protobuf** ([#&#8203;6841](https://github.com/containerd/containerd/pull/6841))
-   **ttrpc streaming** ([ttrpc#&#8203;107](https://github.com/containerd/ttrpc/pull/107))
-   **Add unpack interface for client** ([#&#8203;6749](https://github.com/containerd/containerd/pull/6749))
-   **Add collectible resources to metadata gc** ([#&#8203;6804](https://github.com/containerd/containerd/pull/6804))
-   **Add version to shim protocol** ([#&#8203;8177](https://github.com/containerd/containerd/pull/8177))

##### Configuration

Existing CRI configurations will be supported until 2.0.
Any functionality split out of CRI will have their configuration migrated to new plugins.
Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.

##### Deprecation

The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.

-   **Docker Schema 1 Image Deprecation** ([#&#8203;6884](https://github.com/containerd/containerd/pull/6884))

##### CRI Updates

-   **Fix CRI plugin to setup pod network after creating the sandbox container** ([#&#8203;5904](https://github.com/containerd/containerd/pull/5904))
-   **Support image pull progress timeout** ([#&#8203;6150](https://github.com/containerd/containerd/pull/6150))
-   **Add experimental support for runtime specific snapshotters** ([#&#8203;6899](https://github.com/containerd/containerd/pull/6899))
-   **Pass all TOML runtime configuration options from CRI to the runtime** ([#&#8203;7764](https://github.com/containerd/containerd/pull/7764))
-   **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) *(experimental)*** ([#&#8203;7679](https://github.com/containerd/containerd/pull/7679))
-   **Add timeout option for drain exec io** ([#&#8203;7832](https://github.com/containerd/containerd/pull/7832))
-   **Add network plugin metrics** ([#&#8203;7858](https://github.com/containerd/containerd/pull/7858))
-   **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#&#8203;7863](https://github.com/containerd/containerd/pull/7863))

##### Other

-   **Support shallow content copy by adding reader option to local content reader at** ([#&#8203;7414](https://github.com/containerd/containerd/pull/7414))
-   **Add NoSameOwner option when unpacking tars** ([#&#8203;7386](https://github.com/containerd/containerd/pull/7386))
-   **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#&#8203;7460](https://github.com/containerd/containerd/pull/7460))
-   **Update default seccomp profile to block socket calls to AF_VSOCK** ([#&#8203;7510](https://github.com/containerd/containerd/pull/7510))
-   **Replace fork on mount logic with CLONE_FS** ([#&#8203;7513](https://github.com/containerd/containerd/pull/7513))
-   **Add support for default registry host configuration** ([#&#8203;7607](https://github.com/containerd/containerd/pull/7607))
-   **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#&#8203;7732](https://github.com/containerd/containerd/pull/7732))
-   **Make OCI options cross-platform** ([#&#8203;7928](https://github.com/containerd/containerd/pull/7928))
-   **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#&#8203;8021](https://github.com/containerd/containerd/pull/8021))
-   **Use data field from OCI descriptor when provided for fetch** ([#&#8203;8076](https://github.com/containerd/containerd/pull/8076))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Kazuyoshi Kato
-   Maksym Pavlenko
-   Wei Fu
-   Phil Estes
-   Akihiro Suda
-   Sebastiaan van Stijn
-   Samuel Karp
-   Krisztian Litkey
-   Mike Brown
-   Stefan Berger
-   Danny Canter
-   Austin Vazquez
-   Daniel Canter
-   yanggang
-   Iceber Gu
-   Ye Sijun
-   Ed Bartosh
-   Luca Comellini
-   Adam Korcz
-   Nashwan Azhari
-   Tony Fang
-   ruiwen-zhao
-   xin.li
-   Brian Goff
-   Gabriel Adrian Samfira
-   Paul "TBBle" Hampson
-   Henry Wang
-   Kevin Parsons
-   Rodrigo Campos
-   zounengren
-   Justin Terry
-   Paco Xu
-   Shengjing Zhu
-   Swagat Bora
-   wanglei
-   Gavin Inglis
-   Akhil Mohan
-   Hsing-Yu (David) Chen
-   Zechun Chen
-   guodong
-   lengrongfu
-   James Jenkins
-   James Sturtevant
-   Kirtana Ashok
-   Michael Crosby
-   Qiutong Song
-   Shiming Zhang
-   Vincent Batts
-   Antonio Ojea
-   Cameron Sparr
-   Casey Callendrello
-   Changwei Ge
-   Jian Zeng
-   Josh Seba
-   Junyu Liu
-   Kohei Tokunaga
-   Michael Zappa
-   Qasim Sarfraz
-   Tobias Klauser
-   Zhang Tianyang
-   pigletfly
-   yaoyinnan
-   Abirdcfly
-   Aditi Sharma
-   Amit Barve
-   Bennett-White
-   Bjorn Neergaard
-   Cory Snider
-   Craig Ingram
-   Eng Zer Jun
-   Eric Lin
-   Ethan Lowman
-   Fabian Hoffmann
-   Jess
-   Jiongchi Yu
-   Jonny Stoten
-   Juan Hoyos
-   Kang.Zhang
-   Kay Yan
-   Markus Lehtonen
-   Mikko Ylinen
-   Mohit Sharma
-   Paul Cacheux
-   Paul S. Schweigert
-   Qian Zhang
-   Tõnis Tiigi
-   Yasin Turan
-   bin liu
-   helen
-   yulng
-   Aman Sharma
-   Anastassios Nanos
-   Andrew G. Morgan
-   Andrey Klimentyev
-   Aniruddha Basak
-   Anthony Nandaa
-   Antti Kervinen
-   Aviral Takkar
-   Baoshuo
-   Benjamin Elder
-   Benjamin Wang
-   Brandon Lum
-   Chao Dai
-   Chuanying Du
-   Claudiu Belu
-   Daniel Lenar
-   Danielle Lancashire
-   Dat Nguyen
-   Davanum Srinivas
-   Dave
-   David Leadbeater
-   David Porter
-   Dmitry Shurupov
-   Edgar Lee
-   Eric Ernst
-   Fahed Dorgaa
-   Gabriela Cervantes
-   Gijs Peskens
-   Hamza El-Saawy
-   Ikko Ashimine
-   Jeff Widman
-   Jeff Zvier
-   Jeremi Piotrowski
-   Jimmy Hsiao
-   Jin Dong
-   Jordan Karaze
-   Joseph Sheng
-   Joyce Brum
-   Jukka Rissanen
-   Justin Chadwell
-   Kate
-   Kathryn Baldauf
-   Kyle L Frisbie
-   LongtaoZhang
-   Manuel Alejandro de Brito Fontes
-   Marc Schwind
-   Mark Rossetti
-   Mark Zhang
-   Marvin Giessing
-   Mathis Michel
-   Merlin Ran
-   Nabeel Rana
-   Nathan
-   Nguyen Phan Huy
-   Nikita Rybak
-   Nobel Barakat
-   Oleg Atamanenko
-   Oleg Zhurakivskyy
-   Oliver Radwell
-   Paweł Gronowski
-   Quan Tian
-   Roy Yang
-   Samuel Ortiz
-   Serge Logvinov
-   Shane Jennings
-   Shaun Lawrie
-   Shinichi Morimoto
-   SilverSoldier
-   Sophie Liu
-   Su Fei
-   Taeho Nam
-   Takumasa Sakao
-   Tiger Kaovilai
-   Tom Godkin
-   Tomoya.Fujita
-   Xinlin Ma
-   Yakul Garg
-   Zhongming Chang
-   Zhuchen Wang
-   austinvazquez
-   cardy.tang
-   chaunceyjiang
-   dabaooline
-   guiyong.ou
-   huoqifeng
-   jianfei.zhang
-   liyuxuan.darfux
-   ningmingxiao
-   panguicai008
-   shi yixue
-   shuaichang
-   songjiang han
-   wen chen
-   wusong
-   xiaoyang zhu
-   yanghesong
-   yaozhenxiu
-   zhang he

##### Changes

<details><summary>1753 commits</summary>
<p>

-   Prepare release notes for v1.7.0 ([#&#8203;8242](https://github.com/containerd/containerd/pull/8242))
-   RELEASES.md: describe the deprecated config properties ([#&#8203;8241](https://github.com/containerd/containerd/pull/8241))
-   Flag usage uses uppercase letters  ([#&#8203;8232](https://github.com/containerd/containerd/pull/8232))
-   docs: link docs/managed-opt.md to client.Install ([#&#8203;8240](https://github.com/containerd/containerd/pull/8240))
-   Prepare release notes for v1.7.0-rc.3 ([#&#8203;8233](https://github.com/containerd/containerd/pull/8233))
-   Go 1.20.2 ([#&#8203;8237](https://github.com/containerd/containerd/pull/8237))
-   Update ttrpc to v1.2.1 ([#&#8203;8236](https://github.com/containerd/containerd/pull/8236))
-   sandbox: create sandbox with network namespace path ([#&#8203;8149](https://github.com/containerd/containerd/pull/8149))
-   labels: Add LabelDistributionSource ([#&#8203;8224](https://github.com/containerd/containerd/pull/8224))
-   archive: disable looking up usernames and groupnames on the host ([#&#8203;8220](https://github.com/containerd/containerd/pull/8220))
-   go.mod: go.opentelemetry.io/otel/\* v1.14.0 ([#&#8203;8222](https://github.com/containerd/containerd/pull/8222))
-   metadata: add comments about `Image.CreatedAt` ([#&#8203;8225](https://github.com/containerd/containerd/pull/8225))
-   Add release notes for v1.7.0-rc.2 ([#&#8203;8216](https://github.com/containerd/containerd/pull/8216))
-   go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*} latest ([#&#8203;8221](https://github.com/containerd/containerd/pull/8221))
-   Bump k8s.io deps ([#&#8203;8131](https://github.com/containerd/containerd/pull/8131))
-   Update imgcrypt to v1.1.7 ([#&#8203;8217](https://github.com/containerd/containerd/pull/8217))
-   Add ArgsEscaped support for CRI ([#&#8203;8198](https://github.com/containerd/containerd/pull/8198))
-   Sandbox: Delete shim+shutdown sandbox on create failure ([#&#8203;8204](https://github.com/containerd/containerd/pull/8204))
-   \[Feature] Transfer tag image ([#&#8203;8205](https://github.com/containerd/containerd/pull/8205))
-   docs: fix typo of shim.RunManager's function comment ([#&#8203;8214](https://github.com/containerd/containerd/pull/8214))
-   \[cri] Implement CRI Pod and Container stats for Windows ([#&#8203;7099](https://github.com/containerd/containerd/pull/7099))
-   Sandbox: Fix/enhance error messages for Create ([#&#8203;8203](https://github.com/containerd/containerd/pull/8203))
-   epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#&#8203;8202](https://github.com/containerd/containerd/pull/8202))
-   pkg/cri: add timeout to drain exec io ([#&#8203;7832](https://github.com/containerd/containerd/pull/7832))
-   Prepare release notes for v1.7.0-rc.1 ([#&#8203;8192](https://github.com/containerd/containerd/pull/8192))
-   Transfer export image ([#&#8203;8191](https://github.com/containerd/containerd/pull/8191))
-   Create config struct to take user input ([#&#8203;8193](https://github.com/containerd/containerd/pull/8193))
-   ctr/tasks: support remapped UID/GID ([#&#8203;7864](https://github.com/containerd/containerd/pull/7864))
-   Add experimental section to RELEASES.md ([#&#8203;8119](https://github.com/containerd/containerd/pull/8119))
-   Fix streaming manager deadlock on collection ([#&#8203;8188](https://github.com/containerd/containerd/pull/8188))
-   Update CRI guide link ([#&#8203;8190](https://github.com/containerd/containerd/pull/8190))
-   Add max shim version environment variable ([#&#8203;8189](https://github.com/containerd/containerd/pull/8189))
-   Update README with location of security audits ([#&#8203;8187](https://github.com/containerd/containerd/pull/8187))
-   docs: fix typos in historical/design/data-flow.md ([#&#8203;8181](https://github.com/containerd/containerd/pull/8181))
-   Increase CI workflow timeout on Windows. ([#&#8203;8183](https://github.com/containerd/containerd/pull/8183))
-   releases: mark 1.5 as EOL ([#&#8203;8178](https://github.com/containerd/containerd/pull/8178))
-   Add version to shim protocol ([#&#8203;8177](https://github.com/containerd/containerd/pull/8177))
-   Rework install-protobuf script and add new targets ([#&#8203;8164](https://github.com/containerd/containerd/pull/8164))
-   bump go-cni to v1.1.9 ([#&#8203;8173](https://github.com/containerd/containerd/pull/8173))
-   Treat sandboxes as root gc resources and scan referenced objects ([#&#8203;8172](https://github.com/containerd/containerd/pull/8172))
-   update CDI version to v0.5.4 ([#&#8203;8152](https://github.com/containerd/containerd/pull/8152))
-   Prepare release notes for v1.7.0-rc.0 ([#&#8203;8162](https://github.com/containerd/containerd/pull/8162))
-   pkg/nri: pull in latest NRI, update NRI configuration. ([#&#8203;8140](https://github.com/containerd/containerd/pull/8140))
-   \[transfer]Config options followup ([#&#8203;8165](https://github.com/containerd/containerd/pull/8165))
-   Add configuration options to local transfer service ([#&#8203;8062](https://github.com/containerd/containerd/pull/8062))
-   docs: Show how to select GRPC for shims ([#&#8203;8134](https://github.com/containerd/containerd/pull/8134))
-   CRI: remove duplicated snapshotters code ([#&#8203;8154](https://github.com/containerd/containerd/pull/8154))
-   docs: add more comment to logging.LoggerFunc ([#&#8203;8142](https://github.com/containerd/containerd/pull/8142))
-   contrib/apparmor: remove code related to apparmor_parser version ([#&#8203;8069](https://github.com/containerd/containerd/pull/8069))
-   runtime/v2: Call onCloseWithShimLog for grpc shims ([#&#8203;8120](https://github.com/containerd/containerd/pull/8120))
-   Add Fields type alias to log package ([#&#8203;8143](https://github.com/containerd/containerd/pull/8143))
-   Migrate from k8s.gcr.io to registry.k8s.io ([#&#8203;8125](https://github.com/containerd/containerd/pull/8125))
-   sandbox: start sandbox with options ([#&#8203;8129](https://github.com/containerd/containerd/pull/8129))
-   Add macOS build note ([#&#8203;8115](https://github.com/containerd/containerd/pull/8115))
-   Fix concurrent writes for UpdateContainerStats ([#&#8203;8130](https://github.com/containerd/containerd/pull/8130))
-   dependency: bump go.etcd.io/bbolt to v1.3.7 ([#&#8203;8128](https://github.com/containerd/containerd/pull/8128))
-   runtime/v2: Log BootstrapParams ([#&#8203;8124](https://github.com/containerd/containerd/pull/8124))
-   Prepare release notes for v1.7.0 beta.4 ([#&#8203;8110](https://github.com/containerd/containerd/pull/8110))
-   Go 1.20.1 ([#&#8203;8103](https://github.com/containerd/containerd/pull/8103))
-   ctr version: add args check ([#&#8203;8096](https://github.com/containerd/containerd/pull/8096))
-   pkg/cri/config: fix Mirrors deprecation comment ([#&#8203;8041](https://github.com/containerd/containerd/pull/8041))
-   docs: fix function names in fuzzing test documentation ([#&#8203;8044](https://github.com/containerd/containerd/pull/8044))
-   fix: 'go routine' should be 'goroutine' ([#&#8203;8051](https://github.com/containerd/containerd/pull/8051))
-   Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
-   Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
-   pkg/cri/sbserver: experimental NRI integration for CRI. ([#&#8203;7954](https://github.com/containerd/containerd/pull/7954))
-   Clean up error strings that start with uppercase ([#&#8203;8114](https://github.com/containerd/containerd/pull/8114))
-   Clean up repeated package import ([#&#8203;8113](https://github.com/containerd/containerd/pull/8113))
-   Go 1.19.6 ([#&#8203;8109](https://github.com/containerd/containerd/pull/8109))
-   Initial GRPC shims support ([#&#8203;8052](https://github.com/containerd/containerd/pull/8052))
-   CRI: Pass sandbox annotations to \_other platforms ([#&#8203;8060](https://github.com/containerd/containerd/pull/8060))
-   cmd/ctr/commands/images: support usage subcommand ([#&#8203;8105](https://github.com/containerd/containerd/pull/8105))
-   cni: pass in the cgroupPath capability argument ([#&#8203;8067](https://github.com/containerd/containerd/pull/8067))
-   Add fallback for windows platforms without osversion ([#&#8203;8101](https://github.com/containerd/containerd/pull/8101))
-   release: xx v1.2.1 ([#&#8203;8104](https://github.com/containerd/containerd/pull/8104))
-   \[transfer] update imagestore interface to support multiple references ([#&#8203;7964](https://github.com/containerd/containerd/pull/7964))
-   \[sandbox] Use options to pass PodSandboxConfig to shims ([#&#8203;8100](https://github.com/containerd/containerd/pull/8100))
-   Send container events with nil PodSandboxStatus ([#&#8203;8047](https://github.com/containerd/containerd/pull/8047))
-   test: add hostNetwork tests for both windows and linux ([#&#8203;7984](https://github.com/containerd/containerd/pull/7984))
-   loadConfig pre-inspection in advance ([#&#8203;8097](https://github.com/containerd/containerd/pull/8097))
-   contrib/apparmor: remove version-dependent rules ([#&#8203;8068](https://github.com/containerd/containerd/pull/8068))
-   \*: introduce wrapper pkgs for blockio and rdt ([#&#8203;8066](https://github.com/containerd/containerd/pull/8066))
-   Extract CRI instrument into separate package ([#&#8203;8093](https://github.com/containerd/containerd/pull/8093))
-   CRI: Mirror generic toml runtime config under server ([#&#8203;8091](https://github.com/containerd/containerd/pull/8091))
-   go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#&#8203;8092](https://github.com/containerd/containerd/pull/8092))
-   Revert `apparmor_parser` regression ([#&#8203;8086](https://github.com/containerd/containerd/pull/8086))
-   \[sandbox] refactor controller interface ([#&#8203;7981](https://github.com/containerd/containerd/pull/7981))
-   btrfs: depend on kernel UAPI instead of libbtrfs ([#&#8203;7933](https://github.com/containerd/containerd/pull/7933))
-   CI: skip some jobs when `repo != containerd/containerd` ([#&#8203;8082](https://github.com/containerd/containerd/pull/8082))
-   chore: clean up repeated package import ([#&#8203;8078](https://github.com/containerd/containerd/pull/8078))
-   fetch: Use data from descriptor when available. ([#&#8203;8076](https://github.com/containerd/containerd/pull/8076))
-   chore: use http constants instead of string ([#&#8203;8077](https://github.com/containerd/containerd/pull/8077))
-   Fix retry logic within devmapper device deactivation ([#&#8203;8075](https://github.com/containerd/containerd/pull/8075))
-   Clean CI yaml ([#&#8203;8071](https://github.com/containerd/containerd/pull/8071))
-   Add critest.exe in $PATH ([#&#8203;8074](https://github.com/containerd/containerd/pull/8074))
-   keep the uppercase letter for flag info ([#&#8203;7976](https://github.com/containerd/containerd/pull/7976))
-   go.mod: Bump hcsshim to v0.10.0-rc.5 ([#&#8203;8049](https://github.com/containerd/containerd/pull/8049))
-   Fix sandbox exit monitor ([#&#8203;8045](https://github.com/containerd/containerd/pull/8045))
-   Generate GRPC contracts for runtime APIs ([#&#8203;7979](https://github.com/containerd/containerd/pull/7979))
-   Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#&#8203;8035](https://github.com/containerd/containerd/pull/8035))
-   Export remote snapshotter label handler ([#&#8203;8036](https://github.com/containerd/containerd/pull/8036))
-   Adding support to run install hcsshim from local clone ([#&#8203;7989](https://github.com/containerd/containerd/pull/7989))
-   go.mod: github.com/urfave/cli v1.22.12 ([#&#8203;8040](https://github.com/containerd/containerd/pull/8040))
-   cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#&#8203;8039](https://github.com/containerd/containerd/pull/8039))
-   pkg/epoch: drop timezone ([#&#8203;8037](https://github.com/containerd/containerd/pull/8037))
-   go.mod: update github.com/containerd/nri. ([#&#8203;8034](https://github.com/containerd/containerd/pull/8034))
-   fix(docs): minor fix on the windows installation steps ([#&#8203;8013](https://github.com/containerd/containerd/pull/8013))
-   Add integration test to opentelemetry tracing on image pull ([#&#8203;7847](https://github.com/containerd/containerd/pull/7847))
-   Use mount.Target to specify subdirectory of rootfs mount ([#&#8203;7840](https://github.com/containerd/containerd/pull/7840))
-   cri: mkdir /etc/cni with 0755, not 0700 ([#&#8203;8020](https://github.com/containerd/containerd/pull/8020))
-   log/logtest: add `testcase` as debug field ([#&#8203;8025](https://github.com/containerd/containerd/pull/8025))
-   go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#&#8203;8027](https://github.com/containerd/containerd/pull/8027))
-   Update CNI plugins to 1.2.0 ([#&#8203;7977](https://github.com/containerd/containerd/pull/7977))
-   go.mod: go.opentelemetry.io/otel v1.12.0 ([#&#8203;8026](https://github.com/containerd/containerd/pull/8026))
-   Move PLEG events for pause container under podsandbox package ([#&#8203;8007](https://github.com/containerd/containerd/pull/8007))
-   runtime docs: Clarify delete cwd behavior ([#&#8203;8012](https://github.com/containerd/containerd/pull/8012))
-   release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#&#8203;8019](https://github.com/containerd/containerd/pull/8019))
-   RELEASES.md: update release status ([#&#8203;8022](https://github.com/containerd/containerd/pull/8022))
-   deflake: TestContainerPids ([#&#8203;8023](https://github.com/containerd/containerd/pull/8023))
-   release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#&#8203;8021](https://github.com/containerd/containerd/pull/8021))
-   Update the EOL date for 1.5 release ([#&#8203;8015](https://github.com/containerd/containerd/pull/8015))
-   Prepare release notes for v1.7.0-beta.3 ([#&#8203;8014](https://github.com/containerd/containerd/pull/8014))
-   Fix Memory Limit test ([#&#8203;7959](https://github.com/containerd/containerd/pull/7959))
-   Reused package errdefs for not supported error ([#&#8203;8005](https://github.com/containerd/containerd/pull/8005))
-   pkg/cri: optimize slice initialization ([#&#8203;7994](https://github.com/containerd/containerd/pull/7994))
-   go.mod: update goresctrl to v0.3.0 ([#&#8203;7987](https://github.com/containerd/containerd/pull/7987))
-   pushWriter: correctly propagate errors ([#&#8203;7985](https://github.com/containerd/containerd/pull/7985))
-   CI: test release.yml on every PR ([#&#8203;7968](https://github.com/containerd/containerd/pull/7968))
-   fix incorrect namespace of event when create/update namespace ([#&#8203;7129](https://github.com/containerd/containerd/pull/7129))
-   Backport changes to sandboxed CRI ([#&#8203;7973](https://github.com/containerd/containerd/pull/7973))
-   Fix syntax errors in the document ([#&#8203;7970](https://github.com/containerd/containerd/pull/7970))
-   release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#&#8203;7969](https://github.com/containerd/containerd/pull/7969))
-   use local variable for rt when iterating collectors ([#&#8203;7963](https://github.com/containerd/containerd/pull/7963))
-   Add basic spec and mounts for Darwin ([#&#8203;7960](https://github.com/containerd/containerd/pull/7960))
-   go.mod: Bump hcsshim to v0.10.0-rc.4 ([#&#8203;7810](https://github.com/containerd/containerd/pull/7810))
-   Use specs Platform instead of generated API ([#&#8203;7958](https://github.com/containerd/containerd/pull/7958))
-   Make OCI options cross-platform ([#&#8203;7928](https://github.com/containerd/containerd/pull/7928))
-   update to go1.19.5, go1.18.10 ([#&#8203;7948](https://github.com/containerd/containerd/pull/7948))
-   fuzzing: improve archive fuzzer ([#&#8203;7957](https://github.com/containerd/containerd/pull/7957))
-   shim: enable debug logging for delete ([#&#8203;7943](https://github.com/containerd/containerd/pull/7943))
-   cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#&#8203;7946](https://github.com/containerd/containerd/pull/7946))
-   ctr/run: flags --detach and --rm cannot be specified together ([#&#8203;7929](https://github.com/containerd/containerd/pull/7929))
-   Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#&#8203;7935](https://github.com/containerd/containerd/pull/7935))
-   Refactor snapshotters metastore transaction ([#&#8203;7917](https://github.com/containerd/containerd/pull/7917))
-   mod: update github.com/pelletier/go-toml@v1.9.5 ([#&#8203;7932](https://github.com/containerd/containerd/pull/7932))
-   archive: improve TestSourceDateEpoch ([#&#8203;7927](https://github.com/containerd/containerd/pull/7927))
-   Add tracing plugin test ([#&#8203;7883](https://github.com/containerd/containerd/pull/7883))
-   docs/content-flow: update the description of the content labels  ([#&#8203;7925](https://github.com/containerd/containerd/pull/7925))
-   Add cleanup package for context management during cleanup ([#&#8203;7861](https://github.com/containerd/containerd/pull/7861))
-   Fix race between stream registration and use ([#&#8203;7886](https://github.com/containerd/containerd/pull/7886))
-   Prepare release notes for v1.7.0-beta.2 ([#&#8203;7903](https://github.com/containerd/containerd/pull/7903))
-   Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#&#8203;7892](https://github.com/containerd/containerd/pull/7892))
-   contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#&#8203;7891](https://github.com/containerd/containerd/pull/7891))
-   docs: fix a typo in tracing documentation ([#&#8203;7914](https://github.com/containerd/containerd/pull/7914))
-   CI: Pass GITHUB_TOKEN to containerd/project-checks ([#&#8203;7913](https://github.com/containerd/containerd/pull/7913))
-   Enable dupword linter ([#&#8203;7911](https://github.com/containerd/containerd/pull/7911))
-   ctr: Add platform flag to 'oci spec' command ([#&#8203;7905](https://github.com/containerd/containerd/pull/7905))
-   Vagrantfile: fix disk resize error with VirtualBox ([#&#8203;7907](https://github.com/containerd/containerd/pull/7907))
-   Vagrantfile: fix comments about SELinux ([#&#8203;7908](https://github.com/containerd/containerd/pull/7908))
-   Use the const labels.LabelUncompressed ([#&#8203;7906](https://github.com/containerd/containerd/pull/7906))
-   \[sandbox] Add sandbox store plugin type ([#&#8203;7850](https://github.com/containerd/containerd/pull/7850))
-   Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts ([#&#8203;7893](https://github.com/containerd/containerd/pull/7893))
-   CRI: Comment cleanup/misc fixes ([#&#8203;7904](https://github.com/containerd/containerd/pull/7904))
-   Move snapshot event publishing into metadata store ([#&#8203;5674](https://github.com/containerd/containerd/pull/5674))
-   Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#&#8203;7887](https://github.com/containerd/containerd/pull/7887))
-   reused package errdefs for error ([#&#8203;7894](https://github.com/containerd/containerd/pull/7894))
-   integration/images: switch away from Docker Hub to avoid rate limit ([#&#8203;7888](https://github.com/containerd/containerd/pull/7888))
-   Validate userns container config is consistent with sandbox userns config ([#&#8203;7882](https://github.com/containerd/containerd/pull/7882))
-   `ctr contents ls` sorts the labels of the content ([#&#8203;7881](https://github.com/containerd/containerd/pull/7881))
-   chore: use `go fix` to cleanup old +build buildtag ([#&#8203;7879](https://github.com/containerd/containerd/pull/7879))
-   cri: Shadow variables to avoid t.Parallel() issues ([#&#8203;7880](https://github.com/containerd/containerd/pull/7880))
-   Add support for user namespaces in stateless pods (KEP-127) ([#&#8203;7679](https://github.com/containerd/containerd/pull/7679))
-   Refactor metastore transaction ([#&#8203;7529](https://github.com/containerd/containerd/pull/7529))
-   oci: appendOSMounts(): remove unused error, and move ([#&#8203;7874](https://github.com/containerd/containerd/pull/7874))
-   add kube v1.26: remove v1alph2 cri support ([#&#8203;7863](https://github.com/containerd/containerd/pull/7863))
-   make runc 1.1 for oss_fuzz_build.sh ([#&#8203;7875](https://github.com/containerd/containerd/pull/7875))
-   CRI sbserver: Prevent server reuse after Shutdown ([#&#8203;7872](https://github.com/containerd/containerd/pull/7872))
-   Fix incorrect defer usage and refactor judgement ([#&#8203;7521](https://github.com/containerd/containerd/pull/7521))
-   oci: Add WithDomainname ([#&#8203;7869](https://github.com/containerd/containerd/pull/7869))
-   Reused errdefs define error ([#&#8203;7871](https://github.com/containerd/containerd/pull/7871))
-   fix `ctr tasks kill` does not remove cni network under windows ([#&#8203;7866](https://github.com/containerd/containerd/pull/7866))
-   add network plugin metrics ([#&#8203;7858](https://github.com/containerd/containerd/pull/7858))
-   Avoid using canceled context in unpacker cleanup ([#&#8203;7859](https://github.com/containerd/containerd/pull/7859))
-   image/label: print more characters of label keys ([#&#8203;7618](https://github.com/containerd/containerd/pull/7618))
-   prevent Server reuse after a Shutdown ([#&#8203;7165](https://github.com/containerd/containerd/pull/7165))
-   Check containerd's readiness before calling critest ([#&#8203;7851](https://github.com/containerd/containerd/pull/7851))
-   Fix grammatical errors in Readme ([#&#8203;7837](https://github.com/containerd/containerd/pull/7837))
-   Fix cpu architecture detection issue on linux/arm ([#&#8203;7636](https://github.com/containerd/containerd/pull/7636))
-   CRI: Fix no CNI info for pod sandbox on restart ([#&#8203;7845](https://github.com/containerd/containerd/pull/7845))
-   Enable checkRename test ([#&#8203;7081](https://github.com/containerd/containerd/pull/7081))
-   metastore: Add WithTransaction convenience method ([#&#8203;7781](https://github.com/containerd/containerd/pull/7781))
-   Prevent a race condition in testHook ([#&#8203;7831](https://github.com/containerd/containerd/pull/7831))
-   cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#&#8203;7836](https://github.com/containerd/containerd/pull/7836))
-   go.mod: update fuzz-headers and fuzz-build ([#&#8203;7824](https://github.com/containerd/containerd/pull/7824))
-   Remove github.com/gogo/protobuf again ([#&#8203;7825](https://github.com/containerd/containerd/pull/7825))
-   CRI: Add host networking helper ([#&#8203;7814](https://github.com/containerd/containerd/pull/7814))
-   Support sandbox shutdown in shim runtimes ([#&#8203;7792](https://github.com/containerd/containerd/pull/7792))
-   move up to CRI-TOOLS v1.26.0 ([#&#8203;7818](https://github.com/containerd/containerd/pull/7818))
-   Minor fix when querying pod sandbox status ([#&#8203;7812](https://github.com/containerd/containerd/pull/7812))
-   nil check to avoid panic on upgrade ([#&#8203;7809](https://github.com/containerd/containerd/pull/7809))
-   Bump grpc to v1.51.0 ([#&#8203;7709](https://github.com/containerd/containerd/pull/7709))
-   fatal error: concurrent map iteration and map write ([#&#8203;7805](https://github.com/containerd/containerd/pull/7805))
-   Bump golangci-lint to v1.50.1 ([#&#8203;7804](https://github.com/containerd/containerd/pull/7804))
-   cri: make swapping disabled with memory limit ([#&#8203;7783](https://github.com/containerd/containerd/pull/7783))
-   add metrics for image pulling: error; in progress count; thoughput  ([#&#8203;7313](https://github.com/containerd/containerd/pull/7313))
-   Prepare release notes for v1.7.0-beta.1 ([#&#8203;7793](https://github.com/containerd/containerd/pull/7793))
-   support fetching containerd from non public GCS buckets ([#&#8203;7771](https://github.com/containerd/containerd/pull/7771))
-   images: support specifying SourceDateEpoch via ctx ([#&#8203;7651](https://github.com/containerd/containerd/pull/7651))
-   fuzzing: improve archive fuzzer ([#&#8203;7718](https://github.com/containerd/containerd/pull/7718))
-   fix sdNotify func when debug level ([#&#8203;7798](https://github.com/containerd/containerd/pull/7798))
-   Upgrade GitHub actions packages in release workflow ([#&#8203;7794](https://github.com/containerd/containerd/pull/7794))
-   Enable GitHub Actions local Linux CI runs ([#&#8203;7796](https://github.com/containerd/containerd/pull/7796))
-   integration: increase timeout in container_event_test.go ([#&#8203;7791](https://github.com/containerd/containerd/pull/7791))
-   digest: use github.com/minio/sha256-simd ([#&#8203;7732](https://github.com/containerd/containerd/pull/7732))
-   allow client to remove created tasks with PID 0 ([#&#8203;7787](https://github.com/containerd/containerd/pull/7787))
-   Add container event support to containerd ([#&#8203;7073](https://github.com/containerd/containerd/pull/7073))
-   docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#&#8203;7786](https://github.com/containerd/containerd/pull/7786))
-   fix: check for tmpfs when evaluating if userxattr is needed ([#&#8203;7772](https://github.com/containerd/containerd/pull/7772))
-   Pass TOML configuration options for runtimes CRI is not aware of ([#&#8203;7764](https://github.com/containerd/containerd/pull/7764))
-   Cleanup build constraints ([#&#8203;7776](https://github.com/containerd/containerd/pull/7776))
-   There is no way to disable debug endpoint on Darwin ([#&#8203;7775](https://github.com/containerd/containerd/pull/7775))
-   CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#&#8203;7777](https://github.com/containerd/containerd/pull/7777))
-   vendor: golang.org/x/net v0.4.0 ([#&#8203;7774](https://github.com/containerd/containerd/pull/7774))
-   Fix context when waiting sandbox ([#&#8203;7773](https://github.com/containerd/containerd/pull/7773))
-   Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9)
-   update to go1.19.4, go1.18.9 ([#&#8203;7765](https://github.com/containerd/containerd/pull/7765))
-   Change PushContent to require only Provider ([#&#8203;7763](https://github.com/containerd/containerd/pull/7763))
-   sbserver bug fixing ([#&#8203;7768](https://github.com/containerd/containerd/pull/7768))
-   Add unit test to Opentelemetry tracing ([#&#8203;7671](https://github.com/containerd/containerd/pull/7671))
-   remove some (aliases for) deprecated functions ([#&#8203;7525](https://github.com/containerd/containerd/pull/7525))
-   Refactor ctr restore to allow for tty allocation ([#&#8203;7673](https://github.com/containerd/containerd/pull/7673))
-   fix panic when containerd-stress density --count 0 ([#&#8203;7748](https://github.com/containerd/containerd/pull/7748))
-   Unwrap proto errors in streaming client ([#&#8203;7753](https://github.com/containerd/containerd/pull/7753))
-   Fix process_vm_\* syscall names in seccomp ([#&#8203;7755](https://github.com/containerd/containerd/pull/7755))
-   upgrade the ops.md output for current 1.7 version . ([#&#8203;7747](https://github.com/containerd/containerd/pull/7747))
-   docs: Add extra security instructions ([#&#8203;7743](https://github.com/containerd/containerd/pull/7743))
-   go.mod: re-vendor NRI from the official repo. ([#&#8203;7744](https://github.com/containerd/containerd/pull/7744))
-   \[Sandbox API] CRI status cleanup ([#&#8203;7731](https://github.com/containerd/containerd/pull/7731))
-   Transfer service ([#&#8203;7320](https://github.com/containerd/containerd/pull/7320))
-   NRI: add support for NRI with extended scope. ([#&#8203;6019](https://github.com/containerd/containerd/pull/6019))
-   archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#&#8203;7710](https://github.com/containerd/containerd/pull/7710))
-   Fix order of operations when setting lease labels ([#&#8203;7702](https://github.com/containerd/containerd/pull/7702))
-   Add ctr image prune command ([#&#8203;7730](https://github.com/containerd/containerd/pull/7730))
-   Check for nullptr before dereferencing ([#&#8203;7708](https://github.com/containerd/containerd/pull/7708))
-   use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#&#8203;7736](https://github.com/containerd/containerd/pull/7736))
-   introspection: expose the daemon's PID and PIDNS ([#&#8203;7694](https://github.com/containerd/containerd/pull/7694))
-   reference/docker: synchronize fork with upstream distribution/distribution ([#&#8203;7635](https://github.com/containerd/containerd/pull/7635))
-   go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#&#8203;7721](https://github.com/containerd/containerd/pull/7721))
-   Add ptrace readby and tracedby to default AppArmor profile ([#&#8203;7714](https://github.com/containerd/containerd/pull/7714))
-   Fix sandbox API when calling sandboxed shims ([#&#8203;7684](https://github.com/containerd/containerd/pull/7684))
-   make status more readable and update easy. ([#&#8203;7669](https://github.com/containerd/containerd/pull/7669))
-   integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#&#8203;7720](https://github.com/containerd/containerd/pull/7720))
-   Resolve warnings in Windows GitHub Actions periodic workflows ([#&#8203;7706](https://github.com/containerd/containerd/pull/7706))
-   Sandbox API: implement Controller.Status for SandboxAPI ([#&#8203;7470](https://github.com/containerd/containerd/pull/7470))
-   \[port [#&#8203;5904](https://github.com/containerd/containerd/issues/5904) to sbserver] Setup pod network after creating the sandbox container ([#&#8203;7426](https://github.com/containerd/containerd/pull/7426))
-   fix for OSS-Fuzz infra changes ([#&#8203;7677](https://github.com/containerd/containerd/pull/7677))
-   runtime/v2/shim: clean up the use of containerdBinary ([#&#8203;7499](https://github.com/containerd/containerd/pull/7499))
-   Add process_vm read and write calls to default seccomp profile ([#&#8203;7693](https://github.com/containerd/containerd/pull/7693))
-   Resolve Scorecards GitHub Actions workflow warnings ([#&#8203;7707](https://github.com/containerd/containerd/pull/7707))
-   cri: add pod uid annotation ([#&#8203;7697](https://github.com/containerd/containerd/pull/7697))
-   Missed out `platform interface` when reused the conn for Client. ([#&#8203;7699](https://github.com/containerd/containerd/pull/7699))
-   overlayfs: remove duplicated tx rollback ([#&#8203;7700](https://github.com/containerd/containerd/pull/7700))
-   go.mod: update some dependencies ([#&#8203;7704](https://github.com/containerd/containerd/pull/7704))
-   update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#&#8203;7705](https://github.com/containerd/containerd/pull/7705))
-   Fsnotify bump and change code ([#&#8203;7703](https://github.com/containerd/containerd/pull/7703))
-   fix build containerd in centos9 ([#&#8203;7683](https://github.com/containerd/containerd/pull/7683))
-   Bump urfave-cli to v1.22.10 ([#&#8203;7701](https://github.com/containerd/containerd/pull/7701))
-   can set up the network serially by CNI plugins ([#&#8203;7685](https://github.com/containerd/containerd/pull/7685))
-   Update cri-api dependency to v0.26.0-beta.0 ([#&#8203;7656](https://github.com/containerd/containerd/pull/7656))
-   overlay: Remove unused method param ([#&#8203;7696](https://github.com/containerd/containerd/pull/7696))
-   CI: update Fedora to 37 ([#&#8203;7691](https://github.com/containerd/containerd/pull/7691))
-   tx rollback when GetInfo return error ([#&#8203;7678](https://github.com/containerd/containerd/pull/7678))
-   Upgrade github.com/containerd/cgroups from v1 to v3 ([#&#8203;7601](https://github.com/containerd/containerd/pull/7601))
-   Remove OpenTelementry imports from remotes/docker package ([#&#8203;7675](https://github.com/containerd/containerd/pull/7675))
-   Expose Done and Err in Shutdown service ([#&#8203;7686](https://github.com/containerd/containerd/pull/7686))
-   gotestsum match go version 1.19 ([#&#8203;7688](https://github.com/containerd/containerd/pull/7688))
-   complement sub-command note for containerd-main ([#&#8203;7670](https://github.com/containerd/containerd/pull/7670))
-   keep the lower case letter for flag info ([#&#8203;7668](https://github.com/containerd/containerd/pull/7668))
-   bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a) ([#&#8203;7666](https://github.com/containerd/containerd/pull/7666))
-   Fix broken link for CRI plugin in docs ([#&#8203;7667](https://github.com/containerd/containerd/pull/7667))
-   add option to resolve symlinks in WithLinuxDevice ([#&#8203;7523](https://github.com/containerd/containerd/pull/7523))
-   Bump k8s.io deps to v0.25.4 ([#&#8203;7663](https://github.com/containerd/containerd/pull/7663))
-   Release: add static binaries ([#&#8203;7659](https://github.com/containerd/containerd/pull/7659))
-   Bump OpenTelemetry contrib to v0.36.4 ([#&#8203;7662](https://github.com/containerd/containerd/pull/7662))
-   Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#&#8203;7661](https://github.com/containerd/containerd/pull/7661))
-   Bump OpenTelemetry to v1.11.1 ([#&#8203;7660](https://github.com/containerd/containerd/pull/7660))
-   feature: add gc scheduler metrics collection count ([#&#8203;5263](https://github.com/containerd/containerd/pull/5263))
-   Add `--debug` args to all subcommands of `ctr pprof` ([#&#8203;7629](https://github.com/containerd/containerd/pull/7629))
-   Add a thin wrapper around otel Span object ([#&#8203;7655](https://github.com/containerd/containerd/pull/7655))
-   Bump grpc to v1.50.1 ([#&#8203;7643](https://github.com/containerd/containerd/pull/7643))
-   replace strings.Split(N) for strings.Cut() or alternatives ([#&#8203;7631](https://github.com/containerd/containerd/pull/7631))
-   add oci.WithCPURT ([#&#8203;7642](https://github.com/containerd/containerd/pull/7642))
-   Sandbox API: Add a new mode config for sandbox controller impls ([#&#8203;7590](https://github.com/containerd/containerd/pull/7590))
-   fuzzing: bump go-fuzz-headers ([#&#8203;7625](https://github.com/containerd/containerd/pull/7625))
-   Bump k8s.io deps to v0.25.3 ([#&#8203;7637](https://github.com/containerd/containerd/pull/7637))
-   Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#&#8203;7641](https://github.com/containerd/containerd/pull/7641))
-   Extra documentation for content interfaces ([#&#8203;7640](https://github.com/containerd/containerd/pull/7640))
-   Fix shim socket permissions on Darwin ([#&#8203;7638](https://github.com/containerd/containerd/pull/7638))
-   s390x: build and package s390x bin in release assets ([#&#8203;7614](https://github.com/containerd/containerd/pull/7614))
-   Replace mount fork hack with CLONE_FS ([#&#8203;7513](https://github.com/containerd/containerd/pull/7513))
-   remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#&#8203;7460](https://github.com/containerd/containerd/pull/7460))
-   Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#&#8203;7403](https://github.com/containerd/containerd/pull/7403))
-   Support default hosts.toml configuration ([#&#8203;7607](https://github.com/containerd/containerd/pull/7607))
-   Add tracing spans in CRI image service and pull.go ([#&#8203;7453](https://github.com/containerd/containerd/pull/7453))
-   Fix missing closed fifo ([#&#8203;7604](https://github.com/containerd/containerd/pull/7604))
-   fix comments ([#&#8203;7624](https://github.com/containerd/containerd/pull/7624))
-   docs: add additional info in backport process ([#&#8203;7626](https://github.com/containerd/containerd/pull/7626))
-   go.mod: golang.org/x/\*: use tagged versions ([#&#8203;7621](https://github.com/containerd/containerd/pull/7621))
-   Bump go version to 1.19.3 ([#&#8203;7620](https://github.com/containerd/containerd/pull/7620))
-   ctr export strictly matching ([#&#8203;7615](https://github.com/containerd/containerd/pull/7615))
-   Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#&#8203;7617](https://github.com/containerd/containerd/pull/7617))
-   Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#&#8203;7599](https://github.com/containerd/containerd/pull/7599))
-   overlayutils: Add fastpath for userxattr check ([#&#8203;7611](https://github.com/containerd/containerd/pull/7611))
-   Add sequence diagram for shim runtime v2 ([#&#8203;7606](https://github.com/containerd/containerd/pull/7606))
-   Sandbox API: Move remote impls to /sandbox/proxy ([#&#8203;7600](https://github.com/containerd/containerd/pull/7600))
-   fuzzing: improve archive fuzzer ([#&#8203;7588](https://github.com/containerd/containerd/pull/7588))
-   Retry client connection in  waitForStart ([#&#8203;7537](https://github.com/containerd/containerd/pull/7537))
-   Add Workflow for running critest with Hyper-V Containers on Windows. ([#&#8203;7025](https://github.com/containerd/containerd/pull/7025))
-   Add release notes for v1.7.0-beta.0 ([#&#8203;7575](https://github.com/containerd/containerd/pull/7575))
-   Cleanup sandbox interfaces ([#&#8203;7576](https://github.com/containerd/containerd/pull/7576))
-   Update GitHub actions release workflow set output ([#&#8203;7581](https://github.com/containerd/containerd/pull/7581))
-   Fix LogURI generation-related tests on Windows. ([#&#8203;7569](https://github.com/containerd/containerd/pull/7569))
-   maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#&#8203;7577](https://github.com/containerd/containerd/pull/7577))
-   CRI: implement Controller.Delete for SandboxAPI ([#&#8203;7457](https://github.com/containerd/containerd/pull/7457))
-   Configure CDI registry only on start ([#&#8203;7419](https://github.com/containerd/containerd/pull/7419))
-   update codeql-action to v2 ([#&#8203;7568](https://github.com/containerd/containerd/pull/7568))
-   Add logging related metrics to Containerd CRI plugin ([#&#8203;7546](https://github.com/containerd/containerd/pull/7546))
-   sys: optimize and refactor MkdirAllWithACL() ([#&#8203;7531](https://github.com/containerd/containerd/pull/7531))
-   fix install cni script ([#&#8203;7484](https://github.com/containerd/containerd/pull/7484))
-   Update 1.5 release support timeframe ([#&#8203;7560](https://github.com/containerd/containerd/pull/7560))
-   bump go-fuzz-headers ([#&#8203;7503](https://github.com/containerd/containerd/pull/7503))
-   Add long term stable release branches ([#&#8203;7454](https://github.com/containerd/containerd/pull/7454))
-   fix pusher concurrent close channel ([#&#8203;7473](https://github.com/containerd/containerd/pull/7473))
-   Make tests on GitHub less noisy ([#&#8203;7530](https://github.com/containerd/containerd/pull/7530))
-   containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#&#8203;7541](https://github.com/containerd/containerd/pull/7541))
-   Update required Go version in BUILDING.md ([#&#8203;7544](https://github.com/containerd/containerd/pull/7544))
-   go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#&#8203;7522](https://github.com/containerd/containerd/pull/7522))
-   Use `go env` to determine GOPATH in Makefile. ([#&#8203;7542](https://github.com/containerd/containerd/pull/7542))
-   clean-up "nolint" comments, remove unused ones, update golangci-lint ([#&#8203;7349](https://github.com/containerd/containerd/pull/7349))
-   Don't unmount on Darwin when deleting bundle ([#&#8203;7534](https://github.com/containerd/containerd/pull/7534))
-   Add timeouts to all CI jobs ([#&#8203;7538](https://github.com/containerd/containerd/pull/7538))
-   Vagrantfile: explicitly specify rsync as the shared folder driver ([#&#8203;7539](https://github.com/containerd/containerd/pull/7539))
-   sys: remove unused IsAbs() (windows) ([#&#8203;7527](https://github.com/containerd/containerd/pull/7527))
-   cri: PodSandboxStatus should tolerate missing task ([#&#8203;7535](https://github.com/containerd/containerd/pull/7535))
-   CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#&#8203;7489](https://github.com/containerd/containerd/pull/7489))
-   fix the --no-pivot flag being ignored by `ctr tasks start` ([#&#8203;7519](https://github.com/containerd/containerd/pull/7519))
-   Update the default seccomp to block socket calls to AF_VSOCK ([#&#8203;7510](https://github.com/containerd/containerd/pull/7510))
-   cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#&#8203;7511](https://github.com/containerd/containerd/pull/7511))
-   Stats() shouldn't assume s.container is non-nil ([#&#8203;7517](https://github.com/containerd/containerd/pull/7517))
-   Move up actions versions to prep for NodeJS 12 deprecation ([#&#8203;7516](https://github.com/containerd/containerd/pull/7516))
-   cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#&#8203;7512](https://github.com/containerd/containerd/pull/7512))
-   Updates oci image config to support upstream ArgsEscaped ([#&#8203;7483](https://github.com/containerd/containerd/pull/7483))
-   cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#&#8203;7497](https://github.com/containerd/containerd/pull/7497))
-   Update container with sandbox metadata after NetNS is created ([#&#8203;7481](https://github.com/containerd/containerd/pull/7481))
-   archive: add WithSourceDateEpoch() for whiteouts ([#&#8203;7478](https://github.com/containerd/containerd/pull/7478))
-   TestTaskResize must use a terminal ([#&#8203;7492](https://github.com/containerd/containerd/pull/7492))
-   diff/apply.readCounter: check negative size ([#&#8203;7494](https://github.com/containerd/containerd/pull/7494))
-   Add new ctr option for discarding unpacked layers ([#&#8203;7425](https://github.com/containerd/containerd/pull/7425))
-   archive: windows: chtimes(): remove redundant conversion ([#&#8203;7491](https://github.com/containerd/containerd/pull/7491))
-   archive: validate digests before use ([#&#8203;7488](https://github.com/containerd/containerd/pull/7488))
-   vendor: github.com/opencontainers/selinux v1.10.2 ([#&#8203;7482](https://github.com/containerd/containerd/pull/7482))
-   fuzzing: create structured tar bytes in archive fuzzer ([#&#8203;7477](https://github.com/containerd/containerd/pull/7477))
-   Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#&#8203;7474](https://github.com/containerd/containerd/pull/7474))
-   use raw link to containerd.service config ([#&#8203;7463](https://github.com/containerd/containerd/pull/7463))
-   cri doc: Update kata containers reference ([#&#8203;7466](https://github.com/containerd/containerd/pull/7466))
-   Setup pod network after creating the sandbox container ([#&#8203;5904](https://github.com/containerd/containerd/pull/5904))
-   Swap to net.ErrClosed checks for services ([#&#8203;7446](https://github.com/containerd/containerd/pull/7446))
-   go.mod: Bump go-winio to v0.6.0 ([#&#8203;7443](https://github.com/containerd/containerd/pull/7443))
-   fix retry when writer is reset on push ([#&#8203;6995](https://github.com/containerd/containerd/pull/6995))
-   CI: Output a summary using GITHUB_SUMMARY ([#&#8203;7192](https://github.com/containerd/containerd/pull/7192))
-   Fix missing close ([#&#8203;7430](https://github.com/containerd/containerd/pull/7430))
-   Add test flag for skipping shim cgroup test ([#&#8203;7424](https://github.com/containerd/containerd/pull/7424))
-   Refactor CRI fuzzers ([#&#8203;7405](https://github.com/containerd/containerd/pull/7405))
-   Fix LogURIGenerator on Windows ([#&#8203;7351](https://github.com/containerd/containerd/pull/7351))
-   Set grpc code for unimplemented cri-api methods ([#&#8203;7417](https://github.com/containerd/containerd/pull/7417))
-   Add reader option to local content reader at ([#&#8203;7414](https://github.com/containerd/containerd/pull/7414))
-   Sandbox API: implement Controller.Wait and Controller.Stop ([#&#8203;7401](https://github.com/containerd/containerd/pull/7401))
-   remove stray .zuul.yaml ([#&#8203;7416](https://github.com/containerd/containerd/pull/7416))
-   reference CDI configuration details ([#&#8203;7408](https://github.com/containerd/containerd/pull/7408))
-   cri-integration: propagate ENABLE_CRI_SANDBOXES ([#&#8203;7413](https://github.com/containerd/containerd/pull/7413))
-   Enable OpenSSF Scorecard Github Action ([#&#8203;7404](https://github.com/containerd/containerd/pull/7404))
-   Add ext2 fs support to devmapper snapshotter ([#&#8203;7402](https://github.com/containerd/containerd/pull/7402))
-   Fuzzing: Instrument with new sanitizers ([#&#8203;7396](https://github.com/containerd/containerd/pull/7396))
-   Upgrade fuzzing-related packages to reduce dependencies ([#&#8203;7397](https://github.com/containerd/containerd/pull/7397))
-   remotes/docker/config: Skipping TLS verification for localhost ([#&#8203;7393](https://github.com/containerd/containerd/pull/7393))
-   Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#&#8203;7395](https://github.com/containerd/containerd/pull/7395))
-   Add NoSameOwner option when unpacking tars ([#&#8203;7386](https://github.com/containerd/containerd/pull/7386))
-   ctr: add privileged-without-host-devices for run command ([#&#8203;7328](https://github.com/containerd/containerd/pull/7328))
-   chore: matching the casing of other flags for ctr's pull command ([#&#8203;7341](https://github.com/containerd/containerd/pull/7341))
-   windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#&#8203;6901](https://github.com/containerd/containerd/pull/6901))
-   Fix missing close ([#&#8203;7370](https://github.com/containerd/containerd/pull/7370))
-   CRI: update cdi version to v0.5.1 ([#&#8203;7374](https://github.com/containerd/containerd/pull/7374))
-   Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#&#8203;7372](https://github.com/containerd/containerd/pull/7372))
-   vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#&#8203;7373](https://github.com/containerd/containerd/pull/7373))
-   Remove unused variable from images action ([#&#8203;7371](https://github.com/containerd/containerd/pull/7371))
-   feature: use client default namespace ([#&#8203;7291](https://github.com/containerd/containerd/pull/7291))
-   integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#&#8203;7367](https://github.com/containerd/containerd/pull/7367))
-   feature: upgrade registry.k8s.io/pause version ([#&#8203;7359](https://github.com/containerd/containerd/pull/7359))
-   metrics/cgroups/v1: Remove unused event parameter ([#&#8203;7361](https://github.com/containerd/containerd/pull/7361))
-   .zuul: remove the zuul because it is offline ([#&#8203;7369](https://github.com/containerd/containerd/pull/7369))
-   Update golangci-lint timeout to match config ([#&#8203;7356](https://github.com/containerd/containerd/pull/7356))
-   delete redundent import alias and and type conversion ([#&#8203;7345](https://github.com/containerd/containerd/pull/7345))
-   Make checkContainerTimestamps less strict on Windows ([#&#8203;7350](https://github.com/containerd/containerd/pull/7350))
-   Make oss-fuzz mandatory ([#&#8203;7346](https://github.com/containerd/containerd/pull/7346))
-   Add kubernetes v1.25 supported version as v1.24 ([#&#8203;7326](https://github.com/containerd/containerd/pull/7326))
-   sys: move ForceRemoveAll to integration/client ([#&#8203;7335](https://github.com/containerd/containerd/pull/7335))
-   chore: remove duplicate word in comments ([#&#8203;7338](https://github.com/containerd/containerd/pull/7338))
-   Use ioctl helpers from x/sys/unix ([#&#8203;7342](https://github.com/containerd/containerd/pull/7342))
-   archive: replace tarName() with filepath.ToSlash() ([#&#8203;7344](https://github.com/containerd/containerd/pull/7344))
-   mount: remove unused ErrNotImplementOnWindows ([#&#8203;7339](https://github.com/containerd/containerd/pull/7339))
-   replace sys Sequential funcs with moby/sys/sequential ([#&#8203;7334](https://github.com/containerd/containerd/pull/7334))
-   Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#&#8203;7324](https://github.com/containerd/containerd/pull/7324))
-   update runc binary to v1.1.4 ([#&#8203;7315](https://github.com/containerd/containerd/pull/7315))
-   Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#&#8203;7325](https://github.com/containerd/containerd/pull/7325))
-   Update k8s.io/cri-api to v0.25.0 ([#&#8203;7287](https://github.com/containerd/containerd/pull/7287))
-   script/setup: handle cnidir with SUDO ([#&#8203;7322](https://github.com/containerd/containerd/pull/7322))
-   ContainerStatus to return container resources ([#&#8203;6517](https://github.com/containerd/containerd/pull/6517))
-   migrate from k8s.gcr.io to registry.k8s.io ([#&#8203;7038](https://github.com/containerd/containerd/pull/7038))
-   Do not rename test files on-the-fly to share functions ([#&#8203;7309](https://github.com/containerd/containerd/pull/7309))
-   ctr import: strictly match platform ([#&#8203;6906](https://github.com/containerd/containerd/pull/6906))
-   Revert "Downgrade MinGW to version 10.2.0" ([#&#8203;7308](https://github.com/containerd/containerd/pull/7308))
-   Follow up [#&#8203;7254](https://github.com/containerd/containerd/issues/7254) (Switch to Go 1.19) ([#&#8203;7286](https://github.com/containerd/containerd/pull/7286))
-   Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#&#8203;7304](https://github.com/containerd/containerd/pull/7304))
-   Adding support of CAP_BPF and CAP_PERFMON ([#&#8203;7301](https://github.com/containerd/containerd/pull/7301))
-   go.mod: Bump hcsshim to v0.10.0-rc.1 ([#&#8203;7284](https://github.com/containerd/containerd/pull/7284))
-   Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#&#8203;7306](https://github.com/containerd/containerd/pull/7306))
-   ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#&#8203;7293](https://github.com/containerd/containerd/pull/7293))
-   Runtime cleanup (Shim manager and task service) ([#&#8203;7280](https://github.com/containerd/containerd/pull/7280))
-   containerd-stress: add support for running through CRI ([#&#8203;6931](https://github.com/containerd/containerd/pull/6931))
-   Switch to Go 1.19 ([#&#8203;7254](https://github.com/containerd/containerd/pull/7254))
-   Vagrantfile: dump containerd log after critest ([#&#8203;7265](https://github.com/containerd/containerd/pull/7265))
-   oci: skip checking group id for WithAppendAdditionalGroups ([#&#8203;7257](https://github.com/containerd/containerd/pull/7257))
-   release workflow: increase timeout to 30 minutes & remove Go setup action ([#&#8203;7259](https://github.com/containerd/containerd/pull/7259))
-   release: rollback Ubuntu to 18.04 (except for riscv64) ([#&#8203;7258](https://github.com/containerd/containerd/pull/7258))
-   Initial sandbox API CRI integration (implement Controller.Start) ([#&#8203;7228](https://github.com/containerd/containerd/pull/7228))
-   Use environment variable to specify Go version on CI ([#&#8203;7251](https://github.com/containerd/containerd/pull/7251))
-   Update golang to 1.18.5, 1.17.13 ([#&#8203;7243](https://github.com/containerd/containerd/pull/7243))
-   Change os.Stderr reassign for Windows service ([#&#8203;7023](https://github.com/containerd/containerd/pull/7023))
-   script/setup: fix protobuf for aarch64 ([#&#8203;7237](https://github.com/containerd/containerd/pull/7237))
-   Fix cleanup in critest ([#&#8203;7232](https://github.com/containerd/containerd/pull/7232))
-   fix: support simultaneous create diff for same parent snapshot ([#&#8203;7204](https://github.com/containerd/containerd/pull/7204))
-   Windows HostProcess container CRI stats test ([#&#8203;7223](https://github.com/containerd/containerd/pull/7223))
-   Regenerate protos with updated protoc-gen-go ([#&#8203;7226](https://github.com/containerd/containerd/pull/7226))
-   test: error strings should not be capitalized ([#&#8203;7195](https://github.com/containerd/containerd/pull/7195))
-   Add extra context to error when push unauthorized ([#&#8203;7220](https://github.com/containerd/containerd/pull/7220))
-   replace with selinux label ([#&#8203;7207](https://github.com/containerd/containerd/pull/7207))
-   Use `httputil.DumpRequestOut` for dumping client req ([#&#8203;7221](https://github.com/containerd/containerd/pull/7221))
-   Fix CRI image pull timeout test for ppc64le ([#&#8203;7215](https://github.com/containerd/containerd/pull/7215))
-   test: introduce failpoint control to runc-shimv2 and cni ([#&#8203;7069](https://github.com/containerd/containerd/pull/7069))
-   chore: bump macos runner version ([#&#8203;7206](https://github.com/containerd/containerd/pull/7206))
-   Use image lists form integration/client tests ([#&#8203;7210](https://github.com/containerd/containerd/pull/7210))
-   go.mod: Bump hcsshim to v0.9.4 ([#&#8203;7212](https://github.com/containerd/containerd/pull/7212))
-   Drop deprecated `ioutil` ([#&#8203;7203](https://github.com/containerd/containerd/pull/7203))
-   Make getServicesOpts a helper ([#&#8203;7201](https://github.com/containerd/containerd/pull/7201))
-   adds an env var commented out for sandboxed mode ([#&#8203;7183](https://github.com/containerd/containerd/pull/7183))
-   cri_stats: handle missing cpu stats ([#&#8203;7198](https://github.com/containerd/containerd/pull/7198))
-   using ContextDialer instead ([#&#8203;7189](https://github.com/containerd/containerd/pull/7189))
-   test: Add ability to switch between  cgroupv1 or cgroupv2 for node e2e ([#&#8203;7173](https://github.com/containerd/containerd/pull/7173))
-   code cleanup ([#&#8203;7182](https://github.com/containerd/containerd/pull/7182))
-   Update k8s.io/cri-api to v0.25.0-alpha2 ([#&#8203;7114](https://github.com/containerd/containerd/pull/7114))
-   Refactor usageNanoCores be to used for all OSes ([#&#8203;7186](https://github.com/containerd/containerd/pull/7186))
-   adds support for using env file for systemd boot ([#&#8203;7191](https://github.com/containerd/containerd/pull/7191))
-   go.mod: github.com/stretchr/testify v1.8.0 ([#&#8203;7185](https://github.com/containerd/containerd/pull/7185))
-   ctr: support --user for run/create ([#&#8203;7145](https://github.com/containerd/containerd/pull/7145))
-   docs: Fix sample config.toml syntax ([#&#8203;7174](https://github.com/containerd/containerd/pull/7174))
-   seccomp: seccomp: add syscalls related to PKU in default policy ([#&#8203;7163](https://github.com/containerd/containerd/pull/7163))
-   Update and align golangci-lint version ([#&#8203;7168](https://github.com/containerd/containerd/pull/7168))
-   adds a comment explaining how to disable experimental sbserver ([#&#8203;7169](https://github.com/containerd/containerd/pull/7169))
-   ci: workaround Cirrus CI's INVALID_ARGUMENT ([#&#8203;7177](https://github.com/containerd/containerd/pull/7177))
-   Update install-protobuf script  to install protobuf on Darwin ([#&#8203;7153](https://github.com/containerd/containerd/pull/7153))
-   Fork CRI server for Sandbox API integration work ([#&#8203;7164](https://github.com/containerd/containerd/pull/7164))
-   seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#&#8203;7167](https://github.com/containerd/containerd/pull/7167))
-   cri doc: fix formatting for CDI options ([#&#8203;7158](https://github.com/containerd/containerd/pull/7158))
-   update golang to 1.18.4, 1.17.12 ([#&#8203;7159](https://github.com/containerd/containerd/pull/7159))
-   Fix out of date comments for CRI store packages ([#&#8203;7152](https://github.com/containerd/containerd/pull/7152))
-   update some devmapper docs ([#&#8203;7124](https://github.com/containerd/containerd/pull/7124))
-   seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#&#8203;7149](https://github.com/containerd/containerd/pull/7149))
-   Copy fuzzers from github.com/cncf/cncf-fuzzing ([#&#8203;7123](https://github.com/containerd/containerd/pull/7123))
-   fix can't edit object by using ctr content edit command ([#&#8203;6847](https://github.com/containerd/containerd/pull/6847))
-   integration/client: fix typo in export_test.go ([#&#8203;7130](https://github.com/containerd/containerd/pull/7130))
-   Fix WWW-Authenticate parsing ([#&#8203;7126](https://github.com/containerd/containerd/pull/7126))
-   LCOW differ return ErrNotImplemented for wrong mount type ([#&#8203;7112](https://github.com/containerd/containerd/pull/7112))
-   Update go-restful/v3 to latest release ([#&#8203;7117](https://github.com/containerd/containerd/pull/7117))
-   pkg/cri: use marshal wrapper for version convertor ([#&#8203;7108](https://github.com/containerd/containerd/pull/7108))
-   Remove hacks around contrib/fuzz ([#&#8203;7087](https://github.com/containerd/containerd/pull/7087))
-   Fix missing closed HTTP Body ([#&#8203;7107](https://github.com/containerd/containerd/pull/7107))
-   Cleanup metadata tests ([#&#8203;7105](https://github.com/containerd/containerd/pull/7105))
-   Downgrade MinGW to version 10.2.0 ([#&#8203;7106](https://github.com/containerd/containerd/pull/7106))
-   ctr: Fix `ctr c create` fails to parse arguments ([#&#8203;7098](https://github.com/containerd/containerd/pull/7098))
-   Fix Documentation Issue ([#&#8203;7103](https://github.com/containerd/containerd/pull/7103))
-   refactor: reduce duplicate code ([#&#8203;7100](https://github.com/containerd/containerd/pull/7100))
-   make xattr EPERM non-fatal in createTarFile ([#&#8203;7094](https://github.com/containerd/containerd/pull/7094))
-   Move metadata plugin registration to seperate package ([#&#8203;7096](https://github.com/containerd/containerd/pull/7096))
-   fix: missing sudo for devmapper doc ([#&#8203;7092](https://github.com/containerd/containerd/pull/7092))
-   Ensure Windows Periodic workflow errors out while still uploading results. ([#&#8203;7085](https://github.com/containerd/containerd/pull/7085))
-   Add snapshotter key to snapshot events ([#&#8203;7084](https://github.com/containerd/containerd/pull/7084))
-   add WithAdditionalGIDs test ([#&#8203;7072](https://github.com/containerd/containerd/pull/7072))
-   Forward ctr snapshotter flags on Windows ([#&#8203;7086](https://github.com/containerd/containerd/pull/7086))
-   add WithAppendAdditionalGroups helper ([#&#8203;7070](https://github.com/containerd/containerd/pull/7070))
-   Make CI Fuzz less noisy ([#&#8203;7065](https://github.com/containerd/containerd/pull/7065))
-   ctr: add --hostname flag to create, run ([#&#8203;7082](https://github.com/containerd/containerd/pull/7082))
-   improve content-flow ([#&#8203;7077](https://github.com/containerd/containerd/pull/7077))
-   Make CI Fuzz optional ([#&#8203;7067](https://github.com/containerd/containerd/pull/7067))
-   Use Go 1.18's testing.F on simple fuzzers ([#&#8203;7056](https://github.com/containerd/containerd/pull/7056))
-   Downgrade MinGW in Windows setup scripts. ([#&#8203;7062](https://github.com/containerd/containerd/pull/7062))
-   Make test path a constant ([#&#8203;7057](https://github.com/containerd/containerd/pull/7057))
-   Run fuzzers in CI ([#&#8203;7052](https://github.com/containerd/containerd/pull/7052))
-   CRI: Improve the /dev/shm mount options in Sandbox. ([#&#8203;6913](https://github.com/containerd/containerd/pull/6913))
-   fix:userattr-unmount unexpected timeout ([#&#8203;7008](https://github.com/containerd/containerd/pull/7008))
-   Port (some) unit tests to FreeBSD ([#&#8203;7042](https://github.com/containerd/containerd/pull/7042))
-   Bump Golang and MinGW versions in Windows setup script. ([#&#8203;6888](https://github.com/containerd/containerd/pull/6888))
-   Windows snapshotter touch ups and new functionality ([#&#8203;6918](https://github.com/containerd/containerd/pull/6918))
-   Improve naming consistencies in comments in snapshotter.go ([#&#8203;7032](https://github.com/containerd/containerd/pull/7032))
-   Make building static binaries simpler ([#&#8203;7022](https://github.com/containerd/containerd/pull/7022))
-   Allow CRI on Darwin ([#&#8203;7033](https://github.com/containerd/containerd/pull/7033))
-   update runc binary to v1.1.3 ([#&#8203;7034](https://github.com/containerd/containerd/pull/7034))
-   Linux containers on FreeBSD ([#&#8203;7000](https://github.com/containerd/containerd/pull/7000))
-   go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#&#8203;7026](https://github.com/containerd/containerd/pull/7026))
-   fix minor spelling mistake: lablel -> label ([#&#8203;7031](https://github.com/containerd/containerd/pull/7031))
-   go.mod: github.com/containerd/cgroups v1.0.4 ([#&#8203;7027](https://github.com/containerd/containerd/pull/7027))
-   go.mod: github.com/containerd/continuity v0.3.0 ([#&#8203;7028](https://github.com/containerd/containerd/pull/7028))
-   Correct spelling mistake ("sanbdox" to "sandbox") ([#&#8203;7029](https://github.com/containerd/containerd/pull/7029))
-   Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf)
-   Bump grpc to v1.47.0 ([#&#8203;7018](https://github.com/containerd/containerd/pull/7018))
-   Bump k8s.io deps to v0.24.1 ([#&#8203;7017](https://github.com/containerd/containerd/pull/7017))
-   Support runtime level snapshotter for issue 6657 ([#&#8203;6899](https://github.com/containerd/containerd/pull/6899))
-   update golang to 1.18.3, 1.17.11 ([#&#8203;7012](https://github.com/containerd/containerd/pull/7012))
-   Fix containerd-stress duration flag ([#&#8203;7004](https://github.com/containerd/containerd/pull/7004))
-   update go-cni/for cni update fixing plugins that don't respond with version ([#&#8203;7009](https://github.com/containerd/containerd/pull/7009))
-   Add validations for Windows HostProcess CRI configs ([#&#8203;6996](https://github.com/containerd/containerd/pull/6996))
-   Move docker reference logic to reference/docker package ([#&#8203;7007](https://github.com/containerd/containerd/pull/7007))
-   promote pause image to 3.7 (sync with kube v1.24) ([#&#8203;7003](https://github.com/containerd/containerd/pull/7003))
-   Makefile: use urfave_cli_no_docs for binaries that don't need it ([#&#8203;6998](https://github.com/containerd/containerd/pull/6998))
-   CRI: cleanup cri/store package ([#&#8203;6993](https://github.com/containerd/containerd/pull/6993))
-   Use t.Run for /pkg/cri tests ([#&#8203;7001](https://github.com/containerd/containerd/pull/7001))
-   vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#&#8203;6997](https://github.com/containerd/containerd/pull/6997))
-   sandbox: replace github.com/pkg/errors with native errors ([#&#8203;6937](https://github.com/containerd/containerd/pull/6937))
-   build: Fix references to check-protos target in Makefile ([#&#8203;6983](https://github.com/containerd/containerd/pull/6983))
-   ctr: fix label args used in NewContainer ([#&#8203;6954](https://github.com/containerd/containerd/pull/6954))
-   ctr sandbox: handle sandbox config ([#&#8203;6959](https://github.com/containerd/containerd/pull/6959))
-   Fix broken oss-fuzz build ([#&#8203;6975](https://github.com/containerd/containerd/pull/6975))
-   archive: add human-readable hint to Lchown error ([#&#8203;6982](https://github.com/containerd/containerd/pull/6982))
-   Fix tx closed error when upperdirlabel specified ([#&#8203;6978](https://github.com/containerd/containerd/pull/6978))
-   config: improve config v1 deprecation message ([#&#8203;6972](https://github.com/containerd/containerd/pull/6972))
-   Fix Windows install powershell script ([#&#8203;6969](https://github.com/containerd/containerd/pull/6969))
-   fix comments on metadata schema and update namespace doc ([#&#8203;6955](https://github.com/containerd/containerd/pull/6955))
-   adjust format in comment ([#&#8203;6956](https://github.com/containerd/containerd/pull/6956))
-   Restore decompression benchmarks ([#&#8203;6957](https://github.com/containerd/containerd/pull/6957))
-   cmd/ctr/commands/content: fix typo in fetch command usage ([#&#8203;6960](https://github.com/containerd/containerd/pull/6960))
-   fix some confusing typos ([#&#8203;6950](https://github.com/containerd/containerd/pull/6950))
-   update doc url about k8s ([#&#8203;6952](https://github.com/containerd/containerd/pull/6952))
-   Separate windows-2019 and windows-2022 test results ([#&#8203;6946](https://github.com/containerd/containerd/pull/6946))
-   shim: fix debug flag not working ([#&#8203;6910](https://github.com/containerd/containerd/pull/6910))
-   Reverts removal of parallel run from critest ([#&#8203;6938](https://github.com/containerd/containerd/pull/6938))
-   Bump OpenTelemetry dependencies ([#&#8203;6932](https://github.com/containerd/containerd/pull/6932))
-   update runc binary and vendor to v1.1.2 ([#&#8203;6934](https://github.com/containerd/containerd/pull/6934))
-   oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#&#8203;6923](https://github.com/containerd/containerd/pull/6923))
-   update golang to 1.18.2, 1.17.10 ([#&#8203;6926](https://github.com/containerd/containerd/pull/6926))
-   CI: update Fedora to 36 ([#&#8203;6925](https://github.com/containerd/containerd/pull/6925))
-   Add `Wait` to `binaryProcessor` ([#&#8203;6916](https://github.com/containerd/containerd/pull/6916))
-   go.mod: Bump k8s deps to v0.24.0 ([#&#8203;6905](https://github.com/containerd/containerd/pull/6905))
-   (Vagrant CI) Enable git commands due to git CVE fix ([#&#8203;6915](https://github.com/containerd/containerd/pull/6915))
-   Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#&#8203;6912](https://github.com/containerd/containerd/pull/6912))
-   Update critools to v1.24 ([#&#8203;6894](https://github.com/containerd/containerd/pull/6894))
-   devmapper docs: small fixes ([#&#8203;6904](https://github.com/containerd/containerd/pull/6904))
-   move report dir option to end of line for vagrant cri tests ([#&#8203;6900](https://github.com/containerd/containerd/pull/6900))
-   Update Kubernetes version matrix in release docs ([#&#8203;6892](https://github.com/containerd/containerd/pull/6892))
-   Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#&#8203;6889](https://github.com/containerd/containerd/pull/6889))
-   containerd 1.6.4 k8s 1.24 readme announce ([#&#8203;6890](https://github.com/containerd/containerd/pull/6890))
-   Cleanup leaked shim process ([#&#8203;6866](https://github.com/containerd/containerd/pull/6866))
-   Add collectible resources to metadata gc ([#&#8203;6804](https://github.com/containerd/containerd/pull/6804))
-   Update k8 docurl in file ([#&#8203;6881](https://github.com/containerd/containerd/pull/6881))
-   Support RISC-V 64 ([#&#8203;6882](https://github.com/containerd/containerd/pull/6882))
-   docs: minor fixes in snapshots.Snapshotter comments ([#&#8203;6885](https://github.com/containerd/containerd/pull/6885))
-   Officially deprecate Schema 1 ([#&#8203;6884](https://github.com/containerd/containerd/pull/6884))
-   Make Cirrus CI tests more stable ([#&#8203;6880](https://github.com/containerd/containerd/pull/6880))
-   docs: Adding windows installation steps to getting-started.md ([#&#8203;6875](https://github.com/containerd/containerd/pull/6875))
-   Add ctr support for CPUMax and CPUShares ([#&#8203;6809](https://github.com/containerd/containerd/pull/6809))
-   Support for cgroups blockio ([#&#8203;5490](https://github.com/containerd/containerd/pull/5490))
-   Fix comment for metadata/db.go ([#&#8203;6871](https://github.com/containerd/containerd/pull/6871))
-   Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#&#8203;6867](https://github.com/containerd/containerd/pull/6867))
-   Update go-cni to v1.1.5 ([#&#8203;6868](https://github.com/containerd/containerd/pull/6868))
-   Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#&#8203;6865](https://github.com/containerd/containerd/pull/6865))
-   Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#&#8203;6864](https://github.com/containerd/containerd/pull/6864))
-   Don't use "uname -a" as Cirrus CI's cache key ([#&#8203;6863](https://github.com/containerd/containerd/pull/6863))
-   remove duplicate ([#&#8203;6856](https://github.com/containerd/containerd/pull/6856))
-   Create ppc64le release ([#&#8203;6858](https://github.com/containerd/containerd/pull/6858))
-   Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#&#8203;6854](https://github.com/containerd/containerd/pull/6854))
-   feature: support image pull progress timeout ([#&#8203;6150](https://github.com/containerd/containerd/pull/6150))
-   Add unpack interface to be used by client ([#&#8203;6749](https://github.com/containerd/containerd/pull/6749))
-   Fix undefined error in use of errors package ([#&#8203;6855](https://github.com/containerd/containerd/pull/6855))
-   Migrate off from github.com/gogo/protobuf ([#&#8203;6841](https://github.com/containerd/containerd/pull/6841))
-   images/image.go: typo ([#&#8203;6851](https://github.com/containerd/containerd/pull/6851))
-   Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#&#8203;5686](https://github.com/containerd/containerd/pull/5686))
-   integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#&#8203;6180](https://github.com/containerd/containerd/pull/6180))
-   fix incorrect syntax in comments ([#&#8203;6845](https://github.com/containerd/containerd/pull/6845))
-   cri: close fifos when container is deleted ([#&#8203;6842](https://github.com/containerd/containerd/pull/6842))
-   diff: hide types.Any from clients ([#&#8203;6832](https://github.com/containerd/containerd/pull/6832))
-   Add Container-Optimized OS into Adopters ([#&#8203;6838](https://github.com/containerd/containerd/pull/6838))
-   Prepare for google.golang.org/protobuf ([#&#8203;6835](https://github.com/containerd/containerd/pull/6835))
-   fix the restart desired to running when task not found ([#&#8203;6833](https://github.com/containerd/containerd/pull/6833))
-   Remove all gogoproto extensions ([#&#8203;6829](https://github.com/containerd/containerd/pull/6829))
-   fix nil pointer panic for monitor ([#&#8203;6830](https://github.com/containerd/containerd/pull/6830))
-   remotes/docker: log registry URLs as info instead of debug ([#&#8203;5681](https://github.com/containerd/containerd/pull/5681))
-   Rename runtime/v2/task to api/runtime ([#&#8203;6827](https://github.com/containerd/containerd/pull/6827))
-   Fix protoc-gen-go-fieldpath ([#&#8203;6828](https://github.com/containerd/containerd/pull/6828))
-   Consolidate gogo/protobuf dependencies under our own protobuf package ([#&#8203;6826](https://github.com/containerd/containerd/pull/6826))
-   Add restart policy for enhanced restart manager ([#&#8203;6744](https://github.com/containerd/containerd/pull/6744))
-   Remove gogoproto.stdtime ([#&#8203;6821](https://github.com/containerd/containerd/pull/6821))
-   Set timeout when collecting metrics from shim's Stat ([#&#8203;6781](https://github.com/containerd/containerd/pull/6781))
-   Fuzz filter package with Go 1.18's fuzzer ([#&#8203;6819](https://github.com/containerd/containerd/pull/6819))
-   allow ptrace(2) by default for kernel >= 4.8 ([#&#8203;6810](https://github.com/containerd/containerd/pull/6810))
-   Build bin/gen-manpages instead of using "go run" ([#&#8203;6820](https://github.com/containerd/containerd/pull/6820))
-   update golang to 1.18.1, 1.17.9 ([#&#8203;6822](https://github.com/containerd/containerd/pull/6822))
-   Sandbox API ([#&#8203;6703](https://github.com/containerd/containerd/pull/6703))
-   Move lease manager plugin to separate package ([#&#8203;6811](https://github.com/containerd/containerd/pull/6811))
-   fix pool_device_test ([#&#8203;6807](https://github.com/containerd/containerd/pull/6807))
-   check for duplicate nspath possibilities ([#&#8203;6806](https://github.com/containerd/containerd/pull/6806))
-   Do not append \[]string{""} to command to preserve Docker compatibility ([#&#8203;6805](https://github.com/containerd/containerd/pull/6805))
-   tracing: fix panic on startup when configured ([#&#8203;6789](https://github.com/containerd/containerd/pull/6789))
-   Optimize loading performance for cri recover ([#&#8203;6680](https://github.com/containerd/containerd/pull/6680))
-   Change architecture path in README.md ([#&#8203;6798](https://github.com/containerd/containerd/pull/6798))
-   make consistent for checkpoint path ([#&#8203;6792](https://github.com/containerd/containerd/pull/6792))
-   metrics/cgroups: fix deadlock issue in Add during Collect ([#&#8203;6788](https://github.com/containerd/containerd/pull/6788))
-   ADOPTERS: Update AKS Info ([#&#8203;6794](https://github.com/containerd/containerd/pull/6794))
-   Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#&#8203;6790](https://github.com/containerd/containerd/pull/6790))
-   docs: add Deckhouse to the list of adopters ([#&#8203;6785](https://github.com/containerd/containerd/pull/6785))
-   Add `docs/snapshotters`; simplify `docs/cri` ([#&#8203;6778](https://github.com/containerd/containerd/pull/6778))
-   Turn paths from cmdline into absolute paths ([#&#8203;6672](https://github.com/containerd/containerd/pull/6672))
-   CRI: add support for CDI device injection ([#&#8203;6654](https://github.com/containerd/containerd/pull/6654))
-   Disable writing freelist to make the file robust against data corruptions ([#&#8203;6761](https://github.com/containerd/containerd/pull/6761))
-   mv design docs/historical/design ([#&#8203;6777](https://github.com/containerd/containerd/pull/6777))
-   CRI: improve image pulling performance ([#&#8203;6702](https://github.com/containerd/containerd/pull/6702))
-   docs: remove runtime v1; migrate config v1 to v2 ([#&#8203;6776](https://github.com/containerd/containerd/pull/6776))
-   Skip flaky test on Windows ([#&#8203;6779](https://github.com/containerd/containerd/pull/6779))
-   docs/getting-started.md: typo ([#&#8203;6775](https://github.com/containerd/containerd/pull/6775))
-   Add no_tracing tag ([#&#8203;6750](https://github.com/containerd/containerd/pull/6750))
-   Move historical docs to `docs/historical` ([#&#8203;6754](https://github.com/containerd/containerd/pull/6754))
-   Run go mod tidy in integration tests ([#&#8203;6768](https://github.com/containerd/containerd/pull/6768))
-   go.mod: move indirects, and update integration go.mod to 1.18 ([#&#8203;6765](https://github.com/containerd/containerd/pull/6765))
-   Drop gotest.tools ([#&#8203;6762](https://github.com/containerd/containerd/pull/6762))
-   Use t.Setenv instead of os.Setenv ([#&#8203;6760](https://github.com/containerd/containerd/pull/6760))
-   Upgrade to Go 1.18 ([#&#8203;6709](https://github.com/containerd/containerd/pull/6709))
-   Adding multi-arch support for the configure.sh script ([#&#8203;6751](https://github.com/containerd/containerd/pull/6751))
-   docs/getting-started.md: massive update ([#&#8203;6758](https://github.com/containerd/containerd/pull/6758))
-   Remove unmaintained contrib/linuxkit ([#&#8203;6755](https://github.com/containerd/containerd/pull/6755))
-   \[Windows CI] Address some timeout issues ([#&#8203;6757](https://github.com/containerd/containerd/pull/6757))
-   BUILDING.md: update supported Go versions ([#&#8203;6756](https://github.com/containerd/containerd/pull/6756))
-   update runc to 1.1.1 ([#&#8203;6753](https://github.com/containerd/containerd/pull/6753))
-   CI: add Rocky Linux 8 ([#&#8203;6747](https://github.com/containerd/containerd/pull/6747))
-   CI: bump up crun to 1.4.4 ([#&#8203;6748](https://github.com/containerd/containerd/pull/6748))
-   added make help for cri integration ([#&#8203;6743](https://github.com/containerd/containerd/pull/6743))
-   Update README.md cncf landscape url ([#&#8203;6740](https://github.com/containerd/containerd/pull/6740))
-   Fix error message in TestNewBinaryIO ([#&#8203;6738](https://github.com/containerd/containerd/pull/6738))
-   Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#&#8203;6706](https://github.com/containerd/containerd/pull/6706))
-   Use cgroups.AddProc() for cgroups v1 ([#&#8203;5738](https://github.com/containerd/containerd/pull/5738))
-   fix: ctr images mount with snapshotter option can't get snapshotter ([#&#8203;6713](https://github.com/containerd/containerd/pull/6713))
-   cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#&#8203;6323](https://github.com/containerd/containerd/pull/6323))
-   moving up to go-cni v1.1.4 ([#&#8203;6721](https://github.com/containerd/containerd/pull/6721))
-   native: fix deadlock from leaving transactions open ([#&#8203;6722](https://github.com/containerd/containerd/pull/6722))
-   go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#&#8203;5390](https://github.com/containerd/containerd/pull/5390))
-   Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c)
-   runtime: deprecate runc --criu / -criu-path option ([#&#8203;6496](https://github.com/containerd/containerd/pull/6496))
-   Bug fix for mount path handling ([#&#8203;6651](https://github.com/containerd/containerd/pull/6651))
-   Upgrade containerd/imgcrypt and opencontainers/image-spec ([#&#8203;6711](https://github.com/containerd/containerd/pull/6711))
-   Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#&#8203;6708](https://github.com/containerd/containerd/pull/6708))
-   Remove gogoproto.customtype ([#&#8203;6699](https://github.com/containerd/containerd/pull/6699))
-   Skip tty critest testcase on Windows Server 2022 ([#&#8203;6698](https://github.com/containerd/containerd/pull/6698))
-   Build with Go 1.18 ([#&#8203;6605](https://github.com/containerd/containerd/pull/6605))
-   Update prometheus client vendor ([#&#8203;6690](https://github.com/containerd/containerd/pull/6690))
-   vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#&#8203;6687](https://github.com/containerd/containerd/pull/6687))
-   Make the temp mount as ready only in container WithVolumes ([#&#8203;6593](https://github.com/containerd/containerd/pull/6593))
-   fix: `ctr run --cni` get failed ([#&#8203;6670](https://github.com/containerd/containerd/pull/6670))
-   test: use `T.TempDir` to create temporary test directory ([#&#8203;6681](https://github.com/containerd/containerd/pull/6681))
-   Make OpenLab's CI jobs blocking ([#&#8203;6679](https://github.com/containerd/containerd/pull/6679))
-   document log level and format ([#&#8203;6683](https://github.com/containerd/containerd/pull/6683))
-   Add shared content label to namespaces ([#&#8203;6660](https://github.com/containerd/containerd/pull/6660))
-   Add protoc-gen-go-fieldpath ([#&#8203;6562](https://github.com/containerd/containerd/pull/6562))
-   Enable gosec linter for golangci-lint ([#&#8203;6669](https://github.com/containerd/containerd/pull/6669))
-   Make mkfs.xfs available on OpenLab's CI environment ([#&#8203;6668](https://github.com/containerd/containerd/pull/6668))
-   ctr: improve error relative shim path error msg ([#&#8203;6519](https://github.com/containerd/containerd/pull/6519))
-   typo fixes under cmd. ([#&#8203;6674](https://github.com/containerd/containerd/pull/6674))
-   Handle CRI Device.HostPath on Windows ([#&#8203;6618](https://github.com/containerd/containerd/pull/6618))
-   Upgrade golangci-lint and its GitHub Action ([#&#8203;6666](https://github.com/containerd/containerd/pull/6666))
-   Don't build a second copy of containerd-shim-runhcs-v1.exe ([#&#8203;6661](https://github.com/containerd/containerd/pull/6661))
-   Update TestNormalize to only test Windows platform ([#&#8203;6569](https://github.com/containerd/containerd/pull/6569))
-   Fix link in getting-started.md ([#&#8203;6663](https://github.com/containerd/containerd/pull/6663))
-   Fuzzing: refactor metadata fuzzers ([#&#8203;6423](https://github.com/containerd/containerd/pull/6423))
-   Two xfs file systems with same UUID can not be mounted on the same sy… ([#&#8203;6650](https://github.com/containerd/containerd/pull/6650))
-   \[Windows] Fix deadline exceeded in daemon restart ([#&#8203;6635](https://github.com/containerd/containerd/pull/6635))
-   Use temp file for export/import test ([#&#8203;6658](https://github.com/containerd/containerd/pull/6658))
-   strip path-info from `-v` (version) output, and implement -v flag for containerd-shim  ([#&#8203;6495](https://github.com/containerd/containerd/pull/6495))
-   Improve unexpected response error handling in resolver ([#&#8203;6617](https://github.com/containerd/containerd/pull/6617))
-   Use the latest tag for azure images ([#&#8203;6601](https://github.com/containerd/containerd/pull/6601))
-   Run CRI integration tests in GitHub Actions (Windows) ([#&#8203;6626](https://github.com/containerd/containerd/pull/6626))
-   cri: fix integration test on cgroupsv2 system ([#&#8203;6595](https://github.com/containerd/containerd/pull/6595))
-   Use version 2 configuration format in docs/PLUGINS.md ([#&#8203;6613](https://github.com/containerd/containerd/pull/6613))
-   update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#&#8203;6619](https://github.com/containerd/containerd/pull/6619))
-   Update status of 1.4 release ([#&#8203;6614](https://github.com/containerd/containerd/pull/6614))
-   Update TestContainerSymlinkVolumes to use windows path ([#&#8203;6568](https://github.com/containerd/containerd/pull/6568))
-   Add --user support for ctr run Windows ([#&#8203;6603](https://github.com/containerd/containerd/pull/6603))
-   Update releases ([#&#8203;6608](https://github.com/containerd/containerd/pull/6608))
-   Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7)
-   Adds support for Windows ArgsEscaped images ([#&#8203;6479](https://github.com/containerd/containerd/pull/6479))
-   Do not use weak import ([#&#8203;6558](https://github.com/containerd/containerd/pull/6558))
-   cri: relax test for system without hugetlb ([#&#8203;6596](https://github.com/containerd/containerd/pull/6596))
-   Use containerd/protobuild instead of stevvooe/protobuild ([#&#8203;6578](https://github.com/containerd/containerd/pull/6578))
-   integration: remove duplicated util pkg ([#&#8203;6597](https://github.com/containerd/containerd/pull/6597))
-   go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#&#8203;6591](https://github.com/containerd/containerd/pull/6591))
-   Update Go version recommendation in getting started ([#&#8203;6585](https://github.com/containerd/containerd/pull/6585))
-   go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#&#8203;6337](https://github.com/containerd/containerd/pull/6337))
-   fix Implicit memory aliasing in for loop ([#&#8203;6331](https://github.com/containerd/containerd/pull/6331))
-   Fix build with gccgo ([#&#8203;6579](https://github.com/containerd/containerd/pull/6579))
-   Replace golang.org/x/net/context with std library ([#&#8203;6580](https://github.com/containerd/containerd/pull/6580))
-   containerd-shim-runc-v1: return init pid when clean dead shim ([#&#8203;6571](https://github.com/containerd/containerd/pull/6571))
-   Use Windows matcher when on Windows platform in all code paths ([#&#8203;6491](https://github.com/containerd/containerd/pull/6491))
-   containerd-shim-runc-v2: return init pid when clean dead shim ([#&#8203;6452](https://github.com/containerd/containerd/pull/6452))
-   \[Windows]\[Integration] Enable TestRestartMonitor ([#&#8203;6515](https://github.com/containerd/containerd/pull/6515))
-   go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#&#8203;6554](https://github.com/containerd/containerd/pull/6554))

</p>
</details>

##### Changes from containerd/cgroups
<details><summary>49 commits</summary>
<p>

-   Upgrade GitHub actions CI workflow ([#&#8203;249](https://github.com/containerd/cgroups/pull/249))
-   Upgrade Go compiler to 1.19 ([#&#8203;248](https://github.com/containerd/cgroups/pull/248))
-   Don't use ioutil ([#&#8203;246](https://github.com/containerd/cgroups/pull/246))
-   Check that cgroup is empty before deleting ([#&#8203;228](https://github.com/containerd/cgroups/pull/228))
-   Support cgroup.AddThread in cgroupv2 manager ([#&#8203;243](https://github.com/containerd/cgroups/pull/243))
-   Support to handle more than 4 fields in cpuacct.stat ([#&#8203;231](https://github.com/containerd/cgroups/pull/231))
-   typo shoulld -> should ([#&#8203;236](https://github.com/containerd/cgroups/pull/236))
-   Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#&#8203;241](https://github.com/containerd/cgroups/pull/241))
-   go.mod: github.com/stretchr/testify v1.8.0 ([#&#8203;240](https://github.com/containerd/cgroups/pull/240))
-   .github: use ubuntu-22.04 to test cgroupv2 ([#&#8203;237](https://github.com/containerd/cgroups/pull/237))
-   feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#&#8203;235](https://github.com/containerd/cgroups/pull/235))
-   Update README to include usage examples of v2 client ([#&#8203;233](https://github.com/containerd/cgroups/pull/233))
-   ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#&#8203;232](https://github.com/containerd/cgroups/pull/232))
-   Bump go version to 1.17 in go.mod ([#&#8203;230](https://github.com/containerd/cgroups/pull/230))
-   make cmd/ a separate module (as it's only for testing) ([#&#8203;226](https://github.com/containerd/cgroups/pull/226))
-   feat(v2): add Update method for v2.Manager ([#&#8203;225](https://github.com/containerd/cgroups/pull/225))
-   feat: add memory.min param ([#&#8203;211](https://github.com/containerd/cgroups/pull/211))
-   modified the dereference null pointer value. ([#&#8203;218](https://github.com/containerd/cgroups/pull/218))
-   update readme for cpu cgroup demo ([#&#8203;217](https://github.com/containerd/cgroups/pull/217))
-   Fix systemd full path ([#&#8203;221](https://github.com/containerd/cgroups/pull/221))
-   Update Go version and fedora base ([#&#8203;223](https://github.com/containerd/cgroups/pull/223))
-   Fix panic in NewSystemd on nil values ([#&#8203;219](https://github.com/containerd/cgroups/pull/219))

</p>
</details>

##### Changes from containerd/continuity
<details><summary>28 commits</summary>
<p>

-   go.mod: update dependencies (take 2) ([#&#8203;204](https://github.com/containerd/continuity/pull/204))
-   Revert "go.mod: update dependencies" ([#&#8203;205](https://github.com/containerd/continuity/pull/205))
-   Various small fix-ups ([#&#8203;202](https://github.com/containerd/continuity/pull/202))
-   update authors and mailmap ([#&#8203;201](https://github.com/containerd/continuity/pull/201))
-   move cmd/continuity to its own go module ([#&#8203;200](https://github.com/containerd/continuity/pull/200))
-   CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir)  ([#&#8203;198](https://github.com/containerd/continuity/pull/198))
-   fs.CopyDir: support sockets and pipes ([#&#8203;197](https://github.com/containerd/continuity/pull/197))
-   Fix wrapping errors ([#&#8203;196](https://github.com/containerd/continuity/pull/196))

</p>
</details>

##### Changes from containerd/fifo
<details><summary>26 commits</summary>
<p>

-   Update Go vers, x/sys vendor ([#&#8203;51](https://github.com/containerd/fifo/pull/51))
-   chore: cleanup old buildtags by `go fix` ([#&#8203;49](https://github.com/containerd/fifo/pull/49))
-   Return nil when openFifo returns nil ([#&#8203;47](https://github.com/containerd/fifo/pull/47))
-   Resolve golangci-lint-action package warnings ([#&#8203;48](https://github.com/containerd/fifo/pull/48))
-   Remove references to io/ioutil package ([#&#8203;45](https://github.com/containerd/fifo/pull/45))
-   Update GitHub actions CI workflow ([#&#8203;46](https://github.com/containerd/fifo/pull/46))
-   go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#&#8203;44](https://github.com/containerd/fifo/pull/44))
-   fifo_test: Add 2 tests for closing after reading ([#&#8203;42](https://github.com/containerd/fifo/pull/42))
-   replace pkg/errors ([#&#8203;41](https://github.com/containerd/fifo/pull/41))
-   fifo.Close(): prevent possible panic if fifo is nil ([#&#8203;32](https://github.com/containerd/fifo/pull/32))
-   Update branch name in GitHub Actions ([#&#8203;40](https://github.com/containerd/fifo/pull/40))

</p>
</details>

##### Changes from containerd/go-cni
<details><summary>38 commits</summary>
<p>

-   Add Go 1.20 support ([#&#8203;111](https://github.com/containerd/go-cni/pull/111))
-   opts: add cgroupPath capability ([#&#8203;110](https://github.com/containerd/go-cni/pull/110))
-   go.mod: github.com/containernetworking/cni v1.1.2 ([#&#8203;109](https://github.com/containerd/go-cni/pull/109))
-   Remove references to io/ioutil package ([#&#8203;106](https://github.com/containerd/go-cni/pull/106))
-   Update golangci/golangci-lint package ([#&#8203;108](https://github.com/containerd/go-cni/pull/108))
-   Update GitHub actions CI workflow ([#&#8203;107](https://github.com/containerd/go-cni/pull/107))
-   Add support for Windows default conf paths ([#&#8203;103](https://github.com/containerd/go-cni/pull/103))
-   go.mod: github.com/stretchr/testify v1.8.0 ([#&#8203;104](https://github.com/containerd/go-cni/pull/104))
-   go.mod: update libcni to v1.1.1 ([#&#8203;101](https://github.com/containerd/go-cni/pull/101))
-   add in some serial setup tests; a little make cleanup ([#&#8203;100](https://github.com/containerd/go-cni/pull/100))
-   Re-introduce serial network setup ([#&#8203;99](https://github.com/containerd/go-cni/pull/99))
-   bump github.com/containernetworking/cni v1.1.0 ([#&#8203;98](https://github.com/containerd/go-cni/pull/98))
-   Revert "Update loopback version to support check" ([#&#8203;96](https://github.com/containerd/go-cni/pull/96))
-   Use revive instead of golint ([#&#8203;92](https://github.com/containerd/go-cni/pull/92))
-   Bump go verion to 1.17 ([#&#8203;91](https://github.com/containerd/go-cni/pull/91))
-   moving up to latest CNI plugin release ([#&#8203;90](https://github.com/containerd/go-cni/pull/90))
-   Fix Loopback Version ([#&#8203;88](https://github.com/containerd/go-cni/pull/88))
-   Update comment for capabilities ([#&#8203;89](https://github.com/containerd/go-cni/pull/89))
-   Add integration test for linux and update go version from 1.16 to 1.17 ([#&#8203;84](https://github.com/containerd/go-cni/pull/84))

</p>
</details>

##### Changes from containerd/imgcrypt
<details><summary>49 commits</summary>
<p>

-   CHANGES: Updated CHANGES document for 1.1.7 release ([#&#8203;97](https://github.com/containerd/imgcrypt/pull/97))
-   Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers  ([#&#8203;96](https://github.com/containerd/imgcrypt/pull/96))
-   build(deps): Update to containerd 1.6.8 ([#&#8203;92](https://github.com/containerd/imgcrypt/pull/92))
-   tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#&#8203;90](https://github.com/containerd/imgcrypt/pull/90))
-   chore: fix readme typo ([#&#8203;87](https://github.com/containerd/imgcrypt/pull/87))
-   Update to min golang 1.18 ([#&#8203;88](https://github.com/containerd/imgcrypt/pull/88))
-   CHANGES: Updated CHANGES document for 1.1.6 release ([#&#8203;85](https://github.com/containerd/imgcrypt/pull/85))
-   build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#&#8203;83](https://github.com/containerd/imgcrypt/pull/83))
-   CI: Upgrade to golangci-lint v1.46.2 ([#&#8203;84](https://github.com/containerd/imgcrypt/pull/84))
-   CICD: Rename master branch to main ([#&#8203;79](https://github.com/containerd/imgcrypt/pull/79))
-   Rename any to pbAny ([#&#8203;78](https://github.com/containerd/imgcrypt/pull/78))
-   Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#&#8203;75](https://github.com/containerd/imgcrypt/pull/75))
-   Upgrade golangci-lint-action and golangci-lint ([#&#8203;76](https://github.com/containerd/imgcrypt/pull/76))
-   CHANGES: Updated CHANGES document for 1.1.4 release ([#&#8203;74](https://github.com/containerd/imgcrypt/pull/74))
-   Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#&#8203;73](https://github.com/containerd/imgcrypt/pull/73))
-   images: prepare for typeurl.Any ([#&#8203;72](https://github.com/containerd/imgcrypt/pull/72))
-   Bump ocicrypt to 1.1.3 ([#&#8203;71](https://github.com/containerd/imgcrypt/pull/71))
-   Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#&#8203;67](https://github.com/containerd/imgcrypt/pull/67))

</p>
</details>

##### Changes from containerd/nri
<details><summary>56 commits</summary>
<p>

-   Add Go 1.20 support to CI ([#&#8203;30](https://github.com/containerd/nri/pull/30))
-   Add CodeQL Security scan workflow ([#&#8203;31](https://github.com/containerd/nri/pull/31))
-   fixes: sort final adjusted mount slice. ([#&#8203;29](https://github.com/containerd/nri/pull/29))
-   fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#&#8203;28](https://github.com/containerd/nri/pull/28))
-   adaptation: fix mount and device adjustment. ([#&#8203;27](https://github.com/containerd/nri/pull/27))
-   Make plugin timeouts configurable, adjust default socket path. ([#&#8203;26](https://github.com/containerd/nri/pull/26))
-   pkg/adaptation: eliminate configuration file. ([#&#8203;24](https://github.com/containerd/nri/pull/24))
-   stub: fix a potential plugin crash. ([#&#8203;25](https://github.com/containerd/nri/pull/25))
-   adaptation: fix a panic for unsolicited updates. ([#&#8203;23](https://github.com/containerd/nri/pull/23))
-   pkg/adaptaton: log errors with %v not %w. ([#&#8203;22](https://github.com/containerd/nri/pull/22))
-   chore: cleanup old buildtags by `go fix` ([#&#8203;21](https://github.com/containerd/nri/pull/21))
-   add back project info ([#&#8203;20](https://github.com/containerd/nri/pull/20))
-   Extend scope to enable common pluggable runtime extensions. ([#&#8203;16](https://github.com/containerd/nri/pull/16))
-   Update GitHub actions CI workflow ([#&#8203;19](https://github.com/containerd/nri/pull/19))
-   replace pkg/errors ([#&#8203;17](https://github.com/containerd/nri/pull/17))
-   Update the examples in README.md ([#&#8203;15](https://github.com/containerd/nri/pull/15))
-   Rename branch from master to main ([#&#8203;12](https://github.com/containerd/nri/pull/12))
-   Update to containerd 1.5.1 ([#&#8203;11](https://github.com/containerd/nri/pull/11))

</p>
</details>

##### Changes from containerd/ttrpc
<details><summary>62 commits</summary>
<p>

-   Rework deadline assertion logging to be more clear ([#&#8203;132](https://github.com/containerd/ttrpc/pull/132))
-   Fix server shutdown logic ([#&#8203;130](https://github.com/containerd/ttrpc/pull/130))
-   Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#&#8203;133](https://github.com/containerd/ttrpc/pull/133))
-   Make checkServerShutdown verbose ([#&#8203;128](https://github.com/containerd/ttrpc/pull/128))
-   server: Fix connection issues when receiving ECONNRESET ([#&#8203;123](https://github.com/containerd/ttrpc/pull/123))
-   README: protobuild is in containerd org now ([#&#8203;125](https://github.com/containerd/ttrpc/pull/125))
-   stream: fix the map of streams leak ([#&#8203;120](https://github.com/containerd/ttrpc/pull/120))
-   Regenerated pb.go files to fix mismatches ([#&#8203;122](https://github.com/containerd/ttrpc/pull/122))
-   build: Fix references to check-protos target in Makefile ([#&#8203;118](https://github.com/containerd/ttrpc/pull/118))
-   Add service prefix option to generator ([#&#8203;116](https://github.com/containerd/ttrpc/pull/116))
-   doc: ttrpc supports stream ([#&#8203;121](https://github.com/containerd/ttrpc/pull/121))
-   \*: remove codecov ([#&#8203;114](https://github.com/containerd/ttrpc/pull/114))
-   Only generate a Go file if the file has some services ([#&#8203;112](https://github.com/containerd/ttrpc/pull/112))
-   \*.go: organize errors to one spot ([#&#8203;113](https://github.com/containerd/ttrpc/pull/113))
-   PROTOCOL: slight markdown touchup ([#&#8203;111](https://github.com/containerd/ttrpc/pull/111))
-   Introduce streaming ([#&#8203;107](https://github.com/containerd/ttrpc/pull/107))
-   Update checkout and lint actions ([#&#8203;109](https://github.com/containerd/ttrpc/pull/109))
-   Add Makefile and update protobuf ([#&#8203;106](https://github.com/containerd/ttrpc/pull/106))
-   Add ttrpc protocol definition ([#&#8203;102](https://github.com/containerd/ttrpc/pull/102))
-   Enable Codecov again ([#&#8203;105](https://github.com/containerd/ttrpc/pull/105))
-   Use CR+LF instead of LF regardless of OS ([#&#8203;103](https://github.com/containerd/ttrpc/pull/103))
-   Log the error's underyling errno if there is ([#&#8203;104](https://github.com/containerd/ttrpc/pull/104))
-   Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#&#8203;99](https://github.com/containerd/ttrpc/pull/99))
-   Wrap correct error on unix.GetsockoptUcred failure ([#&#8203;100](https://github.com/containerd/ttrpc/pull/100))
-   Update CI project checks to use containerd project action ([#&#8203;101](https://github.com/containerd/ttrpc/pull/101))

</p>
</details>

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**                                         [`6c3934b`](https://github.com/containerd/containerd/commit/6c3934b029d8) -> [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf)
-   **github.com/AdamKorcz/go-118-fuzz-build**                                       [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) ***new***
-   **github.com/Microsoft/go-winio**                                                v0.5.1 -> v0.6.0
-   **github.com/Microsoft/hcsshim**                                                 v0.9.2 -> v0.10.0-rc.7
-   **github.com/blang/semver/v4**                                                   v4.0.0 ***new***
-   **github.com/cenkalti/backoff/v4**                                               v4.1.2 -> v4.2.0
-   **github.com/cespare/xxhash/v2**                                                 v2.1.2 -> v2.2.0
-   **github.com/cilium/ebpf**                                                       v0.7.0 -> v0.9.1
-   **github.com/container-orchestrated-devices/container-device-interface**         v0.5.4 ***new***
-   **github.com/containerd/btrfs/v2**                                               v2.0.0 ***new***
-   **github.com/containerd/cgroups**                                                v1.0.3 -> v1.1.0
-   **github.com/containerd/cgroups/v3**                                             v3.0.1 ***new***
-   **github.com/containerd/continuity**                                             v0.2.2 -> v0.3.0
-   **github.com/containerd/fifo**                                                   v1.0.0 -> v1.1.0
-   **github.com/containerd/go-cni**                                                 v1.1.3 -> v1.1.9
-   **github.com/containerd/imgcrypt**                                               v1.1.3 -> v1.1.7
-   **github.com/containerd/nri**                                                    v0.1.0 -> v0.3.0
-   **github.com/containerd/ttrpc**                                                  v1.1.0 -> v1.2.1
-   **github.com/containerd/typeurl/v2**                                             v2.1.0 ***new***
-   **github.com/containernetworking/cni**                                           v1.0.1 -> v1.1.2
-   **github.com/containernetworking/plugins**                                       v1.0.1 -> v1.2.0
-   **github.com/containers/ocicrypt**                                               v1.1.2 -> v1.1.6
-   **github.com/coreos/go-systemd/v22**                                             v22.3.2 -> v22.5.0
-   **github.com/cpuguy83/go-md2man/v2**                                             v2.0.0 -> v2.0.2
-   **github.com/cyphar/filepath-securejoin**                                        v0.2.3 ***new***
-   **github.com/docker/go-units**                                                   v0.4.0 -> v0.5.0
-   **github.com/emicklei/go-restful/v3**                                            v3.10.1 ***new***
-   **github.com/fsnotify/fsnotify**                                                 v1.4.9 -> v1.6.0
-   **github.com/go-logr/logr**                                                      v1.2.2 -> v1.2.3
-   **github.com/godbus/dbus/v5**                                                    v5.0.6 -> v5.1.0
-   **github.com/google/go-cmp**                                                     v0.5.6 -> v0.5.9
-   **github.com/google/uuid**                                                       v1.2.0 -> v1.3.0
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                    v2.7.0 ***new***
-   **github.com/imdario/mergo**                                                     v0.3.12 -> v0.3.13
-   **github.com/intel/goresctrl**                                                   v0.2.0 -> v0.3.0
-   **github.com/klauspost/compress**                                                v1.11.13 -> v1.16.0
-   **github.com/klauspost/cpuid/v2**                                                v2.0.4 ***new***
-   **github.com/miekg/pkcs11**                                                      v1.0.3 -> v1.1.1
-   **github.com/minio/sha256-simd**                                                 v1.0.0 ***new***
-   **github.com/moby/sys/mountinfo**                                                v0.5.0 -> v0.6.2
-   **github.com/moby/sys/sequential**                                               v0.5.0 ***new***
-   **github.com/moby/sys/signal**                                                   v0.6.0 -> v0.7.0
-   **github.com/opencontainers/image-spec**                                         [`693428a`](https://github.com/containerd/containerd/commit/693428a734f5) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b)
-   **github.com/opencontainers/runc**                                               v1.1.0 -> v1.1.4
-   **github.com/opencontainers/runtime-spec**                                       [`1c3f411`](https://github.com/containerd/containerd/commit/1c3f411f0417) -> v1.1.0-rc.1
-   **github.com/opencontainers/runtime-tools**                                      [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) ***new***
-   **github.com/opencontainers/selinux**                                            v1.10.0 -> v1.11.0
-   **github.com/pelletier/go-toml**                                                 v1.9.3 -> v1.9.5
-   **github.com/prometheus/client_golang**                                          v1.11.0 -> v1.14.0
-   **github.com/prometheus/client_model**                                           v0.2.0 -> v0.3.0
-   **github.com/prometheus/common**                                                 v0.30.0 -> v0.37.0
-   **github.com/prometheus/procfs**                                                 v0.7.3 -> v0.8.0
-   **github.com/russross/blackfriday/v2**                                           v2.0.1 -> v2.1.0
-   **github.com/sirupsen/logrus**                                                   v1.8.1 -> v1.9.0
-   **github.com/stretchr/testify**                                                  v1.7.0 -> v1.8.2
-   **github.com/syndtr/gocapability**                                               [`42c35b4`](https://github.com/containerd/containerd/commit/42c35b437635) ***new***
-   **github.com/tchap/go-patricia/v2**                                              v2.3.1 ***new***
-   **github.com/urfave/cli**                                                        v1.22.1 -> v1.22.12
-   **github.com/vishvananda/netlink**                                               [`f5de759`](https://github.com/containerd/containerd/commit/f5de75959ad5) -> v1.2.1-beta.2
-   **go.etcd.io/bbolt**                                                             v1.3.6 -> v1.3.7
-   **go.opencensus.io**                                                             v0.23.0 -> v0.24.0
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.40.0
-   **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                       v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                            v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**              v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**              v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/metric**                                              v0.37.0 ***new***
-   **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.14.0
-   **go.opentelemetry.io/proto/otlp**                                               v0.11.0 -> v0.19.0
-   **golang.org/x/crypto**                                                          [`32db794`](https://github.com/containerd/containerd/commit/32db794688a5) -> v0.1.0
-   **golang.org/x/mod**                                                             v0.7.0 ***new***
-   **golang.org/x/net**                                                             [`fe4d628`](https://github.com/containerd/containerd/commit/fe4d6282115f) -> v0.7.0
-   **golang.org/x/oauth2**                                                          [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.4.0
-   **golang.org/x/sync**                                                            [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0
-   **golang.org/x/sys**                                                             [`1d35b9e`](https://github.com/containerd/containerd/commit/1d35b9e2eb4e) -> v0.6.0
-   **golang.org/x/term**                                                            [`6886f2d`](https://github.com/containerd/containerd/commit/6886f2dfbf5b) -> v0.5.0
-   **golang.org/x/text**                                                            v0.3.7 -> v0.7.0
-   **golang.org/x/time**                                                            [`1f47c86`](https://github.com/containerd/containerd/commit/1f47c861a9ac) -> [`90d013b`](https://github.com/containerd/containerd/commit/90d013bbcef8)
-   **golang.org/x/tools**                                                           v0.5.0 ***new***
-   **google.golang.org/genproto**                                                   [`e50cd97`](https://github.com/containerd/containerd/commit/e50cd9704f63) -> [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4)
-   **google.golang.org/grpc**                                                       v1.43.0 -> v1.53.0
-   **google.golang.org/protobuf**                                                   v1.27.1 -> v1.28.1
-   **gopkg.in/yaml.v3**                                                             [`496545a`](https://github.com/containerd/containerd/commit/496545a6307b) -> v3.0.1
-   **k8s.io/api**                                                                   v0.22.5 -> v0.26.2
-   **k8s.io/apimachinery**                                                          v0.22.5 -> v0.26.2
-   **k8s.io/apiserver**                                                             v0.22.5 -> v0.26.2
-   **k8s.io/client-go**                                                             v0.22.5 -> v0.26.2
-   **k8s.io/component-base**                                                        v0.22.5 -> v0.26.2
-   **k8s.io/cri-api**                                                               v0.23.1 -> v0.26.2
-   **k8s.io/klog/v2**                                                               v2.30.0 -> v2.90.1
-   **k8s.io/utils**                                                                 [`cb0fa31`](https://github.com/containerd/containerd/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/containerd/containerd/commit/a5ecb0141aa5)
-   **sigs.k8s.io/json**                                                             [`f223a00`](https://github.com/containerd/containerd/commit/f223a00ba0e2) ***new***
-   **sigs.k8s.io/structured-merge-diff/v4**                                         v4.1.2 -> v4.2.3
-   **sigs.k8s.io/yaml**                                                             v1.2.0 -> v1.3.0

Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0)

##### Which file should I download?

-   `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:         ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
-   `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`:  Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
-   `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`:     (Deprecated)
-   `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated)

In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases)
and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too.

See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation.

### [`v1.6.31`](https://github.com/containerd/containerd/releases/tag/v1.6.31): containerd 1.6.31

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.30...v1.6.31)

Welcome to the v1.6.31 release of containerd!

The thirty-first patch release for containerd 1.6 contains a few fixes, one for
a regression that was introduced in v1.6.30 in the way process exits were handled.

##### Highlights

-   Adds mediatype to OCI index record on export ([#&#8203;9991](https://github.com/containerd/containerd/pull/9991))

##### Runtime

-   Fix runc shim to only defer init process exits ([#&#8203;10038](https://github.com/containerd/containerd/pull/10038))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Phil Estes
-   Akihiro Suda
-   Austin Vazquez
-   Laura Brehm
-   Maksym Pavlenko
-   Sebastiaan van Stijn
-   Talon

##### Changes

<details><summary>14 commits</summary>
<p>

-   Prepare for v1.6.31 release ([#&#8203;10040](https://github.com/containerd/containerd/pull/10040))
    -   [`7f7012bad`](https://github.com/containerd/containerd/commit/7f7012bad7af5275d84ba63b6ba93a4882cd94cd) Prepare for v1.6.31 release
-   Fix runc shim to only defer init process exits ([#&#8203;10038](https://github.com/containerd/containerd/pull/10038))
    -   [`5e53da4a1`](https://github.com/containerd/containerd/commit/5e53da4a1403e80339e3d2897dd41cce3842b335) runc-shim: only defer init process exits
-   Fix compile from version control system (source) use case ([#&#8203;10011](https://github.com/containerd/containerd/pull/10011))
    -   [`7592f87f0`](https://github.com/containerd/containerd/commit/7592f87f040128b44e1aafef33b0b33c65334209) Fix compile from version control system (source) use case
-   Adds mediatype to OCI index record on export ([#&#8203;9991](https://github.com/containerd/containerd/pull/9991))
    -   [`8d415fd0e`](https://github.com/containerd/containerd/commit/8d415fd0ee2d88ae4c53d75acf0707ec9151ea0f) adds mediatype to oci index record
-   vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#&#8203;9974](https://github.com/containerd/containerd/pull/9974))
    -   [`2dbb59b5a`](https://github.com/containerd/containerd/commit/2dbb59b5af8b373085c2dcb272a78d586eeb6bfc) vendor: github.com/golang/protobuf v1.5.4
    -   [`069bb78c9`](https://github.com/containerd/containerd/commit/069bb78c9ecc7ac7cab650a3029e745471e2a899) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    -   [`68d395cad`](https://github.com/containerd/containerd/commit/68d395cad899fcba32d9c5dcc20b2afe375c7682) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
-   Backport test release on PR ([#&#8203;9955](https://github.com/containerd/containerd/pull/9955))
    -   [`b3713136d`](https://github.com/containerd/containerd/commit/b3713136d1fccacd55dbcd507739f2b788b29554) CI: test release.yml on every PR

</p>
</details>

##### Dependency Changes

-   **github.com/golang/protobuf**  v1.5.3 -> v1.5.4
-   **google.golang.org/protobuf**  v1.31.0 -> v1.33.0

Previous release can be found at [v1.6.30](https://github.com/containerd/containerd/releases/tag/v1.6.30)

### [`v1.6.30`](https://github.com/containerd/containerd/releases/tag/v1.6.30): containerd 1.6.30

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.29...v1.6.30)

Welcome to the v1.6.30 release of containerd!

The thirtieth patch release for containerd 1.6 contains various fixes and updates
as well as a build fix which prevented the v1.6.29 tag from being released.

##### Highlights

-   Update builds to go 1.21.8 ([#&#8203;9945](https://github.com/containerd/containerd/pull/9945))
-   Fix config import relative path glob ([#&#8203;9835](https://github.com/containerd/containerd/pull/9835))
-   Move high volume event logs to Trace level ([#&#8203;9824](https://github.com/containerd/containerd/pull/9824))
-   Move certain debug logs to trace logs ([#&#8203;9762](https://github.com/containerd/containerd/pull/9762))

##### Container Runtime Interface (CRI)

-   Add timeout to drain exec io ([#&#8203;9768](https://github.com/containerd/containerd/pull/9768))
-   Propagate deprecation list to runtime status ([#&#8203;9819](https://github.com/containerd/containerd/pull/9819))
-   Fix image pinning when image is not pulled through cri ([#&#8203;9785](https://github.com/containerd/containerd/pull/9785))

##### Runtime

-   Update runc-shim to process exec exits before init ([#&#8203;9927](https://github.com/containerd/containerd/pull/9927))

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Derek McGowan
-   Wei Fu
-   Maksym Pavlenko
-   Phil Estes
-   Kirtana Ashok
-   Mike Brown
-   Akhil Mohan
-   Angelos Kolaitis
-   Austin Vazquez
-   Henry Wang
-   Laura Brehm
-   Nashwan Azhari
-   Sebastiaan van Stijn
-   Tony Fang

##### Changes

<details><summary>59 commits</summary>
<p>

-   Prepare v1.6.30 ([#&#8203;9952](https://github.com/containerd/containerd/pull/9952))
    -   [`8268fc6e9`](https://github.com/containerd/containerd/commit/8268fc6e90f2305410609abf34559ec2f5966c78) Prepare release notes for v1.6.30
    -   [`614ca2e12`](https://github.com/containerd/containerd/commit/614ca2e12193ae80afc11beb5a55fc2ae05c8915) Revert go version environment removal
-   Prepare release notes for v1.6.29 ([#&#8203;9950](https://github.com/containerd/containerd/pull/9950))
    -   [`9ef6d9d03`](https://github.com/containerd/containerd/commit/9ef6d9d03d8d4124d4e8e28399fef28c137fcc2e) Add release notes for v1.6.29.toml
-   use a composite action to install Go ([#&#8203;9949](https://github.com/containerd/containerd/pull/9949))
    -   [`cfbbb510c`](https://github.com/containerd/containerd/commit/cfbbb510c23672daf7711a9afd548801dd741c4a) Use the Go toolchain in CI matrix to build binaries
    -   [`f015dbc5a`](https://github.com/containerd/containerd/commit/f015dbc5a3d1f5a6eaefc561130ee5bb05e0d6c5) use composite action in ci workflow
-   Update builds to go 1.21.8 ([#&#8203;9945](https://github.com/containerd/containerd/pull/9945))
    -   [`ccf3eb6a2`](https://github.com/containerd/containerd/commit/ccf3eb6a2de426c9cfbb9409c330df79d3dbba0c) update to go 1.21.8, 1.22.1
-   Backport easy go install and update go ([#&#8203;9890](https://github.com/containerd/containerd/pull/9890))
    -   [`f6475ea59`](https://github.com/containerd/containerd/commit/f6475ea597b713a27e0b31e5723f3cd315b39eeb) Drop go 1.20 and build against 1.22
    -   [`7c45ad092`](https://github.com/containerd/containerd/commit/7c45ad0923f0ea267cb9b66a65dea6fff4e0ff0b) Extract a composite action to install Go
    -   [`4f7305414`](https://github.com/containerd/containerd/commit/4f73054149a36ba97263af8ee72e302c7a226906) update to go1.21.6, go1.20.13
    -   [`da5a36c37`](https://github.com/containerd/containerd/commit/da5a36c3700ac1142c2451137a362d4c92d1897d) Use testify
    -   [`afe6efee3`](https://github.com/containerd/containerd/commit/afe6efee30df36c16dae3f1afe87a8e324a9b031) Revert container_stats_test.go change which caused Windows CRI integration test failure
    -   [`370ef115f`](https://github.com/containerd/containerd/commit/370ef115f0e1875bce98326cce4aafd2a953c30b) container_stats_test.go: avoid checking snapshot size
    -   [`935720b8c`](https://github.com/containerd/containerd/commit/935720b8c065bddd2dc4372a76225ab0290b449c) Move inline PS scripts into files
    -   [`74bae5af8`](https://github.com/containerd/containerd/commit/74bae5af8c853f52b65666682db7d31e9e8d2f02) Uninstall mingw before attempting upgrade
    -   [`9b9500bb0`](https://github.com/containerd/containerd/commit/9b9500bb0d45ac1e669a3319039acf7c8359e885) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
    -   [`4814f9e48`](https://github.com/containerd/containerd/commit/4814f9e483fc2a0f897cf553ac67b882bc133fbe) seccomp, apparmor: add go:noinline
-   Disable OOM set score unpriv test temporarily ([#&#8203;9943](https://github.com/containerd/containerd/pull/9943))
    -   [`c7c8ce6bc`](https://github.com/containerd/containerd/commit/c7c8ce6bcf73cc608b6987f0729f40f93ce443c4) Disable OOM set score unpriv test temporarily
-   Update runc-shim to process exec exits before init ([#&#8203;9927](https://github.com/containerd/containerd/pull/9927))
    -   [`65915f0a2`](https://github.com/containerd/containerd/commit/65915f0a2c0b4d1cb590f39c6cc3b78e7bb75fcb) runc-shim: process exec exits before init
-   Backport GitHub actions package updates ([#&#8203;9877](https://github.com/containerd/containerd/pull/9877))
    -   [`e552c8898`](https://github.com/containerd/containerd/commit/e552c889875ecb7fe2e8f5dadac77765f2988932) build(deps): bump golangci/golangci-lint-action from 3 to 4
    -   [`888ae152c`](https://github.com/containerd/containerd/commit/888ae152c6eb25eee5b4b533c5fd2f8c3448b609) build(deps): bump actions/cache from 3 to 4
    -   [`dd913a0de`](https://github.com/containerd/containerd/commit/dd913a0defb4aa139fe2ab719cf37850ad5c7898) build(deps): bump actions/upload-artifact from 3 to 4
    -   [`a250c101a`](https://github.com/containerd/containerd/commit/a250c101afdebcaa7016e50df7670d25e3427700) build(deps): bump actions/download-artifact from 3 to 4
    -   [`7c8fd2255`](https://github.com/containerd/containerd/commit/7c8fd2255deaee02ab957a2b05914d01498a7870) build(deps): bump github/codeql-action from 2 to 3
    -   [`f325e559e`](https://github.com/containerd/containerd/commit/f325e559e0d93a7990ef1302533d20484d59a50b) build(deps): bump docker/setup-buildx-action from 2 to 3
    -   [`1bae160de`](https://github.com/containerd/containerd/commit/1bae160de37a9b37cd8d995e1ffa54247c14f21c) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
    -   [`3c81dc13b`](https://github.com/containerd/containerd/commit/3c81dc13b45d917e802223b5f80c4559a3b7d969) build(deps): bump actions/upload-artifact from 1 to 3
    -   [`9b3b80eea`](https://github.com/containerd/containerd/commit/9b3b80eea1f68de6db0dde7578395995314520e5) build(deps): bump actions/setup-go from 3 to 5
    -   [`6b74818d8`](https://github.com/containerd/containerd/commit/6b74818d8908a66ba7ab668f486f1de9c84b1239) build(deps): bump actions/checkout from 3 to 4
-   Fix config import relative path glob ([#&#8203;9835](https://github.com/containerd/containerd/pull/9835))
    -   [`0f2068a70`](https://github.com/containerd/containerd/commit/0f2068a70e0824ef7fb13c3e21763428bc58ad40) Fix config import relative path glob
-   ci: update crun version to 1.14.3 ([#&#8203;9851](https://github.com/containerd/containerd/pull/9851))
    -   [`89d00db95`](https://github.com/containerd/containerd/commit/89d00db952fbfa9a1425be30895e9615a9d3215f) ci: update crun version to 1.14.3
-   Add timeout to drain exec io ([#&#8203;9768](https://github.com/containerd/containerd/pull/9768))
    -   [`aac488730`](https://github.com/containerd/containerd/commit/aac488730fb6b4fec37cdc98d2b834e7033b60ca) \*: fix code style issue
    -   [`2a38c7e2e`](https://github.com/containerd/containerd/commit/2a38c7e2ebc9e5f1dcca25cb70535e0886e8c620) cri: add config ut for invalid drain io timeout value
    -   [`ce213431f`](https://github.com/containerd/containerd/commit/ce213431fd3d413861d705b3d2d28fa83b281e39) integration: add testcase to drain exec IO in time
    -   [`b5d52efca`](https://github.com/containerd/containerd/commit/b5d52efca8c1c5494c8ab72c615a4d6ed190b159) cri: disable drain-exec-IO if it is empty timeout
    -   [`85bed5863`](https://github.com/containerd/containerd/commit/85bed5863f5313bedd5e6c2319d677124b44cdf5) \*: update drainExecSyncIO docs and validate the timeout
    -   [`0438e477c`](https://github.com/containerd/containerd/commit/0438e477c35faad18e6b7f3a6b7d8a8f787f5efc) \*: add DrainExecSyncIOTimeout config and disable as by default
    -   [`fb262317c`](https://github.com/containerd/containerd/commit/fb262317cd66e9f9c2ce12389b658ce042e410cc) \*: fix typo and skip exec-io-drain-testcase in win
    -   [`f50c9922b`](https://github.com/containerd/containerd/commit/f50c9922b1cc96e8829936509b2bf49ceaa4e5c1) pkg/cri/server: add timeout to drain exec io
-   Move high volume event logs to Trace level ([#&#8203;9824](https://github.com/containerd/containerd/pull/9824))
    -   [`99fa35e70`](https://github.com/containerd/containerd/commit/99fa35e7015d487c210d82862b4c807a913d50f2) Move high volume event logs to Trace level
-   Propagate deprecation list to runtime status ([#&#8203;9819](https://github.com/containerd/containerd/pull/9819))
    -   [`3785deac4`](https://github.com/containerd/containerd/commit/3785deac4fab3aa30be9a55812dc78b2e1841e29) cri: propagate deprecation list to runtime status
-   ctr: print deprecation warnings on every invocation ([#&#8203;9821](https://github.com/containerd/containerd/pull/9821))
    -   [`b7a0b1b8e`](https://github.com/containerd/containerd/commit/b7a0b1b8ed895d1737c7a558cff4dae7f9f7e7df) ctr: print deprecation warnings on every invocation
-   Fix image pinning when image is not pulled through cri ([#&#8203;9785](https://github.com/containerd/containerd/pull/9785))
    -   [`2d43994fb`](https://github.com/containerd/containerd/commit/2d43994fb921722002a5043724c6624bfb9d87f0) bug fix: make sure cri image is pinned when it is pulled outside cri
-   Move certain debug logs to trace logs ([#&#8203;9762](https://github.com/containerd/containerd/pull/9762))
    -   [`195ef7691`](https://github.com/containerd/containerd/commit/195ef7691ea85cfbcb54693017a6195beddb55dc) Move certain debug logs to trace logs

</p>
</details>

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28)

### [`v1.6.29`](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29)

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29)

### [`v1.6.28`](https://github.com/containerd/containerd/releases/tag/v1.6.28): containerd 1.6.28

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.27...v1.6.28)

Welcome to the v1.6.28 release of containerd!

The twenty-eighth patch release for containerd 1.6 updates the runc binary
in the release builds to address CVE-2024-21626

##### Notable Updates

-   **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv))
-   **Update seccomp profile for new syscalls added since Linux 5.16** ([#&#8203;9694](https://github.com/containerd/containerd/pull/9694))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Andrey Epifanov
-   Derek McGowan
-   Akihiro Suda
-   Maksym Pavlenko
-   Phil Estes
-   Shengjing Zhu
-   Wei Fu

##### Changes

<details><summary>13 commits</summary>
<p>

-   Prepare v1.6.28 and update runc to v1.1.12 ([#&#8203;9723](https://github.com/containerd/containerd/pull/9723))
-   [`570c7c637`](https://github.com/containerd/containerd/commit/570c7c637745c9a5d41309c51193107a25768200) Prepare release notes for v1.6.28
-   [`b20b9f86b`](https://github.com/containerd/containerd/commit/b20b9f86b583b11a7fac34e6c682bc7633c74237) Update runc binary to v1.1.12
-   \[release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. ([#&#8203;9707](https://github.com/containerd/containerd/pull/9707))
    -   [`19500722a`](https://github.com/containerd/containerd/commit/19500722aec045da29536401fa4c76dfc5ef0cbe) \[release/1.6] vendor: golang.org/x/crypto v0.18.0
    -   [`919928f6b`](https://github.com/containerd/containerd/commit/919928f6b006e563d1a1c57af36e29b570dd726a) \[release/1.6] vendor: golang.org/x/term v0.16.0
    -   [`7d6a4d23b`](https://github.com/containerd/containerd/commit/7d6a4d23b182e419c0cfa732c369d7f4c90c7a02) \[release/1.6] vendor: golang.org/x/sys v0.16.0
    -   [`16ac018ae`](https://github.com/containerd/containerd/commit/16ac018ae3efaa0389678a47d0135c739a93cbae) \[release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0
-   \[release/1.6] seccomp: kernel 6.7 ([#&#8203;9694](https://github.com/containerd/containerd/pull/9694))
    -   [`f44628305`](https://github.com/containerd/containerd/commit/f44628305d7cdccfd1f7b8996b39846db5c4f035) seccomp: kernel 6.7
-   \[release/1.6] carry [#&#8203;9557](https://github.com/containerd/containerd/issues/9557) - enable ARM CI ([#&#8203;9636](https://github.com/containerd/containerd/pull/9636))
    -   [`65e1656f2`](https://github.com/containerd/containerd/commit/65e1656f2755727770f2adc90df8b972e7a513f2) cri: fix integration test on cgroupsv2 system
    -   [`9cf1e1a39`](https://github.com/containerd/containerd/commit/9cf1e1a39ca17328c973a7d2ed2969e4f98993cc) \*: enable ARM64 runner

</p>
</details>

##### Dependency Changes

-   **github.com/go-logr/logr**                                                      v1.2.2 -> v1.3.0
-   **github.com/google/go-cmp**                                                     v0.5.9 -> v0.6.0
-   **github.com/google/uuid**                                                       v1.3.0 -> v1.3.1
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**  v0.28.0 -> v0.46.0
-   **go.opentelemetry.io/otel**                                                     v1.3.0 -> v1.21.0
-   **go.opentelemetry.io/otel/metric**                                              v1.21.0 ***new***
-   **go.opentelemetry.io/otel/sdk**                                                 v1.3.0 -> v1.21.0
-   **go.opentelemetry.io/otel/trace**                                               v1.3.0 -> v1.21.0
-   **golang.org/x/crypto**                                                          v0.14.0 -> v0.18.0
-   **golang.org/x/net**                                                             v0.17.0 -> v0.18.0
-   **golang.org/x/oauth2**                                                          v0.10.0 -> v0.11.0
-   **golang.org/x/sys**                                                             v0.13.0 -> v0.16.0
-   **golang.org/x/term**                                                            v0.13.0 -> v0.16.0
-   **golang.org/x/text**                                                            v0.13.0 -> v0.14.0
-   **google.golang.org/grpc**                                                       v1.58.3 -> v1.59.0

Previous release can be found at [v1.6.27](https://github.com/containerd/containerd/releases/tag/v1.6.27)

### [`v1.6.27`](https://github.com/containerd/containerd/releases/tag/v1.6.27): containerd 1.6.27

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.26...v1.6.27)

Welcome to the v1.6.27 release of containerd!

The twenty-seventh patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **Improve `/etc/group` handling when appending groups** ([#&#8203;9543](https://github.com/containerd/containerd/pull/9543))
-   **Update runc binary to v1.1.11** ([#&#8203;9597](https://github.com/containerd/containerd/pull/9597))
-   **Remove runc import** ([#&#8203;9606](https://github.com/containerd/containerd/pull/9606))
-   **Update shim pidfile permissions to 0644** ([#&#8203;9613](https://github.com/containerd/containerd/pull/9613))
-   **Update Go version to 1.20.13** ([#&#8203;9625](https://github.com/containerd/containerd/pull/9625))

##### Deprecation Warnings

-   **Emit deprecation warning for CRIU config usage** ([#&#8203;9448](https://github.com/containerd/containerd/pull/9448))
-   **Emit deprecation warning for some CRI configs** ([#&#8203;9447](https://github.com/containerd/containerd/pull/9447))
-   **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#&#8203;9572](https://github.com/containerd/containerd/pull/9572))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Samuel Karp
-   Akihiro Suda
-   Derek McGowan
-   Sebastiaan van Stijn
-   Djordje Lukic
-   Jaroslav Jindrak
-   Kay Yan
-   Maksym Pavlenko
-   Phil Estes
-   Wei Fu
-   ruiwen-zhao

##### Changes

<details><summary>26 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.27 ([#&#8203;9631](https://github.com/containerd/containerd/pull/9631))
    -   [`d0edecf28`](https://github.com/containerd/containerd/commit/d0edecf28b51b35cfb549e3d18467bd2087fb0e7) Prepare release notes for v1.6.27
-   \[release/1.6] update to go1.20.13, test go1.21.6 ([#&#8203;9625](https://github.com/containerd/containerd/pull/9625))
    -   [`32a515211`](https://github.com/containerd/containerd/commit/32a515211d03771e3a35bf7bcb4b114bf1131ada) update to go1.20.13, test go1.21.6
-   \[release/1.6 backport] shim: Create pid-file with 0644 permissions ([#&#8203;9613](https://github.com/containerd/containerd/pull/9613))
    -   [`37de14d95`](https://github.com/containerd/containerd/commit/37de14d9562db48f9b66f37b10fa3e704455ae25) shim: Create pid-file with 0644 permissions
-   \[release/1.6 backport] remove github.com/opencontainers/runc dependency ([#&#8203;9606](https://github.com/containerd/containerd/pull/9606))
    -   [`3938d63de`](https://github.com/containerd/containerd/commit/3938d63de4737668ccec1f5eaf552c58a5d32057) remove github.com/opencontainers/runc dependency
-   \[release/1.6 backport] update runc binary to v1.1.11 ([#&#8203;9597](https://github.com/containerd/containerd/pull/9597))
    -   [`9a9b11f73`](https://github.com/containerd/containerd/commit/9a9b11f733f778ce6171396d0c95e2b68cca5e21) update runc binary to v1.1.11
-   \[release/1.6 backport] go.mod: dario.cat/mergo v1.0.0 ([#&#8203;9570](https://github.com/containerd/containerd/pull/9570))
    -   [`6cd8e17ab`](https://github.com/containerd/containerd/commit/6cd8e17aba91d9f46f9e1a27b6381744e6cafe48) go.mod: dario.cat/mergo v1.0.0
    -   [`4f8ff5154`](https://github.com/containerd/containerd/commit/4f8ff5154abd2127d148fb11ca54feb6f0fb47af) go.mod: github.com/imdario/mergo v0.3.13
-   \[release/1.6] restart: containerd.io/restart.logpath warning ([#&#8203;9572](https://github.com/containerd/containerd/pull/9572))
    -   [`d24d263a4`](https://github.com/containerd/containerd/commit/d24d263a42f51dca398070be1f8268fd53fe6cc9) restart: containerd.io/restart.logpath warning
-   \[release/1.6 backport] WithAppendAdditionalGroups: better /etc/group handling ([#&#8203;9543](https://github.com/containerd/containerd/pull/9543))
    -   [`9489c0eb0`](https://github.com/containerd/containerd/commit/9489c0eb0e7e51d90a0c2b5b4f5cbe23936d95ca) WithAppendAdditionalGroups: better /etc/group handling
-   \[release/1.6] cri: add deprecation warnings for deprecated CRI configs ([#&#8203;9547](https://github.com/containerd/containerd/pull/9547))
    -   [`713065793`](https://github.com/containerd/containerd/commit/713065793592c0f877c81712a6f310f3d730bf07) deprecation: fix missing spaces in warnings
    -   [`de0cc92a7`](https://github.com/containerd/containerd/commit/de0cc92a793b84118356715503243a2b9664dfa5) cri: add deprecation warning for runtime_root
    -   [`833b94149`](https://github.com/containerd/containerd/commit/833b94149b6fd4faa6d4719ef7926257f5b2b098) cri: add deprecation warning for rutnime_engine
    -   [`47de3d63d`](https://github.com/containerd/containerd/commit/47de3d63df0e5ffa522dfc2b6cb5b2d472879f28) cri: add deprecation warning for default_runtime
    -   [`d421b8fda`](https://github.com/containerd/containerd/commit/d421b8fda9d0d303e1b90a13f378e6fffe7d9187) cri: add warning for untrusted_workload_runtime
    -   [`802cb64b0`](https://github.com/containerd/containerd/commit/802cb64b00aab14d0f2edb45c9b89eef0016dc1c) cri: add warning for old form of systemd_cgroup
-   \[release/1.6] Add warning for CRIU config usage ([#&#8203;9546](https://github.com/containerd/containerd/pull/9546))
    -   [`f8447466c`](https://github.com/containerd/containerd/commit/f8447466ccd8277083fefeb6db91194c4559ed0b) Add warning for CRIU config usage

</p>
</details>

##### Dependency Changes

-   **dario.cat/mergo**           v1.0.0 ***new***
-   **github.com/moby/sys/user**  v0.1.0 ***new***

Previous release can be found at [v1.6.26](https://github.com/containerd/containerd/releases/tag/v1.6.26)

### [`v1.6.26`](https://github.com/containerd/containerd/releases/tag/v1.6.26): containerd 1.6.26

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.25...v1.6.26)

Welcome to the v1.6.26 release of containerd!

The twenty-sixth patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **Fix windows default path overwrite issue** ([#&#8203;9441](https://github.com/containerd/containerd/pull/9441))
-   **Update push to inherit distribution sources from parent** ([#&#8203;9453](https://github.com/containerd/containerd/pull/9453))
-   **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c))

##### Deprecation Warnings

-   **Emit deprecation warning for AUFS snapshotter usage** ([#&#8203;9448](https://github.com/containerd/containerd/pull/9448))
-   **Emit deprecation warning for v1 runtime usage** ([#&#8203;9468](https://github.com/containerd/containerd/pull/9468))
-   **Emit deprecation warning for CRI v1alpha1 usage** ([#&#8203;9468](https://github.com/containerd/containerd/pull/9468))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Samuel Karp
-   Derek McGowan
-   Kohei Tokunaga
-   Phil Estes
-   Bjorn Neergaard
-   Sebastiaan van Stijn
-   Brian Goff
-   Charity Kathure
-   Kazuyoshi Kato
-   Milas Bowman
-   Wei Fu
-   ruiwen-zhao

##### Changes

<details><summary>30 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.26 ([#&#8203;9490](https://github.com/containerd/containerd/pull/9490))
    -   [`ac5c5d3e0`](https://github.com/containerd/containerd/commit/ac5c5d3e03ab3c5b8103a1c0bd9931389f7a8fcf) Prepare release notes for v1.6.26
-   Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)
    -   [`02f07fe19`](https://github.com/containerd/containerd/commit/02f07fe1994a3ddda3626c1ede2e32bc82b8e426) contrib/apparmor: deny /sys/devices/virtual/powercap
    -   [`c94577e78`](https://github.com/containerd/containerd/commit/c94577e78d2924ddeb90d1601e31b50ee3acac48) oci/spec: deny /sys/devices/virtual/powercap
-   \[release/1.6] update to go1.20.12, test go1.21.5 ([#&#8203;9472](https://github.com/containerd/containerd/pull/9472))
    -   [`7cbdfc92e`](https://github.com/containerd/containerd/commit/7cbdfc92ef38f789f1a2773fa6fac405d361a6cc) update to go1.20.12, test go1.21.5
    -   [`024b1cce6`](https://github.com/containerd/containerd/commit/024b1cce6b27f10e00bb9bde33a5fe9563545f8d) update to go1.20.11, test go1.21.4
-   \[release/1.6] Add cri-api v1alpha2 usage warning to all api calls ([#&#8203;9484](https://github.com/containerd/containerd/pull/9484))
    -   [`64e56bfde`](https://github.com/containerd/containerd/commit/64e56bfde95828660971673d20952f275cc2c0ba) Add cri-api v1alpha2 usage warning to all api calls
-   \[release/1.6] tasks: emit warning for v1 runtime and runc v1 runtime ([#&#8203;9468](https://github.com/containerd/containerd/pull/9468))
    -   [`efefd3bf3`](https://github.com/containerd/containerd/commit/efefd3bf334b5df0e97bff0be61ba906a9b3b528) tasks: emit warning for runc v1 runtime
    -   [`7825689b4`](https://github.com/containerd/containerd/commit/7825689b4c4d68cc1cc3c6dd072c2c2ec7b2d88e) tasks: emit warning for v1 runtime
-   \[release/1.6] snapshots: emit deprecation warning for aufs ([#&#8203;9448](https://github.com/containerd/containerd/pull/9448))
    -   [`7cfe7052f`](https://github.com/containerd/containerd/commit/7cfe7052f4a2ad97e4e8032469aef588d2f0858c) snapshots: emit deprecation warning for aufs
-   \[release/1.6] cherry-pick/backport: Update golangci lint ([#&#8203;9455](https://github.com/containerd/containerd/pull/9455))
    -   [`a1ae572a2`](https://github.com/containerd/containerd/commit/a1ae572a2778bf599e93929f5145f707b667f508) Fix linter error with updated linter
    -   [`b638791d6`](https://github.com/containerd/containerd/commit/b638791d66b2e34f044f04736632995446b79314) ci: bump up golangci-lint to v1.55.0
    -   [`2370a2842`](https://github.com/containerd/containerd/commit/2370a2842318833b16a8274835374d0811c2ed28) Fix linter issues for golangci-lint 1.54.2
    -   [`8a65e2e31`](https://github.com/containerd/containerd/commit/8a65e2e31b6710f94be64c7fada727bd2569d16f) Bump up golangci-lint to v1.54.2
    -   [`969f8feb2`](https://github.com/containerd/containerd/commit/969f8feb2e0932a9f9c69f1696e552fcdcd2b31b) Bump up golangci-lint to v1.52.2
-   \[release/1.6] push: inherit distribution sources from parent ([#&#8203;9453](https://github.com/containerd/containerd/pull/9453))
    -   [`66959fdf5`](https://github.com/containerd/containerd/commit/66959fdf50d16520a84fb14c9467c0d87b7f0274) push: inherit distribution sources from parent
    -   [`b4dcffcfb`](https://github.com/containerd/containerd/commit/b4dcffcfbff2694796a04243728700b37dc78d8e) content: add InfoProvider interface
    -   [`bef4145c1`](https://github.com/containerd/containerd/commit/bef4145c141ad2c37e7797b4dc53b8e429b368ae) Change PushContent to require only Provider
-   \[release/1.6] Bump google.golang.org/grpc to v1.58.3 ([#&#8203;9408](https://github.com/containerd/containerd/pull/9408))
    -   [`a5fc21060`](https://github.com/containerd/containerd/commit/a5fc21060b5254be9ca28e63c1c5a7364b551ca5) vendor: google.golang.org/grpc v1.58.3
    -   [`4fa05b3d8`](https://github.com/containerd/containerd/commit/4fa05b3d83488e4bc81241db1a65ca00fedec45d) Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9
-   \[release/1.6] Windows default path overwrite fix ([#&#8203;9441](https://github.com/containerd/containerd/pull/9441))
    -   [`ede0ad5e1`](https://github.com/containerd/containerd/commit/ede0ad5e12826d574623a79b71bb1fbc49e75172) Fix windows default path overwrite issue

</p>
</details>

##### Dependency Changes

-   **cloud.google.com/go/compute/metadata**  v0.2.3 ***new***
-   **github.com/cespare/xxhash/v2**          v2.1.2 -> v2.2.0
-   **github.com/golang/protobuf**            v1.5.2 -> v1.5.3
-   **github.com/klauspost/compress**         v1.11.13 -> v1.15.9
-   **go.opencensus.io**                      v0.23.0 -> v0.24.0
-   **golang.org/x/oauth2**                   [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.10.0
-   **golang.org/x/sync**                     v0.1.0 -> v0.3.0
-   **google.golang.org/grpc**                v1.50.1 -> v1.58.3
-   **google.golang.org/protobuf**            v1.28.1 -> v1.31.0

Previous release can be found at [v1.6.25](https://github.com/containerd/containerd/releases/tag/v1.6.25)

### [`v1.6.25`](https://github.com/containerd/containerd/releases/tag/v1.6.25): containerd 1.6.25

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.24...v1.6.25)

Welcome to the v1.6.25 release of containerd!

The twenty-fifth patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **Check whether content did not needs to be pushed to remote registry and cross-repo mounted or already existed** ([#&#8203;9111](https://github.com/containerd/containerd/pull/9111))
-   **Soft deprecate log package** ([#&#8203;9105](https://github.com/containerd/containerd/pull/9105))
-   **Always try to establish tls connection when tls configured** ([#&#8203;9189](https://github.com/containerd/containerd/pull/9189))
-   **CRI: stop recommending disable_cgroup** ([#&#8203;9169](https://github.com/containerd/containerd/pull/9169))
-   **Allow for images with artifacts layers to pull** ([#&#8203;9150](https://github.com/containerd/containerd/pull/9150))
-   **Require plugins to succeed after registering readiness** ([#&#8203;9166](https://github.com/containerd/containerd/pull/9166))
-   **Avoid potential deadlock in create handler in containerd-shim-runc-v2** ([#&#8203;9210](https://github.com/containerd/containerd/pull/9210))
-   **Add handling for missing basic auth credentials** ([#&#8203;9236](https://github.com/containerd/containerd/pull/9236))
-   **Add a new image label if it is docker schema 1** ([#&#8203;9267](https://github.com/containerd/containerd/pull/9267))
-   **Fix ambiguous tls fallback** ([#&#8203;9300](https://github.com/containerd/containerd/pull/9300))
-   **Expose usage of deprecated features** ([#&#8203;9329](https://github.com/containerd/containerd/pull/9329))
-   **Fix shimv1 leak issue** ([#&#8203;9345](https://github.com/containerd/containerd/pull/9345))
-   **Go version update to 1.20.10**([#&#8203;9264](https://github.com/containerd/containerd/pull/9264))
-   **Update runc to v1.1.10** ([#&#8203;9360](https://github.com/containerd/containerd/pull/9360))
-   **CRI: fix using the pinned label to pin image** ([#&#8203;9382](https://github.com/containerd/containerd/pull/9382))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Samuel Karp
-   Derek McGowan
-   Sebastiaan van Stijn
-   Phil Estes
-   Wei Fu
-   Kazuyoshi Kato
-   Akhil Mohan
-   Akihiro Suda
-   Chen Yiyang
-   Fabian Hoffmann
-   Iceber Gu
-   Mike Brown
-   Paweł Gronowski
-   Austin Vazquez
-   Fahed Dorgaa
-   James Sturtevant
-   Kern Walster
-   Marat Radchenko
-   Qiutong Song
-   Tony Fouchard
-   ruiwen-zhao

##### Changes

<details><summary>82 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.25 ([#&#8203;9394](https://github.com/containerd/containerd/pull/9394))
    -   [`723d26ab2`](https://github.com/containerd/containerd/commit/723d26ab2efbaa81ce5e617a7fc3729c40f7f98d) Prepare release notes for v1.6.25
    -   [`1f865eba1`](https://github.com/containerd/containerd/commit/1f865eba1f424b0bd53087819d7697f0c6639bca) update mailmap
-   \[release/1.6] cri: fix using the pinned label to pin image ([#&#8203;9382](https://github.com/containerd/containerd/pull/9382))
    -   [`b49815300`](https://github.com/containerd/containerd/commit/b4981530050c4b8efb8cab8d41b28d81eb21462d) cri: fix update of pinned label for images
    -   [`751b0c186`](https://github.com/containerd/containerd/commit/751b0c1867b2fd52dccae7bafe5f453c99c65076) cri: fix using the pinned label to pin image
-   \[Release/1.6] vendor: golang.org/x/net v0.17.0 ([#&#8203;9387](https://github.com/containerd/containerd/pull/9387))
    -   [`fb5568608`](https://github.com/containerd/containerd/commit/fb5568608079ed772381c52297e474c9f951d285) vendor: golang.org/x/net v0.17.0
    -   [`61ad86f6f`](https://github.com/containerd/containerd/commit/61ad86f6f9ce78c67a4ece671e1b91be080dcf61) vendor: golang.org/x/text v0.13.0
    -   [`4b431c844`](https://github.com/containerd/containerd/commit/4b431c8441f38049d266a69da7e2a7045af5f2dc) vendor: golang.org/x/sys v0.13.0
-   \[Release/1.6] CVE-2022-1996 fix for go-restful ([#&#8203;9385](https://github.com/containerd/containerd/pull/9385))
    -   [`62d402275`](https://github.com/containerd/containerd/commit/62d402275cdee9748c08690156f9ccb724d7c061) Remove CVE-2022-1996 from containerd binary upgrading go-restful to 2.16.0
-   \[release/1.6] Enhance container image unpack client logs ([#&#8203;9380](https://github.com/containerd/containerd/pull/9380))
    -   [`3e68bf65a`](https://github.com/containerd/containerd/commit/3e68bf65af4405c517b4292a24781dc4e1419ac8) Enhance container image unpack client logs
-   \[release/1.6] update github.com/containerd/nri v0.1.1 ([#&#8203;9107](https://github.com/containerd/containerd/pull/9107))
    -   [`0dd65c826`](https://github.com/containerd/containerd/commit/0dd65c826ebcaf2376c4d38d3bbe99345bf64b86) \[release/1.6] update github.com/containerd/nri v0.1.1
-   \[release/1.6 backport] update runc binary to v1.1.10 ([#&#8203;9360](https://github.com/containerd/containerd/pull/9360))
    -   [`c73be2446`](https://github.com/containerd/containerd/commit/c73be2446e4414c701e7fce7b8f391c3dd113e8b) update runc binary to v1.1.10
-   \[release/1.6] Expose usage of cri-api v1alpha2 ([#&#8203;9357](https://github.com/containerd/containerd/pull/9357))
    -   [`746bcf2eb`](https://github.com/containerd/containerd/commit/746bcf2ebb7950dafe89a0dcf8db48b428fdd2d1) Expose usage of cri-api v1alpha2
-   \[release/1.6] fix: shimv1 leak issue ([#&#8203;9345](https://github.com/containerd/containerd/pull/9345))
    -   [`8b51a95fb`](https://github.com/containerd/containerd/commit/8b51a95fb2b05dd3a2c00f16606656300cc8a1cf) fix: shimv1 leak issue
-   \[release/1.6] update to go1.20.10, test go1.21.3 ([#&#8203;9264](https://github.com/containerd/containerd/pull/9264))
    -   [`6741f819b`](https://github.com/containerd/containerd/commit/6741f819bfe4e8da485af2d0e1c7b134b40543b2) \[release/1.6] update to go1.20.10, test go1.21.3
    -   [`49615a0e9`](https://github.com/containerd/containerd/commit/49615a0e9e6f10fc0c13d509d2fc86f3bed63adc) \[release/1.6] update to go1.20.9, test go1.21.2
-   \[release/1.6] cri: add deprecation warnings for mirrors, auths, and configs ([#&#8203;9355](https://github.com/containerd/containerd/pull/9355))
    -   [`b68204e53`](https://github.com/containerd/containerd/commit/b68204e53b39cb705e85283a8f4f2f6082ac484c) cri: add deprecation warning for configs
    -   [`ae8c58319`](https://github.com/containerd/containerd/commit/ae8c58319d8144e583f7f3796a074b9090ae16e8) cri: add deprecation warning for auths
    -   [`455edcad2`](https://github.com/containerd/containerd/commit/455edcad2cb5f414ef67001f0bdae9f9440cfad8) cri: add deprecation warning for mirrors
    -   [`878823f4d`](https://github.com/containerd/containerd/commit/878823f4d26c4b1c823e6d194521b3e9d1309add) cri: add ability to emit deprecation warnings
-   \[release/1.6] deprecation: new package for deprecations ([#&#8203;9329](https://github.com/containerd/containerd/pull/9329))
    -   [`477b7d6a1`](https://github.com/containerd/containerd/commit/477b7d6a1a8a4c8731605316e7f67b6bdb742bd8) ctr: new deprecations command
    -   [`24068b813`](https://github.com/containerd/containerd/commit/24068b813360602d59bc31b766fe79c5d3e82fb6) dynamic: record deprecation for dynamic plugins
    -   [`218c7a1df`](https://github.com/containerd/containerd/commit/218c7a1df9ba3d2b28bbde72b772ccb3c3c061ed) server: add ability to record config deprecations
    -   [`dfb9e1deb`](https://github.com/containerd/containerd/commit/dfb9e1deb9e749380518fdc6c732c55e5e2230a4) pull: record deprecation warning for schema 1
    -   [`90b42da6f`](https://github.com/containerd/containerd/commit/90b42da6f4496d2be76d462a5300cac92f0a07ef) introspection: add support for deprecations
    -   [`0b6766b37`](https://github.com/containerd/containerd/commit/0b6766b3741274e0a2c73eb96378d9cb8381b97d) api/introspection: deprecation warnings in server
    -   [`de3cb4c18`](https://github.com/containerd/containerd/commit/de3cb4c18660abcb3d2e4b1d8dec0085e3d51077) warning: new service for deprecations
    -   [`da1b4419b`](https://github.com/containerd/containerd/commit/da1b4419b25f35315ca297d2b058d2655f9d25fd) deprecation: new package for deprecations
-   \[release/1.6] integration: deflake TestIssue9103 ([#&#8203;9353](https://github.com/containerd/containerd/pull/9353))
    -   [`bca8a3f65`](https://github.com/containerd/containerd/commit/bca8a3f653d234e5356ab445eca9f6da0316ab77) integration: deflake TestIssue9103
-   \[release/1.6] ci: Use Vagrant on ubuntu-latest-4-cores ([#&#8203;9332](https://github.com/containerd/containerd/pull/9332))
    -   [`0985f7a43`](https://github.com/containerd/containerd/commit/0985f7a43db3e69a0c6d67d39b9397e5af71deca) ci: Use Vagrant on ubuntu-latest-4-cores
-   \[release/1.6] Fix ambiguous tls fallback ([#&#8203;9300](https://github.com/containerd/containerd/pull/9300))
    -   [`5dd64301c`](https://github.com/containerd/containerd/commit/5dd64301c89ad1e428a746f0e90d9d72b45fe1b8) Check scheme and host of request on push redirect
    -   [`51df21d09`](https://github.com/containerd/containerd/commit/51df21d09ebfac3e3470529fe1372ca22496e606) Avoid TLS fallback when protocol is not ambiguous
-   \[release/1.6] Add a new image label if it is docker schema 1 ([#&#8203;9267](https://github.com/containerd/containerd/pull/9267))
    -   [`8108f0d03`](https://github.com/containerd/containerd/commit/8108f0d036be2c36f7fc69dd85286d299ee0bf7b) Add a new image label if it is docker schema 1
-   \[release/1.6 backport] fix protobuf aarch64 ([#&#8203;9284](https://github.com/containerd/containerd/pull/9284))
    -   [`5376afb3d`](https://github.com/containerd/containerd/commit/5376afb3dbec05541b018e361f1343f20dec3ada) fix protobuf aarch64
-   \[release/1.6] remotes: add handling for missing basic auth credentials ([#&#8203;9236](https://github.com/containerd/containerd/pull/9236))
    -   [`e529741d3`](https://github.com/containerd/containerd/commit/e529741d3f102c7b558255d0e8b053c4e0858bc1) remotes: add handling for missing basic auth credentials
    -   [`ca45b92f4`](https://github.com/containerd/containerd/commit/ca45b92f4388ec7d0aa023f305891ec527b64484) Add ErrUnexpectedStatus to resolver
    -   [`77c0175b4`](https://github.com/containerd/containerd/commit/77c0175b4269da0b409e1434576c1f86bf9a869c) Improve ErrUnexpectedStatus default string
-   \[release/1.6] Update x/net to 0.13 ([#&#8203;9130](https://github.com/containerd/containerd/pull/9130))
    -   [`275fc594d`](https://github.com/containerd/containerd/commit/275fc594d8cf462d647b7c2f4dbfd2c8812d87ed) Bump x/net to 0.13
-   \[release/1.6] Require plugins to succeed after registering readiness  ([#&#8203;9166](https://github.com/containerd/containerd/pull/9166))
    -   [`5223bf39a`](https://github.com/containerd/containerd/commit/5223bf39a636be1d347f9d73be2131e102922695) Require plugins to succeed after registering readiness
    -   [`8f5eba314`](https://github.com/containerd/containerd/commit/8f5eba3148d91023df4277c705debb199fa85c57) cri: call RegisterReadiness after NewCRIService
-   \[release/1.6 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#&#8203;9210](https://github.com/containerd/containerd/pull/9210))
    -   [`7b61862e7`](https://github.com/containerd/containerd/commit/7b61862e7c3e3410318bb723671954b101acec33) \*: add runc-fp as runc wrapper to inject failpoint
    -   [`5238a6470`](https://github.com/containerd/containerd/commit/5238a6470ca921fe7e47f25b022ea815a1d6f9b4) containerd-shim-runc-v2: avoid potential deadlock in create handler
    -   [`65e908ee1`](https://github.com/containerd/containerd/commit/65e908ee1370432a09c81d8f7bc7568ff3d7e784) containerd-shim-runc-v2: remove unnecessary `s.getContainer()`
    -   [`1dd9acecb`](https://github.com/containerd/containerd/commit/1dd9acecb85860e374b750d908b33c44e4f75564) Uncopypaste parsing of OCI Bundle spec file
    -   [`71c89ddf2`](https://github.com/containerd/containerd/commit/71c89ddf24b05743d9be6b12907dc22719ef769d) \[release/1.6]: Vagrantfile: install failpoint binaries
-   \[release/1.6] cri: stop recommending disable_cgroup ([#&#8203;9169](https://github.com/containerd/containerd/pull/9169))
    -   [`7a0c8b6b7`](https://github.com/containerd/containerd/commit/7a0c8b6b750cbd2bf2377f1d4961609ea1ec6667) cri: stop recommending disable_cgroup
-   \[release/1.6] Allow for images with artifacts to pull ([#&#8203;9150](https://github.com/containerd/containerd/pull/9150))
    -   [`8066dd81c`](https://github.com/containerd/containerd/commit/8066dd81ca673fcf4c8887069769592ba9fd694d) Allow for images with artifacts to pull
-   \[release 1.6] remotes/docker: Fix MountedFrom prefixed with target repository ([#&#8203;9192](https://github.com/containerd/containerd/pull/9192))
    -   [`2fffc344a`](https://github.com/containerd/containerd/commit/2fffc344ad661b37a3dae6102b47f887c946f105) remotes/docker: Fix MountedFrom prefixed with target repository
-   \[release/1.6] remotes: always try to establish tls connection when tls configured ([#&#8203;9189](https://github.com/containerd/containerd/pull/9189))
    -   [`6b5912220`](https://github.com/containerd/containerd/commit/6b591222096f12902ca8269668b36093edcc1899) remotes: always try to establish tls connection when tls configured
-   \[release/1.6] Build binaries with 1.21.1 ([#&#8203;9180](https://github.com/containerd/containerd/pull/9180))
    -   [`37c758de1`](https://github.com/containerd/containerd/commit/37c758de159bce9544e65fefc81019af9fb0be69) Build binaries with 1.21.1
-   \[release/1.6 backport] alias log package to github.com/containerd/log v0.1.0 ([#&#8203;9105](https://github.com/containerd/containerd/pull/9105))
    -   [`f1591cc9b`](https://github.com/containerd/containerd/commit/f1591cc9b9d7f1b73f1c50cdca0ca577959eed48) alias log package to github.com/containerd/log v0.1.0
    -   [`f68d2d93b`](https://github.com/containerd/containerd/commit/f68d2d93b8c815b8687b85c932a8de2960ad2db7) vendor: golang.org/x/sys v0.7.0
    -   [`f305fb233`](https://github.com/containerd/containerd/commit/f305fb233db9764fcd9e83e9078fee213202c3ff) vendor: github.com/stretchr/testify v1.8.4
    -   [`4e24a30af`](https://github.com/containerd/containerd/commit/4e24a30af397b0d4dd6a417467eede3386381516) vendor: github.com/sirupsen/logrus v1.9.3
-   \[release/1.6] remotes/docker: Add MountedFrom and Exists push status ([#&#8203;9111](https://github.com/containerd/containerd/pull/9111))
    -   [`b66c818ba`](https://github.com/containerd/containerd/commit/b66c818ba6bd9e4fe139a6f9d988b3724c7a54ec) remotes/docker: Add MountedFrom and Exists push status

</p>
</details>

##### Changes from containerd/log
<details><summary>9 commits</summary>
<p>

-   Update golangci to 1.49 ([#&#8203;1](https://github.com/containerd/log/pull/1))
    -   [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49
    -   [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README
    -   [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details
    -   [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow
    -   [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module
    -   [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest
    -   [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README
    -   [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file

</p>
</details>

##### Changes from containerd/nri
<details><summary>3 commits</summary>
<p>

-   \[release/0.1 backport] remove containerd as dependency ([#&#8203;58](https://github.com/containerd/nri/pull/58))
    -   [`4275101`](https://github.com/containerd/nri/commit/42751010c8e875a07117c74bfe57c011ae491594) Task: fix typo in godoc
    -   [`f6acbf1`](https://github.com/containerd/nri/commit/f6acbf1dc5b357d216af8ffca9d26dd0db3e4ef1) remove containerd as dependency

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/log**       v0.1.0 ***new***
-   **github.com/containerd/nri**       v0.1.0 -> v0.1.1
-   **github.com/emicklei/go-restful**  v2.9.5 -> v2.16.0
-   **github.com/sirupsen/logrus**      v1.9.0 -> v1.9.3
-   **github.com/stretchr/testify**     v1.8.1 -> v1.8.4
-   **golang.org/x/crypto**             [`3147a52`](https://github.com/containerd/containerd/commit/3147a52a75dd) -> v0.14.0
-   **golang.org/x/net**                v0.8.0 -> v0.17.0
-   **golang.org/x/sys**                v0.6.0 -> v0.13.0
-   **golang.org/x/term**               v0.6.0 -> v0.13.0
-   **golang.org/x/text**               v0.8.0 -> v0.13.0

Previous release can be found at [v1.6.24](https://github.com/containerd/containerd/releases/tag/v1.6.24)

### [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24): containerd 1.6.24

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.23...v1.6.24)

Welcome to the v1.6.24 release of containerd!

The twenty-fourth patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **CRI: fix leaked shim caused by high IO pressure** ([#&#8203;9004](https://github.com/containerd/containerd/pull/9004))
-   **Update to go1.20.8** ([#&#8203;9073](https://github.com/containerd/containerd/pull/9073))
-   **Update runc to v1.1.9** ([#&#8203;8966](https://github.com/containerd/containerd/pull/8966))
-   **Backport: add configurable mount options to overlay snapshotter** ([#&#8203;8961](https://github.com/containerd/containerd/pull/8961))
-   **log: cleanups and improvements to decouple more from logrus** ([#&#8203;9002](https://github.com/containerd/containerd/pull/9002))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Sebastiaan van Stijn
-   Akihiro Suda
-   Wei Fu
-   Derek McGowan
-   Akhil Mohan
-   Cardy.Tang
-   Danny Canter
-   Kazuyoshi Kato
-   Mike Brown
-   Phil Estes
-   Samuel Karp

##### Changes

<details><summary>45 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.24 ([#&#8203;9087](https://github.com/containerd/containerd/pull/9087))
    -   [`cdd59290d`](https://github.com/containerd/containerd/commit/cdd59290d051ffd8b5e730f96930c42cad65beac) Prepare release notes for v1.6.24
-   \[release/1.6 backport] log: cleanups and improvements to decouple more from logrus ([#&#8203;9002](https://github.com/containerd/containerd/pull/9002))
    -   [`33c2d88e7`](https://github.com/containerd/containerd/commit/33c2d88e7809eb42b0e9711c29a35c25a12dc18c) Revert "log: define G() as a function instead of a variable"
    -   [`0a7f2975e`](https://github.com/containerd/containerd/commit/0a7f2975efbad7baddb31c36fb142db2a793534c) log: swap logrus functions with their equivalent on default logger
    -   [`9d175a19b`](https://github.com/containerd/containerd/commit/9d175a19b7cbe165cb6285c891b384d518e2686b) log: add package documentation and summary of package's purpose
    -   [`96fb65529`](https://github.com/containerd/containerd/commit/96fb655290f286eb818bf70f08555cd64ba8e780) log: make Fields type a generic map\[string]any
    -   [`bace17e2e`](https://github.com/containerd/containerd/commit/bace17e2ead161c06fdd670be532f0c042071bd7) log: add log.Entry type
    -   [`dd127885f`](https://github.com/containerd/containerd/commit/dd127885feacdeefc554d7042c49e01002809864) log: define OutputFormat type
    -   [`5b4cf2329`](https://github.com/containerd/containerd/commit/5b4cf23295581c70b92db1dc7c30114bc1a8f3c8) log: define G() as a function instead of a variable
    -   [`ee1b4a1e2`](https://github.com/containerd/containerd/commit/ee1b4a1e2f844a45c0ba784273501bc490e77aa2) log: add all log-levels that are accepted
    -   [`d563a411f`](https://github.com/containerd/containerd/commit/d563a411facc32c8287136d53ca0a744f991f3b4) log: group "enum" consts and touch-up docs
    -   [`6e8f4555b`](https://github.com/containerd/containerd/commit/6e8f4555b3f3f155ee9ffe5f3e7cf8e8c2ee10a6) log: WithLogger: remove redundant intermediate var
    -   [`c19325559`](https://github.com/containerd/containerd/commit/c193255597662b8a7f16479dd454ba3dd728a3c4) log: SetFormat: include returns in switch
    -   [`c3c22f8cb`](https://github.com/containerd/containerd/commit/c3c22f8cbc5b3687bdee79266602bff51e61c84a) log: remove gotest.tools dependency
-   \[release/1.6] update to go1.20.8 ([#&#8203;9073](https://github.com/containerd/containerd/pull/9073))
    -   [`a2c294800`](https://github.com/containerd/containerd/commit/a2c294800ec11447b497bf7452bbbfba06c0168d) \[release/1.6] update to go1.20.8
-   \[release/1.6 backport] make repositories of install dependencies configurable ([#&#8203;9024](https://github.com/containerd/containerd/pull/9024))
    -   [`0da8dcaa7`](https://github.com/containerd/containerd/commit/0da8dcaa7c93c0b708c375a32328a7b85fd668d8) make repositories of install dependencies configurable
-   \[release/1.6 backport] update Golang to go1.20.7, minimum version go1.19 ([#&#8203;9020](https://github.com/containerd/containerd/pull/9020))
    -   [`8e6a9de5b`](https://github.com/containerd/containerd/commit/8e6a9de5b5291b97684e948be096317611b37930) update to go1.20.7, go1.19.12
    -   [`8b2eb371f`](https://github.com/containerd/containerd/commit/8b2eb371f958f1bfc5bcab5ee70bcad18b2e5efc) Update Go to 1.20.6,1.19.11
    -   [`cff669c7a`](https://github.com/containerd/containerd/commit/cff669c7aab055d6b46bbb27fd044aba5e1453d8) update go to go1.20.5, go1.19.10
    -   [`f34a22de9`](https://github.com/containerd/containerd/commit/f34a22de99b57e30cd33d3769e3765950475ba07) update go to go1.20.4, go1.19.9
    -   [`e8e73065e`](https://github.com/containerd/containerd/commit/e8e73065ec668097067d37381399a80c8107fae1) update go to go1.20.3, go1.19.8
    -   [`9b3f950d6`](https://github.com/containerd/containerd/commit/9b3f950d607c3a6c2a3c1b8740c87338a986e203) Go 1.20.2
    -   [`17d03ac68`](https://github.com/containerd/containerd/commit/17d03ac681f61cd83c2bc7239956504c25ceb2f4) Go 1.20.1
    -   [`861f65447`](https://github.com/containerd/containerd/commit/861f65447c4cc59b2b91e441b24f1c80a730ce2b) go.mod: go 1.19
    -   [`81fa93784`](https://github.com/containerd/containerd/commit/81fa937842ac2501f777e23cddab8c7a573bd318) Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20)
    -   [`70dc11a6c`](https://github.com/containerd/containerd/commit/70dc11a6c1258891aa281815bb94d4bdc1194fe7) lint: remove `//nolint:dupword` that are no longer needed
    -   [`fec784a06`](https://github.com/containerd/containerd/commit/fec784a06ad4276574dfb16ff631f9839f3b676c) lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)"
    -   [`6648df1ad`](https://github.com/containerd/containerd/commit/6648df1ada2575df6adcaf295b611d966d3308d7) lint: silence "type `HostFileConfig` is unused (unused)"
    -   [`e6b268bc7`](https://github.com/containerd/containerd/commit/e6b268bc703b5903de719533a8fbe0307767342c) golangci-lint v1.51.1
    -   [`c552ccf67`](https://github.com/containerd/containerd/commit/c552ccf6769245e1531212505fa75e89f6f6ff1c) go.mod: golang.org/x/sync v0.1.0
-   \[releases/1.6] \*: fix leaked shim caused by high IO pressure ([#&#8203;9004](https://github.com/containerd/containerd/pull/9004))
    -   [`d00af5c3e`](https://github.com/containerd/containerd/commit/d00af5c3ea1a290112b3a56bee31023ef1d2019d) integration: issue7496 case should work for runc.v2 only
    -   [`583696e4e`](https://github.com/containerd/containerd/commit/583696e4e0b055b8a0f860b9ed7f31f0f3127ff4) Vagrantfile: add strace tool
    -   [`ab21d60d2`](https://github.com/containerd/containerd/commit/ab21d60d27d1d7c87423e9b4ecb076358762e89b) pkg/cri/server: add criService as argument when handle exit event
    -   [`a229883cb`](https://github.com/containerd/containerd/commit/a229883cb1bffecbd8bd4d41ab19c99110bbd189) pkg/cri/server: fix leaked shim issue
    -   [`d8f824200`](https://github.com/containerd/containerd/commit/d8f824200cdc39410bf9a4d110073186d6864f64) integration: add case to reproduce [#&#8203;7496](https://github.com/containerd/containerd/issues/7496)
-   \[release/1.6] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#&#8203;8961](https://github.com/containerd/containerd/pull/8961))
    -   [`8cd40e1d0`](https://github.com/containerd/containerd/commit/8cd40e1d0f13e5ddfef13833b265f6dfa298ec69) Add configurable mount options to overlay
    -   [`453fa397a`](https://github.com/containerd/containerd/commit/453fa397a1f0f00871ff1ca4314b65e898e33661) feat: make overlay sync removal configurable
-   \[release/1.6 backport] update runc binary to v1.1.9 ([#&#8203;8966](https://github.com/containerd/containerd/pull/8966))
    -   [`4cb7764df`](https://github.com/containerd/containerd/commit/4cb7764df8025d0a6edb34f6b69daf6c2abe6ad0) update runc binary to v1.1.9

</p>
</details>

##### Dependency Changes

-   **golang.org/x/sync**  [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0

Previous release can be found at [v1.6.23](https://github.com/containerd/containerd/releases/tag/v1.6.23)

### [`v1.6.23`](https://github.com/containerd/containerd/releases/tag/v1.6.23): containerd 1.6.23

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.22...v1.6.23)

Welcome to the v1.6.23 release of containerd!

The twenty-third patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   \*\*Add stable ABI support in windows platform matcher + update hcsshim tag ([#&#8203;8854](https://github.com/containerd/containerd/pull/8854))
-   \*\*cri: Don't use rel path for image volumes ([#&#8203;8927](https://github.com/containerd/containerd/pull/8927))
-   \*\*Upgrade GitHub actions packages in release workflow ([#&#8203;8908](https://github.com/containerd/containerd/pull/8908))
-   \*\*update to go1.19.12 ([#&#8203;8905](https://github.com/containerd/containerd/pull/8905))
-   \*\*backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#&#8203;8888](https://github.com/containerd/containerd/pull/8888))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Kirtana Ashok
-   Maksym Pavlenko
-   Austin Vazquez
-   Ben Foster
-   Derek McGowan
-   Mike Brown
-   Phil Estes
-   Rodrigo Campos
-   Sebastiaan van Stijn
-   Wei Fu

##### Changes

<details><summary>13 commits</summary>
<p>

-   \[release/1.6] Add release notes for v1.6.23 ([#&#8203;8939](https://github.com/containerd/containerd/pull/8939))
    -   [`e297a668f`](https://github.com/containerd/containerd/commit/e297a668fa432fddcf1ea718be697a452968847f) Add release notes for v1.6.23
-   \[release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([#&#8203;8854](https://github.com/containerd/containerd/pull/8854))
    -   [`f51bf1960`](https://github.com/containerd/containerd/commit/f51bf19608714bc052a38fc2dc0920b30244aec7) Add support for stable ABI windows versions
    -   [`43a02c0b2`](https://github.com/containerd/containerd/commit/43a02c0b286d77d9455055b2453cbab57c55811b) Update hcsshim tag to v0.9.10
-   \[release/1.6] cri: Don't use rel path for image volumes ([#&#8203;8927](https://github.com/containerd/containerd/pull/8927))
-   [`cc5b0a21b`](https://github.com/containerd/containerd/commit/cc5b0a21b438acd750f9779d3b3c4e68879bed50) cri: Don't use rel path for image volumes
-   \[release/1.6 backport] Upgrade GitHub actions packages in release workflow ([#&#8203;8908](https://github.com/containerd/containerd/pull/8908))
    -   [`4238cff1c`](https://github.com/containerd/containerd/commit/4238cff1cfd43711c71f769b7129c6f8832ef507) Upgrade GitHub actions packages in release workflow
-   \[release/1.6] update to go1.19.12 ([#&#8203;8905](https://github.com/containerd/containerd/pull/8905))
    -   [`00d1092b7`](https://github.com/containerd/containerd/commit/00d1092b78c3405daf3cc4ced8075ca5ca2903a8) update to go1.19.12
-   \[release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#&#8203;8888](https://github.com/containerd/containerd/pull/8888))
    -   [`47d73b2de`](https://github.com/containerd/containerd/commit/47d73b2de65c806d93e19879ae86787b6f3735d6) Fix ro mount option being passed

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**  v0.9.8 -> v0.9.10

Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22)

### [`v1.6.22`](https://github.com/containerd/containerd/releases/tag/v1.6.22): containerd 1.6.22

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.21...v1.6.22)

Welcome to the v1.6.22 release of containerd!

The twenty-second patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **RunC: Update runc binary to v1.1.8** ([#&#8203;8842](https://github.com/containerd/containerd/pull/8842))
-   **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#&#8203;8823](https://github.com/containerd/containerd/pull/8823))
-   **CRI: Write generated CNI config atomically** ([#&#8203;8826](https://github.com/containerd/containerd/pull/8826))
-   **Fix concurrent writes for `UpdateContainerStats`** ([#&#8203;8819](https://github.com/containerd/containerd/pull/8819))
-   **Make checkContainerTimestamps less strict on Windows** ([#&#8203;8827](https://github.com/containerd/containerd/pull/8827))
-   **Port-Forward: Correctly handle known errors** ([#&#8203;8805](https://github.com/containerd/containerd/pull/8805))
-   **Resolve docker.NewResolver race condition** ([#&#8203;8800](https://github.com/containerd/containerd/pull/8800))
-   **SecComp: Always allow `name_to_handle_at`** ([#&#8203;8754](https://github.com/containerd/containerd/pull/8754))
-   **Adding support to run hcsshim from local clone** ([#&#8203;8713](https://github.com/containerd/containerd/pull/8713))
-   **Pinned image support** ([#&#8203;8720](https://github.com/containerd/containerd/pull/8720))
-   **Runtime/V2/RunC: Handle early exits w/o big locks** ([#&#8203;8695](https://github.com/containerd/containerd/pull/8695))
-   **CRITool: Move up to CRI-TOOLS v1.27.0** ([#&#8203;7997](https://github.com/containerd/containerd/pull/7997))
-   **Fix cpu architecture detection issue on emulated ARM platform** ([#&#8203;8533](https://github.com/containerd/containerd/pull/8533))
-   **Task: Don't `close()` io before `cancel()`** ([#&#8203;8659](https://github.com/containerd/containerd/pull/8659))
-   **Fix panic when remote differ returns empty result** ([#&#8203;8640](https://github.com/containerd/containerd/pull/8640))
-   **Plugins: Notify readiness when registered plugins are ready** ([#&#8203;8583](https://github.com/containerd/containerd/pull/8583))
-   **Unwrap io errors in server connection receive error handling** ([ttrpc#&#8203;143](https://github.com/containerd/ttrpc/pull/143))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Phil Estes
-   Sebastiaan van Stijn
-   Derek McGowan
-   Wei Fu
-   Kazuyoshi Kato
-   Austin Vazquez
-   Samuel Karp
-   dependabot\[bot]
-   Jin Dong
-   Maksym Pavlenko
-   Mike Brown
-   Shingo Omura
-   Akhil Mohan
-   Bjorn Neergaard
-   Laura Brehm
-   Tony Fang
-   Aditi Sharma
-   Andrey Epifanov
-   Benjamin Wang
-   Brian Goff
-   Cory Snider
-   Daniel Canter
-   Daniel Lenar
-   Henry Wang
-   Luca Comellini
-   Madhav Jivrajani
-   Mahamed Ali
-   Mohit Sharma
-   Oliver Radwell
-   Priyanka Saggu
-   Qasim Sarfraz
-   Takumasa Sakao
-   wangxiang
-   zounengren

##### Changes

<details><summary>95 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.22 ([#&#8203;8863](https://github.com/containerd/containerd/pull/8863))
    -   [`0770a4601`](https://github.com/containerd/containerd/commit/0770a4601c8d1dfc7699ae35d6be239ecc18025a) \[release/1.6] Add release notes for v1.6.22
-   \[release/1.6] migrate to community owned bucket for node e2e tests ([#&#8203;8876](https://github.com/containerd/containerd/pull/8876))
    -   [`512a672af`](https://github.com/containerd/containerd/commit/512a672afc8ffe9ec9b3a53289c7c6ffc20d0b7a) migrate to community owned bucket
-   \[release/1.6] cri: memory.memsw.limit_in_bytes: no such file or directory ([#&#8203;8870](https://github.com/containerd/containerd/pull/8870))
    -   [`b585ff155`](https://github.com/containerd/containerd/commit/b585ff155a9dd6254e08b23a09a0bb7e0aac8d3f) cri: memory.memsw.limit_in_bytes: no such file or directory
-   \[release/1.6] Update go-restful to v3.10.1  ([#&#8203;8412](https://github.com/containerd/containerd/pull/8412))
    -   [`a322077bf`](https://github.com/containerd/containerd/commit/a322077bfb97c5946b187ec7859960870e2962cc) go.mod: github.com/emicklei/go-restful/v3 v3.10.1
-   \[release/1.6 backport] update runc binary to v1.1.8 ([#&#8203;8842](https://github.com/containerd/containerd/pull/8842))
    -   [`b3ac068eb`](https://github.com/containerd/containerd/commit/b3ac068ebc8526589af4a8b09eab597f501f6f0f) update runc binary to v1.1.8
-   \[release/1.6 backport] ci: remove libseccomp-dev installation for nightly ([#&#8203;8773](https://github.com/containerd/containerd/pull/8773))
    -   [`6e2bcb6dd`](https://github.com/containerd/containerd/commit/6e2bcb6ddb7629f3c7f4ba62d5d74cf7179bb204) ci: remove libseccomp-dev installation for nightly
-   \[release/1.6 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#&#8203;8823](https://github.com/containerd/containerd/pull/8823))
    -   [`cd06f23af`](https://github.com/containerd/containerd/commit/cd06f23af6bcf8c87cda625a0e78168c032a0637) capture desc variable in range variable just in case that it run in parallel mode
    -   [`30f5c6a1f`](https://github.com/containerd/containerd/commit/30f5c6a1f26bf34bbe5eaf21acc7d5b86b14e027) Use t.TempDir instead of os.MkdirTemp
    -   [`59d8363ef`](https://github.com/containerd/containerd/commit/59d8363ef33caa1a8261f472d3081f7f9d39e75e) fix userstr for dditionalGids on Linux
-   \[release/1.6 backport] cri: write generated CNI config atomically ([#&#8203;8826](https://github.com/containerd/containerd/pull/8826))
    -   [`d75bf78c2`](https://github.com/containerd/containerd/commit/d75bf78c2f4af6c773056cdd096d3e3b9536348e) ctr: update WritePidFile to use atomicfile
    -   [`5f70b23c1`](https://github.com/containerd/containerd/commit/5f70b23c11dc0ff5b4602fc202ffcae30013bb41) shim: WritePidFile & WriteAddress use atomicfile
    -   [`505d444b0`](https://github.com/containerd/containerd/commit/505d444b0f339f2daa631ef6ea7f1a9cc22ba6f7) cri: write generated CNI config atomically on Unix
    -   [`b2d2d3829`](https://github.com/containerd/containerd/commit/b2d2d3829912a87be519840e45307e0e74bf7693) atomicfile: new package for atomic file writes
-   \[release/1.6 backport] Fix concurrent writes for UpdateContainerStats ([#&#8203;8819](https://github.com/containerd/containerd/pull/8819))
    -   [`9f650143f`](https://github.com/containerd/containerd/commit/9f650143fafb5927479ea3b5bf2b8e309c2d8265) Fix concurrent writes for UpdateContainerStats
-   \[release/1.6 backport] Make checkContainerTimestamps less strict on Windows ([#&#8203;8827](https://github.com/containerd/containerd/pull/8827))
    -   [`568ce91ca`](https://github.com/containerd/containerd/commit/568ce91ca590bd37346df0550f25e7ef7eef3cff) Make checkContainerTimestamps less strict on Windows
-   \[release/1.6 backport] dependency: bump go.etcd.io/bbolt to v1.3.7 ([#&#8203;8817](https://github.com/containerd/containerd/pull/8817))
    -   [`d2f47192a`](https://github.com/containerd/containerd/commit/d2f47192a54e7b58c037788a0f9b7e4f9047e849) dependency: bump go.etcd.io/bbolt to v1.3.7
    -   [`fb56dc245`](https://github.com/containerd/containerd/commit/fb56dc24522855a33ec795eaeebbb57bb15e49f0) \[release/1.6] vendor: github.com/stretchr/testify v1.8.1
-   \[release/1.6 backport] Move logrus setup code to log package ([#&#8203;8832](https://github.com/containerd/containerd/pull/8832))
    -   [`7fbd5dc89`](https://github.com/containerd/containerd/commit/7fbd5dc893007631794984c26c3a72320a34ae92) Move logrus setup code to log package
-   \[release/1.6 backport] release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#&#8203;8820](https://github.com/containerd/containerd/pull/8820))
    -   [`59a143670`](https://github.com/containerd/containerd/commit/59a1436706a23746f45ec111a0ffbcf887fb42de) release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles
-   \[release/1.6 backport] Use version 2 configuration format in docs ([#&#8203;8821](https://github.com/containerd/containerd/pull/8821))
    -   [`5b51b79e2`](https://github.com/containerd/containerd/commit/5b51b79e2c7baf8dad53e48dfddadabff08b711d) \[release/1.6] fix remaining "v1 config" plugin IDs
    -   [`b7cf26d8d`](https://github.com/containerd/containerd/commit/b7cf26d8dc72f0f79946c289ac68c0f2a581c6c5) docs: Fix sample config.toml syntax
    -   [`fcdaf0966`](https://github.com/containerd/containerd/commit/fcdaf09664c006abf711ee88e26f18019643ffd9) docs: migrate config v1 to v2
    -   [`728d5c5f0`](https://github.com/containerd/containerd/commit/728d5c5f0be709e415f72f44c52fe78233ddd97d) Use version 2 config and mention containerd config command
-   \[release/1.6] update go to go1.19.11 ([#&#8203;8816](https://github.com/containerd/containerd/pull/8816))
    -   [`81aa14718`](https://github.com/containerd/containerd/commit/81aa147181ca24987be3036d8487b54125256fc3) \[release/1.6] update go to go1.19.11
-   \[release/1.6] update go to go1.19.10 ([#&#8203;8715](https://github.com/containerd/containerd/pull/8715))
    -   [`17cd86629`](https://github.com/containerd/containerd/commit/17cd86629acab42dd7708720b386e88cd4be1535) \[release/1.6] update go to go1.19.10
-   \[release/1.6 backport] bugfix(port-forward): Correctly handle known errors ([#&#8203;8805](https://github.com/containerd/containerd/pull/8805))
    -   [`fdb65f214`](https://github.com/containerd/containerd/commit/fdb65f21488bd7a2d8dfca9beac95e0dfbc4259c) bugfix(port-forward): Correctly handle known errors
-   \[release/1.6] Resolve docker.NewResolver race condition ([#&#8203;8800](https://github.com/containerd/containerd/pull/8800))
    -   [`b5784af66`](https://github.com/containerd/containerd/commit/b5784af662f7fc409eebbd655c42b7b0f462d8ed) Change http.Header copy to builtin Clone
    -   [`31c466f82`](https://github.com/containerd/containerd/commit/31c466f822906dfbbf57be1cfec253179455f429) Resolve docker.NewResolver race condition
-   \[release/1.6 backport] vendor: github.com/containerd/zfs v1.1.0 ([#&#8203;8781](https://github.com/containerd/containerd/pull/8781))
    -   [`be6406ca6`](https://github.com/containerd/containerd/commit/be6406ca67234c0a89320272557bb5ac5b0b60cc) vendor: github.com/containerd/zfs v1.1.0
    -   [`9f1260074`](https://github.com/containerd/containerd/commit/9f12600747060b5ba68d0d27d1666e7b25e00afb) \[release/1.6] vendor gotest.tools/v3 v3.5.0
    -   [`526e9e0ce`](https://github.com/containerd/containerd/commit/526e9e0ce4e2338afa0eca0f1c0969f24f9819dd) Bump grpc to v1.50.1
    -   [`0e7d2d121`](https://github.com/containerd/containerd/commit/0e7d2d1217d6399607cf8c8abb89662cebd9a30a) go.mod: github.com/sirupsen/logrus v1.9.0
    -   [`5b153c621`](https://github.com/containerd/containerd/commit/5b153c6214a9ae14e75be6a6e15b6bdf9c2b60f0) go.mod: github.com/moby/sys/mountinfo v0.6.2
    -   [`9dee60960`](https://github.com/containerd/containerd/commit/9dee60960792b9e6d8d80ddc16011191e7a660c6) go.mod: github.com/moby/sys/mountinfo v0.6.0
-   \[release/1.6 backport] seccomp: always allow name_to_handle_at ([#&#8203;8754](https://github.com/containerd/containerd/pull/8754))
    -   [`07ea7b9e7`](https://github.com/containerd/containerd/commit/07ea7b9e789ec116d9002a3ab0cfb35dc61ef8df) seccomp: always allow name_to_handle_at
-   \[release/1.6 backport] Update ginkgo to match cri-tools' version ([#&#8203;8759](https://github.com/containerd/containerd/pull/8759))
    -   [`1dae51fed`](https://github.com/containerd/containerd/commit/1dae51fed807a56b5e135fb5a3b0455713450e25) Update ginkgo to match cri-tools' version
-   \[release/1.6 backport] integration/client: add timeout to `TestShimOOMScore` ([#&#8203;8749](https://github.com/containerd/containerd/pull/8749))
    -   [`bd76ab978`](https://github.com/containerd/containerd/commit/bd76ab978ba760affd9fe2be2901b4ff76d5a3c0) integration/client: add timeout to `TestShimOOMScore`
-   \[release/1.6 backport] Adding support to run hcsshim from local clone ([#&#8203;8713](https://github.com/containerd/containerd/pull/8713))
    -   [`8e14eccb2`](https://github.com/containerd/containerd/commit/8e14eccb29c6a43f75779e9cdd08dc5f75825166) Adding support to run hcsshim from local clone
-   \[1.6] Add Fields type alias to log package ([#&#8203;8739](https://github.com/containerd/containerd/pull/8739))
    -   [`9f2cdd589`](https://github.com/containerd/containerd/commit/9f2cdd5894ba0010e602a120e0c625ac96585711) Add Fields type alias to log package
-   \[release/1.6] Pinned image support ([#&#8203;8720](https://github.com/containerd/containerd/pull/8720))
    -   [`f4713aad0`](https://github.com/containerd/containerd/commit/f4713aad0e3b9f51d02e288b94e4d2c524373284) Pinned image support
-   \[release/1.6 backport] runtime/v2/runc: handle early exits w/o big locks ([#&#8203;8695](https://github.com/containerd/containerd/pull/8695))
    -   [`dbeec47b4`](https://github.com/containerd/containerd/commit/dbeec47b4663422225ffc517ab9d696777c2c6f1) runtime/v2/runc: handle early exits w/o big locks
-   \[release/1.6 backport] move up to CRI-TOOLS v1.27.0 ([#&#8203;7997](https://github.com/containerd/containerd/pull/7997))
    -   [`a8e01e40a`](https://github.com/containerd/containerd/commit/a8e01e40a0f63aac0249d514de1dc2708d40d7f7) move to CRI-TOOLS v1.27.0
    -   [`755f80698`](https://github.com/containerd/containerd/commit/755f80698aeb5f1ca856f487cd2d261464c6d705) move up to CRI-TOOLS v1.26.0
    -   [`b29cc035f`](https://github.com/containerd/containerd/commit/b29cc035fbe6ad06d67e4b42fed2f47b57ef0a48) bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a)
    -   [`9138999f5`](https://github.com/containerd/containerd/commit/9138999f5dea770598b4a67da6682cab4c3f5713) Upgrade critools from 1.24.1 to 1.25.0
-   \[release/1.6] cherry-pick: No more nondistributable layers in MS registry ([#&#8203;8691](https://github.com/containerd/containerd/pull/8691))
    -   [`712ff8eb3`](https://github.com/containerd/containerd/commit/712ff8eb389d49531207e34479e065406effb902) No more nondistributable layers in MS registry
-   \[release/1.6] Fix cpu architecture detection issue on emulated ARM platform ([#&#8203;8533](https://github.com/containerd/containerd/pull/8533))
    -   [`2b16e4bfa`](https://github.com/containerd/containerd/commit/2b16e4bfa135e3242b41ae43cf2bb6f3cd3fe9b1) Add unit test to function GetCPUVariantFromArch
    -   [`106e36ec3`](https://github.com/containerd/containerd/commit/106e36ec3e7c72036b498b4ac73000d5c1a79d9d) Use uname machine field to get CPU variant if fails at /proc/cpuinfo
-   \[release/1.6] Update lint timeout ([#&#8203;8679](https://github.com/containerd/containerd/pull/8679))
    -   [`287fdfea6`](https://github.com/containerd/containerd/commit/287fdfea63fea94952885f0807fc11c2612e5828) Update linter timeout to match main branch
-   \[release/1.6 backport] task: don't `close()` io before `cancel()` ([#&#8203;8659](https://github.com/containerd/containerd/pull/8659))
    -   [`b27f7daa5`](https://github.com/containerd/containerd/commit/b27f7daa582f149f985a56313711c8c4a4353376) task: don't `close()` io before `cancel()`
-   \[release/1.6] update test box to fedora 37 ([#&#8203;8660](https://github.com/containerd/containerd/pull/8660))
    -   [`8b4c69248`](https://github.com/containerd/containerd/commit/8b4c6924856fddaece9ed58700cb8473c6a7bdeb) update test box to fedora 37
-   \[release/1.6] Revert "Downgrade MinGW to version 10.2.0" ([#&#8203;8668](https://github.com/containerd/containerd/pull/8668))
    -   [`81d6085af`](https://github.com/containerd/containerd/commit/81d6085af5a20fbc728ccffad4b91ee6ef08ef36) Revert "Downgrade MinGW to version 10.2.0"
-   \[release/1.6 backport] Fix panic when remote differ returns empty result ([#&#8203;8640](https://github.com/containerd/containerd/pull/8640))
    -   [`f98122378`](https://github.com/containerd/containerd/commit/f98122378197fb5199bab1d7574288fe276293ee) Fix panic when remote differ returns empty result
-   \[1.6] Bump x/net to 0.8 ([#&#8203;8642](https://github.com/containerd/containerd/pull/8642))
    -   [`aa53f272d`](https://github.com/containerd/containerd/commit/aa53f272dd748ef57bb22a9f9aaa86fb9ad2f4d4) Bump x/net to 0.8
-   \[release/1.6 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#&#8203;8620](https://github.com/containerd/containerd/pull/8620))
    -   [`56ff20839`](https://github.com/containerd/containerd/commit/56ff2083957e0ca58168f50e89120bb5d0067362) remotes/docker: ResolverOptions: fix deprecation comments
-   \[release/1.6] notify readiness when registered plugins are ready ([#&#8203;8583](https://github.com/containerd/containerd/pull/8583))
    -   [`bccaf68b7`](https://github.com/containerd/containerd/commit/bccaf68b7749b62d821b80c8a845417113f44310) notify readiness when registered plugins are ready
-   \[release/1.6] Update ttrpc to 1.1.2 ([#&#8203;8528](https://github.com/containerd/containerd/pull/8528))
    -   [`1cdbbe76b`](https://github.com/containerd/containerd/commit/1cdbbe76bc6d86d50d9338d3605af7ed8a33559c) Update ttrpc to 1.1.2

</p>
</details>

##### Changes from containerd/ttrpc
<details><summary>2 commits</summary>
<p>

-   \[release/1.1] Unwrap io errors in server connection receive error handling ([#&#8203;143](https://github.com/containerd/ttrpc/pull/143))
    -   [`d5f7eed`](https://github.com/containerd/ttrpc/commit/d5f7eeddb5e09b035c0683a2ffc9d19bda284b59) Unwrap io errors in server connection receive error handling

</p>
</details>

##### Changes from containerd/zfs
<details><summary>49 commits</summary>
<p>

-   gofumpt and update status badges ([#&#8203;75](https://github.com/containerd/zfs/pull/75))
    -   [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir()
    -   [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges
    -   [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code
-   go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#&#8203;73](https://github.com/containerd/zfs/pull/73))
    -   [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
-   gha: fix golangci-lint, and upgrade to v1.52.2 ([#&#8203;74](https://github.com/containerd/zfs/pull/74))
    -   [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin
    -   [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2
-   Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#&#8203;72](https://github.com/containerd/zfs/pull/72))
    -   [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
-   Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#&#8203;69](https://github.com/containerd/zfs/pull/69))
    -   [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
-   Add CodeQL analysis workflow ([#&#8203;67](https://github.com/containerd/zfs/pull/67))
    -   [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow
-   Update GitHub actions CI workflow ([#&#8203;66](https://github.com/containerd/zfs/pull/66))
    -   [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow
-   Upgrade compiler to Go 1.19 and update dependencies ([#&#8203;68](https://github.com/containerd/zfs/pull/68))
    -   [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies
    -   [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19
-   Remove references to io/ioutil package ([#&#8203;65](https://github.com/containerd/zfs/pull/65))
    -   [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package
-   Update go.mod and move to supported Go version ([#&#8203;62](https://github.com/containerd/zfs/pull/62))
    -   [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version
    -   [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest
-   go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#&#8203;59](https://github.com/containerd/zfs/pull/59))
    -   [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0
-   go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#&#8203;58](https://github.com/containerd/zfs/pull/58))
    -   [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
-   Update vendoring to containerd 1.6.x ([#&#8203;57](https://github.com/containerd/zfs/pull/57))
    -   [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x
-   Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#&#8203;55](https://github.com/containerd/zfs/pull/55))
    -   [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
-   Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#&#8203;54](https://github.com/containerd/zfs/pull/54))
    -   [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
-   [follow-up-#&#8203;52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#&#8203;53](https://github.com/containerd/zfs/pull/53))
    -   [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#&#8203;52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf
-   replace pkg/errors ([#&#8203;52](https://github.com/containerd/zfs/pull/52))
    -   [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors
-   Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#&#8203;51](https://github.com/containerd/zfs/pull/51))
    -   [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
-   Bump containerd to 1.5.2 ([#&#8203;50](https://github.com/containerd/zfs/pull/50))
    -   [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2
-   Rename branches from master to main ([#&#8203;49](https://github.com/containerd/zfs/pull/49))
    -   [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main
-   sync up with containerd 1.5 GA  ([#&#8203;47](https://github.com/containerd/zfs/pull/47))
    -   [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga
-   README.md: fix CI badge ([#&#8203;46](https://github.com/containerd/zfs/pull/46))
    -   [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge

</p>
</details>

##### Dependency Changes

-   **github.com/containerd/ttrpc**        v1.1.1 -> v1.1.2
-   **github.com/containerd/zfs**          v1.0.0 -> v1.1.0
-   **github.com/emicklei/go-restful/v3**  v3.7.3 -> v3.10.1
-   **github.com/google/go-cmp**           v0.5.6 -> v0.5.9
-   **github.com/google/uuid**             v1.2.0 -> v1.3.0
-   **github.com/mistifyio/go-zfs/v3**     v3.0.1 ***new***
-   **github.com/moby/sys/mountinfo**      v0.5.0 -> v0.6.2
-   **github.com/sirupsen/logrus**         v1.8.1 -> v1.9.0
-   **github.com/stretchr/testify**        v1.7.0 -> v1.8.1
-   **go.etcd.io/bbolt**                   v1.3.6 -> v1.3.7
-   **golang.org/x/net**                   [`a158d28`](https://github.com/containerd/containerd/commit/a158d28d115b) -> v0.8.0
-   **golang.org/x/sys**                   [`8c9f86f`](https://github.com/containerd/containerd/commit/8c9f86f7a55f) -> v0.6.0
-   **golang.org/x/term**                  [`03fcf44`](https://github.com/containerd/containerd/commit/03fcf44c2211) -> v0.6.0
-   **golang.org/x/text**                  v0.3.7 -> v0.8.0
-   **google.golang.org/grpc**             v1.47.0 -> v1.50.1
-   **google.golang.org/protobuf**         v1.28.0 -> v1.28.1
-   **gotest.tools/v3**                    v3.0.3 -> v3.5.0

Previous release can be found at [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21)

### [`v1.6.21`](https://github.com/containerd/containerd/releases/tag/v1.6.21): containerd 1.6.21

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.20...v1.6.21)

Welcome to the v1.6.21 release of containerd!

The twenty-first patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   \*\*update runc binary to v1.1.7 ([#&#8203;8450](https://github.com/containerd/containerd/pull/8450))
-   \*\*Remove entry for container from container store on error ([#&#8203;8456](https://github.com/containerd/containerd/pull/8456))
-   \*\*oci: partially restore comment on read-only mounts for uid/gid uses ([#&#8203;8403](https://github.com/containerd/containerd/pull/8403))
-   \*\*windows: Add ArgsEscaped support for CRI ([#&#8203;8247](https://github.com/containerd/containerd/pull/8247))
-   \*\*oci: Use WithReadonlyTempMount when adding users/groups ([#&#8203;8357](https://github.com/containerd/containerd/pull/8357))
-   \*\*archive: consistently respect value of WithSkipDockerManifest ([#&#8203;8345](https://github.com/containerd/containerd/pull/8345))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Sebastiaan van Stijn
-   Iceber Gu
-   Kirtana Ashok
-   Justin Chadwell
-   Phil Estes
-   Akihiro Suda
-   Djordje Lukic
-   Kazuyoshi Kato
-   Mike Brown
-   Wei Fu
-   kiashok

##### Changes

<details><summary>26 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.21  ([#&#8203;8463](https://github.com/containerd/containerd/pull/8463))
    -   [`9226c362a`](https://github.com/containerd/containerd/commit/9226c362a92b9a19860a3facc3eaeb0d2ec22e0c) Add release notes for v1.6.21
-   \[release/1.6] update go to go1.19.9 ([#&#8203;8469](https://github.com/containerd/containerd/pull/8469))
    -   [`39566aade`](https://github.com/containerd/containerd/commit/39566aadecc45abcfa242e41ad7bf07142f49c8c) \[release/1.6] update go to go1.19.9
-   \[release/1.6] fix the task setting the runtime path ([#&#8203;8454](https://github.com/containerd/containerd/pull/8454))
    -   [`e8840f688`](https://github.com/containerd/containerd/commit/e8840f688ae402bef461963321d63cf9cf6fbb34) skip TestContainerStartWithAbsRuntimePath if the runtime is v1
    -   [`75ab094de`](https://github.com/containerd/containerd/commit/75ab094de81b2d6806434e2f9ac94cb409e36314) integration: add container start test using abs runtime path
    -   [`f49254f0b`](https://github.com/containerd/containerd/commit/f49254f0b7e17951c1be6e8a8063eb3f47175cd5) WithRuntimePath uses the TaskInfo.RuntimePath field
-   \[release/1.6 backport] update runc binary to v1.1.7 ([#&#8203;8450](https://github.com/containerd/containerd/pull/8450))
    -   [`ccb51ff26`](https://github.com/containerd/containerd/commit/ccb51ff26971c10f88f8e594aeb8d29159f93e82) update runc binary to v1.1.7
-   \[release/1.6] Remove entry for container from container store on error ([#&#8203;8456](https://github.com/containerd/containerd/pull/8456))
    -   [`95d31551d`](https://github.com/containerd/containerd/commit/95d31551d0f7b1a842bcb87b2c2916fda52f07a6) Remove entry for container from container store on error
-   \[release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#&#8203;8403](https://github.com/containerd/containerd/pull/8403))
    -   [`c33eb574d`](https://github.com/containerd/containerd/commit/c33eb574dbc064ad8556512fff6b2cd81e510101) oci: partially restore comment on read-only mounts for uid/gid uses
-   \[release/1.6 ] Add ArgsEscaped support for CRI ([#&#8203;8247](https://github.com/containerd/containerd/pull/8247))
    -   [`bc2e01303`](https://github.com/containerd/containerd/commit/bc2e01303b7103d7fe81a97caadc224102db1460) Fix argsEscaped tests
    -   [`8b81d5acc`](https://github.com/containerd/containerd/commit/8b81d5acca2e6f390af99756128392253c5d0a5c) Add ArgsEscaped support for CRI
-   \[release/1.6 backport] update runc binary to v1.1.6 ([#&#8203;8385](https://github.com/containerd/containerd/pull/8385))
    -   [`57d953482`](https://github.com/containerd/containerd/commit/57d953482083cb99c5814f5c414641599aa7c206) update runc binary to v1.1.6
-   \[release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#&#8203;8357](https://github.com/containerd/containerd/pull/8357))
    -   [`fb5e663d0`](https://github.com/containerd/containerd/commit/fb5e663d0d4e7e5091e2dedfa079c1a8f310f0bb) oci: Use WithReadonlyTempMount when adding users/groups
-   \[release/1.6] update go to go1.19.8 ([#&#8203;8353](https://github.com/containerd/containerd/pull/8353))
    -   [`26efb8fd5`](https://github.com/containerd/containerd/commit/26efb8fd53de5bac26b28f4a2b8d8adf284ba7c2) \[release/1.6] update go to go1.19.8
-   \[release/1.6] archive: consistently respect value of WithSkipDockerManifest ([#&#8203;8345](https://github.com/containerd/containerd/pull/8345))
    -   [`ec13b497e`](https://github.com/containerd/containerd/commit/ec13b497ee7fba96d892637b75bdfd1932e64f12) export: add test for WithSkipDockerManifest
    -   [`d1f3771c4`](https://github.com/containerd/containerd/commit/d1f3771c41470b3460b37edad9e8776b913f02e5) archive: consistently respect value of WithSkipDockerManifest

</p>
</details>

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20)

### [`v1.6.20`](https://github.com/containerd/containerd/releases/tag/v1.6.20): containerd 1.6.20

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.19...v1.6.20)

Welcome to the v1.6.20 release of containerd!

The twentieth patch release for containerd 1.6 contains various fixes and updates.

##### Notable Updates

-   **Disable looking up usernames and groupnames on host** ([#&#8203;8230](https://github.com/containerd/containerd/pull/8230))
-   **Add support for Windows ArgsEscaped images** ([#&#8203;8273](https://github.com/containerd/containerd/pull/8273))
-   **Update hcsshim to v0.9.8** ([#&#8203;8274](https://github.com/containerd/containerd/pull/8274))
-   **Fix debug flag in shim** ([#&#8203;8288](https://github.com/containerd/containerd/pull/8288))
-   **Add `WithReadonlyTempMount` to support readonly temporary mounts** ([#&#8203;8299](https://github.com/containerd/containerd/pull/8299))
-   **Update ttrpc to fix file descriptor leak** ([#&#8203;8308](https://github.com/containerd/containerd/pull/8308))
-   **Update runc binary to v1.1.5** ([#&#8203;8324](https://github.com/containerd/containerd/pull/8324))
-   **Update image config to support ArgsEscaped** ([#&#8203;8306](https://github.com/containerd/containerd/pull/8306))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Sebastiaan van Stijn
-   Derek McGowan
-   Maksym Pavlenko
-   Akihiro Suda
-   Phil Estes
-   Eng Zer Jun
-   Justin Terry
-   Kazuyoshi Kato
-   Wei Fu
-   Abirdcfly
-   Gabriel Adrian Samfira
-   Henry Wang
-   Kang.Zhang
-   Kirtana Ashok
-   Laura Brehm
-   Luca Comellini
-   Paul "TBBle" Hampson
-   liyuxuan.darfux
-   ningmingxiao
-   wanglei

##### Changes

<details><summary>48 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.20 ([#&#8203;8310](https://github.com/containerd/containerd/pull/8310))
    -   [`a039a2b9c`](https://github.com/containerd/containerd/commit/a039a2b9c6a5e655b58bdd139af7307563b8efc7) Prepare release notes for v1.6.20
-   \[release/1.6]Updates oci image config to support upstream ArgsEscaped ([#&#8203;8306](https://github.com/containerd/containerd/pull/8306))
    -   [`5dd94a7e6`](https://github.com/containerd/containerd/commit/5dd94a7e6ccb356d2c7061ad49ba8a843ed9e4df) Updates oci image config to support upstream ArgsEscaped
-   \[release/1.6] update runc binary to v1.1.5 ([#&#8203;8324](https://github.com/containerd/containerd/pull/8324))
    -   [`59fa6b191`](https://github.com/containerd/containerd/commit/59fa6b1914554c07321d79aa2131f370d0ebe27c) update runc binary to v1.1.5
    -   [`0c0aad93e`](https://github.com/containerd/containerd/commit/0c0aad93ec9a0db6392e41790294679eb9d2e3bc) go.mod: github.com/opencontainers/runc v1.1.5
-   \[release/1.6] Update ttrpc to v1.1.1 ([#&#8203;8308](https://github.com/containerd/containerd/pull/8308))
    -   [`50a6be0b4`](https://github.com/containerd/containerd/commit/50a6be0b4798eef5486a0f86c59686898ecc20c8) Update ttrpc to v1.1.1
-   \[release/1.6 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#&#8203;8299](https://github.com/containerd/containerd/pull/8299))
    -   [`8cead6594`](https://github.com/containerd/containerd/commit/8cead659440376c4a821d702f73c392f1c7fb8ce) Add `WithReadonlyTempMount` to create readonly temporary mounts
-   \[release/1.6] Adds support for Windows ArgsEscaped images ([#&#8203;8273](https://github.com/containerd/containerd/pull/8273))
    -   [`f0dc0297d`](https://github.com/containerd/containerd/commit/f0dc0297d02e223d997fc992496b07006c0c4a69) Adds support for Windows ArgsEscaped images
-   \[release/1.6]go.mod: Bump hcsshim tag to v0.9.8 ([#&#8203;8274](https://github.com/containerd/containerd/pull/8274))
    -   [`5981a24e2`](https://github.com/containerd/containerd/commit/5981a24e21a039c84f532c0e1ada85077c4101f1) Update hcsshim tag to v0.9.8
-   \[1.6] shim: fix debug flag not working ([#&#8203;8288](https://github.com/containerd/containerd/pull/8288))
    -   [`28f1e32e3`](https://github.com/containerd/containerd/commit/28f1e32e3b1b167eeab8890d67ed57817b3da29b) shim: fix debug flag not working
-   \[release/1.6] cherry-pick: Update go-restful to v3 ([#&#8203;8271](https://github.com/containerd/containerd/pull/8271))
    -   [`5a8ea75df`](https://github.com/containerd/containerd/commit/5a8ea75df7d2956cd711e4445eea9b6aac070835) Update go-restful to v3
    -   [`59bdc1d5a`](https://github.com/containerd/containerd/commit/59bdc1d5a77ec7d5d57c66395de1bd2c1e27a55f) go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3
-   \[release/1.6] Go 1.19.7 ([#&#8203;8238](https://github.com/containerd/containerd/pull/8238))
    -   [`86e0bd9e3`](https://github.com/containerd/containerd/commit/86e0bd9e3966ae686d7ab0a99a60f0212837028d) Go 1.19.7
-   \[release/1.6 backport] archive: disable looking up usernames and groupnames on the host ([#&#8203;8230](https://github.com/containerd/containerd/pull/8230))
    -   [`063ad2f19`](https://github.com/containerd/containerd/commit/063ad2f1949168fed35a5609d6a0c01c529da346) archive: disable looking up usernames and groupnames on the host
-   \[release/1.6 backport] assorted linting, and golang update-related changes ([#&#8203;8229](https://github.com/containerd/containerd/pull/8229))
    -   [`9cbea6fe7`](https://github.com/containerd/containerd/commit/9cbea6fe783f6ec6086bd85477ed2df659f10988) Enable dupword linter
    -   [`c73f1abff`](https://github.com/containerd/containerd/commit/c73f1abff73657ea78d8a4762ff1b60324597896) Bump golangci-lint to v1.50.1
    -   [`f198f7724`](https://github.com/containerd/containerd/commit/f198f7724d6d83261ba83f830d65103169608fc7) update golangci-lint to v1.49.0
    -   [`e6179af1e`](https://github.com/containerd/containerd/commit/e6179af1ea994e1bdcc2c03f65223fa7256d9024) remove unneeded nolint-comments (nolintlint), disable deprecated linters
    -   [`77160e6b5`](https://github.com/containerd/containerd/commit/77160e6b592ef44e4e800fac7736742dcf521f9c) \[release/1.6] adjust some nolint comments
    -   [`95655f4ce`](https://github.com/containerd/containerd/commit/95655f4ceedc29e44f13bb5b6b702f319c207b43) clean-up "nolint" comments, remove unused ones
    -   [`9f0617ecc`](https://github.com/containerd/containerd/commit/9f0617ecc46ab189b2bd7d4839d89327f75b75ba) pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint
    -   [`e66397d83`](https://github.com/containerd/containerd/commit/e66397d838fa69e2653eba67e5e9ac081c84c69b) golangci-lint: sort linters in config file
    -   [`682a567e9`](https://github.com/containerd/containerd/commit/682a567e9eb86c1a538067ad5bb36b2d6b59d4fc) linting: address gosec G112/G114
    -   [`627f563e6`](https://github.com/containerd/containerd/commit/627f563e6d61d2ca98f77eef6322babf9f53553c) chore: remove duplicate word in comments
    -   [`efb88a8bb`](https://github.com/containerd/containerd/commit/efb88a8bbcdbefe6b7c820aee5b41257af1fd093) pkg/cri/streaming: increase ReadHeaderTimeout
    -   [`45f055df6`](https://github.com/containerd/containerd/commit/45f055df6617a5c05c494e6870694c8c11c13711) Update protobuf definitions
    -   [`584707524`](https://github.com/containerd/containerd/commit/584707524ac08d5f5284fd76ded25f3845886587) Run gofmt 1.19
    -   [`f33e38572`](https://github.com/containerd/containerd/commit/f33e38572758e178a7e57344983c139ac87a138e) Switch to Go 1.19
    -   [`fc10cd23a`](https://github.com/containerd/containerd/commit/fc10cd23adc555c559b42e5c996bfb212cc4b50e) remove duplicate
    -   [`7cbb9e746`](https://github.com/containerd/containerd/commit/7cbb9e746128e4ab87ee28bb6f833df928048fb0) Update linters to use t.Setenv
    -   [`4347a3265`](https://github.com/containerd/containerd/commit/4347a3265a895d9f30602dc7dcb83c00e762892b) Use t.Setenv instead of os.Setenv
    -   [`10357eab5`](https://github.com/containerd/containerd/commit/10357eab5f89aa875ff2fec3500416d86807d1da) Address some timeout issues in the Windows CI
    -   [`977ce8ef5`](https://github.com/containerd/containerd/commit/977ce8ef508d5cdbf4d549458a0cc46cd14f7833) Enable gosec linter for golangci-lint
    -   [`c23945c5f`](https://github.com/containerd/containerd/commit/c23945c5fab20269c98aa17337a247f6e9ec9175) test: remove redundant `mountPoint`
    -   [`588ed91d3`](https://github.com/containerd/containerd/commit/588ed91d3fb93c77118e35ca09e73227ed81d3ff) test: use `T.TempDir` to create temporary test directory
    -   [`c2ed63c86`](https://github.com/containerd/containerd/commit/c2ed63c86cacc0cf5e2e2729d2478c0c0385c039) Remove hardcoded /tmp in tempfile paths
    -   [`7e382c516`](https://github.com/containerd/containerd/commit/7e382c516f80ea71aa9086d2cb9c0e83ec155222) fix Implicit memory aliasing in for loop

</p>
</details>

##### Changes from containerd/ttrpc
<details><summary>2 commits</summary>
<p>

-   \[release/1.1] server: Fix connection leak when receiving ECONNRESET ([#&#8203;136](https://github.com/containerd/ttrpc/pull/136))
    -   [`8977f59`](https://github.com/containerd/ttrpc/commit/8977f59dbda8a5a97d0801669e4c0d9f5a7088dd) server: Fix connection leak when receiving ECONNRESET

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**          v0.9.7 -> v0.9.8
-   **github.com/containerd/ttrpc**           v1.1.0 -> v1.1.1
-   **github.com/emicklei/go-restful/v3**     v3.7.3 ***new***
-   **github.com/opencontainers/image-spec**  [`c5a74bc`](https://github.com/containerd/containerd/commit/c5a74bcca799) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b)
-   **github.com/opencontainers/runc**        v1.1.2 -> v1.1.5

Previous release can be found at [v1.6.19](https://github.com/containerd/containerd/releases/tag/v1.6.19)

### [`v1.6.19`](https://github.com/containerd/containerd/releases/tag/v1.6.19): containerd 1.6.19

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.18...v1.6.19)

Welcome to the v1.6.19 release of containerd!

The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms

##### Notable Updates

-   **Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers** ([#&#8203;8153](https://github.com/containerd/containerd/pull/8153))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Kirtana Ashok
-   Derek McGowan
-   Wei Fu

##### Changes

<details><summary>4 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.19 ([#&#8203;8157](https://github.com/containerd/containerd/pull/8157))
    -   [`23e94075a`](https://github.com/containerd/containerd/commit/23e94075a5cf42c37c0854d976a5b9c50358f33f) Add release notes for v1.6.19
-   \[release/1.6] go.mod: Bump hcsshim to v0.9.7 ([#&#8203;8153](https://github.com/containerd/containerd/pull/8153))
    -   [`f488a6241`](https://github.com/containerd/containerd/commit/f488a6241b7fa87746026de1a947c57d311751e8) Update hcsshim tag to v0.9.7

</p>
</details>

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**  v0.9.6 -> v0.9.7

Previous release can be found at [v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18)

### [`v1.6.18`](https://github.com/containerd/containerd/releases/tag/v1.6.18): containerd 1.6.18

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.17...v1.6.18)

Welcome to the v1.6.18 release of containerd!

The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173
along with a security update for Go.

##### Notable Updates

-   **Fix OCI image importer memory exhaustion** ([GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2))
-   **Fix supplementary groups not being set up properly** ([GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p))
-   **Revert removal of `/sbin/apparmor_parser` check** ([#&#8203;8087](https://github.com/containerd/containerd/pull/8087))
-   **Update Go to 1.19.6** ([#&#8203;8111](https://github.com/containerd/containerd/pull/8111))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Derek McGowan
-   Ye Sijun
-   Samuel Karp
-   Bjorn Neergaard
-   Wei Fu
-   Brian Goff
-   Iceber Gu
-   Kazuyoshi Kato
-   Phil Estes
-   Swagat Bora

##### Changes

<details><summary>24 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.18 ([#&#8203;8118](https://github.com/containerd/containerd/pull/8118))
    -   [`44e61d764`](https://github.com/containerd/containerd/commit/44e61d7641f71f44353263306a4967276933173b) Add release notes for v1.6.18
-   Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)
    -   [`286a01f35`](https://github.com/containerd/containerd/commit/286a01f350a2298b4fdd7e2a0b31c04db3937ea8) oci: fix additional GIDs
    -   [`301823453`](https://github.com/containerd/containerd/commit/301823453d788ce409e222e88a27d7faf2c2093d) oci: fix loop iterator aliasing
    -   [`0070ab70f`](https://github.com/containerd/containerd/commit/0070ab70fa58045d25fc6ebab27edcae328e38f1) oci: skip checking gid for WithAppendAdditionalGroups
    -   [`16d52de64`](https://github.com/containerd/containerd/commit/16d52de64d9b0b0e4bf7e11226199281561a3d96) refactor: reduce duplicate code
    -   [`b45e30292`](https://github.com/containerd/containerd/commit/b45e30292ce9b214158fa403a6165aabbf5b23f0) add WithAdditionalGIDs test
    -   [`0a06c284a`](https://github.com/containerd/containerd/commit/0a06c284aec5860a58a803b5da83def3462dc3a0) add WithAppendAdditionalGroups helper
-   Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)
    -   [`84936fd1f`](https://github.com/containerd/containerd/commit/84936fd1f6a0670ab8c7665cb87fae6b87b0b908) importer: stream oci-layout and manifest.json
-   \[1.6] Add fallback for windows platforms without osversion ([#&#8203;8106](https://github.com/containerd/containerd/pull/8106))
    -   [`b327af6a4`](https://github.com/containerd/containerd/commit/b327af6a4f635611d8b59beec94db0beace48063) Add fallback for windows platforms without osversion
-   \[release/1.6] Go 1.19.6 ([#&#8203;8111](https://github.com/containerd/containerd/pull/8111))
    -   [`54ead5b7b`](https://github.com/containerd/containerd/commit/54ead5b7b71a0f458566e42eac28eb274286af47) Go 1.19.6
-   \[release/1.6] ctr/run: flags --detach and --rm cannot be specified together ([#&#8203;8094](https://github.com/containerd/containerd/pull/8094))
    -   [`2b4b35ab4`](https://github.com/containerd/containerd/commit/2b4b35ab49b0cea79f76c4f52923c74cfc26ccfb) ctr/run: flags --detach and --rm cannot be specified together
-   \[release/1.6] Fix retry logic within devmapper device deactivation ([#&#8203;8088](https://github.com/containerd/containerd/pull/8088))
    -   [`d5284157b`](https://github.com/containerd/containerd/commit/d5284157b8af78a2d85e78bd3106695a4e4c995b) Fix retry logic within devmapper device deactivation
-   \[release/1.6 backport] Revert `apparmor_parser` regression  ([#&#8203;8087](https://github.com/containerd/containerd/pull/8087))
    -   [`624ff636b`](https://github.com/containerd/containerd/commit/624ff636b8b463fc48e6ba3c861f98a0c00dbb71) pkg/apparmor: clarify Godoc
    -   [`3a0a35b36`](https://github.com/containerd/containerd/commit/3a0a35b36297685d1a38bfa823005a2cb77a40dd) Revert "Don't check for apparmor_parser to be present"
-   \[release/1.6] CI: skip some jobs when `repo != containerd/containerd` ([#&#8203;8083](https://github.com/containerd/containerd/pull/8083))
    -   [`664a938a3`](https://github.com/containerd/containerd/commit/664a938a33ccbbc0ab70ca5f9455e452b910e767) CI: skip some jobs when `repo != containerd/containerd`

</p>
</details>

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.6.17](https://github.com/containerd/containerd/releases/tag/v1.6.17)

### [`v1.6.17`](https://github.com/containerd/containerd/releases/tag/v1.6.17): containerd 1.6.17

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.16...v1.6.17)

Welcome to the v1.6.17 release of containerd!

The seventeenth patch release for containerd 1.6 includes various updates.

##### Notable Updates

-   **Add network plugin metrics** ([#&#8203;8018](https://github.com/containerd/containerd/pull/8018))
-   **Update mkdir permission on /etc/cni to 0755 instead of 0700** ([#&#8203;8030](https://github.com/containerd/containerd/pull/8030))
-   **Export remote snapshotter label handler** ([#&#8203;8054](https://github.com/containerd/containerd/pull/8054))
-   **Add support for default hosts.toml configuration** ([#&#8203;8065](https://github.com/containerd/containerd/pull/8065))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Derek McGowan
-   Akihiro Suda
-   Jess
-   Antonio Ojea
-   Kohei Tokunaga
-   Phil Estes
-   Wei Fu

##### Changes

<details><summary>11 commits</summary>
<p>

-   \[release/1.6] Prepare release notes for v1.6.17 ([#&#8203;8080](https://github.com/containerd/containerd/pull/8080))
    -   [`a1aa9b900`](https://github.com/containerd/containerd/commit/a1aa9b900ce9e276a210a48aa5dc8b8832a44c2e) Prepare release notes for v1.6.17
-   \[1.6] Backport default registry hosts config ([#&#8203;8065](https://github.com/containerd/containerd/pull/8065))
    -   [`1436641b8`](https://github.com/containerd/containerd/commit/1436641b8dc77f24f4ec57d238344bc6bb857081) Support default hosts.toml configuration
    -   [`87acecd04`](https://github.com/containerd/containerd/commit/87acecd0409103c266c5eda932e809e6717e7859) Update hosts doc
-   \[release/1.6 backport] Export remote snapshotter label handler ([#&#8203;8054](https://github.com/containerd/containerd/pull/8054))
    -   [`a6544ed7d`](https://github.com/containerd/containerd/commit/a6544ed7dc114b7542041eea91abbc7fe9a466a0) Export remote snapshotter label handler
-   \[release/1.6] cri: mkdir /etc/cni with 0755, not 0700 ([#&#8203;8030](https://github.com/containerd/containerd/pull/8030))
    -   [`ae02a24a3`](https://github.com/containerd/containerd/commit/ae02a24a39ddd6764eb7f98de677f11d8bdd1919) cri: mkdir /etc/cni with 0755, not 0700
-   \[release/1.6] add network plugin metrics ([#&#8203;8018](https://github.com/containerd/containerd/pull/8018))
    -   [`6c6cc5ec1`](https://github.com/containerd/containerd/commit/6c6cc5ec107f10ccf4d4acbfe89d572a52d58a92) add network plugin metrics

</p>
</details>

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v1.6.16](https://github.com/containerd/containerd/releases/tag/v1.6.16)

### [`v1.6.16`](https://github.com/containerd/containerd/releases/tag/v1.6.16): containerd 1.6.16

[Compare Source](https://github.com/containerd/containerd/compare/v1.6.15...v1.6.16)

Welcome to the v1.6.16 release of containerd!

The sixteenth patch release for containerd 1.6 includes various bug fixes and updates.

##### Notable Updates

-   **Fix push error propagation** ([#&#8203;7990](https://github.com/containerd/containerd/pull/7990))
-   **Fix slice append error with HugepageLimits for Linux** ([#&#8203;7995](https://github.com/containerd/containerd/pull/7995))
-   **Update default seccomp profile for PKU and CAP_SYS_NICE** ([#&#8203;8001](https://github.com/containerd/containerd/pull/8001))
-   **Fix overlayfs error when upperdirlabel option is set** ([#&#8203;8002](https://github.com/containerd/containerd/pull/8002))

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

##### Contributors

-   Akihiro Suda
-   Derek McGowan
-   Samuel Karp
-   Sebastiaan van Stijn
-   Phil Estes
-   Craig Ingram
-   Justin Chadwell
-   Qasim Sarfraz
-   Wei Fu
-   bin liu
-   cardy.tang
-   rongfu.leng

##### Changes

<details><summary>30 commits</summary>
<p>

-   \[release/1.6] Prepare v1.6.16 ([#&#8203;8016](https://github.com/containerd/containerd/pull/8016))
    -   [`d3c595aa3`](https://github.com/containerd/containerd/commit/d3c595aa387e2d7ad3cd08313579ec86c876f738) Prepare release notes for v1.6.16
-   \[release/1.6 backport] Fix tx closed error when upperdirlabel specified ([#&#8203;8002](https://github.com/containerd/containerd/pull/8002))
    -   [`8c704036a`](https://github.com/containerd/containerd/commit/8c704036a81b13b25ab7073e2715075b6ec39e94) Fix tx closed error when upperdirlabel specified
-   \[release/1.6 backport] assorted test-fixes ([#&#8203;8000](https://github.com/containerd/containerd/pull/8000))
    -   [`91a68edd7`](https://github.com/containerd/containerd/commit/91a68edd775bba554a9eac7e04898b22069db5aa) cri: Fix TestUpdateOCILinuxResource for host w/o swap controller
    -   [`5594f706e`](https://github.com/containerd/containerd/commit/5594f706e67462c4a29f68e6958341ba35d06826) Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts
-   \[release/1.6 backport] seccomp updates ([#&#8203;8001](https://github.com/containerd/containerd/pull/8001))
    -   [`7037f5313`](https://github.com/containerd/containerd/commit/7037f531304821b7b1943f2c7821d94035b54d76) seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE
    -   [`d22919a1c`](https://github.com/containerd/containerd/commit/d22919a1cb8180885a6f38fa7851a487aebd2440) seccomp: seccomp: add syscalls related to PKU in default policy
-   \[release/1.6 backport] Harden GITHUB_TOKEN permissions ([#&#8203;7999](https://github.com/containerd/containerd/pull/7999))
    -   [`8b8a21fe4`](https://github.com/containerd/containerd/commit/8b8a21fe4dbc7b940a802cb8d099a4084dae6ee9) Harden GITHUB_TOKEN permissions
-   \[release/1.6 backport] assorted updates to Vagrantfile ([#&#8203;7996](https://github.com/containerd/containerd/pull/7996))
    -   [`8009948bb`](https://github.com/containerd/containerd/commit/8009948bb2dee8eb2c021d8a467572927ed0657d) Vagrantfile: fix comments about SELinux
    -   [`550424f92`](https://github.com/containerd/containerd/commit/550424f929d7f9ae8fd59bd520719d0d8f00f2b3) Vagrantfile: install-rootless-podman: remove `setenforce 0`
    -   [`2c32f8559`](https://github.com/containerd/containerd/commit/2c32f85599ec121702329ffddd50f99dbe491370) CI: update Fedora to 37
    -   [`556bb0cc8`](https://github.com/containerd/containerd/commit/556bb0cc8a01ece740d28749bcc6d76360117167) Vagrantfile: explicitly specify rsync as the shared folder driver
    -   [`edfac1834`](https://github.com/containerd/containerd/commit/edfac183479d3a98147d1652b4ee198f522330a5) fix install cni script
    -   [`91d5e53fb`](https://github.com/containerd/containerd/commit/91d5e53fbc3d5acfdd8ca4328cec1a20359b22f8) Vagrantfile: dump containerd log after critest
-   \[release/1.6 backport] Fix slice append error ([#&#8203;7995](https://github.com/containerd/containerd/pull/7995))
    -   [`ab193eb20`](https://github.com/containerd/containerd/commit/ab193eb20bade0c7fff74a33a3b91f2517af05c6) pkg/cri: optimize slice initialization
    -   [`e6cf5ec58`](https://github.com/containerd/containerd/commit/e6cf5ec58d395332985f15084527676d70b21f1c) Fix slice append error
-   \[release/1.6] update to go1.18.10 ([#&#8203;7992](https://github.com/containerd/containerd/pull/7992))
    -   [`6a8a6531f`](https://github.com/containerd/containerd/commit/6a8a6531fd4f778089376749386c934b436484f7) \[release/1.6] update to go1.18.10
-   \[release/1.6 backport] release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#&#8203;7991](https://github.com/containerd/containerd/pull/7991))
    -   [`d0dc7988a`](https://github.com/containerd/containerd/commit/d0dc7988ab9b30be8a05fae1fc064164418e653d) release/Dockerfile: set DEBIAN_FRONTEND=noninteractive
-   \[release/1.6 backport] pushWriter: correctly propagate errors ([#&#8203;7990](https://github.com/containerd/containerd/pull/7990))
    -   [`1584c2581`](https://github.com/containerd/containerd/commit/1584c2581017414e673e4df05f63bc6b67edd424) pushWriter: correctly propagate errors
-   \[release/1.6] mod: update github.com/pelletier/go-toml@v1.9.5 ([#&#8203;7942](https://github.com/containerd/containerd/pull/7942))
    -   [`545f22091`](https://github.com/containerd/containerd/commit/545f220910082c4236a8751854c640e7f7dc3e69) mod: update github.com/pelletier/go-toml@v1.9.5

</p>
</details>

##### Dependency Changes

-   **github.com/pelletier/go-toml**  v1.9.3 -> v1.9.5

Previous release can be found at [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15)

</details>

<details>
<summary>docker/buildx</summary>

### [`v0.13.1`](https://github.com/docker/buildx/releases/tag/v0.13.1)

[Compare Source](https://github.com/docker/buildx/compare/v0.13.0...v0.13.1)

buildx 0.13.1

Welcome to the 0.13.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

##### Notable changes

-   Fix connecting to `docker-container://` and `kube-pod://` style URLs with remote driver [#&#8203;2327](https://github.com/docker/buildx/issues/2327)
-   Fix handling of `--push` with Bake when a target has already defined a non-image output [#&#8203;2330](https://github.com/docker/buildx/issues/2330)

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0)

### [`v0.13.0`](https://github.com/docker/buildx/releases/tag/v0.13.0)

[Compare Source](https://github.com/docker/buildx/compare/v0.12.1...v0.13.0)

buildx 0.13.0

Welcome to the 0.13.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

##### Contributors

-   CrazyMax
-   Tõnis Tiigi
-   Sebastiaan van Stijn
-   David Karlsson
-   Jonathan A. Sternberg
-   Justin Chadwell
-   Laura Brehm
-   Akihiro Suda
-   Ian King'ori
-   Paweł Gronowski
-   Brian Goff
-   Kushagra Mansingh
-   Laurent Goderre
-   Nicolas De Loof
-   Rob Murray
-   Simon A. Eugster

##### Notable Changes

-   Builds can now use multiple outputs with a single command (requires BuildKit v0.13+) [#&#8203;2290](https://github.com/docker/buildx/issues/2290) [#&#8203;2302](https://github.com/docker/buildx/issues/2302)

-   Bake command now supports defining `shm-size` and `ulimit` values [#&#8203;2279](https://github.com/docker/buildx/issues/2279) [#&#8203;2242](https://github.com/docker/buildx/issues/2242)

-   Windows container based builder instances can now be created with remote driver and npipe connections [#&#8203;2287](https://github.com/docker/buildx/issues/2287)

-   New `dial-stdio` command is available for directly contacting BuildKit daemon of the configured builder instance [#&#8203;2112](https://github.com/docker/buildx/issues/2112)

-   Container and Kubernetes builder instances now allow `network.host` entitlement by default (allowing access to the container's network) [#&#8203;2266](https://github.com/docker/buildx/issues/2266)

-   `ls` command now supports `--format` options for controlling the output [#&#8203;1787](https://github.com/docker/buildx/issues/1787)

-   `--metadata-file` option can now also return build reference that can be used for further build debugging, for example, in Docker Desktop [#&#8203;2263](https://github.com/docker/buildx/issues/2263)

-   New experimental OpenTelemetry metrics exporting is available for build duration and transfer sizes [#&#8203;2235](https://github.com/docker/buildx/issues/2235) [#&#8203;2258](https://github.com/docker/buildx/issues/2258) [#&#8203;2225](https://github.com/docker/buildx/issues/2225) [#&#8203;2224](https://github.com/docker/buildx/issues/2224) [#&#8203;2155](https://github.com/docker/buildx/issues/2155)

-   Fix possible cache invalidation when using linked targets in Bake [#&#8203;2265](https://github.com/docker/buildx/issues/2265)

-   Container driver now supports driver opt for defining restart policy for BuildKit container [#&#8203;1271](https://github.com/docker/buildx/issues/1271)

-   Compose spec support has been updated to `v2.0.0-rc.8` [#&#8203;2205](https://github.com/docker/buildx/issues/2205)

-   Bake command has been updated to share the same authentication provider for all targets for improved performance [#&#8203;2147](https://github.com/docker/buildx/issues/2147)

-   New cancellation signal handling via UNIX socket is supported with new Docker CLI [#&#8203;2184](https://github.com/docker/buildx/issues/2184) [#&#8203;2289](https://github.com/docker/buildx/issues/2289)

-   Multiple builders can now be removed with a single command [#&#8203;2140](https://github.com/docker/buildx/issues/2140)

-   `--add-host` flag now permits `=` separator for IPv6 addresses [#&#8203;2121](https://github.com/docker/buildx/issues/2121)

-   VCS attributes exported from Buildx now include the local directory subpaths if they are relative to the current Git repository [#&#8203;2156](https://github.com/docker/buildx/issues/2156)

-   `imagetools inspect` command can now show DSSE-signed SBOM and Provenance attestations [#&#8203;2194](https://github.com/docker/buildx/issues/2194)

-   Fixes for Git repository path sanitization in WSL [#&#8203;2167](https://github.com/docker/buildx/issues/2167)

-   Default Git repository path is now found via configured tracking branch [#&#8203;2146](https://github.com/docker/buildx/issues/2146)

-   Certain error messages for attestations have been improved [#&#8203;2268](https://github.com/docker/buildx/issues/2268)

-   Better handling of connecting to unhealthy nodes with remote driver [#&#8203;2130](https://github.com/docker/buildx/issues/2130)

-   Fix possible panic in `imagetools create` command [#&#8203;2230](https://github.com/docker/buildx/issues/2230)

-   Fix additional output when exporting progress in `rawjson` mode [#&#8203;2252](https://github.com/docker/buildx/issues/2252)

-   Fix possible inconsistent configuration merge order when using Bake with many configurations [#&#8203;2237](https://github.com/docker/buildx/issues/2237)

-   Npipe URL scheme is now supported on Windows [#&#8203;2250](https://github.com/docker/buildx/issues/2250)

-   Fix possible console warnings on Windows [#&#8203;2238](https://github.com/docker/buildx/issues/2238)

##### Dependency Changes

-   **github.com/Microsoft/hcsshim**                                                  v0.11.1 -> v0.11.4
-   **github.com/aws/aws-sdk-go-v2**                                                  v1.17.6 -> v1.24.1
-   **github.com/aws/aws-sdk-go-v2/config**                                           v1.18.16 -> v1.26.6
-   **github.com/aws/aws-sdk-go-v2/credentials**                                      v1.13.16 -> v1.16.16
-   **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                                 v1.12.24 -> v1.14.11
-   **github.com/aws/aws-sdk-go-v2/internal/configsources**                           v1.1.30 -> v1.2.10
-   **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**                            v2.4.24 -> v2.5.10
-   **github.com/aws/aws-sdk-go-v2/internal/ini**                                     v1.3.31 -> v1.7.3
-   **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**                 v1.10.4 ***new***
-   **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**                   v1.9.24 -> v1.10.10
-   **github.com/aws/aws-sdk-go-v2/service/sso**                                      v1.12.5 -> v1.18.7
-   **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.14.5 -> v1.21.7
-   **github.com/aws/aws-sdk-go-v2/service/sts**                                      v1.18.6 -> v1.26.7
-   **github.com/aws/smithy-go**                                                      v1.13.5 -> v1.19.0
-   **github.com/cenkalti/backoff/v4**                                                v4.2.0 -> v4.2.1
-   **github.com/compose-spec/compose-go/v2**                                         v2.0.0-rc.8 ***new***
-   **github.com/containerd/console**                                                 v1.0.3 -> v1.0.4
-   **github.com/containerd/containerd**                                              v1.7.7 -> v1.7.13
-   **github.com/containerd/continuity**                                              v0.4.2 -> v0.4.3
-   **github.com/docker/cli**                                                         v24.0.5 -> v26.0.0-rc1
-   **github.com/docker/cli-docs-tool**                                               v0.6.0 -> v0.7.0
-   **github.com/docker/docker**                                                      v24.0.5 -> v26.0.0-rc1
-   **github.com/docker/docker-credential-helpers**                                   v0.7.0 -> v0.8.0
-   **github.com/docker/go-connections**                                              v0.4.0 -> v0.5.0
-   **github.com/emicklei/go-restful/v3**                                             v3.10.1 -> v3.11.0
-   **github.com/felixge/httpsnoop**                                                  v1.0.3 -> v1.0.4
-   **github.com/go-logr/logr**                                                       v1.2.3 -> v1.3.0
-   **github.com/go-openapi/jsonpointer**                                             v0.19.5 -> v0.19.6
-   **github.com/go-openapi/jsonreference**                                           v0.20.0 -> v0.20.2
-   **github.com/go-openapi/swag**                                                    v0.19.14 -> v0.22.3
-   **github.com/google/gnostic-models**                                              v0.6.8 ***new***
-   **github.com/google/go-cmp**                                                      v0.5.9 -> v0.6.0
-   **github.com/google/uuid**                                                        v1.3.0 -> v1.6.0
-   **github.com/gorilla/websocket**                                                  v1.5.0 ***new***
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                     v2.11.3 -> v2.16.0
-   **github.com/klauspost/compress**                                                 v1.16.3 -> v1.17.4
-   **github.com/mailru/easyjson**                                                    v0.7.6 -> v0.7.7
-   **github.com/mattn/go-runewidth**                                                 v0.0.15 ***new***
-   **github.com/mitchellh/copystructure**                                            v1.2.0 ***new***
-   **github.com/mitchellh/reflectwalk**                                              v1.0.2 ***new***
-   **github.com/moby/buildkit**                                                      [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042) -> v0.13.0
-   **github.com/moby/docker-image-spec**                                             v1.3.1 ***new***
-   **github.com/moby/sys/mountinfo**                                                 v0.6.2 -> v0.7.1
-   **github.com/moby/sys/user**                                                      v0.1.0 ***new***
-   **github.com/mxk/go-flowrate**                                                    [`cca7078`](https://github.com/docker/buildx/commit/cca7078d478f) ***new***
-   **github.com/prometheus/client_golang**                                           v1.14.0 -> v1.17.0
-   **github.com/prometheus/client_model**                                            v0.3.0 -> v0.5.0
-   **github.com/prometheus/common**                                                  v0.42.0 -> v0.44.0
-   **github.com/prometheus/procfs**                                                  v0.9.0 -> v0.12.0
-   **github.com/rivo/uniseg**                                                        v0.2.0 ***new***
-   **github.com/serialx/hashring**                                                   [`8b29126`](https://github.com/docker/buildx/commit/8b2912629002) -> [`22c0c7a`](https://github.com/docker/buildx/commit/22c0c7ab6b1b)
-   **github.com/spf13/cobra**                                                        v1.7.0 -> v1.8.0
-   **github.com/tonistiigi/fsutil**                                                  [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/docker/buildx/commit/7525a1af2bb5)
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/otel**                                                      v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric**                            v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc**             v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp**             v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/prometheus**                                 v0.42.0 ***new***
-   **go.opentelemetry.io/otel/metric**                                               v0.37.0 -> v1.21.0
-   **go.opentelemetry.io/otel/sdk**                                                  v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/sdk/metric**                                           v1.21.0 ***new***
-   **go.opentelemetry.io/otel/trace**                                                v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/proto/otlp**                                                v0.19.0 -> v1.0.0
-   **golang.org/x/exp**                                                              [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) -> [`db7319d`](https://github.com/docker/buildx/commit/db7319d0e0e3)
-   **google.golang.org/genproto**                                                    [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b)
-   **google.golang.org/genproto/googleapis/api**                                     [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new***
-   **google.golang.org/genproto/googleapis/rpc**                                     [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new***
-   **google.golang.org/grpc**                                                        v1.53.0 -> v1.59.0
-   **k8s.io/api**                                                                    v0.26.7 -> v0.29.2
-   **k8s.io/apimachinery**                                                           v0.26.7 -> v0.29.2
-   **k8s.io/apiserver**                                                              v0.26.7 -> v0.29.2
-   **k8s.io/client-go**                                                              v0.26.7 -> v0.29.2
-   **k8s.io/klog/v2**                                                                v2.90.1 -> v2.110.1
-   **k8s.io/kube-openapi**                                                           [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) -> [`2dd684a`](https://github.com/docker/buildx/commit/2dd684a91f00)
-   **k8s.io/utils**                                                                  [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5) -> [`3b25d92`](https://github.com/docker/buildx/commit/3b25d923346b)
-   **sigs.k8s.io/json**                                                              [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) -> [`bc3834c`](https://github.com/docker/buildx/commit/bc3834ca7abd)
-   **sigs.k8s.io/structured-merge-diff/v4**                                          v4.2.3 -> v4.4.1

Previous release can be found at [v0.12.1](https://github.com/docker/buildx/releases/tag/v0.12.1)

### [`v0.12.1`](https://github.com/docker/buildx/releases/tag/v0.12.1)

[Compare Source](https://github.com/docker/buildx/compare/v0.12.0...v0.12.1)

Welcome to the v0.12.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

##### Changes

-   Fix incorrect validation of some driver-opt values that could cause invalid state to be stored [#&#8203;2176](https://github.com/docker/buildx/issues/2176)

Previous release can be found at [v0.12.0](https://github.com/docker/buildx/releases/tag/v0.12.0)

### [`v0.12.0`](https://github.com/docker/buildx/releases/tag/v0.12.0)

[Compare Source](https://github.com/docker/buildx/compare/v0.11.2...v0.12.0)

Welcome to the 0.12.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

##### Contributors

-   CrazyMax
-   Justin Chadwell
-   Tõnis Tiigi
-   Sebastiaan van Stijn
-   Kohei Tokunaga
-   David Karlsson
-   Jonathan A. Sternberg
-   Guillaume Lours
-   Kenyon Ralph
-   Qasim Sarfraz
-   Silvin Lubecki
-   Akihiro Suda
-   Aleksa Sarai
-   Cameron Adams
-   Dmitry Makovey
-   Jhan S. Álvarez
-   Jonathan Piché
-   Kenyon Ralph
-   Kijima Daigo
-   Silvin Lubecki
-   Zero
-   guoguangwu

##### Notable Changes

-   OCI Annotations can be added to build results with a new `--annotation` flag for the build command and `annotations` key in the Bake file. Annotations added to OCI manifests, indexes, and descriptors. [#&#8203;2020](https://github.com/docker/buildx/issues/2020) [#&#8203;2098](https://github.com/docker/buildx/issues/2098)
-   New debugging features have been added with a new `debug` command and interactive debugging console. This feature currently requires setting `BUILDX_EXPERIMENTAL=1`  [#&#8203;2006](https://github.com/docker/buildx/issues/2006) [#&#8203;1896](https://github.com/docker/buildx/issues/1896) [#&#8203;1970](https://github.com/docker/buildx/issues/1970) [#&#8203;1914](https://github.com/docker/buildx/issues/1914) [#&#8203;2026](https://github.com/docker/buildx/issues/2026) [#&#8203;2086](https://github.com/docker/buildx/issues/2086) [docs](https://github.com/docker/buildx/blob/v0.12.0-rc1/docs/guides/debugging.md)
-   Special `host-gateway` IP mapping can now be used with the `--add-host` flag during build [#&#8203;1894](https://github.com/docker/buildx/issues/1894) [#&#8203;2083](https://github.com/docker/buildx/issues/2083)
-   Bake command now allows adding local source files when building from remote definition [#&#8203;1838](https://github.com/docker/buildx/issues/1838)
-   The status of uploading build results to Docker is now shown interactively on progressbar [#&#8203;1994](https://github.com/docker/buildx/issues/1994)
-   Error handling has been improved when bootstrapping multi-node build clusters [#&#8203;1869](https://github.com/docker/buildx/issues/1869)
-   Compose support has been updated to 1.20, enabling "include" functionality when using the Bake command [#&#8203;1971](https://github.com/docker/buildx/issues/1971) [#&#8203;2065](https://github.com/docker/buildx/issues/2065) [#&#8203;2094](https://github.com/docker/buildx/issues/2094)
-   Imagetools create command now allows adding annotation when creating new images in the registry [#&#8203;1965](https://github.com/docker/buildx/issues/1965)
-   OpenTelemetry build trace delegation from buildx is now possible with Docker and Remote driver [#&#8203;2034](https://github.com/docker/buildx/issues/2034)
-   Bake command now shows all files where the build definition was loaded from on the progressbar [#&#8203;2076](https://github.com/docker/buildx/issues/2076)
-   Bake files now allow the same attributes to be defined in multiple definition files. [#&#8203;1062](https://github.com/docker/buildx/issues/1062)
-   Using the Bake command with a remote definition now allows this definition to use local Dockerfiles [#&#8203;2015](https://github.com/docker/buildx/issues/2015)
-   Docker container driver now explicitly sets BuildKit config path to make sure configurations are loaded from same location for both mainline and rootless images [#&#8203;2093](https://github.com/docker/buildx/issues/2093)
-   Improve performance of detecting when BuildKit instance has completed booting [#&#8203;1934](https://github.com/docker/buildx/issues/1934)
-   Container driver now accepts many new driver options for defining the resource limits for BuildKit container [#&#8203;2048](https://github.com/docker/buildx/issues/2048)
-   Inspection commands formatting has been improved [#&#8203;2068](https://github.com/docker/buildx/issues/2068)
-   Error messages about driver capabilities have been improved [#&#8203;1998](https://github.com/docker/buildx/issues/1998)
-   Improve errors when invoking Bake command without targets [#&#8203;2100](https://github.com/docker/buildx/issues/2100)
-   Allow enabling debug logs with environment variables when running in standalone mode [#&#8203;1821](https://github.com/docker/buildx/issues/1821)
-   When using Docker driver the default image resolve mode has been updated to prefer local Docker images for backward compatibility [#&#8203;1886](https://github.com/docker/buildx/issues/1886)
-   Kubernetes driver now allows setting custom annotations and labels to the BuildKit deployments and pods [#&#8203;1938](https://github.com/docker/buildx/issues/1938)
-   Kubernetes driver now allows setting authentication token with endpoint configuration [#&#8203;1891](https://github.com/docker/buildx/issues/1891)
-   Fix possible issue with chained targets in Bake that could result in build failing or local source for a target uploaded multiple times [#&#8203;2113](https://github.com/docker/buildx/issues/2113)
-   Fix issue when accessing global target properties when using the matrix feature of the Bake command [#&#8203;2106](https://github.com/docker/buildx/issues/2106)
-   Fixes for formatting validation of certain build flags [#&#8203;2040](https://github.com/docker/buildx/issues/2040)
-   Fixes to avoid locking certain commands unnecessarily while booting builder nodes. [#&#8203;2066](https://github.com/docker/buildx/issues/2066)
-   Fix cases where multiple builds try to bootstrap the same builder instance in parallel [#&#8203;2000](https://github.com/docker/buildx/issues/2000)
-   Fix cases where errors on uploading build results to docker could be dropped in some cases [#&#8203;1927](https://github.com/docker/buildx/issues/1927)
-   Fix detecting capabilities for missing attestation support based on build output [#&#8203;1988](https://github.com/docker/buildx/issues/1988)
-   Fix the build for loading in Bake remote definition to not show up in build history records [#&#8203;1961](https://github.com/docker/buildx/issues/1961) [#&#8203;1954](https://github.com/docker/buildx/issues/1954)
-   Fix errors when building Compose files using the that define profiles with Bake [#&#8203;1903](https://github.com/docker/buildx/issues/1903)
-   Fix possible time correction errors on progressbar [#&#8203;1968](https://github.com/docker/buildx/issues/1968)
-   Fix passing custom Cgroup parent to builds that used the new controller interface [#&#8203;1913](https://github.com/docker/buildx/issues/1913)

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**      [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) -> [`ced1acd`](https://github.com/docker/buildx/commit/ced1acdcaa24)
-   **github.com/Microsoft/hcsshim**              v0.11.1 ***new***
-   **github.com/Shopify/logrus-bugsnag**         [`577dee2`](https://github.com/docker/buildx/commit/577dee27f20d) ***new***
-   **github.com/apparentlymart/go-textseg/v15**  v15.0.0 ***new***
-   **github.com/compose-spec/compose-go**        v1.14.0 -> v1.20.0
-   **github.com/containerd/containerd**          v1.7.2 -> v1.7.7
-   **github.com/containerd/continuity**          v0.4.1 -> v0.4.2
-   **github.com/containerd/log**                 v0.1.0 ***new***
-   **github.com/creack/pty**                     v1.1.18 ***new***
-   **github.com/distribution/reference**         v0.5.0 ***new***
-   **github.com/docker/cli**                     v24.0.2 -> v24.0.5
-   **github.com/docker/docker**                  [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc) -> v24.0.5
-   **github.com/hashicorp/go-cleanhttp**         v0.5.2 ***new***
-   **github.com/hashicorp/go-cty-funcs**         [`2721b1e`](https://github.com/docker/buildx/commit/2721b1e36840) -> [`a090f58`](https://github.com/docker/buildx/commit/a090f58aa992)
-   **github.com/hashicorp/hcl/v2**               v2.8.2 -> v2.19.1
-   **github.com/imdario/mergo**                  v0.3.15 -> v0.3.16
-   **github.com/moby/buildkit**                  [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353) -> [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042)
-   **github.com/moby/patternmatcher**            v0.5.0 -> v0.6.0
-   **github.com/opencontainers/image-spec**      v1.1.0-rc3 -> v1.1.0-rc5
-   **github.com/opencontainers/runc**            v1.1.7 -> v1.1.9
-   **github.com/sirupsen/logrus**                v1.9.0 -> v1.9.3
-   **github.com/theupdateframework/notary**      v0.6.1 -> v0.7.0
-   **github.com/zclconf/go-cty**                 v1.10.0 -> v1.14.1
-   **golang.org/x/exp**                          [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) ***new***
-   **k8s.io/api**                                v0.26.2 -> v0.26.7
-   **k8s.io/apimachinery**                       v0.26.2 -> v0.26.7
-   **k8s.io/apiserver**                          v0.26.2 -> v0.26.7
-   **k8s.io/client-go**                          v0.26.2 -> v0.26.7

Previous release can be found at [v0.11.2](https://github.com/docker/buildx/releases/tag/v0.11.2)

### [`v0.11.2`](https://github.com/docker/buildx/releases/tag/v0.11.2)

[Compare Source](https://github.com/docker/buildx/compare/v0.11.1...v0.11.2)

Welcome to the v0.11.2 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

##### Contributors

-   [Justin Chadwell](https://github.com/jedevc)
-   [CrazyMax](https://github.com/crazy-max)
-   [Sebastiaan van Stijn](https://github.com/thaJeztah)

##### Changes

-   Fix a regression that caused buildx to not read the `KUBECONFIG` path from the instance store [#&#8203;1941](https://github.com/docker/buildx/issues/1941)
-   Fix a regression with result handle builds showing up in the build history incorrectly [#&#8203;1954](https://github.com/docker/buildx/issues/1954)

##### Dependency Changes

-   **github.com/docker/docker**          v24.0.2 -> [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc)
-   **github.com/moby/buildkit**          [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a) -> [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353)
-   **github.com/tonistiigi/fsutil**      [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576) -> [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb)
-   **github.com/xeipuuv/gojsonpointer**  [`4e3ac27`](https://github.com/docker/buildx/commit/4e3ac2762d5f) -> [`02993c4`](https://github.com/docker/buildx/commit/02993c407bfb)

Previous release can be found at [v0.11.1](https://github.com/docker/buildx/releases/tag/v0.11.1)

### [`v0.11.1`](https://github.com/docker/buildx/releases/tag/v0.11.1)

[Compare Source](https://github.com/docker/buildx/compare/v0.11.0...v0.11.1)

Welcome to the v0.11.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

##### Contributors

-   [CrazyMax](https://github.com/crazy-max)
-   [Justin Chadwell](https://github.com/jedevc)
-   [David Karlsson](https://github.com/dvdksn)
-   [Jhan S. Álvarez](https://github.com/yastanotheruser)

##### Changes

-   Fix a regression for bake where services in profiles would not be loaded. [#&#8203;1903](https://github.com/docker/buildx/issues/1903)

-   Fix a regression where `--cgroup-parent` option had no effect during build. [#&#8203;1913](https://github.com/docker/buildx/issues/1913)

-   Fix a regression where valid docker contexts could fail buildx builder name validation. [#&#8203;1879](https://github.com/docker/buildx/issues/1879)

-   Fix an issue where the `host-gateway` special address could not be used as an argument to `--add-host`. [#&#8203;1894](https://github.com/docker/buildx/issues/1894) (also requires https://github.com/moby/moby/pull/45767)

-   Fix a possible panic when terminal is resized during the build. [#&#8203;1929](https://github.com/docker/buildx/issues/1929)

##### Dependency Changes

-   **github.com/docker/cli-docs-tool**  v0.5.1 -> v0.6.0

Previous release can be found at [v0.11.0](https://github.com/docker/buildx/releases/tag/v0.11.0)

### [`v0.11.0`](https://github.com/docker/buildx/releases/tag/v0.11.0)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.5...v0.11.0)

Welcome to the v0.11.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

##### Notable changes

-   `--load` now supports loading multi-platform images when used with the [containerd image store](https://docs.docker.com/desktop/containerd/) in moby [#&#8203;1813](https://github.com/docker/buildx/issues/1813)

-   Commands now display the current builder name in the build progress output [#&#8203;1177](https://github.com/docker/buildx/issues/1177)

-   Bake now supports [matrix builds](https://github.com/docker/buildx/blob/v0.11.0/docs/bake-reference.md#targetmatrix). The new `matrix` field on `target` blocks allows easily creating multiple similar sets of targets to remove duplication in bake files [#&#8203;1690](https://github.com/docker/buildx/issues/1690) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/bake-reference.md#targetmatrix)

-   New experimental `--detach` flag for the `build` command to run the build in a detached server, allowing attaching to the build later using `debug-shell` (requires `BUILDX_EXPERIMENTAL=1`) [#&#8203;1296](https://github.com/docker/buildx/issues/1296) [#&#8203;1620](https://github.com/docker/buildx/issues/1620) [#&#8203;1614](https://github.com/docker/buildx/issues/1614) [#&#8203;1737](https://github.com/docker/buildx/issues/1737) [#&#8203;1755](https://github.com/docker/buildx/issues/1755)
    [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md)

-   New monitor mode commands `exec` and `attach` to allow spawning additional processes in a debugging session (requires `BUILDX_EXPERIMENTAL=1`) [#&#8203;1626](https://github.com/docker/buildx/issues/1626) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md)

-   New experimental `debug-shell` command to directly start the build debugging monitor without starting a build, allowing connecting to previously `--detach`ed builds (requires `BUILDX_EXPERIMENTAL=1`) [#&#8203;1640](https://github.com/docker/buildx/issues/1640)
    [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md)

-   New experimental `--invoke=on-error` option for the `--invoke` command to start the build debugging monitor at the point at which a build fails (requires `BUILDX_EXPERIMENTAL=1`) [#&#8203;1640](https://github.com/docker/buildx/issues/1640) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md)

-   Bake now supports detecting `compose.yml`/`compose.yaml` files in addition to `docker-compose.yml`/`docker-compose.yaml` [#&#8203;1752](https://github.com/docker/buildx/issues/1752)

-   Bake now supports new compose build keys `dockerfile_inline` and `additional_contexts` [#&#8203;1784](https://github.com/docker/buildx/issues/1784) [docs](https://docs.docker.com/compose/compose-file/build/)

-   Bake now supports `replace` HCL function [#&#8203;1720](https://github.com/docker/buildx/issues/1720)

-   Initial support for CLI command completion, including: builder names, folder names for build commands and bake targets [#&#8203;1727](https://github.com/docker/buildx/issues/1727)

-   Builds support the new `EXPERIMENTAL_BUILDKIT_SOURCE_POLICY` environment variable to set the path to a source policy [docs](https://github.com/moby/buildkit/blob/master/docs/build-repro.md#reproducing-the-pinned-dependencies) [#&#8203;1628](https://github.com/docker/buildx/issues/1628)

-   BuildKit versions are correctly displayed in `buildx ls` and `buildx inspect` for builders using the Docker driver [#&#8203;1552](https://github.com/docker/buildx/issues/1552)

-   Display additional builder node details in `buildx inspect` view [#&#8203;1440](https://github.com/docker/buildx/issues/1440) [#&#8203;1854](https://github.com/docker/buildx/issues/1854)

-   Builders using the remote driver allow using TLS without proving its own key/cert (if BuildKit remote is configured to support it) [#&#8203;1693](https://github.com/docker/buildx/issues/1693)

-   Builders using the kubernetes driver allow automatically generating the node name if not provided [#&#8203;1673](https://github.com/docker/buildx/issues/1673)

-   Builders using the kubernetes driver support a new `serviceaccount` option, which will set the created pod's `serviceAccountName` [#&#8203;1597](https://github.com/docker/buildx/issues/1597)

-   Builders using the kubernetes driver support the `proxy-url` kubeconfig option [docs](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/#proxy) [#&#8203;1780](https://github.com/docker/buildx/issues/1780)

-   Bake now allows merging multiple similar attestation parameters into a single parameter to allow overriding with a single global value [#&#8203;1699](https://github.com/docker/buildx/issues/1699)

-   Fix possible panic when no builders are available [#&#8203;1732](https://github.com/docker/buildx/issues/1732)

-   Fix `docker-container` driver hang on container panic [#&#8203;1772](https://github.com/docker/buildx/issues/1772)

-   Fix invalid path when writing certificates for `docker-container` driver on Windows [#&#8203;1831](https://github.com/docker/buildx/issues/1831)

-   Fix bake failure when remote bake file is accessed using SSH [#&#8203;1711](https://github.com/docker/buildx/issues/1711) [#&#8203;1734](https://github.com/docker/buildx/issues/1734)

-   Fix bake failure when remote bake context is incorrectly resolved [#&#8203;1783](https://github.com/docker/buildx/issues/1783)

-   Fix path resolution of `BAKE_CMD_CONTEXT` and `cwd://` paths in bake contexts [#&#8203;1840](https://github.com/docker/buildx/issues/1840)

-   Fix mixed OCI and Docker media types when creating images using `imagetools create` [#&#8203;1797](https://github.com/docker/buildx/issues/1797)

-   Fix mismatched image id between `--iidfile` and `-q` [#&#8203;1844](https://github.com/docker/buildx/issues/1844)

-   Fix opaque error messages on invalid edge-case git urls [#&#8203;1710](https://github.com/docker/buildx/issues/1710) [#&#8203;1733](https://github.com/docker/buildx/issues/1733)

-   Fix previously discarded error messages from logrus [#&#8203;1853](https://github.com/docker/buildx/issues/1853)

-   Fix AWS authentication when mixing static creds and IAM profiles [#&#8203;1816](https://github.com/docker/buildx/issues/1816)

-   Fix race in printer so that logrus warning messages appear at the end of the build deterministically [#&#8203;1794](https://github.com/docker/buildx/issues/1794)

-   Fix connection leak for feature check on default `docker` driver [#&#8203;1776](https://github.com/docker/buildx/issues/1776)

##### Contributors

-   [Justin Chadwell](https://github.com/jedevc)
-   [CrazyMax](https://github.com/crazy-max)
-   [Tõnis Tiigi](https://github.com/tonistiigi)
-   [Sebastiaan van Stijn](https://github.com/thaJeztah)
-   [Kohei Tokunaga](https://github.com/ktock)
-   [David Karlsson](https://github.com/dvdksn)
-   [Akihiro Suda](https://github.com/AkihiroSuda)
-   [Ben Peachey](https://github.com/potherca)
-   [Brian Goff](https://github.com/cpuguy83)
-   [Nick Santos](https://github.com/nicks)
-   [Nick Sieger](https://github.com/nicksieger)
-   [Batuhan Apaydın](https://github.com/developer-guy)
-   [Bertrand Paquet](https://github.com/bpaquet)
-   [David Gageot](https://github.com/dgageot)
-   [Elran Shefer](https://github.com/IamShobe)
-   [Milas Bowman](https://github.com/milas)
-   [Tianon Gravi](https://github.com/tianon)
-   [Timofey Kirillov](https://github.com/distorhead)
-   [Robert Lestak](https://github.com/robertlestak)

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**                                          [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) ***new***
-   **github.com/Masterminds/semver/v3**                                              v3.2.1 ***new***
-   **github.com/Microsoft/go-winio**                                                 v0.5.2 -> v0.6.1
-   **github.com/aws/aws-sdk-go-v2**                                                  v1.16.3 -> v1.17.6
-   **github.com/aws/aws-sdk-go-v2/config**                                           v1.15.5 -> v1.18.16
-   **github.com/aws/aws-sdk-go-v2/credentials**                                      v1.12.0 -> v1.13.16
-   **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                                 v1.12.4 -> v1.12.24
-   **github.com/aws/aws-sdk-go-v2/internal/configsources**                           v1.1.10 -> v1.1.30
-   **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**                            v2.4.4 -> v2.4.24
-   **github.com/aws/aws-sdk-go-v2/internal/ini**                                     v1.3.11 -> v1.3.31
-   **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**                   v1.9.4 -> v1.9.24
-   **github.com/aws/aws-sdk-go-v2/service/sso**                                      v1.11.4 -> v1.12.5
-   **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.14.5 ***new***
-   **github.com/aws/aws-sdk-go-v2/service/sts**                                      v1.16.4 -> v1.18.6
-   **github.com/aws/smithy-go**                                                      v1.11.2 -> v1.13.5
-   **github.com/cenkalti/backoff/v4**                                                v4.1.2 -> v4.2.0
-   **github.com/cespare/xxhash/v2**                                                  v2.1.2 -> v2.2.0
-   **github.com/compose-spec/compose-go**                                            v1.6.0 -> v1.14.0
-   **github.com/containerd/containerd**                                              [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9) -> v1.7.2
-   **github.com/containerd/continuity**                                              v0.3.0 -> v0.4.1
-   **github.com/containerd/ttrpc**                                                   v1.1.0 -> v1.2.2
-   **github.com/containerd/typeurl/v2**                                              v2.1.1 ***new***
-   **github.com/cyphar/filepath-securejoin**                                         v0.2.3 ***new***
-   **github.com/distribution/distribution/v3**                                       [`4bf3547`](https://github.com/docker/buildx/commit/4bf3547399eb) -> [`36d8c59`](https://github.com/docker/buildx/commit/36d8c594d7aa)
-   **github.com/docker/cli**                                                         v23.0.0-rc.1 -> v24.0.2
-   **github.com/docker/distribution**                                                v2.8.1 -> v2.8.2
-   **github.com/docker/docker**                                                      v23.0.0-rc.1 -> v24.0.2
-   **github.com/emicklei/go-restful/v3**                                             v3.10.1 ***new***
-   **github.com/felixge/httpsnoop**                                                  v1.0.2 -> v1.0.3
-   **github.com/go-openapi/jsonpointer**                                             v0.19.5 ***new***
-   **github.com/go-openapi/jsonreference**                                           v0.20.0 ***new***
-   **github.com/go-openapi/swag**                                                    v0.19.14 ***new***
-   **github.com/golang/protobuf**                                                    v1.5.2 -> v1.5.3
-   **github.com/google/certificate-transparency-go**                                 v1.0.21 -> v1.1.4
-   **github.com/google/gnostic**                                                     v0.5.7-v3refs ***new***
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                     v2.11.3 ***new***
-   **github.com/imdario/mergo**                                                      v0.3.13 -> v0.3.15
-   **github.com/in-toto/in-toto-golang**                                             v0.5.0 ***new***
-   **github.com/inconshreveable/mousetrap**                                          v1.0.1 -> v1.1.0
-   **github.com/josharian/intern**                                                   v1.0.0 ***new***
-   **github.com/klauspost/compress**                                                 v1.15.12 -> v1.16.3
-   **github.com/kr/pretty**                                                          v0.3.0 -> v0.2.1
-   **github.com/mailru/easyjson**                                                    v0.7.6 ***new***
-   **github.com/moby/buildkit**                                                      v0.11.2 -> [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a)
-   **github.com/moby/term**                                                          [`abb1982`](https://github.com/docker/buildx/commit/abb19827d345) -> v0.5.0
-   **github.com/munnerz/goautoneg**                                                  [`a7dc8b6`](https://github.com/docker/buildx/commit/a7dc8b61c822) ***new***
-   **github.com/opencontainers/image-spec**                                          [`02efb9a`](https://github.com/docker/buildx/commit/02efb9a75ee1) -> v1.1.0-rc3
-   **github.com/opencontainers/runc**                                                v1.1.3 -> v1.1.7
-   **github.com/prometheus/common**                                                  v0.37.0 -> v0.42.0
-   **github.com/prometheus/procfs**                                                  v0.8.0 -> v0.9.0
-   **github.com/secure-systems-lab/go-securesystemslib**                             v0.4.0 ***new***
-   **github.com/sergi/go-diff**                                                      v1.2.0 ***new***
-   **github.com/shibumi/go-pathspec**                                                v1.3.0 ***new***
-   **github.com/spf13/cobra**                                                        v1.6.1 -> v1.7.0
-   **github.com/stretchr/testify**                                                   v1.8.1 -> v1.8.4
-   **github.com/tonistiigi/fsutil**                                                  [`fb43384`](https://github.com/docker/buildx/commit/fb433841cbfa) -> [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576)
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/otel**                                                      v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                        v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/metric**                                               v0.27.0 -> v0.37.0
-   **go.opentelemetry.io/otel/sdk**                                                  v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/trace**                                                v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/proto/otlp**                                                v0.12.0 -> v0.19.0
-   **golang.org/x/mod**                                                              v0.9.0 ***new***
-   **golang.org/x/net**                                                              v0.4.0 -> v0.8.0
-   **golang.org/x/oauth2**                                                           [`6fdb5e3`](https://github.com/docker/buildx/commit/6fdb5e3db783) -> v0.5.0
-   **golang.org/x/sync**                                                             v0.1.0 -> v0.2.0
-   **golang.org/x/sys**                                                              v0.3.0 -> v0.7.0
-   **golang.org/x/term**                                                             v0.3.0 -> v0.6.0
-   **golang.org/x/text**                                                             v0.5.0 -> v0.8.0
-   **golang.org/x/time**                                                             v0.1.0 -> v0.3.0
-   **golang.org/x/tools**                                                            v0.7.0 ***new***
-   **google.golang.org/genproto**                                                    [`1bc688f`](https://github.com/docker/buildx/commit/1bc688fe9f3e) -> [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4)
-   **google.golang.org/grpc**                                                        v1.50.1 -> v1.53.0
-   **google.golang.org/protobuf**                                                    v1.28.1 -> v1.30.0
-   **k8s.io/api**                                                                    v0.22.4 -> v0.26.2
-   **k8s.io/apimachinery**                                                           v0.22.4 -> v0.26.2
-   **k8s.io/apiserver**                                                              v0.26.2 ***new***
-   **k8s.io/client-go**                                                              v0.22.4 -> v0.26.2
-   **k8s.io/klog/v2**                                                                v2.30.0 -> v2.90.1
-   **k8s.io/kube-openapi**                                                           [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) ***new***
-   **k8s.io/utils**                                                                  [`cb0fa31`](https://github.com/docker/buildx/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5)
-   **sigs.k8s.io/json**                                                              [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) ***new***
-   **sigs.k8s.io/structured-merge-diff/v4**                                          v4.1.2 -> v4.2.3
-   **sigs.k8s.io/yaml**                                                              v1.2.0 -> v1.3.0

Previous release can be found at [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4)

### [`v0.10.5`](https://github.com/docker/buildx/releases/tag/v0.10.5)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.4...v0.10.5)

Welcome to the 0.10.5 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

##### Notable changes

-   Fix issue where build progress could pause for a couple of seconds with no new output because of a race condition. This issue was more likely to appear when using Docker driver with Docker Engine v24.0 release [#&#8203;1815](https://github.com/docker/buildx/issues/1815)
-   Fix handling `NO_COLOR` with empty value [#&#8203;1815](https://github.com/docker/buildx/issues/1815)

### [`v0.10.4`](https://github.com/docker/buildx/releases/tag/v0.10.4)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.3...v0.10.4)

Welcome to the 0.10.4 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

##### Notable changes

-   Add `BUILDX_NO_DEFAULT_ATTESTATIONS` as alternative to `--provenance false` [#&#8203;1645](https://github.com/docker/buildx/issues/1645)
-   Disable dirty Git checkout detection by default for performance. Can be enabled with `BUILDX_GIT_CHECK_DIRTY` opt-in [#&#8203;1650](https://github.com/docker/buildx/issues/1650)
-   Strip credentials from VCS hint URL before sending to BuildKit [#&#8203;1664](https://github.com/docker/buildx/issues/1664)

### [`v0.10.3`](https://github.com/docker/buildx/releases/tag/v0.10.3)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.2...v0.10.3)

Welcome to the 0.10.3 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

##### Notable changes

-   Fix reachable commit and warnings on collecting Git provenance info [#&#8203;1592](https://github.com/docker/buildx/issues/1592) [#&#8203;1634](https://github.com/docker/buildx/issues/1634)
-   Fix a regression where docker context was not being validated [#&#8203;1596](https://github.com/docker/buildx/issues/1596)
-   Fix function resolution with JSON bake definition [#&#8203;1605](https://github.com/docker/buildx/issues/1605)
-   Fix case where original HCL bake diagnostic is discarded [#&#8203;1607](https://github.com/docker/buildx/issues/1607)
-   Fix labels not correctly set with bake and compose file [#&#8203;1631](https://github.com/docker/buildx/issues/1631)

### [`v0.10.2`](https://github.com/docker/buildx/releases/tag/v0.10.2)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.1...v0.10.2)

Welcome to the 0.10.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

##### Notable changes

-   Fix preferred platforms order not taken into account in multi-node builds [#&#8203;1561](https://github.com/docker/buildx/issues/1561)
-   Fix possible panic on handling `SOURCE_DATE_EPOCH` environment variable [#&#8203;1564](https://github.com/docker/buildx/issues/1564)
-   Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries [#&#8203;1566](https://github.com/docker/buildx/issues/1566)
-   Improve warnings on collecting Git provenance info [#&#8203;1568](https://github.com/docker/buildx/issues/1568)

### [`v0.10.1`](https://github.com/docker/buildx/releases/tag/v0.10.1)

[Compare Source](https://github.com/docker/buildx/compare/v0.10.0...v0.10.1)

Welcome to the 0.10.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

> **Note**
>
> Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`.

##### Notable changes

-   Fix sending the correct origin URL as `vsc:source` metadata [#&#8203;1548](https://github.com/docker/buildx/issues/1548)
-   Fix possible panic from data-race [#&#8203;1504](https://github.com/docker/buildx/issues/1504)
-   Fix regression with `rm --all-inactive` [#&#8203;1547](https://github.com/docker/buildx/issues/1547)
-   Improve attestation access in `imagetools inspect` by lazily loading data [#&#8203;1546](https://github.com/docker/buildx/issues/1546)
-   Correctly mark capabilities request as internal [#&#8203;1538](https://github.com/docker/buildx/issues/1538)
-   Detect invalid attestation configuration [#&#8203;1545](https://github.com/docker/buildx/issues/1545)
-   Update containerd patches to fix possible push regression affecting `imagetools` commands [#&#8203;1559](https://github.com/docker/buildx/issues/1559)

##### Dependency Changes

-   **github.com/containerd/containerd**  v1.6.14 -> [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9)
-   **github.com/moby/buildkit**          v0.11.0 -> v0.11.2

Previous release can be found at [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0)

</details>

<details>
<summary>docker/distribution</summary>

### [`v2.8.3`](https://github.com/distribution/distribution/releases/tag/v2.8.3)

[Compare Source](https://github.com/docker/distribution/compare/v2.8.2...v2.8.3)

#### What's Changed

-   Pass `BUILDTAGS` argument to `go build` by [@&#8203;marcusirgens](https://github.com/marcusirgens) in https://github.com/distribution/distribution/pull/3926
-   Enable Go build tags by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4009
-   `reference`: replace deprecated function `SplitHostname` by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4032
-   Dont parse errors as JSON unless Content-Type is set to JSON by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4054
-   update to go 1.20.8 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4056
-   Set `Content-Type` header in registry client `ReadFrom` by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4053
-   deprecate reference package, migrate to github.com/distribution/reference by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4063
-   `digestset`: deprecate package in favor of `go-digest/digestset`  by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4064
-   Do not close HTTP request body in HTTP handler by [@&#8203;milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4068
-   Add v2.8.3 release notes by [@&#8203;milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4088

#### New Contributors

-   [@&#8203;marcusirgens](https://github.com/marcusirgens) made their first contribution in https://github.com/distribution/distribution/pull/3926

**Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3

### [`v2.8.2`](https://github.com/distribution/distribution/releases/tag/v2.8.2)

[Compare Source](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2)

#### What's Changed

-   Revert registry/client: set `Accept: identity` header when getting layers by [@&#8203;ndeloof](https://github.com/ndeloof) in https://github.com/distribution/distribution/pull/3783
-   Parse `http` forbidden as denied by [@&#8203;vvoland](https://github.com/vvoland) in https://github.com/distribution/distribution/pull/3914
-   Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 by [@&#8203;thaJeztah](https://github.com/thaJeztah) ([#&#8203;3650](https://github.com/distribution/distribution/pull/3650))
-   Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/\_catalog  by [@&#8203;josegomezr](https://github.com/josegomezr) [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54)
-   Fix panic in inmemory driver by [@&#8203;wy65701436](https://github.com/wy65701436) in https://github.com/distribution/distribution/pull/3815
-   bump up golang version (alternative) by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3903
-   Dockerfile: update xx to v1.2.1 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3907
-   update to go1.19.9 by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3908
-   Add code to handle pagination of parts. Fixes max layer size of 10GB bug by [@&#8203;DavidSpek](https://github.com/DavidSpek) in https://github.com/distribution/distribution/pull/3893
-   Dockerfile: fix filenames of artifacts by [@&#8203;thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3911

**Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2

</details>

<details>
<summary>docker/docker</summary>

### [`v26.0.0`](https://github.com/moby/moby/releases/tag/v26.0.0)

[Compare Source](https://github.com/docker/docker/compare/v25.0.5...v26.0.0)

##### 26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 26.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A26.0.0)
-   [moby/moby, 26.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A26.0.0)
-   Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md).
-   Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v26.0.0/docs/api/version-history.md).

##### Security

This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers.

##### New

-   Add `Subpath` field to the `VolumeOptions` making it possible to mount a subpath of a volume. [moby/moby#&#8203;45687](https://github.com/moby/moby/pull/45687)
-   Add `volume-subpath` support to the mount flag (`--mount type=volume,...,volume-subpath=<subpath>`). [docker/cli#&#8203;4331](https://github.com/docker/cli/pull/4331)
-   Accept `=` separators and `[ipv6]` in compose files for `docker stack deploy`. [docker/cli#&#8203;4860](https://github.com/docker/cli/pull/4860)
-   rootless: Add support for enabling host loopback by setting the `DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK` environment variable to `false` (defaults to `true`). This lets containers connect to the host by using IP address `10.0.2.2`. [moby/moby#&#8203;47352](https://github.com/moby/moby/pull/47352)
-   containerd image store: `docker image ls` no longer creates duplicates entries for multi-platform images. [moby/moby#&#8203;45967](https://github.com/moby/moby/pull/45967)
-   containerd image store: Send Prometheus metrics. [moby/moby#&#8203;47555](https://github.com/moby/moby/pull/47555)

##### Bug fixes and enhancements

-   [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#&#8203;47589](https://github.com/moby/moby/pull/47589)
-   Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#&#8203;47233](https://github.com/moby/moby/pull/47233)

> \[!WARNING]
>
> Containers created using Docker Engine 25.0.0 may have duplicate MAC addresses, they must be re-created.
> Containers created using version 25.0.0 or 25.0.1 with user-defined MAC addresses will get generated MAC addresses when they are started using 25.0.2. They must also be re-created.

-   Always attempt to enable IPv6 on a container's loopback interface, and only include IPv6 in `/etc/hosts` if successful. [moby/moby#&#8203;47062](https://github.com/moby/moby/pull/47062)

> \[!NOTE]
>
> By default, IPv6 will remain enabled on a container's loopback interface when the container is not connected to an IPv6-enabled network.
> For example, containers that are only connected to an IPv4-only network now have the `::1` address on their loopback interface.
>
> To disable IPv6 in a container,
> use option `--sysctl net.ipv6.conf.all.disable_ipv6=1` in the `create` or `run` command,
> or the equivalent `sysctls` option in the service configuration section of a Compose file.
>
> If IPv6 is not available in a container because it has been explicitly disabled for the container,
> or the host's networking stack does not have IPv6 enabled (or for any other reason)
> the container's `/etc/hosts` file will not include IPv6 entries.

-   Fix `ADD` Dockerfile instruction failing with `lsetxattr <file>: operation not supported` when unpacking archive with xattrs onto a filesystem that doesn't support them. [moby/moby#&#8203;47175](https://github.com/moby/moby/pull/47175)
-   Fix `docker container start` failing when used with `--checkpoint`. [moby/moby#&#8203;47456](https://github.com/moby/moby/pull/47456)
-   Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#&#8203;47356](https://github.com/moby/moby/pull/47356)
-   Do not enforce new validation rules for existing swarm networks. [moby/moby#&#8203;47361](https://github.com/moby/moby/pull/47361)
-   Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#&#8203;47375](https://github.com/moby/moby/pull/47375)
-   Print hint when invoking `docker image ls` with ambiguous argument. [docker/cli#&#8203;4849](https://github.com/docker/cli/pull/4849)
-   Cleanup `@docker_cli_[UUID]` files on OpenBSD. [docker/cli#&#8203;4862](https://github.com/docker/cli/pull/4862)
-   Add explicit [deprecation notice](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md#unauthenticated-tcp-connections) message when using remote TCP connections without TLS. [docker/cli#&#8203;4928](https://github.com/docker/cli/pull/4928), [moby/moby#&#8203;47556](https://github.com/moby/moby/pull/47556)
-   Use IPv6 nameservers from the host's `resolv.conf` as upstream resolvers for Docker Engine's internal DNS, rather than listing them in the container's `resolv.conf`. [moby/moby#&#8203;47512](https://github.com/moby/moby/pull/47512)
-   containerd image store: Isolate images with different containerd namespaces when `--userns-remap` option is used. [moby/moby#&#8203;46786](https://github.com/moby/moby/pull/46786)
-   containerd image store: Fix image pull not emitting `Pulling fs layer` status. [moby/moby#&#8203;47432](https://github.com/moby/moby/pull/47432)

[CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx

##### API

-   To preserve backwards compatibility, read-only mounts are not recursive by default when using older clients (API version < v1.44). [moby/moby#&#8203;47391](https://github.com/moby/moby/pull/47391)
-   `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#&#8203;47451](https://github.com/moby/moby/pull/47451)
-   Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#&#8203;47387](https://github.com/moby/moby/pull/47387)
-   The `is_automated` field in the `POST /images/search` endpoint results is always `false` now. Consequently, searching for `is-automated=true` will yield no results, while `is-automated=false` will be a no-op. [moby/moby#&#8203;47465](https://github.com/moby/moby/pull/47465)
-   Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#&#8203;47430](https://github.com/moby/moby/pull/47430)

##### Packaging updates

-   Update API to v1.45. [moby#&#8203;47582](https://github.com/moby/moby/pull/47118)
-   Update BuildKit to [v0.13.1](https://github.com/moby/buildkit/releases/tag/v0.13.1). [moby/moby#&#8203;47582](https://github.com/moby/moby/pull/47582)
-   Update Buildx to [v0.13.1](https://github.com/docker/buildx/releases/tag/v0.13.1). [docker/docker-ce-packaging#&#8203;1000](https://github.com/docker/docker-ce-packaging/pull/1000)
-   Update Compose to [v2.25.0](https://github.com/docker/compose/releases/tag/v2.25.0). [docker/docker-ce-packaging#&#8203;1002](https://github.com/docker/docker-ce-packaging/pull/1002)
-   Update Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#&#8203;47502](https://github.com/moby/moby/pull/47502)
-   Update RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2).  [moby/moby#&#8203;47508](https://github.com/moby/moby/pull/47504)
-   Update containerd to v1.7.13 (static binaries only) [moby/moby#&#8203;47278](https://github.com/moby/moby/pull/47278)
-   Update runc binary to v1.1.12 [moby/moby#&#8203;47268](https://github.com/moby/moby/pull/47268)
-   Update OTel to v0.46.1 / v1.21.0 [moby/moby#&#8203;47245](https://github.com/moby/moby/pull/47245)

##### Removed

-   Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#&#8203;47430](https://github.com/moby/moby/pull/47430)
-   Deprecate the ability to accept remote TCP connections without TLS. [Deprecation notice](https://github.com/docker/cli/tree/v26.0.0/deprecation.md#unauthenticated-tcp-connections) [docker/cli#&#8203;4928](https://github.com/docker/cli/pull/4928) [moby/moby#&#8203;47556](https://github.com/moby/moby/pull/47556).
-   Remove deprecated API versions (API < v1.24) [moby/moby#&#8203;47155](https://github.com/moby/moby/pull/47155)
-   Disable pulling of deprecated image formats by default. These image formats are deprecated, and support will be removed in a future version. [moby/moby#&#8203;47459](https://github.com/moby/moby/pull/47459)
-   image: remove deprecated IDFromDigest [moby/moby#&#8203;47198](https://github.com/moby/moby/pull/47198)
-   Remove the deprecated `github.com/docker/docker/pkg/loopback` package. [moby/moby#&#8203;47128](https://github.com/moby/moby/pull/47128)
-   pkg/system: remove deprecated `ErrNotSupportedOperatingSystem`, `IsOSSupported` [moby/moby#&#8203;47129](https://github.com/moby/moby/pull/47129)
-   pkg/homedir: remove deprecated Key() and GetShortcutString() [moby/moby#&#8203;47130](https://github.com/moby/moby/pull/47130)
-   pkg/containerfs: remove deprecated ResolveScopedPath [moby/moby#&#8203;47131](https://github.com/moby/moby/pull/47131)
-   The daemon flag `--oom-score-adjust` was deprecated in v24.0 and is now removed. [moby/moby#&#8203;46113](https://github.com/moby/moby/pull/46113)
-   Remove deprecated aliases from the api/types package. These types were deprecated in v25.0.0, which provided temporary aliases. [moby/moby#&#8203;47148](https://github.com/moby/moby/pull/47148)
    These aliases are now removed: `types.Info`, `types.Commit`, `types.PluginsInfo`, `types.NetworkAddressPool`, `types.Runtime`, `types.SecurityOpt`, `types.KeyValue`, `types.DecodeSecurityOptions`, `types.CheckpointCreateOptions`, `types.CheckpointListOptions`, `types.CheckpointDeleteOptions`, `types.Checkpoint`, `types.ImageDeleteResponseItem`, `types.ImageSummary`, `types.ImageMetadata`, `types.ServiceUpdateResponse`, `types.ServiceCreateResponse`, `types.ResizeOptions`, `types.ContainerAttachOptions`, `types.ContainerCommitOptions`, `types.ContainerRemoveOptions`, `types.ContainerStartOptions`, `types.ContainerListOptions`, `types.ContainerLogsOptions`
-   cli/command/container: remove deprecated `NewStartOptions()` [docker/cli#&#8203;4811](https://github.com/docker/cli/pull/4811)
-   cli/command: remove deprecated `DockerCliOption`, `InitializeOpt` [docker/cli#&#8203;4810](https://github.com/docker/cli/pull/4810)

    [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx

### [`v25.0.5`](https://github.com/moby/moby/releases/tag/v25.0.5)

[Compare Source](https://github.com/docker/docker/compare/v25.0.4...v25.0.5)

#### 25.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.5)
-   [moby/moby, 25.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.5)
-   Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.5/docs/deprecated.md).
-   Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.5/docs/api/version-history.md).

##### Security

This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers.

##### Bug fixes and enhancements

-   [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#&#8203;47589](https://github.com/moby/moby/pull/47589)
-   plugin: fix mounting /etc/hosts when running in UserNS. [moby/moby#&#8203;47588](https://github.com/moby/moby/pull/47588)
-   rootless: fix `open /etc/docker/plugins: permission denied`. [moby/moby#&#8203;47587](https://github.com/moby/moby/pull/47587)
-   Fix multiple parallel `docker build` runs leaking disk space. [moby/moby#&#8203;47527](https://github.com/moby/moby/pull/47527)

    [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx

### [`v25.0.4`](https://github.com/moby/moby/releases/tag/v25.0.4)

[Compare Source](https://github.com/docker/docker/compare/v25.0.3...v25.0.4)

#### 25.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.4)
-   [moby/moby, 25.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.4)
-   Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.4/docs/deprecated.md).
-   Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.4/docs/api/version-history.md).

##### Bug fixes and enhancements

-   Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#&#8203;47490](https://github.com/moby/moby/pull/47490)
-   Fix `docker start` failing when used with `--checkpoint` [moby/moby#&#8203;47466](https://github.com/moby/moby/pull/47466)
-   Don't enforce new validation rules for existing swarm networks [moby/moby#&#8203;47482](https://github.com/moby/moby/pull/47482)
-   Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#&#8203;47481](https://github.com/moby/moby/pull/47481)
-   Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS [moby/moby#&#8203;47483](https://github.com/moby/moby/pull/47483)
-   containerd image store: Fix image pull not emitting `Pulling fs layer` status [moby/moby#&#8203;47484](https://github.com/moby/moby/pull/47484)

##### API

-   To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). [moby/moby#&#8203;47393](https://github.com/moby/moby/pull/47393)
-   `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#&#8203;47451](https://github.com/moby/moby/pull/47451)
-   Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#&#8203;47387](https://github.com/moby/moby/pull/47387)
-   Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. [moby/moby#&#8203;47470](https://github.com/moby/moby/pull/47470)
-   Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but `NetworkMode` name-or-id is not the same as the name-or-id used in `NetworkSettings.Networks`. [moby/moby#&#8203;47510](https://github.com/moby/moby/pull/47510)

##### Packaging updates

-   Upgrade Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#&#8203;47503](https://github.com/moby/moby/pull/47503)
-   Upgrade RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2).  [moby/moby#&#8203;47508](https://github.com/moby/moby/pull/47508)
-   Upgrade Compose to [v2.24.7](https://github.com/docker/compose/releases/tag/v2.24.7). https://github.com/docker/docker-ce-packaging/pull/998
-   Upgrade Buildx to [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0). https://github.com/docker/docker-ce-packaging/pull/997

**Full Changelog**: https://github.com/moby/moby/compare/v25.0.3...v25.0.4

### [`v25.0.3`](https://github.com/moby/moby/releases/tag/v25.0.3)

[Compare Source](https://github.com/docker/docker/compare/v25.0.2...v25.0.3)

#### 25.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.3)
-   [moby/moby, 25.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.3)

##### Bug fixes and enhancements

-   containerd image store: Fix a bug where `docker image history` would fail if a manifest wasn't found in the content store. [moby/moby#&#8203;47348](https://github.com/moby/moby/pull/47348)
-   Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#&#8203;47304](https://github.com/moby/moby/pull/47304)

    > **Note**
    >
    > -   Containers created with Docker Engine version 25.0.0 may have duplicate MAC addresses.
    >     They must be re-created.
    > -   Containers with user-defined MAC addresses created with Docker Engine versions 25.0.0 or 25.0.1
    >     receive new MAC addresses when started using Docker Engine version 25.0.2.
    >     They must also be re-created.

<!---->

-   Fix `docker save <image>@&#8203;<digest>` producing an OCI archive with index without manifests. [moby/moby#&#8203;47294](https://github.com/moby/moby/pull/47294)
-   Fix a bug preventing bridge networks from being created with an MTU higher than 1500 on RHEL and CentOS 7. [moby/moby#&#8203;47308](https://github.com/moby/moby/issues/47308), [moby/moby#&#8203;47311](https://github.com/moby/moby/pull/47311)
-   Fix a bug where containers are unable to communicate over an `internal` network. [moby/moby#&#8203;47303](https://github.com/moby/moby/pull/47303)
-   Fix a bug where the value of the `ipv6` daemon option was ignored. [moby/moby#&#8203;47310](https://github.com/moby/moby/pull/47310)
-   Fix a bug where trying to install a pulling using a digest revision would cause a panic. [moby/moby#&#8203;47323](https://github.com/moby/moby/pull/47323)
-   Fix a potential race condition in the managed containerd supervisor. [moby/moby#&#8203;47313](https://github.com/moby/moby/pull/47313)
-   Fix an issue with the `journald` log driver preventing container logs from being followed correctly with systemd version 255. [moby/moby47243](https://github.com/moby/moby/pull/47243)
-   seccomp: Update the builtin seccomp profile to include syscalls added in kernel v5.17 - v6.7 to align the profile with the profile used by containerd. [moby/moby#&#8203;47341](https://github.com/moby/moby/pull/47341)
-   Windows: Fix cache not being used when building images based on Windows versions older than the host's version. [moby/moby#&#8203;47307](https://github.com/moby/moby/pull/47307), [moby/moby#&#8203;47337](https://github.com/moby/moby/pull/47337)

##### Packaging updates

-   Removed support for Ubuntu Lunar (23.04). [docker/ce-packaging#&#8203;986](https://github.com/docker/docker-ce-packaging/pull/986)

### [`v25.0.2`](https://github.com/moby/moby/releases/tag/v25.0.2)

[Compare Source](https://github.com/docker/docker/compare/v25.0.1...v25.0.2)

#### 25.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.2)
-   [moby/moby, 25.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.2)

##### Security

This release contains security fixes for the following CVEs
affecting Docker Engine and its components.

| CVE                                                         | Component     | Fix version | Severity         |
| ----------------------------------------------------------- | ------------- | ----------- | ---------------- |
| [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc          | 1.1.12      | High, CVSS 8.6   |
| [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) | BuildKit      | 1.12.5      | High, CVSS 8.7   |
| [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) | BuildKit      | 1.12.5      | High, CVSS 8.7   |
| [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) | BuildKit      | 1.12.5      | High, CVSS 7.7   |
| [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) | BuildKit      | 1.12.5      | Medium, CVSS 5.5 |
| [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 25.0.2      | Medium, CVSS 6.9 |

The potential impacts of the above vulnerabilities include:

-   Unauthorized access to the host filesystem
-   Compromising the integrity of the build cache
-   In the case of CVE-2024-21626, a scenario that could lead to full container escape

For more information about the security issues addressed in this release,
refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/).
For details about each vulnerability, see the relevant security advisory:

-   [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)
-   [CVE-2024-23651](https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv)
-   [CVE-2024-23652](https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8)
-   [CVE-2024-23653](https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g)
-   [CVE-2024-23650](https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx)
-   [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc)

##### Packaging updates

-   Upgrade containerd to [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28).
-   Upgrade containerd to v1.7.13 (static binaries only). [moby/moby#&#8203;47280](https://github.com/moby/moby/pull/47280)
-   Upgrade runc to v1.1.12. [moby/moby#&#8203;47269](https://github.com/moby/moby/pull/47269)
-   Upgrade Compose to v2.24.5. [docker/docker-ce-packaging#&#8203;985](https://github.com/docker/docker-ce-packaging/pull/985)
-   Upgrade BuildKit to v0.12.5. [moby/moby#&#8203;47273](https://github.com/moby/moby/pull/47273)

### [`v25.0.1`](https://github.com/moby/moby/releases/tag/v25.0.1)

[Compare Source](https://github.com/docker/docker/compare/v25.0.0...v25.0.1)

#### 25.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.1)
-   [moby/moby, 25.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.1)

##### Bug fixes and enhancements

-   API: Fix incorrect HTTP status code for containers with an invalid network configuration created before upgrading to Docker Engine v25.0. [moby/moby#&#8203;47159](https://github.com/moby/moby/pull/47159)
-   Ensure that a MAC address based on a container's IP address is re-generated when the container is stopped and restarted, in case the generated IP/MAC addresses have been reused. [moby/moby#&#8203;47171](https://github.com/moby/moby/pull/47171)
-   Fix `host-gateway-ip` not working during build when not set through configuration. [moby/moby#&#8203;47192](https://github.com/moby/moby/pull/47192)
-   Fix a bug that prevented a container from being renamed twice. [moby/moby#&#8203;47196](https://github.com/moby/moby/pull/47196)
-   Fix an issue causing containers to have their short ID added to their network alias when inspecting them. [moby/moby#&#8203;47182](https://github.com/moby/moby/pull/47182)
-   Fix an issue in detecting whether a remote build context is a Git repository. [moby/moby#&#8203;47136](https://github.com/moby/moby/pull/47136)
-   Fix an issue with layers order in OCI manifests. [moby/moby#&#8203;47150](https://github.com/moby/moby/issues/47150)
-   Fix volume mount error when passing an `addr` or `ip` mount option. [moby/moby#&#8203;47185](https://github.com/moby/moby/pull/47185)
-   Improve error message related to extended attributes that can't be set due to improperly namespaced attribute names. [moby/moby#&#8203;47178](https://github.com/moby/moby/pull/47178)
-   Swarm: Fixed `start_interval` not being passed to the container config. [moby/moby#&#8203;47163](https://github.com/moby/moby/pull/47163)

##### Packaging updates

-   Upgrade Compose to `2.24.2`. [docker/docker-ce-packaging#&#8203;981](https://github.com/docker/docker-ce-packaging/pull/981)

### [`v25.0.0`](https://github.com/moby/moby/releases/tag/v25.0.0)

[Compare Source](https://github.com/docker/docker/compare/v24.0.9...v25.0.0)

#### 25.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 25.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.0)
-   [moby/moby, 25.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.0)
-   Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.0/docs/deprecated.md).
-   Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.0/docs/api/version-history.md).

##### New

-   Add OpenTelemetry tracing. [moby/moby#&#8203;45652](https://github.com/moby/moby/pull/45652), [moby/moby#&#8203;45579](https://github.com/moby/moby/pull/45579)
-   Add support for CDI devices under Linux. [moby/moby#&#8203;45134](https://github.com/moby/moby/pull/45134), [docker/cli#&#8203;4510](https://github.com/docker/cli/pull/4510), [moby/moby#&#8203;46004](https://github.com/moby/moby/pull/46004)
-   Add an additional interval to be used by healthchecks during the container start period. [moby/moby#&#8203;40894](https://github.com/moby/moby/pull/40894), [docker/cli#&#8203;4405](https://github.com/docker/cli/pull/4405), [moby/moby#&#8203;45965](https://github.com/moby/moby/pull/45965)
-   Add a `--log-format` flag to `dockerd` to control the logging format: text (default) or JSON. [moby/moby#&#8203;45737](https://github.com/moby/moby/pull/45737)
-   Add support for recursive read-only mounts. [moby/moby#&#8203;45278](https://github.com/moby/moby/pull/45278), [moby/moby#&#8203;46037](https://github.com/moby/moby/pull/46037)
-   Add support for filtering images based on timestamp with `docker image ls --filter=until=<timestamp>`. [moby/moby#&#8203;46577](https://github.com/moby/moby/pull/46577)

##### Bug fixes and enhancements

-   API: Fix error message for invalid policies at `ValidateRestartPolicy`. [moby/moby#&#8203;46352](https://github.com/moby/moby/pull/46352)
-   API: Update `/info` endpoint to use singleflight. [moby/moby#&#8203;45847](https://github.com/moby/moby/pull/45847)
-   Add an error message for when specifying a Dockerfile filename with `-f`, and also using `stdin`. [docker/cli#&#8203;4346](https://github.com/docker/cli/pull/4346)
-   Add support for `mac-address` and `link-local-ip` fields in `--network` long format. [docker/cli#&#8203;4419](https://github.com/docker/cli/pull/4419)
-   Add support for specifying multiple `--network` flags with `docker container create` and `docker run`. [moby/moby#&#8203;45906](https://github.com/moby/moby/pull/45906)
-   Automatically enable IPv6 on a network when an IPv6 subnet is specified. [moby/moby#&#8203;46455](https://github.com/moby/moby/pull/46455)
-   Add support for overlay networks over IPv6 transport. [moby/moby#&#8203;46790](https://github.com/moby/moby/pull/46790)
-   Configuration reloading is now more robust: if there's an error during the configuration reload process, no configuration changes are applied. [moby/moby#&#8203;43980](https://github.com/moby/moby/pull/43980)
-   Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#&#8203;46857](https://github.com/moby/moby/pull/46857)
-   Live restore: containers that are live-restored will now be given another health-check start period when the daemon restarts. [moby/moby#&#8203;47051](https://github.com/moby/moby/pull/47051)
-   Container health status is flushed to disk less frequently, reducing wear on flash storage. [moby/moby#&#8203;47044](https://github.com/moby/moby/pull/47044)
-   Ensure network names are unique. [moby/moby#&#8203;46251](https://github.com/moby/moby/pull/46251)
-   Ensure that overlay2 layer metadata is correct. [moby/moby#&#8203;46471](https://github.com/moby/moby/pull/46471)
-   Fix `Downloading` progress message on image pull. [moby/moby#&#8203;46515](https://github.com/moby/moby/pull/46515)
-   Fix `NetworkConnect` and `ContainerCreate` with improved data validation, and return all validation errors at once. [moby/moby#&#8203;46183](https://github.com/moby/moby/pull/46183)
-   Fix `com.docker.network.host_ipv4` option when IPv6 and ip6tables are enabled. [moby/moby#&#8203;46446](https://github.com/moby/moby/pull/46446)
-   Fix daemon's `cleanupContainer` if containerd is stopped. [moby/moby#&#8203;46213](https://github.com/moby/moby/pull/46213)
-   Fix returning incorrect HTTP status codes for libnetwork errors. [moby/moby#&#8203;46146](https://github.com/moby/moby/pull/46146)
-   Fix various issues with images/json API filters and image list. [moby/moby#&#8203;46034](https://github.com/moby/moby/pull/46034)
-   CIFS volumes now resolves FQDN correctly. [moby/moby#&#8203;46863](https://github.com/moby/moby/pull/46863)
-   Improve validation of the `userland-proxy-path` daemon configuration option. Validation now happens during daemon startup, instead of producing an error when starting a container with port-mapping. [moby/moby#&#8203;47000](https://github.com/moby/moby/pull/47000)
-   Set the MAC address of container's interface when network mode is a short network ID. [moby/moby#&#8203;46406](https://github.com/moby/moby/pull/46406)
-   Sort unconsumed build arguments before display in build output. [moby/moby#&#8203;45917](https://github.com/moby/moby/pull/45917)
-   The `docker image save` tarball output is now OCI compliant. [moby/moby#&#8203;44598](https://github.com/moby/moby/pull/44598)
-   The daemon no longer appends `ACCEPT` rules to the end of the `INPUT` iptables chain for encrypted overlay networks. Depending on firewall configuration, a rule may be needed to permit incoming encrypted overlay network traffic. [moby/moby#&#8203;45280](https://github.com/moby/moby/pull/45280)
-   Unpacking layers with extended attributes onto an incompatible filesystem will now fail instead of silently discarding extended attributes. [moby/moby#&#8203;45464](https://github.com/moby/moby/pull/45464)
-   Update daemon MTU option to BridgeConfig and display warning on Windows. [moby/moby#&#8203;45887](https://github.com/moby/moby/pull/45887)
-   Validate IPAM config when creating a network. Automatically fix networks created prior to this release where `--ip-range` is larger than `--subnet`. [moby/moby#&#8203;45759](https://github.com/moby/moby/pull/45759)
-   containerd image store: Add image events for `push`, `pull`, and `save`. [moby/moby#&#8203;46405](https://github.com/moby/moby/pull/46405)
-   containerd image store: Add support for pulling legacy schema1 images. [moby/moby#&#8203;46513](https://github.com/moby/moby/pull/46513)
-   containerd image store: Add support for pushing all tags. [moby/moby#&#8203;46485](https://github.com/moby/moby/pull/46485)
-   containerd image store: Add support for registry token. [moby/moby#&#8203;46475](https://github.com/moby/moby/pull/46475)
-   containerd image store: Add support for showing the number of containers that use an image. [moby/moby#&#8203;46511](https://github.com/moby/moby/pull/46511)
-   containerd image store: Fix a bug related to the `ONBUILD`, `MAINTAINER`, and `HEALTHCHECK` Dockerfile instructions. [moby/moby#&#8203;46313](https://github.com/moby/moby/pull/46313)
-   containerd image store: Fix `Pulling from` progress message. [moby/moby#&#8203;46494](https://github.com/moby/moby/pull/46494)
-   containerd image store: Add support for referencing images via the truncated ID with `sha256:` prefix. [moby/moby#&#8203;46435](https://github.com/moby/moby/pull/46435)
-   containerd image store: Fix `docker images` showing intermediate layers by default. [moby/moby#&#8203;46423](https://github.com/moby/moby/pull/46423)
-   containerd image store: Fix checking if the specified platform exists when getting an image. [moby/moby#&#8203;46495](https://github.com/moby/moby/pull/46495)
-   containerd image store: Fix errors when multiple `ADD` or `COPY` instructions were used with the classic builder. [moby/moby#&#8203;46383](https://github.com/moby/moby/pull/46383)
-   containerd image store: Fix stack overflow errors when importing an image. [moby/moby#&#8203;46418](https://github.com/moby/moby/pull/46418)
-   containerd image store: Improve `docker pull` progress output. [moby/moby#&#8203;46412](https://github.com/moby/moby/pull/46412)
-   containerd image store: Print the tag, digest, and size after pushing an image. [moby/moby#&#8203;46384](https://github.com/moby/moby/pull/46384)
-   containerd image store: Remove panic from `UpdateConfig`. [moby/moby#&#8203;46433](https://github.com/moby/moby/pull/46433)
-   containerd image store: Return an error when an image tag resembles a digest. [moby/moby#&#8203;46492](https://github.com/moby/moby/pull/46492)
-   containerd image store: `docker image ls` now shows the correct image creation time and date. [moby/moby#&#8203;46719](https://github.com/moby/moby/pull/46719)
-   containerd image store: Fix an issue handling user namespace settings. [moby/moby#&#8203;46375](https://github.com/moby/moby/pull/46375)
-   containerd image store: Add support for pulling all tags (`docker pull -a`). [moby/moby#&#8203;46618](https://github.com/moby/moby/pull/46618)
-   containerd image store: Use the domain name in the image reference as the default registry authentication domain. [moby/moby#&#8203;46779](https://github.com/moby/moby/pull/46779)

##### Packaging updates

-   Upgrade API to v1.44. [moby/moby#&#8203;45468](https://github.com/moby/moby/pull/45468)
-   Upgrade Compose to `2.24.1`. [docker/docker-ce-packaging#&#8203;980](https://github.com/docker/docker-ce-packaging/pull/980)
-   Upgrade containerd to v1.7.12 (static binaries only). [moby/moby#&#8203;47070](https://github.com/moby/moby/pull/47070)
-   Upgrade Go runtime to [1.21.6](https://go.dev/doc/devel/release#go1.21.minor). [moby/moby#&#8203;47053](https://github.com/moby/moby/pull/47053)
-   Upgrade runc to v1.1.11. [moby/moby#&#8203;47007](https://github.com/moby/moby/pull/47007)
-   Upgrade BuildKit to v0.12.4. [moby/moby#&#8203;46882](https://github.com/moby/moby/pull/46882)
-   Upgrade Buildx to v0.12.1. [docker/docker-ce-packaging#&#8203;979](https://github.com/docker/docker-ce-packaging/pull/979)

##### Removed

-   API: Remove VirtualSize field for the `GET /images/json` and `GET /images/{id}/json` endpoints. [moby/moby#&#8203;45469](https://github.com/moby/moby/pull/45469)
-   Remove deprecated `devicemapper` storage driver. [moby/moby#&#8203;43637](https://github.com/moby/moby/pull/43637)
-   Remove deprecated orchestrator options. [docker/cli#&#8203;4366](https://github.com/docker/cli/pull/4366)
-   Remove support for Debian Upstart init system. [moby/moby#&#8203;45548](https://github.com/moby/moby/pull/45548), [moby/moby#&#8203;45551](https://github.com/moby/moby/pull/45551)
-   Remove the `--oom-score-adjust` daemon option. [moby/moby#&#8203;45484](https://github.com/moby/moby/pull/45484)
-   Remove warning for deprecated `~/.dockercfg` file. [docker/cli#&#8203;4281](https://github.com/docker/cli/pull/4281)
-   Remove `logentries` logging driver. [moby/moby#&#8203;46925](https://github.com/moby/moby/pull/46925)

##### Deprecated

-   Deprecate API versions older than 1.24. [Deprecation notice](../deprecated.md#deprecate-legacy-api-versions)
-   Deprecate `IsAutomated` field and `is-automated` filter for `docker search`. [Deprecation notice](../deprecated.md#isautomated-field-and-is-automated-filter-on-docker-search)
-   API: Deprecate `Container` and `ContainerConfig` properties for `/images/{id}/json` (`docker image inspect`). [moby/moby#&#8203;46939](https://github.com/moby/moby/pull/46939)

### [`v24.0.9`](https://github.com/moby/moby/releases/tag/v24.0.9)

[Compare Source](https://github.com/docker/docker/compare/v24.0.8...v24.0.9)

#### 24.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.9)
-   [moby/moby, 24.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.9)

#### Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

| CVE                                                         | Component     | Fix version | Severity         |
| ----------------------------------------------------------- | ------------- | ----------- | ---------------- |
| [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc          | 1.1.12      | High, CVSS 8.6   |
| [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 24.0.9      | Medium, CVSS 6.9 |

> **Important** ⚠️
>
> Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:
>
> -   [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651)
> -   [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652)
> -   [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653)
> -   [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650)
>
> To address these vulnerabilities, upgrade to [Docker Engine v25.0.2](./25.0.md#&#8203;2502).

For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the
[blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory:

-   [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)
-   [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc)

##### Packaging updates

-   Upgrade runc to [v1.1.12](https://github.com/opencontainers/runc/releases/tag/v1.1.12). [moby/moby#&#8203;47269](https://github.com/moby/moby/pull/47269)
-   Upgrade containerd to [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) (static binaries only). [moby/moby#&#8203;47280](https://github.com/moby/moby/pull/47280)

### [`v24.0.8`](https://github.com/moby/moby/releases/tag/v24.0.8)

[Compare Source](https://github.com/docker/docker/compare/v24.0.7...v24.0.8)

#### 24.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.8)
-   [moby/moby, 24.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.8)

##### Bug fixes and enhancements

-   Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#&#8203;46857](https://github.com/moby/moby/pull/46869)

##### Packaging updates

-   Upgrade Go to `go1.20.13`. [moby/moby#&#8203;47054](https://github.com/moby/moby/pull/47054), [docker/cli#&#8203;4826](https://github.com/docker/cli/pull/4826), [docker/docker-ce-packaging#&#8203;975](https://github.com/docker/docker-ce-packaging/pull/975)
-   Upgrade containerd (static binaries only) to [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) [moby/moby#&#8203;47096](https://github.com/moby/moby/pull/47096)
-   Upgrade runc to v1.1.11. [moby/moby#&#8203;47010](https://github.com/moby/moby/pull/47010)

### [`v24.0.7`](https://github.com/moby/moby/releases/tag/v24.0.7)

[Compare Source](https://github.com/docker/docker/compare/v24.0.6...v24.0.7)

#### 24.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.7)
-   [moby/moby, 24.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.7)

##### Bug fixes and enhancements

-   Write overlay2 layer metadata atomically. [moby/moby#&#8203;46703](https://github.com/moby/moby/pull/46703)
-   Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. [moby/moby#&#8203;46626](https://github.com/moby/moby/pull/46626)
-   Fix `dockerd-rootless-setuptools.sh` when username contains a backslash. [moby/moby#&#8203;46407](https://github.com/moby/moby/pull/46407)
-   Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when `dockerd --bridge=none` is used. [moby/moby#&#8203;46702](https://github.com/moby/moby/pull/46702)
-   Fix a bug where cancelling an API request could interrupt container restart. [moby/moby#&#8203;46697](https://github.com/moby/moby/pull/46697)
-   Fix an issue where containers would fail to start when providing `--ip-range` with a range larger than the subnet. [docker/for-mac#&#8203;6870](https://github.com/docker/for-mac/issues/6870)
-   Fix data corruption with zstd output. [moby/moby#&#8203;46709](https://github.com/moby/moby/pull/46709)
-   Fix the conditions under which the container's MAC address is applied. [moby/moby#&#8203;46478](https://github.com/moby/moby/pull/46478)
-   Improve the performance of the stats collector. [moby/moby#&#8203;46448](https://github.com/moby/moby/pull/46448)
-   Fix an issue with source policy rules ending up in the wrong order. [moby/moby#&#8203;46441](https://github.com/moby/moby/pull/46441)

##### Packaging updates

-   Add support for Fedora 39 and Ubuntu 23.10. [docker/docker-ce-packaging#&#8203;940](https://github.com/docker/docker-ce-packaging/pull/940), [docker/docker-ce-packaging#&#8203;955](https://github.com/docker/docker-ce-packaging/pull/955)
-   Fix `docker.socket` not getting disabled when uninstalling the `docker-ce` RPM package. [docker/docker-ce-packaging#&#8203;852](https://github.com/docker/docker-ce-packaging/pull/852)
-   Upgrade Go to `go1.20.10`. [docker/docker-ce-packaging#&#8203;951](https://github.com/docker/docker-ce-packaging/pull/951)
-   Upgrade containerd to `v1.7.6` (static binaries only). [moby/moby#&#8203;46103](https://github.com/moby/moby/pull/46103)
-   Upgrade the `containerd.io` package to [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24).

##### Security

-   Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/c9ccbfad11a60e703e91b6cca4f48927828c7e35).

### [`v24.0.6`](https://github.com/moby/moby/releases/tag/v24.0.6)

[Compare Source](https://github.com/docker/docker/compare/v24.0.5...v24.0.6)

#### 24.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.6)
-   [moby/moby, 24.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.6)

##### Bug fixes and enhancements

-   containerd storage backend: Fix `docker ps` failing when a container image is no longer present in the content store. [moby/moby#&#8203;46095](https://github.com/moby/moby/pull/46095)
-   containerd storage backend: Fix `docker ps -s -a` and `docker container prune` failing when a container image config is no longer present in the content store. [moby/moby#&#8203;46097](https://github.com/moby/moby/pull/46097)
-   containerd storage backend: Fix `docker inspect` failing when a container image config is no longer (or was never) present in the content store. [moby/moby#&#8203;46244](https://github.com/moby/moby/pull/46244)
-   containerd storage backend: Fix diff and export with the `overlayfs` snapshotter by using reference-counted rootfs mounts. [moby/moby#&#8203;46266](https://github.com/moby/moby/pull/46266)
-   containerd storage backend: Fix a misleading error message when the image platforms available locally do not match the desired platform. [moby/moby#&#8203;46300](https://github.com/moby/moby/pull/46300)
-   containerd storage backend: Fix the `FROM scratch` Dockerfile instruction with the classic builder. [moby/moby#&#8203;46302](https://github.com/moby/moby/pull/46302)
-   containerd storage backend: Fix `mismatched image rootfs and manifest layers` errors with the classic builder. [moby/moby#&#8203;46310](https://github.com/moby/moby/pull/46310)
-   Warn when pulling Docker Image Format v1, and Docker Image manifest version 2, schema 1 images from all registries. [moby/moby#&#8203;46290](https://github.com/moby/moby/pull/46290)
-   Fix live-restore of volumes with custom volume options. [moby/moby#&#8203;46366](https://github.com/moby/moby/pull/46366)
-   Fix incorrectly dropping capabilities bits when running a container as a non-root user (note: this change was already effectively present due to a regression). [moby/moby#&#8203;46221](https://github.com/moby/moby/pull/46221)
-   Fix network isolation iptables rules preventing IPv6 Neighbor Solicitation packets from being exchanged between containers. [moby/moby#&#8203;46214](https://github.com/moby/moby/pull/46214)
-   Fix `dockerd.exe --register-service` not working when the binary is in the current directory on Windows. [moby/moby#&#8203;46215](https://github.com/moby/moby/pull/46215)
-   Add a hint suggesting the use of a PAT to `docker login` against Docker Hub. [docker/cli#&#8203;4500](https://github.com/docker/cli/pull/4500)
-   Improve shell startup time for users of Bash completion for the CLI. [docker/cli#&#8203;4517](https://github.com/docker/cli/pull/4517)
-   Improve the speed of some commands by skipping `GET /_ping` when possible. [docker/cli#&#8203;4508](https://github.com/docker/cli/pull/4508)
-   Fix credential scopes when using a PAT to `docker manifest inspect` an image on Docker Hub. [docker/cli#&#8203;4512](https://github.com/docker/cli/pull/4512)
-   Fix `docker events` not supporting `--format=json`. [docker/cli#&#8203;4544](https://github.com/docker/cli/pull/4544)

##### Packaging updates

-   Upgrade Go to `go1.20.7`. [moby/moby#&#8203;46140](https://github.com/moby/moby/pull/46140), [docker/cli#&#8203;4476](https://github.com/docker/cli/pull/4476), [docker/docker-ce-packaging#&#8203;932](https://github.com/docker/docker-ce-packaging/pull/932)
-   Upgrade containerd to `v1.7.3` (static binaries only). [moby/moby#&#8203;46103](https://github.com/moby/moby/pull/46103)
-   Upgrade Compose to `v2.21.0`. [docker/docker-ce-packaging#&#8203;936](https://github.com/docker/docker-ce-packaging/pull/936)

### [`v24.0.5`](https://github.com/moby/moby/releases/tag/v24.0.5)

[Compare Source](https://github.com/docker/docker/compare/v24.0.4...v24.0.5)

#### 24.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.5)
-   [moby/moby, 24.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.5)

##### Bug fixes and enhancements

-   The Go client now avoids using UNIX socket paths in the HTTP `Host:` header, in order to be compatible with changes introduced in `go1.20.6`. [moby/moby#&#8203;45962](https://github.com/moby/moby/pull/45962), [moby/moby#&#8203;45990](https://github.com/moby/moby/pull/45990)
-   containerd storage backend: Fix `Variant` not being included in `docker image inspect` and `GET /images/{name}/json`. [moby/moby#&#8203;46025](https://github.com/moby/moby/pull/46025)
-   containerd storage backend: Prevent potential garbage collection of content during image export. [moby/moby#&#8203;46021](https://github.com/moby/moby/pull/46021)
-   containerd storage backend: Prevent duplicate digest entries in `RepoDigests`. [moby/moby#&#8203;46014](https://github.com/moby/moby/pull/46014)
-   containerd storage backend: Fix operations taking place against the incorrect tag when working with an image referenced by tag and digest. [moby/moby#&#8203;46013](https://github.com/moby/moby/pull/46013)
-   containerd storage backend: Fix a panic caused by `EXPOSE` when building containers with the legacy builder. [moby/moby#&#8203;45921](https://github.com/moby/moby/pull/45921)
-   Fix a regression causing unintuitive errors to be returned when attempting to create an `overlay` network on a non-Swarm node. [moby/moby#&#8203;45974](https://github.com/moby/moby/pull/45974)
-   Properly report errors parsing volume specifications from the command line. [docker/cli#&#8203;4423](https://github.com/docker/cli/pull/4423)
-   Fix a panic caused when `auths: null` is found in the CLI config file. [docker/cli#&#8203;4450](https://github.com/docker/cli/pull/4450)

##### Packaging updates

-   Use init scripts as provided by moby/moby `contrib/init`. [docker/docker-ce-packaging#&#8203;914](https://github.com/docker/docker-ce-packaging/pull/914), [docker/docker-ce-packaging#&#8203;926](https://github.com/docker/docker-ce-packaging/pull/926)
-   Drop Upstart from `contrib/init`. [moby/moby#&#8203;46044](https://github.com/moby/moby/pull/46044)
-   Upgrade Go to `go1.20.6`. [docker/cli#&#8203;4428](https://github.com/docker/cli/pull/4428), [moby/moby#&#8203;45970](https://github.com/moby/moby/pull/45970), [docker/docker-ce-packaging#&#8203;921](https://github.com/docker/docker-ce-packaging/pull/921)
-   Upgrade Compose to `v2.20.2`. [docker/docker-ce-packaging#&#8203;924](https://github.com/docker/docker-ce-packaging/pull/924)
-   Upgrade buildx to `v0.11.2`. [docker/docker-ce-packaging#&#8203;922](https://github.com/docker/docker-ce-packaging/pull/922)

### [`v24.0.4`](https://github.com/moby/moby/releases/tag/v24.0.4)

[Compare Source](https://github.com/docker/docker/compare/v24.0.3...v24.0.4)

#### 24.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.4)
-   [moby/moby, 24.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.4)

##### Bug fixes and enhancements

-   Fix a regression introduced during 24.0.3 that causes a panic during live-restore of containers with bind mounts. [moby/moby#&#8203;45903](https://github.com/moby/moby/pull/45903)

### [`v24.0.3`](https://github.com/moby/moby/releases/tag/v24.0.3)

[Compare Source](https://github.com/docker/docker/compare/v24.0.2...v24.0.3)

#### 24.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.3)
-   [moby/moby, 24.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.3)

##### Bug fixes and enhancements

-   containerd image store: Fix an issue where multi-platform images that did not include a manifest for the default platform could not be interacted with. [moby/moby#&#8203;45849](https://github.com/moby/moby/pull/45849)
-   containerd image store: Fix specious attempts to cache `FROM scratch` in container builds. [moby/moby#&#8203;45822](https://github.com/moby/moby/pull/45822)
-   containerd image store: Fix `docker cp` with snapshotters that cannot mount the same content multiple times. [moby/moby#&#8203;45780](https://github.com/moby/moby/pull/45780), [moby/moby#&#8203;45786](https://github.com/moby/moby/pull/45786)
-   containerd image store: Fix builds with `type=image` not being correctly unpacked/stored. [moby/moby#&#8203;45692](https://github.com/moby/moby/pull/45692)
-   containerd image store: Fix incorrectly attempting to unpack pseudo-images (including attestations) in `docker load`. [moby/moby#&#8203;45688](https://github.com/moby/moby/pull/45688)
-   containerd image store: Correctly set the user agent, and include additional information like the snapshotter when interacting with registries. [moby/moby#&#8203;45671](https://github.com/moby/moby/pull/45671), [moby/moby#&#8203;45684](https://github.com/moby/moby/pull/45684)
-   containerd image store: Fix a failure to unpack already-pulled content after switching between snapshotters. [moby/moby#&#8203;45678](https://github.com/moby/moby/pull/45678)
-   containerd image store: Fix images that have been re-tagged or with all tags removed being pruned while still in use. [moby/moby#&#8203;45857](https://github.com/moby/moby/pull/45857)
-   Fix a Swarm CSI issue where the Topology field was not propagated into NodeCSIInfo. [moby/moby#&#8203;45810](https://github.com/moby/moby/pull/45810)
-   Fix failures to add new Swarm managers caused by a very large raft log. [moby/moby#&#8203;45703](https://github.com/moby/moby/pull/45703), [moby/swarmkit#&#8203;3122](https://github.com/moby/swarmkit/pull/3122), [moby/swarmkit#&#8203;3128](https://github.com/moby/swarmkit/pull/3128)
-   `name_to_handle_at(2)` is now always allowed in the default seccomp profile. [moby/moby#&#8203;45833](https://github.com/moby/moby/pull/45833)
-   Fix an issue that prevented encrypted Swarm overlay networks from working on ports other than the default (4789). [moby/moby#&#8203;45637](https://github.com/moby/moby/pull/45637)
-   Fix a failure to restore mount reference-counts during live-restore. [moby/moby#&#8203;45824](https://github.com/moby/moby/pull/45824)
-   Fix various networking-related failures during live-restore. [moby/moby#&#8203;45658](https://github.com/moby/moby/pull/45658), [moby/moby#&#8203;45659](https://github.com/moby/moby/pull/45659)
-   Fix running containers restoring with a zero (successful) exit status when the daemon is unexpectedly terminated. [moby/moby#&#8203;45801](https://github.com/moby/moby/pull/45801)
-   Fix a potential panic while executing healthcheck probes. [moby/moby#&#8203;45798](https://github.com/moby/moby/pull/45798)
-   Fix a panic caused by a race condition in container exec start. [moby/moby#&#8203;45794](https://github.com/moby/moby/pull/45794)
-   Fix an exception caused by attaching a terminal to an exec with a non-existant command. [moby/moby#&#8203;45643](https://github.com/moby/moby/pull/45643)
-   Fix `host-gateway` with BuildKit by passing the IP as a label (also requires [docker/buildx#&#8203;1894](https://github.com/docker/buildx/pull/1894)). [moby/moby#&#8203;45790](https://github.com/moby/moby/pull/45790)
-   Fix an issue where `POST /containers/{id}/stop` would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. [moby/moby#&#8203;45774](https://github.com/moby/moby/pull/45774)
-   Fix an issue where `docker cp -a` from the root (`/`) directory would fail. [moby/moby#&#8203;45748](https://github.com/moby/moby/pull/45748)
-   Improve compatibility with non-runc container runtimes by more correctly setting resource constraint parameters in the OCI config. [moby/moby#&#8203;45746](https://github.com/moby/moby/pull/45746)
-   Fix an issue caused by overlapping subuid/subgid ranges in certain configurations (e.g. LDAP) in rootless mode. [moby/moby#&#8203;45747](https://github.com/moby/moby/pull/45747), [rootless-containers/rootlesskit#&#8203;369](https://github.com/rootless-containers/rootlesskit/pull/369)
-   Greatly reduce CPU and memory usage while populating the Debug section of `GET /info`. [moby/moby#&#8203;45856](https://github.com/moby/moby/pull/45856)
-   Fix an issue where debug information was not correctly printed during `docker info` when only the client is in debug mode. [docker/cli#&#8203;4393](https://github.com/docker/cli/pull/4393)
-   Fix issues related to hung connections when connecting to hosts over a SSH connection. [docker/cli#&#8203;4395](https://github.com/docker/cli/pull/4395)

##### Packaging updates

-   Upgrade Go to `go1.20.5`. [moby/moby#&#8203;45745](https://github.com/moby/moby/pull/45745), [docker/cli#&#8203;4351](https://github.com/docker/cli/pull/4351), [docker/docker-ce-packaging#&#8203;904](https://github.com/docker/docker-ce-packaging/pull/904)
-   Upgrade Compose to `v2.19.1`. [docker/docker-ce-packaging#&#8203;916](https://github.com/docker/docker-ce-packaging/pull/916)
-   Upgrade buildx to `v0.11.1`. [docker/docker-ce-packaging#&#8203;918](https://github.com/docker/docker-ce-packaging/pull/918)

### [`v24.0.2`](https://github.com/moby/moby/releases/tag/v24.0.2)

[Compare Source](https://github.com/docker/docker/compare/v24.0.1...v24.0.2)

#### 24.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.2)
-   [moby/moby, 24.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.2)

##### Bug fixes and enhancements

-   Fix a panic during build when referencing locally tagged images. [moby/buildkit#&#8203;3899](https://github.com/moby/buildkit/pull/3899), [moby/moby#&#8203;45582](https://github.com/moby/moby/pull/45582)
-   Fix builds potentially failing with `exit code: 4294967295` when performing many concurrent build stages. [moby/moby#&#8203;45620](https://github.com/moby/moby/pull/45620)
-   Fix DNS resolution on Windows ignoring `etc/hosts` (`%WINDIR%\System32\Drivers\etc\hosts`), including resolution of `localhost`. [moby/moby#&#8203;45562](https://github.com/moby/moby/pull/45562)
-   Apply a workaround for a containerd bug that causes concurrent `docker exec` commands to take significantly longer than expected. [moby/moby#&#8203;45625](https://github.com/moby/moby/pull/45625)
-   containerd image store: Fix an issue where the image `Created` field would contain an incorrect value. [moby/moby#&#8203;45623](https://github.com/moby/moby/pull/45623)
-   containerd image store: Adjust the output of image pull progress so that the output has the same format regardless of whether the containerd image store is enabled. [moby/moby#&#8203;45602](https://github.com/moby/moby/pull/45602)
-   containerd image store: Switching between the default and containerd image store now requires a daemon restart. [moby/moby#&#8203;45616](https://github.com/moby/moby/pull/45616)

### [`v24.0.1`](https://github.com/moby/moby/releases/tag/v24.0.1)

[Compare Source](https://github.com/docker/docker/compare/v24.0.0...v24.0.1)

#### 24.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.1)
-   [moby/moby, 24.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.1)

##### Removed

-   Remove CLI completions for storage drivers removed in the 24.0 major release. [docker/cli#&#8203;4302](https://github.com/docker/cli/pull/4302)

##### Bug fixes and enhancements

-   Fix an issue where DNS query NXDOMAIN replies from external servers were forwarded to the client as SERVFAIL. [moby/moby#&#8203;45573](https://github.com/moby/moby/pull/45573)
-   Fix an issue where `docker pull --platform` would report `No such image` regarding another tag pointing to the same image. [moby/moby#&#8203;45562](https://github.com/moby/moby/pull/45562)
-   Fix an issue where insecure registry configuration would be forgotten during config reload. [moby/moby#&#8203;45571](https://github.com/moby/moby/pull/45571)
-   containerd image store: Fix an issue where images which have no layers would not be listed in `docker images -a` [moby/moby#&#8203;45588](https://github.com/moby/moby/pull/45588)
-   API: Fix an issue where `GET /images/{id}/json` would return `null` instead of empty `RepoTags` and `RepoDigests`. [moby/moby#&#8203;45564](https://github.com/moby/moby/pull/45564)
-   API: Fix an issue where `POST /commit` did not accept an empty request body. [moby/moby#&#8203;45568](https://github.com/moby/moby/pull/45568)

##### Packaging updates

-   Upgrade Compose to `v2.18.1`. [docker/docker-ce-packaging#&#8203;896](hhttps://github.com/docker/docker-ce-packaging/pull/896)

### [`v24.0.0`](https://github.com/moby/moby/releases/tag/v24.0.0)

[Compare Source](https://github.com/docker/docker/compare/v23.0.10...v24.0.0)

#### 24.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 24.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.0)
-   [moby/moby, 24.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.0)

##### New

-   Introduce experimental support for containerd as the content store (replacing the existing storage drivers). [moby/moby#&#8203;43735](https://github.com/moby/moby/pull/43735), [other moby/moby pull requests](https://github.com/moby/moby/pulls?q=is%3Apr+is%3Amerged+milestone%3A24.0.0+-label%3Aprocess%2Fcherry-picked+label%3Acontainerd-integration+)
-   The `--host` CLI flag now supports a path component in a `ssh://` host address, allowing use of an alternate socket path without configuration on the remote host. [docker/cli#&#8203;4073](https://github.com/docker/cli/pull/4073)
-   The `docker info` CLI command now reports a version and platform field. [docker/cli#&#8203;4180](https://github.com/docker/cli/pull/4180)
-   Introduce the daemon flag `--default-network-opt` to configure options for newly created networks. [moby/moby#&#8203;43197](https://github.com/moby/moby/pull/43197)
-   Restrict access to `AF_VSOCK` in the `socket(2)` family of syscalls in the default seccomp profile. [moby/moby#&#8203;44562](https://github.com/moby/moby/pull/44562)
-   Introduce support for setting OCI runtime annotations on containers. [docker/cli#&#8203;45025](https://github.com/docker/cli/pull/4156), [moby/moby#&#8203;45025](https://github.com/moby/moby/pull/45025)
-   Alternative runtimes can now be configured in `daemon.json`, enabling runtime names to be aliased and options to be passed. [moby/moby#&#8203;45032](https://github.com/moby/moby/pull/45032)
-   The `docker-init` binary will now be discovered in FHS-compliant libexec directories, in addition to the `PATH`. [moby/moby#&#8203;45198](https://github.com/moby/moby/pull/45198)
-   API: Surface the daemon-level `--no-new-privileges` in `GET /info`. [moby/moby#&#8203;45320](https://github.com/moby/moby/pull/45320)

##### Removed

-   `docker info` no longer reports `IndexServiceAddress`. [docker/cli#&#8203;4204](https://github.com/docker/cli/pull/4204)
-   libnetwork: Remove fallback code for obsolete kernel versions. [moby/moby#&#8203;44684](https://github.com/moby/moby/pull/44684), [moby/moby#&#8203;44802](https://github.com/moby/moby/pull/44802)
-   libnetwork: Remove unused code related to classic Swarm. [moby/moby#&#8203;44965](https://github.com/moby/moby/pull/44965)
-   libnetwork: Remove usage of the `xt_u32` kernel module from encrypted Swarm overlay networks. [moby/moby#&#8203;45281](https://github.com/moby/moby/pull/45281)
-   Remove support for buildkit's deprecated `buildinfo` in favor of standard provenance attestations. [moby/moby#&#8203;45097](https://github.com/moby/moby/pull/45097)
-   Remove the deprecated AUFS and legacy `overlay` storage drivers. [moby/moby#&#8203;45342](https://github.com/moby/moby/pull/45342), [moby/moby#&#8203;45359](https://github.com/moby/moby/pull/45359)
-   Remove the deprecated `overlay2.override_kernel_check` storage driver option. [moby/moby#&#8203;45368](https://github.com/moby/moby/pull/45368)
-   Remove workarounds for obsolete versions of `apparmor_parser` from the AppArmor profiles. [moby/moby#&#8203;45500](https://github.com/moby/moby/pull/45500)
-   API:  `GET /images/json` no longer represents empty RepoTags and RepoDigests as`<none>:<none>`/`<none>@&#8203;<none>`. Empty arrays are be returned instead on API >= 1.43. [moby/moby#&#8203;45068](https://github.com/moby/moby/pull/45068)

##### Deprecated

-   Deprecate the `--oom-score-adjust` daemon option. [moby/moby#&#8203;45315](https://github.com/moby/moby/pull/45315)
-   API: Deprecate the `VirtualSize` field in `GET /images/json` and `GET /images/{id}/json`. [moby/moby#&#8203;45346](https://github.com/moby/moby/pull/45346)

##### Bug fixes and enhancements

-   The `docker stack` command no longer validates the `build` section of Compose files. [docker/cli#&#8203;4214](https://github.com/docker/cli/pull/4214)
-   Fix lingering healthcheck processes after timeout is reached. [moby/moby#&#8203;43739](https://github.com/moby/moby/pull/43739)
-   Reduce the overhead of container startup when using the `overlay2` storage driver. [moby/moby#&#8203;44285](https://github.com/moby/moby/pull/44285)
-   API: Handle multiple `before=` and `since=` filters in `GET /images`. [moby/moby#&#8203;44503](https://github.com/moby/moby/pull/44503)
-   Fix numerous bugs in the embedded DNS resolver implementation used by user-defined networks. [moby/moby#&#8203;44664](https://github.com/moby/moby/pull/44664)
-   Add `execDuration` field to the map of event attributes. [moby/moby#&#8203;45494](https://github.com/moby/moby/pull/45494)
-   Swarm-level networks can now be created with the Windows `internal`, `l2bridge`, and `nat` drivers. [moby/swarmkit#&#8203;3121](https://github.com/moby/swarmkit/pull/3121), [moby/moby#&#8203;45291](https://github.com/moby/moby/pull/45291)

##### Packaging updates

-   Update Go to `1.20.4`. [docker/cli#&#8203;4253](https://github.com/docker/cli/pull/4253), [moby/moby#&#8203;45456](https://github.com/moby/moby/pull/45456)
-   Update `containerd` to [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1). [moby/moby#&#8203;45537](https://github.com/moby/moby/pull/45537)
-   Update `buildkit` to [`v0.11.6`](https://github.com/moby/buildkit/releases/v0.11.6). [moby/moby#&#8203;45367](https://github.com/moby/moby/pull/45367)

### [`v23.0.10`](https://github.com/moby/moby/releases/tag/v23.0.10)

[Compare Source](https://github.com/docker/docker/compare/v23.0.9...v23.0.10)

#### 23.0.10

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.10 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.10)
-   [moby/moby, 23.0.10 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.10)

### [`v23.0.9`](https://github.com/moby/moby/releases/tag/v23.0.9)

[Compare Source](https://github.com/docker/docker/compare/v23.0.8...v23.0.9)

#### 23.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.9)
-   [moby/moby, 23.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.9)

### [`v23.0.8`](https://github.com/moby/moby/releases/tag/v23.0.8)

[Compare Source](https://github.com/docker/docker/compare/v23.0.7...v23.0.8)

#### 23.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.8)
-   [moby/moby, 23.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.8)

##### Bug Fixes and Enhancements

-   Make one-shot stats faster. https://github.com/moby/moby/pull/46617
-   Fix "Rootful-in-Rootless" Docker-in-Docker on systemd >= 250. https://github.com/moby/moby/pull/46627
-   Add `IP_NF_MANGLE` to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46675
-   Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46704
-   Update github.com/klauspost/compress to v1.17.2 to fix data corruption with zstd output in "best". https://github.com/moby/moby/pull/46710

##### Packaging Updates

-   Update Go to 1.20.10. https://github.com/moby/moby/pull/46625
-   Update golang.org/x/net to v0.17.0. https://github.com/moby/moby/pull/46691

##### Security

-   Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/48ebe353e49a9def5e6679f6e386b0efb1c95f0e).

### [`v23.0.7`](https://github.com/moby/moby/releases/tag/v23.0.7)

[Compare Source](https://github.com/docker/docker/compare/v23.0.6...v23.0.7)

#### 23.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.7)
-   [moby/moby, 23.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.7)

##### Bug Fixes and Enhancements

-   Fix reloading the `insecure-registries` daemon configuration. https://github.com/moby/moby/pull/45572
-   Allow empty body for `POST /commit` again. https://github.com/moby/moby/pull/45569
-   Fix an issue which prevented encrypted overlay networks from functioning when the Swarm data path port is not set to 4789. https://github.com/moby/moby/pull/45638
-   Fix an issue with graceful container shutdown. https://github.com/moby/moby/pull/45775
-   Fix host-gateway support in `docker build`. https://github.com/moby/moby/pull/45791
-   Fix missing Topology in Swarm cluster volume `NodeCSIInfo`. https://github.com/moby/moby/pull/45809
-   seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45834
-   Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45825
-   client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45971
-   Fix an issue which prevented process capabilities from being retained when starting a container as a non-root user with `--security-opt=no-new-privileges`. https://github.com/moby/moby/pull/46222
-   Fixed a bug which caused named volumes that set custom `device` or `type` volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367
-   windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46216
-   Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46408

##### Packaging Updates

-   Update Go to 1.20.7. https://github.com/moby/moby/pull/46141
-   Update containerd to v1.6.22. https://github.com/moby/moby/pull/46104
-   Update runc to v1.1.9. https://github.com/moby/moby/pull/46229
-   Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46046

### [`v23.0.6`](https://github.com/moby/moby/releases/tag/v23.0.6)

[Compare Source](https://github.com/docker/docker/compare/v23.0.5...v23.0.6)

#### 23.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.6)
-   [moby/moby, 23.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.6)

##### Bug fixes and enhancements

-   Fix vfs storage driver not working on NFS. [moby/moby#&#8203;45465](https://github.com/moby/moby/pull/45465)

##### Packaging Updates

-   Upgrade Go to `1.19.9`. [docker/docker-ce-packaging#&#8203;889](https://github.com/docker/docker-ce-packaging/pull/889),   [docker/cli#&#8203;4254](https://github.com/docker/cli/pull/4254), [moby/moby#&#8203;45455](https://github.com/moby/moby/pull/45455)
-   Upgrade `containerd` to [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21)
-   Upgrade `runc` to [v1.1.7](https://github.com/opencontainers/runc/releases/tag/v1.1.7)

### [`v23.0.5`](https://github.com/moby/moby/releases/tag/v23.0.5)

[Compare Source](https://github.com/docker/docker/compare/v23.0.4...v23.0.5)

#### 23.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.5 milestone](https://github.com/docker/cli/milestone/79?closed=1)
-   [moby/moby, 23.0.5 milestone](https://github.com/moby/moby/milestone/118?closed=1)

##### Bug fixes and enhancements

-   Add the `--all` / `-a` option when pruning volumes. [docker/cli#&#8203;4229](https://github.com/docker/cli/pull/4229)
-   Add `--format=json` for `docker info`. [docker/cli#&#8203;4320](https://github.com/docker/cli/pull/4230)
-   Fix log loss with the AWSLogs log driver. [moby/moby#&#8203;45350](https://github.com/moby/moby/pull/45350)
-   Fix a regression introduced in v23.0.4 where dockerd would refuse to start if the fixed-cidr config parameter is provided but not bip. [moby/moby#&#8203;45403](https://github.com/moby/moby/pull/45403)
-   Fix a panic in libnetwork during daemon start [moby/moby#&#8203;45376](https://github.com/moby/moby/pull/45376)
-   Fix "tag" event not being sent when an image is built with `buildx`. [moby/moby#&#8203;45410](https://github.com/moby/moby/pull/45410)

##### Packaging Updates

-   Upgrade Compose to `2.17.3`. [docker/docker-ce-packaging#&#8203;883](https://github.com/docker/docker-ce-packaging/pull/883)

### [`v23.0.4`](https://github.com/moby/moby/releases/tag/v23.0.4)

[Compare Source](https://github.com/docker/docker/compare/v23.0.3...v23.0.4)

#### 23.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.4 milestone](https://github.com/docker/cli/milestone/77?closed=1)
-   [moby/moby, 23.0.4 milestone](https://github.com/moby/moby/milestone/117?closed=1)

##### Bug fixes and enhancements

-   Fix a performance regression in Docker CLI 23.0.0 [docker/cli#&#8203;4141](https://github.com/docker/cli/pull/4141).
-   Fix progress indicator on `docker cp` not functioning as intended [docker/cli#&#8203;4157](https://github.com/docker/cli/pull/4157).
-   Fix shell completion for `docker compose --file` [docker/cli#&#8203;4177](https://github.com/docker/cli/pull/4177).
-   Fix an error caused by incorrect handling of "default-address-pools" in `daemon.json` [moby/moby#&#8203;45246](https://github.com/moby/moby/pull/45246).

##### Packaging Updates

-   Fix missing packages for CentOS 9 Stream.
-   Upgrade Go to `1.19.8`. [docker/docker-ce-packaging#&#8203;878](https://github.com/docker/docker-ce-packaging/pull/878),
    [docker/cli#&#8203;4164](https://github.com/docker/cli/pull/4164), [moby/moby#&#8203;45277](https://github.com/moby/moby/pull/45277),
    which contains fixes for [CVE-2023-24537](https://github.com/advisories/GHSA-fp86-2355-v99r),
    [CVE-2023-24538](https://github.com/advisories/GHSA-v4m2-x4rp-hv22),
    [CVE-2023-24534](https://github.com/advisories/GHSA-8v5j-pwr7-w5f8),
    and [CVE-2023-24536](https://github.com/advisories/GHSA-9f7g-gqwh-jpf5)

### [`v23.0.3`](https://github.com/moby/moby/releases/tag/v23.0.3)

[Compare Source](https://github.com/docker/docker/compare/v23.0.2...v23.0.3)

#### 23.0.3

> **Note**
>
> Due to an issue with CentOS 9 Stream's package repositories, packages for
> CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later,
> or as part of the next (23.0.4) patch release.

##### Bug fixes and enhancements

-   Fixed a number of issues that can cause Swarm encrypted overlay networks
    to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841),
    [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and
    [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842).
    -   A lack of kernel support for encrypted overlay networks now reports
        as an error.
    -   Encrypted overlay networks are eagerly set up, rather than waiting for
        multiple nodes to attach.
    -   Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
        through the use of the `xt_bpf` kernel module.
    -   Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw)
        to ensure that unintentional exposure has not occurred.

##### Packaging Updates

-   Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20).
-   Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5).

### [`v23.0.2`](https://github.com/moby/moby/releases/tag/v23.0.2)

[Compare Source](https://github.com/docker/docker/compare/v23.0.1...v23.0.2)

#### 23.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.2 milestone](https://github.com/docker/cli/milestone/75?closed=1)
-   [moby/moby, 23.0.2 milestone](https://github.com/moby/moby/milestone/114?closed=1)

##### Bug fixes and enhancements

-   Fully resolve missing checks for `apparmor_parser` when an AppArmor enabled kernel is detected. [containerd/containerd#&#8203;8087](https://github.com/containerd/containerd/pull/8087), [moby/moby#&#8203;45043](https://github.com/moby/moby/pull/45043)
-   Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes [CVE-2023-26054](https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc). [moby/moby#&#8203;45110](https://github.com/moby/moby/pull/45110)
-   Fix anonymous volumes created by a `VOLUME` line in a Dockerfile being excluded from volume prune. [moby/moby#&#8203;45159](https://github.com/moby/moby/pull/45159)
-   Fix a failure to properly propagate errors during removal of volumes on a Swarm node. [moby/moby#&#8203;45155](https://github.com/moby/moby/pull/45155)
-   Temporarily work around a bug in BuildKit `COPY --link` by disabling mergeop/diffop optimization. [moby/moby#&#8203;45112](https://github.com/moby/moby/pull/45112)
-   Properly clean up child tasks when a parent Swarm job is removed. [moby/swarmkit#&#8203;3112](https://github.com/moby/swarmkit/pull/3112), [moby/moby#&#8203;45107](https://github.com/moby/moby/pull/45107)
-   Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. [moby/swarmkit#&#8203;3082](https://github.com/moby/swarmkit/pull/3082), [moby/moby#&#8203;45107](https://github.com/moby/moby/pull/45107)
-   Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. [moby/swarmkit#&#8203;3116](https://github.com/moby/swarmkit/pull/3116), [moby/moby#&#8203;45107](https://github.com/moby/moby/pull/45107)
-   Fix a panic caused by log buffering in some configurations. [containerd/fifo#&#8203;47](https://github.com/containerd/fifo/pull/47), [moby/moby#&#8203;45051](https://github.com/moby/moby/pull/45051)
-   Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. [moby/moby#&#8203;45016](https://github.com/moby/moby/pull/45016)
-   Fix a DNS resolution issue affecting containers created with `--dns-opt` or `--dns-search` when `systemd-resolved` is used outside the container. [moby/moby#&#8203;45000](https://github.com/moby/moby/pull/45000)
-   Fix a panic when logging errors in handling DNS queries originating from inside a container. [moby/moby#&#8203;44980](https://github.com/moby/moby/pull/44980)
-   Improve the speed of `docker ps` by allowing users to opt out of size calculations with `--size=false`. [docker/cli#&#8203;4107](https://github.com/docker/cli/pull/4107)
-   Extend support for Bash completion to all plugins. [docker/cli#&#8203;4092](https://github.com/docker/cli/pull/4092)
-   Fix `docker stack deploy` failing on Windows when special environment variables set by `cmd.exe` are present. [docker/cli#&#8203;4083](https://github.com/docker/cli/pull/4083)
-   Add forward compatibility for future API versions by considering empty image tags to be the same as `<none>`. [docker/cli#&#8203;4065](https://github.com/docker/cli/pull/4065)
-   Atomically write context files to greatly reduce the probability of corruption, and improve the error message for a corrupt context. [docker/cli#&#8203;4063](https://github.com/docker/cli/pull/4063)

##### Packaging

-   Upgrade Go to `1.19.7`. [docker/docker-ce-packaging#&#8203;857](https://github.com/docker/docker-ce-packaging/pull/857), [docker/cli#&#8203;4086](https://github.com/docker/cli/pull/4086), [moby/moby#&#8203;45137](https://github.com/moby/moby/pull/45137)
-   Upgrade `containerd` to `v1.6.19`. [moby/moby#&#8203;45084](https://github.com/moby/moby/pull/45084), [moby/moby#&#8203;45099](https://github.com/moby/moby/pull/45099)
-   Upgrade Buildx to `v0.10.4`. [docker/docker-ce-packaging#&#8203;855](https://github.com/docker/docker-ce-packaging/pull/855)
-   Upgrade Compose to `v2.17.2`. [docker/docker-ce-packaging#&#8203;867](hhttps://github.com/docker/docker-ce-packaging/pull/867)

### [`v23.0.1`](https://github.com/moby/moby/releases/tag/v23.0.1)

[Compare Source](https://github.com/docker/docker/compare/v23.0.0...v23.0.1)

#### 23.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.1 milestone](https://github.com/docker/cli/milestone/73?closed=1)
-   [moby/moby, 23.0.1 milestone](https://github.com/moby/moby/milestone/113?closed=1)

##### Bug fixes and enhancements

-   Fix containers not starting if the kernel has AppArmor enabled, but `apparmor_parser` is not available. [moby/moby#&#8203;44942](https://github.com/moby/moby/pull/44942)
-   Fix BuildKit-enabled builds with inline caching causing the daemon to crash. [moby/moby#&#8203;44944](https://github.com/moby/moby/pull/44944)
-   Fix BuildKit improperly loading cached layers created by previous versions. [moby/moby#&#8203;44959](https://github.com/moby/moby/pull/44959)
-   Fix an issue where `ipvlan` networks created prior to upgrading would prevent the daemon from starting. [moby/moby#&#8203;44937](https://github.com/moby/moby/pull/44937)
-   Fix the `overlay2` storage driver failing early in `metacopy` testing when initialized on an unsupported backing filesystem. [moby/moby#&#8203;44922](https://github.com/moby/moby/pull/44922)
-   Fix `exec` exit events being misinterpreted as container exits under some runtimes, such as Kata Containers. [moby/moby#&#8203;44892](https://github.com/moby/moby/pull/44892)
-   Improve the error message returned by the CLI when recieving a truncated JSON response caused by the API hanging up mid-request. [docker/cli#&#8203;4004](https://github.com/docker/cli/pull/4004)
-   Fix an incorrect CLI exit code when attempting to execute a directory with a `runc` compiled using Go 1.20. [docker/cli#&#8203;4004](https://github.com/docker/cli/pull/4004)
-   Fix mishandling the size argument to `--device-write-bps` as a path. [docker/cli#&#8203;4004](https://github.com/docker/cli/pull/4004)

##### Packaging

-   Add `/etc/docker` to RPM and DEB packaging. [docker/docker-ce-packaging#&#8203;842](https://github.com/docker/docker-ce-packaging/pull/842)
    -   Not all use cases will benefit; if you depend on this, you should explicitly `mkdir -p /etc/docker`.
-   Upgrade Compose to `v2.16.0`. [docker/docker-ce-packaging#&#8203;844](https://github.com/docker/docker-ce-packaging/pull/844)

### [`v23.0.0`](https://github.com/moby/moby/releases/tag/v23.0.0)

[Compare Source](https://github.com/docker/docker/compare/v20.10.27...v23.0.0)

#### 23.0.0

For more information about:

-   Deprecated and removed features, see [Deprecated Engine Features](https://github.com/docker/cli/blob/v23.0.0/docs/deprecated.md).
-   Changes to the Engine API, see [Engine API version history](https://github.com/moby/moby/blob/v23.0.0/docs/api/version-history.md).

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 23.0.0 milestone](https://github.com/docker/cli/milestone/51?closed=1)
-   [moby/moby, 23.0.0 milestone](https://github.com/moby/moby/milestone/91?closed=1)

##### New

-   Set Buildx and BuildKit as the default builder on Linux. [moby/moby#&#8203;43992](https://github.com/moby/moby/pull/43992)
    -   Alias `docker build` to `docker buildx build`. [docker/cli#&#8203;3314](https://github.com/docker/cli/pull/3314)
    -   The legacy builder can still be used by explicitly setting `DOCKER_BUILDKIT=0`.
    -   There are differences in how BuildKit and the legacy builder handle multi-stage builds. For more information, see
        [Multi-stage builds](../../build/building/multi-stage.md#differences-between-legacy-builder-and-buildkit).
-   Add support for pulling `zstd` compressed layers. [moby/moby#&#8203;41759](https://github.com/moby/moby/pull/41759), [moby/moby#&#8203;42862](https://github.com/moby/moby/pull/42862)
-   Add support for alternate OCI runtimes on Linux, compatible with the containerd runtime v2 API. [moby/moby#&#8203;43887](https://github.com/moby/moby/pull/43887), [moby/moby#&#8203;43993](https://github.com/moby/moby/pull/43993)
-   Add support for the containerd `runhcs` shim on Windows (off by default). [moby/moby#&#8203;42089](https://github.com/moby/moby/pull/42089)
-   Add `dockerd --validate` to check the daemon JSON config and exit. [moby/moby#&#8203;42393](https://github.com/moby/moby/pull/42393)
-   Add the ability to configure the daemon's HTTP proxy via flags or JSON config. [moby/moby#&#8203;42835](https://github.com/moby/moby/pull/42835)
-   Add support for RFC 3021 point-to-point networks (IPv4 /31s) and single hosts (IPv4 /32s). For networks with two or fewer addresses, IPAM won't reserve a network and broadcast address. [moby/moby#&#8203;42626](https://github.com/moby/moby/pull/42626)
-   Add support for setting `ipvlan_flag` and using the `l3s` `ipvlan_mode` in the `ipvlan` network driver. [moby/moby#&#8203;42542](https://github.com/moby/moby/pull/42542)
-   Add support for displaying the value of the `metacopy` option for the `overlay2` storage driver. [moby/moby#&#8203;43557](https://github.com/moby/moby/pull/43557)
-   Add support for describing Windows devices using the syntax `IDType://ID`. [moby/moby#&#8203;43368](https://github.com/moby/moby/pull/43368)
-   Add `RootlessKit`, `slirp4netns`, and `VPNKit` version reporting. [moby/moby#&#8203;42330](https://github.com/moby/moby/pull/42330)
-   Add experimental support for SwarmKit cluster volumes (CSI). [moby/moby#&#8203;41982](https://github.com/moby/moby/pull/41982)
    -   CLI: Add cluster volume (CSI) options to `docker volume`. [docker/cli#&#8203;3606](https://github.com/docker/cli/pull/3606)
    -   CLI: Add cluster volume (CSI) support to `docker stack`. [docker/cli#&#8203;3662](https://github.com/docker/cli/pull/3662)
-   Add support for SwarmKit jobs in `docker stack deploy`. [docker/cli#&#8203;2907](https://github.com/docker/cli/pull/2907)
-   Add the `docker stack config` command to output the merged and interpolated config files as utilized by `stack deploy`. [docker/cli#&#8203;3544](https://github.com/docker/cli/pull/3544)
-   Add a new `docker context show` command that prints the name of the current context. [docker/cli#&#8203;3567](https://github.com/docker/cli/pull/3567)
-   Add the `--format=json` shorthand variant of `--format="{{ json . }}"` to all commands supporting the `--format` flag. [docker/cli#&#8203;2936](https://github.com/docker/cli/pull/2936)
-   Add a `--quiet` option to `docker create` and `docker run` commands to suppress output when pulling an image. [docker/cli#&#8203;3377](https://github.com/docker/cli/pull/3377)
-   Add a `--force` option to `docker network rm` subcommand. Causes CLI to return a 0 exit code even if the network doesn't exist. Has no effect on the server-side procedure for removing a network. [docker/cli#&#8203;3547](https://github.com/docker/cli/pull/3547)
-   Add a `--signal` option to `docker stop` and `docker restart`. [docker/cli#&#8203;3614](https://github.com/docker/cli/pull/3614)
-   Add a `-v/--version` flag to `docker-proxy`. [moby/moby#&#8203;44703](https://github.com/moby/moby/pull/44703)
-   Plugins are now discovered in well-known user-level paths when the daemon is running in rootless mode. [moby/moby#&#8203;44778](https://github.com/moby/moby/pull/44778)
-   The daemon now handles common alternate JSON encodings in the JSON configuration file gracefully, and reports useful errors. [moby/moby#&#8203;44777](https://github.com/moby/moby/pull/44777), [moby/moby#&#8203;44832](https://github.com/moby/moby/pull/44832)
    -   UTF-8 with a byte order mark is accepted.
    -   UTF-16 with a byte order mark is accepted.
    -   Invalid UTF-8 is reported early and with a comprehensible error message.
-   Allow use of `STOPSIGNAL` via `docker commit`. [moby/moby#&#8203;43369](https://github.com/moby/moby/pull/43369)
-   Add a new option to the `awslogs` log driver to allow skipping log stream creation in CloudWatch. [moby/moby#&#8203;42132](https://github.com/moby/moby/pull/42132)
-   Add a new option to the `awslogs` log driver to specify the log format that's sent to CloudWatch. [moby/moby#&#8203;42838](https://github.com/moby/moby/pull/42838)
-   Add a new option to the `fluentd` log driver to set the reconnection interval. [moby/moby#&#8203;43100](https://github.com/moby/moby/pull/43100)
-   Add new options-setters to the Go API client: `WithTLSClientConfigFromEnv()`, `WithHostFromEnv()`, and `WithVersionFromEnv()`. [moby/moby#&#8203;42224](https://github.com/moby/moby/pull/42224)
-   Add generation of shell command completion through a `docker completion` subcommand. [docker/cli#&#8203;3429](https://github.com/docker/cli/pull/3429)
-   API: Add a `Swarm` header to `GET /_ping` and `HEAD /_ping`, allowing single-request detection of Swarm support. [moby/moby#&#8203;42064](https://github.com/moby/moby/pull/42064)
-   API: Add a `signal` parameter to `POST /containers/{id}/stop` and `POST /containers/{id}/restart` to set the signal used. [moby/moby#&#8203;43206](https://github.com/moby/moby/pull/43206)
-   API: Add a `CreateMountPoint` parameter to `POST /containers/create`. [moby/moby#&#8203;43484](https://github.com/moby/moby/pull/43484)
-   API: Add a `shared-size` parameter to `GET /images/json` to enable shared-size computation of images. [moby/moby#&#8203;42531](https://github.com/moby/moby/pull/42531)
-   API: Add a `type` parameter to `GET /system/df`, to control what object types to are considered when computing disk usage. [moby/moby#&#8203;42559](https://github.com/moby/moby/pull/42559)
-   systemd: Start `docker.service` after `time-set.target`. [moby/moby#&#8203;43107](https://github.com/moby/moby/pull/43107)

##### Removed

-   Remove support for reading configuration from `~/.dockercfg`. [docker/cli#&#8203;2504](https://github.com/docker/cli/pull/2504)
    -   This location has been deprecated since 1.7.0.
    -   [Deprecation notice](../deprecated.md#support-for-legacy-dockercfg-configuration-files)
-   Remove the `-g` and `--graph` daemon options in favor of `--data-root`. [docker/cli#&#8203;3739](https://github.com/docker/cli/pull/3739)
    -   These options have been hidden and deprecated since 17.05.
    -   [Deprecation notice](../deprecated.md#-g-and---graph-flags-on-dockerd)
-   Remove client-side sorting of results, in favor of the order in which the search API returns. [docker/cli#&#8203;3470](https://github.com/docker/cli/pull/3470)
-   Remove warnings related to deprecated storage drivers from the CLI. Warnings are now handled by the daemon instead. [docker/cli#&#8203;3542](https://github.com/docker/cli/pull/3542)
-   Remove `Experimental` client field from `docker version`. [docker/cli#&#8203;3543](https://github.com/docker/cli/pull/3543)
    -   [Deprecation notice](../deprecated.md#configuration-options-for-experimental-cli-features)
-   Require explicit opt-in to use deprecated storage drivers, and don't automatically select them when upgrading. [moby/moby#&#8203;43378](https://github.com/moby/moby/pull/43378)
-   Remove deprecated support for `overlay` and `overlay2` storage drivers on backing filesystems without `d_type` support. [moby/moby#&#8203;43472](https://github.com/moby/moby/pull/43472)
    -   [Deprecation notice](../deprecated.md#backing-filesystem-without-d_type-support-for-overlayoverlay2)
-   Remove the deprecated `overrideKernelCheck` option from the `overlay2` storage driver. [moby/moby#&#8203;44279](https://github.com/moby/moby/pull/44279)
    [Deprecation notice](../deprecated.md#support-for-the-overlay2override_kernel_check-storage-option)
-   Remove support for the deprecated `io.containerd.runtime.v1.linux` OCI runtime. [moby/moby#&#8203;43695](https://github.com/moby/moby/pull/43695)
-   Remove LCOW (Linux Containers on Windows). [moby/moby#&#8203;42451](https://github.com/moby/moby/pull/42451), [moby/moby#&#8203;42499](https://github.com/moby/moby/pull/42499), [moby/moby#&#8203;42506](https://github.com/moby/moby/pull/42506), [moby/moby#&#8203;42511](https://github.com/moby/moby/pull/42511), [moby/moby#&#8203;42520](https://github.com/moby/moby/pull/42520), [moby/moby#&#8203;42683](https://github.com/moby/moby/pull/42683), [moby/moby#&#8203;42684](https://github.com/moby/moby/pull/42684), [moby/moby#&#8203;42685](https://github.com/moby/moby/pull/42685), [moby/moby#&#8203;43187](https://github.com/moby/moby/pull/43187)
    -   LCOW was introduced as a technical preview in 17.09 and deprecated in 20.10.
    -   [Deprecation notice](../deprecated.md#linux-containers-on-windows-lcow-experimental)
-   Remove daemon options related to legacy overlay networks used with standalone Swarm.
    -   Remove `--cluster-xx` options from `dockerd`. [moby/moby#&#8203;40383](https://github.com/moby/moby/issues/40383)
    -   Remove `host-discovery` and overlay networks with external k/v stores. [moby/moby#&#8203;42247](https://github.com/moby/moby/pull/42247)
    -   [Deprecation notice](../deprecated.md#classic-swarm-and-overlay-networks-using-cluster-store)
-   Remove a deprecated `arm` platform fallback. `--platform linux/arm/vY` will now return a error when `arm/vY` isn't available instead of pulling the wrong image. [moby/moby#&#8203;44414](https://github.com/moby/moby/pull/44414)
-   Remove the deprecated `SetCustomHTTPHeaders()`, `CustomHTTPHeaders()` options-setters from the Go client API. [moby/moby#&#8203;42694](https://github.com/moby/moby/pull/42694)
-   Remove the deprecated `WithDialer()` option-setter from the Go client API. [moby/moby#&#8203;44022](https://github.com/moby/moby/pull/44022)
    -   Use `WithDialContext()` instead.
-   Remove the daemon implementation of `opts.QuotedString`. The implementation has moved to the CLI. [moby/moby#&#8203;43250](https://github.com/moby/moby/pull/43250)
-   Remove separate daemon ID from trust-key in the daemon, and disable generating the trust-key. [moby/moby#&#8203;43555](https://github.com/moby/moby/pull/43555)
-   API: Remove the deprecated `KernelMemory` option from `POST /containers/create` on API version >= 1.42. [moby/moby#&#8203;43214](https://github.com/moby/moby/pull/43214)
    -   [Deprecation notice](../deprecated.md#kernel-memory-limit)

##### Deprecated

-   Require Windows Server RS5 / LTSC 2019 (build 17763) as the minimum to run the daemon. [moby/moby#&#8203;43254](https://github.com/moby/moby/pull/43254)
-   Deprecate `BuilderSize` in API versions >= 1.42 [moby/moby#&#8203;42608](https://github.com/moby/moby/pull/42608)
-   Deprecate `BuildCache.Parent` in favor of the newly introduced `BuildCache.Parents` in API version >= 1.42. [moby/moby#&#8203;43908](https://github.com/moby/moby/pull/43908)
-   Deprecate `pkg/urlutil`, moving the implementation to `builder/remotecontext/urlutil`. [moby/moby#&#8203;43477](https://github.com/moby/moby/pull/43477)

##### Upgrades

-   Upgrade Go to `1.19.5`. [docker/cli#&#8203;3958](https://github.com/docker/cli/pull/3958), [moby/moby#&#8203;44794](https://github.com/moby/moby/pull/44794)
-   Upgrade `rootlesskit` to `v0.14.4`. [moby/moby#&#8203;42708](https://github.com/moby/moby/pull/42708)
-   Upgrade `buildkit` to `v0.10.6`. [moby/moby#&#8203;43239](https://github.com/moby/moby/pull/43239)
-   Upgrade `buildx` to `v0.10.2`. [docker/docker-ce-packaging#&#8203;840](https://github.com/docker/docker-ce-packaging/pull/840)
-   Upgrade `swarmkit` to `v2.0.0-20230119195359-904c221ac281`. [moby/moby#&#8203;44858](https://github.com/moby/moby/pull/44858)
-   Upgrade `containerd` to `v1.6.16`. [moby/moby#&#8203;44766](https://github.com/moby/moby/pull/44766), [moby/moby#&#8203;44769](https://github.com/moby/moby/pull/44769), [moby/moby#&#8203;44881](https://github.com/moby/moby/pull/44881)
-   Upgrade `runc` to `v1.1.4`. [moby/moby#&#8203;44039](https://github.com/moby/moby/pull/44039)
-   Upgrade `hcsshim` `v0.9.6`. [moby/moby#&#8203;44658](https://github.com/moby/moby/pull/44658)
-   The `btrfs` storage driver now depends on Linux kernel headers (>= 4.12) instead of headers from btrfs-progs. [moby/moby#&#8203;44776](https://github.com/moby/moby/pull/44776)

##### Security

-   Change permissions on container `hostconfig.json` files to `0600` (was `0644`). [moby/moby#&#8203;41620](https://github.com/moby/moby/pull/41620)
-   Fix `--seccomp-profile` not accepting `unconfined` and renamed the default seccomp profile to `builtin`. [moby/moby#&#8203;42481](https://github.com/moby/moby/pull/42481)
-   Always build with seccomp support, and remove the `seccomp` build tag. [moby/moby#&#8203;42501](https://github.com/moby/moby/pull/42501)
-   Add seccomp support on `riscv64`. [moby/moby#&#8203;43553](https://github.com/moby/moby/pull/43553)
-   Add support for setting flags passed to `seccomp(2)` in seccomp profiles. [moby/moby#&#8203;42648](https://github.com/moby/moby/pull/42648)
-   Refactor seccomp types to reuse runtime-spec, and add support for `ErrnoRet`. [moby/moby#&#8203;42005](https://github.com/moby/moby/pull/42005)
-   Add support for `DefaultErrnoRet` in `seccomp` profiles. [moby/moby#&#8203;42604](https://github.com/moby/moby/pull/42604)
-   Add an explicit `DefaultErrnoRet` field to the default seccomp profile, with no behavior change. [moby/moby#&#8203;42649](https://github.com/moby/moby/pull/42649)
-   Block `socket` with `AF_VSOCK` in the default seccomp profile. [moby/moby#&#8203;44563](https://github.com/moby/moby/pull/44563)
-   Re-enable `process_vm_readv` and `process_vm_writev` in the default seccomp profile. [moby/moby#&#8203;42083](https://github.com/moby/moby/pull/42083)
-   Add syscalls related to PKU to the default seccomp profile. [moby/moby#&#8203;43812](https://github.com/moby/moby/pull/43812)
-   Allow `clock_settime64` with `CAP_SYS_TIME`. [moby/moby#&#8203;43775](https://github.com/moby/moby/pull/43775)
-   Allow `bpf` with `CAP_BPF` and `perf_event_open` with `CAP_PERFMON`. [moby/moby#&#8203;43988](https://github.com/moby/moby/pull/43988)
-   Explicitly set the `clone3` syscall to return `ENOSYS` in the default seccomp profile, in order to ensure `glibc` will correctly fallback to using `clone`. [moby/moby#&#8203;42681](https://github.com/moby/moby/pull/42681)

##### Bug fixes and enhancements

-   Promote `overlay2` to be the default storage driver (`btrfs` and `zfs` are now opt-in). [moby/moby#&#8203;42661](https://github.com/moby/moby/pull/42661)
-   Add a loading spinner to the `docker cp` command. [docker/cli#&#8203;2708](https://github.com/docker/cli/pull/2708)
-   Deprecate the `ElectAuthServer` function, and made it return the default registry without calling the `GET /info` API endpoint. [docker/cli#&#8203;2819](https://github.com/docker/cli/pull/2819)
-   Progress bars are no longer reversed when rolling back Swarm services [docker/cli#&#8203;2940](https://github.com/docker/cli/pull/2940)
-   Use `net.JoinHostPort()` to fix formatting with IPv6 addresses [docker/cli#&#8203;2972](https://github.com/docker/cli/pull/2972)
-   CLI error messages are now printed to `stderr`. [docker/cli#&#8203;3044](https://github.com/docker/cli/pull/3044)
-   Improve performance of `docker info` if a custom `--format` is used that only uses local information. With this change, the CLI only uses the daemon API if it detects that information from the daemon is needed. [docker/cli#&#8203;3179](https://github.com/docker/cli/pull/3179)
-   Remove the default value from the `--stop-signal` flag, as it may not reflect the actual default used by the daemon. [docker/cli#&#8203;3245](https://github.com/docker/cli/pull/3245)
-   Add Compose schema `3.10` to `docker stack`; allow omitting the `version` field (resulting in `latest`). [docker/cli#&#8203;3257](https://github.com/docker/cli/pull/3257)
-   Compose version `3` is now equivalent to `3.x` (latest) in `docker stack`. [docker/cli#&#8203;3445](https://github.com/docker/cli/pull/3445)
-   Fix `<Ctrl-c>` hanging on Windows to exit after running a container in non-interactive mode. [docker/cli#&#8203;3302](https://github.com/docker/cli/pull/3302)
-   Add relative source paths to the `run` command in the `-v`/`--volume` and `-m`/`--mount` flags. [docker/cli#&#8203;3469](https://github.com/docker/cli/pull/3469)
-   `docker exec -t` now sets the console size for the executed process immediately when it's created. [docker/cli#&#8203;3627](https://github.com/docker/cli/pull/3627)
-   Update the pretty-print format of `docker info` to provide more details on installed plugins. [docker/cli#&#8203;3645](https://github.com/docker/cli/pull/3645)
-   Print warning messages for the `docker context list` and `docker context use` commands when the context is overridden by the environment. [docker/cli#&#8203;3668](https://github.com/docker/cli/pull/3668)
-   Add a custom `aliases` annotation that can be used to print all available aliases for a command. [docker/cli#&#8203;3694](https://github.com/docker/cli/pull/3694)
-   The CLI no longer creates or updates the CLI configuration file when running `docker context use` and selecting the current context. [docker/cli#&#8203;3721](https://github.com/docker/cli/pull/3721)
-   Non-existing contexts are now ignored when running `docker context rm --force`. [docker/cli#&#8203;3791](https://github.com/docker/cli/pull/3791)
-   Add the ability to override integers to `0` in Compose files [docker/cli#&#8203;3812](https://github.com/docker/cli/pull/3812)
-   SIGINT (`<Ctrl-c>`) now passes through to running containers instead of causing the CLI to exit. [docker/cli#&#8203;3849](https://github.com/docker/cli/pull/3849)
-   Improve `docker port CONTAINER` UX by sorting ports before printing. [docker/cli#&#8203;3892](https://github.com/docker/cli/pull/3892)
-   API: `GET /containers/{id}/logs` and `POST /containers/{id}/attach` now report which raw-stream format is in use using the `Content-type` response header on API version >= 1.42. [moby/moby#&#8203;39812](https://github.com/moby/moby/pull/39812)
-   Set default sandbox size for Windows layers to 127GB, and ensure that the `--storage-opts` flag applies to all storage on Windows. [moby/moby#&#8203;41636](https://github.com/moby/moby/pull/41636)
-   Remove the plugin section from the containerd configuration file `(/var/run/docker/containerd/containerd.toml)`. [moby/moby#&#8203;41675](https://github.com/moby/moby/pull/41675)
-   Reject `null` manifests during tar import. [moby/moby#&#8203;41842](https://github.com/moby/moby/pull/41842)
-   Add shim config for custom runtimes for plugins. [moby/moby#&#8203;41854](https://github.com/moby/moby/pull/41854)
-   Container health checks now resume when the daemon is restarted. [moby/moby#&#8203;41935](https://github.com/moby/moby/pull/41935)
-   Quota is no longer disabled on cleanup of the `btrfs` driver. [moby/moby#&#8203;42273](https://github.com/moby/moby/pull/42273)
-   Host devices that are accessible can now be mounted in `--privileged` rootless containers. [moby/moby#&#8203;42638](https://github.com/moby/moby/pull/42638)
-   Fix incorrect handling of `**/foo` recursive wildcard directory patterns in `.dockerignore`. [moby/moby#&#8203;42676](https://github.com/moby/moby/pull/42676)
-   Extend `docker import --platform` to allow marking an imported image as a foreign architecture. [moby/moby#&#8203;43103](https://github.com/moby/moby/pull/43103)
-   Validation of CPU real-time options is now performed when the daemon starts instead of performing validations for each individual container, allowing startup to fail early. [moby/moby#&#8203;43131](https://github.com/moby/moby/pull/43131)
-   Freeze the `namesgenerator` package against new additions. Users will have to be satisfied with the existing 25359 adjective-name combinations. [moby/moby#&#8203;43210](https://github.com/moby/moby/pull/43210)
-   API: `containers/{id}/attach/ws` only to streams according by `stdin`, `stdout` and `stderr` parameters on API version >= 1.42. [moby/moby#&#8203;43322](https://github.com/moby/moby/pull/43322)
-   Fix UDP traffic in containers not working after the container is restarted under sustained traffic. [moby/moby#&#8203;43409](https://github.com/moby/moby/pull/43409)
-   Add support for pulling images with custom amd64 micro-architecture feature levels as supported by the latest versions of Go, GCC, LLVM, and other compiler tools. [moby/moby#&#8203;43434](https://github.com/moby/moby/pull/43434)
-   Improve validation of invalid JSON requests in the API. [moby/moby#&#8203;43463](https://github.com/moby/moby/pull/43463)
-   Mitigate the impact of slow `exec` starts on health checks. Check timeout now only applies to the duration that the health check command is running. The time it takes to start the command no longer counts against the timeout. [moby/moby#&#8203;43480](https://github.com/moby/moby/pull/43480)
-   Console `tty` size is set immediately on creation. [moby/moby#&#8203;43593](https://github.com/moby/moby/pull/43593), [moby/moby#&#8203;43622](https://github.com/moby/moby/pull/43622)
-   Fix `overlay2` mounts not being cleaned up after failed container starts, or daemon shutdown. [moby/moby#&#8203;43659](https://github.com/moby/moby/pull/43659)
-   Match manifest list resolution with `containerd`. [moby/moby#&#8203;43675](https://github.com/moby/moby/pull/43675)
-   Skip use of `firewalld` for networking when the daemon is running in rootless mode. [moby/moby#&#8203;43813](https://github.com/moby/moby/pull/43813)
-   Custom NAT networks are now re-created after daemon restart if missing on Windows. [moby/moby#&#8203;43858](https://github.com/moby/moby/pull/43858)
-   Fix terminating the container health-check process when it times out. [moby/moby#&#8203;43994](https://github.com/moby/moby/pull/43994)
-   Fix `live-restore` with restart policies and volume refs. [moby/moby#&#8203;44237](https://github.com/moby/moby/pull/44237)
-   API: Only anonymous volumes now pruned by default on API version >= v1.42. Pass the filter `all=true` to prune named volumes in addition to anonymous. [moby/moby#&#8203;44259](https://github.com/moby/moby/pull/44259)
-   API: Support concurrent calls on the `GET /system/df` endpoint. [moby/moby#&#8203;42715](https://github.com/moby/moby/pull/42715)
-   Improve the reliability of the daemon dumping the stack and exits with code 2 when sent a SIGQUIT. [moby/moby#&#8203;44831](https://github.com/moby/moby/pull/44831)
-   Fix a rare deadlock in the daemon caused by buffering of container logs. [moby/moby#&#8203;44856](https://github.com/moby/moby/pull/44856)
-   Improve error handling in misc filesystem operations so that the daemon can start on a overlayfs backing filesystem. [moby/moby#&#8203;44834](https://github.com/moby/moby/pull/44834)
-   Fix an issue where `--ipc=host` wasn't handled correctly when the daemon is running in rootless mode. [moby/moby#&#8203;44863](https://github.com/moby/moby/pull/44863)
-   Fix a long-standing set of issues where stale conntrack entries caused incorrect routing of UDP traffic for containers. [moby/moby#&#8203;44752](https://github.com/moby/moby/pull/44752)
-   Fix half-registered containers being listed in the API, as well as a nil pointer de-reference and panic caused by using a partially registered container in API calls. [moby/moby#&#8203;44633](https://github.com/moby/moby/pull/44633)
-   Fix a failure to create the `DOCKER-USER` ip6tables chain. [moby/moby#&#8203;44845](https://github.com/moby/moby/pull/44845)
-   Fix a failure to clean up iptables rules when the `ip6tables` command isn't available. [moby/moby#&#8203;44727](https://github.com/moby/moby/pull/44727)
-   Fix an issue where some iptables NAT rules weren't cleaned up after enabling the userland proxy. [moby/moby#&#8203;44811](https://github.com/moby/moby/pull/44811)
-   Fix a potentially leaked process in rare situations where cleaning up a failed attempt to start a container was mishandled. [moby/moby#&#8203;44400](https://github.com/moby/moby/pull/44400)
-   Fix the `CreatedAt` time of a volume reflecting initialization and not creation. [moby/moby#&#8203;44725](https://github.com/moby/moby/pull/44725)
-   Fix an issue where the CLI incorrectly reported an incompatible server instead of an unreachable server in some commands. [docker/cli#&#8203;3901](https://github.com/docker/cli/pull/3901), [docker/cli#&#8203;3904](https://github.com/docker/cli/pull/3904)
-   Fix broken completion of volumes in Zsh. [docker/cli#&#8203;2998](https://github.com/docker/cli/pull/2998)
-   Improve output of `docker context` when an invalid context is present. [docker/cli#&#8203;3847](https://github.com/docker/cli/pull/3847)
-   Remove ANSI decoration of CLI help annotations when the output isn't a TTY, and added a newline for readability. [docker/cli#&#8203;3973](https://github.com/docker/cli/pull/3973)
-   Add `docker container remove` as an alias for `docker container rm`. [docker/cli#&#8203;3986](https://github.com/docker/cli/pull/3986)

### [`v20.10.27`](https://github.com/moby/moby/releases/tag/v20.10.27)

[Compare Source](https://github.com/docker/docker/compare/v20.10.26...v20.10.27)

#### v20.10.27

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 20.10.27 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.27)
-   [moby/moby, 20.10.27 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.27)

##### Bug Fixes and Enhancements

-   Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46424
-   Add `IP_NF_MANGLE` to check-config.sh to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46674
-   Fix a deadlock in libnetwork which could prevent containers from starting. https://github.com/moby/moby/pull/46693
-   Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46705
-   Support building with Go 1.20. https://github.com/moby/moby/pull/46694 https://github.com/moby/moby/pull/46695 https://github.com/moby/moby/pull/46696

##### Packaging Updates

-   Update to go1.20.10, golang/org/x/net v0.17.0. https://github.com/moby/moby/pull/46692

##### Security

-   Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/81ebe71275768629689a23bc3bca34b3b374a6a6).

### [`v20.10.26`](https://github.com/moby/moby/releases/tag/v20.10.26)

[Compare Source](https://github.com/docker/docker/compare/v20.10.25...v20.10.26)

#### 20.10.26

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

-   [docker/cli, 20.10.26 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.26)
-   [moby/moby, 20.10.26 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.26)

##### Bug Fixes and Enhancements

-   Support filesystems which do not support extended file attributes with the VFS graph driver. https://github.com/moby/moby/pull/45466
-   Fix AppArmor profile docker-default `/proc/sys` rule. https://github.com/moby/moby/pull/45716
-   seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45835
-   Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45840
-   client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45972
-   windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46217

##### Packaging Updates

-   Update Go to 1.19.12. https://github.com/moby/moby/pull/46142
-   Update containerd to v1.6.22. https://github.com/moby/moby/pull/46105
-   Update runc to v1.1.8. https://github.com/moby/moby/pull/46031
-   Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46047

### [`v20.10.25`](https://github.com/moby/moby/releases/tag/v20.10.25)

[Compare Source](https://github.com/docker/docker/compare/v20.10.24...v20.10.25)

#### Bug fixes and enhancements

-   Fix log loss with the AWSLogs log driver https://github.com/moby/moby/pull/45349
-   Upgrade github.com/docker/libnetwork https://github.com/moby/moby/pull/45398
    -   Fix a panic in libnetwork during daemon start https://github.com/moby/libnetwork/pull/2677
    -   Fix a deadlock which can occur when attaching and detaching containers from a network https://github.com/moby/libnetwork/pull/2674

#### Packaging Updates

-   Update Go runtime to [1.19.9](https://go.dev/doc/devel/release#go1.19.minor)
-   Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20)
-   Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5)

### [`v20.10.24`](https://github.com/moby/moby/releases/tag/v20.10.24)

[Compare Source](https://github.com/docker/docker/compare/v20.10.23...v20.10.24)

#### 20.10.24

##### Bug fixes and enhancements

-   Fixed a number of issues that can cause Swarm encrypted overlay networks
    to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841),
    [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and
    [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842).
    -   A lack of kernel support for encrypted overlay networks now reports
        as an error.
    -   Encrypted overlay networks are eagerly set up, rather than waiting for
        multiple nodes to attach.
    -   Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
        through the use of the `xt_bpf` kernel module.
    -   Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw)
        to ensure that unintentional exposure has not occurred.
-   Upgrade github.com/containerd/fifo to v1.1.0 to fix a potential panic [moby/moby#&#8203;45216](https://github.com/moby/moby/pull/45242).
-   Fix missing Bash completion for installed cli-plugins [docker/cli#&#8203;4091](https://github.com/docker/cli/pull/4091).

##### Packaging Updates

-   Update Go runtime to [1.19.7](https://go.dev/doc/devel/release#go1.19.minor).
-   Update Docker Buildx to [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4).
-   Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20).
-   Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5).

### [`v20.10.23`](https://github.com/moby/moby/releases/tag/v20.10.23)

[Compare Source](https://github.com/docker/docker/compare/v20.10.22...v20.10.23)

##### Bug fixes and enhancements

-   Fix an issue where `docker build` would fail when using `--add-host=host.docker.internal:host-gateway`
    with BuildKit enabled [moby/moby#&#8203;44650](https://github.com/moby/moby/pull/44650).
-   Revert seccomp: block socket calls to `AF_VSOCK` in default profile [moby/moby#&#8203;44712](https://github.com/moby/moby/pull/44712).
    This change, while favorable from a security standpoint, caused a change
    in behavior for some use-cases. As such, we are reverting it to ensure
    stability and compatibility for the affected users.

    However, users of `AF_VSOCK` in containers should recognize that this
    (special) address family is not currently namespaced in any version of
    the Linux kernel, and may result in unexpected behavior, like containers
    communicating directly with host hypervisors.

    Future releases, will filter `AF_VSOCK`. Users who need to allow containers
    to communicate over the unnamespaced `AF_VSOCK` will need to turn off seccomp
    confinement or set a custom seccomp profile.

##### Packaging Updates

-   Update Docker Compose to [v2.15.1](https://github.com/docker/compose/releases/tag/v2.15.1).
-   Update Docker Buildx to [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0).
-   Update containerd (`containerd.io` package) to [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15).
-   Update the package versioning format for `docker-compose-cli` to allow distro version updates [docker/docker-ce-packaging#&#8203;822](https://github.com/docker/docker-ce-packaging/pull/822).
-   Update Go runtime to [1.18.10](https://go.dev/doc/devel/release#go1.18.minor).

</details>

<details>
<summary>go-git/go-git</summary>

### [`v5.12.0`](https://github.com/go-git/go-git/releases/tag/v5.12.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0)

#### What's Changed

-   git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by [@&#8203;moranCohen26](https://github.com/moranCohen26) in https://github.com/go-git/go-git/pull/994
-   git: Signer: fix usage of crypto.Signer interface by [@&#8203;wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/1029
-   git: Remote, fetch, adds the prune option. by [@&#8203;juliens](https://github.com/juliens) in https://github.com/go-git/go-git/pull/366
-   git: Add crypto.Signer option to CommitOptions. by [@&#8203;wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/996
-   git: Worktree checkout tag hash id ([#&#8203;959](https://github.com/go-git/go-git/issues/959)) by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/966
-   git: Worktree, Don't panic on empty or root path when checking if it is valid by [@&#8203;tim775](https://github.com/tim775) in https://github.com/go-git/go-git/pull/1042
-   git: Add commit validation for Reset by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1048
-   git: worktree_commit, Fix amend commit to apply changes. Fixes [#&#8203;1024](https://github.com/go-git/go-git/issues/1024) by [@&#8203;onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1045
-   git: Implement Merge function with initial `FastForwardMerge` support by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1044
-   plumbing: object, Make first commit visible on logs filtered with filename. Fixes [#&#8203;191](https://github.com/go-git/go-git/issues/191) by [@&#8203;onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1036
-   plumbing: no panic in printStats function. Fixes [#&#8203;177](https://github.com/go-git/go-git/issues/177) by [@&#8203;nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/971
-   plumbing: object, Optimize logging with file. by [@&#8203;onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1046
-   plumbing: object, check legitimacy in (\*Tree).Encode by [@&#8203;niukuo](https://github.com/niukuo) in https://github.com/go-git/go-git/pull/967
-   plumbing: format/gitattributes, close file in ReadAttributesFile by [@&#8203;prskr](https://github.com/prskr) in https://github.com/go-git/go-git/pull/1018
-   plumbing: check setAuth error. Fixes [#&#8203;185](https://github.com/go-git/go-git/issues/185) by [@&#8203;nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/969
-   plumbing: object, fix variable  defaultUtf8CommitMessageEncoding name spell error by [@&#8203;Jerry-yz](https://github.com/Jerry-yz) in https://github.com/go-git/go-git/pull/987
-   utils: merkletrie, calculate filesystem node's hash lazily. by [@&#8203;candid82](https://github.com/candid82) in https://github.com/go-git/go-git/pull/825
-   utils: update comment in node.go's Hash() by [@&#8203;codablock](https://github.com/codablock) in https://github.com/go-git/go-git/pull/992
-   \_example: fix 404 link and added ssh-agent clone link by [@&#8203;grinish21](https://github.com/grinish21) in https://github.com/go-git/go-git/pull/1022
-   \_example: checkout-branch example by [@&#8203;dlambda](https://github.com/dlambda) in https://github.com/go-git/go-git/pull/446
-   \_example: example for git clone using ssh-agent by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/998

#### New Contributors

-   [@&#8203;candid82](https://github.com/candid82) made their first contribution in https://github.com/go-git/go-git/pull/825
-   [@&#8203;codablock](https://github.com/codablock) made their first contribution in https://github.com/go-git/go-git/pull/992
-   [@&#8203;Jerry-yz](https://github.com/Jerry-yz) made their first contribution in https://github.com/go-git/go-git/pull/987
-   [@&#8203;wlynch](https://github.com/wlynch) made their first contribution in https://github.com/go-git/go-git/pull/996
-   [@&#8203;moranCohen26](https://github.com/moranCohen26) made their first contribution in https://github.com/go-git/go-git/pull/994
-   [@&#8203;grinish21](https://github.com/grinish21) made their first contribution in https://github.com/go-git/go-git/pull/1022
-   [@&#8203;prskr](https://github.com/prskr) made their first contribution in https://github.com/go-git/go-git/pull/1018
-   [@&#8203;dlambda](https://github.com/dlambda) made their first contribution in https://github.com/go-git/go-git/pull/446
-   [@&#8203;juliens](https://github.com/juliens) made their first contribution in https://github.com/go-git/go-git/pull/366
-   [@&#8203;onee-only](https://github.com/onee-only) made their first contribution in https://github.com/go-git/go-git/pull/1036
-   [@&#8203;tim775](https://github.com/tim775) made their first contribution in https://github.com/go-git/go-git/pull/1042
-   [@&#8203;niukuo](https://github.com/niukuo) made their first contribution in https://github.com/go-git/go-git/pull/967
-   [@&#8203;avoidalone](https://github.com/avoidalone) made their first contribution in https://github.com/go-git/go-git/pull/1047

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0

### [`v5.11.0`](https://github.com/go-git/go-git/releases/tag/v5.11.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0)

#### What's Changed

-   git: validate reference names ([#&#8203;929](https://github.com/go-git/go-git/issues/929)) by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/950
-   git: stop iterating at oldest shallow when pulling. Fixes [#&#8203;305](https://github.com/go-git/go-git/issues/305) by [@&#8203;dhoizner](https://github.com/dhoizner) in https://github.com/go-git/go-git/pull/939
-   plumbing: object, enable renames in getFileStatsFromFilePatches by [@&#8203;djmoch](https://github.com/djmoch) in https://github.com/go-git/go-git/pull/941
-   storage: filesystem, Add option to set a specific FS for alternates by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/953
-   Align worktree validation with upstream and remove build warnings by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/958

#### New Contributors

-   [@&#8203;dhoizner](https://github.com/dhoizner) made their first contribution in https://github.com/go-git/go-git/pull/939
-   [@&#8203;djmoch](https://github.com/djmoch) made their first contribution in https://github.com/go-git/go-git/pull/941

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0

### [`v5.10.1`](https://github.com/go-git/go-git/releases/tag/v5.10.1)

[Compare Source](https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1)

#### What's Changed

-   Worktree, ignore ModeSocket files by [@&#8203;steiler](https://github.com/steiler) in https://github.com/go-git/go-git/pull/930
-   git: add tracer package by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/916
-   remote: Flip clause for fast-forward only check by [@&#8203;adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/875
-   plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes [#&#8203;900](https://github.com/go-git/go-git/issues/900) by [@&#8203;anandf](https://github.com/anandf) in https://github.com/go-git/go-git/pull/901
-   plumbing: uppload-server-info, implement upload-server-info by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/896
-   plumbing: optimise memory consumption for filesystem storage by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/799
-   plumbing: format/packfile, Refactor patch delta by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/908
-   plumbing: fix empty uploadpack request error by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/932
-   plumbing: transport/git, Improve tests error message by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/752
-   plumbing: format/pktline, Respect pktline error-line errors by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/936
-   utils: remove ioutil.Pipe and use std library io.Pipe by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/922
-   utils: move trace to utils by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/931
-   cli: separate go module for cli by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/914
-   build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/887
-   build: bump actions/setup-go from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/891
-   build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/888
-   build: bump actions/checkout from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/890
-   build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/907
-   build: bump golang.org/x/text from 0.13.0 to 0.14.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/906
-   build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/917
-   build: bump golang.org/x/net from 0.17.0 to 0.18.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/918

#### New Contributors

-   [@&#8203;anandf](https://github.com/anandf) made their first contribution in https://github.com/go-git/go-git/pull/901
-   [@&#8203;steiler](https://github.com/steiler) made their first contribution in https://github.com/go-git/go-git/pull/930

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1

### [`v5.10.0`](https://github.com/go-git/go-git/releases/tag/v5.10.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0)

#### What's Changed

-   PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by [@&#8203;ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/782
-   Worktree, apply ProxyOption on Pull by [@&#8203;nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/840
-   Repository: add clone --shared feature by [@&#8203;enverbisevac](https://github.com/enverbisevac) in https://github.com/go-git/go-git/pull/860
-   build: Add github workflow to check commit message format by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/867
-   Improve handling of remote errors by [@&#8203;makkes](https://github.com/makkes) in https://github.com/go-git/go-git/pull/866
-   build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/873
-   plumbing: commitgraph, Add generation v2 support by [@&#8203;zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/869
-   plumbing: protocol/packp, Add validation for decodeLine by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/868
-   plumbing: parse the encoding header of the commit object by [@&#8203;liwenqiu](https://github.com/liwenqiu) in https://github.com/go-git/go-git/pull/761
-   plumbing: commitgraph, allow SHA256 commit-graphs by [@&#8203;zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/853
-   plumbing: commitgraph, Allow reading commit-graph chains by [@&#8203;zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/854
-   plumbing/object: Support mergetag in merge commits by [@&#8203;adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/847

#### New Contributors

-   [@&#8203;nodivbyzero](https://github.com/nodivbyzero) made their first contribution in https://github.com/go-git/go-git/pull/840
-   [@&#8203;adityasaky](https://github.com/adityasaky) made their first contribution in https://github.com/go-git/go-git/pull/847
-   [@&#8203;hezhizhen](https://github.com/hezhizhen) made their first contribution in https://github.com/go-git/go-git/pull/836
-   [@&#8203;0x34d](https://github.com/0x34d) made their first contribution in https://github.com/go-git/go-git/pull/855
-   [@&#8203;liwenqiu](https://github.com/liwenqiu) made their first contribution in https://github.com/go-git/go-git/pull/761
-   [@&#8203;enverbisevac](https://github.com/enverbisevac) made their first contribution in https://github.com/go-git/go-git/pull/860
-   [@&#8203;makkes](https://github.com/makkes) made their first contribution in https://github.com/go-git/go-git/pull/866

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0

### [`v5.9.0`](https://github.com/go-git/go-git/releases/tag/v5.9.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0)

#### What's Changed

-   git: worktree: add Amend option to CommitOptions by [@&#8203;john-cai](https://github.com/john-cai) in https://github.com/go-git/go-git/pull/438
-   git: worktree, reset ignored files that are part of the worktree: Fixes [#&#8203;819](https://github.com/go-git/go-git/issues/819) by [@&#8203;daolis](https://github.com/daolis) in https://github.com/go-git/go-git/pull/821
-   plumbing: Do not swallow http message coming from VCS providers by [@&#8203;matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/835
-   plumbing: transport, handle IPv6 while parsing endpoint. Fixes [#&#8203;740](https://github.com/go-git/go-git/issues/740) by [@&#8203;ninedraft](https://github.com/ninedraft) in https://github.com/go-git/go-git/pull/820
-   \*: update goproxy dependency to fix CVE-2023-37788 vulnerability by [@&#8203;svghadi](https://github.com/svghadi) in https://github.com/go-git/go-git/pull/832
-   \*: bump dependencies and Go to 1.19 by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/837

#### New Contributors

-   [@&#8203;svghadi](https://github.com/svghadi) made their first contribution in https://github.com/go-git/go-git/pull/832
-   [@&#8203;daolis](https://github.com/daolis) made their first contribution in https://github.com/go-git/go-git/pull/821

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0

### [`v5.8.1`](https://github.com/go-git/go-git/releases/tag/v5.8.1)

[Compare Source](https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1)

#### What's Changed

-   \*: Bump dependencies by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/815

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1

### [`v5.8.0`](https://github.com/go-git/go-git/releases/tag/v5.8.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.7.0...v5.8.0)

#### What's Changed

-   git: Fix fetching after shallow clone. Fixes [#&#8203;305](https://github.com/go-git/go-git/issues/305) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/778
-   git: enable fetch with unqualified references by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/762
-   git: don't add to want if exists, shallow and depth 1 by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/763
-   git: Clone HEAD should not force master. Fixes [#&#8203;363](https://github.com/go-git/go-git/issues/363) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/758
-   git: fix the issue with submodules having the SCP style URL fail due to the wrong URL parsing by [@&#8203;matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/756
-   git: add a clone option to allow for shallow cloning of submodules by [@&#8203;matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/765
-   worktree: minor speedup for `doAddDirectory` by [@&#8203;ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/702
-   \_examples: Remove wrong comment by [@&#8203;pascal-hofmann](https://github.com/pascal-hofmann) in https://github.com/go-git/go-git/pull/357
-   \*: Handle paths starting with tilde by [@&#8203;ricci2511](https://github.com/ricci2511) in https://github.com/go-git/go-git/pull/808
-   \*: Handle paths starting with ~Username by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/809
-   storage: filesystem/dotgit, add support for tmp_objdir prefix by [@&#8203;L11R](https://github.com/L11R) in https://github.com/go-git/go-git/pull/812
-   plumbing: gitignore, replace user dir in path by [@&#8203;Jleagle](https://github.com/Jleagle) in https://github.com/go-git/go-git/pull/772
-   plumbing: gitignore, fix incorrect parsing. Fixes [#&#8203;500](https://github.com/go-git/go-git/issues/500) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/781
-   plumbing: http, Fix empty repos on Git v2.41+ by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/802
-   plumbing: packp, A request is not empty if it contains shallows. Fixes [#&#8203;328](https://github.com/go-git/go-git/issues/328) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/792
-   plumbing: blame, Complete rewrite. Fixes [#&#8203;603](https://github.com/go-git/go-git/issues/603) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/789
-   plumbing: gitignore, Allow gitconfig to contain a gitignore relative to any user home. Fixes [#&#8203;578](https://github.com/go-git/go-git/issues/578) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/785

#### New Contributors

-   [@&#8203;Jleagle](https://github.com/Jleagle) made their first contribution in https://github.com/go-git/go-git/pull/772
-   [@&#8203;pascal-hofmann](https://github.com/pascal-hofmann) made their first contribution in https://github.com/go-git/go-git/pull/357
-   [@&#8203;ricci2511](https://github.com/ricci2511) made their first contribution in https://github.com/go-git/go-git/pull/808
-   [@&#8203;L11R](https://github.com/L11R) made their first contribution in https://github.com/go-git/go-git/pull/812

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.7.0...v5.7.1

### [`v5.7.0`](https://github.com/go-git/go-git/releases/tag/v5.7.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0)

#### What's Changed

-   \*: Add support for initializing SHA256 repositories by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/707
-   git: add mirror clone option by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/735
-   git: Add support to ls-remote with peeled references. Fixes [#&#8203;749](https://github.com/go-git/go-git/issues/749) by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/750
-   git: fix cloning with branch name by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/755
-   git: Worktree, add check to see if file already checked in. Fixes [#&#8203;718](https://github.com/go-git/go-git/issues/718) by [@&#8203;cbbm142](https://github.com/cbbm142) in https://github.com/go-git/go-git/pull/719
-   git: Worktree, git grep bare repositories by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/728
-   git: Add Depth to SubmoduleUpdateOptions by [@&#8203;matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/754
-   git: Testing, Fix tests not cleaning temp folders by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/769
-   git: remote, add support for a configurable timeout. by [@&#8203;andrewpollock](https://github.com/andrewpollock) in https://github.com/go-git/go-git/pull/753
-   git: Allow Initial Branch to be configurable by [@&#8203;techknowlogick](https://github.com/techknowlogick) in https://github.com/go-git/go-git/pull/764
-   storage: filesystem/dotgit, Improve load packed-refs by [@&#8203;fcharlie](https://github.com/fcharlie) in https://github.com/go-git/go-git/pull/743
-   storage: filesystem, Populate index before use. Fixes [#&#8203;148](https://github.com/go-git/go-git/issues/148) by [@&#8203;AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/722
-   plumbing: resolve non-external delta references by [@&#8203;ZauberNerd](https://github.com/ZauberNerd) in https://github.com/go-git/go-git/pull/485
-   plumbing/transport: fix regression in scp-like match by [@&#8203;jotadrilo](https://github.com/jotadrilo) in https://github.com/go-git/go-git/pull/715
-   plumbing/transport: Add support for custom proxy settings by [@&#8203;aryan9600](https://github.com/aryan9600) in https://github.com/go-git/go-git/pull/744
-   \*: small fixes across the codebase by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/770
-   \*: bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/776
-   \*: bump dependencies by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/748
-   \*: bump Go version to 1.18 on go.mod by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/774
-   \*: add Codeql workflow and bump dependencies by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/775
-   ci: fix upstream git build for master branch by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/739

#### New Contributors

-   [@&#8203;ZauberNerd](https://github.com/ZauberNerd) made their first contribution in https://github.com/go-git/go-git/pull/485
-   [@&#8203;jotadrilo](https://github.com/jotadrilo) made their first contribution in https://github.com/go-git/go-git/pull/715
-   [@&#8203;fcharlie](https://github.com/fcharlie) made their first contribution in https://github.com/go-git/go-git/pull/743
-   [@&#8203;AriehSchneier](https://github.com/AriehSchneier) made their first contribution in https://github.com/go-git/go-git/pull/755
-   [@&#8203;cbbm142](https://github.com/cbbm142) made their first contribution in https://github.com/go-git/go-git/pull/719
-   [@&#8203;aryan9600](https://github.com/aryan9600) made their first contribution in https://github.com/go-git/go-git/pull/744
-   [@&#8203;matejrisek](https://github.com/matejrisek) made their first contribution in https://github.com/go-git/go-git/pull/754
-   [@&#8203;andrewpollock](https://github.com/andrewpollock) made their first contribution in https://github.com/go-git/go-git/pull/753
-   [@&#8203;techknowlogick](https://github.com/techknowlogick) made their first contribution in https://github.com/go-git/go-git/pull/764

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0

### [`v5.6.1`](https://github.com/go-git/go-git/releases/tag/v5.6.1)

[Compare Source](https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1)

#### What's Changed

-   plumbing/transport: don't use the `firstErrLine` when it is empty by [@&#8203;ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/682
-   plumbing/transport: ssh, unable to pass a custom HostKeyCallback func by [@&#8203;aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/655
-   storage/filesystem: dotgit: fix a filesystem race in Refs/walkReferencesTree by [@&#8203;MichaelMure](https://github.com/MichaelMure) in https://github.com/go-git/go-git/pull/659
-   \*: bump golang.org/x/net from 0.2.0 to 0.7.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/684
-   \*: bump dependencies by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/697
-   \*: fix panic for empty revisions by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/696
-   ci: bump GitHub actions, enable go test race detection and stop using developer's GPG keys during test execution by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/701

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1

### [`v5.6.0`](https://github.com/go-git/go-git/releases/tag/v5.6.0)

[Compare Source](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0)

#### What's Changed

-   Worktree, check for empty parent dirs during Reset (Fixes [#&#8203;670](https://github.com/go-git/go-git/issues/670)) by [@&#8203;mbohy](https://github.com/mbohy) in https://github.com/go-git/go-git/pull/671
-   \*: remove need to build with CGO by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/688
-   plumbing: support SSH/X509 signed tags by [@&#8203;hiddeco](https://github.com/hiddeco) in https://github.com/go-git/go-git/pull/690

**Full Changelog**: https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0

</details>

<details>
<summary>google/uuid</summary>

### [`v1.6.0`](https://github.com/google/uuid/releases/tag/v1.6.0)

[Compare Source](https://github.com/google/uuid/compare/v1.5.0...v1.6.0)

##### Features

-   add Max UUID constant ([#&#8203;149](https://github.com/google/uuid/issues/149)) ([c58770e](https://github.com/google/uuid/commit/c58770eb495f55fe2ced6284f93c5158a62e53e3))

##### Bug Fixes

-   fix typo in version 7 uuid documentation ([#&#8203;153](https://github.com/google/uuid/issues/153)) ([016b199](https://github.com/google/uuid/commit/016b199544692f745ffc8867b914129ecb47ef06))
-   Monotonicity in UUIDv7 ([#&#8203;150](https://github.com/google/uuid/issues/150)) ([a2b2b32](https://github.com/google/uuid/commit/a2b2b32373ff0b1a312b7fdf6d38a977099698a6))

### [`v1.5.0`](https://github.com/google/uuid/releases/tag/v1.5.0)

[Compare Source](https://github.com/google/uuid/compare/v1.4.0...v1.5.0)

##### Features

-   Validate UUID without creating new UUID ([#&#8203;141](https://github.com/google/uuid/issues/141)) ([9ee7366](https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29))

### [`v1.4.0`](https://github.com/google/uuid/releases/tag/v1.4.0)

[Compare Source](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

##### Features

-   UUIDs slice type with Strings() convenience method ([#&#8203;133](https://github.com/google/uuid/issues/133)) ([cd5fbbd](https://github.com/google/uuid/commit/cd5fbbdd02f3e3467ac18940e07e062be1f864b4))

##### Fixes

-   Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

### [`v1.3.1`](https://github.com/google/uuid/releases/tag/v1.3.1)

[Compare Source](https://github.com/google/uuid/compare/v1.3.0...v1.3.1)

##### Bug Fixes

-   Use .EqualFold() to parse urn prefixed UUIDs ([#&#8203;118](https://github.com/google/uuid/issues/118)) ([574e687](https://github.com/google/uuid/commit/574e6874943741fb99d41764c705173ada5293f0))

</details>

<details>
<summary>moby/buildkit</summary>

### [`v0.13.1`](https://github.com/moby/buildkit/releases/tag/v0.13.1)

[Compare Source](https://github.com/moby/buildkit/compare/v0.13.0...v0.13.1)

buildkit 0.13.1

Welcome to the 0.13.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable Changes

-   Fix handling of deleted blobs when importing cache from Github Actions cache backend [#&#8203;4771](https://github.com/moby/buildkit/issues/4771)
-   Fix unclean shutdown error on WCOW on Ctrl-C [#&#8203;4774](https://github.com/moby/buildkit/issues/4774)
-   Mitigate issue with mounting OpenTelemetry socket in containers in some installations [#&#8203;4778](https://github.com/moby/buildkit/issues/4778)
-   Fix parsing `./.git` source path as Git URL. [#&#8203;4776](https://github.com/moby/buildkit/issues/4776)

##### Dependency Changes

This release has no dependency changes

Previous release can be found at [v0.13.0](https://github.com/moby/buildkit/releases/tag/v0.13.0)

### [`v0.13.0`](https://github.com/moby/buildkit/releases/tag/v0.13.0)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.5...v0.13.0)

buildkit 0.13.0

Welcome to the 0.13.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Contributors

-   Tõnis Tiigi
-   CrazyMax
-   Justin Chadwell
-   Sebastiaan van Stijn
-   Akihiro Suda
-   Jonathan A. Sternberg
-   Kohei Tokunaga
-   David Karlsson
-   Leandro Santiago
-   Gabriel Adrian Samfira
-   Chris Goller
-   Anthony Nandaa
-   Erik Sipsma
-   Paweł Gronowski
-   Jakub Ciolek
-   Paul "TBBle" Hampson
-   Brian Goff
-   Adrien Delorme
-   Artem Khramov
-   Nguyễn Đức Chiến
-   Aaron Lehmann
-   Dan Duvall
-   Mark Yen
-   Milas Bowman
-   Tristan Stenner
-   Yan Song
-   Ahmon Dancy
-   Alex Couture-Beil
-   Alex Suraci
-   Arnaldo Garcia Rincon
-   Austin Vazquez
-   Bjorn Neergaard
-   Brennan Kinney
-   Bunyamin Dokmetas
-   Burt Holzman
-   Dennis Haney
-   Derek McGowan
-   Erik McKelvey
-   Frank Villaro-Dixon
-   Grégoire Payen de La Garanderie
-   Guilhem Charles
-   Ian King'ori
-   James Carnegie
-   Kazuyoshi Kato
-   Reshen
-   Sascha Hemleb
-   Tibor Vass
-   Zhizhen He
-   fanjiyun.fjy
-   frankyang
-   guangwu
-   liulanzheng
-   njucjc
-   omahs
-   retornam
-   x893675
-   yumemio
-   yzewei
-   蝦米

##### Notable Changes

-   Default Dockerfile frontend has been updated to [v1.7.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.7.0)

-   Experimental Windows Containers support is now available with containerd worker. Windows release artifacts now also contain the `buildkitd.exe` binary. [#&#8203;3518](https://github.com/moby/buildkit/issues/3518) [#&#8203;3517](https://github.com/moby/buildkit/issues/3517) [#&#8203;4494](https://github.com/moby/buildkit/issues/4494) [#&#8203;4479](https://github.com/moby/buildkit/issues/4479) [#&#8203;4432](https://github.com/moby/buildkit/issues/4432) [#&#8203;4387](https://github.com/moby/buildkit/issues/4387) [#&#8203;4364](https://github.com/moby/buildkit/issues/4364) [#&#8203;4670](https://github.com/moby/buildkit/issues/4670) [#&#8203;4692](https://github.com/moby/buildkit/issues/4692) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/windows.md)

-   Multiple exporters(outputs) can now be specified with a single build request [#&#8203;4134](https://github.com/moby/buildkit/issues/4134)

-   New option `rewrite-timestamps` is available when exporting images that with convert files in exported layers according to the epoch time for reproducible builds [#&#8203;4057](https://github.com/moby/buildkit/issues/4057) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/build-repro.md#source_date_epoch)

-   There is a new bridge network mode `--oci-worker-net=bridge` that can be used to set up CNI bridge networking with no external dependencies for better network isolation of build containers. It is expected that v0.14.0 release will enable this network mode by default. [#&#8203;4352](https://github.com/moby/buildkit/issues/4352)  [#&#8203;4650](https://github.com/moby/buildkit/issues/4650) [#&#8203;4539](https://github.com/moby/buildkit/issues/4539)

-   `SOURCE_DATE_EPOCH` in now not applied to the layer records of the base image to keep them immutable [#&#8203;4663](https://github.com/moby/buildkit/issues/4663)

-   Github Actions cache backend now supports defining timeout in case the service gets rate-limited [#&#8203;4702](https://github.com/moby/buildkit/issues/4702)

-   Gateway API has a new method `ResolveSourceMeta` that will replace the previous `ResolveImageConfig` method. The new method works with all LLB source types, not just images, and correctly handles policy conversions between sources. [#&#8203;4563](https://github.com/moby/buildkit/issues/4563) [#&#8203;4647](https://github.com/moby/buildkit/issues/4647)

-   When using host networking, local host DNS routes can also be used instead of the default [#&#8203;4524](https://github.com/moby/buildkit/issues/4524)

-   Changing cache mount's ID property does not invalidate cache for the build step anymore [#&#8203;4585](https://github.com/moby/buildkit/issues/4585)

-   Basic metrics support has been added via OpenTelemetry and Prometheus [#&#8203;4460](https://github.com/moby/buildkit/issues/4460)

-   Token cache is no longer shared between parallel push requests [#&#8203;3592](https://github.com/moby/buildkit/issues/3592)

-   Update insecure registry fallback logic to only fallback with previous host [#&#8203;4613](https://github.com/moby/buildkit/issues/4613)

-   Build secrets can now avoid `noexec` mount restrictions if file mode set execution bit [#&#8203;4670](https://github.com/moby/buildkit/issues/4670)

-   GRPC socket for OpenTelemetry tracing now defaults to runtime directory path [#&#8203;4078](https://github.com/moby/buildkit/issues/4078) [#&#8203;4619](https://github.com/moby/buildkit/issues/4619)

-   LLB API now has new options to directly control how different mounts for container steps are cached [#&#8203;4624](https://github.com/moby/buildkit/issues/4624)

-   Cancellation and timeout errors should now contain better stacktraces on `--debug` mode [#&#8203;4587](https://github.com/moby/buildkit/issues/4587) [#&#8203;4457](https://github.com/moby/buildkit/issues/4457)

-   Edge case of empty multiplatform build result does not generate errors anymore [#&#8203;4526](https://github.com/moby/buildkit/issues/4526)

-   Prune command now avoids taking database lock for a long time if deletion takes too much time [#&#8203;4413](https://github.com/moby/buildkit/issues/4413)

-   Healthcheck service has been added to Control API [#&#8203;4145](https://github.com/moby/buildkit/issues/4145)

-   Buildctl has new `quiet` and `rawjson` progress mode [#&#8203;4213](https://github.com/moby/buildkit/issues/4213) [#&#8203;4113](https://github.com/moby/buildkit/issues/4113)

-   Buildctl has new `--debug-json-cache-metrics` debug option [#&#8203;4464](https://github.com/moby/buildkit/issues/4464)

-   Buildctl now supports `--registry-auth-tlscontext` flag for controlling the client authentication requests [#&#8203;4420](https://github.com/moby/buildkit/issues/4420) [#&#8203;4211](https://github.com/moby/buildkit/issues/4211)

-   Buildctl now propagates `SOURCE_DATE_EPOCH` to build arg automatically if it is defined [#&#8203;4231](https://github.com/moby/buildkit/issues/4231)

-   LLB client now allows exposing local sources via `FS` interface instead of local path [#&#8203;4094](https://github.com/moby/buildkit/issues/4094)

-   Ensure only one platform is pulled on resolving image config, even if multiple match [#&#8203;4311](https://github.com/moby/buildkit/issues/4311)

-   Rootless version supports new `--detach-netns` mode [#&#8203;4546](https://github.com/moby/buildkit/issues/4546)

-   Update default CNI config path for rootless mode to `~/.config/buildkit/cni.json` [#&#8203;4547](https://github.com/moby/buildkit/issues/4547)

-   Ensure correct pinned commit is checked out if tags that have same path components [#&#8203;4473](https://github.com/moby/buildkit/issues/4473)

-   Exporting caches for results with no layers is now skipped in OCI structures [#&#8203;4336](https://github.com/moby/buildkit/issues/4336)

-   New debugging options have been added to the scheduler component [#&#8203;4410](https://github.com/moby/buildkit/issues/4410)

-   Improve error messages on `StatFile` requests [#&#8203;4321](https://github.com/moby/buildkit/issues/4321)

-   Daemon logs can now be exported in JSON format [#&#8203;4044](https://github.com/moby/buildkit/issues/4044)

-   Qemu emulation for loongarch64 is now detected if available [#&#8203;4392](https://github.com/moby/buildkit/issues/4392)

-   Number of log lines per build step on TTY mode can now be configured with `BUILDKIT_TTY_LOG_LINES` [#&#8203;4284](https://github.com/moby/buildkit/issues/4284)

-   Empty `OnBuild` value is now omitted from image config [#&#8203;4648](https://github.com/moby/buildkit/issues/4648)

-   Fixes for bridge networking on Rootless mode [#&#8203;4655](https://github.com/moby/buildkit/issues/4655)

-   Fix possible "missing lease requirement" error on canceling one of parallel exports [#&#8203;4529](https://github.com/moby/buildkit/issues/4529)

-   Fix file permissions error if `ADD <tar.gz>` used with User namespace [#&#8203;4712](https://github.com/moby/buildkit/issues/4712)

-   Fix possible permission error when using custom frontends with User namespace on certain systems [#&#8203;4714](https://github.com/moby/buildkit/issues/4714)

-   Fixes for merging parallel build steps that generate the same cache keys [#&#8203;4559](https://github.com/moby/buildkit/issues/4559) [#&#8203;4285](https://github.com/moby/buildkit/issues/4285)

-   Fix processing result map in LLB API if the evaluate option is set to true [#&#8203;4544](https://github.com/moby/buildkit/issues/4544)

-   Fix hardlink issue with whiteout deletes in the merge snapshotter [#&#8203;4516](https://github.com/moby/buildkit/issues/4516)

-   Fix issue with caching multiple mounts originating from the same source [#&#8203;4270](https://github.com/moby/buildkit/issues/4270) [#&#8203;4281](https://github.com/moby/buildkit/issues/4281)

-   Fix possible panic condition on deleting history records [#&#8203;4451](https://github.com/moby/buildkit/issues/4451)

-   Fix issue where same source image layer chains could end up in the provenance attestation multiple times [#&#8203;4433](https://github.com/moby/buildkit/issues/4433)

-   Fix possible pull error caused by previous cache [#&#8203;4428](https://github.com/moby/buildkit/issues/4428)

-   Fix possible data race on transfer progress handling [#&#8203;4726](https://github.com/moby/buildkit/issues/4726)

-   Fix issues where session messages could grow bigger than maximum message size when transferring SBOM to client [#&#8203;4313](https://github.com/moby/buildkit/issues/4313)

-   Fix issue where specific build steps could drop progress messages [#&#8203;4347](https://github.com/moby/buildkit/issues/4347)

-   Fix possible wrong usage statitics in merged snapshotters [#&#8203;4389](https://github.com/moby/buildkit/issues/4389)

-   Fix possible storage leak for compression variants [#&#8203;4353](https://github.com/moby/buildkit/issues/4353)

-   Fix handling of certain SSH Git URLs [#&#8203;4326](https://github.com/moby/buildkit/issues/4326)

-   Fix possible missing blob error on mapping files to SBOM packages [#&#8203;4210](https://github.com/moby/buildkit/issues/4210)

-   Fix diffing layers when custom Gzip compression level is set [#&#8203;4275](https://github.com/moby/buildkit/issues/4275)

-   Fix possible panic with stargz snapshotter [#&#8203;4187](https://github.com/moby/buildkit/issues/4187)

-   Fix generation of cache checksums for Merge and Diff operations [#&#8203;4192](https://github.com/moby/buildkit/issues/4192)

-   Fix possible negative pull time in progressbar on parallel pulls [#&#8203;4183](https://github.com/moby/buildkit/issues/4183)

-   Fix handling of missing files in LLB File remove API [#&#8203;4051](https://github.com/moby/buildkit/issues/4051)

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**                                          [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) -> [`ced1acd`](https://github.com/moby/buildkit/commit/ced1acdcaa24)
-   **github.com/AdamKorcz/go-118-fuzz-build**                                        [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) -> [`8075edf`](https://github.com/moby/buildkit/commit/8075edf89bb0)
-   **github.com/Microsoft/hcsshim**                                                  v0.10.0-rc.8 -> v0.11.4
-   **github.com/aws/aws-sdk-go-v2**                                                  v1.17.6 -> v1.24.1
-   **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream**                         v1.4.10 -> v1.5.4
-   **github.com/aws/aws-sdk-go-v2/config**                                           v1.18.16 -> v1.26.6
-   **github.com/aws/aws-sdk-go-v2/credentials**                                      v1.13.16 -> v1.16.16
-   **github.com/aws/aws-sdk-go-v2/feature/ec2/imds**                                 v1.12.24 -> v1.14.11
-   **github.com/aws/aws-sdk-go-v2/feature/s3/manager**                               v1.11.56 -> v1.15.15
-   **github.com/aws/aws-sdk-go-v2/internal/configsources**                           v1.1.30 -> v1.2.10
-   **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2**                            v2.4.24 -> v2.5.10
-   **github.com/aws/aws-sdk-go-v2/internal/ini**                                     v1.3.31 -> v1.7.3
-   **github.com/aws/aws-sdk-go-v2/internal/v4a**                                     v1.0.22 -> v1.2.10
-   **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding**                 v1.9.11 -> v1.10.4
-   **github.com/aws/aws-sdk-go-v2/service/internal/checksum**                        v1.1.25 -> v1.2.10
-   **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url**                   v1.9.24 -> v1.10.10
-   **github.com/aws/aws-sdk-go-v2/service/internal/s3shared**                        v1.13.24 -> v1.16.10
-   **github.com/aws/aws-sdk-go-v2/service/s3**                                       v1.30.6 -> v1.48.1
-   **github.com/aws/aws-sdk-go-v2/service/sso**                                      v1.12.5 -> v1.18.7
-   **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.14.5 -> v1.21.7
-   **github.com/aws/aws-sdk-go-v2/service/sts**                                      v1.18.6 -> v1.26.7
-   **github.com/aws/smithy-go**                                                      v1.13.5 -> v1.19.0
-   **github.com/cenkalti/backoff/v4**                                                v4.2.0 -> v4.2.1
-   **github.com/containerd/console**                                                 v1.0.3 -> v1.0.4
-   **github.com/containerd/containerd**                                              v1.7.2 -> v1.7.13
-   **github.com/containerd/continuity**                                              v0.4.1 -> v0.4.3
-   **github.com/containerd/fuse-overlayfs-snapshotter**                              v1.0.2 -> v1.0.8
-   **github.com/containerd/log**                                                     v0.1.0 ***new***
-   **github.com/containerd/nydus-snapshotter**                                       v0.8.2 -> v0.13.7
-   **github.com/containerd/stargz-snapshotter**                                      v0.14.3 -> v0.15.1
-   **github.com/containerd/stargz-snapshotter/estargz**                              v0.14.3 -> v0.15.1
-   **github.com/containernetworking/plugins**                                        v1.4.0 ***new***
-   **github.com/distribution/reference**                                             v0.5.0 ***new***
-   **github.com/docker/cli**                                                         v24.0.4 -> v25.0.3
-   **github.com/docker/docker**                                                      [`8e51b8b`](https://github.com/moby/buildkit/commit/8e51b8b59cb8) -> v25.0.3
-   **github.com/docker/docker-credential-helpers**                                   v0.7.0 -> v0.8.0
-   **github.com/docker/go-connections**                                              v0.4.0 -> v0.5.0
-   **github.com/felixge/fgprof**                                                     v0.9.3 ***new***
-   **github.com/felixge/httpsnoop**                                                  v1.0.3 -> v1.0.4
-   **github.com/go-logr/logr**                                                       v1.2.3 -> v1.3.0
-   **github.com/golang-jwt/jwt/v4**                                                  v4.4.2 -> v4.5.0
-   **github.com/google/go-cmp**                                                      v0.5.9 -> v0.6.0
-   **github.com/google/pprof**                                                       [`e72429f`](https://github.com/moby/buildkit/commit/e72429f035bd) ***new***
-   **github.com/google/uuid**                                                        v1.3.0 -> v1.5.0
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                     v2.11.3 -> v2.16.0
-   **github.com/hanwen/go-fuse/v2**                                                  v2.2.0 -> v2.4.0
-   **github.com/hashicorp/go-retryablehttp**                                         v0.7.2 -> v0.7.5
-   **github.com/klauspost/compress**                                                 v1.17.2 -> v1.17.4
-   **github.com/moby/docker-image-spec**                                             v1.3.1 ***new***
-   **github.com/moby/patternmatcher**                                                v0.5.0 -> v0.6.0
-   **github.com/moby/sys/mountinfo**                                                 v0.6.2 -> v0.7.1
-   **github.com/moby/sys/user**                                                      v0.1.0 ***new***
-   **github.com/moby/term**                                                          v0.5.0 ***new***
-   **github.com/opencontainers/image-spec**                                          v1.1.0-rc3 -> v1.1.0-rc5
-   **github.com/opencontainers/runtime-spec**                                        v1.1.0-rc.2 -> v1.1.0
-   **github.com/pkg/profile**                                                        v1.5.0 -> v1.7.0
-   **github.com/prometheus/client_golang**                                           v1.14.0 -> v1.17.0
-   **github.com/prometheus/client_model**                                            v0.3.0 -> v0.5.0
-   **github.com/prometheus/common**                                                  v0.42.0 -> v0.44.0
-   **github.com/prometheus/procfs**                                                  v0.9.0 -> v0.12.0
-   **github.com/serialx/hashring**                                                   [`8b29126`](https://github.com/moby/buildkit/commit/8b2912629002) -> [`22c0c7a`](https://github.com/moby/buildkit/commit/22c0c7ab6b1b)
-   **github.com/sirupsen/logrus**                                                    v1.9.0 -> v1.9.3
-   **github.com/spdx/tools-golang**                                                  v0.5.1 -> v0.5.3
-   **github.com/stretchr/testify**                                                   v1.8.3 -> v1.8.4
-   **github.com/tonistiigi/fsutil**                                                  [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/moby/buildkit/commit/7525a1af2bb5)
-   **github.com/tonistiigi/go-actions-cache**                                        [`0bdeb6e`](https://github.com/moby/buildkit/commit/0bdeb6e1eac7) -> [`a0b64f3`](https://github.com/moby/buildkit/commit/a0b64f338598)
-   **github.com/urfave/cli**                                                         v1.22.12 -> v1.22.14
-   **github.com/vbatts/tar-split**                                                   v0.11.2 -> v0.11.5
-   **github.com/vishvananda/netlink**                                                v1.2.1-beta.2 ***new***
-   **github.com/vishvananda/netns**                                                  v0.0.4 ***new***
-   **go.etcd.io/bbolt**                                                              v1.3.7 -> v1.3.9
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.40.0 -> v0.46.1
-   **go.opentelemetry.io/otel**                                                      v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/jaeger**                                     v1.14.0 -> v1.17.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric**                            v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc**             v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp**             v0.42.0 ***new***
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/exporters/prometheus**                                 v0.42.0 ***new***
-   **go.opentelemetry.io/otel/metric**                                               v0.37.0 -> v1.21.0
-   **go.opentelemetry.io/otel/sdk**                                                  v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/otel/sdk/metric**                                           v1.21.0 ***new***
-   **go.opentelemetry.io/otel/trace**                                                v1.14.0 -> v1.21.0
-   **go.opentelemetry.io/proto/otlp**                                                v0.19.0 -> v1.0.0
-   **google.golang.org/genproto**                                                    [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b)
-   **google.golang.org/genproto/googleapis/api**                                     [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new***
-   **google.golang.org/genproto/googleapis/rpc**                                     [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new***
-   **google.golang.org/grpc**                                                        v1.53.0 -> v1.59.0

Previous release can be found at [v0.12.5](https://github.com/moby/buildkit/releases/tag/v0.12.5)

### [`v0.12.5`](https://github.com/moby/buildkit/releases/tag/v0.12.5)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.4...v0.12.5)

https://hub.docker.com/r/moby/buildkit

##### Notable changes:

##### This release contains following security fixes:

-   Runc has been updated to v1.1.12 addressing https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv

-   Fix possible race condition with accessing subpaths from cache mounts https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv

-   Fix possible host system access from mount stub cleaner https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8

-   Fix interactive containers API validation against entitlements https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g

-   Fix possible panic when incorrect parameters sent from frontend https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx

### [`v0.12.4`](https://github.com/moby/buildkit/releases/tag/v0.12.4)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.3...v0.12.4)

Welcome to the 0.12.4 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Fix possible concurrent map access on remote cache export [#&#8203;4346](https://github.com/moby/buildkit/issues/4346)
-   Fix hang on debug server listener [#&#8203;4361](https://github.com/moby/buildkit/issues/4361)
-   Fix possible deadlock in History API under high number of parallel builds [#&#8203;4362](https://github.com/moby/buildkit/issues/4362)
-   Fix possible panic on handling deleted records in History API [#&#8203;4451](https://github.com/moby/buildkit/issues/4451)
-   Fix possible data corruption in zstd library [#&#8203;4372](https://github.com/moby/buildkit/issues/4372)

### [`v0.12.3`](https://github.com/moby/buildkit/releases/tag/v0.12.3)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.2...v0.12.3)

Welcome to the 0.12.3 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Fix possible duplicate source files in provenance attestation for chained builds [#&#8203;4190](https://github.com/moby/buildkit/issues/4190)
-   Fix possible negative step time in progressbar for step shared with other build request [#&#8203;4183](https://github.com/moby/buildkit/issues/4183)
-   Fix properly closing history and cache DB on shutdown to avoid corruption [#&#8203;4185](https://github.com/moby/buildkit/issues/4185) [#&#8203;4189](https://github.com/moby/buildkit/issues/4189)
-   Fix incorrect error handling for invalid HTTP source URLs [#&#8203;4201](https://github.com/moby/buildkit/issues/4201)
-   Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. [#&#8203;4299](https://github.com/moby/buildkit/issues/4299)
-   Fix possible data race with parallel image config resolves [#&#8203;4157](https://github.com/moby/buildkit/issues/4157)
-   Fix regression in v0.12 for clients waiting on buildkitd to become available [#&#8203;4200](https://github.com/moby/buildkit/issues/4200)
-   Fix Cgroup NS handling for hosts supporting only CgroupV1 [#&#8203;4308](https://github.com/moby/buildkit/issues/4308)

### [`v0.12.2`](https://github.com/moby/buildkit/releases/tag/v0.12.2)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.1...v0.12.2)

Welcome to the 0.12.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Fix possible discarded network error when exporting result to client [#&#8203;4117](https://github.com/moby/buildkit/issues/4117)
-   Avoid unnecessary memory allocations when writing build progress [#&#8203;4116](https://github.com/moby/buildkit/issues/4116)

### [`v0.12.1`](https://github.com/moby/buildkit/releases/tag/v0.12.1)

[Compare Source](https://github.com/moby/buildkit/compare/v0.12.0...v0.12.1)

Welcome to the 0.12.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Fix possible goroutine leak in resource monitor for failed containers [#&#8203;4081](https://github.com/moby/buildkit/issues/4081)
-   Fix possible tracing socket path length error on some configurations [#&#8203;3483](https://github.com/moby/buildkit/issues/3483)

### [`v0.12.0`](https://github.com/moby/buildkit/releases/tag/v0.12.0)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.6...v0.12.0)

buildkit 0.12.0

Welcome to the 0.12.0 release of buildkit!
*This is a pre-release of buildkit*

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Contributors

-   Tõnis Tiigi
-   Justin Chadwell
-   CrazyMax
-   Sebastiaan van Stijn
-   Akihiro Suda
-   Erik Sipsma
-   Gabriel Adrian Samfira
-   Kohei Tokunaga
-   Alex Couture-Beil
-   Cory Bennett
-   Brian Goff
-   Nick Santos
-   Wei Zhang
-   Alex Suraci
-   Alexis Murzeau
-   Changwei Ge
-   David Karlsson
-   Paweł Gronowski
-   Aaron Lehmann
-   Jordan Goasdoue
-   Seiya Miyata
-   Ben Longo
-   Jacob Gillespie
-   Alan Fregtman
-   Andy Alt
-   Bertrand Paquet
-   Chaerim Yeo
-   Chris Goller
-   Cory Snider
-   Dan Duvall
-   Gabriel
-   Gahl Saraf
-   George
-   Hugo Santos
-   Ilya Dmitrichenko
-   Kang, Matthew
-   Matias Insaurralde
-   Matt Kang
-   Nick Miyake
-   Pranav Pandit
-   Sertac Ozercan
-   Vladislav Ivanov
-   Yan Song
-   Yurii Rashkovskii
-   [@&#8203;ggjulio](https://github.com/ggjulio)
-   [@&#8203;chengjoey](https://github.com/chengjoey)
-   [@&#8203;lomot](https://github.com/lomot)

##### Notable Changes

-   Default Dockerfile frontend has been updated to [1.6.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.6.0)
-   Remote cache export/import to the registry now supports OCI image manifest compatible format when setting `image-manifest=true` [#&#8203;3724](https://github.com/moby/buildkit/issues/3724)
-   Local and Tar exporters now support `platform-split=false` option to merge all artifacts for multiple platforms to the same directory. [#&#8203;3161](https://github.com/moby/buildkit/issues/3161)
-   Provenance attestation can now capture resource usage information for the system and individual build steps. This information can be written to exported attestation by setting `capture-usage=true` attestation option and is set automatically for History API records. This feature depends on CgroupV2, and some fields require kernel configured with `CONFIG_PSI` enabled. [#&#8203;3860](https://github.com/moby/buildkit/issues/3860) [#&#8203;3999](https://github.com/moby/buildkit/issues/3999)
-   `SOURCE_DATE_EPOCH` value for reproducible builds is now set as the creation timestamp when exporting image to containerd image store [#&#8203;3263](https://github.com/moby/buildkit/issues/3263)
-   `buildctl` has new `--wait` flag to block RPCs until the connection becomes available [#&#8203;3586](https://github.com/moby/buildkit/issues/3586)
-   WCOW support for certain actions has improved [#&#8203;3783](https://github.com/moby/buildkit/issues/3783) [#&#8203;3782](https://github.com/moby/buildkit/issues/3782) [#&#8203;3907](https://github.com/moby/buildkit/issues/3907) [#&#8203;3906](https://github.com/moby/buildkit/issues/3906) [#&#8203;3545](https://github.com/moby/buildkit/issues/3545) [#&#8203;3544](https://github.com/moby/buildkit/issues/3544) [#&#8203;3516](https://github.com/moby/buildkit/issues/3516) [#&#8203;3908](https://github.com/moby/buildkit/issues/3908)
-   Stargz support is out of experimental [#&#8203;3637](https://github.com/moby/buildkit/issues/3637)
-   Creating layer blobs now uses deterministic timestamps for whiteout files when Overlay snapshotter is supported for more reproducible builds [#&#8203;3981](https://github.com/moby/buildkit/issues/3981)
-   Source policy support now also applies to image config metadata requests. These requests can return a new source reference defined by the policy that the frontend can use in follow-up LLB requests. [#&#8203;3956](https://github.com/moby/buildkit/issues/3956) [#&#8203;4014](https://github.com/moby/buildkit/issues/4014)
-   Sourcemaps in provenance attestations and errors now allow setting the source language name [#&#8203;3620](https://github.com/moby/buildkit/issues/3620)
-   File operations are now always platform-independent for better direct cache reuse [#&#8203;3858](https://github.com/moby/buildkit/issues/3858)
-   When exporting an image to Containerd image store, unpack logic now works for multi-platform images by unpacking only the native platform by default [#&#8203;3982](https://github.com/moby/buildkit/issues/3982) [#&#8203;3983](https://github.com/moby/buildkit/issues/3983)
-   Cgroup namespace isolation is enabled for containers on supported systems [#&#8203;4003](https://github.com/moby/buildkit/issues/4003)
-   New DockerUI package is provided by frontend authors who want to target `docker buildx` flags without the need to copy code from Dockerfile frontend [#&#8203;3606](https://github.com/moby/buildkit/issues/3606)
-   Downloading image layers in the exporter can now work in parallel for different platforms [#&#8203;3984](https://github.com/moby/buildkit/issues/3984)
-   Zstd compressed layers are now supported also with Docker-style mediatypes [#&#8203;3968](https://github.com/moby/buildkit/issues/3968)
-   Secret environment variables can now be set using the interactive container API [#&#8203;3957](https://github.com/moby/buildkit/issues/3957)
-   TOML buildkitd config now supports multiple units for storage limits [#&#8203;3773](https://github.com/moby/buildkit/issues/3773)
-   gRPC API now enables reflection [#&#8203;3790](https://github.com/moby/buildkit/issues/3790)
-   HTTP sources now have better caching for servers that handle `Accept-Encoding` differently for different HTTP methods [#&#8203;3745](https://github.com/moby/buildkit/issues/3745) [#&#8203;3788](https://github.com/moby/buildkit/issues/3788)
-   New `buildctl` commands `debug histories` and `prune-histories` [#&#8203;3498](https://github.com/moby/buildkit/issues/3498)
-   Loading SBOM generator image can now be configured with resolve mode parameter [#&#8203;3446](https://github.com/moby/buildkit/issues/3446)
-   Gateway frontend source image can now be set with defining named context [#&#8203;3633](https://github.com/moby/buildkit/issues/3633)
-   Performance improvements to scanning local files for context upload [#&#8203;3977](https://github.com/moby/buildkit/issues/3977)
-   Interactive container API now supports setting container Hostname [#&#8203;3680](https://github.com/moby/buildkit/issues/3680)
-   History API now uses a separate Containerd namespace for its objects, fixing some issues when the same blobs are used by image store [#&#8203;3833](https://github.com/moby/buildkit/issues/3833)
-   Make files created by Git source more deterministic [#&#8203;3598](https://github.com/moby/buildkit/issues/3598)
-   Git source now handles URLs that define subdir and empty reference [#&#8203;3596](https://github.com/moby/buildkit/issues/3596)
-   Remote cache export now supports `registry.insecure` option like the Image exporter [#&#8203;3501](https://github.com/moby/buildkit/issues/3501)
-   Azure Blob storage cache export supports setting the account name as parameter [#&#8203;3476](https://github.com/moby/buildkit/issues/3476)
-   New client APIs for configuring TLS authentication to use system certificates [#&#8203;3760](https://github.com/moby/buildkit/issues/3760)
-   Fixes for copying Unicode filenames with local context [#&#8203;3946](https://github.com/moby/buildkit/issues/3946) [#&#8203;4009](https://github.com/moby/buildkit/issues/4009)
-   Fix the issue where some builds could fail with "missing provenance" error [#&#8203;3945](https://github.com/moby/buildkit/issues/3945)
-   Fix lazy loaded layers reuse for cache when running parallel builds [#&#8203;3109](https://github.com/moby/buildkit/issues/3109)
-   Fix issue with missing GC label for layers when exporting image to containerd image store [#&#8203;3161](https://github.com/moby/buildkit/issues/3161)
-   Fix possible progressbar panic on resizing terminal window [#&#8203;3967](https://github.com/moby/buildkit/issues/3967)
-   Fix possible "inconsistent graph state" error when running parallel cached, and no-cache builds [#&#8203;3953](https://github.com/moby/buildkit/issues/3953)
-   Fix possible zero build step index numbers on progressbar [#&#8203;3942](https://github.com/moby/buildkit/issues/3942) [#&#8203;3838](https://github.com/moby/buildkit/issues/3838)
-   Fix possible "container does not exist" error [#&#8203;3940](https://github.com/moby/buildkit/issues/3940)
-   Fix possible "concurrent map read and write" error [#&#8203;3938](https://github.com/moby/buildkit/issues/3938)
-   Fix possible issue where the status stream could be missing for History record [#&#8203;3937](https://github.com/moby/buildkit/issues/3937)
-   Fix possible data races [#&#8203;4004](https://github.com/moby/buildkit/issues/4004) [#&#8203;3994](https://github.com/moby/buildkit/issues/3994) [#&#8203;4010](https://github.com/moby/buildkit/issues/4010)
-   Fix OCI layout URIs in provenance attestation [#&#8203;3918](https://github.com/moby/buildkit/issues/3918)
-   Fix regression bug in v0.11.x OpenTelemetry trace delegation from the client [#&#8203;3909](https://github.com/moby/buildkit/issues/3909)
-   Fix possible deadlock on network error [#&#8203;3857](https://github.com/moby/buildkit/issues/3857)
-   Fix filtering out deleted History API records [#&#8203;3827](https://github.com/moby/buildkit/issues/3827) [#&#8203;3733](https://github.com/moby/buildkit/issues/3733)
-   Fix possible build cache reference leak [#&#8203;3851](https://github.com/moby/buildkit/issues/3851) [#&#8203;3815](https://github.com/moby/buildkit/issues/3815)
-   Fix possible FD leak in SSH forwarding [#&#8203;3848](https://github.com/moby/buildkit/issues/3848)
-   Fix possible concurrent map access in Client library [#&#8203;3813](https://github.com/moby/buildkit/issues/3813)
-   Fixes for Runc container SIGKILL/exit-code handling [#&#8203;3754](https://github.com/moby/buildkit/issues/3754) [#&#8203;3765](https://github.com/moby/buildkit/issues/3765) [#&#8203;3658](https://github.com/moby/buildkit/issues/3658) [#&#8203;3722](https://github.com/moby/buildkit/issues/3722)
-   Fix creating `oci-layout` file when exporting uncompressed OCI layout [#&#8203;3729](https://github.com/moby/buildkit/issues/3729)

##### Dependency Changes

-   **github.com/AdaLogics/go-fuzz-headers**                                          [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) ***new***
-   **github.com/AdamKorcz/go-118-fuzz-build**                                        [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) ***new***
-   **github.com/Masterminds/semver/v3**                                              v3.1.0 ***new***
-   **github.com/Microsoft/go-winio**                                                 v0.5.2 -> v0.6.1
-   **github.com/Microsoft/hcsshim**                                                  v0.9.6 -> v0.10.0-rc.8
-   **github.com/anchore/go-struct-converter**                                        [`c68fdcf`](https://github.com/moby/buildkit/commit/c68fdcfa2092) ***new***
-   **github.com/aws/aws-sdk-go-v2**                                                  v1.16.3 -> v1.17.6
-   **github.com/aws/aws-sdk-go-v2/service/ssooidc**                                  v1.14.5 ***new***
-   **github.com/aws/smithy-go**                                                      v1.11.2 -> v1.13.5
-   **github.com/containerd/cgroups**                                                 v1.0.4 -> v1.1.0
-   **github.com/containerd/containerd**                                              v1.6.14 -> v1.7.2
-   **github.com/containerd/continuity**                                              v0.3.0 -> v0.4.1
-   **github.com/containerd/fifo**                                                    v1.0.0 -> v1.1.0
-   **github.com/containerd/go-cni**                                                  v1.1.6 -> v1.1.9
-   **github.com/containerd/go-runc**                                                 v1.0.0 -> v1.1.0
-   **github.com/containerd/nydus-snapshotter**                                       v0.3.1 -> v0.8.2
-   **github.com/containerd/stargz-snapshotter**                                      v0.13.0 -> v0.14.3
-   **github.com/containerd/ttrpc**                                                   v1.1.0 -> v1.2.2
-   **github.com/containerd/typeurl/v2**                                              v2.1.1 ***new***
-   **github.com/containernetworking/cni**                                            v1.1.1 -> v1.1.2
-   **github.com/cyphar/filepath-securejoin**                                         v0.2.3 ***new***
-   **github.com/docker/cli**                                                         v23.0.0-rc.1 -> v24.0.2
-   **github.com/docker/distribution**                                                v2.8.1 -> v2.8.2
-   **github.com/docker/docker**                                                      v23.0.0-rc.1 -> [`98d3da7`](https://github.com/moby/buildkit/commit/98d3da79ef9c)
-   **github.com/felixge/httpsnoop**                                                  v1.0.2 -> v1.0.3
-   **github.com/golang/protobuf**                                                    v1.5.2 -> v1.5.3
-   **github.com/grpc-ecosystem/grpc-gateway/v2**                                     v2.11.3 ***new***
-   **github.com/hanwen/go-fuse/v2**                                                  [`f57e95b`](https://github.com/moby/buildkit/commit/f57e95bda82d) -> v2.2.0
-   **github.com/hashicorp/go-cleanhttp**                                             v0.5.1 -> v0.5.2
-   **github.com/hashicorp/go-retryablehttp**                                         v0.7.1 -> v0.7.2
-   **github.com/klauspost/compress**                                                 v1.15.12 -> v1.16.3
-   **github.com/opencontainers/image-spec**                                          [`02efb9a`](https://github.com/moby/buildkit/commit/02efb9a75ee1) -> v1.1.0-rc3
-   **github.com/opencontainers/runc**                                                v1.1.3 -> v1.1.7
-   **github.com/opencontainers/runtime-spec**                                        [`1c3f411`](https://github.com/moby/buildkit/commit/1c3f411f0417) -> v1.1.0-rc.2
-   **github.com/opencontainers/selinux**                                             v1.10.2 -> v1.11.0
-   **github.com/pelletier/go-toml**                                                  v1.9.4 -> v1.9.5
-   **github.com/prometheus/common**                                                  v0.37.0 -> v0.42.0
-   **github.com/prometheus/procfs**                                                  v0.8.0 -> v0.9.0
-   **github.com/spdx/tools-golang**                                                  [`d6f5855`](https://github.com/moby/buildkit/commit/d6f58551be3f) -> v0.5.1
-   **github.com/stretchr/testify**                                                   v1.8.0 -> v1.8.3
-   **github.com/tonistiigi/fsutil**                                                  [`fb43384`](https://github.com/moby/buildkit/commit/fb433841cbfa) -> [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb)
-   **github.com/tonistiigi/vt100**                                                   [`8066bb9`](https://github.com/moby/buildkit/commit/8066bb97264f) -> [`f9a4f7e`](https://github.com/moby/buildkit/commit/f9a4f7ef6531)
-   **github.com/urfave/cli**                                                         v1.22.4 -> v1.22.12
-   **go.etcd.io/bbolt**                                                              v1.3.6 -> v1.3.7
-   **go.opencensus.io**                                                              v0.23.0 -> v0.24.0
-   **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc**   v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace**  v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp**                 v0.29.0 -> v0.40.0
-   **go.opentelemetry.io/otel**                                                      v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/jaeger**                                     v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/internal/retry**                        v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace**                             v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc**               v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp**               v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/metric**                                               v0.27.0 -> v0.37.0
-   **go.opentelemetry.io/otel/sdk**                                                  v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/otel/trace**                                                v1.4.1 -> v1.14.0
-   **go.opentelemetry.io/proto/otlp**                                                v0.12.0 -> v0.19.0
-   **golang.org/x/mod**                                                              v0.9.0 ***new***
-   **golang.org/x/tools**                                                            v0.7.0 ***new***
-   **google.golang.org/genproto**                                                    [`7780775`](https://github.com/moby/buildkit/commit/7780775163c4) -> [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4)
-   **google.golang.org/grpc**                                                        v1.50.1 -> v1.53.0
-   **kernel.org/pub/linux/libs/security/libcap/cap**                                 v1.2.67 ***new***
-   **kernel.org/pub/linux/libs/security/libcap/psx**                                 v1.2.67 ***new***

Previous release can be found at [v0.11.6](https://github.com/moby/buildkit/releases/tag/v0.11.6)

### [`v0.11.6`](https://github.com/moby/buildkit/releases/tag/v0.11.6)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.5...v0.11.6)

https://hub.docker.com/r/moby/buildkit

Notable changes:

-   Revert previous signal handling fix to make sure no process leaks happen. The signaling issue will be fixed in the next feature release. https://github.com/moby/buildkit/pull/3757
-   Update runc to v1.1.5 for security https://github.com/moby/buildkit/pull/3763
-   Update containerd to v1.6.20 . Brings in fix for not writing local user/group names in differ. [#&#8203;3736](https://github.com/moby/buildkit/issues/3736)
-   Fix possible "duplicate output 0" error on parallel builds [#&#8203;3774](https://github.com/moby/buildkit/issues/3774)
-   Fix token management for servers that don't return proper `IssuedAt` value [#&#8203;3779](https://github.com/moby/buildkit/issues/3779)
-   Fix SBOM and provenance processing for certain nil-result cases [#&#8203;3805](https://github.com/moby/buildkit/issues/3805)

### [`v0.11.5`](https://github.com/moby/buildkit/releases/tag/v0.11.5)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.4...v0.11.5)

https://hub.docker.com/r/moby/buildkit

##### Notable changes:

-   Fix process termination handling to Runc when running interactive processes [#&#8203;3722](https://github.com/moby/buildkit/issues/3722)
-   Fix gateway exec tty cleanup on context.Canceled [#&#8203;3658](https://github.com/moby/buildkit/issues/3658)
-   Register builds before recording build history to avoid possible timeout error [#&#8203;3726](https://github.com/moby/buildkit/issues/3726)
-   Fix performance regression in creating LLB graphs [#&#8203;3732](https://github.com/moby/buildkit/issues/3732)
-   Fix sorting of build history records for GC [#&#8203;3733](https://github.com/moby/buildkit/issues/3733)
-   Fix an issue where linking builds with providing LLB inputs dropped the original source information for such inputs [#&#8203;3678](https://github.com/moby/buildkit/issues/3678)
-   Fix running BuildKit on BottleRocket OS [#&#8203;3697](https://github.com/moby/buildkit/issues/3697)

### [`v0.11.4`](https://github.com/moby/buildkit/releases/tag/v0.11.4)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.3...v0.11.4)

https://hub.docker.com/r/moby/buildkit

##### Notable changes:

##### This release contains two security fixes.

-   Fix the issue where credentials inlined to Git URLs could end up in provenance attestation https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc

-   Containerd has been updated to 1.6.18 , fixing issue with supplementary groups not being set up properly https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p [#&#8203;3651](https://github.com/moby/buildkit/issues/3651)

##### Other updates

-   Fix possible panic with writing annotations [#&#8203;3670](https://github.com/moby/buildkit/issues/3670)
-   Fix possible panic with passing nil frontend input [#&#8203;3659](https://github.com/moby/buildkit/issues/3659)
-   Fix file capabilities in merged snapshots by changing chown order [#&#8203;3671](https://github.com/moby/buildkit/issues/3671)

### [`v0.11.3`](https://github.com/moby/buildkit/releases/tag/v0.11.3)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.2...v0.11.3)

Welcome to the 0.11.3 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable Changes

-   Builtin Dockerfile frontend updated to v1.5.2
-   Fix not mounting optional secrets missing from build requests [#&#8203;3561](https://github.com/moby/buildkit/issues/3561)
-   Fix an issue with Github cache backend that could cause invalid range requests [#&#8203;3618](https://github.com/moby/buildkit/issues/3618)
-   Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 [#&#8203;3605](https://github.com/moby/buildkit/issues/3605)
-   Fix issues with missing layer metadata in SBOMs in latest releases [#&#8203;3594](https://github.com/moby/buildkit/issues/3594)
-   Fix possible "digest not found" error on exporting build results [#&#8203;3566](https://github.com/moby/buildkit/issues/3566)
-   Make sure timezones are dropped on handling `SOURCE_DATE_EPOCH` [#&#8203;3559](https://github.com/moby/buildkit/issues/3559)

##### Dependency Changes

-   **github.com/containerd/containerd**  [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9) -> v1.6.16

Previous release can be found at [v0.11.2](https://github.com/moby/buildkit/releases/tag/v0.11.2)

### [`v0.11.2`](https://github.com/moby/buildkit/releases/tag/v0.11.2)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.1...v0.11.2)

Welcome to the 0.11.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Update containerd patches to fix regression in handling push errors [#&#8203;3531](https://github.com/moby/buildkit/issues/3531)
-   Multiple fixes for History API [#&#8203;3530](https://github.com/moby/buildkit/issues/3530)
-   Fix issue with parallel build requests using local cache imports [#&#8203;3493](https://github.com/moby/buildkit/issues/3493)

##### Dependency Changes

-   **github.com/containerd/containerd**  v1.6.14 -> [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9)
-   **github.com/pelletier/go-toml**      v1.9.4 -> v1.9.5

Previous release can be found at [v0.11.1](https://github.com/moby/buildkit/releases/tag/v0.11.1)

### [`v0.11.1`](https://github.com/moby/buildkit/releases/tag/v0.11.1)

[Compare Source](https://github.com/moby/buildkit/compare/v0.11.0...v0.11.1)

Welcome to the 0.11.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

##### Notable changes

-   Builtin Dockerfile frontend has been updated to [1.5.1](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.1), fixing possible panic in certain warning condition [#&#8203;3505](https://github.com/moby/buildkit/issues/3505)
-   Fix possible hang when closing down the SSH forwarding socket in v0.11.0 [#&#8203;3506](https://github.com/moby/buildkit/issues/3506)
-   Fix typo in an environment variable used to configure OpenTelemetry endpoints [#&#8203;3508](https://github.com/moby/buildkit/issues/3508)

</details>

<details>
<summary>opencontainers/image-spec</summary>

### [`v1.1.0`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0)

[Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc6...v1.1.0)

Vote Passed  `[+7-0]`  - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag
**Release PR** : https://github.com/opencontainers/image-spec/pull/1161
**Full Changelog**: https://github.com/opencontainers/image-spec/compare/v1.0.2...v1.1.0

Associated Distribution Specification Release - https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.0

### [`v1.1.0-rc6`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc6)

[Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc5...v1.1.0-rc6)

Vote passed \[+6 -0] - https://groups.google.com/a/opencontainers.org/g/dev/c/HOxZlfhr9-o

For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1157

### [`v1.1.0-rc5`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc5)

[Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5)

For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1109

Vote - https://groups.google.com/a/opencontainers.org/g/dev/c/KIwyzExcjZ8

### [`v1.1.0-rc4`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc4)

[Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc3...v1.1.0-rc4)

Vote passed \[+6 -0]: https://groups.google.com/a/opencontainers.org/g/dev/c/gPgzESGb7xs

For changeset and diff please see  - https://github.com/opencontainers/image-spec/pull/1080

</details>

<details>
<summary>rs/zerolog</summary>

### [`v1.32.0`](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0)

[Compare Source](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0)

### [`v1.31.0`](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0)

[Compare Source](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0)

### [`v1.30.0`](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0)

[Compare Source](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0)

### [`v1.29.1`](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1)

[Compare Source](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1)

### [`v1.29.0`](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0)

[Compare Source](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0)

</details>

<details>
<summary>sergi/go-diff</summary>

### [`v1.3.1`](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1)

[Compare Source](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1)

### [`v1.3.0`](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0)

[Compare Source](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0)

</details>

<details>
<summary>sirupsen/logrus</summary>

### [`v1.9.3`](https://github.com/sirupsen/logrus/releases/tag/v1.9.3)

[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3)

-   Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines https://github.com/sirupsen/logrus/commit/f9291a534cac1466d26414fd9e326381cd64ecef (re-apply https://github.com/sirupsen/logrus/pull/1376)
-   Fix panic in Writer https://github.com/sirupsen/logrus/commit/d40e25cd45ed9c6b2b66e6b97573a0413e4c23bd

**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3

### [`v1.9.2`](https://github.com/sirupsen/logrus/releases/tag/v1.9.2)

[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2)

-   Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1

**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2

### [`v1.9.1`](https://github.com/sirupsen/logrus/releases/tag/v1.9.1)

[Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1)

#### What's Changed

-   Fix data race in hooks.test package by [@&#8203;FrancoisWagner](https://github.com/FrancoisWagner) in https://github.com/sirupsen/logrus/pull/1362
-   Add instructions to use different log levels for local and syslog by [@&#8203;tommyblue](https://github.com/tommyblue) in https://github.com/sirupsen/logrus/pull/1372
-   This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by [@&#8203;ozfive](https://github.com/ozfive) in https://github.com/sirupsen/logrus/pull/1376
-   Use text when shows the logrus output by [@&#8203;xieyuschen](https://github.com/xieyuschen) in https://github.com/sirupsen/logrus/pull/1339

#### New Contributors

-   [@&#8203;FrancoisWagner](https://github.com/FrancoisWagner) made their first contribution in https://github.com/sirupsen/logrus/pull/1362
-   [@&#8203;tommyblue](https://github.com/tommyblue) made their first contribution in https://github.com/sirupsen/logrus/pull/1372
-   [@&#8203;ozfive](https://github.com/ozfive) made their first contribution in https://github.com/sirupsen/logrus/pull/1376
-   [@&#8203;xieyuschen](https://github.com/xieyuschen) made their first contribution in https://github.com/sirupsen/logrus/pull/1339

**Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1

</details>

<details>
<summary>spf13/cobra</summary>

### [`v1.8.0`](https://github.com/spf13/cobra/releases/tag/v1.8.0)

[Compare Source](https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0)

#### ✨ Features

-   Support usage as plugin for tools like kubectl by [@&#8203;nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.)
-   Move documentation sources to site/content by [@&#8203;umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1428
-   Add 'one required flag' group by [@&#8203;marevers](https://github.com/marevers) in https://github.com/spf13/cobra/pull/1952 - this includes a new `MarkFlagsOneRequired` API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.
-   Customizable error message prefix by [@&#8203;5ouma](https://github.com/5ouma) in https://github.com/spf13/cobra/pull/2023 - This adds the `SetErrPrefix` and `ErrPrefix` APIs on the `Command` struct to allow for setting a custom prefix for errors
-   feat: add getters for flag completions by [@&#8203;avirtopeanu-ionos](https://github.com/avirtopeanu-ionos) in https://github.com/spf13/cobra/pull/1943
-   Feature: allow running persistent run hooks of all parents by [@&#8203;vkhoroz](https://github.com/vkhoroz) in https://github.com/spf13/cobra/pull/2044
-   Improve API to get flag completion function by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2063

#### 🐛 Bug fixes

-   Fix typo in fish completions by [@&#8203;twpayne](https://github.com/twpayne) in https://github.com/spf13/cobra/pull/1945
-   Fix grammar: 'allows to' by [@&#8203;supertassu](https://github.com/supertassu) in https://github.com/spf13/cobra/pull/1978
-   powershell: escape variable with curly brackets by [@&#8203;Luap99](https://github.com/Luap99) in https://github.com/spf13/cobra/pull/1960
-   Don't complete --help flag when flag parsing disabled by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2061
-   Replace all non-alphanumerics in active help env var program prefix by [@&#8203;scop](https://github.com/scop) in https://github.com/spf13/cobra/pull/1940

#### 🔧 Maintenance

-   build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1971
-   build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1976
-   build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2021
-   build(deps): bump actions/setup-go from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1934
-   build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2047
-   build(deps): bump actions/checkout from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2028
-   command: temporarily disable G602 due to [securego/gosec#&#8203;1005](https://github.com/securego/gosec/issues/1005) by [@&#8203;umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/2022

#### 🧪 Testing & CI/CD

-   test: make fish_completions_test more robust by [@&#8203;branchvincent](https://github.com/branchvincent) in https://github.com/spf13/cobra/pull/1980
-   golangci: enable 'unused' and disable deprecated replaced by it by [@&#8203;umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1983
-   cleanup: minor corrections to unit tests by [@&#8203;JunNishimura](https://github.com/JunNishimura) in https://github.com/spf13/cobra/pull/2003
-   ci: test golang 1.21 by [@&#8203;nunoadrego](https://github.com/nunoadrego) in https://github.com/spf13/cobra/pull/2024
-   Fix linter errors by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2052
-   Add tests for flag completion registration by [@&#8203;marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2053

#### ✏️ Documentation

-   doc: fix typo, Deperecated -> Deprecated by [@&#8203;callthingsoff](https://github.com/callthingsoff) in https://github.com/spf13/cobra/pull/2000
-   Add notes to doc about the execution condition of \*PreRun and \*PostRun functions by [@&#8203;haoming29](https://github.com/haoming29) in https://github.com/spf13/cobra/pull/2041

***

Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

**Full Changelog**: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0

### [`v1.7.0`](https://github.com/spf13/cobra/releases/tag/v1.7.0)

[Compare Source](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0)

##### ✨ Features

-   Allow to preserve ordering of completions in `bash`, `zsh`, `pwsh`, & `fish`: [@&#8203;h4ck3rk3y](https://github.com/h4ck3rk3y) [#&#8203;1903](https://github.com/spf13/cobra/issues/1903)
-   Add support for PowerShell 7.2+ in completions: [@&#8203;oldium](https://github.com/oldium) [#&#8203;1916](https://github.com/spf13/cobra/issues/1916)
-   Allow sourcing zsh completion script: [@&#8203;marckhouzam](https://github.com/marckhouzam) [#&#8203;1917](https://github.com/spf13/cobra/issues/1917)

##### 🐛 Bug fixes

-   Don't remove flag values that match sub-command name: [@&#8203;brianpursley](https://github.com/brianpursley) [#&#8203;1781](https://github.com/spf13/cobra/issues/1781)
-   Fix powershell completions not returning single word: [@&#8203;totkeks](https://github.com/totkeks) [#&#8203;1850](https://github.com/spf13/cobra/issues/1850)
-   Remove masked `template` import variable name: [@&#8203;yashLadha](https://github.com/yashLadha) [#&#8203;1879](https://github.com/spf13/cobra/issues/1879)
-   Correctly detect completions with dash in argument: [@&#8203;oncilla](https://github.com/oncilla) [#&#8203;1817](https://github.com/spf13/cobra/issues/1817)

##### 🧪 Testing & CI/CD

-   Deprecate Go 1.15 in CI: [@&#8203;umarcor](https://github.com/umarcor) [#&#8203;1866](https://github.com/spf13/cobra/issues/1866)
-   Deprecate Go 1.16 in CI: [@&#8203;umarcor](https://github.com/umarcor) [#&#8203;1926](https://github.com/spf13/cobra/issues/1926)
-   Add testing for Go 1.20 in CI: [@&#8203;umarcor](https://github.com/umarcor) [#&#8203;1925](https://github.com/spf13/cobra/issues/1925)
-   Add tests to illustrate unknown flag bug: [@&#8203;brianpursley](https://github.com/brianpursley) [#&#8203;1854](https://github.com/spf13/cobra/issues/1854)

##### 🔧 Maintenance

-   Update main image to better handle dark backgrounds: [@&#8203;Deleplace](https://github.com/Deleplace) and [@&#8203;marckhouzam](https://github.com/marckhouzam) [#&#8203;1883](https://github.com/spf13/cobra/issues/1883)
-   Fix `stale.yaml` mispellings: [@&#8203;enrichman](https://github.com/enrichman) [#&#8203;1863](https://github.com/spf13/cobra/issues/1863)
-   Remove stale bot from GitHub actions: [@&#8203;jpmcb](https://github.com/jpmcb) [#&#8203;1908](https://github.com/spf13/cobra/issues/1908)
-   Add makefile target for installing dependencies: [@&#8203;umarcor](https://github.com/umarcor) [#&#8203;1865](https://github.com/spf13/cobra/issues/1865)
-   Add Sia to projects using Cobra: [@&#8203;mike76-dev](https://github.com/mike76-dev) [#&#8203;1844](https://github.com/spf13/cobra/issues/1844)
-   Add `Vitess` and `Arewefastyet` to projects using cobra: [@&#8203;frouioui](https://github.com/frouioui) [#&#8203;1932](https://github.com/spf13/cobra/issues/1932)
-   Fixup for Kubescape github org: [@&#8203;dwertent](https://github.com/dwertent) [#&#8203;1874](https://github.com/spf13/cobra/issues/1874)
-   Fix route for GitHub workflows badge: [@&#8203;sh-cho](https://github.com/sh-cho) [#&#8203;1884](https://github.com/spf13/cobra/issues/1884)
-   Fixup for GoDoc style documentation: [@&#8203;yashLadha](https://github.com/yashLadha) [#&#8203;1885](https://github.com/spf13/cobra/issues/1885)
-   Various bash scripting improvements for completion: [@&#8203;scop](https://github.com/scop) [#&#8203;1702](https://github.com/spf13/cobra/issues/1702)
-   Add Constellation to projects using Cobra: [@&#8203;datosh](https://github.com/datosh) [#&#8203;1829](https://github.com/spf13/cobra/issues/1829)

##### ✏️ Documentation

-   Add documentation about disabling completion descriptions: [@&#8203;Shihta](https://github.com/Shihta) [#&#8203;1901](https://github.com/spf13/cobra/issues/1901)
-   Improve `MarkFlagsMutuallyExclusive` example in user guide: [@&#8203;janhn](https://github.com/janhn) [#&#8203;1904](https://github.com/spf13/cobra/issues/1904)
-   Update `shell_completions.md`: [@&#8203;gusega](https://github.com/gusega) [#&#8203;1907](https://github.com/spf13/cobra/issues/1907)
-   Update copywrite year: [@&#8203;umarcor](https://github.com/umarcor) [#&#8203;1927](https://github.com/spf13/cobra/issues/1927)
-   Document suggested layout of subcommands: [@&#8203;lcarva](https://github.com/lcarva) [#&#8203;1930](https://github.com/spf13/cobra/issues/1930)
-   Replace deprecated ExactValidArgs with MatchAll in doc: [@&#8203;doniacld](https://github.com/doniacld) [#&#8203;1836](https://github.com/spf13/cobra/issues/1836)

***

This release contains several long running fixes, improvements to powershell completions, and further optimizations for completions.

Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you! 🐍

Full changelog:  https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0

</details>

<details>
<summary>spf13/viper</summary>

### [`v1.18.2`](https://github.com/spf13/viper/releases/tag/v1.18.2)

[Compare Source](https://github.com/spf13/viper/compare/v1.18.1...v1.18.2)

**tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.**

This release fixes a regression that appears in rare circumstances when using `Unmarshal` or `UnmarshalExact` to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the `viper_bind_struct` build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

#### What's Changed

##### Bug Fixes 🐛

-   feat!: hide struct binding behind a feature flag by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1715

**Full Changelog**: https://github.com/spf13/viper/compare/v1.18.1...v1.18.2

### [`v1.18.1`](https://github.com/spf13/viper/releases/tag/v1.18.1)

[Compare Source](https://github.com/spf13/viper/compare/v1.18.0...v1.18.1)

<!-- Release notes generated using configuration in .github/release.yml at v1.18.1 -->

#### What's Changed

##### Bug Fixes 🐛

-   Merge missing struct keys inside UnmarshalExact by [@&#8203;krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1704

**Full Changelog**: https://github.com/spf13/viper/compare/v1.18.0...v1.18.1

### [`v1.18.0`](https://github.com/spf13/viper/releases/tag/v1.18.0)

[Compare Source](https://github.com/spf13/viper/compare/v1.17.0...v1.18.0)

#### Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

##### `AutomaticEnv` works with `Unmarshal`

Previously,  environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#&#8203;761](https://github.com/spf13/viper/issues/761))

[#&#8203;1429](https://github.com/spf13/viper/issues/1429) introduced a solution that solves that issue.

#### What's Changed

##### Enhancements 🚀

-   chore: rename files according to enabled build tags by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1642
-   test: replace ifs with asserts to simplify tests by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1656
-   ci: enable test shuffle and fix tests by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1643
-   fix: gocritic lint issues by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1696

##### Bug Fixes 🐛

-   Implement viper.BindStruct for automatic unmarshalling from environment variables by [@&#8203;krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1429
-   fix isPathShadowedInFlatMap type cast bug by [@&#8203;linuxsong](https://github.com/linuxsong) in https://github.com/spf13/viper/pull/1585

##### Dependency Updates ⬆️

-   build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1661
-   build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1659
-   build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1663
-   build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1686
-   build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1688
-   build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1692
-   build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1690
-   build(deps): bump cachix/install-nix-action from 23 to 24 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1689
-   build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1672
-   build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1691
-   build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1668
-   chore: update dependencies by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1694
-   chore: update crypt by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1701

##### Other Changes

-   Add info about multiple hosts for remote config by [@&#8203;KaymeKaydex](https://github.com/KaymeKaydex) in https://github.com/spf13/viper/pull/1684
-   refactor: drop fsonitfy wrapper by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1693
-   Note Get\* behavior on parse failure by [@&#8203;scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1687
-   fix: godot lint issues by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1657

#### New Contributors

-   [@&#8203;KaymeKaydex](https://github.com/KaymeKaydex) made their first contribution in https://github.com/spf13/viper/pull/1684
-   [@&#8203;krakowski](https://github.com/krakowski) made their first contribution in https://github.com/spf13/viper/pull/1429
-   [@&#8203;linuxsong](https://github.com/linuxsong) made their first contribution in https://github.com/spf13/viper/pull/1585

**Full Changelog**: https://github.com/spf13/viper/compare/v1.17.0...v1.18.0

### [`v1.17.0`](https://github.com/spf13/viper/releases/tag/v1.17.0)

[Compare Source](https://github.com/spf13/viper/compare/v1.16.0...v1.17.0)

#### Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

##### Minimum Go version: 1.19

Viper now requires Go 1.19

This change ensures we can stay up to date with modern practices and dependencies.

##### `log/slog` support **\[BREAKING]**

Viper [v1.11.0](https://github.com/spf13/viper/releases/tag/v1.11.0) added an experimental `Logger` interface to allow custom implementations (besides [jwalterweatherman](https://github.com/spf13/jwalterweatherman)).

In addition, it also exposed an experimental `WithLogger` function allowing to set a custom logger.

This release deprecates that interface in favor of [log/slog](https://pkg.go.dev/log/slog) released in Go 1.21.

> \[!WARNING]
> `WithLogger` accepts an [\*slog.Logger](https://pkg.go.dev/log/slog#Logger) from now on.

To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a [\*golang.org/x/exp/slog.Logger](https://pkg.go.dev/golang.org/x/exp/slog#Logger).

The experimental flag is removed.

##### New finder implementation **\[BREAKING]**

As of this release, Viper uses a new library to look for files, called [locafero](https://github.com/sagikazarmark/locafero).

The new library is better covered by tests and has been built from scratch as a general purpose file finder library.

The implementation is experimental and is hidden behind a `finder` build tag.

> \[!WARNING]
> The `io/fs` based implementation (that used to be hidden behind a `finder` build tag) has been removed.

#### What's Changed

##### Exciting New Features 🎉

-   Add NATS support by [@&#8203;hooksie1](https://github.com/hooksie1) in https://github.com/spf13/viper/pull/1590
-   Add slog support by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1627

##### Enhancements 🚀

-   chore: add local development environment using nix by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1572
-   feat: add func GetEnvPrefix by [@&#8203;baruchiro](https://github.com/baruchiro) in https://github.com/spf13/viper/pull/1565
-   Improve dev env by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1575
-   fix: code optimization by [@&#8203;testwill](https://github.com/testwill) in https://github.com/spf13/viper/pull/1557
-   test: remove not needed testutil.Setenv by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1610
-   new finder library based on afero by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1625
-   refactor: make use of `strings.Cut` by [@&#8203;scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1650

##### Breaking Changes 🛠

-   feat: drop support for Go 1.17 by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1574

##### Dependency Updates ⬆️

-   build(deps): bump mheap/github-action-required-labels from 4 to 5 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1563
-   build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1558
-   build(deps): bump cachix/install-nix-action from 21 to 22 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1573
-   build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1586
-   chore: upgrade crypt by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1589
-   build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1616
-   build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1615
-   build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1614
-   build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1605
-   build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1604
-   build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1593
-   build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1603
-   build(deps): bump cachix/install-nix-action from 22 to 23 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1620
-   chore(deps): update crypt by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1621
-   build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1623
-   Bump minimum Go version to 1.19 by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1626
-   build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1632
-   build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1634
-   build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1641
-   build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1640
-   build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1638
-   build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1648
-   chore(deps): update crypt by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1652

##### Other Changes

-   \[StepSecurity] ci: Harden GitHub Actions by [@&#8203;step-security-bot](https://github.com/step-security-bot) in https://github.com/spf13/viper/pull/1592
-   Add Vitess to list of projects using Viper by [@&#8203;systay](https://github.com/systay) in https://github.com/spf13/viper/pull/1619
-   docs: fix typos in comments by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1609
-   ci: add Go 1.21 to the test matrix by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1622
-   Remove usages of deprecated io/ioutil; simplify viper tests by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1631
-   chore: remove deprecated build tags by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1630
-   refactor: replace 'interface{}' with 'any' by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1646
-   test: refactor asserts by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1644
-   docs: add set subset KV example by [@&#8203;yhliyr](https://github.com/yhliyr) in https://github.com/spf13/viper/pull/1647
-   Make deps fixes by [@&#8203;bersace](https://github.com/bersace) in https://github.com/spf13/viper/pull/1628

#### New Contributors

-   [@&#8203;goldeneggg](https://github.com/goldeneggg) made their first contribution in https://github.com/spf13/viper/pull/1561
-   [@&#8203;baruchiro](https://github.com/baruchiro) made their first contribution in https://github.com/spf13/viper/pull/1565
-   [@&#8203;testwill](https://github.com/testwill) made their first contribution in https://github.com/spf13/viper/pull/1557
-   [@&#8203;step-security-bot](https://github.com/step-security-bot) made their first contribution in https://github.com/spf13/viper/pull/1592
-   [@&#8203;systay](https://github.com/systay) made their first contribution in https://github.com/spf13/viper/pull/1619
-   [@&#8203;alexandear](https://github.com/alexandear) made their first contribution in https://github.com/spf13/viper/pull/1609
-   [@&#8203;hooksie1](https://github.com/hooksie1) made their first contribution in https://github.com/spf13/viper/pull/1590
-   [@&#8203;yhliyr](https://github.com/yhliyr) made their first contribution in https://github.com/spf13/viper/pull/1647
-   [@&#8203;bersace](https://github.com/bersace) made their first contribution in https://github.com/spf13/viper/pull/1628
-   [@&#8203;scop](https://github.com/scop) made their first contribution in https://github.com/spf13/viper/pull/1650

**Full Changelog**: https://github.com/spf13/viper/compare/v1.16.0...v1.17.0

### [`v1.16.0`](https://github.com/spf13/viper/releases/tag/v1.16.0)

[Compare Source](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0)

<!-- Release notes generated using configuration in .github/release.yml at v1.16.0 -->

#### What's Changed

##### Enhancements 🚀

-   Sub parent inheritance by [@&#8203;TaylorOno](https://github.com/TaylorOno) in https://github.com/spf13/viper/pull/1056
-   fix: fix typo by [@&#8203;yquansah](https://github.com/yquansah) in https://github.com/spf13/viper/pull/1523
-   ci: add Go 1.20 to build matrix by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1506
-   extend v.find() to handle stringToInt value types with stringToInt pflag [#&#8203;1435](https://github.com/spf13/viper/issues/1435)  by [@&#8203;vorishirne](https://github.com/vorishirne) in https://github.com/spf13/viper/pull/1462
-   add:viper: allow to disable internal log messages by [@&#8203;burgesQ](https://github.com/burgesQ) in https://github.com/spf13/viper/pull/1483
-   Allow ConfigParseError to unwrap by [@&#8203;andig](https://github.com/andig) in https://github.com/spf13/viper/pull/1433

##### Bug Fixes 🐛

-   fix: time.Duration slice type conversion by [@&#8203;UrbanskiDawid](https://github.com/UrbanskiDawid) in https://github.com/spf13/viper/pull/1498

##### Dependency Updates ⬆️

-   build(deps): bump mheap/github-action-required-labels from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1533
-   build(deps): bump actions/setup-go from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1526
-   build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1519
-   build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.7 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1516
-   build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1515
-   build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1518
-   build(deps): bump github.com/sagikazarmark/crypt from 0.9.0 to 0.10.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1550
-   build(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1551
-   build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1553
-   build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.7 to 2.0.8 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1555

##### Other Changes

-   Update main image to better handle dark background by [@&#8203;Deleplace](https://github.com/Deleplace) in https://github.com/spf13/viper/pull/1532

#### New Contributors

-   [@&#8203;UrbanskiDawid](https://github.com/UrbanskiDawid) made their first contribution in https://github.com/spf13/viper/pull/1498
-   [@&#8203;TaylorOno](https://github.com/TaylorOno) made their first contribution in https://github.com/spf13/viper/pull/1056
-   [@&#8203;yquansah](https://github.com/yquansah) made their first contribution in https://github.com/spf13/viper/pull/1523
-   [@&#8203;Azanul](https://github.com/Azanul) made their first contribution in https://github.com/spf13/viper/pull/1544
-   [@&#8203;Deleplace](https://github.com/Deleplace) made their first contribution in https://github.com/spf13/viper/pull/1532
-   [@&#8203;cfabianski](https://github.com/cfabianski) made their first contribution in https://github.com/spf13/viper/pull/1552
-   [@&#8203;vorishirne](https://github.com/vorishirne) made their first contribution in https://github.com/spf13/viper/pull/1462
-   [@&#8203;burgesQ](https://github.com/burgesQ) made their first contribution in https://github.com/spf13/viper/pull/1483
-   [@&#8203;andig](https://github.com/andig) made their first contribution in https://github.com/spf13/viper/pull/1433

**Full Changelog**: https://github.com/spf13/viper/compare/v1.15.0...v1.16.0

### [`v1.15.0`](https://github.com/spf13/viper/releases/tag/v1.15.0)

[Compare Source](https://github.com/spf13/viper/compare/v1.14.0...v1.15.0)

<!-- Release notes generated using configuration in .github/release.yml at v1.15.0 -->

#### What's Changed

##### Exciting New Features 🎉

-   feat: add multiple endpoints support for remote by [@&#8203;mozartz](https://github.com/mozartz) in https://github.com/spf13/viper/pull/1464

##### Enhancements 🚀

-   Add DocBlock to WatchConfig by [@&#8203;glebik000](https://github.com/glebik000) in https://github.com/spf13/viper/pull/1467

##### Breaking Changes 🛠

-   Drop YAML v2 and TOML v1 by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1493
-   Drop support for Go 1.16 by [@&#8203;sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1494

##### Dependency Updates ⬆️

-   build(deps): bump github.com/spf13/afero from 1.9.2 to 1.9.3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1465
-   build(deps): bump github.com/magiconair/properties from 1.8.6 to 1.8.7 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1475
-   build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.5 to 2.0.6 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1466
-   build(deps): bump mheap/github-action-required-labels from 2 to 3 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1482
-   build(deps): bump github.com/subosito/gotenv from 1.4.1 to 1.4.2 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1488
-   build(deps): bump github.com/sagikazarmark/crypt from 0.8.0 to 0.9.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1490

#### New Contributors

-   [@&#8203;choar816](https://github.com/choar816) made their first contribution in https://github.com/spf13/viper/pull/1481
-   [@&#8203;lol768](https://github.com/lol768) made their first contribution in https://github.com/spf13/viper/pull/1485
-   [@&#8203;mozartz](https://github.com/mozartz) made their first contribution in https://github.com/spf13/viper/pull/1464
-   [@&#8203;glebik000](https://github.com/glebik000) made their first contribution in https://github.com/spf13/viper/pull/1467

**Full Changelog**: https://github.com/spf13/viper/compare/v1.14.0...v1.15.0

</details>

<details>
<summary>stretchr/testify</summary>

### [`v1.9.0`](https://github.com/stretchr/testify/releases/tag/v1.9.0)

[Compare Source](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0)

#### What's Changed

-   Fix Go modules version by [@&#8203;SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1394
-   Document that require is not safe to call in created goroutines by [@&#8203;programmer04](https://github.com/programmer04) in https://github.com/stretchr/testify/pull/1392
-   Remove myself from MAINTAINERS.md by [@&#8203;mvdkleijn](https://github.com/mvdkleijn) in https://github.com/stretchr/testify/pull/1367
-   Correct spelling/grammar by [@&#8203;echarrod](https://github.com/echarrod) in https://github.com/stretchr/testify/pull/1389
-   docs: Update URLs in README by [@&#8203;davidjb](https://github.com/davidjb) in https://github.com/stretchr/testify/pull/1349
-   Update mockery link to Github Pages in README by [@&#8203;LandonTClipp](https://github.com/LandonTClipp) in https://github.com/stretchr/testify/pull/1346
-   docs: Fix typos in tests and comments by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1410
-   CI: tests from go1.17 by [@&#8203;SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1409
-   Fix adding ? when no values passed by [@&#8203;lesichkovm](https://github.com/lesichkovm) in https://github.com/stretchr/testify/pull/1320
-   codegen: use standard header for generated files by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1406
-   mock: AssertExpectations log reason only on failure by [@&#8203;hikyaru-suzuki](https://github.com/hikyaru-suzuki) in https://github.com/stretchr/testify/pull/1360
-   assert: fix flaky TestNeverTrue by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1417
-   README: fix typos "set up" vs "setup" by [@&#8203;ossan-dev](https://github.com/ossan-dev) in https://github.com/stretchr/testify/pull/1428
-   mock: move regexp compilation outside of `Called` by [@&#8203;aud10slave](https://github.com/aud10slave) in https://github.com/stretchr/testify/pull/631
-   assert: refactor internal func getLen() by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1445
-   mock: deprecate type AnythingOfTypeArgument ([#&#8203;1434](https://github.com/stretchr/testify/issues/1434)) by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1441
-   Remove no longer needed assert.canConvert by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1470
-   assert: ObjectsAreEqual: use time.Equal for time.Time types by [@&#8203;tscales](https://github.com/tscales) in https://github.com/stretchr/testify/pull/1464
-   Bump actions/checkout from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1466
-   Bump actions/setup-go from 3.2.0 to 4.1.0 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1451
-   fix: make EventuallyWithT concurrency safe by [@&#8203;czeslavo](https://github.com/czeslavo) in https://github.com/stretchr/testify/pull/1395
-   assert: fix httpCode and HTTPBody occur panic when http.Handler read Body by [@&#8203;hidu](https://github.com/hidu) in https://github.com/stretchr/testify/pull/1484
-   assert.EqualExportedValues: fix handling of arrays by [@&#8203;zrbecker](https://github.com/zrbecker) in https://github.com/stretchr/testify/pull/1473
-   .github: use latest Go versions by [@&#8203;kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1489
-   assert: Deprecate EqualExportedValues by [@&#8203;HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1488
-   suite: refactor test assertions by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1474
-   suite: fix SetupSubTest and TearDownSubTest execution order by [@&#8203;linusbarth](https://github.com/linusbarth) in https://github.com/stretchr/testify/pull/1471
-   docs: Fix deprecation comments for http package by [@&#8203;alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1335
-   Add map support doc comments to Subset and NotSubset by [@&#8203;jedevc](https://github.com/jedevc) in https://github.com/stretchr/testify/pull/1306
-   TestErrorIs/TestNotErrorIs: check error message contents by [@&#8203;craig65535](https://github.com/craig65535) in https://github.com/stretchr/testify/pull/1435
-   suite: fix subtest names (fix [#&#8203;1501](https://github.com/stretchr/testify/issues/1501)) by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1504
-   assert: improve unsafe.Pointer tests by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1505
-   assert: simplify isNil implementation by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1506
-   assert.InEpsilonSlice: fix expected/actual order and other improvements by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1483
-   Fix dependency cycle with objx [#&#8203;1292](https://github.com/stretchr/testify/issues/1292) by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1453
-   mock: refactor TestIsArgsEqual by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1444
-   mock: optimize argument matching checks by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1416
-   assert: fix TestEventuallyTimeout by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1412
-   CI: add go 1.21 in GitHub Actions by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1450
-   suite: fix recoverAndFailOnPanic to report test failure at the right location by [@&#8203;dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1502
-   Update maintainers by [@&#8203;brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1533
-   assert: Fix EqualValues to handle overflow/underflow by [@&#8203;arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1531
-   assert: better formatting for Len() error by [@&#8203;kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1485
-   Ensure AssertExpectations does not fail in skipped tests by [@&#8203;ianrose14](https://github.com/ianrose14) in https://github.com/stretchr/testify/pull/1331
-   suite: fix deadlock in suite.Require()/Assert() by [@&#8203;arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1535
-   Revert "assert: ObjectsAreEqual: use time.Equal for time.Time type" by [@&#8203;brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1537
-   \[chore] Add issue templates by [@&#8203;arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1538
-   Update the build status badge by [@&#8203;brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1540
-   Update Github workflows setup-go to V5 by [@&#8203;hendrywiranto](https://github.com/hendrywiranto) in https://github.com/stretchr/testify/pull/1545
-   Support Pointer to Struct in EqualExportedValues by [@&#8203;Lucaber](https://github.com/Lucaber) in https://github.com/stretchr/testify/pull/1517
-   README: drop link to gorc by [@&#8203;guettli](https://github.com/guettli) in https://github.com/stretchr/testify/pull/1248
-   http_assertions: honour the msgAndArgs provided with each assertion by [@&#8203;arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1548
-   fix typos in comments and tests by [@&#8203;ccoVeille](https://github.com/ccoVeille) in https://github.com/stretchr/testify/pull/1247
-   Include the auto-release notes in releases by [@&#8203;brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1550
-   Add `NotImplements` and variants by [@&#8203;hslatman](https://github.com/hslatman) in https://github.com/stretchr/testify/pull/1385
-   Add support to compare uintptr by [@&#8203;bogdandrutu](https://github.com/bogdandrutu) in https://github.com/stretchr/testify/pull/1339
-   build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2 by [@&#8203;dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1552

#### New Contributors

-   [@&#8203;SuperQ](https://github.com/SuperQ) made their first contribution in https://github.com/stretchr/testify/pull/1394
-   [@&#8203;programmer04](https://github.com/programmer04) made their first contribution in https://github.com/stretchr/testify/pull/1392
-   [@&#8203;echarrod](https://github.com/echarrod) made their first contribution in https://github.com/stretchr/testify/pull/1389
-   [@&#8203;davidjb](https://github.com/davidjb) made their first contribution in https://github.com/stretchr/testify/pull/1349
-   [@&#8203;LandonTClipp](https://github.com/LandonTClipp) made their first contribution in https://github.com/stretchr/testify/pull/1346
-   [@&#8203;alexandear](https://github.com/alexandear) made their first contribution in https://github.com/stretchr/testify/pull/1410
-   [@&#8203;lesichkovm](https://github.com/lesichkovm) made their first contribution in https://github.com/stretchr/testify/pull/1320
-   [@&#8203;dolmen](https://github.com/dolmen) made their first contribution in https://github.com/stretchr/testify/pull/1406
-   [@&#8203;hikyaru-suzuki](https://github.com/hikyaru-suzuki) made their first contribution in https://github.com/stretchr/testify/pull/1360
-   [@&#8203;ossan-dev](https://github.com/ossan-dev) made their first contribution in https://github.com/stretchr/testify/pull/1428
-   [@&#8203;aud10slave](https://github.com/aud10slave) made their first contribution in https://github.com/stretchr/testify/pull/631
-   [@&#8203;tscales](https://github.com/tscales) made their first contribution in https://github.com/stretchr/testify/pull/1464
-   [@&#8203;czeslavo](https://github.com/czeslavo) made their first contribution in https://github.com/stretchr/testify/pull/1395
-   [@&#8203;hidu](https://github.com/hidu) made their first contribution in https://github.com/stretchr/testify/pull/1484
-   [@&#8203;zrbecker](https://github.com/zrbecker) made their first contribution in https://github.com/stretchr/testify/pull/1473
-   [@&#8203;kevinburkesegment](https://github.com/kevinburkesegment) made their first contribution in https://github.com/stretchr/testify/pull/1489
-   [@&#8203;linusbarth](https://github.com/linusbarth) made their first contribution in https://github.com/stretchr/testify/pull/1471
-   [@&#8203;jedevc](https://github.com/jedevc) made their first contribution in https://github.com/stretchr/testify/pull/1306
-   [@&#8203;craig65535](https://github.com/craig65535) made their first contribution in https://github.com/stretchr/testify/pull/1435
-   [@&#8203;arjunmahishi](https://github.com/arjunmahishi) made their first contribution in https://github.com/stretchr/testify/pull/1531
-   [@&#8203;ianrose14](https://github.com/ianrose14) made their first contribution in https://github.com/stretchr/testify/pull/1331
-   [@&#8203;hendrywiranto](https://github.com/hendrywiranto) made their first contribution in https://github.com/stretchr/testify/pull/1545
-   [@&#8203;Lucaber](https://github.com/Lucaber) made their first contribution in https://github.com/stretchr/testify/pull/1517
-   [@&#8203;guettli](https://github.com/guettli) made their first contribution in https://github.com/stretchr/testify/pull/1248
-   [@&#8203;ccoVeille](https://github.com/ccoVeille) made their first contribution in https://github.com/stretchr/testify/pull/1247
-   [@&#8203;hslatman](https://github.com/hslatman) made their first contribution in https://github.com/stretchr/testify/pull/1385
-   [@&#8203;bogdandrutu](https://github.com/bogdandrutu) made their first contribution in https://github.com/stretchr/testify/pull/1339

**Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0

### [`v1.8.4`](https://github.com/stretchr/testify/releases/tag/v1.8.4)

[Compare Source](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4)

#### What's Changed

-   Create GitHub release when new release tag is pushed by [@&#8203;aldas](https://github.com/aldas) in https://github.com/stretchr/testify/pull/1354

#### New Contributors

-   [@&#8203;aldas](https://github.com/aldas) made their first contribution in https://github.com/stretchr/testify/pull/1354

**Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4

### [`v1.8.3`](https://github.com/stretchr/testify/releases/tag/v1.8.3)

[Compare Source](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3)

#### What's Changed

-   Compare public elements of struct by [@&#8203;mchlp](https://github.com/mchlp) in https://github.com/stretchr/testify/pull/1309
-   assert: fix error message formatting for NotContains by [@&#8203;wwade](https://github.com/wwade) in https://github.com/stretchr/testify/pull/1362
-   allow testing for functional options by [@&#8203;nbaztec](https://github.com/nbaztec) in https://github.com/stretchr/testify/pull/1023
-   add EventuallyWithT assertion by [@&#8203;tobikris](https://github.com/tobikris) in https://github.com/stretchr/testify/pull/1264
-   EqualExportedValues: Handle nested pointer, slice and map fields by [@&#8203;HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1379

#### New Contributors

-   [@&#8203;mchlp](https://github.com/mchlp) made their first contribution in https://github.com/stretchr/testify/pull/1309
-   [@&#8203;wwade](https://github.com/wwade) made their first contribution in https://github.com/stretchr/testify/pull/1362
-   [@&#8203;nbaztec](https://github.com/nbaztec) made their first contribution in https://github.com/stretchr/testify/pull/1023
-   [@&#8203;tobikris](https://github.com/tobikris) made their first contribution in https://github.com/stretchr/testify/pull/1264

**Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3

</details>

<details>
<summary>grpc/grpc-go</summary>

### [`v1.63.0`](https://github.com/grpc/grpc-go/releases/tag/v1.63.0): Release 1.63.0

[Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.2...v1.63.0)

### Behavior Changes

-   grpc: Return canonical target string from `resolver.Address.String()` (experimental) ([#&#8203;6923](https://github.com/grpc/grpc-go/issues/6923))
-   client & server: when using write buffer pooling, use input value for buffer size instead of size\*2 ([#&#8203;6983](https://github.com/grpc/grpc-go/issues/6983))
    -   Special Thanks: [@&#8203;raghav-stripe](https://github.com/raghav-stripe)

### New Features

-   grpc: add `ClientConn.CanonicalTarget()` to return the canonical target string. ([#&#8203;7006](https://github.com/grpc/grpc-go/issues/7006))
-   xds: implement LRS named metrics support ([gRFC A64](https://github.com/grpc/proposal/blob/master/A64-lrs-custom-metrics.md)) ([#&#8203;7027](https://github.com/grpc/grpc-go/issues/7027))
    -   Special Thanks: [@&#8203;danielzhaotongliu](https://github.com/danielzhaotongliu)
-   grpc: introduce `grpc.NewClient` to allow users to create new clients in idle mode and with "dns" as the default resolver ([#&#8203;7010](https://github.com/grpc/grpc-go/issues/7010))
    -   Special Thanks: [@&#8203;bruuuuuuuce](https://github.com/bruuuuuuuce)

### API Changes

-   grpc: stabilize experimental method `ClientConn.Target()` ([#&#8203;7006](https://github.com/grpc/grpc-go/issues/7006))

### Bug Fixes

-   xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server ([#&#8203;7026](https://github.com/grpc/grpc-go/issues/7026))
-   server: Fix some errors returned by a server when using a `grpc.Server` as an `http.Handler` with the Go stdlib HTTP server ([#&#8203;6989](https://github.com/grpc/grpc-go/issues/6989))
-   resolver/dns: add `SetResolvingTimeout` to allow configuring the DNS resolver's global timeout ([#&#8203;6917](https://github.com/grpc/grpc-go/issues/6917))
    -   Special Thanks: [@&#8203;and1truong](https://github.com/and1truong)
-   Set the security level of Windows named pipes to NoSecurity ([#&#8203;6956](https://github.com/grpc/grpc-go/issues/6956))
    -   Special Thanks: [@&#8203;irsl](https://github.com/irsl)

### [`v1.62.2`](https://github.com/grpc/grpc-go/releases/tag/v1.62.2): Release 1.62.2

[Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.62.2)

### Dependencies

-   Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644)

### [`v1.62.1`](https://github.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1

[Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1)

### Bug Fixes

-   xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#&#8203;6997](https://github.com/grpc/grpc-go/issues/6997))
-   server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#&#8203;6766](https://github.com/grpc/grpc-go/issues/6766))
    -   Special Thanks: [@&#8203;hueypark](https://github.com/hueypark)
-   grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#&#8203;6766](https://github.com/grpc/grpc-go/is

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC45Ny40IiwidXBkYXRlZEluVmVyIjoiMzQuMTYwLjAifQ==-->

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@svgr/webpack](https://react-svgr.com) ([source](https://github.com/gregberge/svgr)) | dependencies | major | [`6.5.1` -> `8.1.0`](https://renovatebot.com/diffs/npm/@svgr%2fwebpack/6.5.1/8.1.0) | | [actions/add-to-project](https://github.com/actions/add-to-project) | action | major | `v0.4.0` -> `v1.0.0` | | [actions/checkout](https://github.com/actions/checkout) | action | major | `v3` -> `v4` | | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v3` -> `v5` | | [actions/stale](https://github.com/actions/stale) | action | major | `v7` -> `v9` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v3` -> `v4` | | [amplitude-js](https://github.com/amplitude/amplitude-javascript) | dependencies | patch | [`8.21.3` -> `8.21.9`](https://renovatebot.com/diffs/npm/amplitude-js/8.21.3/8.21.9) | | [bats](https://github.com/bats-core/bats-core) | devDependencies | minor | [`1.8.2` -> `1.11.0`](https://renovatebot.com/diffs/npm/bats/1.8.2/1.11.0) | | [clsx](https://github.com/lukeed/clsx) | dependencies | major | [`1.2.1` -> `2.1.0`](https://renovatebot.com/diffs/npm/clsx/1.2.1/2.1.0) | | [concurrently](https://github.com/open-cli-tools/concurrently) | devDependencies | major | [`7.6.0` -> `8.2.2`](https://renovatebot.com/diffs/npm/concurrently/7.6.0/8.2.2) | | [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime) | action | major | `v2` -> `v3` | | [cuelang.org/go](https://github.com/cue-lang/cue) | require | minor | `v0.4.3` -> `v0.8.1` | | [cypress](https://cypress.io) ([source](https://github.com/cypress-io/cypress)) | devDependencies | major | [`12.3.0` -> `13.7.2`](https://renovatebot.com/diffs/npm/cypress/12.3.0/13.7.2) | | [cypress-localstorage-commands](https://github.com/javierbrea/cypress-localstorage-commands) | devDependencies | patch | [`2.2.2` -> `2.2.5`](https://renovatebot.com/diffs/npm/cypress-localstorage-commands/2.2.2/2.2.5) | | [dagger/dagger-for-github](https://github.com/dagger/dagger-for-github) | action | major | `v3` -> `v5` | | [docusaurus-plugin-sass](https://github.com/rlamana/docusaurus-plugin-sass) | dependencies | patch | [`0.2.3` -> `0.2.5`](https://renovatebot.com/diffs/npm/docusaurus-plugin-sass/0.2.3/0.2.5) | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | require | patch | `v0.6.0` -> `v0.6.1` | | [github.com/containerd/console](https://github.com/containerd/console) | require | patch | `v1.0.3` -> `v1.0.4` | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | require | minor | `v1.6.15` -> `v1.7.15` | | [github.com/docker/buildx](https://github.com/docker/buildx) | require | minor | `v0.10.0` -> `v0.13.1` | | [github.com/docker/distribution](https://github.com/docker/distribution) | require | patch | `v2.8.1+incompatible` -> `v2.8.3` | | [github.com/docker/docker](https://github.com/docker/docker) | replace | major | `v20.10.22+incompatible` -> `v26.0.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | require | minor | `v5.5.2` -> `v5.12.0` | | [github.com/google/uuid](https://github.com/google/uuid) | require | minor | `v1.3.0` -> `v1.6.0` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | require | minor | `v0.11.0` -> `v0.13.1` | | [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | require | patch | `v1.1.0-rc2.0.20221116213201-188d3a4e1942` -> `v1.1.0` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | require | minor | `v1.28.0` -> `v1.32.0` | | [github.com/sergi/go-diff](https://github.com/sergi/go-diff) | require | minor | `v1.2.0` -> `v1.3.1` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | require | patch | `v1.9.0` -> `v1.9.3` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | require | minor | `v1.6.1` -> `v1.8.0` | | [github.com/spf13/viper](https://github.com/spf13/viper) | require | minor | `v1.14.0` -> `v1.18.2` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | require | minor | `v1.8.2` -> `v1.9.0` | | [github.com/tonistiigi/fsutil](https://github.com/tonistiigi/fsutil) | require | digest | `fb43384` -> `7525a1a` | | [github.com/tonistiigi/vt100](https://github.com/tonistiigi/vt100) | require | digest | `8066bb9` -> `f9a4f7e` | | golang | final | minor | `1.19.4-alpine` -> `1.22.2-alpine` | | golang.org/x/mod | require | minor | `v0.7.0` -> `v0.17.0` | | golang.org/x/sync | require | minor | `v0.1.0` -> `v0.7.0` | | golang.org/x/term | require | minor | `v0.4.0` -> `v0.19.0` | | golang.org/x/time | require | minor | `v0.3.0` -> `v0.5.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | require | minor | `v1.51.0` -> `v1.63.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v4` -> `v5` | | [lewagon/wait-on-check-action](https://github.com/lewagon/wait-on-check-action) | action | minor | `v1.2.0` -> `v1.3.4` | | [react-social-login-buttons](https://github.com/MichalSzorad/react-social-login-buttons#readme) ([source](https://github.com/michaeljscript/react-social-login-buttons)) | dependencies | major | [`3.6.1` -> `4.1.0`](https://renovatebot.com/diffs/npm/react-social-login-buttons/3.6.1/4.1.0) | | [remark-code-import](https://github.com/kevin940726/remark-code-import) | dependencies | minor | [`1.1.1` -> `1.2.0`](https://renovatebot.com/diffs/npm/remark-code-import/1.1.1/1.2.0) | | [sass](https://github.com/sass/dart-sass) | dependencies | minor | [`1.57.1` -> `1.74.1`](https://renovatebot.com/diffs/npm/sass/1.57.1/1.74.1) | | [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | devDependencies | major | [`1.15.2` -> `2.0.3`](https://renovatebot.com/diffs/npm/start-server-and-test/1.15.2/2.0.3) | --- ### Release Notes <details> <summary>gregberge/svgr</summary> ### [`v8.1.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#810-httpsgithubcomgregbergesvgrcomparev801v810-2023-08-15) [Compare Source](https://github.com/gregberge/svgr/compare/v8.0.1...v8.1.0) ##### Bug Fixes - **cli:** fix default dimensions, prettier & svgo ([571d5c8](https://github.com/gregberge/svgr/commit/571d5c8bd18bc13c12eeb27a9052fa065aeb012e)) - **config:** prefer cli config over rc config ([#845](https://github.com/gregberge/svgr/issues/845)) ([8b97248](https://github.com/gregberge/svgr/commit/8b972484266c45c7f8e4acce4fe2930a024fb4bc)) - **react-native:** fix duplicate import ([#894](https://github.com/gregberge/svgr/issues/894)) ([e612b6a](https://github.com/gregberge/svgr/commit/e612b6a1a4e822178f1e15b82bd2991bf1e84cec)) ##### Features - **esm:** add support for svgo.config.cjs ([#879](https://github.com/gregberge/svgr/issues/879)) ([ae91e2e](https://github.com/gregberge/svgr/commit/ae91e2eacbe1156480c96219b993000eb1e7b9bf)) #### [8.0.1](https://github.com/gregberge/svgr/compare/v8.0.0...v8.0.1) (2023-05-09) ##### Bug Fixes - fix peer dependencies ([2e05255](https://github.com/gregberge/svgr/commit/2e0525546eb21aa4bb790aa4284f4fe34f96d6b9)) ### [`v8.0.1`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#801-httpsgithubcomgregbergesvgrcomparev800v801-2023-05-09) [Compare Source](https://github.com/gregberge/svgr/compare/v8.0.0...v8.0.1) ##### Bug Fixes - fix peer dependencies ([2e05255](https://github.com/gregberge/svgr/commit/2e0525546eb21aa4bb790aa4284f4fe34f96d6b9)) ### [`v8.0.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#800-httpsgithubcomgregbergesvgrcomparev700v800-2023-05-09) [Compare Source](https://github.com/gregberge/svgr/compare/v7.0.0...v8.0.0) ##### Bug Fixes - parseObject error causes website broken ([05f2946](https://github.com/gregberge/svgr/commit/05f2946d90b194eac17d51ca0562d13e9ed0c995)) ##### Features - add snake_case filename option ([#857](https://github.com/gregberge/svgr/issues/857)) ([428b0c7](https://github.com/gregberge/svgr/commit/428b0c7f4c5205bb67ae3e9e7c7e819ec3fc03ba)) - make index template more flexible ([#861](https://github.com/gregberge/svgr/issues/861)) ([003009c](https://github.com/gregberge/svgr/commit/003009c7b234cfe66686b629d3251edb8d46c759)) - **types:** change `SVGProps` from import to import type ([#853](https://github.com/gregberge/svgr/issues/853)) ([095f021](https://github.com/gregberge/svgr/commit/095f0216288ccb5b96a75f154fe3aead074bfa99)) ##### BREAKING CHANGES - index template now receives an array of objects containing both the created component path (`path`) and the original SVG path (`originalPath`) ### [`v7.0.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#700-httpsgithubcomgregbergesvgrcomparev651v700-2023-03-24) [Compare Source](https://github.com/gregberge/svgr/compare/v6.5.1...v7.0.0) ##### Features - allow specifying `jsxRuntimeImport` in config ([86bb86f](https://github.com/gregberge/svgr/commit/86bb86f47748618f729742e56199355d9c0bc518)), closes [#801](https://github.com/gregberge/svgr/issues/801) [#801](https://github.com/gregberge/svgr/issues/801) - remove [@svgr/plugin-jsx](https://github.com/svgr/plugin-jsx) from core ([a0f078d](https://github.com/gregberge/svgr/commit/a0f078db13936800a32c14ade08b670a14b5a886)) - upgrade to svgo v3 ([#798](https://github.com/gregberge/svgr/issues/798)) ([21b6209](https://github.com/gregberge/svgr/commit/21b6209ef34c51cc0313901f31061afe587ab29b)) ##### BREAKING CHANGES - plugin-jsx is no longer included by default in core - svgr now requires Node.js v14+ #### [6.5.1](https://github.com/gregberge/svgr/compare/v6.5.0...v6.5.1) (2022-10-27) ##### Reverts - Revert "feat(a11y): add attribute role="img" to the svg element ([#750](https://github.com/gregberge/svgr/issues/750))" ([1382232](https://github.com/gregberge/svgr/commit/138223284ad9aebc5bbf94ed3ae7174a66dbc7f5)), closes [#750](https://github.com/gregberge/svgr/issues/750) </details> <details> <summary>actions/add-to-project</summary> ### [`v1.0.0`](https://github.com/actions/add-to-project/releases/tag/v1.0.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.6.1...v1.0.0) #### Summary This release promotes `actions/add-to-projects` to a major version 1 and marks the public API stable. #### What's Changed - build(deps-dev): bump eslint-plugin-github from 4.10.0 to 4.10.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/532 - build(deps-dev): bump prettier from 3.0.3 to 3.2.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/531 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.0 to 0.38.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/530 - build(deps-dev): bump ts-jest from 29.1.1 to 29.1.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/528 - build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/533 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.7 to 29.5.12 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/534 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.9.1 to 7.3.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/529 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.0.1 to 7.4.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/536 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.3.1 to 7.4.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/535 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.6.1...v1.0.0 ### [`v0.6.1`](https://github.com/actions/add-to-project/releases/tag/v0.6.1) [Compare Source](https://github.com/actions/add-to-project/compare/v0.6.0...v0.6.1) #### What's Changed - build(deps-dev): bump eslint-plugin-prettier from 5.0.0 to 5.1.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/514 - build(deps-dev): bump concurrently from 8.2.1 to 8.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/498 - build(deps-dev): bump eslint from 8.49.0 to 8.57.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/520 - build(deps): bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/507 - build(deps): bump actions/upload-artifact from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/508 - Improve output of `check-dist` workflow by [@camchenry](https://github.com/camchenry) in https://github.com/actions/add-to-project/pull/521 - build(deps): bump [@actions/core](https://github.com/actions/core) from 1.10.0 to 1.10.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/470 - build(deps): bump [@actions/github](https://github.com/actions/github) from 5.1.1 to 6.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/500 - build(deps): bump actions/setup-node from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/493 - Update readme and prepare release by [@talune](https://github.com/talune) in https://github.com/actions/add-to-project/pull/523 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.60 to 16.18.91 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/527 - build(deps-dev): bump eslint-plugin-jest from 27.6.0 to 27.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/525 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.7.0 to 7.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/524 - build(deps-dev): bump typescript from 5.2.2 to 5.4.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/526 #### New Contributors - [@camchenry](https://github.com/camchenry) made their first contribution in https://github.com/actions/add-to-project/pull/521 - [@talune](https://github.com/talune) made their first contribution in https://github.com/actions/add-to-project/pull/523 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.6.0...v0.6.1 ### [`v0.6.0`](https://github.com/actions/add-to-project/releases/tag/v0.6.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.5.0...v0.6.0) #### What's Changed - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.57.0 to 5.57.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/357 - build(deps-dev): bump eslint from 8.37.0 to 8.38.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/359 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.57.1 to 5.58.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/360 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.58.0 to 5.59.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/362 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.23 to 16.18.24 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/363 - build(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/365 - build(deps-dev): bump prettier from 2.8.7 to 2.8.8 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/366 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.24 to 16.18.25 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/368 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.0 to 5.59.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/371 - set [@types/node](https://github.com/types/node) version to latest v16 release by [@shiftkey](https://github.com/shiftkey) in https://github.com/actions/add-to-project/pull/373 - build(deps-dev): bump eslint from 8.39.0 to 8.40.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/375 - Added `reopened` event by [@LoneDev6](https://github.com/LoneDev6) in https://github.com/actions/add-to-project/pull/370 - Add details about using a classic PAT by [@LL782](https://github.com/LL782) in https://github.com/actions/add-to-project/pull/356 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.26 to 16.18.27 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/377 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.2 to 5.59.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/376 - chore: document outputs in action manifest by [@EndBug](https://github.com/EndBug) in https://github.com/actions/add-to-project/pull/381 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.27 to 16.18.29 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/379 - build(deps-dev): bump eslint from 8.40.0 to 8.41.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/386 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.29 to 16.18.32 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/385 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.5 to 5.59.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/387 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.32 to 16.18.33 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/388 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.33 to 16.18.34 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/390 - build(deps-dev): bump concurrently from 8.0.1 to 8.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/392 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.7 to 5.59.8 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/391 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.8 to 5.59.9 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/396 - build(deps-dev): bump eslint-plugin-github from 4.7.0 to 4.8.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/393 - build(deps-dev): bump eslint from 8.41.0 to 8.42.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/395 - build(deps-dev): bump concurrently from 8.1.0 to 8.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/397 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.9 to 5.59.11 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/400 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.34 to 16.18.36 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/399 - build(deps-dev): bump eslint from 8.42.0 to 8.43.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/402 - build(deps-dev): bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/403 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.11 to 5.60.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/405 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.60.0 to 5.61.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/410 - build(deps-dev): bump eslint from 8.43.0 to 8.44.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/409 - build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/414 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.36 to 16.18.38 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/408 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.61.0 to 5.62.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/415 - build(deps-dev): bump eslint-plugin-jest from 27.2.2 to 27.2.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/416 - build(deps-dev): bump eslint-plugin-github from 4.8.0 to 4.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/417 - build(deps-dev): bump eslint from 8.44.0 to 8.45.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/418 - build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/420 - build(deps-dev): bump eslint-plugin-github from 4.9.0 to 4.9.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/419 - build(deps-dev): bump eslint-plugin-github from 4.9.1 to 4.9.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/421 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.38 to 16.18.39 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/423 - build(deps-dev): bump prettier from 2.8.8 to 3.0.0 (and a few others) by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/412 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/426 - build(deps-dev): bump eslint from 8.45.0 to 8.46.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/428 - build(deps-dev): bump jest from 29.6.1 to 29.6.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/427 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/425 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.2.0 to 6.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/430 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.2.0 to 6.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/429 - build(deps-dev): bump prettier from 3.0.0 to 3.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/431 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.2.1 to 6.3.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/432 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.2.1 to 6.3.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/433 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.39 to 16.18.40 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/434 - build(deps-dev): bump prettier from 3.0.1 to 3.0.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/450 - build(deps-dev): bump eslint from 8.46.0 to 8.48.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/448 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.40 to 16.18.46 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/447 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.3.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/451 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.3.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/449 - build(deps-dev): bump eslint-plugin-github from 4.9.2 to 4.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/452 - build(deps-dev): bump concurrently from 8.2.0 to 8.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/453 - build(deps-dev): bump typescript from 5.1.6 to 5.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/454 - build(deps-dev): bump jest and [@types/jest](https://github.com/types/jest) by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/455 - build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/464 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.46 to 16.18.50 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/463 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.1 to 0.38.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/461 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.5.0 to 6.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/466 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.5.0 to 6.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/465 - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/457 - build(deps-dev): bump jest from 29.6.4 to 29.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/468 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.50 to 16.18.51 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/469 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.7.0 to 6.9.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/497 - build(deps-dev): bump [@babel/traverse](https://github.com/babel/traverse) from 7.22.8 to 7.23.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/487 - Correcting job name for PR example by [@CodyCBakerPhD](https://github.com/CodyCBakerPhD) in https://github.com/actions/add-to-project/pull/488 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.4 to 29.5.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/496 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.51 to 16.18.60 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/495 - build(deps-dev): bump eslint-plugin-jest from 27.2.3 to 27.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/494 - Update action to node20 by [@takost](https://github.com/takost) in https://github.com/actions/add-to-project/pull/503 - Update action.yml by [@mattcosta7](https://github.com/mattcosta7) in https://github.com/actions/add-to-project/pull/517 #### New Contributors - [@shiftkey](https://github.com/shiftkey) made their first contribution in https://github.com/actions/add-to-project/pull/373 - [@LoneDev6](https://github.com/LoneDev6) made their first contribution in https://github.com/actions/add-to-project/pull/370 - [@LL782](https://github.com/LL782) made their first contribution in https://github.com/actions/add-to-project/pull/356 - [@EndBug](https://github.com/EndBug) made their first contribution in https://github.com/actions/add-to-project/pull/381 - [@CodyCBakerPhD](https://github.com/CodyCBakerPhD) made their first contribution in https://github.com/actions/add-to-project/pull/488 - [@takost](https://github.com/takost) made their first contribution in https://github.com/actions/add-to-project/pull/503 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.5.0...v0.6.0 ### [`v0.5.0`](https://github.com/actions/add-to-project/releases/tag/v0.5.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.4.1...v0.5.0) #### What's Changed - ✨ **GHES support: Allow projects outside github.com** by [@saravanan30erd](https://github.com/saravanan30erd) in https://github.com/actions/add-to-project/pull/338 - typo: repo -> project by [@rootulp](https://github.com/rootulp) in https://github.com/actions/add-to-project/pull/330 - Dependency updates: - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.12 to 16.18.14 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/328 - build(deps-dev): bump eslint from 8.34.0 to 8.35.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/326 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.53.0 to 5.54.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/329 - build(deps-dev): bump prettier from 2.8.4 to 2.8.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/334 - build(deps): bump [@actions/github](https://github.com/actions/github) from 5.0.3 to 5.1.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/226 - build(deps-dev): bump prettier from 2.8.5 to 2.8.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/340 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.54.1 to 5.57.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/346 - build(deps-dev): bump eslint from 8.35.0 to 8.37.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/348 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.14 to 16.18.23 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/350 - build(deps-dev): bump eslint-plugin-github from 4.6.1 to 4.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/351 - build(deps-dev): bump concurrently from 7.6.0 to 8.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/352 #### New Contributors ❤️ - [@rootulp](https://github.com/rootulp) made their first contribution in https://github.com/actions/add-to-project/pull/330 - [@saravanan30erd](https://github.com/saravanan30erd) made their first contribution in https://github.com/actions/add-to-project/pull/338 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.4.1...v0.5.0 ### [`v0.4.1`](https://github.com/actions/add-to-project/releases/tag/v0.4.1) [Compare Source](https://github.com/actions/add-to-project/compare/v0.4.0...v0.4.1) #### What's Changed - build(deps-dev): bump eslint from 8.26.0 to 8.28.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/263 - build(deps-dev): bump eslint-plugin-github from 4.4.0 to 4.4.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/253 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.42.0 to 5.43.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/262 - build(deps-dev): bump eslint-plugin-jest from 27.1.3 to 27.1.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/259 - build(deps-dev): bump concurrently from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/265 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.43.0 to 5.44.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/266 - build(deps-dev): bump typescript from 4.8.4 to 4.9.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/267 - build(deps-dev): bump prettier from 2.7.1 to 2.8.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/268 - build(deps-dev): bump eslint-plugin-jest from 27.1.5 to 27.1.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/269 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.44.0 to 5.45.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/270 - build(deps-dev): bump [@github/prettier-config](https://github.com/github/prettier-config) from 0.0.4 to 0.0.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/271 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.3 to 16.18.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/272 - build(deps-dev): bump eslint from 8.28.0 to 8.29.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/273 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.4 to 16.18.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/275 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.45.0 to 5.45.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/276 - build(deps-dev): bump eslint-plugin-github from 4.4.1 to 4.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/277 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.34.0 to 0.36.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/274 - build(deps-dev): bump prettier from 2.8.0 to 2.8.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/278 - build(deps-dev): bump typescript from 4.9.3 to 4.9.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/280 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.45.1 to 5.46.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/279 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.6 to 16.18.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/281 - Add documentation for setting a default status by [@MasterMedo](https://github.com/MasterMedo) in https://github.com/actions/add-to-project/pull/282 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.7 to 16.18.9 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/285 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.46.0 to 5.46.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/284 - build(deps-dev): bump eslint-plugin-jest from 27.1.6 to 27.1.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/286 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.9 to 16.18.10 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/287 - build(deps-dev): bump eslint from 8.29.0 to 8.30.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/288 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.46.1 to 5.47.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/290 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.10 to 16.18.11 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/291 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.47.0 to 5.47.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/292 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.47.1 to 5.49.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/304 - build(deps-dev): bump eslint from 8.30.0 to 8.32.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/302 - build(deps-dev): bump eslint-plugin-jest from 27.1.7 to 27.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/298 - build(deps): bump json5 from 1.0.1 to 1.0.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/297 - build(deps-dev): bump prettier from 2.8.1 to 2.8.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/305 - build(deps-dev): bump typescript from 4.9.4 to 4.9.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/310 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/307 - build(deps-dev): bump eslint from 8.32.0 to 8.33.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/308 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.49.0 to 5.50.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/309 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.11 to 16.18.12 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/312 - build(deps-dev): bump prettier from 2.8.3 to 2.8.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/314 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.50.0 to 5.51.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/313 - build(deps-dev): bump eslint from 8.33.0 to 8.34.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/315 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.51.0 to 5.52.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/316 - build(deps-dev): bump eslint-plugin-github from 4.6.0 to 4.6.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/317 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.52.0 to 5.53.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/319 - epuertat/patch 1 by [@epuertat](https://github.com/epuertat) in https://github.com/actions/add-to-project/pull/323 - Mattcosta7/patch 1 by [@mattcosta7](https://github.com/mattcosta7) in https://github.com/actions/add-to-project/pull/324 #### New Contributors - [@MasterMedo](https://github.com/MasterMedo) made their first contribution in https://github.com/actions/add-to-project/pull/282 - [@epuertat](https://github.com/epuertat) made their first contribution in https://github.com/actions/add-to-project/pull/323 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.4.0...v0.4.1 </details> <details> <summary>actions/checkout</summary> ### [`v4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://github.com/actions/checkout/compare/v3...v4) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in https://github.com/actions/checkout/pull/1598 </details> <details> <summary>actions/setup-go</summary> ### [`v5`](https://github.com/actions/setup-go/compare/v4...v5) [Compare Source](https://github.com/actions/setup-go/compare/v4...v5) ### [`v4`](https://github.com/actions/setup-go/compare/v3...v4) [Compare Source](https://github.com/actions/setup-go/compare/v3...v4) </details> <details> <summary>actions/stale</summary> ### [`v9`](https://github.com/actions/stale/compare/v8...v9) [Compare Source](https://github.com/actions/stale/compare/v8...v9) ### [`v8`](https://github.com/actions/stale/compare/v7...v8) [Compare Source](https://github.com/actions/stale/compare/v7...v8) </details> <details> <summary>actions/upload-artifact</summary> ### [`v4`](https://github.com/actions/upload-artifact/compare/v3...v4) [Compare Source](https://github.com/actions/upload-artifact/compare/v3...v4) </details> <details> <summary>amplitude/amplitude-javascript</summary> ### [`v8.21.9`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8219-httpsgithubcomamplitudeamplitude-javascriptcomparev8218v8219-2023-04-27) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.8...v8.21.9) ##### Bug Fixes - do not overwrite flushIntervalMillis=0 with default value (10 seconds) ([#589](https://github.com/amplitude/amplitude-javascript/issues/589)) ([9c96890](https://github.com/amplitude/amplitude-javascript/commit/9c96890ecccadfba9ca81822ba9e5723645b9948)) ### [`v8.21.8`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8218-httpsgithubcomamplitudeamplitude-javascriptcomparev8217v8218-2023-04-04) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.7...v8.21.8) ##### Bug Fixes - upgrade to [@amplitude/ua-parser-js](https://github.com/amplitude/ua-parser-js)[@0](https://github.com/0).7.33 ([#588](https://github.com/amplitude/amplitude-javascript/issues/588)) ([d2dec38](https://github.com/amplitude/amplitude-javascript/commit/d2dec387d0af1dcaf6f0c97f71e35ca2a91fd5e4)) ### [`v8.21.7`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8217-httpsgithubcomamplitudeamplitude-javascriptcomparev8216v8217-2023-03-23) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.6...v8.21.7) ##### Bug Fixes - reset referring_domain ([eaa7446](https://github.com/amplitude/amplitude-javascript/commit/eaa74461bd5e88e02c5c78f563ad3f0b9ade417c)) ### [`v8.21.6`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8216-httpsgithubcomamplitudeamplitude-javascriptcomparev8215v8216-2023-03-07) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.5...v8.21.6) ##### Bug Fixes - skip top domain when cookie is disabled ([#580](https://github.com/amplitude/amplitude-javascript/issues/580)) ([a9ff324](https://github.com/amplitude/amplitude-javascript/commit/a9ff3247829bba9fccb60dcf83337809e83f1c04)) ### [`v8.21.5`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8215-httpsgithubcomamplitudeamplitude-javascriptcomparev8214v8215-2023-02-16) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.4...v8.21.5) ##### Bug Fixes - wait to create cookie storage based on user options in init() ([#579](https://github.com/amplitude/amplitude-javascript/issues/579)) ([a682c5b](https://github.com/amplitude/amplitude-javascript/commit/a682c5bb3511b1a65e063cc665ac4cfd9446a6c8)) ### [`v8.21.4`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8214-httpsgithubcomamplitudeamplitude-javascriptcomparev8213v8214-2023-01-18) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.3...v8.21.4) ##### Bug Fixes - remove events when 200, no need to check response ([#572](https://github.com/amplitude/amplitude-javascript/issues/572)) ([5b52d16](https://github.com/amplitude/amplitude-javascript/commit/5b52d166a077ff1ba27395d749f42bfc3097625d)) - upgrade dependencies to resolve dependabot vulnerability alerts ([#567](https://github.com/amplitude/amplitude-javascript/issues/567)) ([9207b46](https://github.com/amplitude/amplitude-javascript/commit/9207b466b4998a6cc48a587a59530eaf5f896d7f)) </details> <details> <summary>bats-core/bats-core</summary> ### [`v1.11.0`](https://github.com/bats-core/bats-core/releases/tag/v1.11.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.10.0...v1.11.0) #### Added: - hardened CI scripts by using hashes instead of versions for actions and restricting permissions ([#754](https://github.com/bats-core/bats-core/issues/754), [#770](https://github.com/bats-core/bats-core/issues/770)) - add security.md ([#762](https://github.com/bats-core/bats-core/issues/762)) - add codespell CI checks ([#720](https://github.com/bats-core/bats-core/issues/720)) - dynamic test registration via `bats_test_function` ([#349](https://github.com/bats-core/bats-core/issues/349)) - add check that Bats is executed with Bash >= 3.2 ([#873](https://github.com/bats-core/bats-core/issues/873)) #### Fixed: - `install.sh` now works for deviating `lib/` dirs (like `lib32`,`lib64`) ([#487](https://github.com/bats-core/bats-core/issues/487)) - catch unset `BATS_TEST_SOURCE` in `lib/bats-core/tracing.bash` so `set -u`/`set -o nounset` works as expected ([#827](https://github.com/bats-core/bats-core/issues/827)) - fix `--gather-test-outputs-in` fails on tests with multiple `/` ([#789](https://github.com/bats-core/bats-core/issues/789)) - install does not create unused `/usr/share/bats` anymore ([#857](https://github.com/bats-core/bats-core/issues/857)) - ensure IFS is unchanged in `{setup,teardown}{_suite,_file,}`, `@test` and free code ([#879](https://github.com/bats-core/bats-core/issues/879)) - junit formatter: remove ANSI Codes to avoid invalid XML character ([#886](https://github.com/bats-core/bats-core/issues/886)) #### Changed: - update Docker image with the latest `bats-file` version 0.4.0 ([#780](https://github.com/bats-core/bats-core/issues/780)) - update Docker image with the latest `bats-detik` version 1.3.0 ([#876](https://github.com/bats-core/bats-core/issues/876)) #### Documentation - clarify docker usage ([#741](https://github.com/bats-core/bats-core/issues/741)) - update Arch Linux package URL in installation.rst ([#821](https://github.com/bats-core/bats-core/issues/821)) - rename bash-bats to bats for Arch Linux in installation.rst ([#836](https://github.com/bats-core/bats-core/issues/836)) - fix FAQ entry about setup-/teardown_suite, as they are available now ([#861](https://github.com/bats-core/bats-core/issues/861)) - added logo ([#881](https://github.com/bats-core/bats-core/issues/881)) ### [`v1.10.0`](https://github.com/bats-core/bats-core/releases/tag/v1.10.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.9.0...v1.10.0) #### Added: - add `${BATS_TEST_TAGS[@]}` for querying the tags during a test ([#705](https://github.com/bats-core/bats-core/issues/705)) - print tags on failing tests ([#705](https://github.com/bats-core/bats-core/issues/705)) - test for negative arguments to `--jobs` ([#693](https://github.com/bats-core/bats-core/issues/693)) - add tests for `--formatter cat` ([#710](https://github.com/bats-core/bats-core/issues/710)) - test coverage in CI ([#718](https://github.com/bats-core/bats-core/issues/718)) - Support for [rush](https://github.com/shenwei356/rush) as alternative to GNU parallel ([#729](https://github.com/bats-core/bats-core/issues/729)) - add `bats_pipe` helper function for `run` that executes `\|` as pipes ([#663](https://github.com/bats-core/bats-core/issues/663)) - publish docker images to ghcr.io (additionally to Dockerhub) ([#740](https://github.com/bats-core/bats-core/issues/740)) ##### Documentation: - clarify use cases of `--formatter cat` ([#710](https://github.com/bats-core/bats-core/issues/710)) #### Fixed: - fix `run` with options overwriting the value of `i` ([#726](https://github.com/bats-core/bats-core/issues/726), [#727](https://github.com/bats-core/bats-core/issues/727)) - fix `${BATS_TEST_NAMES[@]}` containing only `--tags` instead of test name since Bats v1.8.0 ([#705](https://github.com/bats-core/bats-core/issues/705)) - fix `run --keep-empty-lines` counting trailing `\n` as (empty) new line ([#711](https://github.com/bats-core/bats-core/issues/711)) - fix short flag unpacker creating bogus command lines with valued flags ([#732](https://github.com/bats-core/bats-core/issues/732)) - fix formatter becoming confused with retries ([#734](https://github.com/bats-core/bats-core/issues/734)) - fix `--gather-test-outputs-in` fails on tests with `/` ([#735](https://github.com/bats-core/bats-core/issues/735)) - fix overriding `date` breaks `--timing` ([#736](https://github.com/bats-core/bats-core/issues/736)) ##### Documentation - typos, minor edits ([#704](https://github.com/bats-core/bats-core/issues/704)) - simplified contributing.md ([#718](https://github.com/bats-core/bats-core/issues/718)) ### [`v1.9.0`](https://github.com/bats-core/bats-core/releases/tag/v1.9.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.8.2...v1.9.0) #### Added: - add installation instructions for Debian, Fedora, Gentoo, and OpenSUSE ([#659](https://github.com/bats-core/bats-core/issues/659)) - add `--line-reference-format` to switch file/line references in stack traces ([#665](https://github.com/bats-core/bats-core/issues/665)) - `comma_line` (default): `file.bats, line 1` - `colon`: `file.bats:1` - `uri`: `file:///path/to/file.bats:1` - `custom`: define your own formatter in `bats_format_file_line_reference_custom` - add `bats:focus` tag to run only focused tests ([#679](https://github.com/bats-core/bats-core/issues/679)) - add bats-support, bats-assert, bats-file and bats-detik to Dockerfile ([#674](https://github.com/bats-core/bats-core/issues/674)) ##### Documentation: - add `--help` text and `man` page content for `--filter-tags` ([#679](https://github.com/bats-core/bats-core/issues/679)) #### Fixed: - explicitly check for GNU parallel ([#691](https://github.com/bats-core/bats-core/issues/691)) - wait for report-formatter to finish before ending `bats`' execution, to fix empty files with `--report-fomatter junit` under Docker ([#692](https://github.com/bats-core/bats-core/issues/692)) ##### Documentation - improved clarity of section about output in free code ([#671](https://github.com/bats-core/bats-core/issues/671)) - fixed typos ([#673](https://github.com/bats-core/bats-core/issues/673)) - clarify use cases of `run` ([#366](https://github.com/bats-core/bats-core/issues/366)) </details> <details> <summary>lukeed/clsx</summary> ### [`v2.1.0`](https://github.com/lukeed/clsx/releases/tag/v2.1.0) [Compare Source](https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0) #### Features - Add new `clsx/lite` submodule for `string`-only usage: [`1a49142`](https://github.com/lukeed/clsx/commit/1a49142) *This is a **140b** version of `clsx` that is ideal for Tailwind and/or React contexts, which typically follow this `clsx` usage pattern:* ```js clsx('foo bar', props.maybe && 'conditional classes', props.className); ``` > **Important:** This `clsx/lite` module **ignores all non-string arguments** and is therefore not a 1:1 replacement for `clsx` itself! ```js import { clsx } from 'clsx'; import { clsx as lite } from 'clsx/lite'; // strings-only usage is identical clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz" lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz" // clsx/lite ignores all non-strings clsx('foo', { a: true, b: false, c: true }); //=> "foo a c" lite('foo', { a: true, b: false, c: true }); //=> "foo" ``` *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0 ### [`v2.0.1`](https://github.com/lukeed/clsx/releases/tag/v2.0.1) [Compare Source](https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1) #### Patches - (perf) Cache `arguments.length` & `array.length` for 6% performance gain ([#26](https://github.com/lukeed/clsx/issues/26)): [`deff09b`](https://github.com/lukeed/clsx/commit/deff09b) *Adds 5 bytes (+2%) for ~3% avg performance gain* *Thank you [@jalalazimi](https://github.com/jalalazimi)* #### Chores - Update module size: [`bf64e71`](https://github.com/lukeed/clsx/commit/bf64e71) - Update benchmark results: [`855eec2`](https://github.com/lukeed/clsx/commit/855eec2), [`6e3b2b9`](https://github.com/lukeed/clsx/commit/6e3b2b9), - Replace `nyc` with `c8` in CI: [`6e2468e`](https://github.com/lukeed/clsx/commit/6e2468e) - Update Node CI matrix: [`308a238`](https://github.com/lukeed/clsx/commit/308a238) - Fix readme typos ([#76](https://github.com/lukeed/clsx/issues/76), [#82](https://github.com/lukeed/clsx/issues/82)): [`42354d3`](https://github.com/lukeed/clsx/commit/42354d3), [`4c9a55d`](https://github.com/lukeed/clsx/commit/4c9a55d) *Thank you [@andipaetzold](https://github.com/andipaetzold) and [@acusti](https://github.com/acusti)* *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1 ### [`v2.0.0`](https://github.com/lukeed/clsx/releases/tag/v2.0.0) [Compare Source](https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0) #### Breaking - Add `"exports"` map for native ESM support ([#57](https://github.com/lukeed/clsx/issues/57)): [`3ec8e9f`](https://github.com/lukeed/clsx/commit/3ec8e9f), [`0949868`](https://github.com/lukeed/clsx/commit/0949868) *Also supports TypeScript's `node16`/`nodenext` module resolution* *Maintains CommonJS support (with fixed TS definitions)* *Thank you [@remcohaszing](https://github.com/remcohaszing)~!* #### Chores - Add [Tailwind Support](https://github.com/lukeed/clsx#tailwind-support) section to README ([#65](https://github.com/lukeed/clsx/issues/65), [#68](https://github.com/lukeed/clsx/issues/68)): [`496db1d`](https://github.com/lukeed/clsx/commit/496db1d), [`4a4eadd`](https://github.com/lukeed/clsx/commit/4a4eadd) *Thank you [@kevinlowe0x3F7](https://github.com/kevinlowe0x3F7) & [@kevinlowe0x3F7](https://github.com/kevinlowe0x3F7)* - Add tests for numbers & variadic number arguments: [`c520353`](https://github.com/lukeed/clsx/commit/c520353) - Update package module size: [`03e1cf9`](https://github.com/lukeed/clsx/commit/03e1cf9) *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0 </details> <details> <summary>open-cli-tools/concurrently</summary> ### [`v8.2.2`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.2) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2) #### What's Changed - fix(suggestion): prefixColors API type to embrace string type by [@SeiwonPark](https://github.com/SeiwonPark) in https://github.com/open-cli-tools/concurrently/pull/439 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/441 - Test against Node.js v20 instead of v19 by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/442 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/449 #### New Contributors - [@SeiwonPark](https://github.com/SeiwonPark) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/439 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2 ### [`v8.2.1`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.1) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1) #### What's Changed - Delay summary timings output until finished by [@kayahr](https://github.com/kayahr) in https://github.com/open-cli-tools/concurrently/pull/431 - Replace deprecated RxJS code by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/343 #### New Contributors - [@kayahr](https://github.com/kayahr) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/431 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1 ### [`v8.2.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0) #### What's Changed - Support REPL languages that use colons by [@wyattades](https://github.com/wyattades) in https://github.com/open-cli-tools/concurrently/pull/393 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/427 #### New Contributors - [@wyattades](https://github.com/wyattades) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/393 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0 ### [`v8.1.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.1.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0) #### What's Changed - fix: move `types` condition to the front by [@Andarist](https://github.com/Andarist) in https://github.com/open-cli-tools/concurrently/pull/422 - Allow setting `raw` per command when using the API by [@chbiel](https://github.com/chbiel) in https://github.com/open-cli-tools/concurrently/pull/411 #### New Contributors - [@Andarist](https://github.com/Andarist) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/422 - [@chbiel](https://github.com/chbiel) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/411 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0 ### [`v8.0.1`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.0.1) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1) #### What's Changed - Fix release workflow by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/408 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/409 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1 ### [`v8.0.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.0.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0) #### What's Changed - **Breaking change:** Drop support for Node.js v12 & add support for Node.js v18 by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/342 - Add support for Bun by [@jakeboone02](https://github.com/jakeboone02) in https://github.com/open-cli-tools/concurrently/pull/406 - Add `--kill-signal` option by [@paulsmithkc](https://github.com/paulsmithkc) in https://github.com/open-cli-tools/concurrently/pull/402 - Fixed broken link in the readme by [@abstractpoint](https://github.com/abstractpoint) in https://github.com/open-cli-tools/concurrently/pull/390 #### New Contributors - [@abstractpoint](https://github.com/abstractpoint) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/390 - [@jakeboone02](https://github.com/jakeboone02) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/406 - [@paulsmithkc](https://github.com/paulsmithkc) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/402 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0 </details> <details> <summary>crazy-max/ghaction-github-runtime</summary> ### [`v3`](https://github.com/crazy-max/ghaction-github-runtime/compare/v2...v3) [Compare Source](https://github.com/crazy-max/ghaction-github-runtime/compare/v2...v3) </details> <details> <summary>cue-lang/cue</summary> ### [`v0.8.1`](https://github.com/cue-lang/cue/releases/tag/v0.8.1) [Compare Source](https://github.com/cue-lang/cue/compare/v0.8.0...v0.8.1) This release includes a number of fixes detailed below: [CL 1186144](https://cuelang.org/cl/1186144) fixes a number of evaluator panics which could be triggered by calling the `cue.Value.Expr` method, which also happened when using the OpenAPI encoder. [CL 1173100](https://cuelang.org/cl/1173100) fixes `cue get go` panics which might occur when any Go packages are vendored or use imported alias declarations. [CL 1185281](https://cuelang.org/cl/1185281) fixes a regression introduced in `v0.8.0` which led to some incorrect failures in `tools/flow` and `cue cmd`. <details> <summary>Full list of changes since v0.8.0</summary> - internal/cueversion: bump for v0.8.1 by [@mvdan](https://github.com/mvdan) in [`95bed3d`](https://github.com/cue-lang/cue/commit/95bed3d42cda04c2e5a43c408195781adddce51e) - cue: adjust Environment for comprehensions by [@mpvl](https://github.com/mpvl) in [`4cdb317`](https://github.com/cue-lang/cue/commit/4cdb3175b889b0ce9d198b26e0699d313d4156ab) - Revert "tools/flow: check and return errors from task values" by [@rogpeppe](https://github.com/rogpeppe) in [`0630a37`](https://github.com/cue-lang/cue/commit/0630a37c42b56133b247d31c100cb145a5244699) - cmd/cue: find packages by canonical path in get go by [@uhthomas](https://github.com/uhthomas) in [`773ab2d`](https://github.com/cue-lang/cue/commit/773ab2d76c513381d6c732397c866d16e4219776) </details> ### [`v0.8.0`](https://github.com/cue-lang/cue/releases/tag/v0.8.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.7.1...v0.8.0) This release includes experimental support for CUE Modules (more details below), as well as a number of improvements and fixes. More CLs and refactors have also landed for the core evaluator's performance work. These aren't enabled yet as the work isn't complete; subscribe to [the performance umbrella issue](https://github.com/cue-lang/cue/issues/2850) to read regular updates. As a reminder: users can register their projects with [Unity](https://cuelabs.dev/unity/), our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. It continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. #### Modules This release includes experimental support for CUE modules in `cmd/cue`, as outlined in the updated [Modules and package management proposal v3](https://github.com/cue-lang/cue/discussions/2939). Alongside this release, we have published [a tutorial on the new website](https://alpha.cuelang.org/docs/tutorial/working-with-a-custom-module-registry/) which shows how to publish and fetch modules with a custom module registry. We have also published the first version of the [Modules reference documentation](https://alpha.cuelang.org/docs/reference/modules/), the canonical documentation page describing how CUE modules work in detail. Note that support for CUE modules is still experimental and subject to change, and needs to be explicitly enabled via `CUE_EXPERIMENT=modules`. See `cue help environment` for more information on the environment variables used below. CUE maps modules to registries via `$CUE_REGISTRY`, which supports a simple string configuration format as well as a more detailed CUE configuration format which can be read from disk. See `cue help registryconfig` for more details. The new `cue mod tidy` command rewrites `cue.mod/module.cue` in its canonical format, adds any missing module dependency requirements, and removes unused ones. The new `cue mod publish` command publishes the current module to a module registry. The new `cue mod get` command can add a new module dependency, update an existing one, or downgrade an existing one as long as it does not cause any conflict. When running commands like `cue export` with `CUE_EXPERIMENT=modules`, dependencies are automatically fetched from module registries following `$CUE_REGISTRY` and cached on disk inside `$CUE_CACHE_DIR`. #### CUE Language Server Protocol Implementation This release includes the first early version of an experimental [Language Server Protocol (LSP)](https://microsoft.github.io/language-server-protocol/) implementation for CUE. Whilst it remains experimental, the `cmd/cuepls` binary is separate from `cmd/cue`. However at a later date it will most likely to become a subcommand of `cmd/cue` like `cue lsp serve`. We are working on updating the [VSCode](https://github.com/cue-sh/vscode-cue) plugin to use `cmd/cuepls`, as well as supporting an initial version of a plugin for Neovim. For [JetBrains](https://www.jetbrains.com/) users, we are working with the author of the [CUE](https://plugins.jetbrains.com/plugin/16126-cue) plugin to understand how best to integrate `cmd/cuepls` with JetBrains. We will share announcements once the editor integrations are ready for use, and once more LSP features beyond formatting files are available. Subscribe to the [LSP announce discussion](https://github.com/cue-lang/cue/discussions/2842), or join us in `#cuepls` on [CUE Slack](https://join.slack.com/t/cuelang/shared_invite/enQtNzQwODc3NzYzNTA0LTAxNWQwZGU2YWFiOWFiOWQ4MjVjNGQ2ZTNlMmIxODc4MDVjMDg5YmIyOTMyMjQ2MTkzMTU5ZjA1OGE0OGE1NmE). #### Go API Note that this version of CUE requires Go 1.21 or later, following [our policy](https://github.com/cue-lang/cue?tab=readme-ov-file#go-release-support-policy) to support the latest two stable Go releases just like upstream. The [`cue/load` package](https://pkg.go.dev/cuelang.org/go/cue/load@v0.8.0) supports the CUE Modules experiment out of the box with the environment variable `CUE_EXPERIMENT=modules`. Alternatively, a custom registry and authorizer can be configured with the `Config.Registry` field via the [`modconfig.NewRegistry`](https://pkg.go.dev/cuelang.org/go/mod/modconfig@v0.8.0) API. `cue/load` also has a new `Config.Env` struct field to provide the environment variables used to load CUE modules from registries. It defaults to using `os.Environ`. We have also added new Go examples to the `cue/load` package, including an [example demonstrating the use of a CUE modules registry](https://pkg.go.dev/cuelang.org/go/cue/load@v0.8.0#example-package-ExternalModules). [CL 1173271](https://cuelang.org/cl/1173271) drops support for legacy `pkg` directories, which have been deprecated since the transition to a `cue.mod` directory in 2019. [CL 1174069](https://cuelang.org/cl/1174069) replaces a few more uses of the deprecated `cue.Instance` type with `cue.InstanceOrValue`. [CL 1175779](https://cuelang.org/cl/1175779) deprecates the `FileOffset` and `File.Base` APIs in `cue/token`, which were inherited from `go/token` but never had any effect. #### Language There are no changes to the language in this version. #### Spec [CL 1173197](https://cuelang.org/cl/1173197) makes the use of the term "builtin function" consistent across the document. #### Core Evaluator [CL 1173262](https://cuelang.org/cl/1173262) fixes a regression introduced by v0.7.0's upgrade to `github.com/cockroachdb/apd/v3` where some arithmetic operations would result in an extra `0` digit. #### Encoders [CL 1173689](https://cuelang.org/cl/1173689) fixes the YAML encoder so that strings looking like hexadecimal numbers are properly quoted. #### Builtins [CL 1173735](https://cuelang.org/cl/1173735) replaces the uses of Go's `net` package with `net/netip` when dealing with IP addresses, which makes them immutable, comparable, and take less memory. [CL 1173926](https://cuelang.org/cl/1173926) adds an `IPv6` API to `net` to check that a value is a valid IPv6 address, mirroring `IPv4` and taking advantage of the switch to the Go `net/netip` package. [CL 1174339](https://cuelang.org/cl/1174339) fixes `tool/exec` so that it correctly applies `env` defaults in CUE values. [CL 1174623](https://cuelang.org/cl/1174623) fixes `tool/exec` so that it accepts `env` list values as documented. #### `cmd/cue` [CL 1176194](https://cuelang.org/cl/1176194) adds a `language.version` field to `cue.mod/module.cue` to track what CUE language version a module was written for. This will become necessary to make future language changes as smooth as possible for CUE users. For example, running `cue mod init` or `cue mod tidy` with the v0.8.0 release should add `language: version: "v0.8.0"` when the field isn't present. [CL 1173892](https://cuelang.org/cl/1173892) adds a `cue help environment` section to document the environment variables used by the CLI, such as `CUE_EXPERIMENT` and `CUE_REGISTRY`. [CL 1176665](https://cuelang.org/cl/1176665) fixes `cue cmd` so that legacy commands always get the corresponding CUE schema unified. [CL 1177330](https://cuelang.org/cl/1177330) fixes a bug where some evaluation errors in `tools/flow` and `cue cmd` were omitted, causing unintended results. [CL 1177546](https://cuelang.org/cl/1177546) tweaks `cmd/cue` so that it obeys the `--package` flag when the output format is CUE. <details> <summary>Full list of changes since v0.7.1</summary> - internal/cueversion: bump fallbackVersion for v0.8.0 by [@mvdan](https://github.com/mvdan) in [`7d75741`](https://github.com/cue-lang/cue/commit/7d757419377e66b0aa7bc7a6d68b6b6801214bd3) - cue/load: make packages specified as args work correctly by [@rogpeppe](https://github.com/rogpeppe) in [`c399d88`](https://github.com/cue-lang/cue/commit/c399d8870386f214d197d1a336e1b3f1afefeb4a) - internal/mod/modresolve: do not use regular field in registry config schema by [@rogpeppe](https://github.com/rogpeppe) in [`d272140`](https://github.com/cue-lang/cue/commit/d272140c53ceadd15552b60f7bd87b7d6518b961) - update cuelabs.dev/oci/ociregistry to pull in fix for [#2934](https://github.com/cue-lang/cue/issues/2934) by [@mvdan](https://github.com/mvdan) in [`0e33883`](https://github.com/cue-lang/cue/commit/0e33883dd5d29129c857d9684d93b860a1ea0803) - cmd/cue: mod init should only add `@v0` with the experiment by [@mvdan](https://github.com/mvdan) in [`24f93c9`](https://github.com/cue-lang/cue/commit/24f93c9b616a3870c753ecb916037928d97fdd31) - cmd/cue: repurpose modinit test for language.version by [@mvdan](https://github.com/mvdan) in [`77741ff`](https://github.com/cue-lang/cue/commit/77741ffd34907b166eab8a9d4ee78a5d04c0fe78) - cmd/cue: mention CUE_DEBUG in cue help environment by [@rogpeppe](https://github.com/rogpeppe) in [`d5ecd6c`](https://github.com/cue-lang/cue/commit/d5ecd6c77beff73ff6cd59dee2afa2c10c652f1a) - internal/mod/modresolve: fix stripPrefix for exact match by [@rogpeppe](https://github.com/rogpeppe) in [`fa65317`](https://github.com/cue-lang/cue/commit/fa65317cb72164b37d2e94433705432a3e4f3ad9) - internal/\_e2e: remove cleanup.go and tools.go by [@mvdan](https://github.com/mvdan) in [`ec6cc09`](https://github.com/cue-lang/cue/commit/ec6cc098f192f6869f0f53b6de8744f4d0c81516) - internal/e2e: join into the root Go module by [@mvdan](https://github.com/mvdan) in [`31e47e2`](https://github.com/cue-lang/cue/commit/31e47e2882339b541ad2ab375f6f1eb05e1686dd) - internal/e2e: test that we can't replace published versions by [@mvdan](https://github.com/mvdan) in [`d1104bd`](https://github.com/cue-lang/cue/commit/d1104bd5b55d58e84e30b8995d1c4eab75b09f96) - internal/e2e: stop creating GitHub repositories by [@mvdan](https://github.com/mvdan) in [`ba698de`](https://github.com/cue-lang/cue/commit/ba698deda3ff8259bf80679183d3bed23e0f2b5e) - all: prevent tests from using the host's docker/config.json by [@mvdan](https://github.com/mvdan) in [`d48dcbe`](https://github.com/cue-lang/cue/commit/d48dcbecbc82edacd50c26ce5f88ab02b3df8e27) - internal/cueversion: bump fallbackVersion for v0.8.0-rc.1 by [@mvdan](https://github.com/mvdan) in [`ccb64b1`](https://github.com/cue-lang/cue/commit/ccb64b11acd64bc40d9568d0b6f0a6417821600e) - doc/tutorial: skip module.cue as a golden file to avoid churn by [@mvdan](https://github.com/mvdan) in [`d97e914`](https://github.com/cue-lang/cue/commit/d97e914bc6f2e45df2ae8b8adb715b0e9ffb8ad3) - cmd/cue: use CUE_VERSION_OVERRIDE in script tests to avoid churn by [@mvdan](https://github.com/mvdan) in [`e529ce6`](https://github.com/cue-lang/cue/commit/e529ce6479f027418a54b35eaa1dce1b9bbcd7e5) - cmd/cue: fix "login" on a clean environment, and add tests by [@mvdan](https://github.com/mvdan) in [`f6238e5`](https://github.com/cue-lang/cue/commit/f6238e57d448aa220f8d446d85c9a0126932ebe4) - internal/cueversion: convert spaces to underscore in Go version by [@rogpeppe](https://github.com/rogpeppe) in [`0b7c434`](https://github.com/cue-lang/cue/commit/0b7c434edb81a66a0449315e519e9da1ae95dde6) - cmd/cue,mod/modconfig: send User-Agent header by [@rogpeppe](https://github.com/rogpeppe) in [`6db0b7f`](https://github.com/cue-lang/cue/commit/6db0b7f8141f25f662da40da06b69ed9259cc7cf) - internal/cueversion: new package by [@rogpeppe](https://github.com/rogpeppe) in [`5dbbbcb`](https://github.com/cue-lang/cue/commit/5dbbbcbaf46f9927ff6117d417f6a98ec305bef6) - cmd/cue: enable HTTP logging for cue login by [@rogpeppe](https://github.com/rogpeppe) in [`9f556fe`](https://github.com/cue-lang/cue/commit/9f556fe85ce258d6204809e3a04982fd1cc36570) - cmd/cue: implement cue mod tidy --check by [@rogpeppe](https://github.com/rogpeppe) in [`9789ee6`](https://github.com/cue-lang/cue/commit/9789ee62bf6618f39489d2888db2e3b851a30102) - internal/modload: implement tidiness checker by [@rogpeppe](https://github.com/rogpeppe) in [`405511d`](https://github.com/cue-lang/cue/commit/405511d5d4df12abe3994684dd3258955eeb82c2) - mod/modfile: check canonical language version by [@rogpeppe](https://github.com/rogpeppe) in [`2e503e0`](https://github.com/cue-lang/cue/commit/2e503e0b7af4bc6aea47670996ec0141cdd479b9) - internal/mod/modload: split Tidy from UpdateVersions by [@rogpeppe](https://github.com/rogpeppe) in [`0a23647`](https://github.com/cue-lang/cue/commit/0a23647110db3df07651d95351b67989edb4b9b8) - bump ociregistry dependency to pull in a panic fix by [@mvdan](https://github.com/mvdan) in [`382ea51`](https://github.com/cue-lang/cue/commit/382ea513311208ad656c0ae1a86001d201e8b0ae) - cmd/cue: implement support for HTTP logging by [@rogpeppe](https://github.com/rogpeppe) in [`9c8b09a`](https://github.com/cue-lang/cue/commit/9c8b09a7d8fb2b8f6cc62d2ccb59d706abff1e1b) - internal/httplog: new package by [@rogpeppe](https://github.com/rogpeppe) in [`893798b`](https://github.com/cue-lang/cue/commit/893798b85aad167f4a099bd0e933672be2e959fd) - Revert "internal/e2e: partially revert using `cue mod init modpath@version`" by [@mvdan](https://github.com/mvdan) in [`b1e40ae`](https://github.com/cue-lang/cue/commit/b1e40aefdbf240a3fc1d2cbe293dc78c37ded1f0) - cmd/cue: use fallbackVersion when built via a directory replace by [@mvdan](https://github.com/mvdan) in [`e54fb85`](https://github.com/cue-lang/cue/commit/e54fb85dd7ae59d14ef09def000a7de6184ac843) - cmd/cue: hard-code a fallback CUE semver version by [@mvdan](https://github.com/mvdan) in [`fc7038a`](https://github.com/cue-lang/cue/commit/fc7038a26617c256ed99aa4317de03e2e1dd2ef5) - update golang.org/x/... dependencies for v0.8.0 by [@mvdan](https://github.com/mvdan) in [`6afa3ef`](https://github.com/cue-lang/cue/commit/6afa3ef593a30ae7a7cf17dd003d6eb62056b674) - internal/ci: update the pinned Go version for v0.8 by [@mvdan](https://github.com/mvdan) in [`a1e8429`](https://github.com/cue-lang/cue/commit/a1e842986d5a2c6abde4fcf3c010bce36130590c) - internal/cuedebug: new package by [@rogpeppe](https://github.com/rogpeppe) in [`6ad495d`](https://github.com/cue-lang/cue/commit/6ad495d46b07b415a28862bd1cd52dbf166f144f) - cue/load: fix race in testing by [@rogpeppe](https://github.com/rogpeppe) in [`ee26ee2`](https://github.com/cue-lang/cue/commit/ee26ee2fb1f27805af7b1fa34b7f679f5c8e592d) - mod/modconfig: make http transport configurable by [@rogpeppe](https://github.com/rogpeppe) in [`0ef11fc`](https://github.com/cue-lang/cue/commit/0ef11fc4fae1ca6f198c8880c8d7b62872aa758c) - internal/core/adt: set nonRooted by [@mpvl](https://github.com/mpvl) in [`28ae97d`](https://github.com/cue-lang/cue/commit/28ae97d3e86338e2280e6f02f75ea14bb6286247) - internal/core/debug: more state in formation by [@mpvl](https://github.com/mpvl) in [`2273c7d`](https://github.com/cue-lang/cue/commit/2273c7d675f2ad56dd684be6cbdf61b057a77179) - internal/core/adt: make runner a struct instead of func by [@mpvl](https://github.com/mpvl) in [`0651453`](https://github.com/cue-lang/cue/commit/065145343ec9c954e217a3eb8b1e7503ea80d2c7) - internal/core/adt: fix conjunct index by [@mpvl](https://github.com/mpvl) in [`2554094`](https://github.com/cue-lang/cue/commit/2554094088320049aac8c929440cf17f4c20800c) - internal/core/adt: implement new evaluator by [@mpvl](https://github.com/mpvl) in [`5f55954`](https://github.com/cue-lang/cue/commit/5f55954410f495e6b6c421bd4ac107fc55c54cb7) - internal/core/adt: only error if inspected node missed counters by [@mpvl](https://github.com/mpvl) in [`c547590`](https://github.com/cue-lang/cue/commit/c547590757f0831e040285102aa3b2457d9e37c9) - internal/core/adt: closedness improvements by [@mpvl](https://github.com/mpvl) in [`b7f76be`](https://github.com/cue-lang/cue/commit/b7f76bedb8b16f968c6fd0543b23fdfe1ceddb65) - internal/core/adt: add lifetime check for closedness by [@mpvl](https://github.com/mpvl) in [`cdcb6fa`](https://github.com/cue-lang/cue/commit/cdcb6fa19bf332283500711ce5381df1cc1935e7) - internal/core/adt: mark functions only used in old evaluator by [@mpvl](https://github.com/mpvl) in [`f55405b`](https://github.com/cue-lang/cue/commit/f55405b243f0f00640659d2f25e974d6b0387f53) - internal/core/adt: exclude tests with disjunctions by [@mpvl](https://github.com/mpvl) in [`145b436`](https://github.com/cue-lang/cue/commit/145b436a7a5107fa3a7a895cae522433cb48c1b9) - internal/core/adt: propagate closedness up by [@mpvl](https://github.com/mpvl) in [`9d951f6`](https://github.com/cue-lang/cue/commit/9d951f6e1c6abba77643d4e2ec15fef18e19b262) - internal/core/adt: introduce visual CUE debugger by [@mpvl](https://github.com/mpvl) in [`37c0260`](https://github.com/cue-lang/cue/commit/37c0260969b2562e6936414ffdea86bc41beec9e) - mod/...: API tweaks by [@rogpeppe](https://github.com/rogpeppe) in [`7d4d90d`](https://github.com/cue-lang/cue/commit/7d4d90de3798a00807f50373466322771bd0a10a) - cmd/cue: implement cue mod get by [@rogpeppe](https://github.com/rogpeppe) in [`93643a3`](https://github.com/cue-lang/cue/commit/93643a322842d51b3b440c0b7c28e7893d4fed72) - cue/load: implement UpdateRequirements by [@rogpeppe](https://github.com/rogpeppe) in [`2dc8879`](https://github.com/cue-lang/cue/commit/2dc8879458856a3216525faac03ef72e60f80f0b) - cue/load,mod/modconfig: support custom environment variables by [@rogpeppe](https://github.com/rogpeppe) in [`bab5d3a`](https://github.com/cue-lang/cue/commit/bab5d3a8d1ae6ec55b51e3cee7c96f27d6cbb478) - bump ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`50c2472`](https://github.com/cue-lang/cue/commit/50c247284d27d902f2e8fb7392f1f16a21626284) - mod/...: remove three somewhat unnecessary APIs by [@mvdan](https://github.com/mvdan) in [`6cba4c0`](https://github.com/cue-lang/cue/commit/6cba4c0b2dee8009f3c2578980312506f805af73) - mod/module: assume Go 1.21 or later by [@mvdan](https://github.com/mvdan) in [`aa60650`](https://github.com/cue-lang/cue/commit/aa60650be9e40a18f335684f468086d1d2994c9e) - cue/load: delete unexported funcs only used in tests by [@mvdan](https://github.com/mvdan) in [`812bd85`](https://github.com/cue-lang/cue/commit/812bd8525b01c7ee0b8f99d40334c667a0fd4b13) - internal/str: remove as it only had one trivial use by [@mvdan](https://github.com/mvdan) in [`77d5973`](https://github.com/cue-lang/cue/commit/77d5973584dfe47c0ec64885326d1a7d5c76dcae) - cue/load: remove unused code from the modules refactors by [@mvdan](https://github.com/mvdan) in [`c5e67f2`](https://github.com/cue-lang/cue/commit/c5e67f2f6ffe723473600cf67bd7028d979b8335) - cmd/cue: fix bad variable reference by [@rogpeppe](https://github.com/rogpeppe) in [`77936ec`](https://github.com/cue-lang/cue/commit/77936ec16926012597aeb9ba99e7844c7910a883) - cmd/cue: add registryconfig help by [@rogpeppe](https://github.com/rogpeppe) in [`91c72d9`](https://github.com/cue-lang/cue/commit/91c72d9efc103376ab465ac2bc6d9a1c8ac2dcc6) - internal/e2e: partially revert using `cue mod init modpath@version` by [@mvdan](https://github.com/mvdan) in [`94a444f`](https://github.com/cue-lang/cue/commit/94a444fe9ce568e4e7e90f6aca142de605874b16) - cmd/cue: support --package flag when output is CUE by [@myitcv](https://github.com/myitcv) in [`93acaa3`](https://github.com/cue-lang/cue/commit/93acaa356a707751467b9422c8288c9759a25560) - cue/load: add runnable example for external modules by [@rogpeppe](https://github.com/rogpeppe) in [`cc98a77`](https://github.com/cue-lang/cue/commit/cc98a77ca5b0fb974618fef4845b794cc217282d) - mod/modconfig: factor out from cmd/cue by [@rogpeppe](https://github.com/rogpeppe) in [`59e6fd0`](https://github.com/cue-lang/cue/commit/59e6fd0202ecbdb7ff85232c76414bd7c61eeca9) - mod/...: mark as experimental by [@rogpeppe](https://github.com/rogpeppe) in [`3210353`](https://github.com/cue-lang/cue/commit/3210353d52e1ca536794114c4d6cf948d85203c0) - mod/modcache: move from internal/mod/modcache by [@rogpeppe](https://github.com/rogpeppe) in [`4232562`](https://github.com/cue-lang/cue/commit/4232562fe17621baad4df734d9ec828b106f6d7c) - internal/par: move from internal/mod/internal/par by [@rogpeppe](https://github.com/rogpeppe) in [`d1fba4f`](https://github.com/cue-lang/cue/commit/d1fba4f552c64e20e89a9bd3afcc60818a433ad4) - mod/modregistry: move from internal/mod/modregistry by [@rogpeppe](https://github.com/rogpeppe) in [`aabff10`](https://github.com/cue-lang/cue/commit/aabff1016ba8f58fad0d597973a259d55026452e) - mod/modfile: move from internal/mod/modfile by [@rogpeppe](https://github.com/rogpeppe) in [`8533c7d`](https://github.com/cue-lang/cue/commit/8533c7d6e82ea78c4517eb03ed41f4d581614a36) - mod/module: move from internal/mod/module by [@rogpeppe](https://github.com/rogpeppe) in [`2727766`](https://github.com/cue-lang/cue/commit/272776663738b3175c3a7eb8b901bf15d0f10ba5) - cue: fix typos in the Hid function documentation by [@kharf](https://github.com/kharf) in [`723438a`](https://github.com/cue-lang/cue/commit/723438a577540bceaf726efe8f0131ab172f5561) - cue/load: add a runnable package example by [@mvdan](https://github.com/mvdan) in [`5b4a581`](https://github.com/cue-lang/cue/commit/5b4a5819b55593357486cba3c7fc0d0a1853f031) - internal/ci: fix reference to tool/file.RemoveAll by [@mvdan](https://github.com/mvdan) in [`d42ab3d`](https://github.com/cue-lang/cue/commit/d42ab3da7fe4cdddc3d9499f29cf55f4682be25c) - tools/flow: check and return errors from task values by [@nickfiggins](https://github.com/nickfiggins) in [`9ef35eb`](https://github.com/cue-lang/cue/commit/9ef35ebfda957348260b4461b27cd8e935951e39) - cmd/cue: stop trying to set $HOME in script_test.go by [@mvdan](https://github.com/mvdan) in [`ff8d497`](https://github.com/cue-lang/cue/commit/ff8d4977198e327f2fdb7eca49df70fc78af8f32) - cmd/cue: skip the logins.json authorizer if no file is found by [@mvdan](https://github.com/mvdan) in [`32a72ae`](https://github.com/cue-lang/cue/commit/32a72aed296141b0789cb866144d75a39e8cc524) - bump ociregistry module version by [@rogpeppe](https://github.com/rogpeppe) in [`30cae5b`](https://github.com/cue-lang/cue/commit/30cae5b304e31bce18ef9ca603d865da5bb1ee51) - internal/ci: fix goreleaser when using gomod.proxy by [@mvdan](https://github.com/mvdan) in [`d779310`](https://github.com/cue-lang/cue/commit/d779310a04c941d486cbdce2fbe35e2d61278ab5) - internal/ci: print goreleaser config yaml before using it by [@mvdan](https://github.com/mvdan) in [`3b9da48`](https://github.com/cue-lang/cue/commit/3b9da48890f8fad88779cb040ce61147009465fe) - bump ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`44fbc2a`](https://github.com/cue-lang/cue/commit/44fbc2ac431c185ad81b7a5e0310c834cbfee1b8) - cmd/cue: improve error message when modules experiment not enabled by [@rogpeppe](https://github.com/rogpeppe) in [`d1f1793`](https://github.com/cue-lang/cue/commit/d1f179363fb81f96943985a96d3b19a7ae099bba) - hide testdata cue files to allow `cue mod tidy` to pass by [@mvdan](https://github.com/mvdan) in [`bd96660`](https://github.com/cue-lang/cue/commit/bd966600bfc1a9fed729ee9bd2520a6bffe09047) - cmd/cue: clarify prefix matching semantics by [@rogpeppe](https://github.com/rogpeppe) in [`7a9e47c`](https://github.com/cue-lang/cue/commit/7a9e47cf455049a678dc6634486ad85687d083d1) - cue.mod: add language.version to the root module by [@mvdan](https://github.com/mvdan) in [`ac53f42`](https://github.com/cue-lang/cue/commit/ac53f42961213a301aa7ea84e89d94782c1f40c4) - cmd/cue: add language version in "mod init" by [@rogpeppe](https://github.com/rogpeppe) in [`eb5dc6a`](https://github.com/cue-lang/cue/commit/eb5dc6a201a71faa1498fad787473e56f6d6d9d4) - all: replace uses of deprecated ioutil APIs by [@mvdan](https://github.com/mvdan) in [`d6ecc3d`](https://github.com/cue-lang/cue/commit/d6ecc3d0e1161ea7125e5de1140ee421645adf10) - bump golang.org/x dependencies for v0.8 by [@mvdan](https://github.com/mvdan) in [`88431ee`](https://github.com/cue-lang/cue/commit/88431eef55bf4ced3e0d629dae2e009b4fe470c1) - cmd/cue: use CUE_CACHE_DIR instead of CUE_MODCACHE by [@mvdan](https://github.com/mvdan) in [`8bc8b1e`](https://github.com/cue-lang/cue/commit/8bc8b1e6883a9094cf8b5bc1674f902a190de7df) - cmd/cue: support registry file configuration by [@rogpeppe](https://github.com/rogpeppe) in [`c1e1a52`](https://github.com/cue-lang/cue/commit/c1e1a524f3ee902030e68b5bf8c9edc0b5b94e7b) - internal/mod/modresolve: use same registry representation as CUE_REGISTRY by [@rogpeppe](https://github.com/rogpeppe) in [`cbf84aa`](https://github.com/cue-lang/cue/commit/cbf84aab89ed63c57d0785407df290fa5c069dcc) - cmd/cue: update mod docs by [@rogpeppe](https://github.com/rogpeppe) in [`fa30d88`](https://github.com/cue-lang/cue/commit/fa30d88efc583208a5ea8a8cdb69ffd9b6ddd1a6) - all: replace mpvl/unique with slices.Compact by [@mvdan](https://github.com/mvdan) in [`057c324`](https://github.com/cue-lang/cue/commit/057c3249cfe387cec6cfb4bea0985d1eccb23185) - cmd/cue: use single implementation of CUE_REGISTRY logic by [@rogpeppe](https://github.com/rogpeppe) in [`59b92a4`](https://github.com/cue-lang/cue/commit/59b92a4038f82d93aed023cfff3602d57ae0589c) - cmd/cue: fix other commands to work with modules by [@rogpeppe](https://github.com/rogpeppe) in [`3d9e272`](https://github.com/cue-lang/cue/commit/3d9e272b51470df37172dea29738c8876e290c28) - internal/mod/modresolve: add config file functionality by [@rogpeppe](https://github.com/rogpeppe) in [`be5d706`](https://github.com/cue-lang/cue/commit/be5d706df3b1ddd072398ba9f579413a86046b62) - doc/tutorial: fix broken install.md link by [@TheCoreMan](https://github.com/TheCoreMan) in [`6691137`](https://github.com/cue-lang/cue/commit/66911379540bdec5a33f0f41a7de7e378816d41f) - all: start taking advantage of Go 1.21+ by [@mvdan](https://github.com/mvdan) in [`40d5162`](https://github.com/cue-lang/cue/commit/40d5162b106fdf2540bb18453f7c166d20c643d0) - cmd/cue: use immutable tags in cue mod registry by [@rogpeppe](https://github.com/rogpeppe) in [`e0c253b`](https://github.com/cue-lang/cue/commit/e0c253b56e924e7206500144c57aff41fb67ece3) - internal/ci: add cuepls to goreleaser config by [@myitcv](https://github.com/myitcv) in [`c36b959`](https://github.com/cue-lang/cue/commit/c36b95905c2eb8dec280fb2bfd8925b317a697b5) - cuepls: support formatting of CUE files by [@myitcv](https://github.com/myitcv) in [`d185263`](https://github.com/cue-lang/cue/commit/d185263b261eeb54e7dc035142ecb88ed003cb35) - cuepls: support .cue filetype by [@myitcv](https://github.com/myitcv) in [`55f965d`](https://github.com/cue-lang/cue/commit/55f965d42c7d34c8849d9c689929a4fa72b9d375) - cuepls: remove more server implementation by [@myitcv](https://github.com/myitcv) in [`1ae88a6`](https://github.com/cue-lang/cue/commit/1ae88a6458ebc1465e2e933bdafe6f75a9832d7a) - cuepls: first integration test by [@myitcv](https://github.com/myitcv) in [`181a537`](https://github.com/cue-lang/cue/commit/181a537aa0f04f1c62f85a27c4775b2d07d6c92e) - cuepls: renaming gopls -> cuepls by [@myitcv](https://github.com/myitcv) in [`0b6bc2f`](https://github.com/cue-lang/cue/commit/0b6bc2f441fa8dcbcc8931a285f92bde2bd07339) - cuepls: initial version of cmd/cuepls by [@myitcv](https://github.com/myitcv) in [`6a435cf`](https://github.com/cue-lang/cue/commit/6a435cfdc9a9820bb0897d431ca9f7f4ba9ea642) - cuepls: slim down to single format command by [@myitcv](https://github.com/myitcv) in [`3e7e903`](https://github.com/cue-lang/cue/commit/3e7e90332e753ad86f9cd48d6c56363abed909c0) - cuepls: remove any mention of vulnerability analysis by [@myitcv](https://github.com/myitcv) in [`821973b`](https://github.com/cue-lang/cue/commit/821973bb28771a9dc7bae8932b8c3521823427b4) - cuepls: minimal changes to telemetry by [@myitcv](https://github.com/myitcv) in [`ae69f66`](https://github.com/cue-lang/cue/commit/ae69f66ce483b42183f8514f3019e69022556661) - cuepls: remove gopls hooks by [@myitcv](https://github.com/myitcv) in [`09f11f9`](https://github.com/cue-lang/cue/commit/09f11f970d7bc70e84973df6627bfb596ebcbdbf) - cuepls: run internal/golangorgx/revendorToolsInternal.sh by [@myitcv](https://github.com/myitcv) in [`6229d62`](https://github.com/cue-lang/cue/commit/6229d62c04d8f0fc442da6685a73fde001c41047) - cuepls: initial version of "vendor" script by [@myitcv](https://github.com/myitcv) in [`c207a2d`](https://github.com/cue-lang/cue/commit/c207a2d2f71fe7a61a8df829b00d01d8d35283fd) - README: briefly document that we support two Go versions by [@mvdan](https://github.com/mvdan) in [`e69d893`](https://github.com/cue-lang/cue/commit/e69d89310e52a25ed6b1d33758e2649bf0937f93) - cue/interpreter/wasm: rework the way we test Wasm by [@4ad](https://github.com/4ad) in [`41b9e66`](https://github.com/cue-lang/cue/commit/41b9e665e602719edc10ee6ddf7d75b105635ae9) - cue/interpreter/wasm: remove Wazero global state by [@4ad](https://github.com/4ad) in [`6d68b3a`](https://github.com/cue-lang/cue/commit/6d68b3a9bc90f72b0593a5c16b6e9a1019af5249) - cue/interpreter/wasm: add support for Wasm functions that take and return structs by [@4ad](https://github.com/4ad) in [`2ce1036`](https://github.com/cue-lang/cue/commit/2ce103610b31f0994ee264e5c8321fb428f4ff70) - cue/interpreter/wasm: add support for arbitrary types in extern attributes by [@4ad](https://github.com/4ad) in [`c896078`](https://github.com/cue-lang/cue/commit/c8960780c43d787ba0331a27f00d7fe9368ad3cd) - internal/core/runtime: expand runtime.Compile signature to accomodate non-builtins by [@4ad](https://github.com/4ad) in [`063b8c1`](https://github.com/cue-lang/cue/commit/063b8c170c3f3000f347ebaa0e19a6b748e4ec74) - cmd/cue,pkg/tool/exec: rely on cue schema for exec.Run defaults by [@nickfiggins](https://github.com/nickfiggins) in [`b460e71`](https://github.com/cue-lang/cue/commit/b460e71a6f24bf659e45bce2a9791cc4bf7c3597) - cmd/cue: unhide mod tidy and mod publish by [@myitcv](https://github.com/myitcv) in [`d37ea66`](https://github.com/cue-lang/cue/commit/d37ea66b1e0297142e7447c3eafd87e008ac038e) - internal/ci: run the end-to-end tests with -race by [@mvdan](https://github.com/mvdan) in [`a948eb5`](https://github.com/cue-lang/cue/commit/a948eb5397f4b42eb99b5f4cddeec0e6e462a095) - cmd/cue: add testscript for registry auth via logins.json by [@mvdan](https://github.com/mvdan) in [`64c5656`](https://github.com/cue-lang/cue/commit/64c56566c5b706111181d50ff8eb938007965077) - cmd/cue: fix registry client race by [@rogpeppe](https://github.com/rogpeppe) in [`3d1c0cb`](https://github.com/cue-lang/cue/commit/3d1c0cb3f5e0abef4e6638d6775c2672968d2863) - cmd/cue: add mod registry server command by [@rogpeppe](https://github.com/rogpeppe) in [`649c7f6`](https://github.com/cue-lang/cue/commit/649c7f6b554b9197e4622789de6a4aa94c9baf6f) - clarify that we require Go 1.21 or later now by [@mvdan](https://github.com/mvdan) in [`bef7c4e`](https://github.com/cue-lang/cue/commit/bef7c4e3c81f73cca11f8537e570b7f0de848059) - internal/ci: upgrade Go matrix include go1.22.0 by [@myitcv](https://github.com/myitcv) in [`63dbc2d`](https://github.com/cue-lang/cue/commit/63dbc2d8ec3a49f5648fee20fb5077e7b492d787) - internal/ci: use node.js 20-compatible action versions by [@myitcv](https://github.com/myitcv) in [`15a4b3e`](https://github.com/cue-lang/cue/commit/15a4b3e6248c15562d8b9cff362ae022cba62c61) - README: simplify "install from source" instructions by [@mvdan](https://github.com/mvdan) in [`5037afc`](https://github.com/cue-lang/cue/commit/5037afcea7ca1ae083a2468c6582ffca5aec04e2) - README: add Docker badge and instructions by [@mvdan](https://github.com/mvdan) in [`b6a6f67`](https://github.com/cue-lang/cue/commit/b6a6f67151dda4eb398ddb1037fd9621dfe64cd2) - bump cuelabs.dev/go/oci/ociregistry dependency by [@mvdan](https://github.com/mvdan) in [`0eb0106`](https://github.com/cue-lang/cue/commit/0eb0106420d787df23f4727c44556e62d50e4ccb) - cmd/cue: simplify exec trimming in TestX by [@nnnkkk7](https://github.com/nnnkkk7) in [`eafeb11`](https://github.com/cue-lang/cue/commit/eafeb11b1bf827f1d3005bb91f177838d7788ae5) - pkg/path: fix package comment by [@jpluscplusm](https://github.com/jpluscplusm) in [`4818cf7`](https://github.com/cue-lang/cue/commit/4818cf71b897680a320909d383af0b78885afe1c) - cue/load: allow conversion of module-local paths to OS paths by [@rogpeppe](https://github.com/rogpeppe) in [`20451a6`](https://github.com/cue-lang/cue/commit/20451a6f7a268ea1616b2ebcf2ec2f1836ab6509) - cmd/cue: add test for self import in modules mode by [@rogpeppe](https://github.com/rogpeppe) in [`707c6d7`](https://github.com/cue-lang/cue/commit/707c6d799cde3961f111f6424e17144df351d9a2) - internal/e2e: switch all tests to `cue mod publish` by [@mvdan](https://github.com/mvdan) in [`2930a8e`](https://github.com/cue-lang/cue/commit/2930a8ea50835be296fadcf12493552f03cb38cb) - README: remove obsolete mention of Google by [@jpluscplusm](https://github.com/jpluscplusm) in [`64a117c`](https://github.com/cue-lang/cue/commit/64a117c07a084f82970596f3ac67023087952f4f) - cue/load: make the tests less noisy by [@mvdan](https://github.com/mvdan) in [`079532c`](https://github.com/cue-lang/cue/commit/079532c83d213922a0ba241044b7f8b36b0c32f4) - cue/load: use fewer absolute paths in tests by [@mvdan](https://github.com/mvdan) in [`a25c24b`](https://github.com/cue-lang/cue/commit/a25c24b5c74e99c76dcc53f2d9be7e1bbcf64bae) - cue/parser: make the example self-contained by [@mvdan](https://github.com/mvdan) in [`fc77363`](https://github.com/cue-lang/cue/commit/fc77363e23b405e8e5b12c374b4491ff61bceba9) - internal/mod/modload: fix panic on error in tidy by [@rogpeppe](https://github.com/rogpeppe) in [`3146f22`](https://github.com/cue-lang/cue/commit/3146f220ab798b357723789ee47d44c1310dc150) - internal/mod: fix tidy in the presence of local code by [@rogpeppe](https://github.com/rogpeppe) in [`2a56875`](https://github.com/cue-lang/cue/commit/2a56875bdecf2309fee328bb9646c28466a6ddef) - cmd/cue: make the config directory configurable by [@mvdan](https://github.com/mvdan) in [`22b1ca3`](https://github.com/cue-lang/cue/commit/22b1ca360e09209ad16dc346d41f0133f6ef3830) - internal/e2e: start using `cue mod tidy` by [@mvdan](https://github.com/mvdan) in [`34db9eb`](https://github.com/cue-lang/cue/commit/34db9eb3f3109337b860f497f5d48374f5aac807) - cmd/cue: add version to module.cue file by [@rogpeppe](https://github.com/rogpeppe) in [`9ceec10`](https://github.com/cue-lang/cue/commit/9ceec10fe2f786e4bfca3d030b97dea76bffca2b) - cue/load: fix crash when there is no module file by [@rogpeppe](https://github.com/rogpeppe) in [`ec7ca0a`](https://github.com/cue-lang/cue/commit/ec7ca0af55c7842590259fee2d08f4303ab53123) - internal/e2e: start using `cue mod init modpath@version` by [@mvdan](https://github.com/mvdan) in [`7855e15`](https://github.com/cue-lang/cue/commit/7855e15cb70165ba9b09d6c654fb90aa2a12a082) - cue/token: deprecate base offset by [@rogpeppe](https://github.com/rogpeppe) in [`b0358a6`](https://github.com/cue-lang/cue/commit/b0358a63d2d9bd35c82d160a788c063f340b11fe) - cmd/cue/cmd: support major versions in module path by [@rogpeppe](https://github.com/rogpeppe) in [`e8efa7e`](https://github.com/cue-lang/cue/commit/e8efa7eb57c13949453c360ec62c65bd2ce5098a) - internal/mod/modload: support adding language version by [@rogpeppe](https://github.com/rogpeppe) in [`2120803`](https://github.com/cue-lang/cue/commit/2120803d2c4c2040a2f74958ab321f0365b82911) - internal/mod/modpkgload: support gen directories by [@rogpeppe](https://github.com/rogpeppe) in [`c6e4adf`](https://github.com/cue-lang/cue/commit/c6e4adf242070a9ded2500e73e27a26a590616f6) - internal/e2e: tweak expected error string after the cue/load changes by [@mvdan](https://github.com/mvdan) in [`b67300b`](https://github.com/cue-lang/cue/commit/b67300b01debf44b972b32ec0726b9431445de99) - cue/load: use modpkgload to resolve dependencies by [@rogpeppe](https://github.com/rogpeppe) in [`fa12218`](https://github.com/cue-lang/cue/commit/fa12218c36d14e682317066a87dc3d39cb2d22f9) - cmd/cue/cmd: add (failing) submodule test by [@rogpeppe](https://github.com/rogpeppe) in [`8889d6a`](https://github.com/cue-lang/cue/commit/8889d6a8ab3d8791c5647dbeac200510dc79b23d) - cue/load: implement io/fs.FS for overlay filesystem by [@rogpeppe](https://github.com/rogpeppe) in [`83a70c6`](https://github.com/cue-lang/cue/commit/83a70c64d59752e42d1570a765c1026fb65a34d0) - cue/load: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`2be5931`](https://github.com/cue-lang/cue/commit/2be5931b62377c34fc2b50642b31eb3757d6a399) - cmd/cue: use tokens from "cue login" before docker's config.json by [@mvdan](https://github.com/mvdan) in [`0e4ec67`](https://github.com/cue-lang/cue/commit/0e4ec6768633be8c88459c9999f8eeb592866638) - cmd/cue: store tokens once "cue login" succeeds by [@mvdan](https://github.com/mvdan) in [`786095f`](https://github.com/cue-lang/cue/commit/786095f4ebdf4a32b929fb9ecb8fc8522bb1666a) - internal/mod: track dependencies at package level by [@rogpeppe](https://github.com/rogpeppe) in [`af405f0`](https://github.com/cue-lang/cue/commit/af405f0b529b82d88625080fa222e3893255b109) - cue/load: use module.ParseImportPath by [@rogpeppe](https://github.com/rogpeppe) in [`36a4ce4`](https://github.com/cue-lang/cue/commit/36a4ce4c00d008e68044d3965dd4cc98d6acdce6) - internal/mod/module: add ParseImportPath by [@rogpeppe](https://github.com/rogpeppe) in [`22cf402`](https://github.com/cue-lang/cue/commit/22cf40243f28f59c053f1fabf3b1df02d1d72de9) - cmd/cmd: add environment help by [@rogpeppe](https://github.com/rogpeppe) in [`ed4fcdc`](https://github.com/cue-lang/cue/commit/ed4fcdcc4b2476c657c66a26b6c6b7e0b86f68b4) - internal/mod/modpkgload: add test for package-level dependencies by [@rogpeppe](https://github.com/rogpeppe) in [`b6032be`](https://github.com/cue-lang/cue/commit/b6032bee7815efbd731bd2190be54174bdad076f) - pkg/tool/exec: update env spec to support lists by [@nickfiggins](https://github.com/nickfiggins) in [`92d99d0`](https://github.com/cue-lang/cue/commit/92d99d0c7528d208ef336df671032c497d9d18f8) - internal/core/adt: use ConjunctGroup in fields by [@mpvl](https://github.com/mpvl) in [`a849212`](https://github.com/cue-lang/cue/commit/a8492120a236a7d3918f228fa62199f1fe631fb2) - internal/mod/modresolve: allow other forms of IPv6 localhost by [@rogpeppe](https://github.com/rogpeppe) in [`522eb97`](https://github.com/cue-lang/cue/commit/522eb97c67248c82bd8e7661a2cd9a2740b5f608) - cue/errors: remove unused field by [@rogpeppe](https://github.com/rogpeppe) in [`693cc0e`](https://github.com/cue-lang/cue/commit/693cc0e10c995b97cfaf91608265b725f7f47744) - internal/mod: remove TODOs that have been done by [@rogpeppe](https://github.com/rogpeppe) in [`1fff098`](https://github.com/cue-lang/cue/commit/1fff0989e9315e3f72467a270177c3e11bace1b6) - internal/core/adt: remove disallowedField by [@mpvl](https://github.com/mpvl) in [`657ae6b`](https://github.com/cue-lang/cue/commit/657ae6b960e5edc647dd20b62360ae703dd3d657) - internal/core/adt: use OpContext instead of nodeContext for decDependant by [@mpvl](https://github.com/mpvl) in [`1df027b`](https://github.com/cue-lang/cue/commit/1df027bfd0e743c560333ef4721342d0e463681b) - pkg: fix CUE source escaping TODO by [@mvdan](https://github.com/mvdan) in [`1dda25a`](https://github.com/cue-lang/cue/commit/1dda25abd14f6f5d5382f1274445f42bff245e07) - internal/e2e: write the rest of an inline comment by [@mvdan](https://github.com/mvdan) in [`97826df`](https://github.com/cue-lang/cue/commit/97826dfb43b68fc66015cf0709b4914c1a23e2d5) - tools/flow: use atomic.Bool by [@mvdan](https://github.com/mvdan) in [`fefadfc`](https://github.com/cue-lang/cue/commit/fefadfcfeb0782b79ac9f02132d184cfa67bff7c) - internal/ci: add a TODO about "goreleaser test" by [@mvdan](https://github.com/mvdan) in [`21086d0`](https://github.com/cue-lang/cue/commit/21086d088e262a113a1fbb747ca3ae5c868ce4d5) - cue: replace Instance.value with Instance.Value by [@mvdan](https://github.com/mvdan) in [`20a4505`](https://github.com/cue-lang/cue/commit/20a45056af9bbccb9cf34ca3e08f9560fe3702df) - encoding/gocode: replace cue.Instance with InstanceOrValue by [@mvdan](https://github.com/mvdan) in [`dbf2b75`](https://github.com/cue-lang/cue/commit/dbf2b756cf4551346386e0bbaf6200d4e6144b1e) - internal/ci: support co-authors in the signed-off-by check by [@mvdan](https://github.com/mvdan) in [`87a2e5c`](https://github.com/cue-lang/cue/commit/87a2e5c47cce8edd47435b3b38b2a136f3ffc064) - pkg/tool/exec: support defaults in env values by [@nickfiggins](https://github.com/nickfiggins) in [`e7c2ede`](https://github.com/cue-lang/cue/commit/e7c2ede2f89a98339234d0bce446c5a120ac506b) - internal/core/adt: implement checks for closedness counters by [@mpvl](https://github.com/mpvl) in [`928ff3e`](https://github.com/cue-lang/cue/commit/928ff3e3cab3654df1daa22e8e2a3340a58f0420) - internal/core/adt: reorganize for field checks by [@mpvl](https://github.com/mpvl) in [`2b483d7`](https://github.com/cue-lang/cue/commit/2b483d779b547654c8c98b3b0b0d13752b839553) - internal/core/adt: move rootCloseContext to Vertex by [@mpvl](https://github.com/mpvl) in [`596adda`](https://github.com/cue-lang/cue/commit/596adda2d34ce15b2d188ff5db174f4a1d67cd99) - internal/core/adt: copy node method for comprehensions by [@mpvl](https://github.com/mpvl) in [`122b11f`](https://github.com/cue-lang/cue/commit/122b11fe029662e34393100823589263b5db0f32) - internal/core/adt: only show stats for old evaluator by [@mpvl](https://github.com/mpvl) in [`ce798a7`](https://github.com/cue-lang/cue/commit/ce798a78c86c42e0fafe569277a0b25bcbcebfb7) - internal/core/adt: pass flags needed for new evaluator by [@mpvl](https://github.com/mpvl) in [`7fcc936`](https://github.com/cue-lang/cue/commit/7fcc9368fb6f94cad6795b66eb176a4cf6d9232c) - internal/core/adt: fix typo in insertion.txtar by [@mpvl](https://github.com/mpvl) in [`409ab1e`](https://github.com/cue-lang/cue/commit/409ab1e0c70c68046a37f8d8671523eea20baa41) - internal/core/adt: add positions of ConjunctGroup by [@mpvl](https://github.com/mpvl) in [`d06d126`](https://github.com/cue-lang/cue/commit/d06d126bb766df43e94a6c3e317c885f0ca017c2) - internal/core/adt: handle comprehension cycle errors by [@mpvl](https://github.com/mpvl) in [`0b90ccc`](https://github.com/cue-lang/cue/commit/0b90cccf0af6187683469e4053d14ac59e216b14) - internal/core/adt: add tests to pass for new evaluator by [@mpvl](https://github.com/mpvl) in [`7453a50`](https://github.com/cue-lang/cue/commit/7453a50604b5be86a78c2f342e08ff428474e2da) - internal/code/adt: hoist position to different line by [@mpvl](https://github.com/mpvl) in [`106ce1a`](https://github.com/cue-lang/cue/commit/106ce1a50adf1e4bf655251e2e50e17aa8fdec8d) - internal/core/adt: bail out early from resolve upon error by [@mpvl](https://github.com/mpvl) in [`6ead06a`](https://github.com/cue-lang/cue/commit/6ead06af21289e4e15e16ffd08d526a82b1942cf) - internal/core/adt: hoist hasConjuncts by [@mpvl](https://github.com/mpvl) in [`cbcabcf`](https://github.com/cue-lang/cue/commit/cbcabcff38b103bcfdea0831d0b62e950d0a66d3) - internal/core/adt: don't match patters for non-regular fields by [@mpvl](https://github.com/mpvl) in [`ca725a8`](https://github.com/cue-lang/cue/commit/ca725a8d6b7fd0a7aee7628aca267088b3c81c43) - internal/core/runtime: move EvaluatorVersion to Runtime by [@mpvl](https://github.com/mpvl) in [`53ed0f6`](https://github.com/cue-lang/cue/commit/53ed0f66d1830563c5341666c59253a20d3c756f) - internal/core/adt: move OpContext out of nodeContext by [@mpvl](https://github.com/mpvl) in [`200c994`](https://github.com/cue-lang/cue/commit/200c994524482143cbb1b7b20d5671edc5e5649b) - internal/core/adt: add scheduler implementation by [@mpvl](https://github.com/mpvl) in [`9728b7d`](https://github.com/cue-lang/cue/commit/9728b7d1a680803585af811117eaf6e7f4b72634) - all: update Wazero to 1.6.0 by [@4ad](https://github.com/4ad) in [`5c5d291`](https://github.com/cue-lang/cue/commit/5c5d291aa13b364cec9cd7a2c55db634a83de20c) - internal/cli: improve error message on parse issue by [@cedricgc](https://github.com/cedricgc) in [`b55e471`](https://github.com/cue-lang/cue/commit/b55e471aacdab1a4fd0a0943fca22695562fb799) - internal/core/adt: hoist getNonCyclicCount by [@mpvl](https://github.com/mpvl) in [`4cc7bc7`](https://github.com/cue-lang/cue/commit/4cc7bc77900d90d9d548faf568128bd86f791c85) - internal/cuetxtar: use go-internal diff by [@mpvl](https://github.com/mpvl) in [`54e1699`](https://github.com/cue-lang/cue/commit/54e1699086143d00bc8ffbd517de7d4b5a5cdff9) - internal/core/adt: include ConjunctGroup in addPositions by [@mpvl](https://github.com/mpvl) in [`d5431b2`](https://github.com/cue-lang/cue/commit/d5431b207f60b3367d1bb77ac23de2cbf72a155c) - internal/core/adt: modify some tests by [@mpvl](https://github.com/mpvl) in [`82e4cef`](https://github.com/cue-lang/cue/commit/82e4cefb47e8bd60f70ea754d90a3a8b0298f2f8) - internal/core/adt: prep for new evaluator by [@mpvl](https://github.com/mpvl) in [`8146191`](https://github.com/cue-lang/cue/commit/81461912d7b5fcf157b2c0996b3f11919d956acb) - internal/core/adt: introduce ConjunctGroup by [@mpvl](https://github.com/mpvl) in [`afed6ae`](https://github.com/cue-lang/cue/commit/afed6aec0c23b3101643098e1d9fe9cc71558d36) - internal/core/adt: unroll Evaluate in OpContext.concrete by [@mpvl](https://github.com/mpvl) in [`8933b8c`](https://github.com/cue-lang/cue/commit/8933b8c4413aacaba86c9467fe07ffc8d7567a72) - internal/core/adt: add String implementation for ArcType by [@mpvl](https://github.com/mpvl) in [`cc76012`](https://github.com/cue-lang/cue/commit/cc7601209abfd815e2e18e65f6f6d03424e2eddd) - pkg/net: add IPv6 check by [@martingreber](https://github.com/martingreber) in [`bc91ca7`](https://github.com/cue-lang/cue/commit/bc91ca757471c0bfa0a12c099ce2172d8aa89912) - internal/core: remove unused argument by [@mpvl](https://github.com/mpvl) in [`da0eab4`](https://github.com/cue-lang/cue/commit/da0eab4373cc81ccf8fa902c77751a711558b555) - internal/e2e: use cue mod publish by [@rogpeppe](https://github.com/rogpeppe) in [`3d09a4a`](https://github.com/cue-lang/cue/commit/3d09a4aafb64d459fdc60348dc2da4665759a4b2) - cmd/cue: add hidden login command by [@mvdan](https://github.com/mvdan) in [`0a5e225`](https://github.com/cue-lang/cue/commit/0a5e225f75684b8085947389e5e4b8e8b12d102a) - cmd/cue/cmd: amend the default for CUE_REGISTRY by [@mvdan](https://github.com/mvdan) in [`b01d129`](https://github.com/cue-lang/cue/commit/b01d1296f3be48517273ab0bf404513ac30bf421) - cmd/cue: rename mod upload to mod publish by [@rogpeppe](https://github.com/rogpeppe) in [`cc1eaf0`](https://github.com/cue-lang/cue/commit/cc1eaf06e2f90bcb6ba03d1d274e5d3c64f583cb) - cmd/cue: allow cue mod tidy in non-module root by [@rogpeppe](https://github.com/rogpeppe) in [`f260855`](https://github.com/cue-lang/cue/commit/f26085535bcd247376ddcb525e6d944ad94ee3da) - internal/registrytest: upload deterministically by [@rogpeppe](https://github.com/rogpeppe) in [`c4c064d`](https://github.com/cue-lang/cue/commit/c4c064dbc34bea9be85c0ec61d173420a656a292) - internal/mod/modfile: avoid unnecessary braces by [@rogpeppe](https://github.com/rogpeppe) in [`7bcfd0b`](https://github.com/cue-lang/cue/commit/7bcfd0bf2ad44e7b340cedbf01b939ee528d72c3) - internal/mod/modregistry: add Module.Version method by [@rogpeppe](https://github.com/rogpeppe) in [`72766c2`](https://github.com/cue-lang/cue/commit/72766c22bb627c355b1ac90751f4bf3fc6b313c2) - internal/registrytest: add Upload function by [@rogpeppe](https://github.com/rogpeppe) in [`414695f`](https://github.com/cue-lang/cue/commit/414695f8296c30e065df3179abbd16565387de36) - internal/mod/modregistry: add GetModuleWithManifest method by [@rogpeppe](https://github.com/rogpeppe) in [`76298d4`](https://github.com/cue-lang/cue/commit/76298d4fbcfe6f40d4ecc57c3f262dfe6f25a746) - pkg/net: replace net with net/netip by [@martingreber](https://github.com/martingreber) in [`87a3b17`](https://github.com/cue-lang/cue/commit/87a3b178363111616d67de3cb944e9f073ec9d3d) - internal/cmd: add cue-ast-print to visualize syntax trees by [@mvdan](https://github.com/mvdan) in [`bf94b66`](https://github.com/cue-lang/cue/commit/bf94b6623fc5c631f6a9be7f337baacc5adc833d) - deps: upgrade to latest cuelabs.dev/go/oci/ociregistry by [@myitcv](https://github.com/myitcv) in [`c84175b`](https://github.com/cue-lang/cue/commit/c84175b633d517fd53dcba425e5e30fdf2189223) - go.mod: bump non-user-facing dependencies by [@mvdan](https://github.com/mvdan) in [`3594d13`](https://github.com/cue-lang/cue/commit/3594d137a6d32bccc87a9fb71cb8abd1fda6c28e) - internal/encoding/yaml: quote hexadecimal-looking strings by [@vikstrous](https://github.com/vikstrous) in [`0b3455c`](https://github.com/cue-lang/cue/commit/0b3455c57086b3d0bd3368351800ed9e1ed10d06) - internal/e2e: set CUE_MODCACHE in TestScript's Setup by [@mvdan](https://github.com/mvdan) in [`db98219`](https://github.com/cue-lang/cue/commit/db9821976166f1bd91797bece93766ed6d4a1fb7) - cue/load: use cached registry by [@rogpeppe](https://github.com/rogpeppe) in [`7dc80ff`](https://github.com/cue-lang/cue/commit/7dc80ffe46228731b4299174e25761989819a85e) - cmd/cue: use cached registry for cue mod tidy by [@rogpeppe](https://github.com/rogpeppe) in [`400f829`](https://github.com/cue-lang/cue/commit/400f8297ef6f1d92563afba784dc43f12ad248fa) - internal/mod/modfile: guard against cue.Value race by [@rogpeppe](https://github.com/rogpeppe) in [`53d036a`](https://github.com/cue-lang/cue/commit/53d036a14d907f1a1e5093b72b55279b3de1ae7f) - internal/mod/modcache: use robustio by [@rogpeppe](https://github.com/rogpeppe) in [`c5e1342`](https://github.com/cue-lang/cue/commit/c5e13428d42d0dbad48db2dba9540074e94a75a5) - internal/mod/modcache: new package by [@rogpeppe](https://github.com/rogpeppe) in [`c3ec30c`](https://github.com/cue-lang/cue/commit/c3ec30c762363e84c6c10e8e194789fe013c50f9) - cmd/cue: remove a stale TODO on marshaler types by [@mvdan](https://github.com/mvdan) in [`a567677`](https://github.com/cue-lang/cue/commit/a567677828a8e15c6856036bd6a39eeb0ec3d277) - internal/mod/modregistry: avoid round trip by [@rogpeppe](https://github.com/rogpeppe) in [`e090abf`](https://github.com/cue-lang/cue/commit/e090abf7ffd9257c2d55169ed62fced318708fcb) - internal/mod/module: add support for escaping by [@rogpeppe](https://github.com/rogpeppe) in [`576c564`](https://github.com/cue-lang/cue/commit/576c56499311dd3e56452399739556e89c8385f6) - internal/mod/modregistry: add ManifestDigest by [@rogpeppe](https://github.com/rogpeppe) in [`3c187c5`](https://github.com/cue-lang/cue/commit/3c187c53fe132e45360dab181ed0c4e2249b0c5b) - doc/ref: use builtin instead of built-in by [@jpluscplusm](https://github.com/jpluscplusm) in [`7ed1bca`](https://github.com/cue-lang/cue/commit/7ed1bcaa253fc9111fd61ee3713da11b1f2e464a) - internal/mod/modload: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`ac248f4`](https://github.com/cue-lang/cue/commit/ac248f4461117fd51810de39d33adc8694297fd3) - internal/maps: new package by [@rogpeppe](https://github.com/rogpeppe) in [`1958c32`](https://github.com/cue-lang/cue/commit/1958c325d22e646d0314951fc8503f3c32d64d43) - internal/mod/modpkgload: support packages without major versions by [@rogpeppe](https://github.com/rogpeppe) in [`3cfb6e2`](https://github.com/cue-lang/cue/commit/3cfb6e2688c827cafb0a582b01df2e9fcd5350ee) - internal/mod/modrequirements: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`7afd472`](https://github.com/cue-lang/cue/commit/7afd472d78b089ec87a1c2b5ef1cba8136fb287d) - internal/mod/modregistry: support cross-major-version queries by [@rogpeppe](https://github.com/rogpeppe) in [`4773bf6`](https://github.com/cue-lang/cue/commit/4773bf6371f2e86f934d5722ca8a67b9daef2221) - modfile: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`faf7cd5`](https://github.com/cue-lang/cue/commit/faf7cd59fd6df8ab7132a4637f575712bd10f406) - cmd/cue: prevent failures if /tmp/cue.mod exists by [@mvdan](https://github.com/mvdan) in [`c8073f4`](https://github.com/cue-lang/cue/commit/c8073f406c3d4820a3befadfa9f6c7ee649ed725) - cue/load: drop support for legacy pkg directories by [@mvdan](https://github.com/mvdan) in [`e81d181`](https://github.com/cue-lang/cue/commit/e81d18160728bbc047dd8cb1f3488d44faede883) - cmd/cue: cue mod tidy command by [@rogpeppe](https://github.com/rogpeppe) in [`2635119`](https://github.com/cue-lang/cue/commit/26351196e988c652b8fcef574a3100b5a34c2d7b) - internal/mod/modload: new package by [@rogpeppe](https://github.com/rogpeppe) in [`6bd89dc`](https://github.com/cue-lang/cue/commit/6bd89dc2cb7f229678a373d7e7de79eb5d6e16b3) - internal/mod/modpkgload: new package by [@rogpeppe](https://github.com/rogpeppe) in [`3632c1f`](https://github.com/cue-lang/cue/commit/3632c1f880a27de8115c00fb0ba06628cc58bdd8) - internal/core: use precise apd.Decimal by [@myitcv](https://github.com/myitcv) in [`8271724`](https://github.com/cue-lang/cue/commit/8271724853575990db888a7e7e5dc43221bed454) - internal/mod/modrequirements: add GraphIsLoaded and RootModules by [@rogpeppe](https://github.com/rogpeppe) in [`74d7664`](https://github.com/cue-lang/cue/commit/74d7664b248348a01a84fd447a950353760afd50) - internal/mod/module: add Version.IsValid by [@rogpeppe](https://github.com/rogpeppe) in [`71ab88a`](https://github.com/cue-lang/cue/commit/71ab88aa581eeabbf1ae374f45e5c4113d0fe29d) - internal/mod/modregistry: return no tags for non-existent repo by [@rogpeppe](https://github.com/rogpeppe) in [`0c2c730`](https://github.com/cue-lang/cue/commit/0c2c730ce6dd9d636c32511ed68a11de665df0d8) - internal/mod/modfile: add Format by [@rogpeppe](https://github.com/rogpeppe) in [`7d588b9`](https://github.com/cue-lang/cue/commit/7d588b99f1121dba16f9c5b513eb8c947fa00dfc) - internal/mod/modimports: discard package qualifier in import paths by [@rogpeppe](https://github.com/rogpeppe) in [`4edbf9d`](https://github.com/cue-lang/cue/commit/4edbf9d7ec8da021a89f3148bec84fa3c3dae658) - README: drop golangci badge by [@mvdan](https://github.com/mvdan) in [`967c9c6`](https://github.com/cue-lang/cue/commit/967c9c68c7cd8b1042b3def3b7227b20be6dfc90) - update ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`e07c4b8`](https://github.com/cue-lang/cue/commit/e07c4b8becf619ee619b63a34e5873c67da85d6a) - internal/slices: add Equal by [@rogpeppe](https://github.com/rogpeppe) in [`4f4f718`](https://github.com/cue-lang/cue/commit/4f4f718258c5108134d89fdfc9657b83074c6e69) - internal/mod/modimports: support scanning single directory by [@rogpeppe](https://github.com/rogpeppe) in [`413d0d5`](https://github.com/cue-lang/cue/commit/413d0d5a6ce1ae9242ea90c725ff593a03efb0dd) - internal/mod/modrequirements: new package by [@rogpeppe](https://github.com/rogpeppe) in [`0e0d638`](https://github.com/cue-lang/cue/commit/0e0d6380d1ae24cd400fed81c2ec49d62550d0e5) - internal/ci: limit goreleaser to doing release drafts by [@mvdan](https://github.com/mvdan) in [`f3411b4`](https://github.com/cue-lang/cue/commit/f3411b4c38deb3cb606468053331aea3dc7dd04a) </details> ### [`v0.7.1`](https://github.com/cue-lang/cue/releases/tag/v0.7.1) [Compare Source](https://github.com/cue-lang/cue/compare/v0.7.0...v0.7.1) This release is a re-build of CUE v0.7.0 with Go 1.22.0 to prevent `cue get go` panics; see https://github.com/cue-lang/cue/issues/2802. ### [`v0.7.0`](https://github.com/cue-lang/cue/releases/tag/v0.7.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.6.0...v0.7.0) This release comprises a number of bug fixes and small improvements, as well as more ground work for Modules, WebAssembly, and the core evaluator's performance refactors. Note that v0.7 was [originally planned](https://github.com/cue-lang/cue/discussions/2335) to center around the core evaluator's performance improvements. Since those refactors are not ready, and we have other fixes and improvements we want to release, we have slightly altered the release plan accordingly. We will share more details on our [next community call](https://github.com/cue-lang/cue/discussions/2724). As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. Unity continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. Thank you to [@SteVwonder](https://github.com/SteVwonder), [@bozaro](https://github.com/bozaro), [@cedricgc](https://github.com/cedricgc), [@howardjohn](https://github.com/howardjohn), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@nickfiggins](https://github.com/nickfiggins), [@rogpeppe](https://github.com/rogpeppe), [@rudifa](https://github.com/rudifa), and [@uhthomas](https://github.com/uhthomas) for contributing to this release! And a special thanks to all who joined the recent contributor office hours calls on our [community calendar](https://cuelang.org/s/community-calendar), as well as our [#contributing channel](https://cuelang.slack.com/archives/CMY132JKY) on Slack! Thanks to their involvement, more issues can be investigated and fixed each release. #### Go API Note that this version of CUE requires Go 1.20 or later, per our policy to support the latest two stable Go releases just like upstream. [CL 1172105](https://cuelang.org/cl/1172105) fixes a regression introduced in v0.6.0 where calling `Iterator.Selector.Index` while iterating over a list would incorrectly panic. [CL 1167597](https://cuelang.org/cl/1167597) fixes `cue/load` so it now errors on package import cycles, following the spec. [CL 1167647](https://cuelang.org/cl/557322) adjusts `cue.Value.Decode` to decode empty CUE lists into a Go `interface{}` as a non-nil empty slice. [CL 547369](https://cuelang.org/cl/547369) teaches `cue.Value.Decode` how to decode values which aren't entirely concrete into a Go type by using `cue.Value` as part of the destination type. #### Language There are no changes to the language in this version. #### Spec [CL 1171216](https://cuelang.org/cl/1171216) fixes two errors in a dynamic fields example. #### Core Evaluator [CL 1172014](https://cuelang.org/cl/1172014) disallows the direct use of unary operators with basic types, since they would result in confusing bounds which seemed incorrect. [CL 1172013](https://cuelang.org/cl/1172013) fixes a closedness bug where `close` did not properly apply when used inside definitions. [CL 1172874](https://cuelang.org/cl/1172874) fixes a panic in `cue export` introduced by v0.6.0. #### Encoders [CL 1172314](https://cuelang.org/cl/1172314) teaches `encoding/protobuf` to follow the `field_behavior` annotation marking a field as either optional or required when decoding. #### Builtins [CL 1172991](https://cuelang.org/cl/1172991) adds a `mustSucceed` boolean parameter to `tool/exec.Run`, which can be set to `false` to allow a command to fail and set its own field `success` to `false`. [CL 557322](https://cuelang.org/cl/557322) fixes the values of `math`'s `Log2E` and `Log10E` constants, which were being incorrectly truncated. #### `cmd/cue` CLs [1170966](https://cuelang.org/cl/1170966) and [1171302](https://cuelang.org/cl/1171302) fix a number of issues in `cue fmt` (and by extension the `cue/format` package), resulting in better and more consistent formatting of CUE files. CLs [1171292](https://cuelang.org/cl/1171292), [1171015](https://cuelang.org/cl/1171015), [1170115](https://cuelang.org/cl/1170115), and [1171971](https://cuelang.org/cl/1171971) implement a variety of improvements and bug fixes for `cue get go`. [CL 1172017](https://cuelang.org/cl/1172017) fixes a number of issues with the line and column positions reported by our YAML decoder, which could result in weird CUE formatting when using `cue import` or misleading positions being shown to the user. [CL 1169709](https://cuelang.org/cl/1169709) increases the robustness of `cue export -o`, which in some situations could ignore file errors or incorrectly replace an existing file without the `-f` flag. [CL 1173072](https://cuelang.org/cl/1173072) fixes a panic when using `cue import --list` with empty YAML input. [CL 1168436](https://cuelang.org/cl/1168436) updates the `cue export` documentation to add the missing `cue` and `binary` supported export formats. #### Modules A number of changes are included to support an experimental implementation of the [proposed modules and package management support](https://github.com/cue-lang/cue/discussions/2330). These aren't enabled by default, and will be announced soon. <details> <summary>Full list of changes since v0.6.0</summary> - internal/ci: bump to Go 1.21.5 for the upcoming release by [@mvdan](https://github.com/mvdan) in [`ce1ad81`](https://github.com/cue-lang/cue/commit/ce1ad81f0aee1f88ef12dbf463551f694e8dd906) - cmd/cue: fix panic when importing empty files as a list by [@uhthomas](https://github.com/uhthomas) in [`b36b477`](https://github.com/cue-lang/cue/commit/b36b4775e6a890899c460f62f8e59b4182d63c2a) - internal/core/adt: change semantics of unary_op(basictype) by [@mpvl](https://github.com/mpvl) in [`e1ceed4`](https://github.com/cue-lang/cue/commit/e1ceed434f211be0c6bdd3d8fea767765b1b0b92) - internal/core/adt: fix closedness bug by [@mpvl](https://github.com/mpvl) in [`886eefd`](https://github.com/cue-lang/cue/commit/886eefd407ed1566dc32f9735a04e990e6c1df84) - internal/core/adt: add test to prepare for fix by [@mpvl](https://github.com/mpvl) in [`145764d`](https://github.com/cue-lang/cue/commit/145764d8f94e9fd19e96f74cc220b415a234ffb8) - CONTRIBUTING: mention the Slack channel and office hours calls by [@mvdan](https://github.com/mvdan) in [`16a0cda`](https://github.com/cue-lang/cue/commit/16a0cdaa5912852e91b9e75d9e4b533fed87f720) - pkg/tool/exec: add a Run.mustSucceed parameter by [@nickfiggins](https://github.com/nickfiggins) in [`10c4796`](https://github.com/cue-lang/cue/commit/10c47964349a308d3e05f52c99aa996ad06d4315) - cue: explicitly document values are not safe for concurrent use by [@mvdan](https://github.com/mvdan) in [`d805c22`](https://github.com/cue-lang/cue/commit/d805c22e75cd4007a029f17a735e5992c741da16) - internal/ci: bump Go and GoReleaser for v0.7.0-rc.1 by [@mvdan](https://github.com/mvdan) in [`8f88dcb`](https://github.com/cue-lang/cue/commit/8f88dcb3b3ef0c4dc120e70b9303c60a1e085d8d) - internal/slices: move from internal/mod/mvs/internal/slices by [@rogpeppe](https://github.com/rogpeppe) in [`0e51dbb`](https://github.com/cue-lang/cue/commit/0e51dbb4ea0014f8526bd61ac418df38316d67fd) - internal/mod/internal/par: move from internal/mod/mvs/internal/par by [@rogpeppe](https://github.com/rogpeppe) in [`fe0e04a`](https://github.com/cue-lang/cue/commit/fe0e04a55865b1181efeb2a3f9e238892a51bb4e) - internal/registrytest: do not check that dependencies exist by [@rogpeppe](https://github.com/rogpeppe) in [`99bdbad`](https://github.com/cue-lang/cue/commit/99bdbadb556e31df01aff775dff5cac49861120f) - internal/mod/modimports: new package by [@rogpeppe](https://github.com/rogpeppe) in [`79033c2`](https://github.com/cue-lang/cue/commit/79033c20d13a321eb4975b3b9848f16f0e06a2ba) - internal/core/export: fix a recent nil pointer regression by [@rudifa](https://github.com/rudifa) in [`141925a`](https://github.com/cue-lang/cue/commit/141925a62c4b579ff6e7399f5948da4935fddb94) - internal/core/adt: use state directly by [@mpvl](https://github.com/mpvl) in [`bba2263`](https://github.com/cue-lang/cue/commit/bba22633a71f82f653dc63fb71e9c8d79ce55104) - internal/core/adt: expand on permutations for test by [@mpvl](https://github.com/mpvl) in [`596fdc9`](https://github.com/cue-lang/cue/commit/596fdc957640dc545b9787b0f6140aa03b0b964d) - internal/cuetxtar: include diff between test and fallback test by [@mpvl](https://github.com/mpvl) in [`6774d0d`](https://github.com/cue-lang/cue/commit/6774d0df6229412fb683fbc3ba7d1a9502229267) - internal/txtarfs: factor out from registrytest by [@rogpeppe](https://github.com/rogpeppe) in [`265a7a0`](https://github.com/cue-lang/cue/commit/265a7a0fb42980582f6033615ff82dfe4e1a110b) - internal/cueimports: export API and fix for CUE syntax by [@rogpeppe](https://github.com/rogpeppe) in [`47d6dce`](https://github.com/cue-lang/cue/commit/47d6dcedde5c8c8623758044eb247c172ba4e4bf) - internal/cueimports: copy code from cue/load by [@rogpeppe](https://github.com/rogpeppe) in [`9e55783`](https://github.com/cue-lang/cue/commit/9e5578368fabaae51df0fbaa3bf5d38d3f88ff89) - cue/load: remove unused functionality by [@rogpeppe](https://github.com/rogpeppe) in [`b727189`](https://github.com/cue-lang/cue/commit/b727189d3a09026e16023b6ac239e27adb7e0bae) - all: replace html/template by text/template by [@mvdan](https://github.com/mvdan) in [`361ae4f`](https://github.com/cue-lang/cue/commit/361ae4f49aefbeb99a99c683bb7ba34cfbd7457a) - encoding/protobuf: support field_behavior "required" option by [@howardjohn](https://github.com/howardjohn) in [`80b0eee`](https://github.com/cue-lang/cue/commit/80b0eee3ff373caa279e9758c79489a7a967397e) - cmd/cue: fix incorrect position in yaml import by [@uhthomas](https://github.com/uhthomas) in [`d97b0c3`](https://github.com/cue-lang/cue/commit/d97b0c3bc6e57a7e0409c0fdf5f4508a6ed6ce1e) - all: adopt .gitignore for new delve binary naming by [@mpvl](https://github.com/mpvl) in [`68e9d5d`](https://github.com/cue-lang/cue/commit/68e9d5d75f9241a449fb69856d421566d0d533d7) - internal/core/adt: make ListMarker Src an expression by [@mpvl](https://github.com/mpvl) in [`f59894c`](https://github.com/cue-lang/cue/commit/f59894c3dd9857b5bdacce838ce4d64ef544ac38) - internal/core/adt: changes needed for new evaluator by [@mpvl](https://github.com/mpvl) in [`fb88beb`](https://github.com/cue-lang/cue/commit/fb88bebcae967c3fdc14df9d5b35cbbb30ca0399) - cue: don't panic on Iterator.Selector.Index with lists by [@mvdan](https://github.com/mvdan) in [`9dd0f82`](https://github.com/cue-lang/cue/commit/9dd0f82df8e8608920b4044c40d977115a5cc95b) - cue: allow top level JSON marshalers in EncodeType by [@rogpeppe](https://github.com/rogpeppe) in [`8f796bf`](https://github.com/cue-lang/cue/commit/8f796bf3b001867fa1fbd9b33de218c27452e6d1) - cue: support decoding into cue.Value fields by [@rogpeppe](https://github.com/rogpeppe) in [`b25fc05`](https://github.com/cue-lang/cue/commit/b25fc05e59e6c04614617b59ce082091219a301a) - internal/mod/mvs: discard copied par tests by [@mvdan](https://github.com/mvdan) in [`4e30101`](https://github.com/cue-lang/cue/commit/4e301018fa52dde2ec1c2c9cadb7470297e27ef9) - CONTRIBUTING: fix repo reference rendering by [@cedricgc](https://github.com/cedricgc) in [`7a4ea86`](https://github.com/cue-lang/cue/commit/7a4ea8668a03d0cb2458ee264e5f582a2d5107e5) - internal/e2e: make unique module names more robust by [@mvdan](https://github.com/mvdan) in [`a404c89`](https://github.com/cue-lang/cue/commit/a404c897f3615a77178e2ddbe0b07261622385a3) - cmd/cue: support optional comments in get go by [@uhthomas](https://github.com/uhthomas) in [`67ea9cf`](https://github.com/cue-lang/cue/commit/67ea9cf9c39a6cc55da357541019886b1ed0beaa) - cmd/cue: ignore complex types in get go by [@uhthomas](https://github.com/uhthomas) in [`112b0b2`](https://github.com/cue-lang/cue/commit/112b0b28a888e2a74016adc1704e0aef7b362870) - pkg/internal/builtintest: don't print superfluous newlines by [@uhthomas](https://github.com/uhthomas) in [`8b32c49`](https://github.com/cue-lang/cue/commit/8b32c491294c895394d38eeb67c8f7ab366c4a78) - internal/tdtest: document how the name field is used by [@rogpeppe](https://github.com/rogpeppe) in [`deab307`](https://github.com/cue-lang/cue/commit/deab3074bb95bb399075ad07e60b59cbef61a908) - internal/e2e: add a test for a private github repo by [@mvdan](https://github.com/mvdan) in [`4d2ba88`](https://github.com/cue-lang/cue/commit/4d2ba88849b660e30df921aa1d6f44d4c75ed8d8) - internal/ci: add gcloud auth to the e2e tests by [@mvdan](https://github.com/mvdan) in [`95a88a5`](https://github.com/cue-lang/cue/commit/95a88a547314e9c1f6351ece97ddf841ac7d4a67) - CONTRIBUTING: clarify two sections by [@cedricgc](https://github.com/cedricgc) in [`d947a69`](https://github.com/cue-lang/cue/commit/d947a69cab19477d99355a1cefb9d2291197ace5) - internal/e2e: add a "cue mod upload" end-to-end test with gcloud by [@mvdan](https://github.com/mvdan) in [`a060f85`](https://github.com/cue-lang/cue/commit/a060f85ddb5d9a9b020c2cf1f7dfc4daa24f7f98) - internal/e2e: rename existing testscript and add a summary by [@mvdan](https://github.com/mvdan) in [`4dba8dd`](https://github.com/cue-lang/cue/commit/4dba8ddfd715d57902ff050a340968237f0107f6) - internal/e2e: tweak how we use secret env vars by [@mvdan](https://github.com/mvdan) in [`d3efde7`](https://github.com/cue-lang/cue/commit/d3efde7804e30570f0e6ba27562aa778934bc30e) - internal/mod/modfile: add copyright message by [@rogpeppe](https://github.com/rogpeppe) in [`f9c8d98`](https://github.com/cue-lang/cue/commit/f9c8d98d1c31cbf34e376eb3eb78984b24476136) - cmd/cue: cue mod upload command by [@rogpeppe](https://github.com/rogpeppe) in [`ca20656`](https://github.com/cue-lang/cue/commit/ca2065618e2e277d3dfe22d6e0993f336203e481) - internal/ci: enforce vet and mod tidy on all modules by [@mvdan](https://github.com/mvdan) in [`2ae1a9e`](https://github.com/cue-lang/cue/commit/2ae1a9e8c909852e881f6992c38885d0b450c998) - internal/e2e: run go mod tidy by [@mvdan](https://github.com/mvdan) in [`8b95971`](https://github.com/cue-lang/cue/commit/8b9597173bb25c9274fb75f307adb5963db5bd94) - cue/load: do not format registry as a string by [@rogpeppe](https://github.com/rogpeppe) in [`4fd631d`](https://github.com/cue-lang/cue/commit/4fd631d10349ca4dda92b360dc4d7399b9c493e2) - internal/mod/modzip: rename from internal/mod/zip by [@rogpeppe](https://github.com/rogpeppe) in [`5365838`](https://github.com/cue-lang/cue/commit/5365838c091eb3effba5cc320612bb19a48b027b) - cmd/cue: wire up OCI authorization by [@rogpeppe](https://github.com/rogpeppe) in [`b2ac3f7`](https://github.com/cue-lang/cue/commit/b2ac3f7660e2706fdcfa4300f32c781ea6c1dbd0) - internal/registrytest: remove \_registry remnants by [@rogpeppe](https://github.com/rogpeppe) in [`273602f`](https://github.com/cue-lang/cue/commit/273602f2266fd12b2aa6f42a6f3119c1294b7fb9) - internal/ci: only run e2e tests in source repo by [@myitcv](https://github.com/myitcv) in [`b15fcb0`](https://github.com/cue-lang/cue/commit/b15fcb039af15018e423f4700a4de576f7e4607b) - internal/ci: test internal/e2e on protected branches by [@mvdan](https://github.com/mvdan) in [`d72997f`](https://github.com/cue-lang/cue/commit/d72997f50005d553ae24398271767153469bdc9a) - cmd/format: be consistent with whitespace in lists by [@uhthomas](https://github.com/uhthomas) in [`d70007c`](https://github.com/cue-lang/cue/commit/d70007c116281516ed051982a9897013119df417) - internal/e2e: first version of the end-to-end module tests by [@mvdan](https://github.com/mvdan) in [`8c826bc`](https://github.com/cue-lang/cue/commit/8c826bcf6c20ec01d1af32cfb9785ca4f8f87905) - cmd/cue: support type parameters in get go by [@uhthomas](https://github.com/uhthomas) in [`3b4e03d`](https://github.com/cue-lang/cue/commit/3b4e03d597532c90c34cee5c3c17b5e109999d35) - cue: add more godoc links by [@mvdan](https://github.com/mvdan) in [`286dfcb`](https://github.com/cue-lang/cue/commit/286dfcb833fc924aa0582f18efeb1e95618bc73c) - cmd/cue: support unsafe pointer in get go by [@uhthomas](https://github.com/uhthomas) in [`05ceba6`](https://github.com/cue-lang/cue/commit/05ceba661e39f78c91a35977abd54418c75a2148) - spec: fix two errors in the dynamic fields example by [@SteVwonder](https://github.com/SteVwonder) in [`200a8ec`](https://github.com/cue-lang/cue/commit/200a8ecac56180f662bed17a9d4d510f9f243f2d) - README: add a direct mention of the community calendar by [@mvdan](https://github.com/mvdan) in [`8a98ac0`](https://github.com/cue-lang/cue/commit/8a98ac0854cc7df6dd8173bdebe3bb27964f11cc) - cmd/cue/cmd: wire up modmux by [@rogpeppe](https://github.com/rogpeppe) in [`ac1b433`](https://github.com/cue-lang/cue/commit/ac1b4339f0f214548fbce582af257fdad6891426) - internal/mod/modmux: new package by [@rogpeppe](https://github.com/rogpeppe) in [`8e24597`](https://github.com/cue-lang/cue/commit/8e24597e6eacfb5785207093c0d311c43a403a3f) - cue/format: indent list elements correctly by [@uhthomas](https://github.com/uhthomas) in [`eddccfc`](https://github.com/cue-lang/cue/commit/eddccfc72316a648971d9684ac5dcd003ee26385) - internal/registrytest: do not assume subdirectory by [@rogpeppe](https://github.com/rogpeppe) in [`f892345`](https://github.com/cue-lang/cue/commit/f89234510378b557e4c488a5bacc9729e5ce10dc) - internal/mod/modregistry: remove error return from New by [@rogpeppe](https://github.com/rogpeppe) in [`1e26aa2`](https://github.com/cue-lang/cue/commit/1e26aa2a80a24425ad97e8c454eb178487b0fd1f) - internal/mod/modresolve: new package by [@rogpeppe](https://github.com/rogpeppe) in [`2a7d1d6`](https://github.com/cue-lang/cue/commit/2a7d1d6653e525ada6bb25c200dd94c6f81283db) - internal/mod/module: add CheckPathWithoutVersion by [@rogpeppe](https://github.com/rogpeppe) in [`c6da768`](https://github.com/cue-lang/cue/commit/c6da76812209649c4734cb6a4da842170b6b884a) - cue: make use of some godoc links by [@mvdan](https://github.com/mvdan) in [`63307bd`](https://github.com/cue-lang/cue/commit/63307bd17387651f410e857863af7d8be58bc109) - internal/registrytest: support prefix by [@rogpeppe](https://github.com/rogpeppe) in [`6c71b2c`](https://github.com/cue-lang/cue/commit/6c71b2c90d63846f2983deb07102253298a568c0) - cmd/cue/cmd: support CUE_REGISTRY by [@rogpeppe](https://github.com/rogpeppe) in [`d5c0745`](https://github.com/cue-lang/cue/commit/d5c0745eb65196ff1739d1ab5bf5af455c7d2422) - update ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`a43792c`](https://github.com/cue-lang/cue/commit/a43792cc30bd3d9bff2b2f4c73469b8faa2f8c48) - internal/mod: kick off WIP doc to track FAQs, points to document by [@myitcv](https://github.com/myitcv) in [`b664f0c`](https://github.com/cue-lang/cue/commit/b664f0cd3918390b665a16090734a358272a35a3) - pkg/path: use a subtest helper to test for each OS value by [@mvdan](https://github.com/mvdan) in [`1227a83`](https://github.com/cue-lang/cue/commit/1227a83010506ae4532ecca051a035c982650830) - internal/core/adt: avoid chatty tests by [@mvdan](https://github.com/mvdan) in [`55c6db6`](https://github.com/cue-lang/cue/commit/55c6db6f8301bdd3b273b5d4f2f4fa350c9301ea) - internal/mod/zip: skip SizeLimit tests with -race by [@mvdan](https://github.com/mvdan) in [`91d9766`](https://github.com/cue-lang/cue/commit/91d976682fb9575a8fb750b7475844aaa8f6067e) - internal/mod/zip: silence "err value not used" warnings by [@mvdan](https://github.com/mvdan) in [`665d19a`](https://github.com/cue-lang/cue/commit/665d19a74cdd71b1cb435812592f99561eda3fc8) - internal/mod/zip: use testing.T.TempDir by [@mvdan](https://github.com/mvdan) in [`fd8d5f9`](https://github.com/cue-lang/cue/commit/fd8d5f905414cf31c30e2d5bc7c988e7b0a5a9dd) - internal/mod/zip: make all tests parallel by [@mvdan](https://github.com/mvdan) in [`b004dd6`](https://github.com/cue-lang/cue/commit/b004dd619d6116f44504d9e70d7825b5950860e4) - internal/mod/zip: remove duplicate test case by [@mvdan](https://github.com/mvdan) in [`6c51cf0`](https://github.com/cue-lang/cue/commit/6c51cf031ddc78dd1e7a03803c960714fbe0125a) - cue/load: make Config.Registry an ociregistry.Interface by [@mvdan](https://github.com/mvdan) in [`fefeb36`](https://github.com/cue-lang/cue/commit/fefeb36c61ab48713b1f0e6a3fce2a51ea525cc0) - internal/registrytest: rewrite in terms of io/fs by [@mvdan](https://github.com/mvdan) in [`5f19042`](https://github.com/cue-lang/cue/commit/5f1904248b197468f29247c9f1b4c1476f87c3c2) - internal/registrytest: move from cue/load/internal by [@mvdan](https://github.com/mvdan) in [`633874c`](https://github.com/cue-lang/cue/commit/633874c5b3f790df51cb1837b9ae89ede1b57300) - internal/semver: copy from golang.org/x/mod by [@rogpeppe](https://github.com/rogpeppe) in [`a9a6965`](https://github.com/cue-lang/cue/commit/a9a6965188f751fca54251b803dfe4883c1f42bc) - internal/cueexperiment: parse CUE_EXPERIMENT by [@rogpeppe](https://github.com/rogpeppe) in [`b4583de`](https://github.com/cue-lang/cue/commit/b4583dee4fdeae5ed23050769fa61f7fba0fb465) - cue/load: update for OCI modules by [@rogpeppe](https://github.com/rogpeppe) in [`b951b07`](https://github.com/cue-lang/cue/commit/b951b070be0ce9c926120882cdc0bdf8f72a9d06) - internal/mod/modregistry: new package by [@rogpeppe](https://github.com/rogpeppe) in [`3c368d3`](https://github.com/cue-lang/cue/commit/3c368d38b348fc25afb40f415f4efe9e98749c1f) - update testscript so that it propagates GORACE by [@mvdan](https://github.com/mvdan) in [`e3d42af`](https://github.com/cue-lang/cue/commit/e3d42af5bd23a03d4e72e04d48f2581eb3eff772) - cmd/cue: do not ignore Encoder.Close errors on export by [@mvdan](https://github.com/mvdan) in [`f3a515e`](https://github.com/cue-lang/cue/commit/f3a515e7b4a59bc636a00f07f5648168de503df0) - cmd/cue: add more test case for exporting to a filename by [@mvdan](https://github.com/mvdan) in [`388f9a1`](https://github.com/cue-lang/cue/commit/388f9a1caad3ee4585cfb9f5f87f584e97885a66) - internal/ci: set GORACE=atexit_sleep_ms=10 for `go test -race` by [@mvdan](https://github.com/mvdan) in [`cbdd996`](https://github.com/cue-lang/cue/commit/cbdd996110a9c9068cde7187ddd09744efeb138a) - internal/core/export: fix a few staticcheck warnings by [@mvdan](https://github.com/mvdan) in [`6923617`](https://github.com/cue-lang/cue/commit/692361740f70eec5195b2756b21fe8e04c5bbc13) - cmd/cue/cmd: remove a few unused parameters by [@mvdan](https://github.com/mvdan) in [`2f6b27b`](https://github.com/cue-lang/cue/commit/2f6b27b2472975f3de10634e7d3e0544c66b37fc) - go.mod: update a few dependencies by [@mvdan](https://github.com/mvdan) in [`c08344a`](https://github.com/cue-lang/cue/commit/c08344aa68c39de95b639bfd31ff79e29dc01573) - cue: simplify the reflect checks in Value.Decode by [@mvdan](https://github.com/mvdan) in [`8709d8a`](https://github.com/cue-lang/cue/commit/8709d8aa900927e4eacd464e17e63b6fc0661937) - cue/ast/astutil: use generics to remove some reflect by [@mvdan](https://github.com/mvdan) in [`b8cb9a4`](https://github.com/cue-lang/cue/commit/b8cb9a46f7f268ef6ec36bfaaf965ed9f51e559c) - cue/load: use tdtest for TestLoad by [@rogpeppe](https://github.com/rogpeppe) in [`7389fe9`](https://github.com/cue-lang/cue/commit/7389fe97edb59b21716a85afd2ac255236a7d6a1) - internal/tdtest: clean filenames before comparison by [@rogpeppe](https://github.com/rogpeppe) in [`28f34a2`](https://github.com/cue-lang/cue/commit/28f34a272fc369740d5b053075457ad0345790d0) - internal/cuetxtar: report full result for cuetxtar test failures by [@rogpeppe](https://github.com/rogpeppe) in [`bfa250d`](https://github.com/cue-lang/cue/commit/bfa250d1086f07fa8a4baa63dd03ea38e038e1a6) - internal/mod/modfile: new package by [@rogpeppe](https://github.com/rogpeppe) in [`551fe68`](https://github.com/cue-lang/cue/commit/551fe6886c4fa607524a403291de287ce82e0d89) - internal/mod/module: improve error message by [@rogpeppe](https://github.com/rogpeppe) in [`0e95843`](https://github.com/cue-lang/cue/commit/0e9584387f3fa0fa6b0a5c509d75c0088481df96) - internal/mod/zip: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`3142030`](https://github.com/cue-lang/cue/commit/3142030a06aef0adcc3341c593b80e97ca2cb5d9) - internal/mod/mvs: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`4eca0c7`](https://github.com/cue-lang/cue/commit/4eca0c73eca109a4fde85fca7b5eac8954c7dfca) - internal/mod/mvs/internal/...: remove ignore build tags by [@rogpeppe](https://github.com/rogpeppe) in [`a102419`](https://github.com/cue-lang/cue/commit/a1024191e06c585b69b28f6b2b2ae0af32397ab8) - internal/mod/module: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`38cf584`](https://github.com/cue-lang/cue/commit/38cf584ceb46969d12abfa747f7346182f610a61) - internal/mod/mvs: copy from cue/load/internal/mvs by [@rogpeppe](https://github.com/rogpeppe) in [`204665c`](https://github.com/cue-lang/cue/commit/204665cebd9623467e6f53cada8e563829ecfeb6) - internal/mod/module: split module.go by [@rogpeppe](https://github.com/rogpeppe) in [`c6e91b1`](https://github.com/cue-lang/cue/commit/c6e91b174573d2232eb8e992831e8f0cfcdc6a4e) - internal/mod: copy files from golang.org/x/mod by [@rogpeppe](https://github.com/rogpeppe) in [`6f5b370`](https://github.com/cue-lang/cue/commit/6f5b370749617c1fa4658db5a1349b03c5fc43fa) - cmd/cue: update the list of output formats by [@mvdan](https://github.com/mvdan) in [`42ae8e4`](https://github.com/cue-lang/cue/commit/42ae8e4594a203000488dbaa1d143574fb8588c6) - cue: minor drive-by cleanups by [@mvdan](https://github.com/mvdan) in [`a44c805`](https://github.com/cue-lang/cue/commit/a44c805cc6f93e9fb32ef6ea81c2b1442c5b39ad) - all: fix two minor printf bugs spotted by staticcheck by [@mvdan](https://github.com/mvdan) in [`7b49758`](https://github.com/cue-lang/cue/commit/7b49758cb5b305cf842602d40d37997164d28dee) - all: fix issues spotted by nilness by [@mvdan](https://github.com/mvdan) in [`382449b`](https://github.com/cue-lang/cue/commit/382449b1e3b51c7b0c5e14b86bbac8283272dde4) - pkg/math: reuse Ln2 and Ln10 in Log2E and Log10E by [@mvdan](https://github.com/mvdan) in [`fe2f216`](https://github.com/cue-lang/cue/commit/fe2f216d70841f3348917c42f5cb4dac4709cb70) - pkg: teach gen.go about go/types by [@mvdan](https://github.com/mvdan) in [`2091170`](https://github.com/cue-lang/cue/commit/209117092490050ccd13493aad9de90b4905cc61) - pkg: swap go/build for go/packages in gen.go by [@mvdan](https://github.com/mvdan) in [`e9a412d`](https://github.com/cue-lang/cue/commit/e9a412d85fa18ab76fce03608c431ddee6472a78) - bump golang.org/x dependencies by [@mvdan](https://github.com/mvdan) in [`bf3ac20`](https://github.com/cue-lang/cue/commit/bf3ac2030ee9bd0f0b8154c66064562896629689) - all: clean up some TODOs for old Go versions by [@mvdan](https://github.com/mvdan) in [`106fc3a`](https://github.com/cue-lang/cue/commit/106fc3ad9c256f97830d87c116ce0b415e52651c) - cue: make use of Go 1.20+ APIs by [@mvdan](https://github.com/mvdan) in [`fae9c82`](https://github.com/cue-lang/cue/commit/fae9c820255e1fe81c29916d7c0d725fe4eee076) - internal/core/adt: change slice type of notify by [@mpvl](https://github.com/mpvl) in [`3165a5e`](https://github.com/cue-lang/cue/commit/3165a5e1aaecd3a76fa44ec0a3dac53801355101) - internal/core/adt: rename node to vertex by [@mpvl](https://github.com/mpvl) in [`0b96e3b`](https://github.com/cue-lang/cue/commit/0b96e3b951d054d3e5e4c84216f0c92f1457bdab) - internal/cuetxtar: allow using a fallback golden set by [@mpvl](https://github.com/mpvl) in [`826f28c`](https://github.com/cue-lang/cue/commit/826f28c9a0d421ec6ff60522927e8829678676b9) - internal/core/adt: hoist the test body of TestEval by [@mpvl](https://github.com/mpvl) in [`ca254d6`](https://github.com/cue-lang/cue/commit/ca254d6a1346cb6e29ee2c16a6db9f126a9cfde2) - internal/core/adt: add new closedness implementation by [@mpvl](https://github.com/mpvl) in [`5062118`](https://github.com/cue-lang/cue/commit/5062118be0f0f3f39839fadd7e41cced4f64b4db) - internal/tdtest: make function detection more robust by [@mpvl](https://github.com/mpvl) in [`49728f7`](https://github.com/cue-lang/cue/commit/49728f709d7a171479c352a8fffe9828e70a896c) - internal/tdtest: mimic replacement of testing.Run in Select by [@mpvl](https://github.com/mpvl) in [`1763cea`](https://github.com/cue-lang/cue/commit/1763cea8d6b4575cd1dc33b4b13528ef7345496a) - cue/load: add package import cycle error by [@bozaro](https://github.com/bozaro) in [`220b44e`](https://github.com/cue-lang/cue/commit/220b44e973eff9d41f2067499f20a12b6a0a6f29) - cue: decode empty list as empty slice instead of slice-typed nil by [@bozaro](https://github.com/bozaro) in [`66ebe0f`](https://github.com/cue-lang/cue/commit/66ebe0ff3031096da45b79a2d18c5c66af22b16e) - internal/core/adt: fix nil pointer dereference by [@bozaro](https://github.com/bozaro) in [`3286ead`](https://github.com/cue-lang/cue/commit/3286ead90d0823e5011da249e40672d65664863f) - pkg/math: fix Log2E and Log10E constant expressions by [@mvdan](https://github.com/mvdan) in [`a1038f7`](https://github.com/cue-lang/cue/commit/a1038f7c2f79327da4f0b57f24d87fde2007560d) - pkg/math: add tests which show the API constants by [@mvdan](https://github.com/mvdan) in [`63a4256`](https://github.com/cue-lang/cue/commit/63a425690f351c3bdd1a0f470f4ff783f4372c09) - all: add Go 1.21, drop Go 1.19 by [@mvdan](https://github.com/mvdan) in [`3a101ba`](https://github.com/cue-lang/cue/commit/3a101baedd640341274ef711d1cf71b097c7e2c4) - all: minor wins with strings.Cut and utf8.AppendRune by [@mvdan](https://github.com/mvdan) in [`72ba066`](https://github.com/cue-lang/cue/commit/72ba0660acbeff99881dd1f705ae4557c56e308a) - cmd/cue: fix up fmt_multi comparison by [@mvdan](https://github.com/mvdan) in [`d4d109e`](https://github.com/cue-lang/cue/commit/d4d109e5cd976a8279a6338cdee1cec3b9981e12) - encoding/gocode: don't require output to be stable by [@mvdan](https://github.com/mvdan) in [`3bf3dbd`](https://github.com/cue-lang/cue/commit/3bf3dbd655284d3628399a83a703f4849b5f9374) </details> ### [`v0.6.0`](https://github.com/cue-lang/cue/releases/tag/v0.6.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.5.0...v0.6.0) The main focus of this release is the introduction of [required fields](https://github.com/cue-lang/proposal/blob/HEAD/designs/1951-required-fields-v2.md), as well as fixing a number of issues and regressions introduced in the v0.5.0 release. As a reminder: users can register their projects with `unity`, our regression and performance testing setup. `unity` is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. `unity` continues to catch multiple issues with each release. Adding your project to `unity` not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. Thank you to [@4ad](https://github.com/4ad), [@Abirdcfly](https://github.com/Abirdcfly), [@alexandear](https://github.com/alexandear), [@chee-zaram](https://github.com/chee-zaram), [@eraserhd](https://github.com/eraserhd), [@ghostwheel42](https://github.com/ghostwheel42), [@joanlopez](https://github.com/joanlopez), [@jpluscplusm](https://github.com/jpluscplusm), [@kcburge](https://github.com/kcburge), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@rogpeppe](https://github.com/rogpeppe), [@toshi0607](https://github.com/toshi0607), and [@zeithaste](https://github.com/zeithaste) for contributing to this release! #### API [CL 543335](https://cuelang.org/cl/543335) adds `arch` to set of injectable system variables understood by `cue/load`. The text at `cue help injection` explains how this in more detail. [CL 552142](https://cuelang.org/cl/552142) adds support for zero values in `cue.Value.Float64`, which has the effect of fixing the error when attempting to use `strconv.FormatFloat` with a zero value. [CL 548783](https://cuelang.org/cl/548783) fixes a long-standing bug to make HTML escaping in JSON an opt-in. This means that `cue export` now respects the `--escape` flag when set, and `encoding/json` only escapes HTML when `HTMLEscape` is used. #### Language ##### Required fields The main focus of the v0.6.0 release is the introduction of required fields. CUE already supports the “optional field constraint”, denoted `foo?: value`. Required fields add a “required field constraint”, denoted `foo!: value`, which is like `foo?: value`, but requires a regular field be provided for `foo` (a field `foo:` without `!:` or `?:`). We refer to optional field constraints and required field constraints collectively as “field constraints”. As a general rule, all data and data templating should be defined with regular fields, whereas schemas would be defined in terms of field constraints. Of course, CUE being CUE, mixing these two fields is allowed: this rule is not a restriction but suggested as a matter of style and proper usage. Here are some examples of how exclamation marks can be used to express things that were previously not possible. #Def: { kind!: "def" intList!: [...int] } Using required fields can also result in better error messages. Consider this schema: #Person: { name: string age?: int } Note that this is non-idiomatic, because our new guidelines suggest schemas should only be defined in terms of field constraints, but we will use this for illustration purposes. Now consider this usage of `#Person`: jack: #Person & {age: 3} In data mode, the error message here is currently `jack.name: incomplete value string`, which does not provide much actionable information to the user to help them fix the problem. Now consider how `#Person` looks with required fields, idiomatically only using field constraints: #Person: { name!: string age?: int } jack: #Person & {age: 3} Now the error message reads: jack.name: field is required but not present which more closely reflects the underlying problem.. This error could be resolved by adding `jack: name: "Jack"`. For more details and background on the change, please see [the original required fields proposal](https://github.com/cue-lang/proposal/blob/HEAD/designs/1951-required-fields-v2.md). ##### Other changes Whilst it should not be a breaking change from a CUE perspective, we have upgraded to use [`github.com/cockroachdb/apd/v3`](https://pkg.go.dev/github.com/cockroachdb/apd/v3). We have also increased `apd.Context` precision from 24 to 34. [CL 551207](https://cuelang.org/cl/551207) adds support for making dynamic fields optional or required. For example, the following is now possible: x: "y" (x): "foo" (x)?: "foo" (x)!: "foo" and yields: x: "y" y: "foo" [CL 546886](https://cuelang.org/cl/546886) removes support for old-style `::` definitions. This also includes deprecation support. In a similar vein, [CL 547011](https://cuelang.org/cl/547011) removes the last vestiges of `<foo>: T`. This was once the notation for pattern constraints. #### Spec Various bug fixes, with special thanks to [@nicuveo](https://github.com/nicuveo) for raising many of these. #### Builtins The following four functions have been added to the [`net`](https://pkg.go.dev/cuelang.org/go@v0.6.0-alpha.2/pkg/net) package: - `PathEscape` - `PathUnescape` - `QueryEscape` - `QueryUnescape` Thanks to [@eraserhd](https://github.com/eraserhd) for this change. [CL 549087](https://cuelang.org/cl/549087) reimplements `pkg/list.Sort`. The resulting reduction in the number of allocations and other work gives rise to a ~80% reduction in running time against CUE benchmarks. #### `cmd/cue` [CL 547212](https://cuelang.org/cl/547212) improves the documentation for the `-l` flag passed to `cue import`. This addresses a frequent point of confusion in questions to GitHub Discussions and on Slack. [CL 550616](https://cuelang.org/cl/550616) fixes `cue get go` to respect the `--exclude` flag for constants. This makes it possible to (for example) exclude all unexported identifiers from a `cue get go` run. [CL 555576](https://cuelang.org/cl/555576) fixed an important bug where `cmd/cue vet` was not properly consuming all input data. [CL 556526](https://cuelang.org/cl/556526) fixed a bug where CUE files beginning with an underscore were not being loaded when explicitly given as filename arguments. #### WebAssembly (Wasm) We have added preliminary support for Wasm. Users can compile code from any language and toolchain that supports Wasm into plugins that are dynamically loaded by CUE. Users can then call and use functions from these Wasm modules, just like they can use standard library functions. See the documentation at [cuelang.org/go/cue/interpreter/wasm](https://pkg.go.dev/cuelang.org/go/cue/interpreter/wasm) to learn more about Wasm and its current limitations. #### Changelog <details> <summary>Expand for the full changelog</summary> - internal/core/dep: always introduce Environment for Comprehension Value to fix panic by [@mpvl](https://github.com/mpvl) in [`99e8578`](https://github.com/cue-lang/cue/commit/99e8578ac45e5e7e6ebf25794303bc916744c0d3) - internal/core/dep: adapt Recurse to mimic dep.Visit by [@mvdan](https://github.com/mvdan) in [`97d7109`](https://github.com/cue-lang/cue/commit/97d7109df4d03e7ecc77daa12dbc8b6a247e4d37) - internal/ci: use cue-lang/cuelang.org workflow_dispatch for tip by [@myitcv](https://github.com/myitcv) in [`33b7393`](https://github.com/cue-lang/cue/commit/33b73930b8fc8a719a88978be0b7e019ba34e247) - cmd/cue: fix regression when injecting vars with cue cmd by [@mvdan](https://github.com/mvdan) in [`da3ee7d`](https://github.com/cue-lang/cue/commit/da3ee7dc7b27de85bbfb0a4104dfb22bcb18ef68) - internal/core/adt: lets of comprehensions are multi lets by [@mpvl](https://github.com/mpvl) in [`43b4674`](https://github.com/cue-lang/cue/commit/43b4674898df7e2e8758ccb6154041a98e321e40) - internal/core/adt: always mark let in comprehension as "complete" by [@mpvl](https://github.com/mpvl) in [`5123737`](https://github.com/cue-lang/cue/commit/5123737983654d143151b47c1b5c67ed2a7bcf6c) - cue/ast: clarify what is a valid identifier by [@mvdan](https://github.com/mvdan) in [`c4ced5e`](https://github.com/cue-lang/cue/commit/c4ced5ef6bc322a12fbeaceb9c79a8cda15a0c50) - internal/core/adt: find late-stage conflict errors by [@mpvl](https://github.com/mpvl) in [`0c48837`](https://github.com/cue-lang/cue/commit/0c48837de759df5b78a02696e2401267cceb6117) - internal/core/adt: add tests to fix 2481 by [@mpvl](https://github.com/mpvl) in [`d3444e3`](https://github.com/cue-lang/cue/commit/d3444e38a7582138aee3f25188fc3595acc61a49) - internal/core/adt: fix stack overflow with comprehensions by [@mpvl](https://github.com/mpvl) in [`33071c0`](https://github.com/cue-lang/cue/commit/33071c0cb767cc1d37a5da6b164dc16d564ca24b) - deps: upgrade to go1.20.6 for release builds by [@myitcv](https://github.com/myitcv) in [`538eb9c`](https://github.com/cue-lang/cue/commit/538eb9ca7f52f73cfa17c69a44eaad368ecd94c5) - internal/core/compile: reject "\_" as an alias name by [@mvdan](https://github.com/mvdan) in [`bcbe967`](https://github.com/cue-lang/cue/commit/bcbe967fdd1d26bc138092d9d6a36e28c55940d7) - all: remove a few more unused bits of code by [@mvdan](https://github.com/mvdan) in [`c8e51a5`](https://github.com/cue-lang/cue/commit/c8e51a5cb6fc504db363a9163baea0f76406e8a4) - internal/core/dep: prevent passing "empty" vertices to tools/flow by [@mvdan](https://github.com/mvdan) in [`c3eda1d`](https://github.com/cue-lang/cue/commit/c3eda1d599df106ca6562041384b3f6a9bd2dc36) - internal/core/adt: do not delay processing of fields by [@mpvl](https://github.com/mpvl) in [`e7cfb50`](https://github.com/cue-lang/cue/commit/e7cfb50772304833aaf8ac4471aa99638fe1a5a6) - internal/core/adt: add tests for upcoming issues by [@mpvl](https://github.com/mpvl) in [`cabc1db`](https://github.com/cue-lang/cue/commit/cabc1dbb9f31f9b1845987bfdfd5b59f02fc5d7c) - CONTRIBUTING: fix references to the old Unity repo by [@mvdan](https://github.com/mvdan) in [`23e265d`](https://github.com/cue-lang/cue/commit/23e265deab3833cf1aa5ddb8a5c2662da6071fb5) - cmd/cue: print returned error by [@mpvl](https://github.com/mpvl) in [`450ff90`](https://github.com/cue-lang/cue/commit/450ff90e9a1e2e656e6e854de9c7e6e5658d9791) - deduplicate content between README and CONTRIBUTING by [@mvdan](https://github.com/mvdan) in [`4c48cee`](https://github.com/cue-lang/cue/commit/4c48ceec607f9e5f5b73caa9828c58ad62f2b344) - move doc/contribute.md to CONTRIBUTING.md by [@mvdan](https://github.com/mvdan) in [`db28ec6`](https://github.com/cue-lang/cue/commit/db28ec6e85290adbb04e5115bd13923fde6a7446) - readme: warn new contributors not to use SSH auth by [@jpluscplusm](https://github.com/jpluscplusm) in [`f4c5639`](https://github.com/cue-lang/cue/commit/f4c563924512cf3f4f4e2af61042b4fcf948c17e) - internal/core/adt: pass state to addList by [@mpvl](https://github.com/mpvl) in [`b38aece`](https://github.com/cue-lang/cue/commit/b38aecec7f654e53ebd9864c4a21d4244d89ad48) - internal/core/adt: set scalar more proactively by [@mpvl](https://github.com/mpvl) in [`ab15bb8`](https://github.com/cue-lang/cue/commit/ab15bb818b04de45c9aeacb09238ff7ec89790c4) - internal/core/adt: better error message for cycles by [@mpvl](https://github.com/mpvl) in [`5e84a6d`](https://github.com/cue-lang/cue/commit/5e84a6d2b82143d124ff95965df206047f80ce88) - internal/ci: count number of Signed-off-by lines by [@myitcv](https://github.com/myitcv) in [`4ba1b15`](https://github.com/cue-lang/cue/commit/4ba1b15d0c93ab0fd7c1a6d400ff5d7e4f0ae203) - internal: remove a few unused APIs by [@mvdan](https://github.com/mvdan) in [`1c1a7b3`](https://github.com/cue-lang/cue/commit/1c1a7b3aff0fa09cd6bc8dbe482f0d4d82f1731a) - cue/load: fix Instances race by [@rogpeppe](https://github.com/rogpeppe) in [`c10d7cb`](https://github.com/cue-lang/cue/commit/c10d7cbc34a84f42b50881a66f8b7c7c8d162cdd) - cue/load: allow \_\*.cue files when explicitly listed by [@myitcv](https://github.com/myitcv) in [`b16f6ce`](https://github.com/cue-lang/cue/commit/b16f6ceecac7433917ebfee1188e35846520530e) - internal/core/dep: fix recursive let processing by [@mpvl](https://github.com/mpvl) in [`ca1f812`](https://github.com/cue-lang/cue/commit/ca1f8127635bce3844e59b49226cc48bf6b426ec) - internal/core/dep: add Dependency.Recurse by [@mpvl](https://github.com/mpvl) in [`f6e49bd`](https://github.com/cue-lang/cue/commit/f6e49bdebce2873078d8ea43a05b6c1ec0d290af) - internal/core/dep: prepare for public APi by [@mpvl](https://github.com/mpvl) in [`0554d4e`](https://github.com/cue-lang/cue/commit/0554d4e559e12914b9f5802a416c55a307517e06) - internal/core/adt: mark comprehension key as dynamic by [@mpvl](https://github.com/mpvl) in [`d4fd104`](https://github.com/cue-lang/cue/commit/d4fd1048f317c0a4223ad6ff1a2bbc12b63c9b8b) - internal/core/dep: further improve dependency analysis by [@mpvl](https://github.com/mpvl) in [`f513654`](https://github.com/cue-lang/cue/commit/f51365488e8a346fe7f321ef62b75b3ab7be1559) - internal/core/dep: add more tests ahead of changes by [@mpvl](https://github.com/mpvl) in [`202eb3e`](https://github.com/cue-lang/cue/commit/202eb3e4e2fbce7b2aceefd79e7e5f93a8e7515f) - cue: fix some low hanging fruit from staticcheck by [@mvdan](https://github.com/mvdan) in [`41b38fe`](https://github.com/cue-lang/cue/commit/41b38fe201f40e13f0c23787a615e25f295ac609) - all: replace godebug/diff with go-cmp/cmp by [@mvdan](https://github.com/mvdan) in [`fa6e229`](https://github.com/cue-lang/cue/commit/fa6e229ee207332781f8fe24ef85bc741583d546) - encoding/gocode/gocodec: use different generic type signature by [@rogpeppe](https://github.com/rogpeppe) in [`1a98ee1`](https://github.com/cue-lang/cue/commit/1a98ee1ea6815d75755a5dac31c9f70545e775b4) - internal/core/dep: add references and line in test output by [@mpvl](https://github.com/mpvl) in [`518bafa`](https://github.com/cue-lang/cue/commit/518bafa5689303c24983b0b9a956b22844ee2f93) - internal: use Scanner API to parse attributes by [@rogpeppe](https://github.com/rogpeppe) in [`3400e74`](https://github.com/cue-lang/cue/commit/3400e742833b074b5d5cc270953d89ace4282b70) - internal/core/dep: require importPath argument by [@mpvl](https://github.com/mpvl) in [`4fcf29c`](https://github.com/cue-lang/cue/commit/4fcf29cf0441993efe663cee541b111e634ab317) - internal/core/dep: handle inline composite literals by [@mpvl](https://github.com/mpvl) in [`07ae1be`](https://github.com/cue-lang/cue/commit/07ae1be79e90e9b9ccb8c5ef56ed946370878fa8) - cue: report useful error for uninitalized Context by [@mpvl](https://github.com/mpvl) in [`b8e2bf0`](https://github.com/cue-lang/cue/commit/b8e2bf065d429850361118af699686ff485d1719) - cue: add extra TestAttributeString test by [@rogpeppe](https://github.com/rogpeppe) in [`876af7a`](https://github.com/cue-lang/cue/commit/876af7abdcb89ded03e757daa910fac88753edd2) - internal/core/export: avoid \_#def if unnecessary by [@mpvl](https://github.com/mpvl) in [`d112f64`](https://github.com/cue-lang/cue/commit/d112f640a325f8c55cdce7e98bab4c64e85ece57) - cmd/cue/cmd: add test for issue 2251 by [@mpvl](https://github.com/mpvl) in [`19af1e9`](https://github.com/cue-lang/cue/commit/19af1e97c8b10884c81626089b7974aa5cd1a4a0) - cue/scanner: add Offset method and export DontInsertCommas by [@rogpeppe](https://github.com/rogpeppe) in [`de9e760`](https://github.com/cue-lang/cue/commit/de9e76091eaed8733d3562ba5079c68f637ad0c0) - cue: add more attribute tests by [@rogpeppe](https://github.com/rogpeppe) in [`d8a0e26`](https://github.com/cue-lang/cue/commit/d8a0e26c63255eb2d198a55cf4f37a8457a845b3) - internal: change attribute tests to be less implementation-specific by [@rogpeppe](https://github.com/rogpeppe) in [`7741d21`](https://github.com/cue-lang/cue/commit/7741d21b42f6961443d7ee0b0db4de723ad995fc) - encoding/gocode/gocodec: allow cue.Context by [@rogpeppe](https://github.com/rogpeppe) in [`1e76095`](https://github.com/cue-lang/cue/commit/1e760956c098e7d116a78f8aa5b7d709309fedb5) - internal/core/dep: add and modify some tests for issue 2247 by [@mpvl](https://github.com/mpvl) in [`24e8d56`](https://github.com/cue-lang/cue/commit/24e8d560af649c79b8a032f2da9f45c2a2b80a97) - internal/core/export: fix panic converting int label to identifier by [@mpvl](https://github.com/mpvl) in [`24f3fb3`](https://github.com/cue-lang/cue/commit/24f3fb310302afea643e19087876e7836afd2e5c) - encoding/json: check that required fields are present by [@mpvl](https://github.com/mpvl) in [`adbe80e`](https://github.com/cue-lang/cue/commit/adbe80e41254ff45dfb3194f930db9898e1a7a47) - pkg/encoding/json: add tests that needs to be fixed by [@mpvl](https://github.com/mpvl) in [`8df1034`](https://github.com/cue-lang/cue/commit/8df10344407d10b897a39e2278e3a9c7ea7bfe80) - pkg/encoding/json: add more structure to tests by [@mpvl](https://github.com/mpvl) in [`6922e14`](https://github.com/cue-lang/cue/commit/6922e1455188fa1d8beaa06e670f43d0ed801afe) - cue: document UnifyAccept by [@mpvl](https://github.com/mpvl) in [`c054274`](https://github.com/cue-lang/cue/commit/c0542747082c57cd87f75be60cdc07abd6367e61) - internal/core/export: preserve original field aliases by [@mpvl](https://github.com/mpvl) in [`7be6224`](https://github.com/cue-lang/cue/commit/7be6224cbc4f99e9caee308a9218f11654dbb621) - internal/core/compile: fix offset error in pattern alias by [@mpvl](https://github.com/mpvl) in [`914d64d`](https://github.com/cue-lang/cue/commit/914d64d5e0269439a92e7572acd77128b4156e44) - internal/ci: consistently trigger Unity as porcuepine by [@mvdan](https://github.com/mvdan) in [`a0510ac`](https://github.com/cue-lang/cue/commit/a0510ac0d3518df4f0bd31cb214f0f8eedfc1deb) - internal/ci: bump Go and GoReleaser prior to alpha.2 by [@mvdan](https://github.com/mvdan) in [`b6a32da`](https://github.com/cue-lang/cue/commit/b6a32da097fce5f9c960ad0a02da51efb18de2fd) - correct misleading phrases in documentation by [@chee-zaram](https://github.com/chee-zaram) in [`0755dc8`](https://github.com/cue-lang/cue/commit/0755dc86181966d7ab75af5c408765bcd3aaa5b6) - internal/core/export: avoid panics on computed comprehensions by [@mvdan](https://github.com/mvdan) in [`6db2253`](https://github.com/cue-lang/cue/commit/6db2253ab586721682e96e86bfe1fb281fe8c46d) - internal/core/adt: return from Accept earlier for hidden fields by [@mpvl](https://github.com/mpvl) in [`c724eef`](https://github.com/cue-lang/cue/commit/c724eef0ca75447ba2dd99bfea849f1cea1b680b) - cue/ast: fix staticcheck warnings by [@mvdan](https://github.com/mvdan) in [`cc6b544`](https://github.com/cue-lang/cue/commit/cc6b5449a737ef9ef9762713ce248fcff2671594) - internal/core/adt: add missed error by [@mpvl](https://github.com/mpvl) in [`19749aa`](https://github.com/cue-lang/cue/commit/19749aaa866a3660833a108fb4fddda9446fc2a2) - internal/core/adt: fail on missing required field in comprehension by [@mpvl](https://github.com/mpvl) in [`a991bd6`](https://github.com/cue-lang/cue/commit/a991bd624f86a3b018164c51e806884e9968a56c) - cue: allow iterating hidden fields and definitions of embedded scalars by [@mpvl](https://github.com/mpvl) in [`de44cab`](https://github.com/cue-lang/cue/commit/de44cab16e6b66e65e816a1c3627c9f891e6b747) - internal/core/adt: add position for required field error by [@mpvl](https://github.com/mpvl) in [`452e143`](https://github.com/cue-lang/cue/commit/452e1434fd2b6d3b06e3f45c1681da0085fed70b) - internal/core/validate: allow required fields in definitions by [@mpvl](https://github.com/mpvl) in [`317f88d`](https://github.com/cue-lang/cue/commit/317f88d34ea1fdf4526fadabd68163e2d52ae870) - cue/ast: support specifying required fields in NewStruct by [@mpvl](https://github.com/mpvl) in [`1432683`](https://github.com/cue-lang/cue/commit/143268314d3247237ba67518a6d0958d1ec246aa) - tools/flow: check cycle marker by [@mpvl](https://github.com/mpvl) in [`9a566ed`](https://github.com/cue-lang/cue/commit/9a566ed5aecdd44f10941fcb41e949cde6367de8) - spec: add definition for dynamic fields by [@mpvl](https://github.com/mpvl) in [`3a635fc`](https://github.com/cue-lang/cue/commit/3a635fc7a746cef0abd6250de13f07092eee5518) - spec: various fixes by [@mpvl](https://github.com/mpvl) in [`e46324e`](https://github.com/cue-lang/cue/commit/e46324ef052b90aaf605aebea608fa147b2bf8dd) - cmd/cue: properly consume all data input in vet by [@mvdan](https://github.com/mvdan) in [`b22ec6a`](https://github.com/cue-lang/cue/commit/b22ec6a02e7c92fb125af262b1be4aa89790ad17) - cmd/cue: add AllocBytes and AllocObjects to stats by [@mvdan](https://github.com/mvdan) in [`03d85b8`](https://github.com/cue-lang/cue/commit/03d85b869149a1656ebd56a23adcc9941c70f294) - increase apd.Context precision from 24 to 34 by [@mvdan](https://github.com/mvdan) in [`7bcbcd6`](https://github.com/cue-lang/cue/commit/7bcbcd663ca0a7db50113b8f6a5a78150eeaa34b) - update to cockroachdb/apd v3 by [@mvdan](https://github.com/mvdan) in [`4728223`](https://github.com/cue-lang/cue/commit/47282232b4368f36621f6e4a3b0445bcc42afb9a) - cue: add a "decimal" benchmark by [@mvdan](https://github.com/mvdan) in [`f3be10a`](https://github.com/cue-lang/cue/commit/f3be10a2114c5a97bdde29266cea8dc88e0daf0e) - deps: switch to use quicktest instead of testify by [@myitcv](https://github.com/myitcv) in [`12908b3`](https://github.com/cue-lang/cue/commit/12908b32a9a74c40ee14cf69ab7221a94bbdafd3) - cue/testdata: add regression test for [#2244](https://github.com/cue-lang/cue/issues/2244) by [@mvdan](https://github.com/mvdan) in [`442c023`](https://github.com/cue-lang/cue/commit/442c023478e67a6dce28040b22a75d14f007edf8) - internal/cuetest: remove support for CUE_LONG by [@mvdan](https://github.com/mvdan) in [`cb461fd`](https://github.com/cue-lang/cue/commit/cb461fd4741dcd9e621e0a53f1d2fe7b72c276bf) - all: sed-replace all trivial uses of ioutil by [@mvdan](https://github.com/mvdan) in [`f56ccf0`](https://github.com/cue-lang/cue/commit/f56ccf025c2e079c1b38a4acc801de0cf354dc34) - pkg/path: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`ab48c0f`](https://github.com/cue-lang/cue/commit/ab48c0fd86c0cf5cd23f862fd180e284951034d1) - encoding/protobuf/jsonpb: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`b2476bd`](https://github.com/cue-lang/cue/commit/b2476bd08a39851483e8dfdb27808f1b4cd60d9b) - encoding/protobuf: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`b41f26f`](https://github.com/cue-lang/cue/commit/b41f26f767d0a740c0df04fa78096d8b05ab7473) - tools/fix: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`1f888b5`](https://github.com/cue-lang/cue/commit/1f888b50dcfe0d78fcd7438c22df72e4fbd328d4) - all: use strings.Builder in a few more places by [@mvdan](https://github.com/mvdan) in [`97cba0b`](https://github.com/cue-lang/cue/commit/97cba0bd6973d31e6005b3bd98ac579b1f1816aa) - internal/encoding: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`251790e`](https://github.com/cue-lang/cue/commit/251790edc0f6b73fe1dcd4fb41d408b0d962c179) - encoding/openapi: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`36645d1`](https://github.com/cue-lang/cue/commit/36645d1bff99dd9fe9c5f8f2991623fe169523e8) - all: go fix to remove old build tags by [@mvdan](https://github.com/mvdan) in [`8868ae6`](https://github.com/cue-lang/cue/commit/8868ae6fdf931de36973640b4bbc5fca5fc2722e) - internal/ci: trigger Unity on master as porcuepine by [@mvdan](https://github.com/mvdan) in [`2148aed`](https://github.com/cue-lang/cue/commit/2148aed34464229e762289cbb8a7610f35e1ed81) - internal/ci: remove cue-unity/unity from codereview.cfg by [@mvdan](https://github.com/mvdan) in [`c341427`](https://github.com/cue-lang/cue/commit/c341427c7ca4046d8b7cd364f397e699115d311a) - internal/core/conver: make use of reflect.Value.IsZero by [@mvdan](https://github.com/mvdan) in [`5318af1`](https://github.com/cue-lang/cue/commit/5318af119014318463573df00609748837c2388a) - internal/ci: further tidy up by [@myitcv](https://github.com/myitcv) in [`82f96c5`](https://github.com/cue-lang/cue/commit/82f96c5e4073ea856efd29cb4153809ac2fb5c1d) - cue/interpreter/wasm: add user-level docs by [@4ad](https://github.com/4ad) in [`40fb30d`](https://github.com/cue-lang/cue/commit/40fb30dfb67c0620b3af5a80ebd6d59a0335f990) - cue/interpreter/wasm: add Wasm support for abi=c by [@4ad](https://github.com/4ad) in [`0520a3f`](https://github.com/cue-lang/cue/commit/0520a3f9e73e63d77e43c9b3a73c75982c15ee6d) - internal/pkg: move pkg/internal to internal/pkg by [@4ad](https://github.com/4ad) in [`88922d1`](https://github.com/cue-lang/cue/commit/88922d17d7d085de4397203bf34b889cd59077b4) - codereview.cfg: add cue-unity-new by [@mvdan](https://github.com/mvdan) in [`a670427`](https://github.com/cue-lang/cue/commit/a670427406af7451da77cf477c0786d6f1b129c8) - doc/tutorial: fix typo by [@toshi0607](https://github.com/toshi0607) in [`2304cb5`](https://github.com/cue-lang/cue/commit/2304cb51d2aca3ab38f1e6db00cac8661dc16e46) - cue/load: replace go-internal/semver with x/mod by [@mvdan](https://github.com/mvdan) in [`6c92698`](https://github.com/cue-lang/cue/commit/6c926983a43ebd32c5d8b582a3db2ffafb301cff) - internal/cuetxtar: print error details by [@rogpeppe](https://github.com/rogpeppe) in [`80d6ea0`](https://github.com/cue-lang/cue/commit/80d6ea032057b40e405eefab6015e92bbc5cc2a5) - tools/flow: support tasks inside slices by [@rogpeppe](https://github.com/rogpeppe) in [`6e0366f`](https://github.com/cue-lang/cue/commit/6e0366f6541ab3b7a5882130fcac2e0a2b3566f6) - internal/core/convert: split the cue tag commas after the last quote by [@ghostwheel42](https://github.com/ghostwheel42) in [`49a64f4`](https://github.com/cue-lang/cue/commit/49a64f4c69a3fe3310a78126feb1600f6d46ed36) - pkg/net: add Path{E,Une}sape and Query{E,Une}scape by [@eraserhd](https://github.com/eraserhd) in [`9082446`](https://github.com/cue-lang/cue/commit/9082446a50e982816bbe49a83b49fe1c92aeca7e) - cmd/cue: refactor our use of cobra by [@mvdan](https://github.com/mvdan) in [`59080b6`](https://github.com/cue-lang/cue/commit/59080b65a5ba539bb3f3cb45d3346f39df67cf01) - cmd/cue: do not defer closing files in fmt's loop by [@mvdan](https://github.com/mvdan) in [`7f79469`](https://github.com/cue-lang/cue/commit/7f79469d264a4be3a88dfef4036d8d6504de401c) - cmd/cue: check all file I/O errors in fmt by [@mvdan](https://github.com/mvdan) in [`8c6d9ba`](https://github.com/cue-lang/cue/commit/8c6d9ba359831b857958bd6b796d75d7b9ff2779) - docs/tutorial: revert to using cue eval -i by [@myitcv](https://github.com/myitcv) in [`5e66c83`](https://github.com/cue-lang/cue/commit/5e66c831d177d7fc98892dc95c82cf150a3c2fd0) - all: move pkg/gen and internal/cmd/qgo to build-ignored files by [@mvdan](https://github.com/mvdan) in [`bad36b2`](https://github.com/cue-lang/cue/commit/bad36b2d8a19dd566a27e304407038abbe617968) - internal/ci: use go1.20.3 for releases by [@myitcv](https://github.com/myitcv) in [`9db1b95`](https://github.com/cue-lang/cue/commit/9db1b95606c3d393aafebe3eb159855e3790011c) - internal/tdtest: use field name in default error message by [@mpvl](https://github.com/mpvl) in [`401cab2`](https://github.com/cue-lang/cue/commit/401cab2dcdb3e7ffeec482433bbeaf88fa3130b9) - internal/core/adt: fix Definition closedness bug in API by [@mpvl](https://github.com/mpvl) in [`c3c8eb7`](https://github.com/cue-lang/cue/commit/c3c8eb70ab718f932bcbabbd4d4c6340681dbd5e) - update txtpbfmt to drop indirect dependency on glog by [@mvdan](https://github.com/mvdan) in [`410eea1`](https://github.com/cue-lang/cue/commit/410eea11f49eb9c88ef0b07af16bad55b24ba7bb) - internal/core/adt: fix NotEqualOp for lists with differing lengths by [@mvdan](https://github.com/mvdan) in [`6e185bb`](https://github.com/cue-lang/cue/commit/6e185bb62a3ae3972b2aba33a650bc6722891483) - cmd/cue: remove skipped test scripts for fixing old definitions by [@mvdan](https://github.com/mvdan) in [`9505e90`](https://github.com/cue-lang/cue/commit/9505e90092df6907cb584702a56521c26e8ddc47) - all: make HTML escaping in JSON an opt-in by [@mvdan](https://github.com/mvdan) in [`48207fb`](https://github.com/cue-lang/cue/commit/48207fb5fbfd85784c0560ea32c559183b49f475) - all: add tests to cover HTML escaping via encoding/json by [@mvdan](https://github.com/mvdan) in [`1aefd09`](https://github.com/cue-lang/cue/commit/1aefd09c7951e4759299bf63e0be2b70432ea741) - cue/build: remove context.Context field by [@rogpeppe](https://github.com/rogpeppe) in [`1932295`](https://github.com/cue-lang/cue/commit/1932295afe5dc1753a99bf8cf616c2afc12eb653) - cue/ast: fix IsValidIdent for \_0 by [@rogpeppe](https://github.com/rogpeppe) in [`9422314`](https://github.com/cue-lang/cue/commit/94223148d697b3beeaa1ec3ca5dc68a73cb9efcd) - internal/diff: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`9e22283`](https://github.com/cue-lang/cue/commit/9e222837e651d5e52360bd44d09a745faa3eca7e) - cmd/cue/cmd: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`aa8c66f`](https://github.com/cue-lang/cue/commit/aa8c66f40728bef5b42558d696ab9b94737543f7) - internal/core/adt: fix let closedness issue with API use by [@mpvl](https://github.com/mpvl) in [`731ddd9`](https://github.com/cue-lang/cue/commit/731ddd9d79e7a714fff8dcb1f79112580921ce8b) - internal/core/export: avoid introducing shadowing by [@mpvl](https://github.com/mpvl) in [`1c9a3b2`](https://github.com/cue-lang/cue/commit/1c9a3b26939456a729de38c7e31a20f4f5693bb7) - internal/tdtest: new table-driven test package by [@mpvl](https://github.com/mpvl) in [`102150d`](https://github.com/cue-lang/cue/commit/102150dedd937090ffee149b1675ff1b0bef89cc) - cue: more support for required fields for selectors by [@mpvl](https://github.com/mpvl) in [`0e16084`](https://github.com/cue-lang/cue/commit/0e1608456fd9df41b27d05bba7f97d25881bce63) - internal/core: fail on missing required only when concrete by [@mpvl](https://github.com/mpvl) in [`f85172a`](https://github.com/cue-lang/cue/commit/f85172a7916b26eb78123da685286b0a2e111384) - cue: fail on required field in various cases by [@mpvl](https://github.com/mpvl) in [`e7d7c6a`](https://github.com/cue-lang/cue/commit/e7d7c6a7aa9ba8e2024a874431558c8e5ec4e8d5) - internal/core/adt: add wrapper for inline Vertex by [@mpvl](https://github.com/mpvl) in [`071c4ab`](https://github.com/cue-lang/cue/commit/071c4ab6df8df3731271b655b1bdc0b0733758d8) - internal/core/export: always export required fields by [@mpvl](https://github.com/mpvl) in [`d5dd9ec`](https://github.com/cue-lang/cue/commit/d5dd9ec2fd17c3584806cc71c9b2633cd1276226) - cue: remove field type by [@mpvl](https://github.com/mpvl) in [`d05d9c1`](https://github.com/cue-lang/cue/commit/d05d9c1ec2a6fa505a6a4538180ddd71c0cf787b) - cmd/cue: avoid loading the current package in `cue help` by [@mvdan](https://github.com/mvdan) in [`143b102`](https://github.com/cue-lang/cue/commit/143b102b4fbcf3331c6f21f4222d59b06d41b270) - all: remove duplicate words in comments by [@Abirdcfly](https://github.com/Abirdcfly) in [`d8c71fa`](https://github.com/cue-lang/cue/commit/d8c71fa18d885f4d4aa13e7dcd51d5de980687fc) - internal/ci: fix cache eviction by [@myitcv](https://github.com/myitcv) in [`53d3bc7`](https://github.com/cue-lang/cue/commit/53d3bc715329847fc20b3d7a14ed13606649f0a0) - internal/ci: address review feedback from CL 551352 by [@myitcv](https://github.com/myitcv) in [`06397b5`](https://github.com/cue-lang/cue/commit/06397b54764ab3de4788e0afb5e7898d81305e3c) - cue: add support for zero values in Value.Float64 by [@kcburge](https://github.com/kcburge) in [`8d31dad`](https://github.com/cue-lang/cue/commit/8d31dad6f551bedda23f1c9fdf1966bc86dec986) - cue/load/tags: add `arch` to set of injectable system variables by [@jpluscplusm](https://github.com/jpluscplusm) in [`752b8e4`](https://github.com/cue-lang/cue/commit/752b8e4a3f019d36440bb85445df69fbec209b09) - internal/ci: allow trybot workflows to be workflow_dispatch-ed by [@myitcv](https://github.com/myitcv) in [`09221a3`](https://github.com/cue-lang/cue/commit/09221a3ebc1dadbe75ffadf8263bdfca7a7fe293) - internal/core/adt: required fields checked for closedness by [@mpvl](https://github.com/mpvl) in [`42580d5`](https://github.com/cue-lang/cue/commit/42580d5b27b9b66fe1d5cfed5e3ad4a3532c3c36) - doc/ref/spec.md: fix uint16 and uint32 values range by [@joanlopez](https://github.com/joanlopez) in [`c67fe60`](https://github.com/cue-lang/cue/commit/c67fe60c23f5e14b2a8dac6e72db7ef6abac9460) - all: correct typos and duplicate words in comments by [@alexandear](https://github.com/alexandear) in [`2e28b01`](https://github.com/cue-lang/cue/commit/2e28b01ce53cf3566af4da5ab365d0d57528ed9a) - cue/errors: remove redundant Sort call in list.sanitize by [@zeithaste](https://github.com/zeithaste) in [`f106acf`](https://github.com/cue-lang/cue/commit/f106acff45bcd2ba263135f24fd338320f699e90) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`d71a76c`](https://github.com/cue-lang/cue/commit/d71a76cfae1c57f203eae14b04605fe9d07be6e6) - internal/ci: remove hard-codings in base package by [@myitcv](https://github.com/myitcv) in [`f881884`](https://github.com/cue-lang/cue/commit/f881884a4e0c7c7ead6e7ed340f2ce723136836f) - internal/core/adt: change addList signature by [@mpvl](https://github.com/mpvl) in [`0c840f6`](https://github.com/cue-lang/cue/commit/0c840f6652709b9d142f2023fac744773b375bd9) - internal/core/adt: introduce ArcNotPresent by [@mpvl](https://github.com/mpvl) in [`e3a7fcf`](https://github.com/cue-lang/cue/commit/e3a7fcf66b0277d3012f4cb9168e751a6732add2) - internal/core/adt: use value array for Disjunction by [@mpvl](https://github.com/mpvl) in [`166ac88`](https://github.com/cue-lang/cue/commit/166ac88b15c358d6cf0560aacaf1099e7cfc06e1) - internal/core/adt: specialize injectComprehension by [@mpvl](https://github.com/mpvl) in [`fa4f2d3`](https://github.com/cue-lang/cue/commit/fa4f2d3050c2c7f71cbdc7f27106496b692d873f) - internal/core/adt: hoist comprehension loop body by [@mpvl](https://github.com/mpvl) in [`e0f5681`](https://github.com/cue-lang/cue/commit/e0f5681dbf354fc4062fdd49a3082ee0ea98ec94) - internal/ci: move evict_caches to base by [@myitcv](https://github.com/myitcv) in [`cef63a3`](https://github.com/cue-lang/cue/commit/cef63a357de717255da826c376d3824773d7ed53) - internal/ci: remove mention of matrix and runner from base by [@myitcv](https://github.com/myitcv) in [`3ed9f92`](https://github.com/cue-lang/cue/commit/3ed9f9220667b9c929460eee371644b7c9e2fb5f) - internal/ci: remove trybot from push branches by [@myitcv](https://github.com/myitcv) in [`5cd427a`](https://github.com/cue-lang/cue/commit/5cd427aa1aef86364768fcc587c49399600c6be0) - internal/ci: refactor base caching pattern by [@myitcv](https://github.com/myitcv) in [`92b28c4`](https://github.com/cue-lang/cue/commit/92b28c409321397e8e14276f3d669c11f22ae0d5) - internal/ci: drop pullThroughProxy step by [@myitcv](https://github.com/myitcv) in [`79aceb7`](https://github.com/cue-lang/cue/commit/79aceb75b056d96bb24b9e393744e9c704033d42) - cue/errors: better vetting of error formats by [@rogpeppe](https://github.com/rogpeppe) in [`c630554`](https://github.com/cue-lang/cue/commit/c630554826376595d7c3617035f4f994aad6d11c) - internal/ci: improve push_tip_to_trybot defaults by [@myitcv](https://github.com/myitcv) in [`be0601b`](https://github.com/cue-lang/cue/commit/be0601bf379c496a57312afeb5ed56566ef624ee) - internal/ci/github: rename repo -> \_repo by [@myitcv](https://github.com/myitcv) in [`646e965`](https://github.com/cue-lang/cue/commit/646e9658ce7b6e3bca4ce16c3e140e102ef8cf2d) - internal/ci: import repo package once in github package by [@myitcv](https://github.com/myitcv) in [`7aec30c`](https://github.com/cue-lang/cue/commit/7aec30c7cd97ac01ff394ec8ea70e3c0e461f8ca) - internal/ci: drop parameter from trybotDispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`6318def`](https://github.com/cue-lang/cue/commit/6318def84d9c84e2151e6c3bce50293944608bd3) - cue/load: minimal module fetching implementation by [@rogpeppe](https://github.com/rogpeppe) in [`cb9d6ed`](https://github.com/cue-lang/cue/commit/cb9d6edf56ffe54d3d882eb32c3cd1d740fd3543) - bump golang.org/x and go-internal deps by [@mvdan](https://github.com/mvdan) in [`3f51337`](https://github.com/cue-lang/cue/commit/3f5133771e3fa114fa952fd4524ed0befc5bb69b) - internal/ci: bump GoReleaser to v1.16.2 ahead of v0.5.0 release by [@myitcv](https://github.com/myitcv) in [`5ec06d9`](https://github.com/cue-lang/cue/commit/5ec06d97bee84f434f7bc96c5426337a396c6c70) - internal/ci: rename core -> repo by [@myitcv](https://github.com/myitcv) in [`6d6ffb4`](https://github.com/cue-lang/cue/commit/6d6ffb48601483695470f36879eeb4032ceb973e) - start using Go 1.20, drop Go 1.18 by [@mvdan](https://github.com/mvdan) in [`d1a6da8`](https://github.com/cue-lang/cue/commit/d1a6da8a68bc5045ab7943526495894f7b48cbfa) - internal/ci: switch to actions/setup-go@v4 by [@mvdan](https://github.com/mvdan) in [`d9c354b`](https://github.com/cue-lang/cue/commit/d9c354b5d4876e47cead9fa1a0948d189c6064f1) - internal/ci: always force push to trybot repo by [@myitcv](https://github.com/myitcv) in [`ed2a9c7`](https://github.com/cue-lang/cue/commit/ed2a9c724fde351580f3ff839a9e7df72abbbb71) - cue/load: avoid using ioutil.ReadDir to list directories by [@mvdan](https://github.com/mvdan) in [`d077202`](https://github.com/cue-lang/cue/commit/d07720266afe96dd0d37aa7698f24d7fb43d3926) - pkg/tool: small fixes to CUE docs by [@mvdan](https://github.com/mvdan) in [`3d08fb2`](https://github.com/cue-lang/cue/commit/3d08fb21240ae0ee61a54595db25a3162e7c4409) - internal/ci: use unity and cuelang.org config from core by [@myitcv](https://github.com/myitcv) in [`4cbb563`](https://github.com/cue-lang/cue/commit/4cbb5632880f05a49cd9140c4eb82e6930a71aec) - internal/ci: DRY up core based on new base defaults by [@myitcv](https://github.com/myitcv) in [`1195b3d`](https://github.com/cue-lang/cue/commit/1195b3d82b64fb5dd7b564f4e2cf333e32a31c47) - internal/ci: establish better defaults in base by [@myitcv](https://github.com/myitcv) in [`af02a2c`](https://github.com/cue-lang/cue/commit/af02a2c461b89b5e179759a213e98e1a49d4787e) - internal/ci: move away from using defs in github by [@myitcv](https://github.com/myitcv) in [`7a7ca81`](https://github.com/cue-lang/cue/commit/7a7ca81d7d53d79cd30ae4963b981a383d1e5969) - internal/ci: move away from using definitions in base by [@myitcv](https://github.com/myitcv) in [`d7a1740`](https://github.com/cue-lang/cue/commit/d7a1740685c7b81940260fdd085e39e52c7d6280) - internal/ci: use core directly instead of \_base alias by [@myitcv](https://github.com/myitcv) in [`f446b87`](https://github.com/cue-lang/cue/commit/f446b8773365e61aece3f8227617672fd0373c44) - internal/ci: move away from using defs as params in base by [@myitcv](https://github.com/myitcv) in [`305dc1d`](https://github.com/cue-lang/cue/commit/305dc1d4cc594b076a747b46753685342beec91e) - internal/ci: collapse gerrithub package into base by [@myitcv](https://github.com/myitcv) in [`9729270`](https://github.com/cue-lang/cue/commit/9729270e2c606563104342cfde3dc732fd010d03) - internal/ci: tweak gerrithub package "params" ahead of move to base by [@myitcv](https://github.com/myitcv) in [`1980621`](https://github.com/cue-lang/cue/commit/1980621b497b1a772273a47191ef1630bf04f6ba) - internal/ci: split base into separate files by [@myitcv](https://github.com/myitcv) in [`3a52c19`](https://github.com/cue-lang/cue/commit/3a52c194868fef00dcf00bf1ceb01a232ab294ba) - internal/ci: rename base parameter field name by [@myitcv](https://github.com/myitcv) in [`cdd5730`](https://github.com/cue-lang/cue/commit/cdd573066a9ea37a5951ceefeb759729af0d9f6e) - internal/ci: move pushTipToTryBot workflow to gerrithub package by [@myitcv](https://github.com/myitcv) in [`0290e04`](https://github.com/cue-lang/cue/commit/0290e04b36a94c3cf4df84e010240b22dbde8f20) - internal/ci: rename gerrithub #dispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`0cfd8c5`](https://github.com/cue-lang/cue/commit/0cfd8c50e728d587a9f6aaf63f0035feb1f8e418) - internal/ci: remove hard-codings in gerrithub package by [@myitcv](https://github.com/myitcv) in [`f5277b9`](https://github.com/cue-lang/cue/commit/f5277b924d3658135f37d211024b8bcac6767330) - internal/ci: move configuration from workflows.cue to core by [@myitcv](https://github.com/myitcv) in [`1bb7e10`](https://github.com/cue-lang/cue/commit/1bb7e10f4c2d07b5bf18d630c252d45f210e7df4) - internal/ci: remove workflow files pre generate by [@myitcv](https://github.com/myitcv) in [`b418955`](https://github.com/cue-lang/cue/commit/b4189550d9578ed76da679abd5f832aca64080f0) - Revert "internal/ci: move pushTipToTryBot workflow to gerrithub package" by [@myitcv](https://github.com/myitcv) in [`87db1a5`](https://github.com/cue-lang/cue/commit/87db1a559d80daf683b5f7196f7878ea0d881744) - Revert "internal/ci: rename base parameter field name" by [@myitcv](https://github.com/myitcv) in [`2461c51`](https://github.com/cue-lang/cue/commit/2461c5114848e172a6d59ead3ebd4cac7af1a88a) - Revert "internal/ci: move configuration from workflows.cue to core" by [@myitcv](https://github.com/myitcv) in [`26ff449`](https://github.com/cue-lang/cue/commit/26ff4493db4e2c66b263184de65f47cb357a9b43) - Revert "internal/ci: rename gerrithub #dispatchWorkflow" by [@myitcv](https://github.com/myitcv) in [`38156f2`](https://github.com/cue-lang/cue/commit/38156f213cb3fea9ca3aa5e4e32456fefce76308) - Revert "internal/ci: remove workflow files pre generate" by [@myitcv](https://github.com/myitcv) in [`0d89b9b`](https://github.com/cue-lang/cue/commit/0d89b9b0fae6c14a29964fd48d5f7c3b15b502e2) - Revert "internal/ci: split base into separate files" by [@myitcv](https://github.com/myitcv) in [`ee7509f`](https://github.com/cue-lang/cue/commit/ee7509f0637651888274f6b71c7da25880a5fd2e) - internal/ci: split base into separate files by [@myitcv](https://github.com/myitcv) in [`d638a35`](https://github.com/cue-lang/cue/commit/d638a3508bf2321e78b07f6239bd218488d2bd28) - internal/ci: remove workflow files pre generate by [@myitcv](https://github.com/myitcv) in [`f723eb7`](https://github.com/cue-lang/cue/commit/f723eb7b81cddb31551cf734d42c6bfb32301bd5) - internal/ci: rename gerrithub #dispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`d276f58`](https://github.com/cue-lang/cue/commit/d276f58e68f4315ad08585a244a93f3b9e0bd0a6) - internal/ci: move configuration from workflows.cue to core by [@myitcv](https://github.com/myitcv) in [`5a0922e`](https://github.com/cue-lang/cue/commit/5a0922ea0a9b00eda05d3696b4aac936c8f45449) - internal/ci: rename base parameter field name by [@myitcv](https://github.com/myitcv) in [`584f3f0`](https://github.com/cue-lang/cue/commit/584f3f07fcaa02d038195999fad0f3097a84a919) - internal/ci: move pushTipToTryBot workflow to gerrithub package by [@myitcv](https://github.com/myitcv) in [`e440409`](https://github.com/cue-lang/cue/commit/e44040932eb10e9d530a625ceb0fb4e068802d9b) - internal/ci: hoist dispatch keys to base by [@myitcv](https://github.com/myitcv) in [`e3ed297`](https://github.com/cue-lang/cue/commit/e3ed29782876648870dd6049776472606093aff9) - internal/ci: move workflows.cue defs to better places by [@myitcv](https://github.com/myitcv) in [`0250807`](https://github.com/cue-lang/cue/commit/02508075358db42172a55c2a0ab6031136d04185) - internal/ci: hoist cache steps to base package by [@myitcv](https://github.com/myitcv) in [`019f6dd`](https://github.com/cue-lang/cue/commit/019f6dd019d38624126913ba31f1c6872cb3fd77) - internal/ci: improve base package docs by [@myitcv](https://github.com/myitcv) in [`57066d4`](https://github.com/cue-lang/cue/commit/57066d4aa0ac81e89700abd3f5ec83c6e0de4939) - internal/ci: make our checkout step configurable by [@myitcv](https://github.com/myitcv) in [`ee093e2`](https://github.com/cue-lang/cue/commit/ee093e2ff70fa867273116747da189d02324a9b9) - internal/ci: specify githubRepositoryPath directly by [@myitcv](https://github.com/myitcv) in [`9c075ca`](https://github.com/cue-lang/cue/commit/9c075cab8595cfe2c2febcd8b3ddcc68c36b7399) - internal/ci: move core.\_#URLPath to base by [@myitcv](https://github.com/myitcv) in [`dd965ad`](https://github.com/cue-lang/cue/commit/dd965ad80e0f507e1c6dca3bb7acd355df4509a2) - internal/ci: move core.#codeReview to base by [@myitcv](https://github.com/myitcv) in [`8b14836`](https://github.com/cue-lang/cue/commit/8b1483607d002a3833bdd961b4371d4bc35be189) - internal/ci: move core package away from definitions by [@myitcv](https://github.com/myitcv) in [`5475370`](https://github.com/cue-lang/cue/commit/547537013305d90b3271c8da19dbfdfa1b1fec44) - internal/ci: improve core package docs by [@myitcv](https://github.com/myitcv) in [`e1a8bee`](https://github.com/cue-lang/cue/commit/e1a8bee0643fc0e2f0c766b4b32bda69f926008b) - internal/ci: refactor the way we declare workflows by [@myitcv](https://github.com/myitcv) in [`09b06ff`](https://github.com/cue-lang/cue/commit/09b06ff8e33ef1f08bd323587248f52a2a42479d) - internal/core/adt: hoist value validation by [@mpvl](https://github.com/mpvl) in [`eea60b9`](https://github.com/cue-lang/cue/commit/eea60b9cd229e1b364166a2d179f0d6e3b043a14) - internal/core/adt: hoist comprehension code by [@mpvl](https://github.com/mpvl) in [`47f0025`](https://github.com/cue-lang/cue/commit/47f0025465ae39917315481e1e29675cd817460c) - internal/core/adt: reorganize nodeContext fields by [@mpvl](https://github.com/mpvl) in [`f807ee8`](https://github.com/cue-lang/cue/commit/f807ee8fafc070b2fa1ec8623cd4eb26a72616cc) - internal/core/adt: unexport more methods by [@mpvl](https://github.com/mpvl) in [`ce65141`](https://github.com/cue-lang/cue/commit/ce65141fd4b18ca00aa6cb2a60952a26fd2cc690) - internal/core/adt: unexport VertexStatus by [@mpvl](https://github.com/mpvl) in [`185eed7`](https://github.com/cue-lang/cue/commit/185eed7706c111cef93657eeaf5244f1476a7a5f) - internal/core/adt: remove state arg from Err, SetValue, and UpdateValue by [@mpvl](https://github.com/mpvl) in [`97904e3`](https://github.com/cue-lang/cue/commit/97904e3f68e7d6a13b28c7ca28da6d38937c4971) - internal/core/adt: unexport Unify by [@mpvl](https://github.com/mpvl) in [`7851142`](https://github.com/cue-lang/cue/commit/785114246b26e673a375c40094ea5d01932978bd) - internal/core/adt: clone arcMap by [@mpvl](https://github.com/mpvl) in [`dbf7bb8`](https://github.com/cue-lang/cue/commit/dbf7bb8a6f124f3e55e2390a76011336161f7f68) - internal/ci: remove the cachePost steps by [@myitcv](https://github.com/myitcv) in [`6843415`](https://github.com/cue-lang/cue/commit/68434159334bf0be33f1910c943bb537a1499b5f) - internal/ci: bump default of cue version to v0.5.0-beta.5 by [@myitcv](https://github.com/myitcv) in [`3121a27`](https://github.com/cue-lang/cue/commit/3121a278e5536110e2e0cd16dcbb17706738b1ed) - internal/ci: update base early git checks from alpha.cuelang.org by [@myitcv](https://github.com/myitcv) in [`4509e7f`](https://github.com/cue-lang/cue/commit/4509e7f9ca7d12be4f66ae8669e86dd2c49eec17) - internal/core/adt: allow required dynamic fields by [@mpvl](https://github.com/mpvl) in [`c3138e3`](https://github.com/cue-lang/cue/commit/c3138e362ec88061b8a83368ccc66511581a7263) - internal/ci: skip test cache on protected branches by [@myitcv](https://github.com/myitcv) in [`21f494d`](https://github.com/cue-lang/cue/commit/21f494db70180cb062558eb05f499b763add74ad) - internal/core/adt: implement required fields. by [@mpvl](https://github.com/mpvl) in [`0b681f5`](https://github.com/cue-lang/cue/commit/0b681f5d193a55893fdec8386f4a72a6effcebb1) - cue/ast: prepare for required fields by [@mpvl](https://github.com/mpvl) in [`1da0fd9`](https://github.com/cue-lang/cue/commit/1da0fd912d1af8ced98df15279e7a6d225ccae78) - internal/core/adt: merge OptionalField and Field types by [@mpvl](https://github.com/mpvl) in [`1822d52`](https://github.com/cue-lang/cue/commit/1822d5247c0b9ba677e53054f46fd5475e4038a6) - internal/ci: bump pinned version of Go for releases by [@mvdan](https://github.com/mvdan) in [`e5cd9ac`](https://github.com/cue-lang/cue/commit/e5cd9ac6c2f9729cab3847ec879317a386bcbf2a) - internal/ci: use a group of cue commands for go:generate by [@mvdan](https://github.com/mvdan) in [`d16b575`](https://github.com/cue-lang/cue/commit/d16b5758c12d752c439a78f51baabace69268af7) - cmd/cue: remove fallback version code for Go 1.17 by [@mvdan](https://github.com/mvdan) in [`e806bba`](https://github.com/cue-lang/cue/commit/e806bba7f48a8290307b9a2f1ea9a1566d0b0432) - internal/ci: rerun trybot workflows post eviction by [@myitcv](https://github.com/myitcv) in [`a632d16`](https://github.com/cue-lang/cue/commit/a632d16ec443659bec96e6a0f0409a510867dd49) - internal/ci: tidy up use of curl for GitHub API calls by [@myitcv](https://github.com/myitcv) in [`f4d0802`](https://github.com/cue-lang/cue/commit/f4d0802da1fdec3b7b228c71e0c60baf903a87f8) - internal/ci: do not evict caches on push to ci/test by [@myitcv](https://github.com/myitcv) in [`254f0f1`](https://github.com/cue-lang/cue/commit/254f0f1f33a7cbbd2d07f7f850bef02bf03751cb) - internal/ci: evict workflow caches on a daily basis by [@myitcv](https://github.com/myitcv) in [`ee81e77`](https://github.com/cue-lang/cue/commit/ee81e77aa558d8f9219bd620eadbc3ecbb261310) - internal/ci: bump to use ubuntu-22.04 as our linux machine by [@myitcv](https://github.com/myitcv) in [`4686700`](https://github.com/cue-lang/cue/commit/4686700dc71484162ce563fa0f443b43117b2484) - internal/ci: use actions/cache/restore for non-protected branch by [@myitcv](https://github.com/myitcv) in [`38ee1c2`](https://github.com/cue-lang/cue/commit/38ee1c2d69354408527e76a41aa303bbbb198549) - cue/load: don't read parent directories in tests by [@mvdan](https://github.com/mvdan) in [`9e014c3`](https://github.com/cue-lang/cue/commit/9e014c3916e5ba4e040a1fcac0c86de9c6cea0ea) - internal/ci: reset git directory timestamps faster by [@mvdan](https://github.com/mvdan) in [`c7fd893`](https://github.com/cue-lang/cue/commit/c7fd893a1eb45533f35e6c4cbbd339af5d658e63) - internal/ci: fix up modified times for all directories by [@mvdan](https://github.com/mvdan) in [`e31b8f7`](https://github.com/cue-lang/cue/commit/e31b8f753d467ab21d6d8a5caa6e5227db30242b) - internal/ci: run long tests on linux when testing CLs by [@mvdan](https://github.com/mvdan) in [`daa4022`](https://github.com/cue-lang/cue/commit/daa4022e260892e93de540b88bfa05480850edfd) - cmd/cue: remove `go install` long tests by [@mvdan](https://github.com/mvdan) in [`fa1f369`](https://github.com/cue-lang/cue/commit/fa1f369cd616d9da12f110ee08f986b36e104730) - internal/ci: restore git modified times after cloning by [@mvdan](https://github.com/mvdan) in [`829bd64`](https://github.com/cue-lang/cue/commit/829bd64d64c0004f96ddbb8d63cf24f4cd75bbce) - doc/tutorial/kubernetes: fix build breakage by [@mpvl](https://github.com/mpvl) in [`b05585b`](https://github.com/cue-lang/cue/commit/b05585b1668c2df7c947c53a24a489ac4b3a3f8b) - internal/core/adt: use ? in debug output by [@mpvl](https://github.com/mpvl) in [`5fe040a`](https://github.com/cue-lang/cue/commit/5fe040ad0c460367d8bf27fe5a8606821e3a8a46) - internal/core/adt: optional field rewrite by [@mpvl](https://github.com/mpvl) in [`19bfdb9`](https://github.com/cue-lang/cue/commit/19bfdb9fa5df54033bbfbf042bd433517758c5c7) - internal/ci/gerrithub: update comment to be clearer by [@mvdan](https://github.com/mvdan) in [`4fed730`](https://github.com/cue-lang/cue/commit/4fed730f4d2fcaa2d2873a36fc58e7a2795545dc) - internal/core/adt: finalize earlier for arcs by [@mpvl](https://github.com/mpvl) in [`c80a690`](https://github.com/cue-lang/cue/commit/c80a69088def981d2816176958912fbf4826a849) - internal/core/adt: pass member type to insertField by [@mpvl](https://github.com/mpvl) in [`27b096c`](https://github.com/cue-lang/cue/commit/27b096cc9213cc4d4e7b122bcd3620ebe0def467) - internal/core/adt: remove duplicate statement by [@mpvl](https://github.com/mpvl) in [`383ff3e`](https://github.com/cue-lang/cue/commit/383ff3e29246ccc6167a03280e88c4357c680f88) - internal/core/adt: export arcType and friends by [@mpvl](https://github.com/mpvl) in [`4f32fb4`](https://github.com/cue-lang/cue/commit/4f32fb452eef26254bb3a7c4c8a7b494d42a6216) - internal/core/adt: revert fix for 2209 by [@mpvl](https://github.com/mpvl) in [`c8e580e`](https://github.com/cue-lang/cue/commit/c8e580e91c01a4242e81f84116a36b8f7ec42001) - cue/ast, cue/parser: parse function types by [@4ad](https://github.com/4ad) in [`8f0fe77`](https://github.com/cue-lang/cue/commit/8f0fe77dddf4941d12930bb63581a9ce0c176c34) - cmd/cue: add CUE_DEBUG_PARSER_TRACE environment variable by [@4ad](https://github.com/4ad) in [`34a27bb`](https://github.com/cue-lang/cue/commit/34a27bb4835622233513517b8073d1f9eb74ac25) - internal/core/adt: fix possible infinte loop for API usage by [@mpvl](https://github.com/mpvl) in [`782cae0`](https://github.com/cue-lang/cue/commit/782cae0d69e07a62522a3fe5ac161c7fc49ced09) - internal/core/adt: fix regression in comparing to bottom by [@mpvl](https://github.com/mpvl) in [`9954cc2`](https://github.com/cue-lang/cue/commit/9954cc2108a4c3918fca995b6a3c9c64c15667ec) - internal/core/adt: remove unnecessary check by [@mpvl](https://github.com/mpvl) in [`1a0a81b`](https://github.com/cue-lang/cue/commit/1a0a81ba95bc02078db097e5c6f44dc4b08d0428) - internal/core/adt: detect closed lists as fatal errors by [@mpvl](https://github.com/mpvl) in [`06fbefe`](https://github.com/cue-lang/cue/commit/06fbefe5f6c864294e945b8f7190ab643852f4aa) - internal/core/adt: sharpen condition for scalar setting by [@mpvl](https://github.com/mpvl) in [`9b1f222`](https://github.com/cue-lang/cue/commit/9b1f2227cfe9d90dfa1f064e11e8bdcc772eb96e) - cmd/cue: respect --exclude for constants by [@rogpeppe](https://github.com/rogpeppe) in [`b44e16d`](https://github.com/cue-lang/cue/commit/b44e16d7ef2f37cb43be7b6552b6a4c52564550a) - cmd/cue: add test case for --exclude by [@rogpeppe](https://github.com/rogpeppe) in [`2fa4ee6`](https://github.com/cue-lang/cue/commit/2fa4ee6e56c671ba8669669aac602343d0dadfd6) - cue/context: support internal interpreters by [@mpvl](https://github.com/mpvl) in [`7617de2`](https://github.com/cue-lang/cue/commit/7617de2b03a76b3fb1e2d635443853993f6b80b5) - internal/cuetxtar: configurable load.Config by [@rogpeppe](https://github.com/rogpeppe) in [`7485f58`](https://github.com/cue-lang/cue/commit/7485f58caa1a30ee97daad23561b7ba9fa2c5c20) - cue/load/internal/...: copy pkgs from Go source by [@rogpeppe](https://github.com/rogpeppe) in [`5723470`](https://github.com/cue-lang/cue/commit/57234703b095a088af961e9aa1b3e9da8565df70) - cue/load: refactor loader by [@rogpeppe](https://github.com/rogpeppe) in [`c28d75a`](https://github.com/cue-lang/cue/commit/c28d75aac789735144d231b694afda4bc8507de0) - cue/load: move code before refactoring by [@rogpeppe](https://github.com/rogpeppe) in [`87b91c9`](https://github.com/cue-lang/cue/commit/87b91c95c7e6b665beedeb9f08987f432a6a5195) - internal/ci: use simpler "go get" to pull a version through the proxy by [@mvdan](https://github.com/mvdan) in [`eff0108`](https://github.com/cue-lang/cue/commit/eff01087f42d12b501fe4341228db5d413afae59) - cue/stats: use int64 for stats counters by [@mvdan](https://github.com/mvdan) in [`7073554`](https://github.com/cue-lang/cue/commit/7073554f7d59d0af8217b8cb71a2c7c1f68b6982) - cmd/cue: remove use of stderr directive by [@mpvl](https://github.com/mpvl) in [`7d89acd`](https://github.com/cue-lang/cue/commit/7d89acd5c44bca0c756f76089436ee9913818b03) - doc/ref/spec.md: add required fields by [@mpvl](https://github.com/mpvl) in [`9a7c8fb`](https://github.com/cue-lang/cue/commit/9a7c8fb04e74bc29a6b93507bbfd56be682431d7) - pkg/list: simply template for Ascending by [@mpvl](https://github.com/mpvl) in [`9dbb373`](https://github.com/cue-lang/cue/commit/9dbb373d9cb6aeddcd73981d0f79b637067ca517) - cue/testdata/benchmarks: add benchmark for sort by [@mpvl](https://github.com/mpvl) in [`9f538a6`](https://github.com/cue-lang/cue/commit/9f538a6cae5ed9d41b0d9e472a0a9112cdd316d0) - cue/load: add initial module.cue schema by [@rogpeppe](https://github.com/rogpeppe) in [`b2087b9`](https://github.com/cue-lang/cue/commit/b2087b94cf408e69c969380042ad099ee8e7cb81) - internal/ci: only run release workflow on main repo by [@myitcv](https://github.com/myitcv) in [`ce37b63`](https://github.com/cue-lang/cue/commit/ce37b63f1eae7cb41a00240c02602b564ac7902b) - cue/load: use cue package to interpret module.cue file by [@rogpeppe](https://github.com/rogpeppe) in [`1b6fb4e`](https://github.com/cue-lang/cue/commit/1b6fb4e7e45ea4387e6f029a7f2b93e1bb399485) - cue/load: minor tweaks by [@rogpeppe](https://github.com/rogpeppe) in [`d78f1a2`](https://github.com/cue-lang/cue/commit/d78f1a234a3ff851322f9d64389b6355d02ea7be) - .github: clarify what we mean by "latest release" by [@mvdan](https://github.com/mvdan) in [`03e8f29`](https://github.com/cue-lang/cue/commit/03e8f294fcbeb11e8c4e04f05a6d391535565354) - internal/ci: do not release "zero" releases in release workflow by [@myitcv](https://github.com/myitcv) in [`02e19c8`](https://github.com/cue-lang/cue/commit/02e19c85e4d9244bdf721584d626c8ebff287456) - internal/ci: fix goreleaser in non-snapshot mode again by [@mvdan](https://github.com/mvdan) in [`ae0d7ca`](https://github.com/cue-lang/cue/commit/ae0d7ca4c00144933f9c8c166de5948615a0d73d) - cmd/cue: include Go in the version command by [@mvdan](https://github.com/mvdan) in [`879f902`](https://github.com/cue-lang/cue/commit/879f902a707cae00955bafbdbdd41c0cec745d89) - internal/ci: fix and test the release workflow on branches by [@mvdan](https://github.com/mvdan) in [`266bb32`](https://github.com/cue-lang/cue/commit/266bb320962361daebc7792ea1363489f053b5bf) - cmd/cue: mention doc location for -l flag by [@rogpeppe](https://github.com/rogpeppe) in [`56caeaf`](https://github.com/cue-lang/cue/commit/56caeaf8c7a8be0c2935131844d101e75a189e70) - internal/core/adt: fix 2235 by [@mpvl](https://github.com/mpvl) in [`3c8f0ad`](https://github.com/cue-lang/cue/commit/3c8f0adf5ee863a6a2d562147df11a936c6531c8) - pkg/list: reimplement sort by [@mpvl](https://github.com/mpvl) in [`2e70ac7`](https://github.com/cue-lang/cue/commit/2e70ac781e3ea46158ce2dfb0a745e2cc80ab5b1) - cue/scanner: remove block comment scanning by [@mpvl](https://github.com/mpvl) in [`5d0a6f2`](https://github.com/cue-lang/cue/commit/5d0a6f2719550c727a2083e3485b3f998fdd5a1f) - internal/core/adt: add tests for 2235 by [@mpvl](https://github.com/mpvl) in [`125e40b`](https://github.com/cue-lang/cue/commit/125e40bed047f8d256a827e54f16b7a7a9613597) - cue/parser: remove last vestiges of <foo>: T by [@mpvl](https://github.com/mpvl) in [`fd170da`](https://github.com/cue-lang/cue/commit/fd170da2b3f1e2b928e79281fbf33228b6484c2a) - all: remove support for :: by [@mpvl](https://github.com/mpvl) in [`a6055ea`](https://github.com/cue-lang/cue/commit/a6055ea788f75987f9b1b2dc0c4235fd1acf9de1) - internal/encoding/{json|yaml}: disallow non-regular fields by [@mpvl](https://github.com/mpvl) in [`76e0be4`](https://github.com/cue-lang/cue/commit/76e0be4fb6f65aa64be14829f5aacf642984998d) - cmd/cue: add tests for issue 1926 by [@mpvl](https://github.com/mpvl) in [`9b573be`](https://github.com/cue-lang/cue/commit/9b573be1e697ed330c581d3f3a654b33ba8e1080) </details> ### [`v0.5.0`](https://github.com/cue-lang/cue/releases/tag/v0.5.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.4.3...v0.5.0) This release focuses on changes to the implementation of comprehensions, the algorithm for detecting cycles in CUE, and the reimplementation of `let` comprehensions as fields. Also included are a number of bug fixes and changes to help the [KubeVela project](https://kubevela.io/) upgrade off CUE v0.2.2 to the latest release. v0.5.0 is the first release since v0.4.3 back in April 2022. It has been a long time in the making, and is comprised of 277 commits. It is worth noting that we do not plan nor wish for such long gaps between releases. For more details on upcoming releases and steps we are taking to increase release cadence as well as our confidence in each release, please see [this discussion](https://cuelang.org/issue/2335). As a reminder: users can register their projects with `unity`, our regression and performance testing setup. `unity` is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. `unity` continues to catch multiple issues with each release. Adding your project to `unity` not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. We are currently in the process of releasing Unity as a GitHub App on the public Marketplace. [Sign up](https://forms.gle/cqsdoNZQnQ1efGJy5) to receive updates; we will be in touch as soon as the GitHub App is ready. Thank you to [@djosephsen](https://github.com/djosephsen), [@joaopapereira](https://github.com/joaopapereira), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@qequ](https://github.com/qequ), [@rogpeppe](https://github.com/rogpeppe), [@rytswd](https://github.com/rytswd), [@satotake](https://github.com/satotake), [@spachava753](https://github.com/spachava753), and [@tmm1](https://github.com/tmm1) for contributing to this release! #### Project-level changes Various CI-related changes have been made to simplify and streamline the GerritHub-based CI setup across the various CUE repositories. A common `base` package is vendored into each repository and used as a template for GitHub workflows and other configuration. For those interested in studying the setup, please see the files beneath [`internal/ci`](https://github.com/cue-lang/cue/tree/a1d9054ffa5b292763538a3fa6cf057a062a145d/internal/ci). This release drops support for `go1.16.x` , `go1.17.x` and `go1.18.x`, is tested against `go1.19.x` and `go1.20.x`, and is built using `go1.20.2`. Our dependency on `github.com/rogpeppe/go-internal` is upgraded to `v1.9.0` and various `testscript`-related improvements have been made to CUE's tests. [GoReleaser](https://goreleaser.com/) has been upgrade to v1.16.2 as part of the release workflow. In a related change, [CL 546920](https://cuelang.org/cl/546920) moves us to a CUE-based source configuration for GoReleaser. This allows us to define the concept of 'latest', state which indicates whether we should perform the homebrew release and the Docker manifest latest steps. This fixes a long-standing bug whereby homebrew taps and Docker images were created for the latest release, regardless of whether that was a pre-release, or indeed a patch version of a non-current minor version. As of [CL 547507](https://cuelang.org/cl/547507), CUE build artefacts published on GitHub are entirely reproducible, thanks to Go's [support for reproducible, verifiable and verified builds](https://research.swtch.com/vgo-repro). #### Encoders When `cue import`-ing YAML, the `-R` recursive flag now only recursively interprets text as YAML if it contains a newline [CL 536902](https://cuelang.org/cl/536902). #### API Various APIs have been transitioned to drop use of the deprecated `cue.Runtime` type, as well as migrating away from `cue.Instance` via `cue.InstanceOrValue`. Some use of these deprecated types remains: [#1035](https://cuelang.org/issue/1035), [#1735](https://cuelang.org/issue/1735), [#1806](https://cuelang.org/issue/1806). These will be tidied up in later releases as the API surface matures towards v1.0.0. The `cue` package now supports `InlineImports` for `Value.Syntax` [CL 541561](https://cuelang.org/cl/541561). This leverages new support within the internal exporter to creating self-contained CUE. This change also deprecates `Value.ResolveReferences()`. Package `cue` adds `Selector.Type` to make it easier to pull out selector-specific information from a selector (for example, it makes it possible and cheap to retrieve the unquoted string label from a regular field selector) [CL 542738](https://cuelang.org/cl/542738). Package `cue` adds `Value.BuildInstance()`. If a `cue.Value` exactly represents a package, `BuildInstance()` returns the build instance corresponding to the value [CL 542769](https://cuelang.org/cl/542769). `cue/stats` is introduced as a new package for getting CUE operation statistics. The functionality is hoisted from `internal/core/adt`, but the package should for all practical purposes be seen as a new implementation. The stats have been aggregated as experimental functionality to the `tools/flow` package. [CL 546763](https://cuelang.org/cl/546763) disallowed deprecated language features in the Go API. These features had long been deprecated in `cmd/cue`. This means that API operations will now fail on deprecated features whereas before they were handled in compatibility mode. The `parser.FromVersion` feature can be used to reenable these deprecated features. #### Language This release does not introduce any language changes. [CL 537264](https://cuelang.org/cl/537264) made some minor adjustments to the language specification to improve readability. [CL 541457](https://cuelang.org/cl/541457) removes support for re-writing of old-style `let` declarations. This had already been deprecated for a long time and this change was made to enable support for aliases of embeddings. #### Core evaluator ##### Per-field comprehensions One of the major changes introduced in this release is how comprehensions are handled. [CL 529524](https://cuelang.org/cl/529524) move the evaluator to a model of per-field comprehensions. Comprehensions are expanded `for`, `if`, and `let` clauses that yield zero or more structs to be embedded in the enclosing list or struct. CUE does not allow cyclic dependencies between comprehensions if they result in an ambiguous set of fields. It does allow cascading insertions as in: a?: int b?: int if a != _|_ { b: 2 } if b != _|_ { c: 3 d: 4 } The way this works is that for fields with a fixed prefix path in a comprehension value, the comprehension is assigned to these respective fields. More concretely, the above example is rewritten to: a?: int b: if a != _|_ { 2 } c: if b != _|_ { 3 } d: if b != _|_ { 4 } where the fields with if clause are only inserted if their condition resolves to true. Note that this is not valid CUE; it may be in the future. With this rewrite, dependencies in comprehension expressions are handled analogously to other expressions. Note that a single comprehension may be distributed across multiple fields. The evaluator will ensure, however, that a comprehension is only evaluated once. Analogous to reference cycles, as of [CL 544129](https://cuelang.org/cl/544129) we allow comprehensions to use the struct in which they are defined as source, as long as they do not introduce new fields, which would alter the source on which they iterate. ##### Reimplementation of cycle detection The new algorithm is inspired by the cycle detection used by Tomabechi's [^Tomabechi] and Van Lohuizen's [^VanLohuizen] graph unification algorithms. Unlike with traditional graph unification, however, CUE uses references, which, unlike node equivalence, are unidirectional. This means that the technique to track equivalence through dereference, as common in graph unification algorithms like Tomabechi's, does not work unaltered. The unidirectional nature of references imply that each reference equates an exact copy of the value it points to. This renders the original approach of node-pointer equivalence useless. The new algorithm, a variant of Tomabechi's and Van Lohuizen's algorithm, looks at references equality on conjuncts, instead of node equality. This simplifies the accounting and allows for far simpler and precise accounting when using references instead of the traditional node equivalence. ##### More background info on cycles We have to define when a cycle is detected. CUE implementations MUST report an error upon a structural cycle, and SHOULD report cycles at the shortest possible paths at which they occur, but MAY report these at deeper paths. For instance, the following CUE has a structural cycle: f: g: f The shortest path at which the cycle can be reported is `f.g`, but as all failed configurations are logically equal, it is fine for implementations to report them at `f.g.g`, for instance. It is not, however, correct to assume that a reference to a parent is always a cycle. Consider this case: a: [string]: b: a Even though reference `a` refers to a parent node, the cycle needs to be fed by a concrete field in struct `a` to persist, meaning it cannot result in a cycle as defined in the spec as it is defined here. Note however, that a specialization of this configuration *can* result in a cycle. Consider a: [string]: b: a a: c: _ Here reference `a` is guaranteed to result in a structural cycle, as field `c` will match the pattern constraint unconditionally. In other words, it is not possible to exclude tracking references across pattern constraints from cycle checking. It is tempting to try to find a complete set of these edge cases with the aim to statically determine cases in which this occurs. But as Carpenter \[^Carpenter] demonstrates, it is possible for cycles to be created as a result of unifying two graphs that are themselves acyclic. The following example is a translation of Carpenters example to CUE: y: { f: h: g g: _ } x: { f: _ g: f } Even though the above contains no cycles, the result of `x & y` is cyclic: f: h: g g: f This means that, in practice, cycle detection has at least partially a dynamic component to it. The [language specification](https://cuelang.org/docs/references/spec/) contains a higher-level and more complete overview of structural cycles. [^Tomabechi]: https://aclanthology.org/C92-2068 Hideto Tomabechi. 1992. Quasi-Destructive Graph Unification with Structure-Sharing. In COLING 1992 Volume 2: The 14th International Conference on Computational Linguistics. [^VanLohuizen]: https://aclanthology.org/P00-1045/ Marcel P. van Lohuizen. 2000. "Memory-Efficient and Thread-Safe Quasi-Destructive Graph Unification". In Proceedings of the 38th Annual Meeting of the Association for Computational Linguistics, pages 352–359, Hong Kong. Association for Computational Linguistics. \[^Carpenter]: Bob Carpenter, "The logic of typed feature structures." Cambridge University Press, ISBN:0-521-41932-8 ##### Reimplementation of `let` comprehensions [CL 543362](https://cuelang.org/cl/543362) made a change to `internal/core` to reimplement `let` comprehensions as fields. This makes it easier to track context as `let` comprehensions then follow the same paradigm as fields. It also allows debug information to be shown as to where lets are added in the tree. This change was accompanied by number of others that refined the approach. ##### Self-contained export `internal/core/export` now implements an algorithm for generating self-contained CUE on export, an option that can further be refined by asking the exporter to inline imports. These internal changes manifest in changes to `cue def` and `cuelang.org/go/cue` that are described elsewhere. ##### Other changes [CL 545897](https://cuelang.org/cl/545897) started tracking stats within the core CUE tests. This book keeping helps to spot likely regressions in performance early by collocating the stats with the CUE that is being evaluated. #### Builtins In the `strconv` package, `strconv.FormatInt` and `strconv.FormatUint` now support arbitary-precision format; see [CL 538512](https://cuelang.org/cl/538512). [CL 545898](https://cuelang.org/cl/545898) improved the error messages for `pkg` builtins, by including the path in error in many cases, and passing a wrapped message for `encoding/yaml`. [CL 546237](https://cuelang.org/cl/546237) allows incomplete `list.MinItems` constraints. Before it either returned `false` or `true`, ignoring that making a configuration more specific might still satisfy `MinItems` later on. [CL 546238](https://cuelang.org/cl/546238) made a similar change for `struct.MinFields`. #### Tooling layer Standard input is now parsed correctly in `cue cmd`-declared command tasks; see [CL 541898](https://cuelang.org/cl/541898). #### `cmd/cue` Version control system (VCS) information is included in `cue version` as of [CL 540297](https://cuelang.org/cl/540297). The Go version used to build `cmd/cue` is included as of [CL 549302](https://cuelang.org/cl/549302). `cue def` now supports an `--inline-imports` flag which resolves imports to print a self-contained version of the command input. For example, given the `txtar` input: -- cue.mod/module.cue -- module: "example.com/a" -- in.cue -- package a import "example.com/a/pkg" import "list" v: pkg.v -- pkg/pkg.cue -- package pkg v: { x: 3, y: x } The running `cue def --inline-imports in.cue` will give: package a import "list" v: { x: 3 y: x } [CL 546243](https://cuelang.org/cl/546243) fixed a long-standing bug whereby the `--ignore` errors flag was not observed by `cue eval`. #### Changelog - \[release-branch.v0.5] internal/ci: use go1.19.8 for the release of v0.5.0 by [@myitcv](https://github.com/myitcv) in [`d780488`](https://github.com/cue-lang/cue/commit/d780488159bd082f9f9d027ab42dd4d9b5d95d5e) - internal/ci: fix cache eviction by [@myitcv](https://github.com/myitcv) in [`a1d9054`](https://github.com/cue-lang/cue/commit/a1d9054ffa5b292763538a3fa6cf057a062a145d) - internal/ci: address review feedback from CL 551352 by [@myitcv](https://github.com/myitcv) in [`af01db1`](https://github.com/cue-lang/cue/commit/af01db1892e650a55d62d7423fe96732d6fb911d) - internal/ci: allow trybot workflows to be workflow_dispatch-ed by [@myitcv](https://github.com/myitcv) in [`22156ef`](https://github.com/cue-lang/cue/commit/22156efdb892e80b7e92b4a2785ceb831470abc1) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`a4403eb`](https://github.com/cue-lang/cue/commit/a4403eb12b04c6cb9ca19ac03561199912fc66e5) - internal/ci: remove hard-codings in base package by [@myitcv](https://github.com/myitcv) in [`0eaee71`](https://github.com/cue-lang/cue/commit/0eaee7137e10cf1ca23ab263d872dcaf0fa97aeb) - internal/ci: move evict_caches to base by [@myitcv](https://github.com/myitcv) in [`584b21e`](https://github.com/cue-lang/cue/commit/584b21e968ba7941ff4a03d5784fd37dcd9cca06) - internal/ci: remove mention of matrix and runner from base by [@myitcv](https://github.com/myitcv) in [`7c07680`](https://github.com/cue-lang/cue/commit/7c07680633f8644441d9ae80f150ac5a471abd8a) - internal/ci: remove trybot from push branches by [@myitcv](https://github.com/myitcv) in [`9f3af8f`](https://github.com/cue-lang/cue/commit/9f3af8f084f97838999f6cd5bba545054fba85f1) - internal/ci: refactor base caching pattern by [@myitcv](https://github.com/myitcv) in [`390bca5`](https://github.com/cue-lang/cue/commit/390bca5ce528e3a6408171b79961508f00e56f12) - internal/ci: drop pullThroughProxy step by [@myitcv](https://github.com/myitcv) in [`a14fbf4`](https://github.com/cue-lang/cue/commit/a14fbf49856399c7a6737e1495f7d8dde994be88) - \[release-branch.v0.5] internal/ci: bring inline with [`be0601b`](https://github.com/cue-lang/cue/commit/be0601bf) by [@myitcv](https://github.com/myitcv) in [`f4d04a7`](https://github.com/cue-lang/cue/commit/f4d04a7e5dc569836900c77b6aa4c26f20fcc9d1) - internal/ci: bump pinned version of Go for releases by [@mvdan](https://github.com/mvdan) in [`374a2cc`](https://github.com/cue-lang/cue/commit/374a2cc382856da74e5634341e3fbb2fd9fa84d1) - internal/core/adt: revert fix for 2209 by [@mpvl](https://github.com/mpvl) in [`c0421b4`](https://github.com/cue-lang/cue/commit/c0421b44e58cedad9200162a6fb6fae065da2d2b) - internal/core/adt: fix possible infinte loop for API usage by [@mpvl](https://github.com/mpvl) in [`1ce9120`](https://github.com/cue-lang/cue/commit/1ce91202faf3d4de930e1c75c491c332c7b9d11a) - internal/core/adt: fix regression in comparing to bottom by [@mpvl](https://github.com/mpvl) in [`87c79ef`](https://github.com/cue-lang/cue/commit/87c79efa8f37e1441b8ea67cff0bf5027bf1daaf) - internal/core/adt: remove unnecessary check by [@mpvl](https://github.com/mpvl) in [`28321f6`](https://github.com/cue-lang/cue/commit/28321f6b49947b993823fb445835f560f0464b69) - internal/core/adt: detect closed lists as fatal errors by [@mpvl](https://github.com/mpvl) in [`5d42c6c`](https://github.com/cue-lang/cue/commit/5d42c6cee285c44bb4af1cda5b31227f65364c99) - internal/core/adt: sharpen condition for scalar setting by [@mpvl](https://github.com/mpvl) in [`3ba76ba`](https://github.com/cue-lang/cue/commit/3ba76baf9b432e15f110c49be701a5d0600c2412) - internal/ci: fix goreleaser in non-snapshot mode again by [@mvdan](https://github.com/mvdan) in [`576d0e4`](https://github.com/cue-lang/cue/commit/576d0e461a990ddcdab9da7a10375a1c6d87a865) - internal/core/adt: fix 2235 by [@mpvl](https://github.com/mpvl) in [`ca411de`](https://github.com/cue-lang/cue/commit/ca411dedecdf08f2d0b99931c61a6d37ea93c985) - internal/core/adt: add tests for 2235 by [@mpvl](https://github.com/mpvl) in [`89693e1`](https://github.com/cue-lang/cue/commit/89693e1ff31881d90500db4d34b05c7685575d76) - cmd/cue: include Go in the version command by [@mvdan](https://github.com/mvdan) in [`9b1f248`](https://github.com/cue-lang/cue/commit/9b1f248845fabfda2ed70cc3c1c823baef5da69f) - internal/ci: fix and test the release workflow on branches by [@mvdan](https://github.com/mvdan) in [`63749fe`](https://github.com/cue-lang/cue/commit/63749fe7d1fc40011564d54da9826050fd5a6239) - cmd/cue: add evaluator stats support by [@mpvl](https://github.com/mpvl) in [`d573e0c`](https://github.com/cue-lang/cue/commit/d573e0c2f0419f3a32e9d7bc1f3000cc365a240d) - cmd/cue: add tests for issue 345 by [@mpvl](https://github.com/mpvl) in [`352a736`](https://github.com/cue-lang/cue/commit/352a7363b1b22ed4490d328bbc9275bf4dd2b779) - internal/core/adt: filter more disjunctions by [@mpvl](https://github.com/mpvl) in [`5a6bd19`](https://github.com/cue-lang/cue/commit/5a6bd1910821112123897c2b553b848c15f6eae2) - internal/core/adt: add tests for 2209 by [@mpvl](https://github.com/mpvl) in [`6b45d7e`](https://github.com/cue-lang/cue/commit/6b45d7e520a8e1b0f9ba287967fdb8b059e49fdc) - internal/core/adt: improve mechanism for conjunct insertion by [@mpvl](https://github.com/mpvl) in [`887f564`](https://github.com/cue-lang/cue/commit/887f56497cbc2178e9cb1e9be78d8abae78ea0cd) - internal/core/adt: add tests for conjunct insertion by [@mpvl](https://github.com/mpvl) in [`81e4cba`](https://github.com/cue-lang/cue/commit/81e4cba186c65ada5018d71c80bf63ce00bf08e7) - internal/core/adt: only set scalar if not already defined by [@mpvl](https://github.com/mpvl) in [`f23e3d5`](https://github.com/cue-lang/cue/commit/f23e3d565c499c1a220b94edcbc18f83c1438836) - github: bring the bug report template up to date by [@mvdan](https://github.com/mvdan) in [`b75fdc8`](https://github.com/cue-lang/cue/commit/b75fdc8bf307185c20b9107082ce0d8c205c36f5) - internal/ci: make github CLI shell invocations safer by [@mvdan](https://github.com/mvdan) in [`94765d6`](https://github.com/cue-lang/cue/commit/94765d6a9756fc83be553779fef8e1faaba226b5) - internal/core: clone let upon use of for var references by [@mpvl](https://github.com/mpvl) in [`3a79e96`](https://github.com/cue-lang/cue/commit/3a79e96aa6bb406475e7d121d65caa87ae463ce4) - internal/core/debug: change notation for "multi" lets by [@mpvl](https://github.com/mpvl) in [`fd05908`](https://github.com/cue-lang/cue/commit/fd05908d444bd4132b2137cd3aa84918c4366227) - internal/core/adt: don't add errors to "void" arcs by [@mpvl](https://github.com/mpvl) in [`0b41dbb`](https://github.com/cue-lang/cue/commit/0b41dbb875537a04fce46a4a56f7b625fa2cc6f1) - cue/testdata/benchmarks: add benchmark for let key by [@mpvl](https://github.com/mpvl) in [`a8d7c59`](https://github.com/cue-lang/cue/commit/a8d7c59f176a28936cc6d8231050630ec5498f19) - internal/core/adt: evaluate expressions directly by [@mpvl](https://github.com/mpvl) in [`8fb13d4`](https://github.com/cue-lang/cue/commit/8fb13d4c31d145b54c203ebbd1a69e84db2db35a) - internal/core/eval: node should not finalize itself mid flight by [@mpvl](https://github.com/mpvl) in [`9d27e0d`](https://github.com/cue-lang/cue/commit/9d27e0d992ae50da72244c2210252cb4248a8048) - cmd/cue: don't panic in vet if a schema has incomplete errors by [@mvdan](https://github.com/mvdan) in [`f6841d1`](https://github.com/cue-lang/cue/commit/f6841d1f026cefd964c1f5b2e0e331ff8e8ce9db) - internal/ci: deploy [tip.cuelang.org](http://tip.cuelang.org/) via repository_dispatch by [@myitcv](https://github.com/myitcv) in [`632cc62`](https://github.com/cue-lang/cue/commit/632cc622744b2a17db22932c8c7319a3e6b5e4fb) - internal/ci: enable push_to_tip_trybot by [@myitcv](https://github.com/myitcv) in [`fe692c5`](https://github.com/cue-lang/cue/commit/fe692c55eccb1efcd6b5ea181430d38479c4f4e7) - internal/ci: apply various CI-related changes from [cuelang.org](http://cuelang.org/) repo by [@myitcv](https://github.com/myitcv) in [`4eaa946`](https://github.com/cue-lang/cue/commit/4eaa9465d0287a7cf9de0ca73189d6084449ba1e) - internal/ci/goreleaser: actually make builds reproducible by [@myitcv](https://github.com/myitcv) in [`45aa5c0`](https://github.com/cue-lang/cue/commit/45aa5c093e71660b341fa15a8a41d77eb64a0121) - internal/ci/goreleaser: make builds reproducible by [@myitcv](https://github.com/myitcv) in [`16edb00`](https://github.com/cue-lang/cue/commit/16edb00a2504c92b09e43721f96a166109b1c2a4) - cue/export/extract: fix comments with comprehensions by [@mpvl](https://github.com/mpvl) in [`959dc46`](https://github.com/cue-lang/cue/commit/959dc46d5ac976bd2fc9b6f4bf0cd596c00fd0c5) - internal/core/adt: don't evaluate inlined structs prematurely by [@mpvl](https://github.com/mpvl) in [`45ff282`](https://github.com/cue-lang/cue/commit/45ff2823f7d071b803a8b55d96ad4bcf7c1647ef) - internal/core/adt: add tests for issue [#2163](https://github.com/cue-lang/cue/issues/2163) by [@mpvl](https://github.com/mpvl) in [`a9f4fc3`](https://github.com/cue-lang/cue/commit/a9f4fc3ec3b9e7f0f91df16a86b2295a3a66e546) - internal/ci: review follow-up changes to goreleaser_tool.cue by [@mvdan](https://github.com/mvdan) in [`7ea44a3`](https://github.com/cue-lang/cue/commit/7ea44a3f045decf221f86fbd91c9abd566fa6680) - internal/ci: switch to CUE based definition for goreleaser by [@myitcv](https://github.com/myitcv) in [`79a476b`](https://github.com/cue-lang/cue/commit/79a476b8c16c8900ff84811de1f2c8e769e8ebab) - internal/ci: import for current goreleaser configuration by [@myitcv](https://github.com/myitcv) in [`e69c517`](https://github.com/cue-lang/cue/commit/e69c5174ae19e8842bc34af1553189dd7a48e4b2) - internal/ci: upgrade to later GitHub workflow schema by [@myitcv](https://github.com/myitcv) in [`f036b34`](https://github.com/cue-lang/cue/commit/f036b34ca756c2afd061ef9a1a763f670092b048) - internal/ci: upgrade to latest GoReleaser version by [@myitcv](https://github.com/myitcv) in [`248f2b3`](https://github.com/cue-lang/cue/commit/248f2b30c8702c9b5ed012e6ac0961c109d69cb3) - goreleaser: formatting changes in Yaml file by [@myitcv](https://github.com/myitcv) in [`e93b5ed`](https://github.com/cue-lang/cue/commit/e93b5ed61fc6998ad8b9b1bf5f50ab94b57e5e26) - internal/ci: use newer versions of the docker github actions by [@mvdan](https://github.com/mvdan) in [`f56600d`](https://github.com/cue-lang/cue/commit/f56600dcb932fb5bef421a43ac32c8cd260f4fc0) - internal/core/adt: base error mode on requested state by [@mpvl](https://github.com/mpvl) in [`214e112`](https://github.com/cue-lang/cue/commit/214e11278cbe09e8ae1cbeff83bb7e61cfe1894c) - internal/core/adt: only set validation result when safe by [@mpvl](https://github.com/mpvl) in [`88857e0`](https://github.com/cue-lang/cue/commit/88857e0058cf744dcf0506da39d75eb946af1976) - internal/core/adt: pass desired state to more functions by [@mpvl](https://github.com/mpvl) in [`55cdb74`](https://github.com/cue-lang/cue/commit/55cdb7420b791aeb2b63413aeabe1bcd3dae57ba) - internal/core/adt: pass more state around by [@mpvl](https://github.com/mpvl) in [`3dfeb41`](https://github.com/cue-lang/cue/commit/3dfeb4112ffcd9d3267c2dc8e0950e3f095bb210) - internal/core/adt: pass state to validation by [@mpvl](https://github.com/mpvl) in [`0954c6f`](https://github.com/cue-lang/cue/commit/0954c6f8888daf741e7d40860db2f165af05b6d4) - internal/core/adt: pass state to evaluate by [@mpvl](https://github.com/mpvl) in [`7d50228`](https://github.com/cue-lang/cue/commit/7d5022852075821ea04d21854b372ee3bb73a42b) - internal/core/adt: avoid duplicate insertion of conjuncts by [@mpvl](https://github.com/mpvl) in [`d341814`](https://github.com/cue-lang/cue/commit/d341814a6e0fe9eef963c26956527c0b75e85286) - internal/core/adt: tighten uniqueness of conjuncts by [@mpvl](https://github.com/mpvl) in [`a68c6ce`](https://github.com/cue-lang/cue/commit/a68c6ce64f3b69ef09fe91aca7c4c067101bda73) - cue/parser: disallow deprecated language features in API by [@mpvl](https://github.com/mpvl) in [`67ace83`](https://github.com/cue-lang/cue/commit/67ace837da2b061c05be7f1189abb0e96107a2f2) - internal/core/adt: remove nested comprehension special casing by [@mpvl](https://github.com/mpvl) in [`3c0b2ec`](https://github.com/cue-lang/cue/commit/3c0b2ecd089da711f3fb1a9b9f3109a36ccdce1c) - README: fix the stale GitHub Actions badge by [@mvdan](https://github.com/mvdan) in [`4fee020`](https://github.com/cue-lang/cue/commit/4fee020034c66d74c2a0d68d56c72f7728bd8ea3) - internal/core/adt: disambiguate let cache by [@mpvl](https://github.com/mpvl) in [`43fc681`](https://github.com/cue-lang/cue/commit/43fc68115618c5070357dd482530a42ba208e4b1) - internal/core/adt: update stats to fix build breakage by [@mpvl](https://github.com/mpvl) in [`a800e6f`](https://github.com/cue-lang/cue/commit/a800e6fadcfd2a30bda3f1ef330574c11c292499) - internal/core/adt: merge Conjunct and Partial processing by [@mpvl](https://github.com/mpvl) in [`121894c`](https://github.com/cue-lang/cue/commit/121894c5c4616bc972b60e484989cab321b75800) - internal/core/adt: remove assertion by [@mpvl](https://github.com/mpvl) in [`129c343`](https://github.com/cue-lang/cue/commit/129c3439c62fd3ee3165bd2c1e3e64198fe066b1) - internal/core/adt: add test cases for issue 2119 by [@mpvl](https://github.com/mpvl) in [`2499719`](https://github.com/cue-lang/cue/commit/2499719dc992d8182f5669c829735623e3826d8e) - internal/core/adt: add tests related to Issue [#2113](https://github.com/cue-lang/cue/issues/2113) by [@mpvl](https://github.com/mpvl) in [`525648d`](https://github.com/cue-lang/cue/commit/525648d853bb7dbb9187bff2649c03db8d865be8) - internal/core/adt: evaluate let fields earlier in comprehensions by [@mpvl](https://github.com/mpvl) in [`e5fb5af`](https://github.com/cue-lang/cue/commit/e5fb5afcd1a935f8d2ce662a9267d9660f4771cd) - internal/core/adt: detect cycles in patterns by [@mpvl](https://github.com/mpvl) in [`c048135`](https://github.com/cue-lang/cue/commit/c04813590f244fab54ce69a08df1ddf7f95b0993) - cue: update Value.Source doc comment by [@rogpeppe](https://github.com/rogpeppe) in [`45ce7a3`](https://github.com/cue-lang/cue/commit/45ce7a3652a39c81593b069ad56cbe4589f00c01) - tools/flow: add debug support via CUE_DEBUG_TOOLS_FLOW by [@myitcv](https://github.com/myitcv) in [`d85f950`](https://github.com/cue-lang/cue/commit/d85f950102eef401adfad76f56d01d776e3537b9) - internal/core/adt: fix comprehension cycle regression by [@mpvl](https://github.com/mpvl) in [`32bfffd`](https://github.com/cue-lang/cue/commit/32bfffd0aa538d63757efeef393bc37a06c8c9a4) - internal/core/adt: add tests to address regressions by [@mpvl](https://github.com/mpvl) in [`82bf036`](https://github.com/cue-lang/cue/commit/82bf03685cf19981bbd2641fdc2e4c71924359c4) - internal/core/adt: split some tests into files by [@mpvl](https://github.com/mpvl) in [`69ee994`](https://github.com/cue-lang/cue/commit/69ee994fd01d14e97d42f15a1056e0d0aba452ec) - infra: upgrade goreleaser by [@myitcv](https://github.com/myitcv) in [`7bdeb14`](https://github.com/cue-lang/cue/commit/7bdeb14af88c7bb78cae4cb000341b679ac11849) - doc: simple whitespace change to track down GerritHub replication issue by [@myitcv](https://github.com/myitcv) in [`1bb7fed`](https://github.com/cue-lang/cue/commit/1bb7fed608fd273b3d9c581074908e022cf76231) - cmd/cue: fix --ignore errors flag by [@mpvl](https://github.com/mpvl) in [`ab14c86`](https://github.com/cue-lang/cue/commit/ab14c8681d666b9ecc2092546e94946d488e8ad0) - pkg/list: make error of MaxItems consistent with MinItems by [@mpvl](https://github.com/mpvl) in [`c5fbbab`](https://github.com/cue-lang/cue/commit/c5fbbabd6bde15901a845e3d9d69b0d134f0b4d9) - pkg/struct: fix MinFields analogously to MinItems by [@mpvl](https://github.com/mpvl) in [`849371d`](https://github.com/cue-lang/cue/commit/849371d983e827cbe7c58bcf02f83ad65b935542) - all: remove mistakenly added file by [@mpvl](https://github.com/mpvl) in [`68445d8`](https://github.com/cue-lang/cue/commit/68445d839bf0d62aa807388d4ec94007ef7c6820) - internal/core/adt: fix panic using builtin validators by [@mpvl](https://github.com/mpvl) in [`9bbc14b`](https://github.com/cue-lang/cue/commit/9bbc14bc7bce485af1bb3c1b79b87a01c03e3d30) - internal/core/adt: don't bump state by [@mpvl](https://github.com/mpvl) in [`b18d00f`](https://github.com/cue-lang/cue/commit/b18d00f5369c6e42f500ec46218dedf9ef7a2100) - internal/core/adt: prevent early error assignment by [@mpvl](https://github.com/mpvl) in [`27b6e87`](https://github.com/cue-lang/cue/commit/27b6e87efbde0d14b31eeb59943ff79b90fb92ec) - internal/core/adt: relax cycle tracking by [@mpvl](https://github.com/mpvl) in [`9c761dd`](https://github.com/cue-lang/cue/commit/9c761dd5571d3f34bde4a9992e733f1415f0c071) - pkg/internal: allow incomplete list.MinItems by [@mpvl](https://github.com/mpvl) in [`354f4e6`](https://github.com/cue-lang/cue/commit/354f4e6fee32792386d7187079a3c0222248afbc) - internal/core/adt: add tests for [#2052](https://github.com/cue-lang/cue/issues/2052) by [@mpvl](https://github.com/mpvl) in [`6162b95`](https://github.com/cue-lang/cue/commit/6162b95f494dad6eedb336a38e8b96129c6fd903) - internal/core/adt: fix redundant errors in calls by [@mpvl](https://github.com/mpvl) in [`959605e`](https://github.com/cue-lang/cue/commit/959605e053076884efb689583c572ebe4f074728) - drop support for Go 1.17.x ahead of the v0.5 release by [@mvdan](https://github.com/mvdan) in [`0292e7f`](https://github.com/cue-lang/cue/commit/0292e7f4c3eeabd9e9cf4971d96157ac00519c2b) - internal/core/adt: improved reporting disjunction errors by [@mpvl](https://github.com/mpvl) in [`a8d68ad`](https://github.com/cue-lang/cue/commit/a8d68ad05ab615bafacc07d0ccaf12ba0d9f669a) - internal/core/adt: avoid uninformative cyclic error by [@mpvl](https://github.com/mpvl) in [`1d8d8ff`](https://github.com/cue-lang/cue/commit/1d8d8ffea6b95e2b0d555bd6999004268eb14d16) - internal/core/adt: remove over-aggressive deduplication by [@mpvl](https://github.com/mpvl) in [`74b4288`](https://github.com/cue-lang/cue/commit/74b4288a36ae47acbd1b09a24ca86cda7f0f85ef) - internal/core/adt: fix error checking bug by [@mpvl](https://github.com/mpvl) in [`28088ac`](https://github.com/cue-lang/cue/commit/28088ac8e83ee123e329663a533b0b22f47c4c95) - internal/core/adt: add cycle detection for alt evaluation path by [@mpvl](https://github.com/mpvl) in [`4eb2280`](https://github.com/cue-lang/cue/commit/4eb2280f2dca883b2db7a7cde2937fed8cd1caa6) - internal/core/adt: errors in let expressions are okay by [@mpvl](https://github.com/mpvl) in [`30b2007`](https://github.com/cue-lang/cue/commit/30b2007b58507c3e4c3b6f21d88f9e3a2df1d78e) - pkg: improve error messages by [@mpvl](https://github.com/mpvl) in [`fa36be4`](https://github.com/cue-lang/cue/commit/fa36be403849715004c2d143afb3e77a29ac6238) - internal/core/adt: add stats by [@mpvl](https://github.com/mpvl) in [`e2a0ef6`](https://github.com/cue-lang/cue/commit/e2a0ef60402692f9f08690fb55fa24aa53367062) - internal/core/dep: handle recursive lets by [@mpvl](https://github.com/mpvl) in [`1d8663e`](https://github.com/cue-lang/cue/commit/1d8663e67324a7c9623b8c1562936db9a0598172) - internal/core/adt: fix comprehension bug by [@mpvl](https://github.com/mpvl) in [`87347d2`](https://github.com/cue-lang/cue/commit/87347d212f153094980e507fe1c78185d3b8382c) - internal/core/adt: remove redundant state change by [@mpvl](https://github.com/mpvl) in [`24576a0`](https://github.com/cue-lang/cue/commit/24576a0ff2af6929d43394df9deb7e2e9f3dfee2) - cue/ast: fix StructLit.End by [@rogpeppe](https://github.com/rogpeppe) in [`b23ece3`](https://github.com/cue-lang/cue/commit/b23ece37510a9043871c8d5dac035ddd2032a206) - internal/third_party/yaml: fix float parsing by [@rogpeppe](https://github.com/rogpeppe) in [`a4941ed`](https://github.com/cue-lang/cue/commit/a4941ed62de064238bb7dd3cb343ab9e4e87f008) - internal/third_party/yaml: slim down API by [@rogpeppe](https://github.com/rogpeppe) in [`794d078`](https://github.com/cue-lang/cue/commit/794d078602d62d2496c9783554a6bb815ae75ef5) - doc/ref/spec.md: binary literals support `_` separators as well by [@spachava753](https://github.com/spachava753) in [`712d8c6`](https://github.com/cue-lang/cue/commit/712d8c62644dfdab62c01d68314c65eb12300be7) - internal/core/adt: recursively pre-expand comprehensions by [@mpvl](https://github.com/mpvl) in [`102b034`](https://github.com/cue-lang/cue/commit/102b0341dae9420a6cd125678c96b3cd8c32ed2f) - internal/core/adt: represent comprehension clauses as list by [@mpvl](https://github.com/mpvl) in [`b3bcc7a`](https://github.com/cue-lang/cue/commit/b3bcc7aaf3d0e6074a4cad6e725113cf2aa36640) - internal/core/dep: remove useless code by [@mpvl](https://github.com/mpvl) in [`309b965`](https://github.com/cue-lang/cue/commit/309b9655d60fea3cfde50004650d8742c37e696e) - internal/core/adt: fix cycle detection bug for lets by [@mpvl](https://github.com/mpvl) in [`f2b9479`](https://github.com/cue-lang/cue/commit/f2b94794ad54347b92a97a8c69ae3f931efd975e) - internal/core/adt: allow self-referential comprehensions by [@mpvl](https://github.com/mpvl) in [`f1daf4b`](https://github.com/cue-lang/cue/commit/f1daf4b823aa7fedc668add92686dbcbf0141909) - internal/core/adt: update state constants and docs by [@mpvl](https://github.com/mpvl) in [`e4f4900`](https://github.com/cue-lang/cue/commit/e4f4900c5728d22815a71ca1fdcbbe86d8e91d83) - internal/core/adt: add conjuncts to dynamic list as well by [@mpvl](https://github.com/mpvl) in [`637a325`](https://github.com/cue-lang/cue/commit/637a3258c48923c7120cf4ec4d88fb7611879763) - internal/core/adt: report cycle error in comprehension source by [@mpvl](https://github.com/mpvl) in [`6668dc8`](https://github.com/cue-lang/cue/commit/6668dc8e1f94477ec6378f309ba8b8f498f17de5) - internal/core/adt: rename test by [@mpvl](https://github.com/mpvl) in [`f30a8e7`](https://github.com/cue-lang/cue/commit/f30a8e71e6dfc4014ed717edb9b78b0cf73f3cba) - internal/core/adt: add IsDefined to filter out void arcs by [@mpvl](https://github.com/mpvl) in [`2ae37df`](https://github.com/cue-lang/cue/commit/2ae37df09d57c432f865338e1ec4e86de2070ba9) - internal/core/adt: fix closedness regression by [@mpvl](https://github.com/mpvl) in [`ed4f885`](https://github.com/cue-lang/cue/commit/ed4f8850d35a6ca4012c16db0cbf42b6e2d52af0) - internal/core/dep: fix comprehension environment binding by [@mpvl](https://github.com/mpvl) in [`6824f7d`](https://github.com/cue-lang/cue/commit/6824f7d3cb3c4e4fa5e58359c051c207aeada9a2) - deps: bump [golang.org/x/text](http://golang.org/x/text) dependency by [@joaopapereira](https://github.com/joaopapereira) in [`dd1169c`](https://github.com/cue-lang/cue/commit/dd1169c686c9e45358fa87fcdb9530fe3f6a799f) - .gitignore: add .DS_Store by [@mpvl](https://github.com/mpvl) in [`79d80ef`](https://github.com/cue-lang/cue/commit/79d80efc288208410f77d47ae9aedd37e106d84b) - internal/core/adt: fix broken let lookup in embedded scalars by [@mpvl](https://github.com/mpvl) in [`cad3f23`](https://github.com/cue-lang/cue/commit/cad3f2394c591d95747d0d965a7d48638b17bf01) - internal/core/adt: optimize cycle detection for disjunctions by [@mpvl](https://github.com/mpvl) in [`830b138`](https://github.com/cue-lang/cue/commit/830b138ebfb6b81ecc5ec2bbcc14adaf7665d756) - internal/ci: test and release on Go 1.19.x by [@mvdan](https://github.com/mvdan) in [`fe50dff`](https://github.com/cue-lang/cue/commit/fe50dff0dce87c9a8bfa6f15f8df64b9172d2533) - internal/core/adt: remove problematic Ref deletion by [@mpvl](https://github.com/mpvl) in [`7518952`](https://github.com/cue-lang/cue/commit/75189525aabd2bcf2d8738855b187adb4713a393) - cue/testdata/benchmarks: add stats by [@mpvl](https://github.com/mpvl) in [`3bcf4a4`](https://github.com/cue-lang/cue/commit/3bcf4a477733ea2a754837df1b0ba7d1cedce0a2) - encoding/gocode: encode hex consistently like Go 1.19+ by [@mvdan](https://github.com/mvdan) in [`f5c3e4e`](https://github.com/cue-lang/cue/commit/f5c3e4eeb64ad6e4c3a2a33f0152ef00a58773f9) - doc/tutorial/kubernetes: mark both tests as long by [@mvdan](https://github.com/mvdan) in [`06aaef6`](https://github.com/cue-lang/cue/commit/06aaef66df030ff0e63fb633847850008d558fe4) - internal/core/adt: add test for issue 1837 by [@mpvl](https://github.com/mpvl) in [`839e33b`](https://github.com/cue-lang/cue/commit/839e33b3dc64ca2234b54a1fa8451650eb3a18f5) - internal/core/adt: make some errors semi-permanent by [@mpvl](https://github.com/mpvl) in [`4a3a494`](https://github.com/cue-lang/cue/commit/4a3a494e8db538f8689ff9c0d3a882c93cafcc59) - internal/core/adt: reduce size of ErrorCode by [@mpvl](https://github.com/mpvl) in [`53dfffa`](https://github.com/cue-lang/cue/commit/53dfffae81d2e91494e0dbc03a2565debf50a90e) - internal/core/export: fix crash in dynamic fields by [@mpvl](https://github.com/mpvl) in [`ad253ed`](https://github.com/cue-lang/cue/commit/ad253ed099e94ddcffd07e6f73a76735a96cfaf8) - all: apply and follow Go 1.19's gofmt by [@mvdan](https://github.com/mvdan) in [`519d326`](https://github.com/cue-lang/cue/commit/519d326df357904f95bc704d48d594a3f26c2319) - internal/core: implement let as fields by [@mpvl](https://github.com/mpvl) in [`36bd656`](https://github.com/cue-lang/cue/commit/36bd6562f7ba43afbd850abfa565da5576117154) - pkg: reuse pkg/gen to generate package godocs by [@mvdan](https://github.com/mvdan) in [`df148ee`](https://github.com/cue-lang/cue/commit/df148ee6b6133e0466f7964eec027f2e0349cdbe) - internal/core/adt: eliminate disjuncts for incomplete errors by [@mpvl](https://github.com/mpvl) in [`c556a19`](https://github.com/cue-lang/cue/commit/c556a196ad43bcd0ff4fad4f938cabc03ee5e433) - doc/tutorial/kubernetes: only run as a long test by [@mvdan](https://github.com/mvdan) in [`6551ea5`](https://github.com/cue-lang/cue/commit/6551ea5dd7890757afdbf6823443357bc96f4e5f) - internal/core/adt: fix test by [@mpvl](https://github.com/mpvl) in [`d3959eb`](https://github.com/cue-lang/cue/commit/d3959ebce9168f9b922e72e711bac71532e5bd44) - internal/core/adt: add tests for let by [@mpvl](https://github.com/mpvl) in [`7c7056c`](https://github.com/cue-lang/cue/commit/7c7056cd8964d9cb8f4da1c021165630ab091d49) - internal/core/compile: prepare for let change by [@mpvl](https://github.com/mpvl) in [`739713c`](https://github.com/cue-lang/cue/commit/739713c849262af5d5681fbd5dab5aa77787d738) - internal/core/...: fix various attributes printing issues by [@mpvl](https://github.com/mpvl) in [`82933ad`](https://github.com/cue-lang/cue/commit/82933ad1f9ef0dd68aaa8c1a52d8f56a3ad7f4e5) - internal/core/adt: remove StructInfo for unused structs by [@mpvl](https://github.com/mpvl) in [`c89ab8b`](https://github.com/cue-lang/cue/commit/c89ab8b4534144edd9e4313666a7967cb40270d5) - internal/core/compile: add missing import in test by [@mpvl](https://github.com/mpvl) in [`be9cc0d`](https://github.com/cue-lang/cue/commit/be9cc0dfe2efcc9ae76f84f0e21afd83b9bd1349) - internal/cuetxtar: add method for getting a single instance by [@rogpeppe](https://github.com/rogpeppe) in [`e5f21db`](https://github.com/cue-lang/cue/commit/e5f21dbb163c8b864dc1e518dc86e16d8aa0bbf9) - internal/filetypes: not a file extension if the file starts with a dot by [@rogpeppe](https://github.com/rogpeppe) in [`db0897b`](https://github.com/cue-lang/cue/commit/db0897b6b21f16d4dcd3503af51e2f2592b5cc03) - internal/core/adt: defensive use of CloseInfo by [@mpvl](https://github.com/mpvl) in [`9e9786e`](https://github.com/cue-lang/cue/commit/9e9786e93b63af979d9f105a12c8519a6216e56f) - internal/filetypes: fix TestParseFile tests by [@rogpeppe](https://github.com/rogpeppe) in [`3290797`](https://github.com/cue-lang/cue/commit/3290797d2b2b1f41355b6a06d5e9efccf2509a7c) - internal/cuetxtar: improve docs by [@rogpeppe](https://github.com/rogpeppe) in [`d2250b9`](https://github.com/cue-lang/cue/commit/d2250b9bc1870a2488ee3f33b4e8e4fd0561a5f3) - encoding/gocode: be resilient to Go string literal changes by [@rogpeppe](https://github.com/rogpeppe) in [`1cfb57c`](https://github.com/cue-lang/cue/commit/1cfb57cd7485c72d155968cf9a054ac91c6119c7) - doc/tutorial/basics: make test scripts run again by [@mvdan](https://github.com/mvdan) in [`6cb877e`](https://github.com/cue-lang/cue/commit/6cb877ecdd50ec5a4141b4b5a4e0a50b5ac06c60) - encoding/openapi: update API by [@rogpeppe](https://github.com/rogpeppe) in [`74566cf`](https://github.com/cue-lang/cue/commit/74566cff8b973ffa3833ec2f217833f182571c13) - cue/stats: new package for getting operation statistics by [@mpvl](https://github.com/mpvl) in [`535d188`](https://github.com/cue-lang/cue/commit/535d188e024a150de6093a18bee639915e612394) - errors: make Errors and Print respect wrapped errors by [@rogpeppe](https://github.com/rogpeppe) in [`4007775`](https://github.com/cue-lang/cue/commit/4007775eb33da64db9dd38f43da31b39d1bbfc58) - internal/core/path: package for Selector to Feature conversion by [@mpvl](https://github.com/mpvl) in [`4c9d0ac`](https://github.com/cue-lang/cue/commit/4c9d0ac139d02d5ac3208d3268af4ee92916d70f) - cue: tweaks to selector API by [@mpvl](https://github.com/mpvl) in [`cd27b12`](https://github.com/cue-lang/cue/commit/cd27b125bb2e70bc8075d083aebde0a9f8efe940) - cue: add Value.BuildInstance method by [@rogpeppe](https://github.com/rogpeppe) in [`a552c1f`](https://github.com/cue-lang/cue/commit/a552c1fce216865669537591e182add604677252) - encoding/yaml: be clearer about the role of the src argument by [@rogpeppe](https://github.com/rogpeppe) in [`351a9fb`](https://github.com/cue-lang/cue/commit/351a9fbaa8aa7f0482e162f20c4d5a49165b15f9) - internal/core/adt: fix cycles in evaluation by [@mpvl](https://github.com/mpvl) in [`ac11215`](https://github.com/cue-lang/cue/commit/ac1121593d7ab5b3beff5b36f7e77e1cb3fab0c1) - internal/core/adt: tighten structural cycle detection by [@mpvl](https://github.com/mpvl) in [`f8e363e`](https://github.com/cue-lang/cue/commit/f8e363e55bbd91a3ca56b3620edfa41854bc5269) - internal/core/adt: tighten structural cycle detection by [@mpvl](https://github.com/mpvl) in [`68152ec`](https://github.com/cue-lang/cue/commit/68152ec4619731d1d718757571d238eaf94516f8) - internal/core/adt: fix spurious cycle for inline recursion by [@mpvl](https://github.com/mpvl) in [`c997044`](https://github.com/cue-lang/cue/commit/c99704419ffce8b90f9c60c0148152e04d044ec6) - internal/core/adt: fix issue with references cycles by [@mpvl](https://github.com/mpvl) in [`cd4bf2b`](https://github.com/cue-lang/cue/commit/cd4bf2b46c3234ba2e6ba649df8633efd0483eb7) - internal/core/adt: some fixes to structural cycle detection by [@mpvl](https://github.com/mpvl) in [`8133f55`](https://github.com/cue-lang/cue/commit/8133f552636371d32edf9c972e135bc274184c66) - internal/core/compile: fix aliases to dynamic fields by [@mpvl](https://github.com/mpvl) in [`353833c`](https://github.com/cue-lang/cue/commit/353833c0a26a411febdacf8096e378ecbd214e5e) - cue: add Selector.Type API by [@rogpeppe](https://github.com/rogpeppe) in [`8e8f1cf`](https://github.com/cue-lang/cue/commit/8e8f1cfff0aeed7575cd362336da134e2890a311) - cue/load: deterministically sort CUE files when loading by [@mvdan](https://github.com/mvdan) in [`295786e`](https://github.com/cue-lang/cue/commit/295786ef80b0dfd14eacc66f4c0babbbfc832f99) - internal/core/adt: count conjuncts by [@mpvl](https://github.com/mpvl) in [`1a12916`](https://github.com/cue-lang/cue/commit/1a129169283720446cc3cb279f7e8b7adf282bca) - internal/core/adt: finalize arcs that are almost done by [@mpvl](https://github.com/mpvl) in [`8ee1127`](https://github.com/cue-lang/cue/commit/8ee11275c50edf03df202f86cf7b0d0087da0de4) - internal/core/adt: remove redundant line by [@mpvl](https://github.com/mpvl) in [`37ee967`](https://github.com/cue-lang/cue/commit/37ee967c3abff6f18e0a7de3e1558e4af40957f4) - internal/core/adt: clean up some span logic and add a comment by [@mpvl](https://github.com/mpvl) in [`ce30e67`](https://github.com/cue-lang/cue/commit/ce30e6728aa80c9e21e04863107b4cc19263672e) - internal/core/adt: move Label for better bin packing by [@mpvl](https://github.com/mpvl) in [`e398e10`](https://github.com/cue-lang/cue/commit/e398e10f2359b35b88f532113468578fe21035ab) - internal/core/adt: clean up some closedness code by [@mpvl](https://github.com/mpvl) in [`9e15ca1`](https://github.com/cue-lang/cue/commit/9e15ca15750c6efe53c36c6b64684cafcea1e220) - internal/core/adt: fix spurious child error by [@mpvl](https://github.com/mpvl) in [`830847b`](https://github.com/cue-lang/cue/commit/830847bf692effdc626929a7d59913ae9e90aaf9) - all: start using testscript.Params.RequireExplicitExec by [@mvdan](https://github.com/mvdan) in [`37a2a07`](https://github.com/cue-lang/cue/commit/37a2a07006fd18e751be160c2065facb9f286b54) - internal/core/adt: pick defaults for label evaluation by [@mpvl](https://github.com/mpvl) in [`83d37e7`](https://github.com/cue-lang/cue/commit/83d37e79367ee589d797787b7328ab17a14d39e6) - cmd/cue/cmd: testscript moved its gopath location by [@mvdan](https://github.com/mvdan) in [`4a73630`](https://github.com/cue-lang/cue/commit/4a73630583dbb4c4708502de9d275b59fae13d20) - internal/core/adt: SpawnRef loop optimization by [@rogpeppe](https://github.com/rogpeppe) in [`7292034`](https://github.com/cue-lang/cue/commit/7292034f3ba2c7ea0fb3df4d2c40b5c643c46ac4) - all: use txtar filename extensions consistently by [@mvdan](https://github.com/mvdan) in [`c1689bb`](https://github.com/cue-lang/cue/commit/c1689bb0513916bb39709ba7eac6c889949c07a9) - mod: drop x/xerrors from the module graph by [@mvdan](https://github.com/mvdan) in [`0460b47`](https://github.com/cue-lang/cue/commit/0460b47b66065f415a76c96672c55b4d32ae1f49) - mod: drop apd v1 from the module graph by [@mvdan](https://github.com/mvdan) in [`d663a8c`](https://github.com/cue-lang/cue/commit/d663a8c62f8540abd656f32745a3875f499f565d) - all: apply Go 1.19's gofmt by [@mvdan](https://github.com/mvdan) in [`3f3f181`](https://github.com/cue-lang/cue/commit/3f3f18168373298c1580006de52303e06135fcc8) - internal/core/adt: fix spurious cycle by [@mpvl](https://github.com/mpvl) in [`e187f9f`](https://github.com/cue-lang/cue/commit/e187f9fe5d456f14073645670a98803d3048849e) - internal/core/adt: reimplementation of cycle algorithm by [@mpvl](https://github.com/mpvl) in [`6b3fd65`](https://github.com/cue-lang/cue/commit/6b3fd657900412db28bc4270aa0bd31d12fa3c48) - internal/core/adt: hoist cycle logic by [@mpvl](https://github.com/mpvl) in [`eab8c8e`](https://github.com/cue-lang/cue/commit/eab8c8ea5c60ce284b4297ca707fa91cbce11b59) - internal/core/adt: pass Conjunct instead of Environment to Resolve by [@mpvl](https://github.com/mpvl) in [`428d395`](https://github.com/cue-lang/cue/commit/428d3955064ca586fd855d4505ab4fe2cf7163f7) - internal/core/adt: don't spawn duplicate locations by [@mpvl](https://github.com/mpvl) in [`3bedf8e`](https://github.com/cue-lang/cue/commit/3bedf8ea89bed806257bb62f56cced9dbb993c30) - internal/core/adt: fix env linking for comprehensions by [@mpvl](https://github.com/mpvl) in [`b00f5d6`](https://github.com/cue-lang/cue/commit/b00f5d6beac35769cc101e3e4e60894c88a0e2f1) - cmd/cue: remove all stdin buffering by [@mvdan](https://github.com/mvdan) in [`b4d1b16`](https://github.com/cue-lang/cue/commit/b4d1b16ccf8944599eec6870da400d2b56da979b) - all: use the .test TLD for module paths in tests by [@mvdan](https://github.com/mvdan) in [`5a08d2f`](https://github.com/cue-lang/cue/commit/5a08d2f7a9a7595def05c5486cbb5276e66391cb) - CI: only pull master commits through a proxy on Linux by [@mvdan](https://github.com/mvdan) in [`395df20`](https://github.com/cue-lang/cue/commit/395df20f0fe6983b18ca30f03f1c5caa6d144ca3) - CI: try "pull through proxy" go get up to five times by [@mvdan](https://github.com/mvdan) in [`4f15036`](https://github.com/cue-lang/cue/commit/4f150368159fdb18df5d5fc3306b6598b8ca9ac9) - all: fix migration to x/tools/txtar by [@myitcv](https://github.com/myitcv) in [`0a46a16`](https://github.com/cue-lang/cue/commit/0a46a1624353da7327d356040a5612251e01659f) - cmd/cue/cmd: add --inline-imports flag by [@mpvl](https://github.com/mpvl) in [`974a09b`](https://github.com/cue-lang/cue/commit/974a09bb69aaf6b4d22f3a6e6a6929d7e306c605) - cue: support InlineImports for Syntax by [@mpvl](https://github.com/mpvl) in [`ae56267`](https://github.com/cue-lang/cue/commit/ae56267956abf38f79b66fc9809d61abab0a50d1) - internal/core/export: don't inline for errors by [@mpvl](https://github.com/mpvl) in [`e87bc25`](https://github.com/cue-lang/cue/commit/e87bc251364ca2ac93055befed518207771bc660) - internal/core/export: enhancements for import inlining by [@mpvl](https://github.com/mpvl) in [`62fedc3`](https://github.com/cue-lang/cue/commit/62fedc345677e3205bbbe23e8f2a99223ab5fa21) - internal/core/export: implement self-contained algo for export by [@mpvl](https://github.com/mpvl) in [`c71f674`](https://github.com/cue-lang/cue/commit/c71f6745235d5d2dc48ad044d93efc50485fdd7a) - all: fix common pattern of calling cuextxtar.Load by [@myitcv](https://github.com/myitcv) in [`bdaadc9`](https://github.com/cue-lang/cue/commit/bdaadc9c872bd204940e41e15ec1dc5fb2378f13) - pkg/tool/cli: rework Stdin and make Ask read an entire line by [@mvdan](https://github.com/mvdan) in [`4432aa6`](https://github.com/cue-lang/cue/commit/4432aa66244b1c704143327709741edfc803cc82) - all: swap rogpeppe/go-internal/txtar for x/tools/txtar by [@mvdan](https://github.com/mvdan) in [`9f3d9d2`](https://github.com/cue-lang/cue/commit/9f3d9d204ffe2e26ff4a104406b585df0d42023c) - internal/ci: use consistent name for CUELANGORGTIPREBUILDHOOK by [@myitcv](https://github.com/myitcv) in [`a9f8bd2`](https://github.com/cue-lang/cue/commit/a9f8bd2e84e4b76f8bff33d05856c19269f2d314) - cmd/cue/cmd: remove bits of unused code by [@mvdan](https://github.com/mvdan) in [`4d7edeb`](https://github.com/cue-lang/cue/commit/4d7edeb14282847c88d36ce02e1a2852279352c2) - internal/diff: two different errors are equal by [@mpvl](https://github.com/mpvl) in [`6e95220`](https://github.com/cue-lang/cue/commit/6e95220b64bffd37f1a4aee40054aa0d010fa2c1) - interal/diff: skip hidden fields by default by [@mpvl](https://github.com/mpvl) in [`5151417`](https://github.com/cue-lang/cue/commit/5151417cdd411a470585149041d6bcb72793b841) - .gitignore: ignore some binaries by [@mpvl](https://github.com/mpvl) in [`2d10d0f`](https://github.com/cue-lang/cue/commit/2d10d0f19cff3eff21f5bc20d9203610ff775b5d) - internal/core/export: cleanup of initialization and finalize by [@mpvl](https://github.com/mpvl) in [`8a7ebf9`](https://github.com/cue-lang/cue/commit/8a7ebf930b080ab9d14d8d23755d2ec39d1194b1) - internal/core/export: simplify dynamic labels by [@mpvl](https://github.com/mpvl) in [`8edd739`](https://github.com/cue-lang/cue/commit/8edd739a9501e2198e5b171158786ebb34ed6477) - internal/core/export: refactor uniqueFeature by [@mpvl](https://github.com/mpvl) in [`9777511`](https://github.com/cue-lang/cue/commit/9777511749aef21ffdc2addf79ad9f7738b0baab) - internal/core/export: fix bug exporting dynamic references by [@mpvl](https://github.com/mpvl) in [`360ef5f`](https://github.com/cue-lang/cue/commit/360ef5f88bfd0caa06b4db3d4e21e88b9d264032) - internal/core/adt: clarify examples for references by [@mpvl](https://github.com/mpvl) in [`5cb52c8`](https://github.com/cue-lang/cue/commit/5cb52c862ffacc20e4d56c2d14dfa4e112be204c) - internal/core/export: hoist FieldReference logic by [@mpvl](https://github.com/mpvl) in [`82a2513`](https://github.com/cue-lang/cue/commit/82a25134453d2ae49dde27edb49ebe37b50491d6) - internal/core/export: pass Environment by [@mpvl](https://github.com/mpvl) in [`254d0de`](https://github.com/cue-lang/cue/commit/254d0ded1cdcd614304a53082bc5296fe1ac1daa) - internal/core/export: move tests to subdir by [@mpvl](https://github.com/mpvl) in [`08c0689`](https://github.com/cue-lang/cue/commit/08c06896d5d3c5f4378f5ab5c357b03d041a1d3b) - tools/fix: remove rewriting support for old-style let by [@mpvl](https://github.com/mpvl) in [`9a66c51`](https://github.com/cue-lang/cue/commit/9a66c51a1bd05277605e15690881f08793d50212) - internal/core/export: hoist reference logic by [@mpvl](https://github.com/mpvl) in [`580edf4`](https://github.com/cue-lang/cue/commit/580edf46b0f30089e8b4f4594a49a16354237d89) - cue/format: fix `StructLit` trailing comma bug by [@satotake](https://github.com/satotake) in [`d16c799`](https://github.com/cue-lang/cue/commit/d16c7998541098bb304910add474bfb76308db96) - internal/ci/github: skip non-race tests when running race tests by [@myitcv](https://github.com/myitcv) in [`4113ec3`](https://github.com/cue-lang/cue/commit/4113ec34607a913703694b8a4c4996ffb4552d92) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`236a565`](https://github.com/cue-lang/cue/commit/236a565379907bc92997645e4113ca1ed6c499b6) - internal/ci: split github workflows into separate files by [@myitcv](https://github.com/myitcv) in [`9d366cd`](https://github.com/cue-lang/cue/commit/9d366cd68db61d461d752db8d649734ba08bd7fa) - internal/ci: write netrc file for triggering trybots by [@myitcv](https://github.com/myitcv) in [`62ccbc0`](https://github.com/cue-lang/cue/commit/62ccbc0f983c3e6abdd786a6f2342b4f7b46d6c4) - internal/ci: move to using gerritstatusupdater by [@myitcv](https://github.com/myitcv) in [`f28ad41`](https://github.com/cue-lang/cue/commit/f28ad41e9ed5918933123c17bab0dd62614c7399) - internal/ci: rename test and repository_dispatch workflows by [@myitcv](https://github.com/myitcv) in [`d4526fe`](https://github.com/cue-lang/cue/commit/d4526fe916326dc69e216864d936e26ce7aef2bb) - cuego: fix example in docs by [@rogpeppe](https://github.com/rogpeppe) in [`2fea90a`](https://github.com/cue-lang/cue/commit/2fea90a631b14946ca0ffac025e64da2d09d3e27) - internal/ci: move workflow declarations to their own package by [@myitcv](https://github.com/myitcv) in [`2795dcc`](https://github.com/cue-lang/cue/commit/2795dcc4db87bb3355de0a49d6596c87f9c2e3d4) - cue/load: actually apply the latest doc wording per the reviews by [@mvdan](https://github.com/mvdan) in [`f32ea8e`](https://github.com/cue-lang/cue/commit/f32ea8e85e21e7472b0ca6ca1f6aa526a3650d65) - cue/load: remove old reference to a "query tool" by [@mvdan](https://github.com/mvdan) in [`03ed417`](https://github.com/cue-lang/cue/commit/03ed417512087bc72e9af50ab14a1a5e336a91b9) - internal/ci: stop using txtar tests for GitHub actions workflows by [@myitcv](https://github.com/myitcv) in [`1876276`](https://github.com/cue-lang/cue/commit/18762768e25c6b8ad1da50af250cebe640e82c92) - cmd/cue: support buildinfo in version sub-command by [@djosephsen](https://github.com/djosephsen) in [`b8703c8`](https://github.com/cue-lang/cue/commit/b8703c81a42138361e24e76ea989e7c8b7c03d18) - doc/spec: minor adjustments after a careful read by [@mvdan](https://github.com/mvdan) in [`cf3ba23`](https://github.com/cue-lang/cue/commit/cf3ba23211d397d7232e531090d7074146d4bbbd) - pkg/gen: remove unreachable code by [@rogpeppe](https://github.com/rogpeppe) in [`2f05fc9`](https://github.com/cue-lang/cue/commit/2f05fc92404e0c47dd62c8f769c8881f87ae9bec) - pkg/gen: generate (almost) all pkg.go files in one call by [@rogpeppe](https://github.com/rogpeppe) in [`23dc354`](https://github.com/cue-lang/cue/commit/23dc354ff7ad0ed477a733f6d04866d12f5f9330) - all: use go-cmp.Diff more consistently by [@mvdan](https://github.com/mvdan) in [`b30eb99`](https://github.com/cue-lang/cue/commit/b30eb998836590adaa22abdd5f628aaddb0fb0cb) - cmd/cue: use `cue` in test scripts rather than `exec cue` by [@mvdan](https://github.com/mvdan) in [`621f437`](https://github.com/cue-lang/cue/commit/621f437aef4f344582476f4b6731c906d6160de5) - internal/core/adt: remove stutter in error by [@mpvl](https://github.com/mpvl) in [`41ceff3`](https://github.com/cue-lang/cue/commit/41ceff3c78eb0ed13e60c673a6a4b002366d473d) - internal/core/adt: keep arc on comprehension error by [@mpvl](https://github.com/mpvl) in [`309f8e7`](https://github.com/cue-lang/cue/commit/309f8e7b1ac5bed017b6b4b8f6dc8e1e512b8614) - internal/core/adt: use per-field comprehensions by [@mpvl](https://github.com/mpvl) in [`748a685`](https://github.com/cue-lang/cue/commit/748a68589747fed6273d6338eb7e275a4fb116c6) - cmd/cue/cmd: remove usage of cue.Runtime by [@mpvl](https://github.com/mpvl) in [`0b0f1d3`](https://github.com/cue-lang/cue/commit/0b0f1d30c967172b69df59f869156f3d154d9cc3) - tools/flow: get rid of deprecated cue.Runtime by [@mpvl](https://github.com/mpvl) in [`3ac85dc`](https://github.com/cue-lang/cue/commit/3ac85dc3ca89ff621150aad1b50fb736ea0b5f9f) - internal/core/adt: move closedness check by [@mpvl](https://github.com/mpvl) in [`abd2ba3`](https://github.com/cue-lang/cue/commit/abd2ba347d8d706c7ae371c7d0c19ba7f102ff33) - internal/core/adt: prepare for comprehension change by [@mpvl](https://github.com/mpvl) in [`38b5fe2`](https://github.com/cue-lang/cue/commit/38b5fe26c487becef1e2cab6267e4f05b85175ec) - internal/core/adt: remove redundant indirection by [@mpvl](https://github.com/mpvl) in [`5201fde`](https://github.com/cue-lang/cue/commit/5201fde5ac039dd9c87290cd8382796d5aa3189e) - internal/core/adt: add convenience logging method by [@mpvl](https://github.com/mpvl) in [`ee36170`](https://github.com/cue-lang/cue/commit/ee36170a79613b52933fe8122e6531918950aba5) - internal/encoding: always validate when exporting by [@qequ](https://github.com/qequ) in [`5b8860a`](https://github.com/cue-lang/cue/commit/5b8860ae5306b51bf38e7ea4b6e536a7477cff29) - cue/pkg/strconv: support arbitary-precision format by [@satotake](https://github.com/satotake) in [`9bda220`](https://github.com/cue-lang/cue/commit/9bda22051dd8d9dbe1539e6b2f7205512e64f303) - pkg/internal: make it clearer that const is exclusive to func by [@rogpeppe](https://github.com/rogpeppe) in [`e77a879`](https://github.com/cue-lang/cue/commit/e77a8790de2b2e7e9bed632594de0e0cf14521fa) - cue/format: escape tabs when printing comments, literals, and attributes by [@mvdan](https://github.com/mvdan) in [`dac4917`](https://github.com/cue-lang/cue/commit/dac491717c1e21e40b0fbd5030ac2435507353d7) - all: replace filepath.Walk with WalkDir by [@mvdan](https://github.com/mvdan) in [`79b324d`](https://github.com/cue-lang/cue/commit/79b324d14be06b57bcd0a4644fb28155bd8267c7) - cmd/cue: initialize toTop and toString without go/packages by [@mvdan](https://github.com/mvdan) in [`0f66c58`](https://github.com/cue-lang/cue/commit/0f66c58a0ae826040fa35461ae8567aba6f5c327) - doc/contribute.md: simplify code backticks by [@rytswd](https://github.com/rytswd) in [`193e320`](https://github.com/cue-lang/cue/commit/193e320762afa09334d4514883f3a95a15ced2fa) - internal/ci: avoid merge commits when testing GitHub PRs by [@mvdan](https://github.com/mvdan) in [`6de1c17`](https://github.com/cue-lang/cue/commit/6de1c17620c78a19bf78d64498bc248b79ce82cc) - internal/encoding/yaml: update dependencies by [@myitcv](https://github.com/myitcv) in [`ef1b8aa`](https://github.com/cue-lang/cue/commit/ef1b8aaa282a263b8634d7333bdb01868ff4e7f0) - encoding/protobuf: update dependencies by [@mvdan](https://github.com/mvdan) in [`31be9e3`](https://github.com/cue-lang/cue/commit/31be9e32f88c1442cfe0e5f2cdb546ad89ee2415) - Revert "all: avoid using too many packages.Need bits" by [@mvdan](https://github.com/mvdan) in [`87408d7`](https://github.com/cue-lang/cue/commit/87408d7d0c61bf6ff2711fd202727639aac97290) - all: avoid using too many packages.Need bits by [@mvdan](https://github.com/mvdan) in [`aa9b1bd`](https://github.com/cue-lang/cue/commit/aa9b1bd076a6b54fcdcef92838f73c982a356d67) - all: fix a few more staticcheck nits by [@mvdan](https://github.com/mvdan) in [`92b9a06`](https://github.com/cue-lang/cue/commit/92b9a06a99a7e27eaf91345545c75054c6279342) - cmd/cue: remove the need for embedpkg by [@mvdan](https://github.com/mvdan) in [`89c6cdc`](https://github.com/cue-lang/cue/commit/89c6cdc1973da4edd97918bca19d959970f616a8) - all: make use of t.TempDir and t.Setenv by [@mvdan](https://github.com/mvdan) in [`6634a00`](https://github.com/cue-lang/cue/commit/6634a00a80472ff0204427592b5d24f94fd55fc9) - pkg/strconv: Revert "pkg/strconv: allow string argument for format" by [@rogpeppe](https://github.com/rogpeppe) in [`1ed6195`](https://github.com/cue-lang/cue/commit/1ed6195cd8d0051bb2a59c68be8d6a9234ea7138) - pkg/strconv: allow string argument for format by [@rogpeppe](https://github.com/rogpeppe) in [`053c4ac`](https://github.com/cue-lang/cue/commit/053c4acc845c1726aca9e7974112d9bf296892c7) - internal/core: comment improvements by [@rogpeppe](https://github.com/rogpeppe) in [`34782fe`](https://github.com/cue-lang/cue/commit/34782fe0bb8cb65b5dda49c377d24089cb131987) - cue/literal: allow escaped newlines in multiline strings by [@rogpeppe](https://github.com/rogpeppe) in [`618e530`](https://github.com/cue-lang/cue/commit/618e5301ec0a5875d1b95d06800a4962c150d857) - all: drop support for Go 1.16.x by [@mvdan](https://github.com/mvdan) in [`bd9ae53`](https://github.com/cue-lang/cue/commit/bd9ae5371cc23c54cb3cb90c0bd5a1fa4d82bc92) - all: make vet happy by [@mvdan](https://github.com/mvdan) in [`a58ac53`](https://github.com/cue-lang/cue/commit/a58ac536005e7347332a26c911d2c3fa43453fc9) - doc/ref: mention that newlines can be escaped in multiline strings by [@rogpeppe](https://github.com/rogpeppe) in [`13918dd`](https://github.com/cue-lang/cue/commit/13918ddeb0b0bb58ebbe92f91fd87e5d364a5844) - all: check the filepath.Walk error parameter by [@mvdan](https://github.com/mvdan) in [`2caf6e0`](https://github.com/cue-lang/cue/commit/2caf6e0f648d40b9072beb875b4ac74017ce415f) - bump x/tools and x/net dependencies by [@mvdan](https://github.com/mvdan) in [`79a3fa7`](https://github.com/cue-lang/cue/commit/79a3fa7e3eab9c18cab54f376cfa24600489e319) - all: fix a few minor typos spotted by gospel by [@mvdan](https://github.com/mvdan) in [`7881588`](https://github.com/cue-lang/cue/commit/78815882e5f3234873f4ca4774e2919f27b594c0) - cue/scanner: allow leading double-quote in #-quoted string by [@rogpeppe](https://github.com/rogpeppe) in [`db398ad`](https://github.com/cue-lang/cue/commit/db398ad39a34334a3431c66d504a0f9929faf55a) - internal/ci: remove gorelease check step by [@mvdan](https://github.com/mvdan) in [`c942d0a`](https://github.com/cue-lang/cue/commit/c942d0afb0e7d38468328fad387a524403cd9799) - internal/ci: enforce Signed-off-by temporarily by [@mvdan](https://github.com/mvdan) in [`7dd325d`](https://github.com/cue-lang/cue/commit/7dd325d2690f84331c5ff8d5636f1bf4d520236e) - all: remove redundant interface type assertions by [@mvdan](https://github.com/mvdan) in [`74d55b7`](https://github.com/cue-lang/cue/commit/74d55b75af75f803103e9e24408f2521b936b41d) - pkg/list/sort: fix syntax in docs by [@tmm1](https://github.com/tmm1) in [`00c5ddf`](https://github.com/cue-lang/cue/commit/00c5ddf5e4ed1781cbf07b9b941a1c7c36a62d87) - internal/ci: bump GitHub Actions OS versions by [@mvdan](https://github.com/mvdan) in [`db3e6ac`](https://github.com/cue-lang/cue/commit/db3e6ace8c735f5bb05b1e13a7acfd7d8b72726b) - cmd/cue: remove duplicate files from get_go_types.txt by [@mvdan](https://github.com/mvdan) in [`eb0a4ff`](https://github.com/cue-lang/cue/commit/eb0a4ff1aee987da38e528240533ba89af738c8a) - internal/cuetest: drive long tests via an env var by [@mvdan](https://github.com/mvdan) in [`33b18be`](https://github.com/cue-lang/cue/commit/33b18be9eddd72ea356a913117bb1327a04242fd) - cmd/cue: import -R: don't treat text with no newlines as YAML by [@rogpeppe](https://github.com/rogpeppe) in [`f207b0b`](https://github.com/cue-lang/cue/commit/f207b0b9285ad043221ff9f3c2207d04e8c32cc0) - cmd/cue: better test for import --recursive by [@rogpeppe](https://github.com/rogpeppe) in [`7f3c0a2`](https://github.com/cue-lang/cue/commit/7f3c0a2b435d8597a4378fb56a07e5afe2847b35) </details> <details> <summary>cypress-io/cypress</summary> ### [`v13.7.2`](https://github.com/cypress-io/cypress/releases/tag/v13.7.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.1...v13.7.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2 ### [`v13.7.1`](https://github.com/cypress-io/cypress/releases/tag/v13.7.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.0...v13.7.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1 ### [`v13.7.0`](https://github.com/cypress-io/cypress/releases/tag/v13.7.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.6...v13.7.0) Changelog: <https://docs.cypress.io/guides/references/changelog#13-7-0> ### [`v13.6.6`](https://github.com/cypress-io/cypress/releases/tag/v13.6.6) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.5...v13.6.6) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-6 ### [`v13.6.5`](https://github.com/cypress-io/cypress/releases/tag/v13.6.5) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.4...v13.6.5) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-5 ### [`v13.6.4`](https://github.com/cypress-io/cypress/releases/tag/v13.6.4) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.3...v13.6.4) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-4 ### [`v13.6.3`](https://github.com/cypress-io/cypress/releases/tag/v13.6.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.2...v13.6.3) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-3 ### [`v13.6.2`](https://github.com/cypress-io/cypress/releases/tag/v13.6.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.1...v13.6.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-2 ### [`v13.6.1`](https://github.com/cypress-io/cypress/releases/tag/v13.6.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.0...v13.6.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-1 ### [`v13.6.0`](https://github.com/cypress-io/cypress/releases/tag/v13.6.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.1...v13.6.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-0 ### [`v13.5.1`](https://github.com/cypress-io/cypress/releases/tag/v13.5.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.0...v13.5.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-5-1 ### [`v13.5.0`](https://github.com/cypress-io/cypress/releases/tag/v13.5.0): v.13.5.0 [Compare Source](https://github.com/cypress-io/cypress/compare/v13.4.0...v13.5.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-5-0 ### [`v13.4.0`](https://github.com/cypress-io/cypress/releases/tag/v13.4.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.3...v13.4.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-4-0 ### [`v13.3.3`](https://github.com/cypress-io/cypress/releases/tag/v13.3.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.2...v13.3.3) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-3 ### [`v13.3.2`](https://github.com/cypress-io/cypress/releases/tag/v13.3.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.1...v13.3.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-2 ### [`v13.3.1`](https://github.com/cypress-io/cypress/releases/tag/v13.3.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.0...v13.3.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-1 ### [`v13.3.0`](https://github.com/cypress-io/cypress/releases/tag/v13.3.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.2.0...v13.3.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-0 ### [`v13.2.0`](https://github.com/cypress-io/cypress/releases/tag/v13.2.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.1.0...v13.2.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-2-0 ### [`v13.1.0`](https://github.com/cypress-io/cypress/releases/tag/v13.1.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.0.0...v13.1.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-1-0 ### [`v13.0.0`](https://github.com/cypress-io/cypress/releases/tag/v13.0.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.4...v13.0.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-0-0 ### [`v12.17.4`](https://github.com/cypress-io/cypress/releases/tag/v12.17.4) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.3...v12.17.4) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-4 ### [`v12.17.3`](https://github.com/cypress-io/cypress/releases/tag/v12.17.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.2...v12.17.3) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-3 ### [`v12.17.2`](https://github.com/cypress-io/cypress/releases/tag/v12.17.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.1...v12.17.2) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-2 ### [`v12.17.1`](https://github.com/cypress-io/cypress/releases/tag/v12.17.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.0...v12.17.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-1 ### [`v12.17.0`](https://github.com/cypress-io/cypress/releases/tag/v12.17.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.16.0...v12.17.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-0 ### [`v12.16.0`](https://github.com/cypress-io/cypress/releases/tag/v12.16.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.15.0...v12.16.0) Changelog: <https://docs.cypress.io/guides/references/changelog#12-16-0> ### [`v12.15.0`](https://github.com/cypress-io/cypress/releases/tag/v12.15.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.14.0...v12.15.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-15-0 ### [`v12.14.0`](https://github.com/cypress-io/cypress/releases/tag/v12.14.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.13.0...v12.14.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-14-0 ### [`v12.13.0`](https://github.com/cypress-io/cypress/releases/tag/v12.13.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.12.0...v12.13.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-13-0 ### [`v12.12.0`](https://github.com/cypress-io/cypress/releases/tag/v12.12.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.11.0...v12.12.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-12-0 ### [`v12.11.0`](https://github.com/cypress-io/cypress/releases/tag/v12.11.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.10.0...v12.11.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-11-0 ### [`v12.10.0`](https://github.com/cypress-io/cypress/releases/tag/v12.10.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.9.0...v12.10.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-10-0 ### [`v12.9.0`](https://github.com/cypress-io/cypress/releases/tag/v12.9.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.1...v12.9.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-9-0 ### [`v12.8.1`](https://github.com/cypress-io/cypress/releases/tag/v12.8.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.0...v12.8.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-8-1 ### [`v12.8.0`](https://github.com/cypress-io/cypress/releases/tag/v12.8.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.7.0...v12.8.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.8.0 ### [`v12.7.0`](https://github.com/cypress-io/cypress/releases/tag/v12.7.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.6.0...v12.7.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.7.0 ### [`v12.6.0`](https://github.com/cypress-io/cypress/releases/tag/v12.6.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.1...v12.6.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.6.0 ### [`v12.5.1`](https://github.com/cypress-io/cypress/releases/tag/v12.5.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.0...v12.5.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-5-1 ### [`v12.5.0`](https://github.com/cypress-io/cypress/releases/tag/v12.5.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.1...v12.5.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-5-0 ### [`v12.4.1`](https://github.com/cypress-io/cypress/releases/tag/v12.4.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.0...v12.4.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-4-1 ### [`v12.4.0`](https://github.com/cypress-io/cypress/releases/tag/v12.4.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.3.0...v12.4.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-4-0 </details> <details> <summary>javierbrea/cypress-localstorage-commands</summary> ### [`v2.2.5`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#225---2023-11-15) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.4...v2.2.5) ##### Changed - chore(deps): Update devDependencies ### [`v2.2.4`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#224---2023-08-14) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.3...v2.2.4) ##### Changed - chore(deps): Update devDependencies ### [`v2.2.3`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#223---2023-04-03) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.2...v2.2.3) ##### Changed - chore(deps): Update devDependencies </details> <details> <summary>dagger/dagger-for-github</summary> ### [`v5`](https://github.com/dagger/dagger-for-github/compare/v4...v5) [Compare Source](https://github.com/dagger/dagger-for-github/compare/v4...v5) ### [`v4`](https://github.com/dagger/dagger-for-github/compare/v3...v4) [Compare Source](https://github.com/dagger/dagger-for-github/compare/v3...v4) </details> <details> <summary>rlamana/docusaurus-plugin-sass</summary> ### [`v0.2.5`](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5) [Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5) ### [`v0.2.4`](https://github.com/rlamana/docusaurus-plugin-sass/releases/tag/v0.2.4) [Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4) #### What's Changed - fix: resolve sass-loader to avoid phantom dependencies by [@ChrisCindy](https://github.com/ChrisCindy) in https://github.com/rlamana/docusaurus-plugin-sass/pull/25 - Bump semver from 7.3.5 to 7.5.3 by [@dependabot](https://github.com/dependabot) in https://github.com/rlamana/docusaurus-plugin-sass/pull/31 #### New Contributors - [@ChrisCindy](https://github.com/ChrisCindy) made their first contribution in https://github.com/rlamana/docusaurus-plugin-sass/pull/25 **Full Changelog**: https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4 </details> <details> <summary>Microsoft/go-winio</summary> ### [`v0.6.1`](https://github.com/microsoft/go-winio/releases/tag/v0.6.1) [Compare Source](https://github.com/Microsoft/go-winio/compare/v0.6.0...v0.6.1) #### What's Changed - Soften linter by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/264 - Bump linter, remove structcheck, ignore unhandled_errors by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/265 - pkg/etw/sample: remove dependency on github.com/sirupsen/logrus by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/microsoft/go-winio/pull/267 - Update go.mod dependencies by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/277 - Add some basic bind filter functions by [@gabriel-samfira](https://github.com/gabriel-samfira) in https://github.com/microsoft/go-winio/pull/274 - Apply two upstream CL to mkwinsyscall by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/278 - Unable to create named pipe on certain WS2012, Win 10 Pro machines by [@rcarman-r7](https://github.com/rcarman-r7) in https://github.com/microsoft/go-winio/pull/280 - Add `fs.ResolvePath` to resolve symbolic links by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/275 - update linter and fix lint errors by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/284 #### New Contributors - [@gabriel-samfira](https://github.com/gabriel-samfira) made their first contribution in https://github.com/microsoft/go-winio/pull/274 - [@rcarman-r7](https://github.com/rcarman-r7) made their first contribution in https://github.com/microsoft/go-winio/pull/280 **Full Changelog**: https://github.com/microsoft/go-winio/compare/v0.6.0...v0.6.1 </details> <details> <summary>containerd/console</summary> ### [`v1.0.4`](https://github.com/containerd/console/releases/tag/v1.0.4) [Compare Source](https://github.com/containerd/console/compare/v1.0.3...v1.0.4) #### What's Changed - gha: update to go 1.17, update golangci-lint to v1.44, and gofmt by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/61 - remove solaris implementation by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/62 - zos: share implementation with unix (less DRY) by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/63 - Update GitHub actions CI workflow by [@austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/68 - Add containerd project checks to CI by [@austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/69 - fix: don't abort on first encountered error when resetting Windows console by [@muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/67 - Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/containerd/console/pull/72 - fix: don't print to stdout when initializing console fails on Windows by [@muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/66 - \[Doc]update links to main by [@fangn2](https://github.com/fangn2) in https://github.com/containerd/console/pull/74 - fix: add shim for js by [@paralin](https://github.com/paralin) in https://github.com/containerd/console/pull/60 - docs: fix typo in the comment of Console.Reset by [@davidhsingyuchen](https://github.com/davidhsingyuchen) in https://github.com/containerd/console/pull/73 - tc_unix.go: Make cfmakeraw compatible to Linux by [@ktock](https://github.com/ktock) in https://github.com/containerd/console/pull/77 #### New Contributors - [@austinvazquez](https://github.com/austinvazquez) made their first contribution in https://github.com/containerd/console/pull/68 - [@muesli](https://github.com/muesli) made their first contribution in https://github.com/containerd/console/pull/67 - [@dependabot](https://github.com/dependabot) made their first contribution in https://github.com/containerd/console/pull/72 - [@fangn2](https://github.com/fangn2) made their first contribution in https://github.com/containerd/console/pull/74 - [@paralin](https://github.com/paralin) made their first contribution in https://github.com/containerd/console/pull/60 - [@davidhsingyuchen](https://github.com/davidhsingyuchen) made their first contribution in https://github.com/containerd/console/pull/73 - [@ktock](https://github.com/ktock) made their first contribution in https://github.com/containerd/console/pull/77 **Full Changelog**: https://github.com/containerd/console/compare/v1.0.3...v1.0.4 </details> <details> <summary>containerd/containerd</summary> ### [`v1.7.15`](https://github.com/containerd/containerd/releases/tag/v1.7.15): containerd 1.7.15 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.14...v1.7.15) Welcome to the v1.7.15 release of containerd! The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled. ##### Highlights - Adds mediatype to OCI index record on export ([#9990](https://github.com/containerd/containerd/pull/9990)) ##### Runtime - Fix runc shim to only defer init process exits ([#10037](https://github.com/containerd/containerd/pull/10037)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Phil Estes - Austin Vazquez - Laura Brehm - Sebastiaan van Stijn - Talon ##### Changes <details><summary>12 commits</summary> - Prepare for v1.7.15 release ([#10039](https://github.com/containerd/containerd/pull/10039)) - [`4d4759b54`](https://github.com/containerd/containerd/commit/4d4759b54df2a2ce5abb2aaa117ebc1857406380) Prep v1.7.15 release - Fix runc shim to only defer init process exits ([#10037](https://github.com/containerd/containerd/pull/10037)) - [`21df46766`](https://github.com/containerd/containerd/commit/21df4676621559e46b46810de3c900d105f10210) runc-shim: only defer init process exits - Fix compile from version control system (source) use case ([#10012](https://github.com/containerd/containerd/pull/10012)) - [`2a054213e`](https://github.com/containerd/containerd/commit/2a054213e7d167d697a27bbe8409872c67e8df46) Fix compile from version control system (source) use case - Adds mediatype to OCI index record on export ([#9990](https://github.com/containerd/containerd/pull/9990)) - [`6605c47a4`](https://github.com/containerd/containerd/commit/6605c47a4156171580458fa035133f2739046822) adds mediatype to oci index record - vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#9975](https://github.com/containerd/containerd/pull/9975)) - [`e6d91d843`](https://github.com/containerd/containerd/commit/e6d91d843fcc26c04e0d33144211aef965f79295) vendor: github.com/golang/protobuf v1.5.4 - [`2d136c5f5`](https://github.com/containerd/containerd/commit/2d136c5f5eb7092b458a07e14c53ccb7e5f429f0) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 - [`a1a7af7a3`](https://github.com/containerd/containerd/commit/a1a7af7a39da32ea0e38bb8ddd5b219c9cf6848e) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 </details> ##### Dependency Changes - **github.com/golang/protobuf** v1.5.3 -> v1.5.4 - **google.golang.org/protobuf** v1.31.0 -> v1.33.0 Previous release can be found at [v1.7.14](https://github.com/containerd/containerd/releases/tag/v1.7.14) ### [`v1.7.14`](https://github.com/containerd/containerd/releases/tag/v1.7.14): containerd 1.7.14 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14) Welcome to the v1.7.14 release of containerd! The fourteenth patch release for containerd 1.7 contains various fixes and updates. ##### Highlights - Update builds to use go 1.21.8 ([#9933](https://github.com/containerd/containerd/pull/9933)) - Fix various timing issues with docker pusher ([#9921](https://github.com/containerd/containerd/pull/9921)) - Register imagePullThroughput and count with MiB ([#9855](https://github.com/containerd/containerd/pull/9855)) - Move high volume event logs to Trace level ([#9823](https://github.com/containerd/containerd/pull/9823)) ##### Container Runtime Interface (CRI) - Handle pod transition states gracefully while listing pod stats ([#9905](https://github.com/containerd/containerd/pull/9905)) ##### Runtime - Update runc-shim to process exec exits before init ([#9928](https://github.com/containerd/containerd/pull/9928)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Derek McGowan - Maksym Pavlenko - Krisztian Litkey - Akihiro Suda - Justin Chadwell - Sebastiaan van Stijn - Phil Estes - Kirtana Ashok - Akhil Mohan - Austin Vazquez - Etienne Champetier - Jordan Liggitt - Kohei Tokunaga - Mike Brown - Samuel Karp - Davanum Srinivas - Edgar Lee - Henry Wang - James Sturtevant - Laura Brehm - Nashwan Azhari - Robbie Buxton - Robert-André Mauchin - Shukui Yang ##### Changes <details><summary>70 commits</summary> - Prepare release notes for v1.7.14 ([#9953](https://github.com/containerd/containerd/pull/9953)) - [`1babe6b58`](https://github.com/containerd/containerd/commit/1babe6b582911fe90b93fc01491f2f4b130b7a3a) Prepare release notes for v1.7.14 - Backport use Go toolchain in CI matrix to build binaries ([#9951](https://github.com/containerd/containerd/pull/9951)) - [`a9bbbefcf`](https://github.com/containerd/containerd/commit/a9bbbefcf2feba3eaf1da39b70ed28032a7d8a65) Use the Go toolchain in CI matrix to build binaries - Update builds to use go 1.21.8 ([#9933](https://github.com/containerd/containerd/pull/9933)) - [`1ca9a643a`](https://github.com/containerd/containerd/commit/1ca9a643a1ad206f074300e235c959213854fff1) update to go 1.21.8, 1.22.1 - Move inline PS scripts into files ([#9938](https://github.com/containerd/containerd/pull/9938)) - [`39caf532e`](https://github.com/containerd/containerd/commit/39caf532e7f60ff21050221fda627bab02de2ce8) Move inline PS scripts into files - Disable OOM set score unpriv test temporarily ([#9944](https://github.com/containerd/containerd/pull/9944)) - [`630226bb4`](https://github.com/containerd/containerd/commit/630226bb431ec98dbfca279c3416abf5047d9858) Disable OOM set score unpriv test temporarily - Update runc-shim to process exec exits before init ([#9928](https://github.com/containerd/containerd/pull/9928)) - [`de7b6bae9`](https://github.com/containerd/containerd/commit/de7b6bae9e2e44676ae63a13ab130812a6db56b6) runc-shim: process exec exits before init - update to go 1.21.6, test 1.22.0 ([#9860](https://github.com/containerd/containerd/pull/9860)) - [`3b3e537ea`](https://github.com/containerd/containerd/commit/3b3e537eab7f81e32f34c95833caa2af9bc8753f) Uninstall mingw before attempting upgrade - [`9e24388b2`](https://github.com/containerd/containerd/commit/9e24388b209e519d7cc3805b3266b9a4a82e59cc) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. - [`5b23a4127`](https://github.com/containerd/containerd/commit/5b23a412759f27465906f86196c686cd0925be15) seccomp, apparmor: add go:noinline - [`753422ac1`](https://github.com/containerd/containerd/commit/753422ac11e3485b14a62bfdfcc75a0001f3dd70) Drop go 1.20 and build against 1.22 - [`a2d64218c`](https://github.com/containerd/containerd/commit/a2d64218c5a5abc676556925d63b222dbd606469) Fix windows integration tests - [`6379dd6f4`](https://github.com/containerd/containerd/commit/6379dd6f428fc3f55cb4625d7741b84751d42278) Update workflow files to install Go via composite action - [`a5c0d061c`](https://github.com/containerd/containerd/commit/a5c0d061cd3a4154f31fd5a5c8a4f77da5da1dcd) Extract a composite action to install Go - Fix various timing issues with docker pusher ([#9921](https://github.com/containerd/containerd/pull/9921)) - [`52a1402df`](https://github.com/containerd/containerd/commit/52a1402df64ca286b5084b1b150c4219343ad6d7) copy: prevent potential deadlock if close before fully written - [`872746386`](https://github.com/containerd/containerd/commit/872746386237b1076f8449a7f7d3d5a07ed30a42) copy: setError should imply Close - [`a8004007a`](https://github.com/containerd/containerd/commit/a8004007a2ababa6ac7dbf508edf1c49faf06110) copy: remove max number of ErrResets - [`0465472ed`](https://github.com/containerd/containerd/commit/0465472ed3807b6dcf785d160783019e3fed5cf6) pushWriter: refactor reset pipe logic into separate function - [`2577207cc`](https://github.com/containerd/containerd/commit/2577207cc0611f36e582111f88f16fd5ae777068) copy: improve error detection from closed pipes - [`d081da86b`](https://github.com/containerd/containerd/commit/d081da86bfc3b1b65efacdefba0e48aadaac4d91) copy: check if writer was closed before setting a pipe - [`2a25c085b`](https://github.com/containerd/containerd/commit/2a25c085b21e074667bf6ded0dbb6ebf892a889c) copy: remove wrapping io.NopCloser from push writer pipe - Register imagePullThroughput and count with MiB ([#9855](https://github.com/containerd/containerd/pull/9855)) - [`711cebd48`](https://github.com/containerd/containerd/commit/711cebd484d44da363ca451cdaaad0c6ec9810d2) Register imagePullThroughput and count with MiB - Update golangci-lint to v1.56.1 ([#9900](https://github.com/containerd/containerd/pull/9900)) - [`926ceb036`](https://github.com/containerd/containerd/commit/926ceb036223d8ac05cd918c7a4c0825bb9c0640) fix golangci-lint errors - [`4030ae235`](https://github.com/containerd/containerd/commit/4030ae2350fee10557fe52a5b8f86761afb01a1d) Update golangci-lint to v1.56.1 - [`6620d6bfd`](https://github.com/containerd/containerd/commit/6620d6bfd7c5e6e8ffc0c6047c3602ac0ab05a16) ci: bump up golangci-lint to v1.55.2 - [`b16ca72b2`](https://github.com/containerd/containerd/commit/b16ca72b2e1e105e475537a450f0c6509e95ca32) Bump up golangci-lint to v1.54.2 - Handle pod transition states gracefully while listing pod stats ([#9905](https://github.com/containerd/containerd/pull/9905)) - [`39db3f18b`](https://github.com/containerd/containerd/commit/39db3f18b29ab9efb671404a1030628af560c614) adjust test cases to run for windows - [`579d8b463`](https://github.com/containerd/containerd/commit/579d8b463bd9cdcdc4425ac7279033056c1d0433) \[cri] Handle Windows pod transitions gracefully - Backport GitHub actions package updates ([#9876](https://github.com/containerd/containerd/pull/9876)) - [`8d6f0f2ae`](https://github.com/containerd/containerd/commit/8d6f0f2aecd6962163fbaac6f6d2bbb6e12e9c85) build(deps): bump golangci/golangci-lint-action from 3 to 4 - [`7929592b9`](https://github.com/containerd/containerd/commit/7929592b96e2e4e2e0150a890048f612b623fb7d) build(deps): bump actions/upload-artifact from 3 to 4 - [`e11de777d`](https://github.com/containerd/containerd/commit/e11de777dcfdf5914b102830d66e6fbed6ceea7d) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 - [`2b40a4074`](https://github.com/containerd/containerd/commit/2b40a40741dfa865683f25d76ac4e03457449ecc) build(deps): bump actions/checkout from 3 to 4 - [`22feefa57`](https://github.com/containerd/containerd/commit/22feefa570111de80812a493685fb767c3a6c6b4) build(deps): bump actions/setup-go from 3 to 5 - [`b96aa4012`](https://github.com/containerd/containerd/commit/b96aa4012d4a491869f26f570f9dfbbf1835eb70) build(deps): bump actions/upload-artifact from 1 to 3 - [`97763f91d`](https://github.com/containerd/containerd/commit/97763f91d6e8013d5c1e2c5ad7214cd956808742) build(deps): bump docker/setup-buildx-action from 2 to 3 - [`6875bb14f`](https://github.com/containerd/containerd/commit/6875bb14f1841de6d89c689a2e393697c1e6c89c) build(deps): bump github/codeql-action from 2 to 3 - [`87f9adb6b`](https://github.com/containerd/containerd/commit/87f9adb6b9ed2bd9a0b72879c5a9bc5eb1b51586) build(deps): bump actions/download-artifact from 3 to 4 - .github: windows should use fix critool version ([#9874](https://github.com/containerd/containerd/pull/9874)) - [`d9c099a9a`](https://github.com/containerd/containerd/commit/d9c099a9ac39956aee0a720be8b3b6af8861351b) .github: windows should use fix critool version - ci: update crun version to 1.14.3 ([#9850](https://github.com/containerd/containerd/pull/9850)) - [`dc594b01d`](https://github.com/containerd/containerd/commit/dc594b01d28d3a6a896b66274fb75b1f54aecaa3) ci: update crun version to 1.14.3 - Add WithMetaStore to overlay snapshotter and missing unpacker.Wait for image import ([#9837](https://github.com/containerd/containerd/pull/9837)) - [`8fe0b26f1`](https://github.com/containerd/containerd/commit/8fe0b26f198163fb88a6bd194382c502d5756fb1) Add missing unpacker.Wait for image import - [`31ea2d7d9`](https://github.com/containerd/containerd/commit/31ea2d7d9114fee156f37dc9e6f38538aca58447) Add WithMetaStore to overlay snapshotter to allow bringing your own - Move high volume event logs to Trace level ([#9823](https://github.com/containerd/containerd/pull/9823)) - [`982e0cffb`](https://github.com/containerd/containerd/commit/982e0cffbeb31768655ba1ed89620e27551fc49f) Move high volume event logs to Trace level - cri: propagate deprecation list to runtime status ([#9818](https://github.com/containerd/containerd/pull/9818)) - [`c79ffa277`](https://github.com/containerd/containerd/commit/c79ffa2773d29e81f7a905fc1242301c5ee7e556) cri: propagate deprecation list to runtime status - ctr: print deprecation warnings on every invocation ([#9820](https://github.com/containerd/containerd/pull/9820)) - [`eaebe23de`](https://github.com/containerd/containerd/commit/eaebe23de407600ff81b9466165294eacc3575f5) ctr: print deprecation warnings on every invocation - bug fix: make sure cri image is pinned when it is pulled outside cri ([#9784](https://github.com/containerd/containerd/pull/9784)) - [`26c057423`](https://github.com/containerd/containerd/commit/26c057423c614deb0c510ceea84ed22bbe4f7f1d) bug fix: make sure cri image is pinned when it is pulled outside cri - go.{mod,sum}: update NRI dependency, fixing a potential fd double close error. ([#9783](https://github.com/containerd/containerd/pull/9783)) - [`d3e997556`](https://github.com/containerd/containerd/commit/d3e9975563f4dd2182526188f6c2331a192a07d5) go.{mod,sum}: update NRI dependency, re-vendor. - Add option to perform syncfs after pull ([#9769](https://github.com/containerd/containerd/pull/9769)) - [`ea0a92ec3`](https://github.com/containerd/containerd/commit/ea0a92ec30c9e61bd45b777a27ee4849b1716522) \*: introduce image_pull_with_sync_fs in CRI - [`4caf44032`](https://github.com/containerd/containerd/commit/4caf44032b61ecef0c2e38eb38395a3969377296) api: introduce sync_fs to diff.ApplyRequest - Move certain debug logs to trace logs ([#9761](https://github.com/containerd/containerd/pull/9761)) - [`3f75af7bf`](https://github.com/containerd/containerd/commit/3f75af7bf20fc6d1456e282e31c51d32d086b9ec) Move certain debug logs to trace logs </details> ##### Changes from containerd/nri <details><summary>23 commits</summary> - socketpair_windows: remove implementation for now ([containerd/nri#69](https://github.com/containerd/nri/pull/69)) - [`e47f09b`](https://github.com/containerd/nri/commit/e47f09b2abe155cf5c0caaf7d0df7651447d2660) socketpair_windows: remove implementation for now - adaptation, stub: allow extra ttrpc client and server options. ([containerd/nri#67](https://github.com/containerd/nri/pull/67)) - [`45b9e3f`](https://github.com/containerd/nri/commit/45b9e3f1437fff2bb9bc26d89da34ee1b298cc86) plugins: update dependencies. - [`f600cf6`](https://github.com/containerd/nri/commit/f600cf681e94c8f8b65dead5e57fe0981571bea9) go.{mod,sum}: update dependencies. - [`13ee978`](https://github.com/containerd/nri/commit/13ee97879885d8fe4c0dbbf5c0a04716a8654247) pkg/stub: add support for extra ttrpc options. - [`c4e2f81`](https://github.com/containerd/nri/commit/c4e2f81f94b35bee5b9d35c80f28490b6f3ebb76) pkg/adaptation: add support for extra ttrpc options. - socketpair_unix: avoid double close(), set FD_CLOEXEC ([containerd/nri#66](https://github.com/containerd/nri/pull/66)) - [`5d0b52b`](https://github.com/containerd/nri/commit/5d0b52bc45c998c5fcb1a60a7289f86d9c92f836) sockerpair_unix: avoid double close(), set FD_CLOEXEC - Task: fix typo in godoc ([containerd/nri#61](https://github.com/containerd/nri/pull/61)) - [`ae7840b`](https://github.com/containerd/nri/commit/ae7840bf9910649194e1a556b8cc7a66bc19d817) Task: fix typo in godoc - Take pkg/hooks from github.com/containers/common (carry 46) ([containerd/nri#55](https://github.com/containerd/nri/pull/55)) - [`b4ac58c`](https://github.com/containerd/nri/commit/b4ac58c1a5b0cffa51448ed060095dd5dc6f4b54) Take pkg/hooks from github.com/containers/common - gha: remove GOPATH and workingdir, update actions/setup-go@v4, actions/checkout@v4 ([containerd/nri#53](https://github.com/containerd/nri/pull/53)) - [`ee96969`](https://github.com/containerd/nri/commit/ee969691b8e4bdc2b7c3e384b22c203fcf948ab7) gha: update actions/checkout@v4 - [`7b33fbf`](https://github.com/containerd/nri/commit/7b33fbf7685a7c0d27d186f89f6027373e54e3f0) gha: update actions/setup-go@v4 - [`e33ac3e`](https://github.com/containerd/nri/commit/e33ac3e43394ead24dbb4a407dd76c00c5780737) gha: remove working-dir and GOPATH - remove containerd as dependency ([containerd/nri#51](https://github.com/containerd/nri/pull/51)) - [`da8a7e5`](https://github.com/containerd/nri/commit/da8a7e53614c60c106f824caf3d120ea582a0cbe) remove containerd as dependency - make plugins/ulimit-adjuster a separate module ([containerd/nri#54](https://github.com/containerd/nri/pull/54)) - [`934815e`](https://github.com/containerd/nri/commit/934815e56ede6d603d1b17cbce86ad98a973eaf1) make plugins/ulimit-adjuster a separate module - scripts: fix protobuf URL on arm64 ([containerd/nri#52](https://github.com/containerd/nri/pull/52)) - [`9b43daa`](https://github.com/containerd/nri/commit/9b43daaeceae6750053c5693a15edc59819886b9) scripts: fix protobuf URL on arm64 </details> ##### Changes from containerd/ttrpc <details><summary>21 commits</summary> - Fix streaming with empty payloads ([containerd/ttrpc#157](https://github.com/containerd/ttrpc/pull/157)) - [`44ca009`](https://github.com/containerd/ttrpc/commit/44ca0096e1b2b638ead24b4898cc34aa3b603926) Add comment - [`6615f15`](https://github.com/containerd/ttrpc/commit/6615f159bad5b522b7322408fcf5ae8bb58b0843) Fix linter - [`dea99e9`](https://github.com/containerd/ttrpc/commit/dea99e9d052d7b86500e6e3f9e6a214d2111d1a9) Fix handling of empty payloads - [`336fc1b`](https://github.com/containerd/ttrpc/commit/336fc1b6b472ea8df89cd109b7e8dfb99fe8828e) Add integration test to reproduce issue with empty payloads - Bump google.golang.org/grpc from 1.57.0 to 1.57.1 ([containerd/ttrpc#156](https://github.com/containerd/ttrpc/pull/156)) - [`1e51c46`](https://github.com/containerd/ttrpc/commit/1e51c4681df2ab54ad15226a125228ac7639d2e0) Bump google.golang.org/grpc from 1.57.0 to 1.57.1 - Bump golang.org/x/net from 0.10.0 to 0.17.0 ([containerd/ttrpc#155](https://github.com/containerd/ttrpc/pull/155)) - [`bea960d`](https://github.com/containerd/ttrpc/commit/bea960d9fea8eb25d11ff5e024c734e46a9a6c3e) Bump golang.org/x/net from 0.10.0 to 0.17.0 - Implement support for unary interceptor chaining. ([containerd/ttrpc#152](https://github.com/containerd/ttrpc/pull/152)) - [`40f227d`](https://github.com/containerd/ttrpc/commit/40f227ddbb9e05bf4d04179991f809df0546c6f6) server: implement UnaryServerInterceptor chaining. - [`f984c9b`](https://github.com/containerd/ttrpc/commit/f984c9b178e595292d4a6934ce229c9854c2fe77) client: implement UnaryClientInterceptor chaining. - Fix grammar in comment for UserOnCloseWait. ([containerd/ttrpc#153](https://github.com/containerd/ttrpc/pull/153)) - [`8ca4110`](https://github.com/containerd/ttrpc/commit/8ca4110ebc91819c5b0e2f17c9ded818b2462c50) Fix comment for UserOnCloseWait. - Bump genproto dependency ([containerd/ttrpc#154](https://github.com/containerd/ttrpc/pull/154)) - [`a2fbc14`](https://github.com/containerd/ttrpc/commit/a2fbc14815b5a707579072aa0edaa59bdaf762f9) go.mod: google.golang.org/genproto/googleapis/rpc v0.0.0-20230731190214-cbb8c96f2d6d - [`cf2b85d`](https://github.com/containerd/ttrpc/commit/cf2b85de12df0368cf0c6a24446b25c079caf0f5) go.mod: bump to supported go version - server_test: wait for OnClose in TestClientEOF. ([containerd/ttrpc#150](https://github.com/containerd/ttrpc/pull/150)) - [`e0cd801`](https://github.com/containerd/ttrpc/commit/e0cd8011167557f2ddb1b976e604cfd94d8b393d) server_test: wait for OnClose in TestClientEOF. - .github: give more slack for build+tests. ([containerd/ttrpc#151](https://github.com/containerd/ttrpc/pull/151)) - [`8d47846`](https://github.com/containerd/ttrpc/commit/8d4784675e72e1880aa5bb9c817875891e670d41) .github: give more slack for build+tests. </details> ##### Dependency Changes - **github.com/containerd/nri** v0.4.0 -> v0.6.0 - **github.com/containerd/ttrpc** v1.2.2 -> v1.2.3 - **google.golang.org/genproto/googleapis/rpc** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) -> [`cbb8c96`](https://github.com/containerd/containerd/commit/cbb8c96f2d6d) Previous release can be found at [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) ### [`v1.7.13`](https://github.com/containerd/containerd/releases/tag/v1.7.13): containerd 1.7.13 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.12...v1.7.13) Welcome to the v1.7.13 release of containerd! The thirteenth patch release for containerd 1.7 updates the runc binary in the release builds to address CVE-2024-21626 ##### Notable Updates - **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)) - **Update seccomp profile for new syscalls added since Linux 5.16** ([#9693](https://github.com/containerd/containerd/pull/9693)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Akihiro Suda - Evan Lezar - Paweł Gronowski - Phil Estes - Wei Fu ##### Changes <details><summary>9 commits</summary> - Prepare v1.7.13 and update runc to v1.1.12 ([#9724](https://github.com/containerd/containerd/pull/9724)) - [`b97e611b9`](https://github.com/containerd/containerd/commit/b97e611b9b931225f2385d5fcc31873577464edd) Prepare release notes for v1.7.13 - [`2e7fa14db`](https://github.com/containerd/containerd/commit/2e7fa14db7f4448751280520fef2c628ed07b0eb) Update runc binary to v1.1.12 - \[release/1.7] seccomp: kernel 6.7 ([#9693](https://github.com/containerd/containerd/pull/9693)) - [`1bed37871`](https://github.com/containerd/containerd/commit/1bed3787162521aeb179895c29f7cc6a6bcd8013) seccomp: kernel 6.7 - \[release/1.7] Update container-device-interface to v0.6.2 ([#9685](https://github.com/containerd/containerd/pull/9685)) - [`14628d4aa`](https://github.com/containerd/containerd/commit/14628d4aaa1138f2fd10f23d26f3810ba5d65ab2) Update container-device-interface to v0.6.2 - \[release/1.7] content: Add InfoReaderProvider ([#9658](https://github.com/containerd/containerd/pull/9658)) - [`836477930`](https://github.com/containerd/containerd/commit/836477930ed9e6a81980b5bd2150f638cb39adf6) content: Add InfoReaderProvider </details> ##### Dependency Changes - **tags.cncf.io/container-device-interface** v0.6.2 ***new*** - **tags.cncf.io/container-device-interface/specs-go** v0.6.0 ***new*** Previous release can be found at [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) ### [`v1.7.12`](https://github.com/containerd/containerd/releases/tag/v1.7.12): containerd 1.7.12 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.11...v1.7.12) Welcome to the v1.7.12 release of containerd! The twelfth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix on dialer function for Windows** ([#9501](https://github.com/containerd/containerd/pull/9501)) - **Improve `/etc/group` handling when appending groups** ([#9544](https://github.com/containerd/containerd/pull/9544)) - **Update shim pidfile permissions to 0644** ([#9548](https://github.com/containerd/containerd/pull/9548)) - **Update runc binary to v1.1.11** ([#9596](https://github.com/containerd/containerd/pull/9596)) - **Allow import and export to reference missing content** ([#9600](https://github.com/containerd/containerd/pull/9600)) - **Remove runc import** ([#9605](https://github.com/containerd/containerd/pull/9605)) - **Update Go version to 1.20.13** ([#9624](https://github.com/containerd/containerd/pull/9624)) ##### Deprecation Warnings - **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#9567](https://github.com/containerd/containerd/pull/9567)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Sebastiaan van Stijn - Wei Fu - Derek McGowan - Paweł Gronowski - Jaroslav Jindrak - Maksym Pavlenko - Samuel Karp - Anthony Nandaa - Bjorn Neergaard - Djordje Lukic - Kay Yan ##### Changes <details><summary>34 commits</summary> - \[release/1.7] Prepare release notes for v1.7.12 ([#9632](https://github.com/containerd/containerd/pull/9632)) - [`775d544fe`](https://github.com/containerd/containerd/commit/775d544fe51cb3bb9ed735fdf3e56ec45a84d78a) Prepare release notes for v1.7.12 - \[release/1.7] update to go1.20.13, test go1.21.6 ([#9624](https://github.com/containerd/containerd/pull/9624)) - [`a5dc5b894`](https://github.com/containerd/containerd/commit/a5dc5b894d2bd9bc8bff7c95bdde7564747b138f) update to go1.20.13, test go1.21.6 - \[release/1.7] shim: Create pid-file and address with 0644 permissions ([#9548](https://github.com/containerd/containerd/pull/9548)) - [`8d82242eb`](https://github.com/containerd/containerd/commit/8d82242eb525f87b91bbc2c2499559855dd363cf) shim: Create address file with 0644 permissions - [`260963a35`](https://github.com/containerd/containerd/commit/260963a354d972201ffe9a6ce882f1c0e9b319d9) shim: Create pid-file with 0644 permissions - \[release/1.7 backport] switch back from golang.org/x/sys/execabs to os/exec (go1.19) ([#9602](https://github.com/containerd/containerd/pull/9602)) - [`872af82f5`](https://github.com/containerd/containerd/commit/872af82f572a2f2ff17107dd714c61b0eee2081a) remove remaining uses of golang.org/x/sys/execabs - [`2ad2a2e83`](https://github.com/containerd/containerd/commit/2ad2a2e835f27417749c1a0adc47f58e9cae8aa7) switch back from golang.org/x/sys/execabs to os/exec (go1.19) - \[release/1.7] update to CDI v0.6.1, and remove github.com/opencontainers/runc dependency ([#9605](https://github.com/containerd/containerd/pull/9605)) - [`9251072f7`](https://github.com/containerd/containerd/commit/9251072f784dccd9016109c0864ff11c836c9af7) remove github.com/opencontainers/runc dependency - [`4e67213d4`](https://github.com/containerd/containerd/commit/4e67213d4fa02a64b7bb9ed689d68cfc0c4d104a) vendor: github.com/cncf-tags/container-device-interface v0.6.1 - [`e0ee0be0d`](https://github.com/containerd/containerd/commit/e0ee0be0df3d3e3a951e24f616f2afc92e665c23) go.mod: github.com/opencontainers/runtime-spec v1.1.0 - [`02be2236a`](https://github.com/containerd/containerd/commit/02be2236a26ac6d72a0d5375e61ddd648fa1261c) go.mod: github.com/.../container-device-interface v0.6.0 - [`91f953bb4`](https://github.com/containerd/containerd/commit/91f953bb476936d13881781a83b491216d21e3e1) go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 - \[release/1.7 backport] import/export: Support references to missing content ([#9600](https://github.com/containerd/containerd/pull/9600)) - [`6089b05d9`](https://github.com/containerd/containerd/commit/6089b05d9300c231b2f15cfd50426b97e1f77050) images/Export: Revert signature change - [`6b4b760c3`](https://github.com/containerd/containerd/commit/6b4b760c39b3b63755138357d72e0acedb3bee4e) integration/import-export: Add WithSkipMissing tests - [`abb3c5ef9`](https://github.com/containerd/containerd/commit/abb3c5ef943148198998a94c44d74cd01e00ad5e) export: Copy distribution source labels to manifest annotations - [`9609f04f6`](https://github.com/containerd/containerd/commit/9609f04f6bb9fd203b3955d561d976f34b0d4f4f) import/export: Support references to missing content - [`42b60d865`](https://github.com/containerd/containerd/commit/42b60d865296ef1bda5c0f981ef06844e1f58c5d) images/archive: use mediatype helpers - \[release/1.7 backport] update runc binary to v1.1.11 ([#9596](https://github.com/containerd/containerd/pull/9596)) - [`23516a99c`](https://github.com/containerd/containerd/commit/23516a99c6fc64812a3719ea54004e1a92e9e61d) update runc binary to v1.1.11 - \[release/1.7 backport] go.mod: dario.cat/mergo v1.0.0 ([#9569](https://github.com/containerd/containerd/pull/9569)) - [`428714e32`](https://github.com/containerd/containerd/commit/428714e320b12dd1474c836fa15e79f824edfe2a) go.mod: dario.cat/mergo v1.0.0 - \[release/1.7] restart: containerd.io/restart.logpath warning ([#9567](https://github.com/containerd/containerd/pull/9567)) - [`03fed557e`](https://github.com/containerd/containerd/commit/03fed557e38f3cfeca0652607100c40c86806288) restart: containerd.io/restart.logpath warning - \[release 1.7] backport: fix on dialer function for windows ([#9501](https://github.com/containerd/containerd/pull/9501)) - [`68d237392`](https://github.com/containerd/containerd/commit/68d2373926bc0a9dcc2fb6cdf49dd2188a327b9f) fix(pkg/dialer): minor fix on dialer function for windows - \[release/1.7] \*: enable ARM64 runner ([#9502](https://github.com/containerd/containerd/pull/9502)) - [`c63165123`](https://github.com/containerd/containerd/commit/c63165123374eaba96616b6ecdd2bb34aaae8e36) \*: enable ARM64 runner - \[release/1.7 backport] WithAppendAdditionalGroups: better /etc/group handling ([#9544](https://github.com/containerd/containerd/pull/9544)) - [`55e570844`](https://github.com/containerd/containerd/commit/55e570844473d689572d68cff7f7bcc5bdcba2ce) WithAppendAdditionalGroups: better /etc/group handling </details> ##### Dependency Changes - **dario.cat/mergo** v1.0.0 ***new*** - **github.com/container-orchestrated-devices/container-device-interface** v0.5.4 -> v0.6.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/opencontainers/runtime-spec** v1.1.0-rc.1 -> v1.1.0 Previous release can be found at [v1.7.11](https://github.com/containerd/containerd/releases/tag/v1.7.11) ### [`v1.7.11`](https://github.com/containerd/containerd/releases/tag/v1.7.11): containerd 1.7.11 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.10...v1.7.11) Welcome to the v1.7.11 release of containerd! The eleventh patch release for containerd 1.7 contains various fixes and updates including one security issue. ##### Notable Updates - **Fix Windows default path overwrite issue** ([#9440](https://github.com/containerd/containerd/pull/9440)) - **Update push to always inherit distribution sources from parent** ([#9452](https://github.com/containerd/containerd/pull/9452)) - **Update shim to use net dial for gRPC shim sockets** ([#9458](https://github.com/containerd/containerd/pull/9458)) - **Fix otel version incompatibility** ([#9483](https://github.com/containerd/containerd/pull/9483)) - **Fix Windows snapshotter blocking snapshot GC on remove failure** ([#9482](https://github.com/containerd/containerd/pull/9482)) - **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)) ##### Deprecation Warnings - **Emit deprecation warning for AUFS snapshotter** ([#9436](https://github.com/containerd/containerd/pull/9436)) - **Emit deprecation warning for v1 runtime** ([#9450](https://github.com/containerd/containerd/pull/9450)) - **Emit deprecation warning for deprecated CRI configs** ([#9469](https://github.com/containerd/containerd/pull/9469)) - **Emit deprecation warning for CRI v1alpha1 usage** ([#9479](https://github.com/containerd/containerd/pull/9479)) - **Emit deprecation warning for CRIU config in CRI** ([#9481](https://github.com/containerd/containerd/pull/9481)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Phil Estes - Bjorn Neergaard - Danny Canter - Sebastiaan van Stijn - ruiwen-zhao - Akihiro Suda - Amit Barve - Charity Kathure - Maksym Pavlenko - Milas Bowman - Paweł Gronowski - Wei Fu ##### Changes <details><summary>39 commits</summary> - \[release/1.7] Prepare release notes for v1.7.11 ([#9491](https://github.com/containerd/containerd/pull/9491)) - [`dfae68bc3`](https://github.com/containerd/containerd/commit/dfae68bc3e614a091d0a468c9026da370e3de0d9) Prepare release notes for v1.7.11 - \[release/1.7] update to go1.20.12, test go1.21.5 ([#9352](https://github.com/containerd/containerd/pull/9352)) - [`0d314401d`](https://github.com/containerd/containerd/commit/0d314401d9b9ad470153dc3d09f6d9cd7d527697) update to go1.20.12, test go1.21.5 - [`1ec1ae2c6`](https://github.com/containerd/containerd/commit/1ec1ae2c6b6458b5d000af1ec6263b4ee337cd58) update to go1.20.11, test go1.21.4 - Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c) - [`cb804da21`](https://github.com/containerd/containerd/commit/cb804da2101074c769a2a327597c9595b38bb4f0) contrib/apparmor: deny /sys/devices/virtual/powercap - [`40162a576`](https://github.com/containerd/containerd/commit/40162a576232b7d95325f85334590ea295d2ed2e) oci/spec: deny /sys/devices/virtual/powercap - \[release/1.7] Don't block snapshot garbage collection on Remove failures ([#9482](https://github.com/containerd/containerd/pull/9482)) - [`ed7c6895b`](https://github.com/containerd/containerd/commit/ed7c6895bd3b33ccc7cfbc8cbd43f6a31333328a) Don't block snapshot garbage collection on Remove failures - \[release/1.7] Add warning for CRIU config usage ([#9481](https://github.com/containerd/containerd/pull/9481)) - [`1fdefdd22`](https://github.com/containerd/containerd/commit/1fdefdd2242fcf704a11f1d6b5149e056ce98ed3) Add warning for CRIU config usage - \[release/1.7] Fix otel version incompatibility ([#9483](https://github.com/containerd/containerd/pull/9483)) - [`f8f659e66`](https://github.com/containerd/containerd/commit/f8f659e66c6ec56fef092dced085d129c0e67176) Add HTTP client update function to tracing library - [`807ddd658`](https://github.com/containerd/containerd/commit/807ddd658b4cd6c0325204e7a19a4561a10906d2) fix(tracing): use latest version of semconv - \[release/1.7] Add cri-api v1alpha2 usage warning to all api calls ([#9479](https://github.com/containerd/containerd/pull/9479)) - [`dc45bc838`](https://github.com/containerd/containerd/commit/dc45bc8381fa2cd903e871c81ce7b4c08e82ca3b) Add cri-api v1alpha2 usage warning to all api calls - \[release/1.7] cri: add deprecation warnings for deprecated CRI configs ([#9469](https://github.com/containerd/containerd/pull/9469)) - [`9d1bad62e`](https://github.com/containerd/containerd/commit/9d1bad62e16f31e0b06c75e1007a623879529a6d) deprecation: fix missing spaces in warnings - [`51a604c07`](https://github.com/containerd/containerd/commit/51a604c0733437f4b7a20aa5ec1e6d4b4f0ab96e) cri: add deprecation warning for runtime_root - [`8040e74bf`](https://github.com/containerd/containerd/commit/8040e74bf8e6c25c02bb461b82f482cff24ce611) cri: add deprecation warning for rutnime_engine - [`99adc40eb`](https://github.com/containerd/containerd/commit/99adc40eb28db7cb93c378ff8bceb8e77559ae09) cri: add deprecation warning for default_runtime - [`afef7ec64`](https://github.com/containerd/containerd/commit/afef7ec646910ce1db3e824bfe17848428f3b47b) cri: add warning for untrusted_workload_runtime - [`6220dc190`](https://github.com/containerd/containerd/commit/6220dc1909883119a960bc96c496ae2361b94749) cri: add warning for old form of systemd_cgroup - \[release/1.7] runtime/v2: net.Dial gRPC shim sockets before trying grpc ([#9458](https://github.com/containerd/containerd/pull/9458)) - [`80f96cd18`](https://github.com/containerd/containerd/commit/80f96cd188949bd9fa16256a8ff0b858ef692f20) runtime/v2: net.Dial gRPC shim sockets before trying grpc - \[release/1.7] tasks: emit warning for v1 runtime and runc v1 runtime ([#9450](https://github.com/containerd/containerd/pull/9450)) - [`f471bb2b8`](https://github.com/containerd/containerd/commit/f471bb2b8e5a902ad8901c7c0db85ecead8c1730) tasks: emit warning for runc v1 runtime - [`329e1d487`](https://github.com/containerd/containerd/commit/329e1d487e7cc5c2773a2472df56b6eb75ae9194) tasks: emit warning for v1 runtime - \[release/1.7] push: always inherit distribution sources from parent ([#9452](https://github.com/containerd/containerd/pull/9452)) - [`4464fde12`](https://github.com/containerd/containerd/commit/4464fde12985d98a9edbf124c54afa1156415572) push: always inherit distribution sources from parent - \[release/1.7] Update tar tests to run on Darwin ([#9451](https://github.com/containerd/containerd/pull/9451)) - [`7e069ee25`](https://github.com/containerd/containerd/commit/7e069ee25868e5c8a67610720f8280c3451a3103) Update tar tests to run on Darwin - \[release/1.7] ctr: Add sandbox flag to ctr run ([#9449](https://github.com/containerd/containerd/pull/9449)) - [`5fc0e4e61`](https://github.com/containerd/containerd/commit/5fc0e4e6151dafa4d5ca8837f3d99b6a8e816866) ctr: Add sandbox flag to ctr run - \[release/1.7] Windows default path overwrite fix ([#9440](https://github.com/containerd/containerd/pull/9440)) - [`31fe03764`](https://github.com/containerd/containerd/commit/31fe03764c436677a1db9be24c25f7c11780eceb) Fix windows default path overwrite issue - \[release/1.7] snapshots: emit deprecation warning for aufs ([#9436](https://github.com/containerd/containerd/pull/9436)) - [`625b35e4b`](https://github.com/containerd/containerd/commit/625b35e4bb26ee021713f2692143bf37f9a98bdd) snapshots: emit deprecation warning for aufs </details> ##### Dependency Changes - **github.com/felixge/httpsnoop** v1.0.3 ***new*** - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.45.0 ***new*** Previous release can be found at [v1.7.10](https://github.com/containerd/containerd/releases/tag/v1.7.10) ### [`v1.7.10`](https://github.com/containerd/containerd/releases/tag/v1.7.10): containerd 1.7.10 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.9...v1.7.10) Welcome to the v1.7.10 release of containerd! The tenth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Enhance container image unpack client logs** ([#9379](https://github.com/containerd/containerd/pull/9379)) - **cri: fix using the pinned label to pin image** ([#9381](https://github.com/containerd/containerd/pull/9381)) - **fix: ImagePull should close http connection if there is no available data to read.** ([#9409](https://github.com/containerd/containerd/pull/9409)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Iceber Gu - Austin Vazquez - Derek McGowan - Phil Estes - Samuel Karp - ruiwen-zhao ##### Changes <details><summary>11 commits</summary> - Add release notes for v1.7.10 ([#9426](https://github.com/containerd/containerd/pull/9426)) - [`a995fe3a8`](https://github.com/containerd/containerd/commit/a995fe3a81a933c984ba13dc8bef0271d1aca171) Add release notes for v1.7.10 - \[release/1.7] fix: ImagePull should close http connection if there is no available data to read. ([#9409](https://github.com/containerd/containerd/pull/9409)) - [`206806128`](https://github.com/containerd/containerd/commit/206806128917276994f0949dc599e4c8b8ad8f14) remotes/docker: close connection if no more data - [`328493962`](https://github.com/containerd/containerd/commit/32849396263f9c68f7c4f43a2abc1319488546de) integration: reproduce [#9347](https://github.com/containerd/containerd/issues/9347) - [`d1aab27cb`](https://github.com/containerd/containerd/commit/d1aab27cbd8ae75d90ad962a256d6af092dcf451) fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter - \[release/1.7] cri: fix using the pinned label to pin image ([#9381](https://github.com/containerd/containerd/pull/9381)) - [`a2b16d7f9`](https://github.com/containerd/containerd/commit/a2b16d7f9cd44f81ebdcffe92dee107b2ebdca8a) cri: fix update of pinned label for images - [`8dc861844`](https://github.com/containerd/containerd/commit/8dc8618442ad99a254de79200c89eb12284dac6e) cri: fix using the pinned label to pin image - \[release/1.7] Enhance container image unpack client logs ([#9379](https://github.com/containerd/containerd/pull/9379)) - [`5930a3750`](https://github.com/containerd/containerd/commit/5930a3750c5db69abf7668e4df003aae8f0beace) Enhance container image unpack client logs </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.7.9](https://github.com/containerd/containerd/releases/tag/v1.7.9) ### [`v1.7.9`](https://github.com/containerd/containerd/releases/tag/v1.7.9): containerd 1.7.9 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.8...v1.7.9) Welcome to the v1.7.9 release of containerd! The ninth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **update runc binary to v1.1.10::** ([#9359](https://github.com/containerd/containerd/pull/9359)) - **vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0** ([#9301](https://github.com/containerd/containerd/pull/9301)) - **Expose usage of cri-api v1alpha2** ([#9336](https://github.com/containerd/containerd/pull/9336)) - **integration: deflake TestIssue9103** ([#9354](https://github.com/containerd/containerd/pull/9354)) - **fix: shimv1 leak issue** ([#9344](https://github.com/containerd/containerd/pull/9344)) - **cri: add deprecation warnings for mirrors, auths, and configs** ([#9327](https://github.com/containerd/containerd/pull/9327)) - **Update hcsshim tag to v0.11.4** ([#9326](https://github.com/containerd/containerd/pull/9326)) - **Expose usage of deprecated features** ([#9315](https://github.com/containerd/containerd/pull/9315)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Kazuyoshi Kato - Wei Fu - Kirtana Ashok - Derek McGowan - Milas Bowman - Sebastiaan van Stijn - ruiwen-zhao ##### Changes <details><summary>28 commits</summary> - \[release/1.7] Add release notes for v1.7.9 ([#9333](https://github.com/containerd/containerd/pull/9333)) - [`4b912af52`](https://github.com/containerd/containerd/commit/4b912af5246060ddfe3a49065f50ebe2cccc1bb3) Add release notes for v1.7.9 - \[release/1.7 backport] update runc binary to v1.1.10 ([#9359](https://github.com/containerd/containerd/pull/9359)) - [`eff291713`](https://github.com/containerd/containerd/commit/eff29171398e411ab054367f6d9f1892b9d70f67) update runc binary to v1.1.10 - \[release/1.7] vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 ([#9301](https://github.com/containerd/containerd/pull/9301)) - [`bd9428ff7`](https://github.com/containerd/containerd/commit/bd9428ff711bda05efecddafe8ca07f568cd994e) vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 - \[release/1.7] Expose usage of cri-api v1alpha2 ([#9336](https://github.com/containerd/containerd/pull/9336)) - [`d62cba40c`](https://github.com/containerd/containerd/commit/d62cba40c833f0dacb58084749105fd6cd61283a) Expose usage of cri-api v1alpha2 - \[release/1.7] integration: deflake TestIssue9103 ([#9354](https://github.com/containerd/containerd/pull/9354)) - [`5dbc258a8`](https://github.com/containerd/containerd/commit/5dbc258a81c236040b7ff27382f812c7179d6cd3) integration: deflake TestIssue9103 - \[release/1.7] fix: shimv1 leak issue ([#9344](https://github.com/containerd/containerd/pull/9344)) - [`449912857`](https://github.com/containerd/containerd/commit/449912857d8191c986537af00325d9999922fce3) fix: shimv1 leak issue - \[release/1.7] cri: add deprecation warnings for mirrors, auths, and configs ([#9327](https://github.com/containerd/containerd/pull/9327)) - [`152c57e91`](https://github.com/containerd/containerd/commit/152c57e918a8374ce2fa20d4eb6ba5896a314529) cri: add deprecation warning for configs - [`689a1036d`](https://github.com/containerd/containerd/commit/689a1036dda32e79643b151f632c8da5bac2f149) cri: add deprecation warning for auths - [`8c38975bf`](https://github.com/containerd/containerd/commit/8c38975bf22f138f00ddf0fafd4803bbade098a3) cri: add deprecation warning for mirrors - [`1fbce40c4`](https://github.com/containerd/containerd/commit/1fbce40c4a7dfad845770580eb146ea2fc64cc46) cri: add ability to emit deprecation warnings - \[release/1.7] Update hcsshim tag to v0.11.4 ([#9326](https://github.com/containerd/containerd/pull/9326)) - [`73f15bdb6`](https://github.com/containerd/containerd/commit/73f15bdb63e25a13bf99f192f39984e22bc7dbc9) Update hcsshim tag to v0.11.4 - \[release/1.7] Expose usage of deprecated features ([#9315](https://github.com/containerd/containerd/pull/9315)) - [`60d48ffea`](https://github.com/containerd/containerd/commit/60d48ffea657d7d7059dcf497c75d3347e1fd1ab) ctr: new deprecations command - [`74a06671a`](https://github.com/containerd/containerd/commit/74a06671ab9396ee94cfee2a588c5d0e170fb698) plugin: record deprecation for dynamic plugins - [`fa5f3c91a`](https://github.com/containerd/containerd/commit/fa5f3c91a946795de0173e10a5a3eba4c18aa4c3) server: add ability to record config deprecations - [`f7880e7f0`](https://github.com/containerd/containerd/commit/f7880e7f0873024d5307a16d4db8c7a2f360ad49) pull: record deprecation warning for schema 1 - [`1dd2f2c02`](https://github.com/containerd/containerd/commit/1dd2f2c028bc0bf9b9301a142e09488815c2fb95) introspection: add support for deprecations - [`aaf000c18`](https://github.com/containerd/containerd/commit/aaf000c18c047895a891a5dfc7127dc87c034fc9) api/introspection: deprecation warnings in server - [`9b7ceee54`](https://github.com/containerd/containerd/commit/9b7ceee540206e6ff6f690676566a73f4f8d443f) warning: new service for deprecations - [`b708f8bfa`](https://github.com/containerd/containerd/commit/b708f8bfadcbf95e2acba22ffdeb7d8f8a974151) deprecation: new package for deprecations </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.1 -> v0.11.4 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/go-logr/logr** v1.2.3 -> v1.2.4 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.7.0 -> v2.16.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.45.0 - **go.opentelemetry.io/otel** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.19.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 Previous release can be found at [v1.7.8](https://github.com/containerd/containerd/releases/tag/v1.7.8) ### [`v1.7.8`](https://github.com/containerd/containerd/releases/tag/v1.7.8): containerd 1.7.8 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.7...v1.7.8) Welcome to the v1.7.8 release of containerd! The eighth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix ambiguous TLS fallback** ([#9299](https://github.com/containerd/containerd/pull/9299)) - **Update Go to 1.20.10** ([#9265](https://github.com/containerd/containerd/pull/9265)) - **Add a new image label on converted schema 1 images** ([#9252](https://github.com/containerd/containerd/pull/9252)) - **Fix handling for missing basic auth credentials** ([#9235](https://github.com/containerd/containerd/pull/9235)) - **Fix potential deadlock in create handler for containerd-shim-runc-v2** ([#9209](https://github.com/containerd/containerd/pull/9209)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Phil Estes - Chen Yiyang - Wei Fu - Akihiro Suda - Maksym Pavlenko - Marat Radchenko - Milas Bowman - Qiutong Song - Samuel Karp ##### Changes <details><summary>27 commits</summary> - \[release/1.7] Prepare release notes for v1.7.8 ([#9278](https://github.com/containerd/containerd/pull/9278)) - [`48dbdf871`](https://github.com/containerd/containerd/commit/48dbdf871b43ca94f243779bd641fcda49c94f66) Prepare release notes for v1.7.8 - \[release/1.7] Fix ambiguous tls fallback ([#9299](https://github.com/containerd/containerd/pull/9299)) - [`68abc543b`](https://github.com/containerd/containerd/commit/68abc543b1eb4a8196842de6c83115ba4e5698b0) Check scheme and host of request on push redirect - [`35c7634e3`](https://github.com/containerd/containerd/commit/35c7634e33651053a934bbcb831c90ddc65ede2e) Avoid TLS fallback when protocol is not ambiguous - \[release/1.7] vendor: google.golang.org/grpc v1.58.3 ([#9281](https://github.com/containerd/containerd/pull/9281)) - [`f36948cad`](https://github.com/containerd/containerd/commit/f36948cad712b9f813518ceaa5ac5441b6e10347) vendor: gRPC v1.58.3 - \[release/1.7 backport] vendor: golang.org/x/net v0.17.0 ([#9276](https://github.com/containerd/containerd/pull/9276)) - [`c67a53190`](https://github.com/containerd/containerd/commit/c67a5319050614a947c9e5c133e44164e487a223) vendor: golang.org/x/net v0.17.0 - [`71f4b36ca`](https://github.com/containerd/containerd/commit/71f4b36ca7a420d53a9f6c1b3f846a4a94b739de) vendor: golang.org/x/text v0.13.0 - [`a7b3b7090`](https://github.com/containerd/containerd/commit/a7b3b70909a99f47845b74a3dbe58032c17bd1e0) vendor: golang.org/x/sys v0.13.0 - \[release/1.7] vendor: google.golang.org/grpc v1.56.3 ([#9248](https://github.com/containerd/containerd/pull/9248)) - [`26736d6e1`](https://github.com/containerd/containerd/commit/26736d6e1af5f45386ae9382a6a951aee33c9ca7) vendor: google.golang.org/grpc v1.56.3 - [`54a69a6e4`](https://github.com/containerd/containerd/commit/54a69a6e448d61fe88ad90bd476f8f65cf21277f) vendor: golang.org/x/oauth2 v0.7.0 - [`ac15a7f5b`](https://github.com/containerd/containerd/commit/ac15a7f5b9da1b45ffc66bb8ccdcaed2f571c73a) vendor: google.golang.org/protobuf v1.30.0 - \[release/1.7] update to go1.20.10, test go1.21.3 ([#9265](https://github.com/containerd/containerd/pull/9265)) - [`2479c3321`](https://github.com/containerd/containerd/commit/2479c332173014f3086d9b016214c536a7c03f39) \[release/1.7] update to go1.20.10, test go1.21.3 - [`11f40e9d8`](https://github.com/containerd/containerd/commit/11f40e9d80409b8dfa9dcb3eb81934e08384dd8e) \[release/1.7] update to go1.20.9, test go1.21.2 - \[release/1.7] Add a new image label if it is docker schema 1 ([#9252](https://github.com/containerd/containerd/pull/9252)) - [`cac1bab79`](https://github.com/containerd/containerd/commit/cac1bab797ed8d1245bff49aa90e6c80d8714899) Add a new image label if it is docker schema 1 - \[release/1.7] remotes: add handling for missing basic auth credentials ([#9235](https://github.com/containerd/containerd/pull/9235)) - [`6cd2cc4a8`](https://github.com/containerd/containerd/commit/6cd2cc4a8f035162e06d5ffbf868c540e7eb40eb) remotes: add handling for missing basic auth credentials - \[release/1.7 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#9209](https://github.com/containerd/containerd/pull/9209)) - [`d0a1fedb5`](https://github.com/containerd/containerd/commit/d0a1fedb5a4828daddff330a345780d0222e47e8) \*: add runc-fp as runc wrapper to inject failpoint - [`04491240a`](https://github.com/containerd/containerd/commit/04491240af1766337e0fbb5145405f74a39f5ad5) containerd-shim-runc-v2: avoid potential deadlock in create handler - [`6982a0df5`](https://github.com/containerd/containerd/commit/6982a0df5bc0d31ae82f0810518550006bf90931) containerd-shim-runc-v2: remove unnecessary `s.getContainer()` - [`0e2320398`](https://github.com/containerd/containerd/commit/0e2320398f0fb9974232ef68ea70625645f42661) Uncopypaste parsing of OCI Bundle spec file </details> ##### Dependency Changes - **golang.org/x/crypto** v0.11.0 -> v0.14.0 - **golang.org/x/mod** v0.9.0 -> v0.11.0 - **golang.org/x/net** v0.13.0 -> v0.17.0 - **golang.org/x/oauth2** v0.4.0 -> v0.10.0 - **golang.org/x/sync** v0.1.0 -> v0.3.0 - **golang.org/x/sys** v0.10.0 -> v0.13.0 - **golang.org/x/term** v0.10.0 -> v0.13.0 - **golang.org/x/text** v0.11.0 -> v0.13.0 - **golang.org/x/tools** v0.7.0 -> v0.10.0 - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4) -> [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) - **google.golang.org/genproto/googleapis/api** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.58.3 - **google.golang.org/protobuf** v1.29.1 -> v1.31.0 Previous release can be found at [v1.7.7](https://github.com/containerd/containerd/releases/tag/v1.7.7) ### [`v1.7.7`](https://github.com/containerd/containerd/releases/tag/v1.7.7): containerd 1.7.7 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.6...v1.7.7) Welcome to the v1.7.7 release of containerd! The seventh patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Require plugins to succeed after registering readiness** ([#9165](https://github.com/containerd/containerd/pull/9165)) - **Handle unexpected shim kill events** ([#9132](https://github.com/containerd/containerd/pull/9132)) - **Build binaries with Go 1.21.1** ([#9167](https://github.com/containerd/containerd/pull/9167)) - **cri: Stop recommending disable_cgroup** ([#9168](https://github.com/containerd/containerd/pull/9168)) - **remotes/docker: Fix MountedFrom prefixed with target repository** ([#9193](https://github.com/containerd/containerd/pull/9193)) - **remotes: always try to establish tls connection when tls configured** ([#9188](https://github.com/containerd/containerd/pull/9188)) - **NRI: Add support for rlimits** ([#48](https://github.com/containerd/nri/pull/48)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Samuel Karp - Krisztian Litkey - Wei Fu - Phil Estes - Sebastiaan van Stijn - Iceber Gu - Mike Brown - Akihiro Suda - Paweł Gronowski - Steve Griffith - Aditya Ramani - Austin Vazquez - Danny Canter - James Sturtevant - Kern Walster - ZP-AlwaysWin ##### Changes <details><summary>31 commits</summary> - \[release/1.7] Prepare release notes for v1.7.7 ([#9194](https://github.com/containerd/containerd/pull/9194)) - [`a34fa5681`](https://github.com/containerd/containerd/commit/a34fa5681a8cf8a250cdb638e29f54be44b7554f) Prepare release notes for v1.7.7 - \[release/1.7] Allow for images with artifacts to pull ([#9149](https://github.com/containerd/containerd/pull/9149)) - [`6ca0aebf0`](https://github.com/containerd/containerd/commit/6ca0aebf0c40c3a2ea59c0ede440f9b6be5d1ded) Allow for images with artifacts to pull - \[release 1.7] remotes/docker: Fix MountedFrom prefixed with target repository ([#9193](https://github.com/containerd/containerd/pull/9193)) - [`7df492a95`](https://github.com/containerd/containerd/commit/7df492a95c7283a3f402b5a0e96030e42724d9d0) remotes/docker: Fix MountedFrom prefixed with target repository - \[release/1.7] Update x/net to 0.13 ([#9134](https://github.com/containerd/containerd/pull/9134)) - [`b3db314a5`](https://github.com/containerd/containerd/commit/b3db314a58311b3e754906baf356ec83d05015d6) Bump x/net to 0.13 - \[release/1.7] remotes: always try to establish tls connection when tls configured ([#9188](https://github.com/containerd/containerd/pull/9188)) - [`7779ce64e`](https://github.com/containerd/containerd/commit/7779ce64e563f366199e7b22972ca18ec060b944) remotes: always try to establish tls connection when tls configured - \[release/1.7] cri: stop recommending disable_cgroup ([#9168](https://github.com/containerd/containerd/pull/9168)) - [`6013b5e03`](https://github.com/containerd/containerd/commit/6013b5e03ebadfc70eb711118a05e24891f8e2dc) cri: stop recommending disable_cgroup - \[release/1.7] Require plugins to succeed after registering readiness ([#9165](https://github.com/containerd/containerd/pull/9165)) - [`a83c66813`](https://github.com/containerd/containerd/commit/a83c66813f908c861ad3d908755d4c4b0a86778c) Require plugins to succeed after registering readiness - [`171d76849`](https://github.com/containerd/containerd/commit/171d76849393a3efa3b244f84c7dceff8c7d5026) cri: call RegisterReadiness after NewCRIService - \[release/1.7] Handle unexpected shim kill events ([#9132](https://github.com/containerd/containerd/pull/9132)) - [`3d27bc738`](https://github.com/containerd/containerd/commit/3d27bc738a6e6762a9c240f420491632e3eaae3d) Handle unexpected shim kill events - \[release/1.7] Build binaries with 1.21.1 ([#9167](https://github.com/containerd/containerd/pull/9167)) - [`4ffa3ed29`](https://github.com/containerd/containerd/commit/4ffa3ed2940b122cf5191746edeb30e177ea9820) Build binaries with 1.21.1 - \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 ([#9127](https://github.com/containerd/containerd/pull/9127)) - [`5756f6064`](https://github.com/containerd/containerd/commit/5756f6064b89c4c403439b49353d5dd035ba8c4f) \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 - \[release/1.7 backport] alias log package to github.com/containerd/log v0.1.0 ([#9106](https://github.com/containerd/containerd/pull/9106)) - [`09633b539`](https://github.com/containerd/containerd/commit/09633b539fad441c730569050e66a87d713a14a9) deprecate logs package, but disable linter (for transitioning) - [`cb201519f`](https://github.com/containerd/containerd/commit/cb201519f8757f4272d88f3a785a4cb56215095c) alias log package to github.com/containerd/log v0.1.0 - [`a5024e6dd`](https://github.com/containerd/containerd/commit/a5024e6dd9f797051a465516066b248294c434e1) vendor: github.com/stretchr/testify v1.8.4 - [`7bd976af3`](https://github.com/containerd/containerd/commit/7bd976af3fe068a79fec23d9fc05a69e26aa18c3) vendor: github.com/sirupsen/logrus v1.9.3 - \[release/1.7] remotes/docker: Add MountedFrom and Exists push status ([#9097](https://github.com/containerd/containerd/pull/9097)) - [`8cd2d33c2`](https://github.com/containerd/containerd/commit/8cd2d33c2aaa730717be1b75a4d2f3629e493c55) \[release/1.7] remotes/docker: Add MountedFrom and Exists push status - \[release/1.7] vendor: update github.com/containerd/nri@v0.4.0 ([#9099](https://github.com/containerd/containerd/pull/9099)) - [`3ca015e55`](https://github.com/containerd/containerd/commit/3ca015e55672c128d9f021d14f49ef96c247cd5b) nri: update mock plugin handlers - [`4cd208c1f`](https://github.com/containerd/containerd/commit/4cd208c1f2d80d863776c1947881d5283f3b25fc) vendor: update github.com/containerd/nri@v0.4.0 </details> ##### Changes from containerd/log <details><summary>9 commits</summary> - Update golangci to 1.49 ([#1](https://github.com/containerd/log/pull/1)) - [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49 - [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README - [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details - [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow - [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module - [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest - [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README - [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file </details> ##### Changes from containerd/nri <details><summary>35 commits</summary> - releases: update note about 0.4.0 ([#50](https://github.com/containerd/nri/pull/50)) - [`5f13915`](https://github.com/containerd/nri/commit/5f139156d546cb68a8495c9c36cfc6a574ba3a55) releases: update note about 0.4.0 - Add support for rlimits ([#48](https://github.com/containerd/nri/pull/48)) - [`5ecea04`](https://github.com/containerd/nri/commit/5ecea042d15be1ba5e0b988a40a4c90fb2210a7f) ulimit-adjuster: add validation for hard limits - [`db3de10`](https://github.com/containerd/nri/commit/db3de101ccaba370f9238188da0d8e05039efdee) test: exclude ulimit-adjuster from ginkgo - [`f0deb59`](https://github.com/containerd/nri/commit/f0deb59b4fbf7bcc62597a1299f4544638daa81a) ulimit-adjuster: new sample plugin - [`d2dd708`](https://github.com/containerd/nri/commit/d2dd708de134cfe0617821142557b3e55b0bdf64) Add support for rlimits - [`efaf36e`](https://github.com/containerd/nri/commit/efaf36e49f30c4ca0bfb0bba2c412e87241674c1) api: add POSIXRlimit type - .github: add test build to CI workflow. ([#47](https://github.com/containerd/nri/pull/47)) - [`3f092c2`](https://github.com/containerd/nri/commit/3f092c29cf62a77c9eadaa9d7ff9ac28ece3d180) .github: add test build to CI workflow. - stub: pass context to plugins, pass updated resources to UpdateContainers. ([#40](https://github.com/containerd/nri/pull/40)) - [`01d5f14`](https://github.com/containerd/nri/commit/01d5f14d96708830f232b2744742fc14763816b1) Add a note about NRI API stability and release notes. - [`ea9976d`](https://github.com/containerd/nri/commit/ea9976d8dae3a6e630da76a26dbef44b5c8a3de3) adaptation: add UpdateContainer tests. - [`d042d24`](https://github.com/containerd/nri/commit/d042d24bc4a96fa5fcf1aa0d2195ff75833d7d4e) stub: fix plugin UpdateContainerInterface. - [`f5d0f51`](https://github.com/containerd/nri/commit/f5d0f513608b2afc3fcc5e6bdf76b10b3004c14c) plugins: update plugins for stub changes. - [`b4bd301`](https://github.com/containerd/nri/commit/b4bd301a1ead4d277af088e321c05e76102c8769) adaptation: update tests with stub changes. - [`9d86150`](https://github.com/containerd/nri/commit/9d86150fce4318491481e354d0f34c6b76e8806e) stub: pass context to plugin event handlers. - Updated the OCI Hook Injector README to resovle broken links to the p… ([#34](https://github.com/containerd/nri/pull/34)) - [`5eee915`](https://github.com/containerd/nri/commit/5eee9158f7fab6294bdbc5c76b2793f2dbe9faec) removed link - [`c783fc7`](https://github.com/containerd/nri/commit/c783fc76a80b315253d407f1e74ff9263cf5ce21) Resolves broken podman links and adds details to help better guide people in testing. - Fix ParseEventMask to produce proper masks for 'pod' and 'container' shorthand event notations. ([#39](https://github.com/containerd/nri/pull/39)) - [`da291a6`](https://github.com/containerd/nri/commit/da291a66180b6989a6dcc6bcffcc3257c185f8f8) Fix ParseEventMask to produce proper masks - fix the `NRI_PLUGIN_NAME` env value when launching a pre-installed plugin ([#42](https://github.com/containerd/nri/pull/42)) - [`4a4cea6`](https://github.com/containerd/nri/commit/4a4cea6142a5a34301b796a36355e3b38bb98522) fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin - [`a67478e`](https://github.com/containerd/nri/commit/a67478ed7c0b38454f3ef4e86f36d870c365c0d5) stub: update setIdentify to ensureIdentify - update module name of the logger plugin ([#41](https://github.com/containerd/nri/pull/41)) - [`841f5ed`](https://github.com/containerd/nri/commit/841f5ed96067b8d737e39e9df16c55231c350d1d) update module name of the logger plugin - Add gitignore for build artifacts ([#32](https://github.com/containerd/nri/pull/32)) - [`8d9c64d`](https://github.com/containerd/nri/commit/8d9c64def7f2ba89a065990e89c2bf39f8046bac) Add gitignore for build artifacts - Makefile: fix 'install-\*' targets. ([#38](https://github.com/containerd/nri/pull/38)) - [`c03d1be`](https://github.com/containerd/nri/commit/c03d1bee1efca43e4b59395622510844b36cd26c) Makefile: fix 'install-\*' targets. - docs: add a chapter about security considerations. ([#36](https://github.com/containerd/nri/pull/36)) - [`ab28e71`](https://github.com/containerd/nri/commit/ab28e7136bbf3c41c7344b0430087c1aed47b05a) docs: add a chapter about security considerations. - api: initialize OCI LinuxMemory resources to empty. ([#37](https://github.com/containerd/nri/pull/37)) - [`2862d98`](https://github.com/containerd/nri/commit/2862d98443ccdb1162963ee979639fd973ddc37b) api: initialize OCI LinuxMemory resources to empty. </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.0 -> v0.11.1 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nri** v0.3.0 -> v0.4.0 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/stretchr/testify** v1.8.2 -> v1.8.4 - **golang.org/x/crypto** v0.1.0 -> v0.11.0 - **golang.org/x/net** v0.8.0 -> v0.13.0 - **golang.org/x/sys** v0.7.0 -> v0.10.0 - **golang.org/x/term** v0.6.0 -> v0.10.0 - **golang.org/x/text** v0.8.0 -> v0.11.0 Previous release can be found at [v1.7.6](https://github.com/containerd/containerd/releases/tag/v1.7.6) ##### Which file should I download? - `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04). - `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent. - `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) - `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases) and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. ### [`v1.7.6`](https://github.com/containerd/containerd/releases/tag/v1.7.6): containerd 1.7.6 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.5...v1.7.6) Welcome to the v1.7.6 release of containerd! The sixth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix log package for clients overwriting the global logger** ([#9032](https://github.com/containerd/containerd/pull/9032)) - **Fix blockfile snapshotter copy on Darwin** ([#9047](https://github.com/containerd/containerd/pull/9047)) - **Add support for Linux usernames on non-Linux platforms** ([#9015](https://github.com/containerd/containerd/pull/9015)) - **Update Windows platform matcher to invoke stable ABI compability function** ([#9069](https://github.com/containerd/containerd/pull/9069)) - **Update Golang to 1.20.8** ([#9074](https://github.com/containerd/containerd/pull/9074)) - **Update push to inherit distribution sources from parent** ([#9084](https://github.com/containerd/containerd/pull/9084)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Kirtana Ashok - Phil Estes - Akihiro Suda - Danny Canter - Sebastiaan van Stijn - Akhil Mohan - Maksym Pavlenko - Samuel Karp - Wei Fu ##### Changes <details><summary>20 commits</summary> - \[release/1.7] Prepare release notes for 1.7.6 ([#9085](https://github.com/containerd/containerd/pull/9085)) - [`3e09c65b2`](https://github.com/containerd/containerd/commit/3e09c65b21bdda743f5f5de9fb392a25f6a342be) Prepare release notes for v1.7.6 - \[release/1.7] Invoke Stable ABI compatibility function in windows platform matcher ([#9069](https://github.com/containerd/containerd/pull/9069)) - [`c7a35ccdc`](https://github.com/containerd/containerd/commit/c7a35ccdcc674e42c2364f062890b1e40507f543) Fix transfer service dependencies: - [`38d4e506d`](https://github.com/containerd/containerd/commit/38d4e506dd261b48bffbdd04e775d2b687290e2f) Invoke Stable ABI compatibility function in windows platform matcher - \[release/1.7] push: inherit distribution sources from parent ([#9084](https://github.com/containerd/containerd/pull/9084)) - [`5ebf05d97`](https://github.com/containerd/containerd/commit/5ebf05d97e2ef1b09d427118911a89c55059b0fe) push: inherit distribution sources from parent - [`d206896dd`](https://github.com/containerd/containerd/commit/d206896ddd965ab72605aca4337293c056fdd21b) content: add InfoProvider interface - \[release/1.7] update to go1.20.8 ([#9074](https://github.com/containerd/containerd/pull/9074)) - [`423693d7b`](https://github.com/containerd/containerd/commit/423693d7b481e4bd8adb7b0ed76cec0b2cb96724) \[release/1.7] update to go1.20.8 - \[release/1.7] Update hcsshim tag to v0.11.0 ([#9063](https://github.com/containerd/containerd/pull/9063)) - [`ddffc7c9a`](https://github.com/containerd/containerd/commit/ddffc7c9a1e5b6d73953a7f5f8a04170dc45c62a) Update hcsshim tag to v0.11.0 - \[release/1.7] CRI: Support Linux usernames for !linux platforms ([#9015](https://github.com/containerd/containerd/pull/9015)) - [`b449440a4`](https://github.com/containerd/containerd/commit/b449440a40896d5c8f78460354eb2f5506432180) CRI: Support Linux usernames for !linux platforms - \[release/1.7] Blockfile: Enlighten blockfile copy on Darwin ([#9047](https://github.com/containerd/containerd/pull/9047)) - [`ed4bac11e`](https://github.com/containerd/containerd/commit/ed4bac11e5a60aaa3283f998313522d19d54c7f8) Blockfile: Enlighten blockfile copy on Darwin - \[release/1.7 backport] Revert "log: define G() as a function instead of a variable" ([#9032](https://github.com/containerd/containerd/pull/9032)) - [`4d1cfbbdd`](https://github.com/containerd/containerd/commit/4d1cfbbddb57ec10a3e55f71ae5a590091b6e3ab) Revert "log: define G() as a function instead of a variable" - \[release/1.7 backport] make repositories of install dependencies configurable ([#9025](https://github.com/containerd/containerd/pull/9025)) - [`a34e93241`](https://github.com/containerd/containerd/commit/a34e93241254112f8bab49a27f5aeee1f2317d9f) make repositories of install dependencies configurable </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.10.0-rc.8 -> v0.11.0 Previous release can be found at [v1.7.5](https://github.com/containerd/containerd/releases/tag/v1.7.5) ### [`v1.7.5`](https://github.com/containerd/containerd/releases/tag/v1.7.5): containerd 1.7.5 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.4...v1.7.5) Welcome to the v1.7.5 release of containerd! The fifth patch release for containerd 1.7 fixes a versioning issue from the previous release and includes some internal logging API changes. See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Akihiro Suda - Antonio Huete Jimenez - Phil Estes - Samuel Karp ##### Changes <details><summary>18 commits</summary> - \[release/1.7] Prepare release notes for 1.7.5 ([#9010](https://github.com/containerd/containerd/pull/9010)) - [`93b23eb10`](https://github.com/containerd/containerd/commit/93b23eb106f416179ea2fa9c0db621a9fa19c8e9) Prepare release notes for v1.7.5 - [`fb1292c8d`](https://github.com/containerd/containerd/commit/fb1292c8de8b4ca8b273f9c500ef5da0f541c4fa) Bump version to v1.7.4 - \[release/1.7 backport] go.mod: github.com/containerd/continuity v0.4.2 ([#9012](https://github.com/containerd/containerd/pull/9012)) - [`503ab21bf`](https://github.com/containerd/containerd/commit/503ab21bfc4c5be65cba0b6b58aa2968a44bbe65) go.mod: github.com/containerd/continuity v0.4.2 - \[release/1.7 backport] log: cleanups and improvements to decouple more from logrus ([#9001](https://github.com/containerd/containerd/pull/9001)) - [`2a9ae3c51`](https://github.com/containerd/containerd/commit/2a9ae3c51132080940d40343175e0d3eb2a111fc) log: swap logrus functions with their equivalent on default logger - [`01445bb73`](https://github.com/containerd/containerd/commit/01445bb7386b98271b383b76e3d9007dabee03e8) log: add package documentation and summary of package's purpose - [`932795f45`](https://github.com/containerd/containerd/commit/932795f4526ad4dd5d76e2d9b4c1daeaeab19172) log: make Fields type a generic map\[string]any - [`707ca94d8`](https://github.com/containerd/containerd/commit/707ca94d890dbea1be767312483522a98f6c5969) log: add log.Entry type - [`0a79e67e4`](https://github.com/containerd/containerd/commit/0a79e67e4f7bff1128c81ee14a8b2a74a8c55c51) log: define OutputFormat type - [`dbbe28b7d`](https://github.com/containerd/containerd/commit/dbbe28b7d1cc6137ed9fff1bcd8ed5e3ec442059) log: define G() as a function instead of a variable - [`93b6cb784`](https://github.com/containerd/containerd/commit/93b6cb78456b642a5470b24e9ec1fca17ec12e49) log: add all log-levels that are accepted - [`e8e086e02`](https://github.com/containerd/containerd/commit/e8e086e02bbcb078297302bc77a126647606c898) log: group "enum" consts and touch-up docs - [`7aa4f8fdc`](https://github.com/containerd/containerd/commit/7aa4f8fdccea58b2816fe7fe818653100cadfb98) log: WithLogger: remove redundant intermediate var - [`bfdce4ce4`](https://github.com/containerd/containerd/commit/bfdce4ce4bc922ab4990a71f4a5f31a8e2c0224d) log: SetFormat: include returns in switch - [`6621e0888`](https://github.com/containerd/containerd/commit/6621e08887d94b90d3c9b3756acff02573cdc147) log: remove testify dependency - [`df76aaede`](https://github.com/containerd/containerd/commit/df76aaede4b741e9436ced76dea71946d8f29684) removes/docker: remove unnecessary conversion (unconvert) </details> ##### Changes from containerd/continuity <details><summary>2 commits</summary> - Add initial DragonFly BSD support ([#230](https://github.com/containerd/continuity/pull/230)) - [`bcc6e25`](https://github.com/containerd/continuity/commit/bcc6e254708e0ace144a3d590a631db61da0a659) dragonfly: Initial porting work </details> ##### Dependency Changes - **github.com/containerd/continuity** [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381) -> v0.4.2 Previous release can be found at [v1.7.4](https://github.com/containerd/containerd/releases/tag/v1.7.4) ### [`v1.7.4`](https://github.com/containerd/containerd/releases/tag/v1.7.4): containerd 1.7.4 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.4) Welcome to the v1.7.4 release of containerd! The fourth patch release for containerd 1.7 contains remote differ plugin support, a new block file based snapshotter, and various fixes and updates. ##### Notable Updates - **Add blockfile snapshotter** ([#8986](https://github.com/containerd/containerd/pull/8986)) - **Add remote/proxy differ** ([#8985](https://github.com/containerd/containerd/pull/8985)) - **Update runc binary to v1.1.9** ([#8965](https://github.com/containerd/containerd/pull/8965)) - **Cri: Don't use rel path for image volumes** ([#8926](https://github.com/containerd/containerd/pull/8926)) - **Allow attaching to any combination of stdin/out/err** ([#8910](https://github.com/containerd/containerd/pull/8910)) - **Fix ro mount option being passed** ([#8887](https://github.com/containerd/containerd/pull/8887)) - **Fix leaked shim caused by high IO pressure** ([#9003](https://github.com/containerd/containerd/pull/9003)) - **Add configurable mount options to overlay snapshotter** ([#9005](https://github.com/containerd/containerd/pull/9005)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Derek McGowan - Akihiro Suda - Kazuyoshi Kato - Cardy.Tang - Phil Estes - Ben Foster - Danny Canter - Hsing-Yu (David) Chen - James Jenkins - James Sturtevant - Maksym Pavlenko - Rodrigo Campos - Sebastiaan van Stijn - rongfu.leng ##### Changes <details><summary>43 commits</summary> - \[release/1.7] Prepare release notes for v1.7.4 ([#9000](https://github.com/containerd/containerd/pull/9000)) - [`7a0cae3ca`](https://github.com/containerd/containerd/commit/7a0cae3ca1acf9a5ab4df4f77ee1b7cc6c3306ce) \[release/1.7] Prepare release notes for v1.7.4 - \[releases/1.7] \*: fix leaked shim caused by high IO pressure ([#9003](https://github.com/containerd/containerd/pull/9003)) - [`537d7526e`](https://github.com/containerd/containerd/commit/537d7526e44bcefe509614abc04930345fbdb941) integration: issue7496 case should work for runc.v2 only - [`5add172be`](https://github.com/containerd/containerd/commit/5add172be5d27d1f98b430a6775da0256afc1e82) Vagrantfile: add strace tool - [`207e28f36`](https://github.com/containerd/containerd/commit/207e28f36dd9daa7ef412c0c2b7b32af3356a2da) integration: add ShouldRetryShutdown case based on [#7496](https://github.com/containerd/containerd/issues/7496) - [`b4f480fb3`](https://github.com/containerd/containerd/commit/b4f480fb30f71ec15055cab0421aa16258ac4b58) pkg/cri/sbserver: fix leaked shim issue for podsandbox mode - [`88ff575c5`](https://github.com/containerd/containerd/commit/88ff575c5cecf81ea7ef78079941521123b451de) pkg/cri/server: fix leaked shim issue - [`9f61dfb7c`](https://github.com/containerd/containerd/commit/9f61dfb7c50dea7bdf4326cf7b04a2ec088b81a5) integration: add case to reproduce [#7496](https://github.com/containerd/containerd/issues/7496) - \[release/1.7] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#9005](https://github.com/containerd/containerd/pull/9005)) - [`0f4885c16`](https://github.com/containerd/containerd/commit/0f4885c1660d2b1a855e79751daf5367fc679079) Add configurable mount options to overlay - [`8804a27d7`](https://github.com/containerd/containerd/commit/8804a27d72275497e4a590b92832d4f1076b43dc) feat: make overlay sync removal configurable - \[release/1.7] Remove temporary replace ([#8997](https://github.com/containerd/containerd/pull/8997)) - [`1c2dd5198`](https://github.com/containerd/containerd/commit/1c2dd5198e5d3d6d111d37a68ad67ae37adf6101) Remove temporary replace - \[release/1.7] Add blockfile snapshotter ([#8986](https://github.com/containerd/containerd/pull/8986)) - [`2bf6bd143`](https://github.com/containerd/containerd/commit/2bf6bd1431512c59f91318e817ee83c4adfcd282) vendor: update github.com/containerd/continuity - [`30a163086`](https://github.com/containerd/containerd/commit/30a163086959b89459b8193884f669561bb56f9e) snapshots|pkg: umount without DETACH and nosync after umount - [`c9eebe3d1`](https://github.com/containerd/containerd/commit/c9eebe3d1151ba3e523c2f0473e61132edf95a72) mount: support direct-io for loopback device - [`1c2977db0`](https://github.com/containerd/containerd/commit/1c2977db01efdd4a5aaff79d72d7e21b19d0f59a) Modify loopback size - [`cf9c78d2d`](https://github.com/containerd/containerd/commit/cf9c78d2d9eb7c3d66d1a94768d63b4f8482c4b2) snapshots/blockfile: fix lint issue - [`b823b4f54`](https://github.com/containerd/containerd/commit/b823b4f546cec4a9d92f9a8ed5b606cbffa287f9) snapshots/blockfile: deflaky the testsuite - [`6daeceb11`](https://github.com/containerd/containerd/commit/6daeceb1168303548ddc0d1af420813ad8475ceb) snapshots/blockfile: use passed in dst in scratchGenerator - [`99b61aee3`](https://github.com/containerd/containerd/commit/99b61aee341fa89370524e49b42212cea79d9fbc) snapshots/blockfile: use loop if options is empty - [`fd39769ac`](https://github.com/containerd/containerd/commit/fd39769ac70a382a0b4459080cb2f10c40842182) Add mount options to blockfile snapshotter - [`8d732c6c2`](https://github.com/containerd/containerd/commit/8d732c6c22d6e723f65be957427b16d48e1d488d) Add sync before unmount on snapshotter layer test - [`8472a407e`](https://github.com/containerd/containerd/commit/8472a407e0eb91f4e10d9e446bdfd439d11cfd55) Add blockfile snapshotter to snapshotters doc - [`6740d77ca`](https://github.com/containerd/containerd/commit/6740d77cae44522820e7575eb9d105e6c5b8d56b) Add blockfile as a builtin - [`07cc24b32`](https://github.com/containerd/containerd/commit/07cc24b32a319fb72622453f40ee8c338062df95) Add blockfile snapshotter - \[release/1.7] Backport remote/proxy differ ([#8985](https://github.com/containerd/containerd/pull/8985)) - [`32e3b76ee`](https://github.com/containerd/containerd/commit/32e3b76ee70fea42234b95ef01f78a13ac7c5c1d) Add diffservice to contrib - [`661e505c8`](https://github.com/containerd/containerd/commit/661e505c8239e97710bac220edf735f06027dbda) Add proxy differ - \[release/1.7 backport] update runc binary to v1.1.9 ([#8965](https://github.com/containerd/containerd/pull/8965)) - [`af79c07fd`](https://github.com/containerd/containerd/commit/af79c07fd69cd20b97b37a903ee6c6957e4628ec) update runc binary to v1.1.9 - \[release/1.7] Port fix for Linux Integration test failure ([#8950](https://github.com/containerd/containerd/pull/8950)) - [`c0b1c8f74`](https://github.com/containerd/containerd/commit/c0b1c8f74aa5616c5e27845d18d4dca5ab30f9fd) fix ci Linux Integration test fail - \[release/1.7] cri: Don't use rel path for image volumes ([#8926](https://github.com/containerd/containerd/pull/8926)) - [`4e97a115f`](https://github.com/containerd/containerd/commit/4e97a115f702bd7de43ee17442a96f3537007a07) cri: Don't use rel path for image volumes - \[release/1.7] fix: allow attaching to any combination of stdin/stdout/stderr ([#8910](https://github.com/containerd/containerd/pull/8910)) - [`34a5d0330`](https://github.com/containerd/containerd/commit/34a5d033007eaae0530a89470407fbe920eec033) fix: allow attaching to any combination of stdin/stdout/stderr - \[release/1.7 backport] update to go1.20.7, go1.19.12 ([#8906](https://github.com/containerd/containerd/pull/8906)) - [`c5e7b84c0`](https://github.com/containerd/containerd/commit/c5e7b84c08b507f93b2df6d393eede3ff75f4e2f) update to go1.20.7, go1.19.12 - \[release/1.7] cherry-pick: Fix ro mount option being passed ([#8887](https://github.com/containerd/containerd/pull/8887)) - [`2eaeb3205`](https://github.com/containerd/containerd/commit/2eaeb3205a1bd61b385a259d43f29ccc09993e18) Fix ro mount option being passed </details> ##### Changes from containerd/continuity <details><summary>4 commits</summary> - fs: use io.Copy because go supports CopyFileRange ([#227](https://github.com/containerd/continuity/pull/227)) - [`4b8bec5`](https://github.com/containerd/continuity/commit/4b8bec5682b6d50a6fba026303fb42a6369851a6) fs: use io.Copy because go supports CopyFileRange - fs/fstest: CreateFile should use sync ([#228](https://github.com/containerd/continuity/pull/228)) - [`3fa7d7a`](https://github.com/containerd/continuity/commit/3fa7d7a5ec66805f9f099001d3fe83f11fb80c0c) fs/fstest: CreateFile should use sync </details> ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf) -> [`ced1acd`](https://github.com/containerd/containerd/commit/ced1acdcaa24) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) -> [`8075edf`](https://github.com/containerd/containerd/commit/8075edf89bb0) - **github.com/containerd/continuity** v0.4.1 -> [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381) Previous release can be found at [v1.7.3](https://github.com/containerd/containerd/releases/tag/v1.7.3) ### [`v1.7.3`](https://github.com/containerd/containerd/releases/tag/v1.7.3): containerd 1.7.3 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.2...v1.7.3) Welcome to the v1.7.3 release of containerd! The third patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **RunC: Update runc binary to v1.1.8** ([#8843](https://github.com/containerd/containerd/pull/8843)) - **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8824](https://github.com/containerd/containerd/pull/8824)) - **CRI: write generated CNI config atomically** ([#8825](https://github.com/containerd/containerd/pull/8825)) - **Port-Forward: Correctly handle known errors** ([#8806](https://github.com/containerd/containerd/pull/8806)) - **Resolve docker.NewResolver race condition** ([#8799](https://github.com/containerd/containerd/pull/8799)) - **Fix net.ipv4.ping_group_range with userns** ([#8786](https://github.com/containerd/containerd/pull/8786)) - **Runtime/V2/RunC: handle early exits w/o big locks** ([#8712](https://github.com/containerd/containerd/pull/8712)) - **SecComp: always allow name_to_handle_at** ([#8753](https://github.com/containerd/containerd/pull/8753)) - **CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running** ([#8654](https://github.com/containerd/containerd/pull/8654)) - **Task: don't `close()` io before `cancel()`** ([#8658](https://github.com/containerd/containerd/pull/8658)) - **Remove CNI conf_template deprecation** ([#8638](https://github.com/containerd/containerd/pull/8638)) - **Fix issue for HPC pod metrics** ([#8634](https://github.com/containerd/containerd/pull/8634)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Phil Estes - Sebastiaan van Stijn - Wei Fu - Derek McGowan - Kazuyoshi Kato - Austin Vazquez - Samuel Karp - Shingo Omura - Jin Dong - Maksym Pavlenko - Aditi Sharma - Danny Canter - James Sturtevant - Laura Brehm - Rodrigo Campos - Akhil Mohan - Andrey Epifanov - Bjorn Neergaard - Cory Snider - Madhav Jivrajani - Mahamed Ali - Priyanka Saggu - Qasim Sarfraz - wangxiang - zounengren ##### Changes <details><summary>63 commits</summary> - \[release/1.7] Prepare release notes for v1.7.3 ([#8871](https://github.com/containerd/containerd/pull/8871)) - [`4cb2f1515`](https://github.com/containerd/containerd/commit/4cb2f1515a39a8a6b704b74e58b96f8a1ef9840c) \[release/1.7] Add release notes for v1.7.3 - \[release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8869](https://github.com/containerd/containerd/pull/8869)) - [`b461ecacf`](https://github.com/containerd/containerd/commit/b461ecacfa155befd259877e04b9835bdd04e0d9) cri: memory.memsw.limit_in_bytes: no such file or directory - \[release/1.7] migrate to community owned bucket for node e2e tests ([#8875](https://github.com/containerd/containerd/pull/8875)) - [`14328ae03`](https://github.com/containerd/containerd/commit/14328ae03b51ade0512496e3a4b0c2bf33ca5ffd) migrate to community owned bucket - \[release/1.7 backport] update runc binary to v1.1.8 ([#8843](https://github.com/containerd/containerd/pull/8843)) - [`b985f7ef1`](https://github.com/containerd/containerd/commit/b985f7ef15b6dbb6d5ea302584dcfe491b99d70c) update runc binary to v1.1.8 - \[release/1.7 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8824](https://github.com/containerd/containerd/pull/8824)) - [`083f57160`](https://github.com/containerd/containerd/commit/083f571609a83be94785b77a822aa7c332eeabfd) capture desc variable in range variable just in case that it run in parallel mode - [`a9440ce6b`](https://github.com/containerd/containerd/commit/a9440ce6b5a150be998c70549984b508231a6dbe) Use t.TempDir instead of os.MkdirTemp - [`eea3440d8`](https://github.com/containerd/containerd/commit/eea3440d899f6ce74fca5257dcc53e6cecc4fce4) use strings.Cut instead of strings.Split for parsing imageConfig.User - [`eace67180`](https://github.com/containerd/containerd/commit/eace671808e39d351c54e917fed86a58b92fe43b) fix userstr for dditionalGids on Linux - \[release/1.7 backport] cri: write generated CNI config atomically ([#8825](https://github.com/containerd/containerd/pull/8825)) - [`7353c0286`](https://github.com/containerd/containerd/commit/7353c02869507eb28e571125db05c7597bf92f27) ctr: update WritePidFile to use atomicfile - [`ae7021300`](https://github.com/containerd/containerd/commit/ae70213003a84301ff7dc171569e8ab3adffca35) shim: WritePidFile & WriteAddress use atomicfile - [`186eb64b7`](https://github.com/containerd/containerd/commit/186eb64b7c7a0fbef9c1b11837056ecb2e130d38) cri: write generated CNI config atomically on Unix - [`64c3dcd8e`](https://github.com/containerd/containerd/commit/64c3dcd8e25ae02f6803d4131cb3e40c0c2849c7) atomicfile: new package for atomic file writes - \[release/1.7 backport] Move logrus setup code to log package ([#8831](https://github.com/containerd/containerd/pull/8831)) - [`f7a20e17c`](https://github.com/containerd/containerd/commit/f7a20e17c3e96324cdf83388be289c4c2db1ba55) Move logrus setup code to log package - \[release/1.7 backport] Cirrus CI: configure apt-get to wait for locks ([#8814](https://github.com/containerd/containerd/pull/8814)) - [`60a6db9c2`](https://github.com/containerd/containerd/commit/60a6db9c2627018aef6484d6ca5898a09aa9888e) Cirrus CI: configure apt-get to wait for locks - \[release/1.7 backport] Update Go to 1.20.6,1.19.11 ([#8815](https://github.com/containerd/containerd/pull/8815)) - [`973778193`](https://github.com/containerd/containerd/commit/973778193b54a73b6975388efbdfcbbd33ca3212) Update Go to 1.20.6,1.19.11 - \[release/1.7 backport] update go to go1.20.5, go1.19.10 ([#8716](https://github.com/containerd/containerd/pull/8716)) - [`403033e52`](https://github.com/containerd/containerd/commit/403033e52782716aa444d8d43a5c7e25efdfd4e5) update go to go1.20.5, go1.19.10 - \[release/1.7 backport] bugfix(port-forward): Correctly handle known errors ([#8806](https://github.com/containerd/containerd/pull/8806)) - [`6b6b0c828`](https://github.com/containerd/containerd/commit/6b6b0c828051ecafc0653e271cda8cab2cbd59bd) bugfix(port-forward): Correctly handle known errors - \[release/1.7] Resolve docker.NewResolver race condition ([#8799](https://github.com/containerd/containerd/pull/8799)) - [`898eca21e`](https://github.com/containerd/containerd/commit/898eca21e3c7d12351c26891b1813dd51a423e82) Change http.Header copy to builtin Clone - [`fa2efc406`](https://github.com/containerd/containerd/commit/fa2efc406f09950b466ff3f5d00a5b0a924ef738) Resolve docker.NewResolver race condition - \[release/1.7] Fix net.ipv4.ping_group_range with userns ([#8786](https://github.com/containerd/containerd/pull/8786)) - [`241514815`](https://github.com/containerd/containerd/commit/241514815d278865199a701f23b83a20efe169be) pkg/cri/server: Test net.ipv4.ping_group_range works with userns - [`801e8c806`](https://github.com/containerd/containerd/commit/801e8c8069c4613de305c756c0f497f271ef3648) pkg/cri/server: Fix net.ipv4.ping_group_range with userns - \[release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8782](https://github.com/containerd/containerd/pull/8782)) - [`d5639a5a8`](https://github.com/containerd/containerd/commit/d5639a5a867c45a0c6c5b4f2e65e7ebda0aa02ff) vendor: github.com/containerd/zfs v1.1.0 - \[release/1.7 backport] ci: remove libseccomp-dev installation for nightly ([#8772](https://github.com/containerd/containerd/pull/8772)) - [`15d65709e`](https://github.com/containerd/containerd/commit/15d65709ee8f239de6b908026a51481eaeab6066) ci: remove libseccomp-dev installation for nightly - \[release/1.7] go.mod: Update cgroups to 3.0.2 ([#8769](https://github.com/containerd/containerd/pull/8769)) - [`a08ae718c`](https://github.com/containerd/containerd/commit/a08ae718c47ed2069ab077fc99b4951776fc41ff) \[release/1.7] go.mod: Update cgroups to 3.0.2 - \[release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks ([#8712](https://github.com/containerd/containerd/pull/8712)) - [`18c6503d9`](https://github.com/containerd/containerd/commit/18c6503d98f4de37ebbd39443bde958d8b6dc367) runtime/v2/runc: handle early exits w/o big locks - \[release/1.7 backport] integration/client: add timeout to `TestShimOOMScore` ([#8750](https://github.com/containerd/containerd/pull/8750)) - [`3bf3996d9`](https://github.com/containerd/containerd/commit/3bf3996d921c7466ad194ef5ac26bbddb3a89a33) integration/client: add timeout to `TestShimOOMScore` - \[release/1.7 backport] Update ginkgo to match cri-tools' version ([#8760](https://github.com/containerd/containerd/pull/8760)) - [`c2c54af9d`](https://github.com/containerd/containerd/commit/c2c54af9ddff6f26cc5ebefb2634ed5ca4cf15c3) Update ginkgo to match cri-tools' version - \[release/1.7 backport] seccomp: always allow name_to_handle_at ([#8753](https://github.com/containerd/containerd/pull/8753)) - [`6281d46df`](https://github.com/containerd/containerd/commit/6281d46df9cc1df891ef1ca68b3e1a2b11dd96cd) seccomp: always allow name_to_handle_at - \[release/1.7] Pinned image support ([#8718](https://github.com/containerd/containerd/pull/8718)) - [`699d6701a`](https://github.com/containerd/containerd/commit/699d6701ae17bd3c12a7f86f5d9470cedf210169) Pinned image support - \[release/1.7] cherry-pick: No more nondistributable layers in MS registry ([#8690](https://github.com/containerd/containerd/pull/8690)) - [`dafbeb5b1`](https://github.com/containerd/containerd/commit/dafbeb5b1ffdaa6c227fddeacf2b39816e61660f) No more nondistributable layers in MS registry - \[release/1.7] \[cri] Windows Pod Stats: Add a check to skip stats for containers that are not running ([#8654](https://github.com/containerd/containerd/pull/8654)) - [`58b6b99cd`](https://github.com/containerd/containerd/commit/58b6b99cd6fde4f173df25c09b20682e29acebf5) Add a check to skip stats for containers that are not running - \[release/1.7 backport] task: don't `close()` io before `cancel()` ([#8658](https://github.com/containerd/containerd/pull/8658)) - [`e5b2a0131`](https://github.com/containerd/containerd/commit/e5b2a0131ba26b4366957bea07c67c171a11f52a) task: don't `close()` io before `cancel()` - \[release/1.7 backport] move to CRI-TOOLS v1.27.0 ([#8656](https://github.com/containerd/containerd/pull/8656)) - [`a6a15afe3`](https://github.com/containerd/containerd/commit/a6a15afe3e9dd2de89ddf0c1bdde73b42ae9720d) move to CRI-TOOLS v1.27.0 - \[release/1.7] Remove cni conf_template deprecation ([#8638](https://github.com/containerd/containerd/pull/8638)) - [`0b2b96479`](https://github.com/containerd/containerd/commit/0b2b9647992dc4238e2a7d98c721dacb6cf753bf) RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 - [`a24267b28`](https://github.com/containerd/containerd/commit/a24267b28973821c3056b43270362bec5b8471ec) Remove cni conf_template deprecation - \[release/1.7] Fix issue for HPC pod metrics ([#8634](https://github.com/containerd/containerd/pull/8634)) - [`89415fe36`](https://github.com/containerd/containerd/commit/89415fe36162576fb88b0fd7c117238834f2c967) Fix issue for HPC pod metrics </details> ##### Changes from containerd/zfs <details><summary>49 commits</summary> - gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75)) - [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir() - [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges - [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73)) - [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 - gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74)) - [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin - [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2 - Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72)) - [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 - Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69)) - [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 - Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67)) - [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow - Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66)) - [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow - Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68)) - [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies - [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19 - Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65)) - [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package - Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62)) - [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version - [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest - go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59)) - [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0 - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58)) - [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 - Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57)) - [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55)) - [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 - Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54)) - [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 - [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53)) - [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf - replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52)) - [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors - Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51)) - [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 - Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50)) - [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2 - Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49)) - [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main - sync up with containerd 1.5 GA ([#47](https://github.com/containerd/zfs/pull/47)) - [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga - README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46)) - [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge </details> ##### Dependency Changes - **github.com/containerd/cgroups/v3** v3.0.1 -> v3.0.2 - **github.com/containerd/zfs** v1.0.0 -> v1.1.0 - **github.com/mistifyio/go-zfs/v3** v3.0.1 ***new*** Previous release can be found at [v1.7.2](https://github.com/containerd/containerd/releases/tag/v1.7.2) ### [`v1.7.2`](https://github.com/containerd/containerd/releases/tag/v1.7.2): containerd 1.7.2 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.1...v1.7.2) Welcome to the v1.7.2 release of containerd! The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode, Windows snapshot mounting support, and CRI and container IO bug fixes. ##### CRI/Sandbox Updates - **Publish sandbox events** ([#8613](https://github.com/containerd/containerd/pull/8613)) - **Make stats respect sandbox's platform** ([#8604](https://github.com/containerd/containerd/pull/8604)) ##### Other Notable Updates - **Mount snapshots on Windows** ([#8616](https://github.com/containerd/containerd/pull/8616)) - **Notify readiness when registered plugins are ready** ([#8584](https://github.com/containerd/containerd/pull/8584)) - **Fix cio.Cancel() should close pipes** ([#8624](https://github.com/containerd/containerd/pull/8624)) - **CDI: Use CRI Config.CDIDevices field for CDI injection** ([#8519](https://github.com/containerd/containerd/pull/8519)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Gabriel Adrian Samfira - Derek McGowan - Paul "TBBle" Hampson - Maksym Pavlenko - Phil Estes - Austin Vazquez - Akihiro Suda - Kazuyoshi Kato - Danny Canter - Samuel Karp - Sebastiaan van Stijn - Ed Bartosh - Henry Wang - Hsing-Yu (David) Chen - Jan Dubois - Mike Brown - Wei Fu - helen ##### Changes <details><summary>59 commits</summary> - \[release/1.7] Prepare release notes for v1.7.2 ([#8629](https://github.com/containerd/containerd/pull/8629)) - [`0e41daaea`](https://github.com/containerd/containerd/commit/0e41daaeabefcf7c61034024b4507ceee139761b) \[release/1.7] Prepare release notes for v1.7.2 - \[1.7 backport] Fix panic when remote differ returns empty result ([#8631](https://github.com/containerd/containerd/pull/8631)) - [`e134b6393`](https://github.com/containerd/containerd/commit/e134b639396ab07513fecfa221fc4ad8634b2154) Fix panic when remote differ returns empty result - \[release/1.7 backport] Mount snapshots on Windows ([#8616](https://github.com/containerd/containerd/pull/8616)) - [`313c226b8`](https://github.com/containerd/containerd/commit/313c226b8b9c30995b90d9a6535b2972707afbd4) Update continuity to a tagged version - [`8dd16285a`](https://github.com/containerd/containerd/commit/8dd16285a0558c56255f7d88a509d0e8d930efe3) UnmountAll is a no-op for missing mount points - [`acff3eefa`](https://github.com/containerd/containerd/commit/acff3eefa69b6d0238062396fb91df5cfb699603) Improve error messages and remove check - [`b4dd3bf4e`](https://github.com/containerd/containerd/commit/b4dd3bf4e291b6be928de1be272740c6a9f2dd3e) Make ReadOnly() available on all platforms - [`08d8baf3f`](https://github.com/containerd/containerd/commit/08d8baf3f4d82d5917e8acc94e50d25b4d7d6500) Increase integration test tmieout to 20m - [`1f0dbd011`](https://github.com/containerd/containerd/commit/1f0dbd011ae5b635039646f29bba2e0b288d95ca) Remove bind code path in mount() - [`8f37b1c63`](https://github.com/containerd/containerd/commit/8f37b1c63712aefeef8e3c357e85ebde8f670ba8) Remove "bind" code path from diff - [`9139208b3`](https://github.com/containerd/containerd/commit/9139208b319828e0cafe8110743fa455dc3b75f1) Properly mount base layers - [`e61e7b312`](https://github.com/containerd/containerd/commit/e61e7b31263ca717d2ff00b37abdc83ff0f5346f) Skip parent layer options on bind mounts - [`e4307926f`](https://github.com/containerd/containerd/commit/e4307926f327e35cc5fcd012ac4854cf85cbee07) Add ReadOnly() function - [`0277b9b01`](https://github.com/containerd/containerd/commit/0277b9b01a4992ba315f379ca599bf080dd6495b) Remove escalated privileges - [`d5c18dfb7`](https://github.com/containerd/containerd/commit/d5c18dfb7ed449e0232ccafcc6f4cb9a2473221d) Use DefaultSnapshotter - [`853179366`](https://github.com/containerd/containerd/commit/853179366b2aa7bebd17903faa0ada9dcf9297cc) use t.Fatal if we cannot enable process privileges - [`5b3ee413f`](https://github.com/containerd/containerd/commit/5b3ee413f49fac47017cfacf09176e9701052096) Update continuity - [`375172604`](https://github.com/containerd/containerd/commit/375172604df61e312810efbb7fc0080df5a0ab2c) Fix go.mod, simplify boolean logic, add logging - [`600abd137`](https://github.com/containerd/containerd/commit/600abd13791fcc6b3dd23c7f78f8c8c796340e33) Ignore ERROR_NOT_FOUND error when removing mount - [`df7295dcd`](https://github.com/containerd/containerd/commit/df7295dcdf00839423109ac65b1dc9429f632e00) Update continuity, go-winio and hcsshim - [`0db78c482`](https://github.com/containerd/containerd/commit/0db78c48269f54b9335183b2b0d7b6138253e9e5) Remove unused function - [`219058766`](https://github.com/containerd/containerd/commit/2190587661ded992f2b0a55a08e3201b93e0b5a2) Grant needed privileges for snapshotter tests - [`96fbe5bc8`](https://github.com/containerd/containerd/commit/96fbe5bc882658780ca36499a0e0a79d095b83e8) Fix layer comparison and enable read-only checks - [`279e0d3c9`](https://github.com/containerd/containerd/commit/279e0d3c9ab199458387b670c19301a94dac8032) Use bind filer for mounts - [`93e94da40`](https://github.com/containerd/containerd/commit/93e94da4084f3fbe2d89f3145a8e56c8c24dc458) Enable TestSnapshotterClient on Windows - [`3a3da693a`](https://github.com/containerd/containerd/commit/3a3da693aee68afdc84ca42c0191cee88ee9c21f) Run Windows snapshotter through the test suite - [`e7b62322f`](https://github.com/containerd/containerd/commit/e7b62322f9218387e6f715442b2235c9feec2e01) Fix misspelling of 'Native' as 'Naive' - [`e1f999a18`](https://github.com/containerd/containerd/commit/e1f999a1827242a31fa85cbb4a44ee31eeebfb30) Add paired 'mount' log for 'unmount' - [`5788d6e52`](https://github.com/containerd/containerd/commit/5788d6e520cef08aaf2d15ceaf5c4c6b1ce735e6) Don't use all-upper-case filenames in snapshot tests - [`3cdcb2f10`](https://github.com/containerd/containerd/commit/3cdcb2f1088eab8d18075b0549ae59688bf15792) Skip tests that do not apply to WCOW on Windows - [`b0968b8bb`](https://github.com/containerd/containerd/commit/b0968b8bb920c99d341cb212bde9a4d15c050dfc) Ensure mounts are unmounted before leaving the test - [`b57424851`](https://github.com/containerd/containerd/commit/b57424851cc56745d677ee41e0d5a02dde29bc41) Unify testutil.Unmount on Windows and Unix - [`b9a8aad45`](https://github.com/containerd/containerd/commit/b9a8aad45149c40c8b5c327657a5320de29231c5) Implement Windows mounting for bind and windows-layer mounts - [`1a64ee183`](https://github.com/containerd/containerd/commit/1a64ee1835544d37903f667415c821526200ed8b) Implement WCOW parentless active snapshots and view snapshots - \[release/1.7] fix: cio.Cancel() should close the pipes ([#8624](https://github.com/containerd/containerd/pull/8624)) - [`99582fb1a`](https://github.com/containerd/containerd/commit/99582fb1a32e9d051585219d11146afb07805abf) fix: cio.Cancel() should close the pipes - \[release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8621](https://github.com/containerd/containerd/pull/8621)) - [`eeda70fb0`](https://github.com/containerd/containerd/commit/eeda70fb04814f240c7e5d0f59a6369b1fdae69e) remotes/docker: ResolverOptions: fix deprecation comments - \[release/1.7] Publish sandbox events ([#8613](https://github.com/containerd/containerd/pull/8613)) - [`e21c8beee`](https://github.com/containerd/containerd/commit/e21c8beee6c07fd289af2cf0011e0aa8156882e4) Post cherry-pick fixes - [`246240f71`](https://github.com/containerd/containerd/commit/246240f71ce2adcfc5b161343f21a72fa32c1273) Move PLEG event back to CRI - [`16f3726dd`](https://github.com/containerd/containerd/commit/16f3726dd61ba8fa71d04957681b53a14cc5b055) Generate sandbox exit events from CRI - [`0c8cfb1a7`](https://github.com/containerd/containerd/commit/0c8cfb1a7c0f852842016ad0805bf8a121ede970) Move pod sandbox recovery to podsandbox/ package - [`91d9f5c64`](https://github.com/containerd/containerd/commit/91d9f5c643c4bc6d44964c161a56eb04201fc885) Publish sandbox events - [`4b77683b4`](https://github.com/containerd/containerd/commit/4b77683b46182fcdf756509767660389d2eb7169) Add sandbox events protos - \[release/1.7] notify readiness when registered plugins are ready ([#8584](https://github.com/containerd/containerd/pull/8584)) - [`2c38cad77`](https://github.com/containerd/containerd/commit/2c38cad77cdb2644ebf8f56a2e3f094344ef0f41) notify readiness when registered plugins are ready - \[release/1.7] Backport CRI sandbox server stats changes ([#8604](https://github.com/containerd/containerd/pull/8604)) - [`7851b0a9f`](https://github.com/containerd/containerd/commit/7851b0a9f27c6a2223538abe05bf23edbd790fca) CRI: Make stats respect sandbox's platform - [`8d7c340ca`](https://github.com/containerd/containerd/commit/8d7c340ca8cb83fda1f02e443a1fdebd04df4bd5) \[sbserver] handle missing cpu stats - [`d08b2a088`](https://github.com/containerd/containerd/commit/d08b2a088c4446ee9bb3af6b431f7969d6a8c07e) \[sbserver] Refactor usageNanoCores be to used for all OSes - \[release/1.7] Cherry-pick: Update volume-ownership image with latest hashes ([#8574](https://github.com/containerd/containerd/pull/8574)) - [`08de6e7b8`](https://github.com/containerd/containerd/commit/08de6e7b8c80e8815002eecc778c422764e87e13) Update volume-ownership image with latest hashes - \[release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection ([#8519](https://github.com/containerd/containerd/pull/8519)) - [`6a5e54c15`](https://github.com/containerd/containerd/commit/6a5e54c15a38b90fbfa2c6a8ce9ef1fb26037c7c) Get CDI devices from CRI Config.CDIDevices field - \[release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility ([#8510](https://github.com/containerd/containerd/pull/8510)) - [`9e60300ea`](https://github.com/containerd/containerd/commit/9e60300ea0b1635d8d7798fc99c824cab82926f3) snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility </details> ##### Changes from containerd/continuity <details><summary>31 commits</summary> - Fall back to Copyfile when Clonefile detects a cross-device request ([#225](https://github.com/containerd/continuity/pull/225)) - [`7df79f5`](https://github.com/containerd/continuity/commit/7df79f562b5757ce7953302d8b80017a60dfaedf) Fall back to Copyfile when Clonefile detects a cross-device request - Support darwin clonefile ([#223](https://github.com/containerd/continuity/pull/223)) - [`30cf84d`](https://github.com/containerd/continuity/commit/30cf84dfb5e0d30120e388e2e2481adad18ea27a) Add support for Darwin clonefile - [`ebdd069`](https://github.com/containerd/continuity/commit/ebdd069b5520106abe138eee143fb310df314afd) Add copy benchmark - Update golang.org/x/sys to v0.1.0 ([#222](https://github.com/containerd/continuity/pull/222)) - [`2db84b9`](https://github.com/containerd/continuity/commit/2db84b9393154fccd9c968665b00255c688a7d00) Update golang.org/x/sys to v0.1.0 - Enable tests for all platforms ([#220](https://github.com/containerd/continuity/pull/220)) - [`b449cd0`](https://github.com/containerd/continuity/commit/b449cd0f764c0dc97ed496c2d3b5f8d673c6b7a6) Fix tests on Windows - [`eb05879`](https://github.com/containerd/continuity/commit/eb058795cb5ebba43e2a0a33f540bbc2c37945c4) Fix Darwin tests - [`9cd17be`](https://github.com/containerd/continuity/commit/9cd17bee62e96e79fd579ef64d86b86ec6ac6cc8) Enable tests for all platforms - Add more Windows metadata files ([#219](https://github.com/containerd/continuity/pull/219)) - [`cdfbe61`](https://github.com/containerd/continuity/commit/cdfbe61803aad33055dce1b557b2bdf323860244) Add more Windows metadata files - atomicWriteFile: file defer close ([#213](https://github.com/containerd/continuity/pull/213)) - [`9eb2a49`](https://github.com/containerd/continuity/commit/9eb2a492babfeb69786473a95a5de4bbc249c71d) atomicWriteFile: file defer close - Update GitHub Actions runner images ([#216](https://github.com/containerd/continuity/pull/216)) - [`ad9c903`](https://github.com/containerd/continuity/commit/ad9c9033bc0d70f0c8ec837cd7cc5a237aa53503) Update GitHub Actions runner images - Add CodeQL security scan workflow ([#215](https://github.com/containerd/continuity/pull/215)) - [`c8de034`](https://github.com/containerd/continuity/commit/c8de034f336e5434007cf541f850a2289463dae9) Add CodeQL security scan workflow - Add Go 1.20 support to CI ([#214](https://github.com/containerd/continuity/pull/214)) - [`be62cc1`](https://github.com/containerd/continuity/commit/be62cc19f81856e329418bf36084ba7dade19af6) Add Go 1.20 support to CI - Add paths to windows metadataFiles ([#212](https://github.com/containerd/continuity/pull/212)) - [`68f7b34`](https://github.com/containerd/continuity/commit/68f7b34f5e115fe81b09971f79bf59897805e99c) Add paths to windows metadataFiles - Remove references to io/ioutil package ([#211](https://github.com/containerd/continuity/pull/211)) - [`e22f001`](https://github.com/containerd/continuity/commit/e22f0013e31f7d7acfdfdfe03c3fc216cd7814c7) Remove references to io/ioutil package - Update GitHub actions CI workflow ([#210](https://github.com/containerd/continuity/pull/210)) - [`1c3fa33`](https://github.com/containerd/continuity/commit/1c3fa33439810d944467f2cf3a4b61be3b048296) Update GitHub actions CI workflow - format code with gofumpt ([#209](https://github.com/containerd/continuity/pull/209)) - [`f5d245e`](https://github.com/containerd/continuity/commit/f5d245e404beb0f7e0403288f4bf0bff7b1c26b4) format code with gofumpt - Correctly ignore error wrapping `ErrNotSupported` ([#207](https://github.com/containerd/continuity/pull/207)) - [`1ee38b5`](https://github.com/containerd/continuity/commit/1ee38b500a97d2b2eaac33a002dabf7b25886c22) Correctly ignore error wrapping ErrNotSupported </details> ##### Dependency Changes - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 Previous release can be found at [v1.7.1](https://github.com/containerd/containerd/releases/tag/v1.7.1) ### [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1): containerd 1.7.1 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.0...v1.7.1) Welcome to the v1.7.1 release of containerd! The first patch release for containerd 1.7 includes many fixes to CRI sandbox mode, various other fixes, runc update, and important fixes in core dependencies such as ttrpc and typeurl. ##### CRI/Sandbox Updates - **Throw not supported error when UID or GID mappings provided** ([#8211](https://github.com/containerd/containerd/pull/8211)) - **Cleanup shim on start failure** ([#8282](https://github.com/containerd/containerd/pull/8282)) - **Fix premature close of CRI service when there are no CNI configuration monitors** ([#8282](https://github.com/containerd/containerd/pull/8282)) - **Avoid UID lookup from mount on Darwin** ([#8314](https://github.com/containerd/containerd/pull/8314)) - **Keep Linux mounts for Linux sandboxes on non-Linux hosts** ([#8331](https://github.com/containerd/containerd/pull/8331)) - **Add `noexec`,`nodev`,`nosuid` to `/etc/resolv.conf` bind mount** ([#8336](https://github.com/containerd/containerd/pull/8336)) - **Remove entry for container from container store on error** ([#8457](https://github.com/containerd/containerd/pull/8457)) - **Fix unmarshal in container metrics** ([#8472](https://github.com/containerd/containerd/pull/8472)) ##### Other Notable Updates - **Use readonly for temporary mounts** ([#8300](https://github.com/containerd/containerd/pull/8300) [#8358](https://github.com/containerd/containerd/pull/8358)) - **Fix skip docker manifest option on image exporter** ([#8344](https://github.com/containerd/containerd/pull/8344)) - **Update runc binary to v1.1.7** ([#8451](https://github.com/containerd/containerd/pull/8451)) - **Fix runtime path task option** ([#8453](https://github.com/containerd/containerd/pull/8453)) - **Fix panic from nil checkpoint options** ([#8475](https://github.com/containerd/containerd/pull/8475)) - **Fix transfer service configuration options** ([#8491](https://github.com/containerd/containerd/pull/8491)) - **Fix server-side goroutine leak on receive message error** ([ttrpc#141](https://github.com/containerd/ttrpc/pull/141)) - **Fix panic caused by race to close send channel** ([ttrpc#140](https://github.com/containerd/ttrpc/pull/140)) - **Fix unmarshal to return non-nil object when nil value** ([ttrpc#140](https://github.com/containerd/typeurl/pull/41)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Sebastiaan van Stijn - Akihiro Suda - Iceber Gu - Phil Estes - Maksym Pavlenko - Wei Fu - Danny Canter - Kirtana Ashok - Rodrigo Campos - Samuel Karp - Vinayak Goyal - Austin Vazquez - Justin Chadwell - Kazuyoshi Kato - Brad Davidson - Djordje Lukic - Ethan Lowman - Laura Brehm - Michael Crosby ##### Changes <details><summary>68 commits</summary> - \[release/1.7] Prepare release notes for v1.7.1 ([#8501](https://github.com/containerd/containerd/pull/8501)) - [`27a0d957b`](https://github.com/containerd/containerd/commit/27a0d957be722eaaf34cdcc9c9a5b47d843b7a9c) Prepare release notes for v1.7.1 - \[release/1.7] Update ttrpc v1.2.2 ([#8499](https://github.com/containerd/containerd/pull/8499)) - [`7b288e2d7`](https://github.com/containerd/containerd/commit/7b288e2d77d323cf07a210a9ed02f62235e6f41e) Update ttrpc to v1.2.2 - \[release/1.7] runtime/shim: fix the nil checkpoint options ([#8475](https://github.com/containerd/containerd/pull/8475)) - [`3ef5b689a`](https://github.com/containerd/containerd/commit/3ef5b689a7b7f6bb670ad59345c290114e5e29ef) runtime/shim: fix the nil checkpoint options - \[release/1.7] bump typeurl to v2.1.1 ([#8495](https://github.com/containerd/containerd/pull/8495)) - [`0e0532eb2`](https://github.com/containerd/containerd/commit/0e0532eb28eb8a1f5d34e89f6ba94eba684c8be1) bump typeurl to v2.1.1 - \[release/1.7] Transfer service backports ([#8491](https://github.com/containerd/containerd/pull/8491)) - [`35e86f96c`](https://github.com/containerd/containerd/commit/35e86f96c24da795b3977f181b16a493a7400fdb) \[transfer] avoid setting limiters when max is 0 - [`f7233811f`](https://github.com/containerd/containerd/commit/f7233811f6fb2d521e65ecf5b156f82a1aba2f91) Update transfer configuration - [`4510eac00`](https://github.com/containerd/containerd/commit/4510eac009eb066501761a1dae05d4e126ef88e0) Fix image pulling with Transfer service - \[release/1.7]Update hcsshim tag to v0.10.0-rc.8 ([#8480](https://github.com/containerd/containerd/pull/8480)) - [`aaa65e8c1`](https://github.com/containerd/containerd/commit/aaa65e8c1461ae7187357ea6b7f2807667eada6e) Update hcsshim tag to v0.10.0-rc.8 - \[release/1.7] cri: Fix umarshal metrics ([#8472](https://github.com/containerd/containerd/pull/8472)) - [`95ef67e19`](https://github.com/containerd/containerd/commit/95ef67e19552aaec3618cdfa06d6d3ffb57d085b) Fix umarshal metrics for CRI server - \[release/1.7 backport] update go to go1.20.4, go1.19.9 ([#8471](https://github.com/containerd/containerd/pull/8471)) - [`021bba28b`](https://github.com/containerd/containerd/commit/021bba28b50e445c4a0a8e79b458db7116dc50e7) update go to go1.20.4, go1.19.9 - \[release/1.7] fix the task setting the runtime path ([#8453](https://github.com/containerd/containerd/pull/8453)) - [`c0e128624`](https://github.com/containerd/containerd/commit/c0e128624a8d6a02bb7d2ab3d29369f54791b68e) skip TestContainerStartWithAbsRuntimePath if the runtime is v1 - [`aa3c63c15`](https://github.com/containerd/containerd/commit/aa3c63c15f379eec906cb89f7e1204a42a5d1317) integration: add container start test using abs runtime path - [`d2d9eedb1`](https://github.com/containerd/containerd/commit/d2d9eedb1d1b2d047fbdd847ce7c67724f27bde4) WithRuntimePath uses the TaskInfo.RuntimePath field - \[release/1.7] Remove entry for container from container store on error ([#8457](https://github.com/containerd/containerd/pull/8457)) - [`6b3ae0129`](https://github.com/containerd/containerd/commit/6b3ae01297d2cb39c8018fc783751baba513b390) Remove entry for container from container store on error - \[release/1.7 backport] update runc binary to v1.1.7 ([#8451](https://github.com/containerd/containerd/pull/8451)) - [`fae4b6223`](https://github.com/containerd/containerd/commit/fae4b6223a597cf456b63c4272ed85f625eef9f0) update runc binary to v1.1.7 - \[release/1.7] cri: Vendor v0.27.1 ([#8444](https://github.com/containerd/containerd/pull/8444)) - [`571715a9d`](https://github.com/containerd/containerd/commit/571715a9df043d0f75d16dcc17fd0c2c41999290) cri: Vendor v0.27.1 - \[release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8404](https://github.com/containerd/containerd/pull/8404)) - [`1bbf98e53`](https://github.com/containerd/containerd/commit/1bbf98e53ec77bad5dabc2a762f4407e99f527c9) oci: partially restore comment on read-only mounts for uid/gid uses - \[release/1.7] Fix argsEscaped tests ([#8405](https://github.com/containerd/containerd/pull/8405)) - [`a6d336c1f`](https://github.com/containerd/containerd/commit/a6d336c1f6674c2b342d65ca78fba7fac955eaf1) Fix argsEscaped tests - \[release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings ([#8211](https://github.com/containerd/containerd/pull/8211)) - [`7de8629be`](https://github.com/containerd/containerd/commit/7de8629be0e62c4d8164cd873baf14b64bcbb90b) cri: Throw an error if idmap mounts is requested - [`75ac7e0d8`](https://github.com/containerd/containerd/commit/75ac7e0d8200539ff444b952bc060ffa23582a87) cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings - \[release/1.7] go.mod: remove redundant replace, and some cleaning-up ([#8396](https://github.com/containerd/containerd/pull/8396)) - [`8f6e86fec`](https://github.com/containerd/containerd/commit/8f6e86fecad5c11871df20e516ae181d7abf4a7c) go.mod: add comment explaining go-fuzz-headers replace rule - [`1ece0cb50`](https://github.com/containerd/containerd/commit/1ece0cb50f7f2f6fc9c59a76ae49227a84a92f1e) go.mod: remove replace for github.com/opencontainers/runtime-tools - [`e9f962187`](https://github.com/containerd/containerd/commit/e9f96218795ef6a527fc8cac550ae90b9b09fe5c) go.mod: integration: use non-pre-release of containerd - [`84393b005`](https://github.com/containerd/containerd/commit/84393b005f76c085ad62c62dff980dc13d13b131) go.mod: integration: move indirect dependencies to the right group - \[release/1.7 backport] update runc binary to v1.1.6 ([#8386](https://github.com/containerd/containerd/pull/8386)) - [`dec2595af`](https://github.com/containerd/containerd/commit/dec2595afe92800fbf8e4e506398b00ff532332f) update runc binary to v1.1.6 - \[release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8358](https://github.com/containerd/containerd/pull/8358)) - [`54d12b872`](https://github.com/containerd/containerd/commit/54d12b872132d56feca792051abdce87a2077988) oci: Use WithReadonlyTempMount when adding users/groups - \[release/1.7 backport] update go to go1.20.3, go1.19.8 ([#8354](https://github.com/containerd/containerd/pull/8354)) - [`624327651`](https://github.com/containerd/containerd/commit/6243276515454617f58eafaa85352b6e6fcac96e) update go to go1.20.3, go1.19.8 - \[release/1.7] archive: consistently respect value of WithSkipDockerManifest ([#8344](https://github.com/containerd/containerd/pull/8344)) - [`1d6641b7c`](https://github.com/containerd/containerd/commit/1d6641b7c92d8854548c7a07bdaa07979ad0eb68) export: add test for WithSkipDockerManifest - [`0e0d84f6b`](https://github.com/containerd/containerd/commit/0e0d84f6bb7a0226480dd5ead7c894175d2edcc8) archive: consistently respect value of WithSkipDockerManifest - \[release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. ([#8336](https://github.com/containerd/containerd/pull/8336)) - [`9b4935d86`](https://github.com/containerd/containerd/commit/9b4935d86436419670febe9695787a3aaf5ceeb7) Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. - [`5e953cfa6`](https://github.com/containerd/containerd/commit/5e953cfa62abb90b2c4dc775907cbb276637bfe8) Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. - [`0aad93f08`](https://github.com/containerd/containerd/commit/0aad93f08ca4da8f33ad709dbe49593f6ff5c59c) Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. - \[release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 ([#8335](https://github.com/containerd/containerd/pull/8335)) - [`1a64f1b43`](https://github.com/containerd/containerd/commit/1a64f1b4341ebda4b8f8cf67cac543394a10a4c3) ctr/tasks: fix unmarshal the task metrics for cgroups v1 - \[release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin ([#8331](https://github.com/containerd/containerd/pull/8331)) - [`17c52a26d`](https://github.com/containerd/containerd/commit/17c52a26d63d6105e9918fb2d90ff346e4e4c463) Keep linux mounts for linux sandboxes on Windows/Darwin - \[release/1.7] update runc binary to v1.1.5 ([#8325](https://github.com/containerd/containerd/pull/8325)) - [`d81fc15af`](https://github.com/containerd/containerd/commit/d81fc15affe09dbb621be16bda805801a98cab4b) update runc binary to v1.1.5 - [`755efbe64`](https://github.com/containerd/containerd/commit/755efbe6402acdaf5832e36b7c6f4e15cc2a406d) go.mod: github.com/opencontainers/runc v1.1.5 - \[backport 1.7] Defer uid lookups on Darwin ([#8314](https://github.com/containerd/containerd/pull/8314)) - [`90591db47`](https://github.com/containerd/containerd/commit/90591db47c70db29386b8d9e58ffa1005b560dc0) Defer uid lookups on Darwin - \[release/1.7 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8300](https://github.com/containerd/containerd/pull/8300)) - [`b7d87b190`](https://github.com/containerd/containerd/commit/b7d87b190d013929377bb85df8301fade73b0298) Add `WithReadonlyTempMount` to create readonly temporary mounts - \[release/1.7] Backport Sandbox/CRI fixes ([#8282](https://github.com/containerd/containerd/pull/8282)) - [`1c1b6bcb2`](https://github.com/containerd/containerd/commit/1c1b6bcb2b4a47053855bd7adaed5d9bfdf2a5f5) CRI: Don't always close netConfMonitor channel - [`cf2e454bf`](https://github.com/containerd/containerd/commit/cf2e454bf052bee63c0582552566c96357bd2250) Sandbox: Correct/add some fields to Status() - [`ce68e8e0d`](https://github.com/containerd/containerd/commit/ce68e8e0db47174580fc74ecdeb66c26695ecd0b) Sandbox: Cleanup shim on Start failure </details> ##### Changes from containerd/ttrpc <details><summary>8 commits</summary> - First process the pending messages in recv channel ([#144](https://github.com/containerd/ttrpc/pull/144)) - [`c51165f`](https://github.com/containerd/ttrpc/commit/c51165f20d52c5b19c76cd8a1d16ead701146e89) First process the pending messages in recv channel - Add recvClose channel to stream ([#140](https://github.com/containerd/ttrpc/pull/140)) - [`471297e`](https://github.com/containerd/ttrpc/commit/471297eed95365134cb1a15defdf42334fd4c85a) Add recvClose channel to stream - Unwrap IO errors in server connection error handling ([#141](https://github.com/containerd/ttrpc/pull/141)) - [`9599fad`](https://github.com/containerd/ttrpc/commit/9599fadcd66ef7b6a3aec840be59a3a38203bc2c) Unwrap io errors in server connection receive error handling - Update GitHub actions CI workflow ([#124](https://github.com/containerd/ttrpc/pull/124)) - [`c7b5a32`](https://github.com/containerd/ttrpc/commit/c7b5a322eda63419e2dafa8dd215b08739ebe9f5) Update GitHub actions CI workflow </details> ##### Dependency Changes - **github.com/Microsoft/go-winio** v0.6.0 -> v0.6.1 - **github.com/Microsoft/hcsshim** v0.10.0-rc.7 -> v0.10.0-rc.8 - **github.com/containerd/ttrpc** v1.2.1 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.0 -> v2.1.1 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/opencontainers/runc** v1.1.4 -> v1.1.5 - **github.com/opencontainers/runtime-tools** [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) -> [`2e043c6`](https://github.com/containerd/containerd/commit/2e043c6bd626) - **golang.org/x/mod** v0.7.0 -> v0.9.0 - **golang.org/x/net** v0.7.0 -> v0.8.0 - **golang.org/x/sys** v0.6.0 -> v0.7.0 - **golang.org/x/term** v0.5.0 -> v0.6.0 - **golang.org/x/text** v0.7.0 -> v0.8.0 - **golang.org/x/tools** v0.5.0 -> v0.7.0 - **google.golang.org/protobuf** v1.28.1 -> v1.29.1 - **k8s.io/cri-api** v0.26.2 -> v0.27.1 Previous release can be found at [v1.7.0](https://github.com/containerd/containerd/releases/tag/v1.7.0) ### [`v1.7.0`](https://github.com/containerd/containerd/releases/tag/v1.7.0): containerd 1.7.0 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.31...v1.7.0) Welcome to the v1.7.0 release of containerd! The eighth major release of containerd includes new functionality alongside many improvements. This release is the last major release of containerd 1.x before 2.0. Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0. This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations. The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality. ##### Highlights ##### Sandbox API *(experimental)* The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs. This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients. - **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703)) - **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228)) ##### Transfer Service *(experimental)* - **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320)) The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release to allow for further plugin development and integration into existing plugins. See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md) ##### NRI *(experimental)* - **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16)) - **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019)) The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration. This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases. See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md) ##### Platform Support - **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000)) ##### Runtime Features - **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654)) - **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490)) - **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744)) ##### gRPC Shim Support *(experimental)* - **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052)) Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going away and will continue to be recommended for the best performance and lowest shim memory overhead. The gRPC support allows implementation of a wider range of shim implementations which may not have access to a stable ttrpc library in the implementation language. The shim protocol is also updated to allow the shims to specify the protocol which is supported. ##### Road to 2.0 ##### Refactoring There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points. The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this, but it also being done for image and network management. The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc. Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability. - **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699)) - **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708)) - **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829)) - **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841)) - **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107)) - **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749)) - **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804)) - **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177)) ##### Configuration Existing CRI configurations will be supported until 2.0. Any functionality split out of CRI will have their configuration migrated to new plugins. Deprecated configuration versions and configurations for deprecated features will be removed in 2.0. ##### Deprecation The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include. - **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884)) ##### CRI Updates - **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904)) - **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150)) - **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899)) - **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764)) - **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) *(experimental)*** ([#7679](https://github.com/containerd/containerd/pull/7679)) - **Add timeout option for drain exec io** ([#7832](https://github.com/containerd/containerd/pull/7832)) - **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858)) - **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863)) ##### Other - **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414)) - **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386)) - **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460)) - **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510)) - **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513)) - **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607)) - **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732)) - **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928)) - **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021)) - **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Kazuyoshi Kato - Maksym Pavlenko - Wei Fu - Phil Estes - Akihiro Suda - Sebastiaan van Stijn - Samuel Karp - Krisztian Litkey - Mike Brown - Stefan Berger - Danny Canter - Austin Vazquez - Daniel Canter - yanggang - Iceber Gu - Ye Sijun - Ed Bartosh - Luca Comellini - Adam Korcz - Nashwan Azhari - Tony Fang - ruiwen-zhao - xin.li - Brian Goff - Gabriel Adrian Samfira - Paul "TBBle" Hampson - Henry Wang - Kevin Parsons - Rodrigo Campos - zounengren - Justin Terry - Paco Xu - Shengjing Zhu - Swagat Bora - wanglei - Gavin Inglis - Akhil Mohan - Hsing-Yu (David) Chen - Zechun Chen - guodong - lengrongfu - James Jenkins - James Sturtevant - Kirtana Ashok - Michael Crosby - Qiutong Song - Shiming Zhang - Vincent Batts - Antonio Ojea - Cameron Sparr - Casey Callendrello - Changwei Ge - Jian Zeng - Josh Seba - Junyu Liu - Kohei Tokunaga - Michael Zappa - Qasim Sarfraz - Tobias Klauser - Zhang Tianyang - pigletfly - yaoyinnan - Abirdcfly - Aditi Sharma - Amit Barve - Bennett-White - Bjorn Neergaard - Cory Snider - Craig Ingram - Eng Zer Jun - Eric Lin - Ethan Lowman - Fabian Hoffmann - Jess - Jiongchi Yu - Jonny Stoten - Juan Hoyos - Kang.Zhang - Kay Yan - Markus Lehtonen - Mikko Ylinen - Mohit Sharma - Paul Cacheux - Paul S. Schweigert - Qian Zhang - Tõnis Tiigi - Yasin Turan - bin liu - helen - yulng - Aman Sharma - Anastassios Nanos - Andrew G. Morgan - Andrey Klimentyev - Aniruddha Basak - Anthony Nandaa - Antti Kervinen - Aviral Takkar - Baoshuo - Benjamin Elder - Benjamin Wang - Brandon Lum - Chao Dai - Chuanying Du - Claudiu Belu - Daniel Lenar - Danielle Lancashire - Dat Nguyen - Davanum Srinivas - Dave - David Leadbeater - David Porter - Dmitry Shurupov - Edgar Lee - Eric Ernst - Fahed Dorgaa - Gabriela Cervantes - Gijs Peskens - Hamza El-Saawy - Ikko Ashimine - Jeff Widman - Jeff Zvier - Jeremi Piotrowski - Jimmy Hsiao - Jin Dong - Jordan Karaze - Joseph Sheng - Joyce Brum - Jukka Rissanen - Justin Chadwell - Kate - Kathryn Baldauf - Kyle L Frisbie - LongtaoZhang - Manuel Alejandro de Brito Fontes - Marc Schwind - Mark Rossetti - Mark Zhang - Marvin Giessing - Mathis Michel - Merlin Ran - Nabeel Rana - Nathan - Nguyen Phan Huy - Nikita Rybak - Nobel Barakat - Oleg Atamanenko - Oleg Zhurakivskyy - Oliver Radwell - Paweł Gronowski - Quan Tian - Roy Yang - Samuel Ortiz - Serge Logvinov - Shane Jennings - Shaun Lawrie - Shinichi Morimoto - SilverSoldier - Sophie Liu - Su Fei - Taeho Nam - Takumasa Sakao - Tiger Kaovilai - Tom Godkin - Tomoya.Fujita - Xinlin Ma - Yakul Garg - Zhongming Chang - Zhuchen Wang - austinvazquez - cardy.tang - chaunceyjiang - dabaooline - guiyong.ou - huoqifeng - jianfei.zhang - liyuxuan.darfux - ningmingxiao - panguicai008 - shi yixue - shuaichang - songjiang han - wen chen - wusong - xiaoyang zhu - yanghesong - yaozhenxiu - zhang he ##### Changes <details><summary>1753 commits</summary> - Prepare release notes for v1.7.0 ([#8242](https://github.com/containerd/containerd/pull/8242)) - RELEASES.md: describe the deprecated config properties ([#8241](https://github.com/containerd/containerd/pull/8241)) - Flag usage uses uppercase letters ([#8232](https://github.com/containerd/containerd/pull/8232)) - docs: link docs/managed-opt.md to client.Install ([#8240](https://github.com/containerd/containerd/pull/8240)) - Prepare release notes for v1.7.0-rc.3 ([#8233](https://github.com/containerd/containerd/pull/8233)) - Go 1.20.2 ([#8237](https://github.com/containerd/containerd/pull/8237)) - Update ttrpc to v1.2.1 ([#8236](https://github.com/containerd/containerd/pull/8236)) - sandbox: create sandbox with network namespace path ([#8149](https://github.com/containerd/containerd/pull/8149)) - labels: Add LabelDistributionSource ([#8224](https://github.com/containerd/containerd/pull/8224)) - archive: disable looking up usernames and groupnames on the host ([#8220](https://github.com/containerd/containerd/pull/8220)) - go.mod: go.opentelemetry.io/otel/\* v1.14.0 ([#8222](https://github.com/containerd/containerd/pull/8222)) - metadata: add comments about `Image.CreatedAt` ([#8225](https://github.com/containerd/containerd/pull/8225)) - Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216)) - go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*} latest ([#8221](https://github.com/containerd/containerd/pull/8221)) - Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131)) - Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217)) - Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198)) - Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204)) - \[Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205)) - docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214)) - \[cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099)) - Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203)) - epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202)) - pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832)) - Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192)) - Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191)) - Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193)) - ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864)) - Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119)) - Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188)) - Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190)) - Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189)) - Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187)) - docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181)) - Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183)) - releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178)) - Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177)) - Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164)) - bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173)) - Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172)) - update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152)) - Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162)) - pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140)) - \[transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165)) - Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062)) - docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134)) - CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154)) - docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142)) - contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069)) - runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120)) - Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143)) - Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125)) - sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129)) - Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115)) - Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130)) - dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128)) - runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124)) - Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110)) - Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103)) - ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096)) - pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041)) - docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044)) - fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051)) - Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p) - Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2) - pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954)) - Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114)) - Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113)) - Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109)) - Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052)) - CRI: Pass sandbox annotations to \_other platforms ([#8060](https://github.com/containerd/containerd/pull/8060)) - cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105)) - cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067)) - Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101)) - release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104)) - \[transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964)) - \[sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100)) - Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047)) - test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984)) - loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097)) - contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068)) - \*: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066)) - Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093)) - CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091)) - go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092)) - Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086)) - \[sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981)) - btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933)) - CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082)) - chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078)) - fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076)) - chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077)) - Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075)) - Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071)) - Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074)) - keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976)) - go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049)) - Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045)) - Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979)) - Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035)) - Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036)) - Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989)) - go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040)) - cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039)) - pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037)) - go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034)) - fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013)) - Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847)) - Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840)) - cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020)) - log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025)) - go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027)) - Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977)) - go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026)) - Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007)) - runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012)) - release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#8019](https://github.com/containerd/containerd/pull/8019)) - RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022)) - deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023)) - release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021)) - Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015)) - Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014)) - Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959)) - Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005)) - pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994)) - go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987)) - pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985)) - CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968)) - fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129)) - Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973)) - Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970)) - release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969)) - use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963)) - Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960)) - go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810)) - Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958)) - Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928)) - update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948)) - fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957)) - shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943)) - cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946)) - ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929)) - Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935)) - Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917)) - mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932)) - archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927)) - Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883)) - docs/content-flow: update the description of the content labels ([#7925](https://github.com/containerd/containerd/pull/7925)) - Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861)) - Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886)) - Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903)) - Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892)) - contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891)) - docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914)) - CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913)) - Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911)) - ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905)) - Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907)) - Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908)) - Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906)) - \[sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850)) - Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893)) - CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904)) - Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674)) - Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887)) - reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894)) - integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888)) - Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882)) - `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881)) - chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879)) - cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880)) - Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679)) - Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529)) - oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874)) - add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863)) - make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875)) - CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872)) - Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521)) - oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869)) - Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871)) - fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866)) - add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858)) - Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859)) - image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618)) - prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165)) - Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851)) - Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837)) - Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636)) - CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845)) - Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081)) - metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781)) - Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831)) - cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836)) - go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824)) - Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825)) - CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814)) - Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792)) - move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818)) - Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812)) - nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809)) - Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709)) - fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805)) - Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804)) - cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783)) - add metrics for image pulling: error; in progress count; thoughput ([#7313](https://github.com/containerd/containerd/pull/7313)) - Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793)) - support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771)) - images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651)) - fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718)) - fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798)) - Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794)) - Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796)) - integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791)) - digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732)) - allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787)) - Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073)) - docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786)) - fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772)) - Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764)) - Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776)) - There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775)) - CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777)) - vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774)) - Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773)) - Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9) - update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765)) - Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763)) - sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768)) - Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671)) - remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525)) - Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673)) - fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748)) - Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753)) - Fix process_vm_\* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755)) - upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747)) - docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743)) - go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744)) - \[Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731)) - Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320)) - NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019)) - archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710)) - Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702)) - Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730)) - Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708)) - use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736)) - introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694)) - reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635)) - go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721)) - Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714)) - Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684)) - make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669)) - integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720)) - Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706)) - Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470)) - \[port [#5904](https://github.com/containerd/containerd/issues/5904) to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426)) - fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677)) - runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499)) - Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693)) - Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707)) - cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697)) - Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699)) - overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700)) - go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704)) - update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705)) - Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703)) - fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683)) - Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701)) - can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685)) - Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656)) - overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696)) - CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691)) - tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678)) - Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601)) - Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675)) - Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686)) - gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688)) - complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670)) - keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668)) - bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a) ([#7666](https://github.com/containerd/containerd/pull/7666)) - Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667)) - add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523)) - Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663)) - Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659)) - Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662)) - Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661)) - Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660)) - feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263)) - Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629)) - Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655)) - Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643)) - replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631)) - add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642)) - Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590)) - fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625)) - Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637)) - Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641)) - Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640)) - Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638)) - s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614)) - Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513)) - remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460)) - Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403)) - Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607)) - Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453)) - Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604)) - fix comments ([#7624](https://github.com/containerd/containerd/pull/7624)) - docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626)) - go.mod: golang.org/x/\*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621)) - Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620)) - ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615)) - Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617)) - Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599)) - overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611)) - Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606)) - Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600)) - fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588)) - Retry client connection in waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537)) - Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025)) - Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575)) - Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576)) - Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581)) - Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569)) - maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577)) - CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457)) - Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419)) - update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568)) - Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546)) - sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531)) - fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484)) - Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560)) - bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503)) - Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454)) - fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473)) - Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530)) - containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541)) - Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544)) - go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522)) - Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542)) - clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349)) - Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534)) - Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538)) - Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539)) - sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527)) - cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535)) - CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489)) - fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519)) - Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510)) - cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511)) - Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517)) - Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516)) - cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512)) - Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483)) - cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497)) - Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481)) - archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478)) - TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492)) - diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494)) - Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425)) - archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491)) - archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488)) - vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482)) - fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477)) - Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474)) - use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463)) - cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466)) - Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904)) - Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446)) - go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443)) - fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995)) - CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192)) - Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430)) - Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424)) - Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405)) - Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351)) - Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417)) - Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414)) - Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401)) - remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416)) - reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408)) - cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413)) - Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404)) - Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402)) - Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396)) - Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397)) - remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393)) - Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395)) - Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386)) - ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328)) - chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341)) - windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901)) - Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370)) - CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374)) - Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372)) - vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373)) - Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371)) - feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291)) - integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367)) - feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359)) - metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361)) - .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369)) - Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356)) - delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345)) - Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350)) - Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346)) - Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326)) - sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335)) - chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338)) - Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342)) - archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344)) - mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339)) - replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334)) - Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324)) - update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315)) - Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325)) - Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287)) - script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322)) - ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517)) - migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038)) - Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309)) - ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906)) - Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308)) - Follow up [#7254](https://github.com/containerd/containerd/issues/7254) (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286)) - Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304)) - Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301)) - go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284)) - Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306)) - ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293)) - Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280)) - containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931)) - Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254)) - Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265)) - oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257)) - release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259)) - release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258)) - Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228)) - Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251)) - Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243)) - Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023)) - script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237)) - Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232)) - fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204)) - Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223)) - Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226)) - test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195)) - Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220)) - replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207)) - Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221)) - Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215)) - test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069)) - chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206)) - Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210)) - go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212)) - Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203)) - Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201)) - adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183)) - cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198)) - using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189)) - test: Add ability to switch between cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173)) - code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182)) - Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114)) - Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186)) - adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191)) - go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185)) - ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145)) - docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174)) - seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163)) - Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168)) - adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169)) - ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177)) - Update install-protobuf script to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153)) - Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164)) - seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167)) - cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158)) - update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159)) - Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152)) - update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124)) - seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149)) - Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123)) - fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847)) - integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130)) - Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126)) - LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112)) - Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117)) - pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108)) - Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087)) - Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107)) - Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105)) - Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106)) - ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098)) - Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103)) - refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100)) - make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094)) - Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096)) - fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092)) - Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085)) - Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084)) - add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072)) - Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086)) - add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070)) - Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065)) - ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082)) - improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077)) - Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067)) - Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056)) - Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062)) - Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057)) - Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052)) - CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913)) - fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008)) - Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042)) - Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888)) - Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918)) - Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032)) - Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022)) - Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033)) - update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034)) - Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000)) - go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026)) - fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031)) - go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027)) - go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028)) - Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029)) - Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf) - Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018)) - Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017)) - Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899)) - update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012)) - Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004)) - update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009)) - Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996)) - Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007)) - promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003)) - Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998)) - CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993)) - Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001)) - vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997)) - sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937)) - build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983)) - ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954)) - ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959)) - Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975)) - archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982)) - Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978)) - config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972)) - Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969)) - fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955)) - adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956)) - Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957)) - cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960)) - fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950)) - update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952)) - Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946)) - shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910)) - Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938)) - Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932)) - update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934)) - oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923)) - update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926)) - CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925)) - Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916)) - go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905)) - (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915)) - Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912)) - Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894)) - devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904)) - move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900)) - Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892)) - Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889)) - containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890)) - Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866)) - Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804)) - Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881)) - Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882)) - docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885)) - Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884)) - Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880)) - docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875)) - Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809)) - Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490)) - Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871)) - Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867)) - Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868)) - Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865)) - Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864)) - Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863)) - remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856)) - Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858)) - Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854)) - feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150)) - Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749)) - Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855)) - Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841)) - images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851)) - Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686)) - integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180)) - fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845)) - cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842)) - diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832)) - Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838)) - Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835)) - fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833)) - Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829)) - fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830)) - remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681)) - Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827)) - Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828)) - Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826)) - Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744)) - Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821)) - Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781)) - Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819)) - allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810)) - Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820)) - update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822)) - Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703)) - Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811)) - fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807)) - check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806)) - Do not append \[]string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805)) - tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789)) - Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680)) - Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798)) - make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792)) - metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788)) - ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794)) - Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790)) - docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785)) - Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778)) - Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672)) - CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654)) - Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761)) - mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777)) - CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702)) - docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776)) - Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779)) - docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775)) - Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750)) - Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754)) - Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768)) - go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765)) - Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762)) - Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760)) - Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709)) - Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751)) - docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758)) - Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755)) - \[Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757)) - BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756)) - update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753)) - CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747)) - CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748)) - added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743)) - Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740)) - Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738)) - Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706)) - Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738)) - fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713)) - cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323)) - moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721)) - native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722)) - go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390)) - Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c) - runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496)) - Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651)) - Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711)) - Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708)) - Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699)) - Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698)) - Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605)) - Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690)) - vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687)) - Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593)) - fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670)) - test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681)) - Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679)) - document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683)) - Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660)) - Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562)) - Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669)) - Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668)) - ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519)) - typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674)) - Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618)) - Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666)) - Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661)) - Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569)) - Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663)) - Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423)) - Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650)) - \[Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635)) - Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658)) - strip path-info from `-v` (version) output, and implement -v flag for containerd-shim ([#6495](https://github.com/containerd/containerd/pull/6495)) - Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617)) - Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601)) - Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626)) - cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595)) - Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613)) - update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619)) - Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614)) - Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568)) - Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603)) - Update releases ([#6608](https://github.com/containerd/containerd/pull/6608)) - Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) - Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479)) - Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558)) - cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596)) - Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578)) - integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597)) - go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591)) - Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585)) - go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337)) - fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331)) - Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579)) - Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580)) - containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571)) - Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491)) - containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452)) - \[Windows]\[Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515)) - go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554)) </details> ##### Changes from containerd/cgroups <details><summary>49 commits</summary> - Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249)) - Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248)) - Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246)) - Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228)) - Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243)) - Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231)) - typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236)) - Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241)) - go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240)) - .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237)) - feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235)) - Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233)) - ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232)) - Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230)) - make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226)) - feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225)) - feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211)) - modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218)) - update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217)) - Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221)) - Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223)) - Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219)) </details> ##### Changes from containerd/continuity <details><summary>28 commits</summary> - go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204)) - Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205)) - Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202)) - update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201)) - move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200)) - CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir) ([#198](https://github.com/containerd/continuity/pull/198)) - fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197)) - Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196)) </details> ##### Changes from containerd/fifo <details><summary>26 commits</summary> - Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51)) - chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49)) - Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47)) - Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48)) - Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45)) - Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46)) - go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44)) - fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42)) - replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41)) - fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32)) - Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40)) </details> ##### Changes from containerd/go-cni <details><summary>38 commits</summary> - Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111)) - opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110)) - go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109)) - Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106)) - Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108)) - Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107)) - Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103)) - go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104)) - go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101)) - add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100)) - Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99)) - bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98)) - Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96)) - Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92)) - Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91)) - moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90)) - Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88)) - Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89)) - Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84)) </details> ##### Changes from containerd/imgcrypt <details><summary>49 commits</summary> - CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97)) - Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers ([#96](https://github.com/containerd/imgcrypt/pull/96)) - build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92)) - tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90)) - chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87)) - Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88)) - CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85)) - build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83)) - CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84)) - CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79)) - Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78)) - Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75)) - Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76)) - CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74)) - Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73)) - images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72)) - Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71)) - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67)) </details> ##### Changes from containerd/nri <details><summary>56 commits</summary> - Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30)) - Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31)) - fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29)) - fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28)) - adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27)) - Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26)) - pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24)) - stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25)) - adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23)) - pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22)) - chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21)) - add back project info ([#20](https://github.com/containerd/nri/pull/20)) - Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16)) - Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19)) - replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17)) - Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15)) - Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12)) - Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11)) </details> ##### Changes from containerd/ttrpc <details><summary>62 commits</summary> - Rework deadline assertion logging to be more clear ([#132](https://github.com/containerd/ttrpc/pull/132)) - Fix server shutdown logic ([#130](https://github.com/containerd/ttrpc/pull/130)) - Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#133](https://github.com/containerd/ttrpc/pull/133)) - Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128)) - server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123)) - README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125)) - stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120)) - Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122)) - build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118)) - Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116)) - doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121)) - \*: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114)) - Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112)) - \*.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113)) - PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111)) - Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107)) - Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109)) - Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106)) - Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102)) - Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105)) - Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103)) - Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104)) - Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99)) - Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100)) - Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101)) </details> ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`6c3934b`](https://github.com/containerd/containerd/commit/6c3934b029d8) -> [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) ***new*** - **github.com/Microsoft/go-winio** v0.5.1 -> v0.6.0 - **github.com/Microsoft/hcsshim** v0.9.2 -> v0.10.0-rc.7 - **github.com/blang/semver/v4** v4.0.0 ***new*** - **github.com/cenkalti/backoff/v4** v4.1.2 -> v4.2.0 - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/cilium/ebpf** v0.7.0 -> v0.9.1 - **github.com/container-orchestrated-devices/container-device-interface** v0.5.4 ***new*** - **github.com/containerd/btrfs/v2** v2.0.0 ***new*** - **github.com/containerd/cgroups** v1.0.3 -> v1.1.0 - **github.com/containerd/cgroups/v3** v3.0.1 ***new*** - **github.com/containerd/continuity** v0.2.2 -> v0.3.0 - **github.com/containerd/fifo** v1.0.0 -> v1.1.0 - **github.com/containerd/go-cni** v1.1.3 -> v1.1.9 - **github.com/containerd/imgcrypt** v1.1.3 -> v1.1.7 - **github.com/containerd/nri** v0.1.0 -> v0.3.0 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.1 - **github.com/containerd/typeurl/v2** v2.1.0 ***new*** - **github.com/containernetworking/cni** v1.0.1 -> v1.1.2 - **github.com/containernetworking/plugins** v1.0.1 -> v1.2.0 - **github.com/containers/ocicrypt** v1.1.2 -> v1.1.6 - **github.com/coreos/go-systemd/v22** v22.3.2 -> v22.5.0 - **github.com/cpuguy83/go-md2man/v2** v2.0.0 -> v2.0.2 - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/docker/go-units** v0.4.0 -> v0.5.0 - **github.com/emicklei/go-restful/v3** v3.10.1 ***new*** - **github.com/fsnotify/fsnotify** v1.4.9 -> v1.6.0 - **github.com/go-logr/logr** v1.2.2 -> v1.2.3 - **github.com/godbus/dbus/v5** v5.0.6 -> v5.1.0 - **github.com/google/go-cmp** v0.5.6 -> v0.5.9 - **github.com/google/uuid** v1.2.0 -> v1.3.0 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.7.0 ***new*** - **github.com/imdario/mergo** v0.3.12 -> v0.3.13 - **github.com/intel/goresctrl** v0.2.0 -> v0.3.0 - **github.com/klauspost/compress** v1.11.13 -> v1.16.0 - **github.com/klauspost/cpuid/v2** v2.0.4 ***new*** - **github.com/miekg/pkcs11** v1.0.3 -> v1.1.1 - **github.com/minio/sha256-simd** v1.0.0 ***new*** - **github.com/moby/sys/mountinfo** v0.5.0 -> v0.6.2 - **github.com/moby/sys/sequential** v0.5.0 ***new*** - **github.com/moby/sys/signal** v0.6.0 -> v0.7.0 - **github.com/opencontainers/image-spec** [`693428a`](https://github.com/containerd/containerd/commit/693428a734f5) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b) - **github.com/opencontainers/runc** v1.1.0 -> v1.1.4 - **github.com/opencontainers/runtime-spec** [`1c3f411`](https://github.com/containerd/containerd/commit/1c3f411f0417) -> v1.1.0-rc.1 - **github.com/opencontainers/runtime-tools** [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) ***new*** - **github.com/opencontainers/selinux** v1.10.0 -> v1.11.0 - **github.com/pelletier/go-toml** v1.9.3 -> v1.9.5 - **github.com/prometheus/client_golang** v1.11.0 -> v1.14.0 - **github.com/prometheus/client_model** v0.2.0 -> v0.3.0 - **github.com/prometheus/common** v0.30.0 -> v0.37.0 - **github.com/prometheus/procfs** v0.7.3 -> v0.8.0 - **github.com/russross/blackfriday/v2** v2.0.1 -> v2.1.0 - **github.com/sirupsen/logrus** v1.8.1 -> v1.9.0 - **github.com/stretchr/testify** v1.7.0 -> v1.8.2 - **github.com/syndtr/gocapability** [`42c35b4`](https://github.com/containerd/containerd/commit/42c35b437635) ***new*** - **github.com/tchap/go-patricia/v2** v2.3.1 ***new*** - **github.com/urfave/cli** v1.22.1 -> v1.22.12 - **github.com/vishvananda/netlink** [`f5de759`](https://github.com/containerd/containerd/commit/f5de75959ad5) -> v1.2.1-beta.2 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.37.0 ***new*** - **go.opentelemetry.io/otel/sdk** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.11.0 -> v0.19.0 - **golang.org/x/crypto** [`32db794`](https://github.com/containerd/containerd/commit/32db794688a5) -> v0.1.0 - **golang.org/x/mod** v0.7.0 ***new*** - **golang.org/x/net** [`fe4d628`](https://github.com/containerd/containerd/commit/fe4d6282115f) -> v0.7.0 - **golang.org/x/oauth2** [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.4.0 - **golang.org/x/sync** [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0 - **golang.org/x/sys** [`1d35b9e`](https://github.com/containerd/containerd/commit/1d35b9e2eb4e) -> v0.6.0 - **golang.org/x/term** [`6886f2d`](https://github.com/containerd/containerd/commit/6886f2dfbf5b) -> v0.5.0 - **golang.org/x/text** v0.3.7 -> v0.7.0 - **golang.org/x/time** [`1f47c86`](https://github.com/containerd/containerd/commit/1f47c861a9ac) -> [`90d013b`](https://github.com/containerd/containerd/commit/90d013bbcef8) - **golang.org/x/tools** v0.5.0 ***new*** - **google.golang.org/genproto** [`e50cd97`](https://github.com/containerd/containerd/commit/e50cd9704f63) -> [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.43.0 -> v1.53.0 - **google.golang.org/protobuf** v1.27.1 -> v1.28.1 - **gopkg.in/yaml.v3** [`496545a`](https://github.com/containerd/containerd/commit/496545a6307b) -> v3.0.1 - **k8s.io/api** v0.22.5 -> v0.26.2 - **k8s.io/apimachinery** v0.22.5 -> v0.26.2 - **k8s.io/apiserver** v0.22.5 -> v0.26.2 - **k8s.io/client-go** v0.22.5 -> v0.26.2 - **k8s.io/component-base** v0.22.5 -> v0.26.2 - **k8s.io/cri-api** v0.23.1 -> v0.26.2 - **k8s.io/klog/v2** v2.30.0 -> v2.90.1 - **k8s.io/utils** [`cb0fa31`](https://github.com/containerd/containerd/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/containerd/containerd/commit/a5ecb0141aa5) - **sigs.k8s.io/json** [`f223a00`](https://github.com/containerd/containerd/commit/f223a00ba0e2) ***new*** - **sigs.k8s.io/structured-merge-diff/v4** v4.1.2 -> v4.2.3 - **sigs.k8s.io/yaml** v1.2.0 -> v1.3.0 Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0) ##### Which file should I download? - `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04). - `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent. - `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) - `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases) and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. ### [`v1.6.31`](https://github.com/containerd/containerd/releases/tag/v1.6.31): containerd 1.6.31 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.30...v1.6.31) Welcome to the v1.6.31 release of containerd! The thirty-first patch release for containerd 1.6 contains a few fixes, one for a regression that was introduced in v1.6.30 in the way process exits were handled. ##### Highlights - Adds mediatype to OCI index record on export ([#9991](https://github.com/containerd/containerd/pull/9991)) ##### Runtime - Fix runc shim to only defer init process exits ([#10038](https://github.com/containerd/containerd/pull/10038)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Phil Estes - Akihiro Suda - Austin Vazquez - Laura Brehm - Maksym Pavlenko - Sebastiaan van Stijn - Talon ##### Changes <details><summary>14 commits</summary> - Prepare for v1.6.31 release ([#10040](https://github.com/containerd/containerd/pull/10040)) - [`7f7012bad`](https://github.com/containerd/containerd/commit/7f7012bad7af5275d84ba63b6ba93a4882cd94cd) Prepare for v1.6.31 release - Fix runc shim to only defer init process exits ([#10038](https://github.com/containerd/containerd/pull/10038)) - [`5e53da4a1`](https://github.com/containerd/containerd/commit/5e53da4a1403e80339e3d2897dd41cce3842b335) runc-shim: only defer init process exits - Fix compile from version control system (source) use case ([#10011](https://github.com/containerd/containerd/pull/10011)) - [`7592f87f0`](https://github.com/containerd/containerd/commit/7592f87f040128b44e1aafef33b0b33c65334209) Fix compile from version control system (source) use case - Adds mediatype to OCI index record on export ([#9991](https://github.com/containerd/containerd/pull/9991)) - [`8d415fd0e`](https://github.com/containerd/containerd/commit/8d415fd0ee2d88ae4c53d75acf0707ec9151ea0f) adds mediatype to oci index record - vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#9974](https://github.com/containerd/containerd/pull/9974)) - [`2dbb59b5a`](https://github.com/containerd/containerd/commit/2dbb59b5af8b373085c2dcb272a78d586eeb6bfc) vendor: github.com/golang/protobuf v1.5.4 - [`069bb78c9`](https://github.com/containerd/containerd/commit/069bb78c9ecc7ac7cab650a3029e745471e2a899) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 - [`68d395cad`](https://github.com/containerd/containerd/commit/68d395cad899fcba32d9c5dcc20b2afe375c7682) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 - Backport test release on PR ([#9955](https://github.com/containerd/containerd/pull/9955)) - [`b3713136d`](https://github.com/containerd/containerd/commit/b3713136d1fccacd55dbcd507739f2b788b29554) CI: test release.yml on every PR </details> ##### Dependency Changes - **github.com/golang/protobuf** v1.5.3 -> v1.5.4 - **google.golang.org/protobuf** v1.31.0 -> v1.33.0 Previous release can be found at [v1.6.30](https://github.com/containerd/containerd/releases/tag/v1.6.30) ### [`v1.6.30`](https://github.com/containerd/containerd/releases/tag/v1.6.30): containerd 1.6.30 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.29...v1.6.30) Welcome to the v1.6.30 release of containerd! The thirtieth patch release for containerd 1.6 contains various fixes and updates as well as a build fix which prevented the v1.6.29 tag from being released. ##### Highlights - Update builds to go 1.21.8 ([#9945](https://github.com/containerd/containerd/pull/9945)) - Fix config import relative path glob ([#9835](https://github.com/containerd/containerd/pull/9835)) - Move high volume event logs to Trace level ([#9824](https://github.com/containerd/containerd/pull/9824)) - Move certain debug logs to trace logs ([#9762](https://github.com/containerd/containerd/pull/9762)) ##### Container Runtime Interface (CRI) - Add timeout to drain exec io ([#9768](https://github.com/containerd/containerd/pull/9768)) - Propagate deprecation list to runtime status ([#9819](https://github.com/containerd/containerd/pull/9819)) - Fix image pinning when image is not pulled through cri ([#9785](https://github.com/containerd/containerd/pull/9785)) ##### Runtime - Update runc-shim to process exec exits before init ([#9927](https://github.com/containerd/containerd/pull/9927)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Wei Fu - Maksym Pavlenko - Phil Estes - Kirtana Ashok - Mike Brown - Akhil Mohan - Angelos Kolaitis - Austin Vazquez - Henry Wang - Laura Brehm - Nashwan Azhari - Sebastiaan van Stijn - Tony Fang ##### Changes <details><summary>59 commits</summary> - Prepare v1.6.30 ([#9952](https://github.com/containerd/containerd/pull/9952)) - [`8268fc6e9`](https://github.com/containerd/containerd/commit/8268fc6e90f2305410609abf34559ec2f5966c78) Prepare release notes for v1.6.30 - [`614ca2e12`](https://github.com/containerd/containerd/commit/614ca2e12193ae80afc11beb5a55fc2ae05c8915) Revert go version environment removal - Prepare release notes for v1.6.29 ([#9950](https://github.com/containerd/containerd/pull/9950)) - [`9ef6d9d03`](https://github.com/containerd/containerd/commit/9ef6d9d03d8d4124d4e8e28399fef28c137fcc2e) Add release notes for v1.6.29.toml - use a composite action to install Go ([#9949](https://github.com/containerd/containerd/pull/9949)) - [`cfbbb510c`](https://github.com/containerd/containerd/commit/cfbbb510c23672daf7711a9afd548801dd741c4a) Use the Go toolchain in CI matrix to build binaries - [`f015dbc5a`](https://github.com/containerd/containerd/commit/f015dbc5a3d1f5a6eaefc561130ee5bb05e0d6c5) use composite action in ci workflow - Update builds to go 1.21.8 ([#9945](https://github.com/containerd/containerd/pull/9945)) - [`ccf3eb6a2`](https://github.com/containerd/containerd/commit/ccf3eb6a2de426c9cfbb9409c330df79d3dbba0c) update to go 1.21.8, 1.22.1 - Backport easy go install and update go ([#9890](https://github.com/containerd/containerd/pull/9890)) - [`f6475ea59`](https://github.com/containerd/containerd/commit/f6475ea597b713a27e0b31e5723f3cd315b39eeb) Drop go 1.20 and build against 1.22 - [`7c45ad092`](https://github.com/containerd/containerd/commit/7c45ad0923f0ea267cb9b66a65dea6fff4e0ff0b) Extract a composite action to install Go - [`4f7305414`](https://github.com/containerd/containerd/commit/4f73054149a36ba97263af8ee72e302c7a226906) update to go1.21.6, go1.20.13 - [`da5a36c37`](https://github.com/containerd/containerd/commit/da5a36c3700ac1142c2451137a362d4c92d1897d) Use testify - [`afe6efee3`](https://github.com/containerd/containerd/commit/afe6efee30df36c16dae3f1afe87a8e324a9b031) Revert container_stats_test.go change which caused Windows CRI integration test failure - [`370ef115f`](https://github.com/containerd/containerd/commit/370ef115f0e1875bce98326cce4aafd2a953c30b) container_stats_test.go: avoid checking snapshot size - [`935720b8c`](https://github.com/containerd/containerd/commit/935720b8c065bddd2dc4372a76225ab0290b449c) Move inline PS scripts into files - [`74bae5af8`](https://github.com/containerd/containerd/commit/74bae5af8c853f52b65666682db7d31e9e8d2f02) Uninstall mingw before attempting upgrade - [`9b9500bb0`](https://github.com/containerd/containerd/commit/9b9500bb0d45ac1e669a3319039acf7c8359e885) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. - [`4814f9e48`](https://github.com/containerd/containerd/commit/4814f9e483fc2a0f897cf553ac67b882bc133fbe) seccomp, apparmor: add go:noinline - Disable OOM set score unpriv test temporarily ([#9943](https://github.com/containerd/containerd/pull/9943)) - [`c7c8ce6bc`](https://github.com/containerd/containerd/commit/c7c8ce6bcf73cc608b6987f0729f40f93ce443c4) Disable OOM set score unpriv test temporarily - Update runc-shim to process exec exits before init ([#9927](https://github.com/containerd/containerd/pull/9927)) - [`65915f0a2`](https://github.com/containerd/containerd/commit/65915f0a2c0b4d1cb590f39c6cc3b78e7bb75fcb) runc-shim: process exec exits before init - Backport GitHub actions package updates ([#9877](https://github.com/containerd/containerd/pull/9877)) - [`e552c8898`](https://github.com/containerd/containerd/commit/e552c889875ecb7fe2e8f5dadac77765f2988932) build(deps): bump golangci/golangci-lint-action from 3 to 4 - [`888ae152c`](https://github.com/containerd/containerd/commit/888ae152c6eb25eee5b4b533c5fd2f8c3448b609) build(deps): bump actions/cache from 3 to 4 - [`dd913a0de`](https://github.com/containerd/containerd/commit/dd913a0defb4aa139fe2ab719cf37850ad5c7898) build(deps): bump actions/upload-artifact from 3 to 4 - [`a250c101a`](https://github.com/containerd/containerd/commit/a250c101afdebcaa7016e50df7670d25e3427700) build(deps): bump actions/download-artifact from 3 to 4 - [`7c8fd2255`](https://github.com/containerd/containerd/commit/7c8fd2255deaee02ab957a2b05914d01498a7870) build(deps): bump github/codeql-action from 2 to 3 - [`f325e559e`](https://github.com/containerd/containerd/commit/f325e559e0d93a7990ef1302533d20484d59a50b) build(deps): bump docker/setup-buildx-action from 2 to 3 - [`1bae160de`](https://github.com/containerd/containerd/commit/1bae160de37a9b37cd8d995e1ffa54247c14f21c) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 - [`3c81dc13b`](https://github.com/containerd/containerd/commit/3c81dc13b45d917e802223b5f80c4559a3b7d969) build(deps): bump actions/upload-artifact from 1 to 3 - [`9b3b80eea`](https://github.com/containerd/containerd/commit/9b3b80eea1f68de6db0dde7578395995314520e5) build(deps): bump actions/setup-go from 3 to 5 - [`6b74818d8`](https://github.com/containerd/containerd/commit/6b74818d8908a66ba7ab668f486f1de9c84b1239) build(deps): bump actions/checkout from 3 to 4 - Fix config import relative path glob ([#9835](https://github.com/containerd/containerd/pull/9835)) - [`0f2068a70`](https://github.com/containerd/containerd/commit/0f2068a70e0824ef7fb13c3e21763428bc58ad40) Fix config import relative path glob - ci: update crun version to 1.14.3 ([#9851](https://github.com/containerd/containerd/pull/9851)) - [`89d00db95`](https://github.com/containerd/containerd/commit/89d00db952fbfa9a1425be30895e9615a9d3215f) ci: update crun version to 1.14.3 - Add timeout to drain exec io ([#9768](https://github.com/containerd/containerd/pull/9768)) - [`aac488730`](https://github.com/containerd/containerd/commit/aac488730fb6b4fec37cdc98d2b834e7033b60ca) \*: fix code style issue - [`2a38c7e2e`](https://github.com/containerd/containerd/commit/2a38c7e2ebc9e5f1dcca25cb70535e0886e8c620) cri: add config ut for invalid drain io timeout value - [`ce213431f`](https://github.com/containerd/containerd/commit/ce213431fd3d413861d705b3d2d28fa83b281e39) integration: add testcase to drain exec IO in time - [`b5d52efca`](https://github.com/containerd/containerd/commit/b5d52efca8c1c5494c8ab72c615a4d6ed190b159) cri: disable drain-exec-IO if it is empty timeout - [`85bed5863`](https://github.com/containerd/containerd/commit/85bed5863f5313bedd5e6c2319d677124b44cdf5) \*: update drainExecSyncIO docs and validate the timeout - [`0438e477c`](https://github.com/containerd/containerd/commit/0438e477c35faad18e6b7f3a6b7d8a8f787f5efc) \*: add DrainExecSyncIOTimeout config and disable as by default - [`fb262317c`](https://github.com/containerd/containerd/commit/fb262317cd66e9f9c2ce12389b658ce042e410cc) \*: fix typo and skip exec-io-drain-testcase in win - [`f50c9922b`](https://github.com/containerd/containerd/commit/f50c9922b1cc96e8829936509b2bf49ceaa4e5c1) pkg/cri/server: add timeout to drain exec io - Move high volume event logs to Trace level ([#9824](https://github.com/containerd/containerd/pull/9824)) - [`99fa35e70`](https://github.com/containerd/containerd/commit/99fa35e7015d487c210d82862b4c807a913d50f2) Move high volume event logs to Trace level - Propagate deprecation list to runtime status ([#9819](https://github.com/containerd/containerd/pull/9819)) - [`3785deac4`](https://github.com/containerd/containerd/commit/3785deac4fab3aa30be9a55812dc78b2e1841e29) cri: propagate deprecation list to runtime status - ctr: print deprecation warnings on every invocation ([#9821](https://github.com/containerd/containerd/pull/9821)) - [`b7a0b1b8e`](https://github.com/containerd/containerd/commit/b7a0b1b8ed895d1737c7a558cff4dae7f9f7e7df) ctr: print deprecation warnings on every invocation - Fix image pinning when image is not pulled through cri ([#9785](https://github.com/containerd/containerd/pull/9785)) - [`2d43994fb`](https://github.com/containerd/containerd/commit/2d43994fb921722002a5043724c6624bfb9d87f0) bug fix: make sure cri image is pinned when it is pulled outside cri - Move certain debug logs to trace logs ([#9762](https://github.com/containerd/containerd/pull/9762)) - [`195ef7691`](https://github.com/containerd/containerd/commit/195ef7691ea85cfbcb54693017a6195beddb55dc) Move certain debug logs to trace logs </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28) ### [`v1.6.29`](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29) [Compare Source](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29) ### [`v1.6.28`](https://github.com/containerd/containerd/releases/tag/v1.6.28): containerd 1.6.28 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.27...v1.6.28) Welcome to the v1.6.28 release of containerd! The twenty-eighth patch release for containerd 1.6 updates the runc binary in the release builds to address CVE-2024-21626 ##### Notable Updates - **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)) - **Update seccomp profile for new syscalls added since Linux 5.16** ([#9694](https://github.com/containerd/containerd/pull/9694)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Andrey Epifanov - Derek McGowan - Akihiro Suda - Maksym Pavlenko - Phil Estes - Shengjing Zhu - Wei Fu ##### Changes <details><summary>13 commits</summary> - Prepare v1.6.28 and update runc to v1.1.12 ([#9723](https://github.com/containerd/containerd/pull/9723)) - [`570c7c637`](https://github.com/containerd/containerd/commit/570c7c637745c9a5d41309c51193107a25768200) Prepare release notes for v1.6.28 - [`b20b9f86b`](https://github.com/containerd/containerd/commit/b20b9f86b583b11a7fac34e6c682bc7633c74237) Update runc binary to v1.1.12 - \[release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. ([#9707](https://github.com/containerd/containerd/pull/9707)) - [`19500722a`](https://github.com/containerd/containerd/commit/19500722aec045da29536401fa4c76dfc5ef0cbe) \[release/1.6] vendor: golang.org/x/crypto v0.18.0 - [`919928f6b`](https://github.com/containerd/containerd/commit/919928f6b006e563d1a1c57af36e29b570dd726a) \[release/1.6] vendor: golang.org/x/term v0.16.0 - [`7d6a4d23b`](https://github.com/containerd/containerd/commit/7d6a4d23b182e419c0cfa732c369d7f4c90c7a02) \[release/1.6] vendor: golang.org/x/sys v0.16.0 - [`16ac018ae`](https://github.com/containerd/containerd/commit/16ac018ae3efaa0389678a47d0135c739a93cbae) \[release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0 - \[release/1.6] seccomp: kernel 6.7 ([#9694](https://github.com/containerd/containerd/pull/9694)) - [`f44628305`](https://github.com/containerd/containerd/commit/f44628305d7cdccfd1f7b8996b39846db5c4f035) seccomp: kernel 6.7 - \[release/1.6] carry [#9557](https://github.com/containerd/containerd/issues/9557) - enable ARM CI ([#9636](https://github.com/containerd/containerd/pull/9636)) - [`65e1656f2`](https://github.com/containerd/containerd/commit/65e1656f2755727770f2adc90df8b972e7a513f2) cri: fix integration test on cgroupsv2 system - [`9cf1e1a39`](https://github.com/containerd/containerd/commit/9cf1e1a39ca17328c973a7d2ed2969e4f98993cc) \*: enable ARM64 runner </details> ##### Dependency Changes - **github.com/go-logr/logr** v1.2.2 -> v1.3.0 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/uuid** v1.3.0 -> v1.3.1 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 -> v0.46.0 - **go.opentelemetry.io/otel** v1.3.0 -> v1.21.0 - **go.opentelemetry.io/otel/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/sdk** v1.3.0 -> v1.21.0 - **go.opentelemetry.io/otel/trace** v1.3.0 -> v1.21.0 - **golang.org/x/crypto** v0.14.0 -> v0.18.0 - **golang.org/x/net** v0.17.0 -> v0.18.0 - **golang.org/x/oauth2** v0.10.0 -> v0.11.0 - **golang.org/x/sys** v0.13.0 -> v0.16.0 - **golang.org/x/term** v0.13.0 -> v0.16.0 - **golang.org/x/text** v0.13.0 -> v0.14.0 - **google.golang.org/grpc** v1.58.3 -> v1.59.0 Previous release can be found at [v1.6.27](https://github.com/containerd/containerd/releases/tag/v1.6.27) ### [`v1.6.27`](https://github.com/containerd/containerd/releases/tag/v1.6.27): containerd 1.6.27 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.26...v1.6.27) Welcome to the v1.6.27 release of containerd! The twenty-seventh patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Improve `/etc/group` handling when appending groups** ([#9543](https://github.com/containerd/containerd/pull/9543)) - **Update runc binary to v1.1.11** ([#9597](https://github.com/containerd/containerd/pull/9597)) - **Remove runc import** ([#9606](https://github.com/containerd/containerd/pull/9606)) - **Update shim pidfile permissions to 0644** ([#9613](https://github.com/containerd/containerd/pull/9613)) - **Update Go version to 1.20.13** ([#9625](https://github.com/containerd/containerd/pull/9625)) ##### Deprecation Warnings - **Emit deprecation warning for CRIU config usage** ([#9448](https://github.com/containerd/containerd/pull/9448)) - **Emit deprecation warning for some CRI configs** ([#9447](https://github.com/containerd/containerd/pull/9447)) - **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#9572](https://github.com/containerd/containerd/pull/9572)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Akihiro Suda - Derek McGowan - Sebastiaan van Stijn - Djordje Lukic - Jaroslav Jindrak - Kay Yan - Maksym Pavlenko - Phil Estes - Wei Fu - ruiwen-zhao ##### Changes <details><summary>26 commits</summary> - \[release/1.6] Prepare release notes for v1.6.27 ([#9631](https://github.com/containerd/containerd/pull/9631)) - [`d0edecf28`](https://github.com/containerd/containerd/commit/d0edecf28b51b35cfb549e3d18467bd2087fb0e7) Prepare release notes for v1.6.27 - \[release/1.6] update to go1.20.13, test go1.21.6 ([#9625](https://github.com/containerd/containerd/pull/9625)) - [`32a515211`](https://github.com/containerd/containerd/commit/32a515211d03771e3a35bf7bcb4b114bf1131ada) update to go1.20.13, test go1.21.6 - \[release/1.6 backport] shim: Create pid-file with 0644 permissions ([#9613](https://github.com/containerd/containerd/pull/9613)) - [`37de14d95`](https://github.com/containerd/containerd/commit/37de14d9562db48f9b66f37b10fa3e704455ae25) shim: Create pid-file with 0644 permissions - \[release/1.6 backport] remove github.com/opencontainers/runc dependency ([#9606](https://github.com/containerd/containerd/pull/9606)) - [`3938d63de`](https://github.com/containerd/containerd/commit/3938d63de4737668ccec1f5eaf552c58a5d32057) remove github.com/opencontainers/runc dependency - \[release/1.6 backport] update runc binary to v1.1.11 ([#9597](https://github.com/containerd/containerd/pull/9597)) - [`9a9b11f73`](https://github.com/containerd/containerd/commit/9a9b11f733f778ce6171396d0c95e2b68cca5e21) update runc binary to v1.1.11 - \[release/1.6 backport] go.mod: dario.cat/mergo v1.0.0 ([#9570](https://github.com/containerd/containerd/pull/9570)) - [`6cd8e17ab`](https://github.com/containerd/containerd/commit/6cd8e17aba91d9f46f9e1a27b6381744e6cafe48) go.mod: dario.cat/mergo v1.0.0 - [`4f8ff5154`](https://github.com/containerd/containerd/commit/4f8ff5154abd2127d148fb11ca54feb6f0fb47af) go.mod: github.com/imdario/mergo v0.3.13 - \[release/1.6] restart: containerd.io/restart.logpath warning ([#9572](https://github.com/containerd/containerd/pull/9572)) - [`d24d263a4`](https://github.com/containerd/containerd/commit/d24d263a42f51dca398070be1f8268fd53fe6cc9) restart: containerd.io/restart.logpath warning - \[release/1.6 backport] WithAppendAdditionalGroups: better /etc/group handling ([#9543](https://github.com/containerd/containerd/pull/9543)) - [`9489c0eb0`](https://github.com/containerd/containerd/commit/9489c0eb0e7e51d90a0c2b5b4f5cbe23936d95ca) WithAppendAdditionalGroups: better /etc/group handling - \[release/1.6] cri: add deprecation warnings for deprecated CRI configs ([#9547](https://github.com/containerd/containerd/pull/9547)) - [`713065793`](https://github.com/containerd/containerd/commit/713065793592c0f877c81712a6f310f3d730bf07) deprecation: fix missing spaces in warnings - [`de0cc92a7`](https://github.com/containerd/containerd/commit/de0cc92a793b84118356715503243a2b9664dfa5) cri: add deprecation warning for runtime_root - [`833b94149`](https://github.com/containerd/containerd/commit/833b94149b6fd4faa6d4719ef7926257f5b2b098) cri: add deprecation warning for rutnime_engine - [`47de3d63d`](https://github.com/containerd/containerd/commit/47de3d63df0e5ffa522dfc2b6cb5b2d472879f28) cri: add deprecation warning for default_runtime - [`d421b8fda`](https://github.com/containerd/containerd/commit/d421b8fda9d0d303e1b90a13f378e6fffe7d9187) cri: add warning for untrusted_workload_runtime - [`802cb64b0`](https://github.com/containerd/containerd/commit/802cb64b00aab14d0f2edb45c9b89eef0016dc1c) cri: add warning for old form of systemd_cgroup - \[release/1.6] Add warning for CRIU config usage ([#9546](https://github.com/containerd/containerd/pull/9546)) - [`f8447466c`](https://github.com/containerd/containerd/commit/f8447466ccd8277083fefeb6db91194c4559ed0b) Add warning for CRIU config usage </details> ##### Dependency Changes - **dario.cat/mergo** v1.0.0 ***new*** - **github.com/moby/sys/user** v0.1.0 ***new*** Previous release can be found at [v1.6.26](https://github.com/containerd/containerd/releases/tag/v1.6.26) ### [`v1.6.26`](https://github.com/containerd/containerd/releases/tag/v1.6.26): containerd 1.6.26 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.25...v1.6.26) Welcome to the v1.6.26 release of containerd! The twenty-sixth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Fix windows default path overwrite issue** ([#9441](https://github.com/containerd/containerd/pull/9441)) - **Update push to inherit distribution sources from parent** ([#9453](https://github.com/containerd/containerd/pull/9453)) - **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)) ##### Deprecation Warnings - **Emit deprecation warning for AUFS snapshotter usage** ([#9448](https://github.com/containerd/containerd/pull/9448)) - **Emit deprecation warning for v1 runtime usage** ([#9468](https://github.com/containerd/containerd/pull/9468)) - **Emit deprecation warning for CRI v1alpha1 usage** ([#9468](https://github.com/containerd/containerd/pull/9468)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Kohei Tokunaga - Phil Estes - Bjorn Neergaard - Sebastiaan van Stijn - Brian Goff - Charity Kathure - Kazuyoshi Kato - Milas Bowman - Wei Fu - ruiwen-zhao ##### Changes <details><summary>30 commits</summary> - \[release/1.6] Prepare release notes for v1.6.26 ([#9490](https://github.com/containerd/containerd/pull/9490)) - [`ac5c5d3e0`](https://github.com/containerd/containerd/commit/ac5c5d3e03ab3c5b8103a1c0bd9931389f7a8fcf) Prepare release notes for v1.6.26 - Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c) - [`02f07fe19`](https://github.com/containerd/containerd/commit/02f07fe1994a3ddda3626c1ede2e32bc82b8e426) contrib/apparmor: deny /sys/devices/virtual/powercap - [`c94577e78`](https://github.com/containerd/containerd/commit/c94577e78d2924ddeb90d1601e31b50ee3acac48) oci/spec: deny /sys/devices/virtual/powercap - \[release/1.6] update to go1.20.12, test go1.21.5 ([#9472](https://github.com/containerd/containerd/pull/9472)) - [`7cbdfc92e`](https://github.com/containerd/containerd/commit/7cbdfc92ef38f789f1a2773fa6fac405d361a6cc) update to go1.20.12, test go1.21.5 - [`024b1cce6`](https://github.com/containerd/containerd/commit/024b1cce6b27f10e00bb9bde33a5fe9563545f8d) update to go1.20.11, test go1.21.4 - \[release/1.6] Add cri-api v1alpha2 usage warning to all api calls ([#9484](https://github.com/containerd/containerd/pull/9484)) - [`64e56bfde`](https://github.com/containerd/containerd/commit/64e56bfde95828660971673d20952f275cc2c0ba) Add cri-api v1alpha2 usage warning to all api calls - \[release/1.6] tasks: emit warning for v1 runtime and runc v1 runtime ([#9468](https://github.com/containerd/containerd/pull/9468)) - [`efefd3bf3`](https://github.com/containerd/containerd/commit/efefd3bf334b5df0e97bff0be61ba906a9b3b528) tasks: emit warning for runc v1 runtime - [`7825689b4`](https://github.com/containerd/containerd/commit/7825689b4c4d68cc1cc3c6dd072c2c2ec7b2d88e) tasks: emit warning for v1 runtime - \[release/1.6] snapshots: emit deprecation warning for aufs ([#9448](https://github.com/containerd/containerd/pull/9448)) - [`7cfe7052f`](https://github.com/containerd/containerd/commit/7cfe7052f4a2ad97e4e8032469aef588d2f0858c) snapshots: emit deprecation warning for aufs - \[release/1.6] cherry-pick/backport: Update golangci lint ([#9455](https://github.com/containerd/containerd/pull/9455)) - [`a1ae572a2`](https://github.com/containerd/containerd/commit/a1ae572a2778bf599e93929f5145f707b667f508) Fix linter error with updated linter - [`b638791d6`](https://github.com/containerd/containerd/commit/b638791d66b2e34f044f04736632995446b79314) ci: bump up golangci-lint to v1.55.0 - [`2370a2842`](https://github.com/containerd/containerd/commit/2370a2842318833b16a8274835374d0811c2ed28) Fix linter issues for golangci-lint 1.54.2 - [`8a65e2e31`](https://github.com/containerd/containerd/commit/8a65e2e31b6710f94be64c7fada727bd2569d16f) Bump up golangci-lint to v1.54.2 - [`969f8feb2`](https://github.com/containerd/containerd/commit/969f8feb2e0932a9f9c69f1696e552fcdcd2b31b) Bump up golangci-lint to v1.52.2 - \[release/1.6] push: inherit distribution sources from parent ([#9453](https://github.com/containerd/containerd/pull/9453)) - [`66959fdf5`](https://github.com/containerd/containerd/commit/66959fdf50d16520a84fb14c9467c0d87b7f0274) push: inherit distribution sources from parent - [`b4dcffcfb`](https://github.com/containerd/containerd/commit/b4dcffcfbff2694796a04243728700b37dc78d8e) content: add InfoProvider interface - [`bef4145c1`](https://github.com/containerd/containerd/commit/bef4145c141ad2c37e7797b4dc53b8e429b368ae) Change PushContent to require only Provider - \[release/1.6] Bump google.golang.org/grpc to v1.58.3 ([#9408](https://github.com/containerd/containerd/pull/9408)) - [`a5fc21060`](https://github.com/containerd/containerd/commit/a5fc21060b5254be9ca28e63c1c5a7364b551ca5) vendor: google.golang.org/grpc v1.58.3 - [`4fa05b3d8`](https://github.com/containerd/containerd/commit/4fa05b3d83488e4bc81241db1a65ca00fedec45d) Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 - \[release/1.6] Windows default path overwrite fix ([#9441](https://github.com/containerd/containerd/pull/9441)) - [`ede0ad5e1`](https://github.com/containerd/containerd/commit/ede0ad5e12826d574623a79b71bb1fbc49e75172) Fix windows default path overwrite issue </details> ##### Dependency Changes - **cloud.google.com/go/compute/metadata** v0.2.3 ***new*** - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/klauspost/compress** v1.11.13 -> v1.15.9 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **golang.org/x/oauth2** [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.10.0 - **golang.org/x/sync** v0.1.0 -> v0.3.0 - **google.golang.org/grpc** v1.50.1 -> v1.58.3 - **google.golang.org/protobuf** v1.28.1 -> v1.31.0 Previous release can be found at [v1.6.25](https://github.com/containerd/containerd/releases/tag/v1.6.25) ### [`v1.6.25`](https://github.com/containerd/containerd/releases/tag/v1.6.25): containerd 1.6.25 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.24...v1.6.25) Welcome to the v1.6.25 release of containerd! The twenty-fifth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Check whether content did not needs to be pushed to remote registry and cross-repo mounted or already existed** ([#9111](https://github.com/containerd/containerd/pull/9111)) - **Soft deprecate log package** ([#9105](https://github.com/containerd/containerd/pull/9105)) - **Always try to establish tls connection when tls configured** ([#9189](https://github.com/containerd/containerd/pull/9189)) - **CRI: stop recommending disable_cgroup** ([#9169](https://github.com/containerd/containerd/pull/9169)) - **Allow for images with artifacts layers to pull** ([#9150](https://github.com/containerd/containerd/pull/9150)) - **Require plugins to succeed after registering readiness** ([#9166](https://github.com/containerd/containerd/pull/9166)) - **Avoid potential deadlock in create handler in containerd-shim-runc-v2** ([#9210](https://github.com/containerd/containerd/pull/9210)) - **Add handling for missing basic auth credentials** ([#9236](https://github.com/containerd/containerd/pull/9236)) - **Add a new image label if it is docker schema 1** ([#9267](https://github.com/containerd/containerd/pull/9267)) - **Fix ambiguous tls fallback** ([#9300](https://github.com/containerd/containerd/pull/9300)) - **Expose usage of deprecated features** ([#9329](https://github.com/containerd/containerd/pull/9329)) - **Fix shimv1 leak issue** ([#9345](https://github.com/containerd/containerd/pull/9345)) - **Go version update to 1.20.10**([#9264](https://github.com/containerd/containerd/pull/9264)) - **Update runc to v1.1.10** ([#9360](https://github.com/containerd/containerd/pull/9360)) - **CRI: fix using the pinned label to pin image** ([#9382](https://github.com/containerd/containerd/pull/9382)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Sebastiaan van Stijn - Phil Estes - Wei Fu - Kazuyoshi Kato - Akhil Mohan - Akihiro Suda - Chen Yiyang - Fabian Hoffmann - Iceber Gu - Mike Brown - Paweł Gronowski - Austin Vazquez - Fahed Dorgaa - James Sturtevant - Kern Walster - Marat Radchenko - Qiutong Song - Tony Fouchard - ruiwen-zhao ##### Changes <details><summary>82 commits</summary> - \[release/1.6] Prepare release notes for v1.6.25 ([#9394](https://github.com/containerd/containerd/pull/9394)) - [`723d26ab2`](https://github.com/containerd/containerd/commit/723d26ab2efbaa81ce5e617a7fc3729c40f7f98d) Prepare release notes for v1.6.25 - [`1f865eba1`](https://github.com/containerd/containerd/commit/1f865eba1f424b0bd53087819d7697f0c6639bca) update mailmap - \[release/1.6] cri: fix using the pinned label to pin image ([#9382](https://github.com/containerd/containerd/pull/9382)) - [`b49815300`](https://github.com/containerd/containerd/commit/b4981530050c4b8efb8cab8d41b28d81eb21462d) cri: fix update of pinned label for images - [`751b0c186`](https://github.com/containerd/containerd/commit/751b0c1867b2fd52dccae7bafe5f453c99c65076) cri: fix using the pinned label to pin image - \[Release/1.6] vendor: golang.org/x/net v0.17.0 ([#9387](https://github.com/containerd/containerd/pull/9387)) - [`fb5568608`](https://github.com/containerd/containerd/commit/fb5568608079ed772381c52297e474c9f951d285) vendor: golang.org/x/net v0.17.0 - [`61ad86f6f`](https://github.com/containerd/containerd/commit/61ad86f6f9ce78c67a4ece671e1b91be080dcf61) vendor: golang.org/x/text v0.13.0 - [`4b431c844`](https://github.com/containerd/containerd/commit/4b431c8441f38049d266a69da7e2a7045af5f2dc) vendor: golang.org/x/sys v0.13.0 - \[Release/1.6] CVE-2022-1996 fix for go-restful ([#9385](https://github.com/containerd/containerd/pull/9385)) - [`62d402275`](https://github.com/containerd/containerd/commit/62d402275cdee9748c08690156f9ccb724d7c061) Remove CVE-2022-1996 from containerd binary upgrading go-restful to 2.16.0 - \[release/1.6] Enhance container image unpack client logs ([#9380](https://github.com/containerd/containerd/pull/9380)) - [`3e68bf65a`](https://github.com/containerd/containerd/commit/3e68bf65af4405c517b4292a24781dc4e1419ac8) Enhance container image unpack client logs - \[release/1.6] update github.com/containerd/nri v0.1.1 ([#9107](https://github.com/containerd/containerd/pull/9107)) - [`0dd65c826`](https://github.com/containerd/containerd/commit/0dd65c826ebcaf2376c4d38d3bbe99345bf64b86) \[release/1.6] update github.com/containerd/nri v0.1.1 - \[release/1.6 backport] update runc binary to v1.1.10 ([#9360](https://github.com/containerd/containerd/pull/9360)) - [`c73be2446`](https://github.com/containerd/containerd/commit/c73be2446e4414c701e7fce7b8f391c3dd113e8b) update runc binary to v1.1.10 - \[release/1.6] Expose usage of cri-api v1alpha2 ([#9357](https://github.com/containerd/containerd/pull/9357)) - [`746bcf2eb`](https://github.com/containerd/containerd/commit/746bcf2ebb7950dafe89a0dcf8db48b428fdd2d1) Expose usage of cri-api v1alpha2 - \[release/1.6] fix: shimv1 leak issue ([#9345](https://github.com/containerd/containerd/pull/9345)) - [`8b51a95fb`](https://github.com/containerd/containerd/commit/8b51a95fb2b05dd3a2c00f16606656300cc8a1cf) fix: shimv1 leak issue - \[release/1.6] update to go1.20.10, test go1.21.3 ([#9264](https://github.com/containerd/containerd/pull/9264)) - [`6741f819b`](https://github.com/containerd/containerd/commit/6741f819bfe4e8da485af2d0e1c7b134b40543b2) \[release/1.6] update to go1.20.10, test go1.21.3 - [`49615a0e9`](https://github.com/containerd/containerd/commit/49615a0e9e6f10fc0c13d509d2fc86f3bed63adc) \[release/1.6] update to go1.20.9, test go1.21.2 - \[release/1.6] cri: add deprecation warnings for mirrors, auths, and configs ([#9355](https://github.com/containerd/containerd/pull/9355)) - [`b68204e53`](https://github.com/containerd/containerd/commit/b68204e53b39cb705e85283a8f4f2f6082ac484c) cri: add deprecation warning for configs - [`ae8c58319`](https://github.com/containerd/containerd/commit/ae8c58319d8144e583f7f3796a074b9090ae16e8) cri: add deprecation warning for auths - [`455edcad2`](https://github.com/containerd/containerd/commit/455edcad2cb5f414ef67001f0bdae9f9440cfad8) cri: add deprecation warning for mirrors - [`878823f4d`](https://github.com/containerd/containerd/commit/878823f4d26c4b1c823e6d194521b3e9d1309add) cri: add ability to emit deprecation warnings - \[release/1.6] deprecation: new package for deprecations ([#9329](https://github.com/containerd/containerd/pull/9329)) - [`477b7d6a1`](https://github.com/containerd/containerd/commit/477b7d6a1a8a4c8731605316e7f67b6bdb742bd8) ctr: new deprecations command - [`24068b813`](https://github.com/containerd/containerd/commit/24068b813360602d59bc31b766fe79c5d3e82fb6) dynamic: record deprecation for dynamic plugins - [`218c7a1df`](https://github.com/containerd/containerd/commit/218c7a1df9ba3d2b28bbde72b772ccb3c3c061ed) server: add ability to record config deprecations - [`dfb9e1deb`](https://github.com/containerd/containerd/commit/dfb9e1deb9e749380518fdc6c732c55e5e2230a4) pull: record deprecation warning for schema 1 - [`90b42da6f`](https://github.com/containerd/containerd/commit/90b42da6f4496d2be76d462a5300cac92f0a07ef) introspection: add support for deprecations - [`0b6766b37`](https://github.com/containerd/containerd/commit/0b6766b3741274e0a2c73eb96378d9cb8381b97d) api/introspection: deprecation warnings in server - [`de3cb4c18`](https://github.com/containerd/containerd/commit/de3cb4c18660abcb3d2e4b1d8dec0085e3d51077) warning: new service for deprecations - [`da1b4419b`](https://github.com/containerd/containerd/commit/da1b4419b25f35315ca297d2b058d2655f9d25fd) deprecation: new package for deprecations - \[release/1.6] integration: deflake TestIssue9103 ([#9353](https://github.com/containerd/containerd/pull/9353)) - [`bca8a3f65`](https://github.com/containerd/containerd/commit/bca8a3f653d234e5356ab445eca9f6da0316ab77) integration: deflake TestIssue9103 - \[release/1.6] ci: Use Vagrant on ubuntu-latest-4-cores ([#9332](https://github.com/containerd/containerd/pull/9332)) - [`0985f7a43`](https://github.com/containerd/containerd/commit/0985f7a43db3e69a0c6d67d39b9397e5af71deca) ci: Use Vagrant on ubuntu-latest-4-cores - \[release/1.6] Fix ambiguous tls fallback ([#9300](https://github.com/containerd/containerd/pull/9300)) - [`5dd64301c`](https://github.com/containerd/containerd/commit/5dd64301c89ad1e428a746f0e90d9d72b45fe1b8) Check scheme and host of request on push redirect - [`51df21d09`](https://github.com/containerd/containerd/commit/51df21d09ebfac3e3470529fe1372ca22496e606) Avoid TLS fallback when protocol is not ambiguous - \[release/1.6] Add a new image label if it is docker schema 1 ([#9267](https://github.com/containerd/containerd/pull/9267)) - [`8108f0d03`](https://github.com/containerd/containerd/commit/8108f0d036be2c36f7fc69dd85286d299ee0bf7b) Add a new image label if it is docker schema 1 - \[release/1.6 backport] fix protobuf aarch64 ([#9284](https://github.com/containerd/containerd/pull/9284)) - [`5376afb3d`](https://github.com/containerd/containerd/commit/5376afb3dbec05541b018e361f1343f20dec3ada) fix protobuf aarch64 - \[release/1.6] remotes: add handling for missing basic auth credentials ([#9236](https://github.com/containerd/containerd/pull/9236)) - [`e529741d3`](https://github.com/containerd/containerd/commit/e529741d3f102c7b558255d0e8b053c4e0858bc1) remotes: add handling for missing basic auth credentials - [`ca45b92f4`](https://github.com/containerd/containerd/commit/ca45b92f4388ec7d0aa023f305891ec527b64484) Add ErrUnexpectedStatus to resolver - [`77c0175b4`](https://github.com/containerd/containerd/commit/77c0175b4269da0b409e1434576c1f86bf9a869c) Improve ErrUnexpectedStatus default string - \[release/1.6] Update x/net to 0.13 ([#9130](https://github.com/containerd/containerd/pull/9130)) - [`275fc594d`](https://github.com/containerd/containerd/commit/275fc594d8cf462d647b7c2f4dbfd2c8812d87ed) Bump x/net to 0.13 - \[release/1.6] Require plugins to succeed after registering readiness ([#9166](https://github.com/containerd/containerd/pull/9166)) - [`5223bf39a`](https://github.com/containerd/containerd/commit/5223bf39a636be1d347f9d73be2131e102922695) Require plugins to succeed after registering readiness - [`8f5eba314`](https://github.com/containerd/containerd/commit/8f5eba3148d91023df4277c705debb199fa85c57) cri: call RegisterReadiness after NewCRIService - \[release/1.6 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#9210](https://github.com/containerd/containerd/pull/9210)) - [`7b61862e7`](https://github.com/containerd/containerd/commit/7b61862e7c3e3410318bb723671954b101acec33) \*: add runc-fp as runc wrapper to inject failpoint - [`5238a6470`](https://github.com/containerd/containerd/commit/5238a6470ca921fe7e47f25b022ea815a1d6f9b4) containerd-shim-runc-v2: avoid potential deadlock in create handler - [`65e908ee1`](https://github.com/containerd/containerd/commit/65e908ee1370432a09c81d8f7bc7568ff3d7e784) containerd-shim-runc-v2: remove unnecessary `s.getContainer()` - [`1dd9acecb`](https://github.com/containerd/containerd/commit/1dd9acecb85860e374b750d908b33c44e4f75564) Uncopypaste parsing of OCI Bundle spec file - [`71c89ddf2`](https://github.com/containerd/containerd/commit/71c89ddf24b05743d9be6b12907dc22719ef769d) \[release/1.6]: Vagrantfile: install failpoint binaries - \[release/1.6] cri: stop recommending disable_cgroup ([#9169](https://github.com/containerd/containerd/pull/9169)) - [`7a0c8b6b7`](https://github.com/containerd/containerd/commit/7a0c8b6b750cbd2bf2377f1d4961609ea1ec6667) cri: stop recommending disable_cgroup - \[release/1.6] Allow for images with artifacts to pull ([#9150](https://github.com/containerd/containerd/pull/9150)) - [`8066dd81c`](https://github.com/containerd/containerd/commit/8066dd81ca673fcf4c8887069769592ba9fd694d) Allow for images with artifacts to pull - \[release 1.6] remotes/docker: Fix MountedFrom prefixed with target repository ([#9192](https://github.com/containerd/containerd/pull/9192)) - [`2fffc344a`](https://github.com/containerd/containerd/commit/2fffc344ad661b37a3dae6102b47f887c946f105) remotes/docker: Fix MountedFrom prefixed with target repository - \[release/1.6] remotes: always try to establish tls connection when tls configured ([#9189](https://github.com/containerd/containerd/pull/9189)) - [`6b5912220`](https://github.com/containerd/containerd/commit/6b591222096f12902ca8269668b36093edcc1899) remotes: always try to establish tls connection when tls configured - \[release/1.6] Build binaries with 1.21.1 ([#9180](https://github.com/containerd/containerd/pull/9180)) - [`37c758de1`](https://github.com/containerd/containerd/commit/37c758de159bce9544e65fefc81019af9fb0be69) Build binaries with 1.21.1 - \[release/1.6 backport] alias log package to github.com/containerd/log v0.1.0 ([#9105](https://github.com/containerd/containerd/pull/9105)) - [`f1591cc9b`](https://github.com/containerd/containerd/commit/f1591cc9b9d7f1b73f1c50cdca0ca577959eed48) alias log package to github.com/containerd/log v0.1.0 - [`f68d2d93b`](https://github.com/containerd/containerd/commit/f68d2d93b8c815b8687b85c932a8de2960ad2db7) vendor: golang.org/x/sys v0.7.0 - [`f305fb233`](https://github.com/containerd/containerd/commit/f305fb233db9764fcd9e83e9078fee213202c3ff) vendor: github.com/stretchr/testify v1.8.4 - [`4e24a30af`](https://github.com/containerd/containerd/commit/4e24a30af397b0d4dd6a417467eede3386381516) vendor: github.com/sirupsen/logrus v1.9.3 - \[release/1.6] remotes/docker: Add MountedFrom and Exists push status ([#9111](https://github.com/containerd/containerd/pull/9111)) - [`b66c818ba`](https://github.com/containerd/containerd/commit/b66c818ba6bd9e4fe139a6f9d988b3724c7a54ec) remotes/docker: Add MountedFrom and Exists push status </details> ##### Changes from containerd/log <details><summary>9 commits</summary> - Update golangci to 1.49 ([#1](https://github.com/containerd/log/pull/1)) - [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49 - [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README - [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details - [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow - [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module - [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest - [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README - [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file </details> ##### Changes from containerd/nri <details><summary>3 commits</summary> - \[release/0.1 backport] remove containerd as dependency ([#58](https://github.com/containerd/nri/pull/58)) - [`4275101`](https://github.com/containerd/nri/commit/42751010c8e875a07117c74bfe57c011ae491594) Task: fix typo in godoc - [`f6acbf1`](https://github.com/containerd/nri/commit/f6acbf1dc5b357d216af8ffca9d26dd0db3e4ef1) remove containerd as dependency </details> ##### Dependency Changes - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nri** v0.1.0 -> v0.1.1 - **github.com/emicklei/go-restful** v2.9.5 -> v2.16.0 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/stretchr/testify** v1.8.1 -> v1.8.4 - **golang.org/x/crypto** [`3147a52`](https://github.com/containerd/containerd/commit/3147a52a75dd) -> v0.14.0 - **golang.org/x/net** v0.8.0 -> v0.17.0 - **golang.org/x/sys** v0.6.0 -> v0.13.0 - **golang.org/x/term** v0.6.0 -> v0.13.0 - **golang.org/x/text** v0.8.0 -> v0.13.0 Previous release can be found at [v1.6.24](https://github.com/containerd/containerd/releases/tag/v1.6.24) ### [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24): containerd 1.6.24 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.23...v1.6.24) Welcome to the v1.6.24 release of containerd! The twenty-fourth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **CRI: fix leaked shim caused by high IO pressure** ([#9004](https://github.com/containerd/containerd/pull/9004)) - **Update to go1.20.8** ([#9073](https://github.com/containerd/containerd/pull/9073)) - **Update runc to v1.1.9** ([#8966](https://github.com/containerd/containerd/pull/8966)) - **Backport: add configurable mount options to overlay snapshotter** ([#8961](https://github.com/containerd/containerd/pull/8961)) - **log: cleanups and improvements to decouple more from logrus** ([#9002](https://github.com/containerd/containerd/pull/9002)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Akihiro Suda - Wei Fu - Derek McGowan - Akhil Mohan - Cardy.Tang - Danny Canter - Kazuyoshi Kato - Mike Brown - Phil Estes - Samuel Karp ##### Changes <details><summary>45 commits</summary> - \[release/1.6] Prepare release notes for v1.6.24 ([#9087](https://github.com/containerd/containerd/pull/9087)) - [`cdd59290d`](https://github.com/containerd/containerd/commit/cdd59290d051ffd8b5e730f96930c42cad65beac) Prepare release notes for v1.6.24 - \[release/1.6 backport] log: cleanups and improvements to decouple more from logrus ([#9002](https://github.com/containerd/containerd/pull/9002)) - [`33c2d88e7`](https://github.com/containerd/containerd/commit/33c2d88e7809eb42b0e9711c29a35c25a12dc18c) Revert "log: define G() as a function instead of a variable" - [`0a7f2975e`](https://github.com/containerd/containerd/commit/0a7f2975efbad7baddb31c36fb142db2a793534c) log: swap logrus functions with their equivalent on default logger - [`9d175a19b`](https://github.com/containerd/containerd/commit/9d175a19b7cbe165cb6285c891b384d518e2686b) log: add package documentation and summary of package's purpose - [`96fb65529`](https://github.com/containerd/containerd/commit/96fb655290f286eb818bf70f08555cd64ba8e780) log: make Fields type a generic map\[string]any - [`bace17e2e`](https://github.com/containerd/containerd/commit/bace17e2ead161c06fdd670be532f0c042071bd7) log: add log.Entry type - [`dd127885f`](https://github.com/containerd/containerd/commit/dd127885feacdeefc554d7042c49e01002809864) log: define OutputFormat type - [`5b4cf2329`](https://github.com/containerd/containerd/commit/5b4cf23295581c70b92db1dc7c30114bc1a8f3c8) log: define G() as a function instead of a variable - [`ee1b4a1e2`](https://github.com/containerd/containerd/commit/ee1b4a1e2f844a45c0ba784273501bc490e77aa2) log: add all log-levels that are accepted - [`d563a411f`](https://github.com/containerd/containerd/commit/d563a411facc32c8287136d53ca0a744f991f3b4) log: group "enum" consts and touch-up docs - [`6e8f4555b`](https://github.com/containerd/containerd/commit/6e8f4555b3f3f155ee9ffe5f3e7cf8e8c2ee10a6) log: WithLogger: remove redundant intermediate var - [`c19325559`](https://github.com/containerd/containerd/commit/c193255597662b8a7f16479dd454ba3dd728a3c4) log: SetFormat: include returns in switch - [`c3c22f8cb`](https://github.com/containerd/containerd/commit/c3c22f8cbc5b3687bdee79266602bff51e61c84a) log: remove gotest.tools dependency - \[release/1.6] update to go1.20.8 ([#9073](https://github.com/containerd/containerd/pull/9073)) - [`a2c294800`](https://github.com/containerd/containerd/commit/a2c294800ec11447b497bf7452bbbfba06c0168d) \[release/1.6] update to go1.20.8 - \[release/1.6 backport] make repositories of install dependencies configurable ([#9024](https://github.com/containerd/containerd/pull/9024)) - [`0da8dcaa7`](https://github.com/containerd/containerd/commit/0da8dcaa7c93c0b708c375a32328a7b85fd668d8) make repositories of install dependencies configurable - \[release/1.6 backport] update Golang to go1.20.7, minimum version go1.19 ([#9020](https://github.com/containerd/containerd/pull/9020)) - [`8e6a9de5b`](https://github.com/containerd/containerd/commit/8e6a9de5b5291b97684e948be096317611b37930) update to go1.20.7, go1.19.12 - [`8b2eb371f`](https://github.com/containerd/containerd/commit/8b2eb371f958f1bfc5bcab5ee70bcad18b2e5efc) Update Go to 1.20.6,1.19.11 - [`cff669c7a`](https://github.com/containerd/containerd/commit/cff669c7aab055d6b46bbb27fd044aba5e1453d8) update go to go1.20.5, go1.19.10 - [`f34a22de9`](https://github.com/containerd/containerd/commit/f34a22de99b57e30cd33d3769e3765950475ba07) update go to go1.20.4, go1.19.9 - [`e8e73065e`](https://github.com/containerd/containerd/commit/e8e73065ec668097067d37381399a80c8107fae1) update go to go1.20.3, go1.19.8 - [`9b3f950d6`](https://github.com/containerd/containerd/commit/9b3f950d607c3a6c2a3c1b8740c87338a986e203) Go 1.20.2 - [`17d03ac68`](https://github.com/containerd/containerd/commit/17d03ac681f61cd83c2bc7239956504c25ceb2f4) Go 1.20.1 - [`861f65447`](https://github.com/containerd/containerd/commit/861f65447c4cc59b2b91e441b24f1c80a730ce2b) go.mod: go 1.19 - [`81fa93784`](https://github.com/containerd/containerd/commit/81fa937842ac2501f777e23cddab8c7a573bd318) Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) - [`70dc11a6c`](https://github.com/containerd/containerd/commit/70dc11a6c1258891aa281815bb94d4bdc1194fe7) lint: remove `//nolint:dupword` that are no longer needed - [`fec784a06`](https://github.com/containerd/containerd/commit/fec784a06ad4276574dfb16ff631f9839f3b676c) lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" - [`6648df1ad`](https://github.com/containerd/containerd/commit/6648df1ada2575df6adcaf295b611d966d3308d7) lint: silence "type `HostFileConfig` is unused (unused)" - [`e6b268bc7`](https://github.com/containerd/containerd/commit/e6b268bc703b5903de719533a8fbe0307767342c) golangci-lint v1.51.1 - [`c552ccf67`](https://github.com/containerd/containerd/commit/c552ccf6769245e1531212505fa75e89f6f6ff1c) go.mod: golang.org/x/sync v0.1.0 - \[releases/1.6] \*: fix leaked shim caused by high IO pressure ([#9004](https://github.com/containerd/containerd/pull/9004)) - [`d00af5c3e`](https://github.com/containerd/containerd/commit/d00af5c3ea1a290112b3a56bee31023ef1d2019d) integration: issue7496 case should work for runc.v2 only - [`583696e4e`](https://github.com/containerd/containerd/commit/583696e4e0b055b8a0f860b9ed7f31f0f3127ff4) Vagrantfile: add strace tool - [`ab21d60d2`](https://github.com/containerd/containerd/commit/ab21d60d27d1d7c87423e9b4ecb076358762e89b) pkg/cri/server: add criService as argument when handle exit event - [`a229883cb`](https://github.com/containerd/containerd/commit/a229883cb1bffecbd8bd4d41ab19c99110bbd189) pkg/cri/server: fix leaked shim issue - [`d8f824200`](https://github.com/containerd/containerd/commit/d8f824200cdc39410bf9a4d110073186d6864f64) integration: add case to reproduce [#7496](https://github.com/containerd/containerd/issues/7496) - \[release/1.6] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#8961](https://github.com/containerd/containerd/pull/8961)) - [`8cd40e1d0`](https://github.com/containerd/containerd/commit/8cd40e1d0f13e5ddfef13833b265f6dfa298ec69) Add configurable mount options to overlay - [`453fa397a`](https://github.com/containerd/containerd/commit/453fa397a1f0f00871ff1ca4314b65e898e33661) feat: make overlay sync removal configurable - \[release/1.6 backport] update runc binary to v1.1.9 ([#8966](https://github.com/containerd/containerd/pull/8966)) - [`4cb7764df`](https://github.com/containerd/containerd/commit/4cb7764df8025d0a6edb34f6b69daf6c2abe6ad0) update runc binary to v1.1.9 </details> ##### Dependency Changes - **golang.org/x/sync** [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0 Previous release can be found at [v1.6.23](https://github.com/containerd/containerd/releases/tag/v1.6.23) ### [`v1.6.23`](https://github.com/containerd/containerd/releases/tag/v1.6.23): containerd 1.6.23 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.22...v1.6.23) Welcome to the v1.6.23 release of containerd! The twenty-third patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - \*\*Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854)) - \*\*cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927)) - \*\*Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908)) - \*\*update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905)) - \*\*backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Kirtana Ashok - Maksym Pavlenko - Austin Vazquez - Ben Foster - Derek McGowan - Mike Brown - Phil Estes - Rodrigo Campos - Sebastiaan van Stijn - Wei Fu ##### Changes <details><summary>13 commits</summary> - \[release/1.6] Add release notes for v1.6.23 ([#8939](https://github.com/containerd/containerd/pull/8939)) - [`e297a668f`](https://github.com/containerd/containerd/commit/e297a668fa432fddcf1ea718be697a452968847f) Add release notes for v1.6.23 - \[release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854)) - [`f51bf1960`](https://github.com/containerd/containerd/commit/f51bf19608714bc052a38fc2dc0920b30244aec7) Add support for stable ABI windows versions - [`43a02c0b2`](https://github.com/containerd/containerd/commit/43a02c0b286d77d9455055b2453cbab57c55811b) Update hcsshim tag to v0.9.10 - \[release/1.6] cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927)) - [`cc5b0a21b`](https://github.com/containerd/containerd/commit/cc5b0a21b438acd750f9779d3b3c4e68879bed50) cri: Don't use rel path for image volumes - \[release/1.6 backport] Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908)) - [`4238cff1c`](https://github.com/containerd/containerd/commit/4238cff1cfd43711c71f769b7129c6f8832ef507) Upgrade GitHub actions packages in release workflow - \[release/1.6] update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905)) - [`00d1092b7`](https://github.com/containerd/containerd/commit/00d1092b78c3405daf3cc4ced8075ca5ca2903a8) update to go1.19.12 - \[release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888)) - [`47d73b2de`](https://github.com/containerd/containerd/commit/47d73b2de65c806d93e19879ae86787b6f3735d6) Fix ro mount option being passed </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.8 -> v0.9.10 Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22) ### [`v1.6.22`](https://github.com/containerd/containerd/releases/tag/v1.6.22): containerd 1.6.22 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.21...v1.6.22) Welcome to the v1.6.22 release of containerd! The twenty-second patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **RunC: Update runc binary to v1.1.8** ([#8842](https://github.com/containerd/containerd/pull/8842)) - **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8823](https://github.com/containerd/containerd/pull/8823)) - **CRI: Write generated CNI config atomically** ([#8826](https://github.com/containerd/containerd/pull/8826)) - **Fix concurrent writes for `UpdateContainerStats`** ([#8819](https://github.com/containerd/containerd/pull/8819)) - **Make checkContainerTimestamps less strict on Windows** ([#8827](https://github.com/containerd/containerd/pull/8827)) - **Port-Forward: Correctly handle known errors** ([#8805](https://github.com/containerd/containerd/pull/8805)) - **Resolve docker.NewResolver race condition** ([#8800](https://github.com/containerd/containerd/pull/8800)) - **SecComp: Always allow `name_to_handle_at`** ([#8754](https://github.com/containerd/containerd/pull/8754)) - **Adding support to run hcsshim from local clone** ([#8713](https://github.com/containerd/containerd/pull/8713)) - **Pinned image support** ([#8720](https://github.com/containerd/containerd/pull/8720)) - **Runtime/V2/RunC: Handle early exits w/o big locks** ([#8695](https://github.com/containerd/containerd/pull/8695)) - **CRITool: Move up to CRI-TOOLS v1.27.0** ([#7997](https://github.com/containerd/containerd/pull/7997)) - **Fix cpu architecture detection issue on emulated ARM platform** ([#8533](https://github.com/containerd/containerd/pull/8533)) - **Task: Don't `close()` io before `cancel()`** ([#8659](https://github.com/containerd/containerd/pull/8659)) - **Fix panic when remote differ returns empty result** ([#8640](https://github.com/containerd/containerd/pull/8640)) - **Plugins: Notify readiness when registered plugins are ready** ([#8583](https://github.com/containerd/containerd/pull/8583)) - **Unwrap io errors in server connection receive error handling** ([ttrpc#143](https://github.com/containerd/ttrpc/pull/143)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Phil Estes - Sebastiaan van Stijn - Derek McGowan - Wei Fu - Kazuyoshi Kato - Austin Vazquez - Samuel Karp - dependabot\[bot] - Jin Dong - Maksym Pavlenko - Mike Brown - Shingo Omura - Akhil Mohan - Bjorn Neergaard - Laura Brehm - Tony Fang - Aditi Sharma - Andrey Epifanov - Benjamin Wang - Brian Goff - Cory Snider - Daniel Canter - Daniel Lenar - Henry Wang - Luca Comellini - Madhav Jivrajani - Mahamed Ali - Mohit Sharma - Oliver Radwell - Priyanka Saggu - Qasim Sarfraz - Takumasa Sakao - wangxiang - zounengren ##### Changes <details><summary>95 commits</summary> - \[release/1.6] Prepare release notes for v1.6.22 ([#8863](https://github.com/containerd/containerd/pull/8863)) - [`0770a4601`](https://github.com/containerd/containerd/commit/0770a4601c8d1dfc7699ae35d6be239ecc18025a) \[release/1.6] Add release notes for v1.6.22 - \[release/1.6] migrate to community owned bucket for node e2e tests ([#8876](https://github.com/containerd/containerd/pull/8876)) - [`512a672af`](https://github.com/containerd/containerd/commit/512a672afc8ffe9ec9b3a53289c7c6ffc20d0b7a) migrate to community owned bucket - \[release/1.6] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8870](https://github.com/containerd/containerd/pull/8870)) - [`b585ff155`](https://github.com/containerd/containerd/commit/b585ff155a9dd6254e08b23a09a0bb7e0aac8d3f) cri: memory.memsw.limit_in_bytes: no such file or directory - \[release/1.6] Update go-restful to v3.10.1 ([#8412](https://github.com/containerd/containerd/pull/8412)) - [`a322077bf`](https://github.com/containerd/containerd/commit/a322077bfb97c5946b187ec7859960870e2962cc) go.mod: github.com/emicklei/go-restful/v3 v3.10.1 - \[release/1.6 backport] update runc binary to v1.1.8 ([#8842](https://github.com/containerd/containerd/pull/8842)) - [`b3ac068eb`](https://github.com/containerd/containerd/commit/b3ac068ebc8526589af4a8b09eab597f501f6f0f) update runc binary to v1.1.8 - \[release/1.6 backport] ci: remove libseccomp-dev installation for nightly ([#8773](https://github.com/containerd/containerd/pull/8773)) - [`6e2bcb6dd`](https://github.com/containerd/containerd/commit/6e2bcb6ddb7629f3c7f4ba62d5d74cf7179bb204) ci: remove libseccomp-dev installation for nightly - \[release/1.6 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8823](https://github.com/containerd/containerd/pull/8823)) - [`cd06f23af`](https://github.com/containerd/containerd/commit/cd06f23af6bcf8c87cda625a0e78168c032a0637) capture desc variable in range variable just in case that it run in parallel mode - [`30f5c6a1f`](https://github.com/containerd/containerd/commit/30f5c6a1f26bf34bbe5eaf21acc7d5b86b14e027) Use t.TempDir instead of os.MkdirTemp - [`59d8363ef`](https://github.com/containerd/containerd/commit/59d8363ef33caa1a8261f472d3081f7f9d39e75e) fix userstr for dditionalGids on Linux - \[release/1.6 backport] cri: write generated CNI config atomically ([#8826](https://github.com/containerd/containerd/pull/8826)) - [`d75bf78c2`](https://github.com/containerd/containerd/commit/d75bf78c2f4af6c773056cdd096d3e3b9536348e) ctr: update WritePidFile to use atomicfile - [`5f70b23c1`](https://github.com/containerd/containerd/commit/5f70b23c11dc0ff5b4602fc202ffcae30013bb41) shim: WritePidFile & WriteAddress use atomicfile - [`505d444b0`](https://github.com/containerd/containerd/commit/505d444b0f339f2daa631ef6ea7f1a9cc22ba6f7) cri: write generated CNI config atomically on Unix - [`b2d2d3829`](https://github.com/containerd/containerd/commit/b2d2d3829912a87be519840e45307e0e74bf7693) atomicfile: new package for atomic file writes - \[release/1.6 backport] Fix concurrent writes for UpdateContainerStats ([#8819](https://github.com/containerd/containerd/pull/8819)) - [`9f650143f`](https://github.com/containerd/containerd/commit/9f650143fafb5927479ea3b5bf2b8e309c2d8265) Fix concurrent writes for UpdateContainerStats - \[release/1.6 backport] Make checkContainerTimestamps less strict on Windows ([#8827](https://github.com/containerd/containerd/pull/8827)) - [`568ce91ca`](https://github.com/containerd/containerd/commit/568ce91ca590bd37346df0550f25e7ef7eef3cff) Make checkContainerTimestamps less strict on Windows - \[release/1.6 backport] dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8817](https://github.com/containerd/containerd/pull/8817)) - [`d2f47192a`](https://github.com/containerd/containerd/commit/d2f47192a54e7b58c037788a0f9b7e4f9047e849) dependency: bump go.etcd.io/bbolt to v1.3.7 - [`fb56dc245`](https://github.com/containerd/containerd/commit/fb56dc24522855a33ec795eaeebbb57bb15e49f0) \[release/1.6] vendor: github.com/stretchr/testify v1.8.1 - \[release/1.6 backport] Move logrus setup code to log package ([#8832](https://github.com/containerd/containerd/pull/8832)) - [`7fbd5dc89`](https://github.com/containerd/containerd/commit/7fbd5dc893007631794984c26c3a72320a34ae92) Move logrus setup code to log package - \[release/1.6 backport] release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#8820](https://github.com/containerd/containerd/pull/8820)) - [`59a143670`](https://github.com/containerd/containerd/commit/59a1436706a23746f45ec111a0ffbcf887fb42de) release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles - \[release/1.6 backport] Use version 2 configuration format in docs ([#8821](https://github.com/containerd/containerd/pull/8821)) - [`5b51b79e2`](https://github.com/containerd/containerd/commit/5b51b79e2c7baf8dad53e48dfddadabff08b711d) \[release/1.6] fix remaining "v1 config" plugin IDs - [`b7cf26d8d`](https://github.com/containerd/containerd/commit/b7cf26d8dc72f0f79946c289ac68c0f2a581c6c5) docs: Fix sample config.toml syntax - [`fcdaf0966`](https://github.com/containerd/containerd/commit/fcdaf09664c006abf711ee88e26f18019643ffd9) docs: migrate config v1 to v2 - [`728d5c5f0`](https://github.com/containerd/containerd/commit/728d5c5f0be709e415f72f44c52fe78233ddd97d) Use version 2 config and mention containerd config command - \[release/1.6] update go to go1.19.11 ([#8816](https://github.com/containerd/containerd/pull/8816)) - [`81aa14718`](https://github.com/containerd/containerd/commit/81aa147181ca24987be3036d8487b54125256fc3) \[release/1.6] update go to go1.19.11 - \[release/1.6] update go to go1.19.10 ([#8715](https://github.com/containerd/containerd/pull/8715)) - [`17cd86629`](https://github.com/containerd/containerd/commit/17cd86629acab42dd7708720b386e88cd4be1535) \[release/1.6] update go to go1.19.10 - \[release/1.6 backport] bugfix(port-forward): Correctly handle known errors ([#8805](https://github.com/containerd/containerd/pull/8805)) - [`fdb65f214`](https://github.com/containerd/containerd/commit/fdb65f21488bd7a2d8dfca9beac95e0dfbc4259c) bugfix(port-forward): Correctly handle known errors - \[release/1.6] Resolve docker.NewResolver race condition ([#8800](https://github.com/containerd/containerd/pull/8800)) - [`b5784af66`](https://github.com/containerd/containerd/commit/b5784af662f7fc409eebbd655c42b7b0f462d8ed) Change http.Header copy to builtin Clone - [`31c466f82`](https://github.com/containerd/containerd/commit/31c466f822906dfbbf57be1cfec253179455f429) Resolve docker.NewResolver race condition - \[release/1.6 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8781](https://github.com/containerd/containerd/pull/8781)) - [`be6406ca6`](https://github.com/containerd/containerd/commit/be6406ca67234c0a89320272557bb5ac5b0b60cc) vendor: github.com/containerd/zfs v1.1.0 - [`9f1260074`](https://github.com/containerd/containerd/commit/9f12600747060b5ba68d0d27d1666e7b25e00afb) \[release/1.6] vendor gotest.tools/v3 v3.5.0 - [`526e9e0ce`](https://github.com/containerd/containerd/commit/526e9e0ce4e2338afa0eca0f1c0969f24f9819dd) Bump grpc to v1.50.1 - [`0e7d2d121`](https://github.com/containerd/containerd/commit/0e7d2d1217d6399607cf8c8abb89662cebd9a30a) go.mod: github.com/sirupsen/logrus v1.9.0 - [`5b153c621`](https://github.com/containerd/containerd/commit/5b153c6214a9ae14e75be6a6e15b6bdf9c2b60f0) go.mod: github.com/moby/sys/mountinfo v0.6.2 - [`9dee60960`](https://github.com/containerd/containerd/commit/9dee60960792b9e6d8d80ddc16011191e7a660c6) go.mod: github.com/moby/sys/mountinfo v0.6.0 - \[release/1.6 backport] seccomp: always allow name_to_handle_at ([#8754](https://github.com/containerd/containerd/pull/8754)) - [`07ea7b9e7`](https://github.com/containerd/containerd/commit/07ea7b9e789ec116d9002a3ab0cfb35dc61ef8df) seccomp: always allow name_to_handle_at - \[release/1.6 backport] Update ginkgo to match cri-tools' version ([#8759](https://github.com/containerd/containerd/pull/8759)) - [`1dae51fed`](https://github.com/containerd/containerd/commit/1dae51fed807a56b5e135fb5a3b0455713450e25) Update ginkgo to match cri-tools' version - \[release/1.6 backport] integration/client: add timeout to `TestShimOOMScore` ([#8749](https://github.com/containerd/containerd/pull/8749)) - [`bd76ab978`](https://github.com/containerd/containerd/commit/bd76ab978ba760affd9fe2be2901b4ff76d5a3c0) integration/client: add timeout to `TestShimOOMScore` - \[release/1.6 backport] Adding support to run hcsshim from local clone ([#8713](https://github.com/containerd/containerd/pull/8713)) - [`8e14eccb2`](https://github.com/containerd/containerd/commit/8e14eccb29c6a43f75779e9cdd08dc5f75825166) Adding support to run hcsshim from local clone - \[1.6] Add Fields type alias to log package ([#8739](https://github.com/containerd/containerd/pull/8739)) - [`9f2cdd589`](https://github.com/containerd/containerd/commit/9f2cdd5894ba0010e602a120e0c625ac96585711) Add Fields type alias to log package - \[release/1.6] Pinned image support ([#8720](https://github.com/containerd/containerd/pull/8720)) - [`f4713aad0`](https://github.com/containerd/containerd/commit/f4713aad0e3b9f51d02e288b94e4d2c524373284) Pinned image support - \[release/1.6 backport] runtime/v2/runc: handle early exits w/o big locks ([#8695](https://github.com/containerd/containerd/pull/8695)) - [`dbeec47b4`](https://github.com/containerd/containerd/commit/dbeec47b4663422225ffc517ab9d696777c2c6f1) runtime/v2/runc: handle early exits w/o big locks - \[release/1.6 backport] move up to CRI-TOOLS v1.27.0 ([#7997](https://github.com/containerd/containerd/pull/7997)) - [`a8e01e40a`](https://github.com/containerd/containerd/commit/a8e01e40a0f63aac0249d514de1dc2708d40d7f7) move to CRI-TOOLS v1.27.0 - [`755f80698`](https://github.com/containerd/containerd/commit/755f80698aeb5f1ca856f487cd2d261464c6d705) move up to CRI-TOOLS v1.26.0 - [`b29cc035f`](https://github.com/containerd/containerd/commit/b29cc035fbe6ad06d67e4b42fed2f47b57ef0a48) bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a) - [`9138999f5`](https://github.com/containerd/containerd/commit/9138999f5dea770598b4a67da6682cab4c3f5713) Upgrade critools from 1.24.1 to 1.25.0 - \[release/1.6] cherry-pick: No more nondistributable layers in MS registry ([#8691](https://github.com/containerd/containerd/pull/8691)) - [`712ff8eb3`](https://github.com/containerd/containerd/commit/712ff8eb389d49531207e34479e065406effb902) No more nondistributable layers in MS registry - \[release/1.6] Fix cpu architecture detection issue on emulated ARM platform ([#8533](https://github.com/containerd/containerd/pull/8533)) - [`2b16e4bfa`](https://github.com/containerd/containerd/commit/2b16e4bfa135e3242b41ae43cf2bb6f3cd3fe9b1) Add unit test to function GetCPUVariantFromArch - [`106e36ec3`](https://github.com/containerd/containerd/commit/106e36ec3e7c72036b498b4ac73000d5c1a79d9d) Use uname machine field to get CPU variant if fails at /proc/cpuinfo - \[release/1.6] Update lint timeout ([#8679](https://github.com/containerd/containerd/pull/8679)) - [`287fdfea6`](https://github.com/containerd/containerd/commit/287fdfea63fea94952885f0807fc11c2612e5828) Update linter timeout to match main branch - \[release/1.6 backport] task: don't `close()` io before `cancel()` ([#8659](https://github.com/containerd/containerd/pull/8659)) - [`b27f7daa5`](https://github.com/containerd/containerd/commit/b27f7daa582f149f985a56313711c8c4a4353376) task: don't `close()` io before `cancel()` - \[release/1.6] update test box to fedora 37 ([#8660](https://github.com/containerd/containerd/pull/8660)) - [`8b4c69248`](https://github.com/containerd/containerd/commit/8b4c6924856fddaece9ed58700cb8473c6a7bdeb) update test box to fedora 37 - \[release/1.6] Revert "Downgrade MinGW to version 10.2.0" ([#8668](https://github.com/containerd/containerd/pull/8668)) - [`81d6085af`](https://github.com/containerd/containerd/commit/81d6085af5a20fbc728ccffad4b91ee6ef08ef36) Revert "Downgrade MinGW to version 10.2.0" - \[release/1.6 backport] Fix panic when remote differ returns empty result ([#8640](https://github.com/containerd/containerd/pull/8640)) - [`f98122378`](https://github.com/containerd/containerd/commit/f98122378197fb5199bab1d7574288fe276293ee) Fix panic when remote differ returns empty result - \[1.6] Bump x/net to 0.8 ([#8642](https://github.com/containerd/containerd/pull/8642)) - [`aa53f272d`](https://github.com/containerd/containerd/commit/aa53f272dd748ef57bb22a9f9aaa86fb9ad2f4d4) Bump x/net to 0.8 - \[release/1.6 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8620](https://github.com/containerd/containerd/pull/8620)) - [`56ff20839`](https://github.com/containerd/containerd/commit/56ff2083957e0ca58168f50e89120bb5d0067362) remotes/docker: ResolverOptions: fix deprecation comments - \[release/1.6] notify readiness when registered plugins are ready ([#8583](https://github.com/containerd/containerd/pull/8583)) - [`bccaf68b7`](https://github.com/containerd/containerd/commit/bccaf68b7749b62d821b80c8a845417113f44310) notify readiness when registered plugins are ready - \[release/1.6] Update ttrpc to 1.1.2 ([#8528](https://github.com/containerd/containerd/pull/8528)) - [`1cdbbe76b`](https://github.com/containerd/containerd/commit/1cdbbe76bc6d86d50d9338d3605af7ed8a33559c) Update ttrpc to 1.1.2 </details> ##### Changes from containerd/ttrpc <details><summary>2 commits</summary> - \[release/1.1] Unwrap io errors in server connection receive error handling ([#143](https://github.com/containerd/ttrpc/pull/143)) - [`d5f7eed`](https://github.com/containerd/ttrpc/commit/d5f7eeddb5e09b035c0683a2ffc9d19bda284b59) Unwrap io errors in server connection receive error handling </details> ##### Changes from containerd/zfs <details><summary>49 commits</summary> - gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75)) - [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir() - [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges - [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73)) - [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 - gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74)) - [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin - [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2 - Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72)) - [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 - Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69)) - [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 - Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67)) - [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow - Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66)) - [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow - Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68)) - [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies - [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19 - Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65)) - [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package - Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62)) - [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version - [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest - go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59)) - [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0 - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58)) - [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 - Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57)) - [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55)) - [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 - Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54)) - [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 - [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53)) - [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf - replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52)) - [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors - Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51)) - [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 - Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50)) - [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2 - Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49)) - [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main - sync up with containerd 1.5 GA ([#47](https://github.com/containerd/zfs/pull/47)) - [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga - README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46)) - [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge </details> ##### Dependency Changes - **github.com/containerd/ttrpc** v1.1.1 -> v1.1.2 - **github.com/containerd/zfs** v1.0.0 -> v1.1.0 - **github.com/emicklei/go-restful/v3** v3.7.3 -> v3.10.1 - **github.com/google/go-cmp** v0.5.6 -> v0.5.9 - **github.com/google/uuid** v1.2.0 -> v1.3.0 - **github.com/mistifyio/go-zfs/v3** v3.0.1 ***new*** - **github.com/moby/sys/mountinfo** v0.5.0 -> v0.6.2 - **github.com/sirupsen/logrus** v1.8.1 -> v1.9.0 - **github.com/stretchr/testify** v1.7.0 -> v1.8.1 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **golang.org/x/net** [`a158d28`](https://github.com/containerd/containerd/commit/a158d28d115b) -> v0.8.0 - **golang.org/x/sys** [`8c9f86f`](https://github.com/containerd/containerd/commit/8c9f86f7a55f) -> v0.6.0 - **golang.org/x/term** [`03fcf44`](https://github.com/containerd/containerd/commit/03fcf44c2211) -> v0.6.0 - **golang.org/x/text** v0.3.7 -> v0.8.0 - **google.golang.org/grpc** v1.47.0 -> v1.50.1 - **google.golang.org/protobuf** v1.28.0 -> v1.28.1 - **gotest.tools/v3** v3.0.3 -> v3.5.0 Previous release can be found at [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21) ### [`v1.6.21`](https://github.com/containerd/containerd/releases/tag/v1.6.21): containerd 1.6.21 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.20...v1.6.21) Welcome to the v1.6.21 release of containerd! The twenty-first patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - \*\*update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450)) - \*\*Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456)) - \*\*oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403)) - \*\*windows: Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247)) - \*\*oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357)) - \*\*archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Sebastiaan van Stijn - Iceber Gu - Kirtana Ashok - Justin Chadwell - Phil Estes - Akihiro Suda - Djordje Lukic - Kazuyoshi Kato - Mike Brown - Wei Fu - kiashok ##### Changes <details><summary>26 commits</summary> - \[release/1.6] Prepare release notes for v1.6.21 ([#8463](https://github.com/containerd/containerd/pull/8463)) - [`9226c362a`](https://github.com/containerd/containerd/commit/9226c362a92b9a19860a3facc3eaeb0d2ec22e0c) Add release notes for v1.6.21 - \[release/1.6] update go to go1.19.9 ([#8469](https://github.com/containerd/containerd/pull/8469)) - [`39566aade`](https://github.com/containerd/containerd/commit/39566aadecc45abcfa242e41ad7bf07142f49c8c) \[release/1.6] update go to go1.19.9 - \[release/1.6] fix the task setting the runtime path ([#8454](https://github.com/containerd/containerd/pull/8454)) - [`e8840f688`](https://github.com/containerd/containerd/commit/e8840f688ae402bef461963321d63cf9cf6fbb34) skip TestContainerStartWithAbsRuntimePath if the runtime is v1 - [`75ab094de`](https://github.com/containerd/containerd/commit/75ab094de81b2d6806434e2f9ac94cb409e36314) integration: add container start test using abs runtime path - [`f49254f0b`](https://github.com/containerd/containerd/commit/f49254f0b7e17951c1be6e8a8063eb3f47175cd5) WithRuntimePath uses the TaskInfo.RuntimePath field - \[release/1.6 backport] update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450)) - [`ccb51ff26`](https://github.com/containerd/containerd/commit/ccb51ff26971c10f88f8e594aeb8d29159f93e82) update runc binary to v1.1.7 - \[release/1.6] Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456)) - [`95d31551d`](https://github.com/containerd/containerd/commit/95d31551d0f7b1a842bcb87b2c2916fda52f07a6) Remove entry for container from container store on error - \[release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403)) - [`c33eb574d`](https://github.com/containerd/containerd/commit/c33eb574dbc064ad8556512fff6b2cd81e510101) oci: partially restore comment on read-only mounts for uid/gid uses - \[release/1.6 ] Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247)) - [`bc2e01303`](https://github.com/containerd/containerd/commit/bc2e01303b7103d7fe81a97caadc224102db1460) Fix argsEscaped tests - [`8b81d5acc`](https://github.com/containerd/containerd/commit/8b81d5acca2e6f390af99756128392253c5d0a5c) Add ArgsEscaped support for CRI - \[release/1.6 backport] update runc binary to v1.1.6 ([#8385](https://github.com/containerd/containerd/pull/8385)) - [`57d953482`](https://github.com/containerd/containerd/commit/57d953482083cb99c5814f5c414641599aa7c206) update runc binary to v1.1.6 - \[release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357)) - [`fb5e663d0`](https://github.com/containerd/containerd/commit/fb5e663d0d4e7e5091e2dedfa079c1a8f310f0bb) oci: Use WithReadonlyTempMount when adding users/groups - \[release/1.6] update go to go1.19.8 ([#8353](https://github.com/containerd/containerd/pull/8353)) - [`26efb8fd5`](https://github.com/containerd/containerd/commit/26efb8fd53de5bac26b28f4a2b8d8adf284ba7c2) \[release/1.6] update go to go1.19.8 - \[release/1.6] archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345)) - [`ec13b497e`](https://github.com/containerd/containerd/commit/ec13b497ee7fba96d892637b75bdfd1932e64f12) export: add test for WithSkipDockerManifest - [`d1f3771c4`](https://github.com/containerd/containerd/commit/d1f3771c41470b3460b37edad9e8776b913f02e5) archive: consistently respect value of WithSkipDockerManifest </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20) ### [`v1.6.20`](https://github.com/containerd/containerd/releases/tag/v1.6.20): containerd 1.6.20 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.19...v1.6.20) Welcome to the v1.6.20 release of containerd! The twentieth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Disable looking up usernames and groupnames on host** ([#8230](https://github.com/containerd/containerd/pull/8230)) - **Add support for Windows ArgsEscaped images** ([#8273](https://github.com/containerd/containerd/pull/8273)) - **Update hcsshim to v0.9.8** ([#8274](https://github.com/containerd/containerd/pull/8274)) - **Fix debug flag in shim** ([#8288](https://github.com/containerd/containerd/pull/8288)) - **Add `WithReadonlyTempMount` to support readonly temporary mounts** ([#8299](https://github.com/containerd/containerd/pull/8299)) - **Update ttrpc to fix file descriptor leak** ([#8308](https://github.com/containerd/containerd/pull/8308)) - **Update runc binary to v1.1.5** ([#8324](https://github.com/containerd/containerd/pull/8324)) - **Update image config to support ArgsEscaped** ([#8306](https://github.com/containerd/containerd/pull/8306)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Maksym Pavlenko - Akihiro Suda - Phil Estes - Eng Zer Jun - Justin Terry - Kazuyoshi Kato - Wei Fu - Abirdcfly - Gabriel Adrian Samfira - Henry Wang - Kang.Zhang - Kirtana Ashok - Laura Brehm - Luca Comellini - Paul "TBBle" Hampson - liyuxuan.darfux - ningmingxiao - wanglei ##### Changes <details><summary>48 commits</summary> - \[release/1.6] Prepare release notes for v1.6.20 ([#8310](https://github.com/containerd/containerd/pull/8310)) - [`a039a2b9c`](https://github.com/containerd/containerd/commit/a039a2b9c6a5e655b58bdd139af7307563b8efc7) Prepare release notes for v1.6.20 - \[release/1.6]Updates oci image config to support upstream ArgsEscaped ([#8306](https://github.com/containerd/containerd/pull/8306)) - [`5dd94a7e6`](https://github.com/containerd/containerd/commit/5dd94a7e6ccb356d2c7061ad49ba8a843ed9e4df) Updates oci image config to support upstream ArgsEscaped - \[release/1.6] update runc binary to v1.1.5 ([#8324](https://github.com/containerd/containerd/pull/8324)) - [`59fa6b191`](https://github.com/containerd/containerd/commit/59fa6b1914554c07321d79aa2131f370d0ebe27c) update runc binary to v1.1.5 - [`0c0aad93e`](https://github.com/containerd/containerd/commit/0c0aad93ec9a0db6392e41790294679eb9d2e3bc) go.mod: github.com/opencontainers/runc v1.1.5 - \[release/1.6] Update ttrpc to v1.1.1 ([#8308](https://github.com/containerd/containerd/pull/8308)) - [`50a6be0b4`](https://github.com/containerd/containerd/commit/50a6be0b4798eef5486a0f86c59686898ecc20c8) Update ttrpc to v1.1.1 - \[release/1.6 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8299](https://github.com/containerd/containerd/pull/8299)) - [`8cead6594`](https://github.com/containerd/containerd/commit/8cead659440376c4a821d702f73c392f1c7fb8ce) Add `WithReadonlyTempMount` to create readonly temporary mounts - \[release/1.6] Adds support for Windows ArgsEscaped images ([#8273](https://github.com/containerd/containerd/pull/8273)) - [`f0dc0297d`](https://github.com/containerd/containerd/commit/f0dc0297d02e223d997fc992496b07006c0c4a69) Adds support for Windows ArgsEscaped images - \[release/1.6]go.mod: Bump hcsshim tag to v0.9.8 ([#8274](https://github.com/containerd/containerd/pull/8274)) - [`5981a24e2`](https://github.com/containerd/containerd/commit/5981a24e21a039c84f532c0e1ada85077c4101f1) Update hcsshim tag to v0.9.8 - \[1.6] shim: fix debug flag not working ([#8288](https://github.com/containerd/containerd/pull/8288)) - [`28f1e32e3`](https://github.com/containerd/containerd/commit/28f1e32e3b1b167eeab8890d67ed57817b3da29b) shim: fix debug flag not working - \[release/1.6] cherry-pick: Update go-restful to v3 ([#8271](https://github.com/containerd/containerd/pull/8271)) - [`5a8ea75df`](https://github.com/containerd/containerd/commit/5a8ea75df7d2956cd711e4445eea9b6aac070835) Update go-restful to v3 - [`59bdc1d5a`](https://github.com/containerd/containerd/commit/59bdc1d5a77ec7d5d57c66395de1bd2c1e27a55f) go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 - \[release/1.6] Go 1.19.7 ([#8238](https://github.com/containerd/containerd/pull/8238)) - [`86e0bd9e3`](https://github.com/containerd/containerd/commit/86e0bd9e3966ae686d7ab0a99a60f0212837028d) Go 1.19.7 - \[release/1.6 backport] archive: disable looking up usernames and groupnames on the host ([#8230](https://github.com/containerd/containerd/pull/8230)) - [`063ad2f19`](https://github.com/containerd/containerd/commit/063ad2f1949168fed35a5609d6a0c01c529da346) archive: disable looking up usernames and groupnames on the host - \[release/1.6 backport] assorted linting, and golang update-related changes ([#8229](https://github.com/containerd/containerd/pull/8229)) - [`9cbea6fe7`](https://github.com/containerd/containerd/commit/9cbea6fe783f6ec6086bd85477ed2df659f10988) Enable dupword linter - [`c73f1abff`](https://github.com/containerd/containerd/commit/c73f1abff73657ea78d8a4762ff1b60324597896) Bump golangci-lint to v1.50.1 - [`f198f7724`](https://github.com/containerd/containerd/commit/f198f7724d6d83261ba83f830d65103169608fc7) update golangci-lint to v1.49.0 - [`e6179af1e`](https://github.com/containerd/containerd/commit/e6179af1ea994e1bdcc2c03f65223fa7256d9024) remove unneeded nolint-comments (nolintlint), disable deprecated linters - [`77160e6b5`](https://github.com/containerd/containerd/commit/77160e6b592ef44e4e800fac7736742dcf521f9c) \[release/1.6] adjust some nolint comments - [`95655f4ce`](https://github.com/containerd/containerd/commit/95655f4ceedc29e44f13bb5b6b702f319c207b43) clean-up "nolint" comments, remove unused ones - [`9f0617ecc`](https://github.com/containerd/containerd/commit/9f0617ecc46ab189b2bd7d4839d89327f75b75ba) pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint - [`e66397d83`](https://github.com/containerd/containerd/commit/e66397d838fa69e2653eba67e5e9ac081c84c69b) golangci-lint: sort linters in config file - [`682a567e9`](https://github.com/containerd/containerd/commit/682a567e9eb86c1a538067ad5bb36b2d6b59d4fc) linting: address gosec G112/G114 - [`627f563e6`](https://github.com/containerd/containerd/commit/627f563e6d61d2ca98f77eef6322babf9f53553c) chore: remove duplicate word in comments - [`efb88a8bb`](https://github.com/containerd/containerd/commit/efb88a8bbcdbefe6b7c820aee5b41257af1fd093) pkg/cri/streaming: increase ReadHeaderTimeout - [`45f055df6`](https://github.com/containerd/containerd/commit/45f055df6617a5c05c494e6870694c8c11c13711) Update protobuf definitions - [`584707524`](https://github.com/containerd/containerd/commit/584707524ac08d5f5284fd76ded25f3845886587) Run gofmt 1.19 - [`f33e38572`](https://github.com/containerd/containerd/commit/f33e38572758e178a7e57344983c139ac87a138e) Switch to Go 1.19 - [`fc10cd23a`](https://github.com/containerd/containerd/commit/fc10cd23adc555c559b42e5c996bfb212cc4b50e) remove duplicate - [`7cbb9e746`](https://github.com/containerd/containerd/commit/7cbb9e746128e4ab87ee28bb6f833df928048fb0) Update linters to use t.Setenv - [`4347a3265`](https://github.com/containerd/containerd/commit/4347a3265a895d9f30602dc7dcb83c00e762892b) Use t.Setenv instead of os.Setenv - [`10357eab5`](https://github.com/containerd/containerd/commit/10357eab5f89aa875ff2fec3500416d86807d1da) Address some timeout issues in the Windows CI - [`977ce8ef5`](https://github.com/containerd/containerd/commit/977ce8ef508d5cdbf4d549458a0cc46cd14f7833) Enable gosec linter for golangci-lint - [`c23945c5f`](https://github.com/containerd/containerd/commit/c23945c5fab20269c98aa17337a247f6e9ec9175) test: remove redundant `mountPoint` - [`588ed91d3`](https://github.com/containerd/containerd/commit/588ed91d3fb93c77118e35ca09e73227ed81d3ff) test: use `T.TempDir` to create temporary test directory - [`c2ed63c86`](https://github.com/containerd/containerd/commit/c2ed63c86cacc0cf5e2e2729d2478c0c0385c039) Remove hardcoded /tmp in tempfile paths - [`7e382c516`](https://github.com/containerd/containerd/commit/7e382c516f80ea71aa9086d2cb9c0e83ec155222) fix Implicit memory aliasing in for loop </details> ##### Changes from containerd/ttrpc <details><summary>2 commits</summary> - \[release/1.1] server: Fix connection leak when receiving ECONNRESET ([#136](https://github.com/containerd/ttrpc/pull/136)) - [`8977f59`](https://github.com/containerd/ttrpc/commit/8977f59dbda8a5a97d0801669e4c0d9f5a7088dd) server: Fix connection leak when receiving ECONNRESET </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.7 -> v0.9.8 - **github.com/containerd/ttrpc** v1.1.0 -> v1.1.1 - **github.com/emicklei/go-restful/v3** v3.7.3 ***new*** - **github.com/opencontainers/image-spec** [`c5a74bc`](https://github.com/containerd/containerd/commit/c5a74bcca799) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b) - **github.com/opencontainers/runc** v1.1.2 -> v1.1.5 Previous release can be found at [v1.6.19](https://github.com/containerd/containerd/releases/tag/v1.6.19) ### [`v1.6.19`](https://github.com/containerd/containerd/releases/tag/v1.6.19): containerd 1.6.19 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.18...v1.6.19) Welcome to the v1.6.19 release of containerd! The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms ##### Notable Updates - **Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers** ([#8153](https://github.com/containerd/containerd/pull/8153)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Kirtana Ashok - Derek McGowan - Wei Fu ##### Changes <details><summary>4 commits</summary> - \[release/1.6] Prepare release notes for v1.6.19 ([#8157](https://github.com/containerd/containerd/pull/8157)) - [`23e94075a`](https://github.com/containerd/containerd/commit/23e94075a5cf42c37c0854d976a5b9c50358f33f) Add release notes for v1.6.19 - \[release/1.6] go.mod: Bump hcsshim to v0.9.7 ([#8153](https://github.com/containerd/containerd/pull/8153)) - [`f488a6241`](https://github.com/containerd/containerd/commit/f488a6241b7fa87746026de1a947c57d311751e8) Update hcsshim tag to v0.9.7 </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.6 -> v0.9.7 Previous release can be found at [v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18) ### [`v1.6.18`](https://github.com/containerd/containerd/releases/tag/v1.6.18): containerd 1.6.18 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.17...v1.6.18) Welcome to the v1.6.18 release of containerd! The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173 along with a security update for Go. ##### Notable Updates - **Fix OCI image importer memory exhaustion** ([GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)) - **Fix supplementary groups not being set up properly** ([GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)) - **Revert removal of `/sbin/apparmor_parser` check** ([#8087](https://github.com/containerd/containerd/pull/8087)) - **Update Go to 1.19.6** ([#8111](https://github.com/containerd/containerd/pull/8111)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Ye Sijun - Samuel Karp - Bjorn Neergaard - Wei Fu - Brian Goff - Iceber Gu - Kazuyoshi Kato - Phil Estes - Swagat Bora ##### Changes <details><summary>24 commits</summary> - \[release/1.6] Prepare release notes for v1.6.18 ([#8118](https://github.com/containerd/containerd/pull/8118)) - [`44e61d764`](https://github.com/containerd/containerd/commit/44e61d7641f71f44353263306a4967276933173b) Add release notes for v1.6.18 - Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p) - [`286a01f35`](https://github.com/containerd/containerd/commit/286a01f350a2298b4fdd7e2a0b31c04db3937ea8) oci: fix additional GIDs - [`301823453`](https://github.com/containerd/containerd/commit/301823453d788ce409e222e88a27d7faf2c2093d) oci: fix loop iterator aliasing - [`0070ab70f`](https://github.com/containerd/containerd/commit/0070ab70fa58045d25fc6ebab27edcae328e38f1) oci: skip checking gid for WithAppendAdditionalGroups - [`16d52de64`](https://github.com/containerd/containerd/commit/16d52de64d9b0b0e4bf7e11226199281561a3d96) refactor: reduce duplicate code - [`b45e30292`](https://github.com/containerd/containerd/commit/b45e30292ce9b214158fa403a6165aabbf5b23f0) add WithAdditionalGIDs test - [`0a06c284a`](https://github.com/containerd/containerd/commit/0a06c284aec5860a58a803b5da83def3462dc3a0) add WithAppendAdditionalGroups helper - Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2) - [`84936fd1f`](https://github.com/containerd/containerd/commit/84936fd1f6a0670ab8c7665cb87fae6b87b0b908) importer: stream oci-layout and manifest.json - \[1.6] Add fallback for windows platforms without osversion ([#8106](https://github.com/containerd/containerd/pull/8106)) - [`b327af6a4`](https://github.com/containerd/containerd/commit/b327af6a4f635611d8b59beec94db0beace48063) Add fallback for windows platforms without osversion - \[release/1.6] Go 1.19.6 ([#8111](https://github.com/containerd/containerd/pull/8111)) - [`54ead5b7b`](https://github.com/containerd/containerd/commit/54ead5b7b71a0f458566e42eac28eb274286af47) Go 1.19.6 - \[release/1.6] ctr/run: flags --detach and --rm cannot be specified together ([#8094](https://github.com/containerd/containerd/pull/8094)) - [`2b4b35ab4`](https://github.com/containerd/containerd/commit/2b4b35ab49b0cea79f76c4f52923c74cfc26ccfb) ctr/run: flags --detach and --rm cannot be specified together - \[release/1.6] Fix retry logic within devmapper device deactivation ([#8088](https://github.com/containerd/containerd/pull/8088)) - [`d5284157b`](https://github.com/containerd/containerd/commit/d5284157b8af78a2d85e78bd3106695a4e4c995b) Fix retry logic within devmapper device deactivation - \[release/1.6 backport] Revert `apparmor_parser` regression ([#8087](https://github.com/containerd/containerd/pull/8087)) - [`624ff636b`](https://github.com/containerd/containerd/commit/624ff636b8b463fc48e6ba3c861f98a0c00dbb71) pkg/apparmor: clarify Godoc - [`3a0a35b36`](https://github.com/containerd/containerd/commit/3a0a35b36297685d1a38bfa823005a2cb77a40dd) Revert "Don't check for apparmor_parser to be present" - \[release/1.6] CI: skip some jobs when `repo != containerd/containerd` ([#8083](https://github.com/containerd/containerd/pull/8083)) - [`664a938a3`](https://github.com/containerd/containerd/commit/664a938a33ccbbc0ab70ca5f9455e452b910e767) CI: skip some jobs when `repo != containerd/containerd` </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.17](https://github.com/containerd/containerd/releases/tag/v1.6.17) ### [`v1.6.17`](https://github.com/containerd/containerd/releases/tag/v1.6.17): containerd 1.6.17 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.16...v1.6.17) Welcome to the v1.6.17 release of containerd! The seventeenth patch release for containerd 1.6 includes various updates. ##### Notable Updates - **Add network plugin metrics** ([#8018](https://github.com/containerd/containerd/pull/8018)) - **Update mkdir permission on /etc/cni to 0755 instead of 0700** ([#8030](https://github.com/containerd/containerd/pull/8030)) - **Export remote snapshotter label handler** ([#8054](https://github.com/containerd/containerd/pull/8054)) - **Add support for default hosts.toml configuration** ([#8065](https://github.com/containerd/containerd/pull/8065)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Akihiro Suda - Jess - Antonio Ojea - Kohei Tokunaga - Phil Estes - Wei Fu ##### Changes <details><summary>11 commits</summary> - \[release/1.6] Prepare release notes for v1.6.17 ([#8080](https://github.com/containerd/containerd/pull/8080)) - [`a1aa9b900`](https://github.com/containerd/containerd/commit/a1aa9b900ce9e276a210a48aa5dc8b8832a44c2e) Prepare release notes for v1.6.17 - \[1.6] Backport default registry hosts config ([#8065](https://github.com/containerd/containerd/pull/8065)) - [`1436641b8`](https://github.com/containerd/containerd/commit/1436641b8dc77f24f4ec57d238344bc6bb857081) Support default hosts.toml configuration - [`87acecd04`](https://github.com/containerd/containerd/commit/87acecd0409103c266c5eda932e809e6717e7859) Update hosts doc - \[release/1.6 backport] Export remote snapshotter label handler ([#8054](https://github.com/containerd/containerd/pull/8054)) - [`a6544ed7d`](https://github.com/containerd/containerd/commit/a6544ed7dc114b7542041eea91abbc7fe9a466a0) Export remote snapshotter label handler - \[release/1.6] cri: mkdir /etc/cni with 0755, not 0700 ([#8030](https://github.com/containerd/containerd/pull/8030)) - [`ae02a24a3`](https://github.com/containerd/containerd/commit/ae02a24a39ddd6764eb7f98de677f11d8bdd1919) cri: mkdir /etc/cni with 0755, not 0700 - \[release/1.6] add network plugin metrics ([#8018](https://github.com/containerd/containerd/pull/8018)) - [`6c6cc5ec1`](https://github.com/containerd/containerd/commit/6c6cc5ec107f10ccf4d4acbfe89d572a52d58a92) add network plugin metrics </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.16](https://github.com/containerd/containerd/releases/tag/v1.6.16) ### [`v1.6.16`](https://github.com/containerd/containerd/releases/tag/v1.6.16): containerd 1.6.16 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.15...v1.6.16) Welcome to the v1.6.16 release of containerd! The sixteenth patch release for containerd 1.6 includes various bug fixes and updates. ##### Notable Updates - **Fix push error propagation** ([#7990](https://github.com/containerd/containerd/pull/7990)) - **Fix slice append error with HugepageLimits for Linux** ([#7995](https://github.com/containerd/containerd/pull/7995)) - **Update default seccomp profile for PKU and CAP_SYS_NICE** ([#8001](https://github.com/containerd/containerd/pull/8001)) - **Fix overlayfs error when upperdirlabel option is set** ([#8002](https://github.com/containerd/containerd/pull/8002)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Samuel Karp - Sebastiaan van Stijn - Phil Estes - Craig Ingram - Justin Chadwell - Qasim Sarfraz - Wei Fu - bin liu - cardy.tang - rongfu.leng ##### Changes <details><summary>30 commits</summary> - \[release/1.6] Prepare v1.6.16 ([#8016](https://github.com/containerd/containerd/pull/8016)) - [`d3c595aa3`](https://github.com/containerd/containerd/commit/d3c595aa387e2d7ad3cd08313579ec86c876f738) Prepare release notes for v1.6.16 - \[release/1.6 backport] Fix tx closed error when upperdirlabel specified ([#8002](https://github.com/containerd/containerd/pull/8002)) - [`8c704036a`](https://github.com/containerd/containerd/commit/8c704036a81b13b25ab7073e2715075b6ec39e94) Fix tx closed error when upperdirlabel specified - \[release/1.6 backport] assorted test-fixes ([#8000](https://github.com/containerd/containerd/pull/8000)) - [`91a68edd7`](https://github.com/containerd/containerd/commit/91a68edd775bba554a9eac7e04898b22069db5aa) cri: Fix TestUpdateOCILinuxResource for host w/o swap controller - [`5594f706e`](https://github.com/containerd/containerd/commit/5594f706e67462c4a29f68e6958341ba35d06826) Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts - \[release/1.6 backport] seccomp updates ([#8001](https://github.com/containerd/containerd/pull/8001)) - [`7037f5313`](https://github.com/containerd/containerd/commit/7037f531304821b7b1943f2c7821d94035b54d76) seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE - [`d22919a1c`](https://github.com/containerd/containerd/commit/d22919a1cb8180885a6f38fa7851a487aebd2440) seccomp: seccomp: add syscalls related to PKU in default policy - \[release/1.6 backport] Harden GITHUB_TOKEN permissions ([#7999](https://github.com/containerd/containerd/pull/7999)) - [`8b8a21fe4`](https://github.com/containerd/containerd/commit/8b8a21fe4dbc7b940a802cb8d099a4084dae6ee9) Harden GITHUB_TOKEN permissions - \[release/1.6 backport] assorted updates to Vagrantfile ([#7996](https://github.com/containerd/containerd/pull/7996)) - [`8009948bb`](https://github.com/containerd/containerd/commit/8009948bb2dee8eb2c021d8a467572927ed0657d) Vagrantfile: fix comments about SELinux - [`550424f92`](https://github.com/containerd/containerd/commit/550424f929d7f9ae8fd59bd520719d0d8f00f2b3) Vagrantfile: install-rootless-podman: remove `setenforce 0` - [`2c32f8559`](https://github.com/containerd/containerd/commit/2c32f85599ec121702329ffddd50f99dbe491370) CI: update Fedora to 37 - [`556bb0cc8`](https://github.com/containerd/containerd/commit/556bb0cc8a01ece740d28749bcc6d76360117167) Vagrantfile: explicitly specify rsync as the shared folder driver - [`edfac1834`](https://github.com/containerd/containerd/commit/edfac183479d3a98147d1652b4ee198f522330a5) fix install cni script - [`91d5e53fb`](https://github.com/containerd/containerd/commit/91d5e53fbc3d5acfdd8ca4328cec1a20359b22f8) Vagrantfile: dump containerd log after critest - \[release/1.6 backport] Fix slice append error ([#7995](https://github.com/containerd/containerd/pull/7995)) - [`ab193eb20`](https://github.com/containerd/containerd/commit/ab193eb20bade0c7fff74a33a3b91f2517af05c6) pkg/cri: optimize slice initialization - [`e6cf5ec58`](https://github.com/containerd/containerd/commit/e6cf5ec58d395332985f15084527676d70b21f1c) Fix slice append error - \[release/1.6] update to go1.18.10 ([#7992](https://github.com/containerd/containerd/pull/7992)) - [`6a8a6531f`](https://github.com/containerd/containerd/commit/6a8a6531fd4f778089376749386c934b436484f7) \[release/1.6] update to go1.18.10 - \[release/1.6 backport] release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7991](https://github.com/containerd/containerd/pull/7991)) - [`d0dc7988a`](https://github.com/containerd/containerd/commit/d0dc7988ab9b30be8a05fae1fc064164418e653d) release/Dockerfile: set DEBIAN_FRONTEND=noninteractive - \[release/1.6 backport] pushWriter: correctly propagate errors ([#7990](https://github.com/containerd/containerd/pull/7990)) - [`1584c2581`](https://github.com/containerd/containerd/commit/1584c2581017414e673e4df05f63bc6b67edd424) pushWriter: correctly propagate errors - \[release/1.6] mod: update github.com/pelletier/go-toml@v1.9.5 ([#7942](https://github.com/containerd/containerd/pull/7942)) - [`545f22091`](https://github.com/containerd/containerd/commit/545f220910082c4236a8751854c640e7f7dc3e69) mod: update github.com/pelletier/go-toml@v1.9.5 </details> ##### Dependency Changes - **github.com/pelletier/go-toml** v1.9.3 -> v1.9.5 Previous release can be found at [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15) </details> <details> <summary>docker/buildx</summary> ### [`v0.13.1`](https://github.com/docker/buildx/releases/tag/v0.13.1) [Compare Source](https://github.com/docker/buildx/compare/v0.13.0...v0.13.1) buildx 0.13.1 Welcome to the 0.13.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Notable changes - Fix connecting to `docker-container://` and `kube-pod://` style URLs with remote driver [#2327](https://github.com/docker/buildx/issues/2327) - Fix handling of `--push` with Bake when a target has already defined a non-image output [#2330](https://github.com/docker/buildx/issues/2330) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0) ### [`v0.13.0`](https://github.com/docker/buildx/releases/tag/v0.13.0) [Compare Source](https://github.com/docker/buildx/compare/v0.12.1...v0.13.0) buildx 0.13.0 Welcome to the 0.13.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - CrazyMax - Tõnis Tiigi - Sebastiaan van Stijn - David Karlsson - Jonathan A. Sternberg - Justin Chadwell - Laura Brehm - Akihiro Suda - Ian King'ori - Paweł Gronowski - Brian Goff - Kushagra Mansingh - Laurent Goderre - Nicolas De Loof - Rob Murray - Simon A. Eugster ##### Notable Changes - Builds can now use multiple outputs with a single command (requires BuildKit v0.13+) [#2290](https://github.com/docker/buildx/issues/2290) [#2302](https://github.com/docker/buildx/issues/2302) - Bake command now supports defining `shm-size` and `ulimit` values [#2279](https://github.com/docker/buildx/issues/2279) [#2242](https://github.com/docker/buildx/issues/2242) - Windows container based builder instances can now be created with remote driver and npipe connections [#2287](https://github.com/docker/buildx/issues/2287) - New `dial-stdio` command is available for directly contacting BuildKit daemon of the configured builder instance [#2112](https://github.com/docker/buildx/issues/2112) - Container and Kubernetes builder instances now allow `network.host` entitlement by default (allowing access to the container's network) [#2266](https://github.com/docker/buildx/issues/2266) - `ls` command now supports `--format` options for controlling the output [#1787](https://github.com/docker/buildx/issues/1787) - `--metadata-file` option can now also return build reference that can be used for further build debugging, for example, in Docker Desktop [#2263](https://github.com/docker/buildx/issues/2263) - New experimental OpenTelemetry metrics exporting is available for build duration and transfer sizes [#2235](https://github.com/docker/buildx/issues/2235) [#2258](https://github.com/docker/buildx/issues/2258) [#2225](https://github.com/docker/buildx/issues/2225) [#2224](https://github.com/docker/buildx/issues/2224) [#2155](https://github.com/docker/buildx/issues/2155) - Fix possible cache invalidation when using linked targets in Bake [#2265](https://github.com/docker/buildx/issues/2265) - Container driver now supports driver opt for defining restart policy for BuildKit container [#1271](https://github.com/docker/buildx/issues/1271) - Compose spec support has been updated to `v2.0.0-rc.8` [#2205](https://github.com/docker/buildx/issues/2205) - Bake command has been updated to share the same authentication provider for all targets for improved performance [#2147](https://github.com/docker/buildx/issues/2147) - New cancellation signal handling via UNIX socket is supported with new Docker CLI [#2184](https://github.com/docker/buildx/issues/2184) [#2289](https://github.com/docker/buildx/issues/2289) - Multiple builders can now be removed with a single command [#2140](https://github.com/docker/buildx/issues/2140) - `--add-host` flag now permits `=` separator for IPv6 addresses [#2121](https://github.com/docker/buildx/issues/2121) - VCS attributes exported from Buildx now include the local directory subpaths if they are relative to the current Git repository [#2156](https://github.com/docker/buildx/issues/2156) - `imagetools inspect` command can now show DSSE-signed SBOM and Provenance attestations [#2194](https://github.com/docker/buildx/issues/2194) - Fixes for Git repository path sanitization in WSL [#2167](https://github.com/docker/buildx/issues/2167) - Default Git repository path is now found via configured tracking branch [#2146](https://github.com/docker/buildx/issues/2146) - Certain error messages for attestations have been improved [#2268](https://github.com/docker/buildx/issues/2268) - Better handling of connecting to unhealthy nodes with remote driver [#2130](https://github.com/docker/buildx/issues/2130) - Fix possible panic in `imagetools create` command [#2230](https://github.com/docker/buildx/issues/2230) - Fix additional output when exporting progress in `rawjson` mode [#2252](https://github.com/docker/buildx/issues/2252) - Fix possible inconsistent configuration merge order when using Bake with many configurations [#2237](https://github.com/docker/buildx/issues/2237) - Npipe URL scheme is now supported on Windows [#2250](https://github.com/docker/buildx/issues/2250) - Fix possible console warnings on Windows [#2238](https://github.com/docker/buildx/issues/2238) ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.1 -> v0.11.4 - **github.com/aws/aws-sdk-go-v2** v1.17.6 -> v1.24.1 - **github.com/aws/aws-sdk-go-v2/config** v1.18.16 -> v1.26.6 - **github.com/aws/aws-sdk-go-v2/credentials** v1.13.16 -> v1.16.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.24 -> v1.14.11 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.30 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.24 -> v2.5.10 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.31 -> v1.7.3 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.10.4 ***new*** - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.24 -> v1.10.10 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.12.5 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 -> v1.21.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.18.6 -> v1.26.7 - **github.com/aws/smithy-go** v1.13.5 -> v1.19.0 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/compose-spec/compose-go/v2** v2.0.0-rc.8 ***new*** - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd** v1.7.7 -> v1.7.13 - **github.com/containerd/continuity** v0.4.2 -> v0.4.3 - **github.com/docker/cli** v24.0.5 -> v26.0.0-rc1 - **github.com/docker/cli-docs-tool** v0.6.0 -> v0.7.0 - **github.com/docker/docker** v24.0.5 -> v26.0.0-rc1 - **github.com/docker/docker-credential-helpers** v0.7.0 -> v0.8.0 - **github.com/docker/go-connections** v0.4.0 -> v0.5.0 - **github.com/emicklei/go-restful/v3** v3.10.1 -> v3.11.0 - **github.com/felixge/httpsnoop** v1.0.3 -> v1.0.4 - **github.com/go-logr/logr** v1.2.3 -> v1.3.0 - **github.com/go-openapi/jsonpointer** v0.19.5 -> v0.19.6 - **github.com/go-openapi/jsonreference** v0.20.0 -> v0.20.2 - **github.com/go-openapi/swag** v0.19.14 -> v0.22.3 - **github.com/google/gnostic-models** v0.6.8 ***new*** - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/uuid** v1.3.0 -> v1.6.0 - **github.com/gorilla/websocket** v1.5.0 ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 -> v2.16.0 - **github.com/klauspost/compress** v1.16.3 -> v1.17.4 - **github.com/mailru/easyjson** v0.7.6 -> v0.7.7 - **github.com/mattn/go-runewidth** v0.0.15 ***new*** - **github.com/mitchellh/copystructure** v1.2.0 ***new*** - **github.com/mitchellh/reflectwalk** v1.0.2 ***new*** - **github.com/moby/buildkit** [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042) -> v0.13.0 - **github.com/moby/docker-image-spec** v1.3.1 ***new*** - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/mxk/go-flowrate** [`cca7078`](https://github.com/docker/buildx/commit/cca7078d478f) ***new*** - **github.com/prometheus/client_golang** v1.14.0 -> v1.17.0 - **github.com/prometheus/client_model** v0.3.0 -> v0.5.0 - **github.com/prometheus/common** v0.42.0 -> v0.44.0 - **github.com/prometheus/procfs** v0.9.0 -> v0.12.0 - **github.com/rivo/uniseg** v0.2.0 ***new*** - **github.com/serialx/hashring** [`8b29126`](https://github.com/docker/buildx/commit/8b2912629002) -> [`22c0c7a`](https://github.com/docker/buildx/commit/22c0c7ab6b1b) - **github.com/spf13/cobra** v1.7.0 -> v1.8.0 - **github.com/tonistiigi/fsutil** [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/docker/buildx/commit/7525a1af2bb5) - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/otel** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 ***new*** - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 - **golang.org/x/exp** [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) -> [`db7319d`](https://github.com/docker/buildx/commit/db7319d0e0e3) - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) - **google.golang.org/genproto/googleapis/api** [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.59.0 - **k8s.io/api** v0.26.7 -> v0.29.2 - **k8s.io/apimachinery** v0.26.7 -> v0.29.2 - **k8s.io/apiserver** v0.26.7 -> v0.29.2 - **k8s.io/client-go** v0.26.7 -> v0.29.2 - **k8s.io/klog/v2** v2.90.1 -> v2.110.1 - **k8s.io/kube-openapi** [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) -> [`2dd684a`](https://github.com/docker/buildx/commit/2dd684a91f00) - **k8s.io/utils** [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5) -> [`3b25d92`](https://github.com/docker/buildx/commit/3b25d923346b) - **sigs.k8s.io/json** [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) -> [`bc3834c`](https://github.com/docker/buildx/commit/bc3834ca7abd) - **sigs.k8s.io/structured-merge-diff/v4** v4.2.3 -> v4.4.1 Previous release can be found at [v0.12.1](https://github.com/docker/buildx/releases/tag/v0.12.1) ### [`v0.12.1`](https://github.com/docker/buildx/releases/tag/v0.12.1) [Compare Source](https://github.com/docker/buildx/compare/v0.12.0...v0.12.1) Welcome to the v0.12.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Changes - Fix incorrect validation of some driver-opt values that could cause invalid state to be stored [#2176](https://github.com/docker/buildx/issues/2176) Previous release can be found at [v0.12.0](https://github.com/docker/buildx/releases/tag/v0.12.0) ### [`v0.12.0`](https://github.com/docker/buildx/releases/tag/v0.12.0) [Compare Source](https://github.com/docker/buildx/compare/v0.11.2...v0.12.0) Welcome to the 0.12.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - CrazyMax - Justin Chadwell - Tõnis Tiigi - Sebastiaan van Stijn - Kohei Tokunaga - David Karlsson - Jonathan A. Sternberg - Guillaume Lours - Kenyon Ralph - Qasim Sarfraz - Silvin Lubecki - Akihiro Suda - Aleksa Sarai - Cameron Adams - Dmitry Makovey - Jhan S. Álvarez - Jonathan Piché - Kenyon Ralph - Kijima Daigo - Silvin Lubecki - Zero - guoguangwu ##### Notable Changes - OCI Annotations can be added to build results with a new `--annotation` flag for the build command and `annotations` key in the Bake file. Annotations added to OCI manifests, indexes, and descriptors. [#2020](https://github.com/docker/buildx/issues/2020) [#2098](https://github.com/docker/buildx/issues/2098) - New debugging features have been added with a new `debug` command and interactive debugging console. This feature currently requires setting `BUILDX_EXPERIMENTAL=1` [#2006](https://github.com/docker/buildx/issues/2006) [#1896](https://github.com/docker/buildx/issues/1896) [#1970](https://github.com/docker/buildx/issues/1970) [#1914](https://github.com/docker/buildx/issues/1914) [#2026](https://github.com/docker/buildx/issues/2026) [#2086](https://github.com/docker/buildx/issues/2086) [docs](https://github.com/docker/buildx/blob/v0.12.0-rc1/docs/guides/debugging.md) - Special `host-gateway` IP mapping can now be used with the `--add-host` flag during build [#1894](https://github.com/docker/buildx/issues/1894) [#2083](https://github.com/docker/buildx/issues/2083) - Bake command now allows adding local source files when building from remote definition [#1838](https://github.com/docker/buildx/issues/1838) - The status of uploading build results to Docker is now shown interactively on progressbar [#1994](https://github.com/docker/buildx/issues/1994) - Error handling has been improved when bootstrapping multi-node build clusters [#1869](https://github.com/docker/buildx/issues/1869) - Compose support has been updated to 1.20, enabling "include" functionality when using the Bake command [#1971](https://github.com/docker/buildx/issues/1971) [#2065](https://github.com/docker/buildx/issues/2065) [#2094](https://github.com/docker/buildx/issues/2094) - Imagetools create command now allows adding annotation when creating new images in the registry [#1965](https://github.com/docker/buildx/issues/1965) - OpenTelemetry build trace delegation from buildx is now possible with Docker and Remote driver [#2034](https://github.com/docker/buildx/issues/2034) - Bake command now shows all files where the build definition was loaded from on the progressbar [#2076](https://github.com/docker/buildx/issues/2076) - Bake files now allow the same attributes to be defined in multiple definition files. [#1062](https://github.com/docker/buildx/issues/1062) - Using the Bake command with a remote definition now allows this definition to use local Dockerfiles [#2015](https://github.com/docker/buildx/issues/2015) - Docker container driver now explicitly sets BuildKit config path to make sure configurations are loaded from same location for both mainline and rootless images [#2093](https://github.com/docker/buildx/issues/2093) - Improve performance of detecting when BuildKit instance has completed booting [#1934](https://github.com/docker/buildx/issues/1934) - Container driver now accepts many new driver options for defining the resource limits for BuildKit container [#2048](https://github.com/docker/buildx/issues/2048) - Inspection commands formatting has been improved [#2068](https://github.com/docker/buildx/issues/2068) - Error messages about driver capabilities have been improved [#1998](https://github.com/docker/buildx/issues/1998) - Improve errors when invoking Bake command without targets [#2100](https://github.com/docker/buildx/issues/2100) - Allow enabling debug logs with environment variables when running in standalone mode [#1821](https://github.com/docker/buildx/issues/1821) - When using Docker driver the default image resolve mode has been updated to prefer local Docker images for backward compatibility [#1886](https://github.com/docker/buildx/issues/1886) - Kubernetes driver now allows setting custom annotations and labels to the BuildKit deployments and pods [#1938](https://github.com/docker/buildx/issues/1938) - Kubernetes driver now allows setting authentication token with endpoint configuration [#1891](https://github.com/docker/buildx/issues/1891) - Fix possible issue with chained targets in Bake that could result in build failing or local source for a target uploaded multiple times [#2113](https://github.com/docker/buildx/issues/2113) - Fix issue when accessing global target properties when using the matrix feature of the Bake command [#2106](https://github.com/docker/buildx/issues/2106) - Fixes for formatting validation of certain build flags [#2040](https://github.com/docker/buildx/issues/2040) - Fixes to avoid locking certain commands unnecessarily while booting builder nodes. [#2066](https://github.com/docker/buildx/issues/2066) - Fix cases where multiple builds try to bootstrap the same builder instance in parallel [#2000](https://github.com/docker/buildx/issues/2000) - Fix cases where errors on uploading build results to docker could be dropped in some cases [#1927](https://github.com/docker/buildx/issues/1927) - Fix detecting capabilities for missing attestation support based on build output [#1988](https://github.com/docker/buildx/issues/1988) - Fix the build for loading in Bake remote definition to not show up in build history records [#1961](https://github.com/docker/buildx/issues/1961) [#1954](https://github.com/docker/buildx/issues/1954) - Fix errors when building Compose files using the that define profiles with Bake [#1903](https://github.com/docker/buildx/issues/1903) - Fix possible time correction errors on progressbar [#1968](https://github.com/docker/buildx/issues/1968) - Fix passing custom Cgroup parent to builds that used the new controller interface [#1913](https://github.com/docker/buildx/issues/1913) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) -> [`ced1acd`](https://github.com/docker/buildx/commit/ced1acdcaa24) - **github.com/Microsoft/hcsshim** v0.11.1 ***new*** - **github.com/Shopify/logrus-bugsnag** [`577dee2`](https://github.com/docker/buildx/commit/577dee27f20d) ***new*** - **github.com/apparentlymart/go-textseg/v15** v15.0.0 ***new*** - **github.com/compose-spec/compose-go** v1.14.0 -> v1.20.0 - **github.com/containerd/containerd** v1.7.2 -> v1.7.7 - **github.com/containerd/continuity** v0.4.1 -> v0.4.2 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/creack/pty** v1.1.18 ***new*** - **github.com/distribution/reference** v0.5.0 ***new*** - **github.com/docker/cli** v24.0.2 -> v24.0.5 - **github.com/docker/docker** [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc) -> v24.0.5 - **github.com/hashicorp/go-cleanhttp** v0.5.2 ***new*** - **github.com/hashicorp/go-cty-funcs** [`2721b1e`](https://github.com/docker/buildx/commit/2721b1e36840) -> [`a090f58`](https://github.com/docker/buildx/commit/a090f58aa992) - **github.com/hashicorp/hcl/v2** v2.8.2 -> v2.19.1 - **github.com/imdario/mergo** v0.3.15 -> v0.3.16 - **github.com/moby/buildkit** [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353) -> [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042) - **github.com/moby/patternmatcher** v0.5.0 -> v0.6.0 - **github.com/opencontainers/image-spec** v1.1.0-rc3 -> v1.1.0-rc5 - **github.com/opencontainers/runc** v1.1.7 -> v1.1.9 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/theupdateframework/notary** v0.6.1 -> v0.7.0 - **github.com/zclconf/go-cty** v1.10.0 -> v1.14.1 - **golang.org/x/exp** [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) ***new*** - **k8s.io/api** v0.26.2 -> v0.26.7 - **k8s.io/apimachinery** v0.26.2 -> v0.26.7 - **k8s.io/apiserver** v0.26.2 -> v0.26.7 - **k8s.io/client-go** v0.26.2 -> v0.26.7 Previous release can be found at [v0.11.2](https://github.com/docker/buildx/releases/tag/v0.11.2) ### [`v0.11.2`](https://github.com/docker/buildx/releases/tag/v0.11.2) [Compare Source](https://github.com/docker/buildx/compare/v0.11.1...v0.11.2) Welcome to the v0.11.2 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - [Justin Chadwell](https://github.com/jedevc) - [CrazyMax](https://github.com/crazy-max) - [Sebastiaan van Stijn](https://github.com/thaJeztah) ##### Changes - Fix a regression that caused buildx to not read the `KUBECONFIG` path from the instance store [#1941](https://github.com/docker/buildx/issues/1941) - Fix a regression with result handle builds showing up in the build history incorrectly [#1954](https://github.com/docker/buildx/issues/1954) ##### Dependency Changes - **github.com/docker/docker** v24.0.2 -> [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc) - **github.com/moby/buildkit** [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a) -> [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353) - **github.com/tonistiigi/fsutil** [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576) -> [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb) - **github.com/xeipuuv/gojsonpointer** [`4e3ac27`](https://github.com/docker/buildx/commit/4e3ac2762d5f) -> [`02993c4`](https://github.com/docker/buildx/commit/02993c407bfb) Previous release can be found at [v0.11.1](https://github.com/docker/buildx/releases/tag/v0.11.1) ### [`v0.11.1`](https://github.com/docker/buildx/releases/tag/v0.11.1) [Compare Source](https://github.com/docker/buildx/compare/v0.11.0...v0.11.1) Welcome to the v0.11.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - [CrazyMax](https://github.com/crazy-max) - [Justin Chadwell](https://github.com/jedevc) - [David Karlsson](https://github.com/dvdksn) - [Jhan S. Álvarez](https://github.com/yastanotheruser) ##### Changes - Fix a regression for bake where services in profiles would not be loaded. [#1903](https://github.com/docker/buildx/issues/1903) - Fix a regression where `--cgroup-parent` option had no effect during build. [#1913](https://github.com/docker/buildx/issues/1913) - Fix a regression where valid docker contexts could fail buildx builder name validation. [#1879](https://github.com/docker/buildx/issues/1879) - Fix an issue where the `host-gateway` special address could not be used as an argument to `--add-host`. [#1894](https://github.com/docker/buildx/issues/1894) (also requires https://github.com/moby/moby/pull/45767) - Fix a possible panic when terminal is resized during the build. [#1929](https://github.com/docker/buildx/issues/1929) ##### Dependency Changes - **github.com/docker/cli-docs-tool** v0.5.1 -> v0.6.0 Previous release can be found at [v0.11.0](https://github.com/docker/buildx/releases/tag/v0.11.0) ### [`v0.11.0`](https://github.com/docker/buildx/releases/tag/v0.11.0) [Compare Source](https://github.com/docker/buildx/compare/v0.10.5...v0.11.0) Welcome to the v0.11.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Notable changes - `--load` now supports loading multi-platform images when used with the [containerd image store](https://docs.docker.com/desktop/containerd/) in moby [#1813](https://github.com/docker/buildx/issues/1813) - Commands now display the current builder name in the build progress output [#1177](https://github.com/docker/buildx/issues/1177) - Bake now supports [matrix builds](https://github.com/docker/buildx/blob/v0.11.0/docs/bake-reference.md#targetmatrix). The new `matrix` field on `target` blocks allows easily creating multiple similar sets of targets to remove duplication in bake files [#1690](https://github.com/docker/buildx/issues/1690) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/bake-reference.md#targetmatrix) - New experimental `--detach` flag for the `build` command to run the build in a detached server, allowing attaching to the build later using `debug-shell` (requires `BUILDX_EXPERIMENTAL=1`) [#1296](https://github.com/docker/buildx/issues/1296) [#1620](https://github.com/docker/buildx/issues/1620) [#1614](https://github.com/docker/buildx/issues/1614) [#1737](https://github.com/docker/buildx/issues/1737) [#1755](https://github.com/docker/buildx/issues/1755) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New monitor mode commands `exec` and `attach` to allow spawning additional processes in a debugging session (requires `BUILDX_EXPERIMENTAL=1`) [#1626](https://github.com/docker/buildx/issues/1626) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New experimental `debug-shell` command to directly start the build debugging monitor without starting a build, allowing connecting to previously `--detach`ed builds (requires `BUILDX_EXPERIMENTAL=1`) [#1640](https://github.com/docker/buildx/issues/1640) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New experimental `--invoke=on-error` option for the `--invoke` command to start the build debugging monitor at the point at which a build fails (requires `BUILDX_EXPERIMENTAL=1`) [#1640](https://github.com/docker/buildx/issues/1640) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - Bake now supports detecting `compose.yml`/`compose.yaml` files in addition to `docker-compose.yml`/`docker-compose.yaml` [#1752](https://github.com/docker/buildx/issues/1752) - Bake now supports new compose build keys `dockerfile_inline` and `additional_contexts` [#1784](https://github.com/docker/buildx/issues/1784) [docs](https://docs.docker.com/compose/compose-file/build/) - Bake now supports `replace` HCL function [#1720](https://github.com/docker/buildx/issues/1720) - Initial support for CLI command completion, including: builder names, folder names for build commands and bake targets [#1727](https://github.com/docker/buildx/issues/1727) - Builds support the new `EXPERIMENTAL_BUILDKIT_SOURCE_POLICY` environment variable to set the path to a source policy [docs](https://github.com/moby/buildkit/blob/master/docs/build-repro.md#reproducing-the-pinned-dependencies) [#1628](https://github.com/docker/buildx/issues/1628) - BuildKit versions are correctly displayed in `buildx ls` and `buildx inspect` for builders using the Docker driver [#1552](https://github.com/docker/buildx/issues/1552) - Display additional builder node details in `buildx inspect` view [#1440](https://github.com/docker/buildx/issues/1440) [#1854](https://github.com/docker/buildx/issues/1854) - Builders using the remote driver allow using TLS without proving its own key/cert (if BuildKit remote is configured to support it) [#1693](https://github.com/docker/buildx/issues/1693) - Builders using the kubernetes driver allow automatically generating the node name if not provided [#1673](https://github.com/docker/buildx/issues/1673) - Builders using the kubernetes driver support a new `serviceaccount` option, which will set the created pod's `serviceAccountName` [#1597](https://github.com/docker/buildx/issues/1597) - Builders using the kubernetes driver support the `proxy-url` kubeconfig option [docs](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/#proxy) [#1780](https://github.com/docker/buildx/issues/1780) - Bake now allows merging multiple similar attestation parameters into a single parameter to allow overriding with a single global value [#1699](https://github.com/docker/buildx/issues/1699) - Fix possible panic when no builders are available [#1732](https://github.com/docker/buildx/issues/1732) - Fix `docker-container` driver hang on container panic [#1772](https://github.com/docker/buildx/issues/1772) - Fix invalid path when writing certificates for `docker-container` driver on Windows [#1831](https://github.com/docker/buildx/issues/1831) - Fix bake failure when remote bake file is accessed using SSH [#1711](https://github.com/docker/buildx/issues/1711) [#1734](https://github.com/docker/buildx/issues/1734) - Fix bake failure when remote bake context is incorrectly resolved [#1783](https://github.com/docker/buildx/issues/1783) - Fix path resolution of `BAKE_CMD_CONTEXT` and `cwd://` paths in bake contexts [#1840](https://github.com/docker/buildx/issues/1840) - Fix mixed OCI and Docker media types when creating images using `imagetools create` [#1797](https://github.com/docker/buildx/issues/1797) - Fix mismatched image id between `--iidfile` and `-q` [#1844](https://github.com/docker/buildx/issues/1844) - Fix opaque error messages on invalid edge-case git urls [#1710](https://github.com/docker/buildx/issues/1710) [#1733](https://github.com/docker/buildx/issues/1733) - Fix previously discarded error messages from logrus [#1853](https://github.com/docker/buildx/issues/1853) - Fix AWS authentication when mixing static creds and IAM profiles [#1816](https://github.com/docker/buildx/issues/1816) - Fix race in printer so that logrus warning messages appear at the end of the build deterministically [#1794](https://github.com/docker/buildx/issues/1794) - Fix connection leak for feature check on default `docker` driver [#1776](https://github.com/docker/buildx/issues/1776) ##### Contributors - [Justin Chadwell](https://github.com/jedevc) - [CrazyMax](https://github.com/crazy-max) - [Tõnis Tiigi](https://github.com/tonistiigi) - [Sebastiaan van Stijn](https://github.com/thaJeztah) - [Kohei Tokunaga](https://github.com/ktock) - [David Karlsson](https://github.com/dvdksn) - [Akihiro Suda](https://github.com/AkihiroSuda) - [Ben Peachey](https://github.com/potherca) - [Brian Goff](https://github.com/cpuguy83) - [Nick Santos](https://github.com/nicks) - [Nick Sieger](https://github.com/nicksieger) - [Batuhan Apaydın](https://github.com/developer-guy) - [Bertrand Paquet](https://github.com/bpaquet) - [David Gageot](https://github.com/dgageot) - [Elran Shefer](https://github.com/IamShobe) - [Milas Bowman](https://github.com/milas) - [Tianon Gravi](https://github.com/tianon) - [Timofey Kirillov](https://github.com/distorhead) - [Robert Lestak](https://github.com/robertlestak) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) ***new*** - **github.com/Masterminds/semver/v3** v3.2.1 ***new*** - **github.com/Microsoft/go-winio** v0.5.2 -> v0.6.1 - **github.com/aws/aws-sdk-go-v2** v1.16.3 -> v1.17.6 - **github.com/aws/aws-sdk-go-v2/config** v1.15.5 -> v1.18.16 - **github.com/aws/aws-sdk-go-v2/credentials** v1.12.0 -> v1.13.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.4 -> v1.12.24 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.10 -> v1.1.30 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.4 -> v2.4.24 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.11 -> v1.3.31 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.4 -> v1.9.24 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.11.4 -> v1.12.5 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 ***new*** - **github.com/aws/aws-sdk-go-v2/service/sts** v1.16.4 -> v1.18.6 - **github.com/aws/smithy-go** v1.11.2 -> v1.13.5 - **github.com/cenkalti/backoff/v4** v4.1.2 -> v4.2.0 - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/compose-spec/compose-go** v1.6.0 -> v1.14.0 - **github.com/containerd/containerd** [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9) -> v1.7.2 - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.1 ***new*** - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/distribution/distribution/v3** [`4bf3547`](https://github.com/docker/buildx/commit/4bf3547399eb) -> [`36d8c59`](https://github.com/docker/buildx/commit/36d8c594d7aa) - **github.com/docker/cli** v23.0.0-rc.1 -> v24.0.2 - **github.com/docker/distribution** v2.8.1 -> v2.8.2 - **github.com/docker/docker** v23.0.0-rc.1 -> v24.0.2 - **github.com/emicklei/go-restful/v3** v3.10.1 ***new*** - **github.com/felixge/httpsnoop** v1.0.2 -> v1.0.3 - **github.com/go-openapi/jsonpointer** v0.19.5 ***new*** - **github.com/go-openapi/jsonreference** v0.20.0 ***new*** - **github.com/go-openapi/swag** v0.19.14 ***new*** - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/google/certificate-transparency-go** v1.0.21 -> v1.1.4 - **github.com/google/gnostic** v0.5.7-v3refs ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 ***new*** - **github.com/imdario/mergo** v0.3.13 -> v0.3.15 - **github.com/in-toto/in-toto-golang** v0.5.0 ***new*** - **github.com/inconshreveable/mousetrap** v1.0.1 -> v1.1.0 - **github.com/josharian/intern** v1.0.0 ***new*** - **github.com/klauspost/compress** v1.15.12 -> v1.16.3 - **github.com/kr/pretty** v0.3.0 -> v0.2.1 - **github.com/mailru/easyjson** v0.7.6 ***new*** - **github.com/moby/buildkit** v0.11.2 -> [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a) - **github.com/moby/term** [`abb1982`](https://github.com/docker/buildx/commit/abb19827d345) -> v0.5.0 - **github.com/munnerz/goautoneg** [`a7dc8b6`](https://github.com/docker/buildx/commit/a7dc8b61c822) ***new*** - **github.com/opencontainers/image-spec** [`02efb9a`](https://github.com/docker/buildx/commit/02efb9a75ee1) -> v1.1.0-rc3 - **github.com/opencontainers/runc** v1.1.3 -> v1.1.7 - **github.com/prometheus/common** v0.37.0 -> v0.42.0 - **github.com/prometheus/procfs** v0.8.0 -> v0.9.0 - **github.com/secure-systems-lab/go-securesystemslib** v0.4.0 ***new*** - **github.com/sergi/go-diff** v1.2.0 ***new*** - **github.com/shibumi/go-pathspec** v1.3.0 ***new*** - **github.com/spf13/cobra** v1.6.1 -> v1.7.0 - **github.com/stretchr/testify** v1.8.1 -> v1.8.4 - **github.com/tonistiigi/fsutil** [`fb43384`](https://github.com/docker/buildx/commit/fb433841cbfa) -> [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576) - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.27.0 -> v0.37.0 - **go.opentelemetry.io/otel/sdk** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.12.0 -> v0.19.0 - **golang.org/x/mod** v0.9.0 ***new*** - **golang.org/x/net** v0.4.0 -> v0.8.0 - **golang.org/x/oauth2** [`6fdb5e3`](https://github.com/docker/buildx/commit/6fdb5e3db783) -> v0.5.0 - **golang.org/x/sync** v0.1.0 -> v0.2.0 - **golang.org/x/sys** v0.3.0 -> v0.7.0 - **golang.org/x/term** v0.3.0 -> v0.6.0 - **golang.org/x/text** v0.5.0 -> v0.8.0 - **golang.org/x/time** v0.1.0 -> v0.3.0 - **golang.org/x/tools** v0.7.0 ***new*** - **google.golang.org/genproto** [`1bc688f`](https://github.com/docker/buildx/commit/1bc688fe9f3e) -> [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.50.1 -> v1.53.0 - **google.golang.org/protobuf** v1.28.1 -> v1.30.0 - **k8s.io/api** v0.22.4 -> v0.26.2 - **k8s.io/apimachinery** v0.22.4 -> v0.26.2 - **k8s.io/apiserver** v0.26.2 ***new*** - **k8s.io/client-go** v0.22.4 -> v0.26.2 - **k8s.io/klog/v2** v2.30.0 -> v2.90.1 - **k8s.io/kube-openapi** [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) ***new*** - **k8s.io/utils** [`cb0fa31`](https://github.com/docker/buildx/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5) - **sigs.k8s.io/json** [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) ***new*** - **sigs.k8s.io/structured-merge-diff/v4** v4.1.2 -> v4.2.3 - **sigs.k8s.io/yaml** v1.2.0 -> v1.3.0 Previous release can be found at [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4) ### [`v0.10.5`](https://github.com/docker/buildx/releases/tag/v0.10.5) [Compare Source](https://github.com/docker/buildx/compare/v0.10.4...v0.10.5) Welcome to the 0.10.5 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix issue where build progress could pause for a couple of seconds with no new output because of a race condition. This issue was more likely to appear when using Docker driver with Docker Engine v24.0 release [#1815](https://github.com/docker/buildx/issues/1815) - Fix handling `NO_COLOR` with empty value [#1815](https://github.com/docker/buildx/issues/1815) ### [`v0.10.4`](https://github.com/docker/buildx/releases/tag/v0.10.4) [Compare Source](https://github.com/docker/buildx/compare/v0.10.3...v0.10.4) Welcome to the 0.10.4 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Add `BUILDX_NO_DEFAULT_ATTESTATIONS` as alternative to `--provenance false` [#1645](https://github.com/docker/buildx/issues/1645) - Disable dirty Git checkout detection by default for performance. Can be enabled with `BUILDX_GIT_CHECK_DIRTY` opt-in [#1650](https://github.com/docker/buildx/issues/1650) - Strip credentials from VCS hint URL before sending to BuildKit [#1664](https://github.com/docker/buildx/issues/1664) ### [`v0.10.3`](https://github.com/docker/buildx/releases/tag/v0.10.3) [Compare Source](https://github.com/docker/buildx/compare/v0.10.2...v0.10.3) Welcome to the 0.10.3 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix reachable commit and warnings on collecting Git provenance info [#1592](https://github.com/docker/buildx/issues/1592) [#1634](https://github.com/docker/buildx/issues/1634) - Fix a regression where docker context was not being validated [#1596](https://github.com/docker/buildx/issues/1596) - Fix function resolution with JSON bake definition [#1605](https://github.com/docker/buildx/issues/1605) - Fix case where original HCL bake diagnostic is discarded [#1607](https://github.com/docker/buildx/issues/1607) - Fix labels not correctly set with bake and compose file [#1631](https://github.com/docker/buildx/issues/1631) ### [`v0.10.2`](https://github.com/docker/buildx/releases/tag/v0.10.2) [Compare Source](https://github.com/docker/buildx/compare/v0.10.1...v0.10.2) Welcome to the 0.10.2 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix preferred platforms order not taken into account in multi-node builds [#1561](https://github.com/docker/buildx/issues/1561) - Fix possible panic on handling `SOURCE_DATE_EPOCH` environment variable [#1564](https://github.com/docker/buildx/issues/1564) - Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries [#1566](https://github.com/docker/buildx/issues/1566) - Improve warnings on collecting Git provenance info [#1568](https://github.com/docker/buildx/issues/1568) ### [`v0.10.1`](https://github.com/docker/buildx/releases/tag/v0.10.1) [Compare Source](https://github.com/docker/buildx/compare/v0.10.0...v0.10.1) Welcome to the 0.10.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix sending the correct origin URL as `vsc:source` metadata [#1548](https://github.com/docker/buildx/issues/1548) - Fix possible panic from data-race [#1504](https://github.com/docker/buildx/issues/1504) - Fix regression with `rm --all-inactive` [#1547](https://github.com/docker/buildx/issues/1547) - Improve attestation access in `imagetools inspect` by lazily loading data [#1546](https://github.com/docker/buildx/issues/1546) - Correctly mark capabilities request as internal [#1538](https://github.com/docker/buildx/issues/1538) - Detect invalid attestation configuration [#1545](https://github.com/docker/buildx/issues/1545) - Update containerd patches to fix possible push regression affecting `imagetools` commands [#1559](https://github.com/docker/buildx/issues/1559) ##### Dependency Changes - **github.com/containerd/containerd** v1.6.14 -> [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9) - **github.com/moby/buildkit** v0.11.0 -> v0.11.2 Previous release can be found at [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0) </details> <details> <summary>docker/distribution</summary> ### [`v2.8.3`](https://github.com/distribution/distribution/releases/tag/v2.8.3) [Compare Source](https://github.com/docker/distribution/compare/v2.8.2...v2.8.3) #### What's Changed - Pass `BUILDTAGS` argument to `go build` by [@marcusirgens](https://github.com/marcusirgens) in https://github.com/distribution/distribution/pull/3926 - Enable Go build tags by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4009 - `reference`: replace deprecated function `SplitHostname` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4032 - Dont parse errors as JSON unless Content-Type is set to JSON by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4054 - update to go 1.20.8 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4056 - Set `Content-Type` header in registry client `ReadFrom` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4053 - deprecate reference package, migrate to github.com/distribution/reference by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4063 - `digestset`: deprecate package in favor of `go-digest/digestset` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4064 - Do not close HTTP request body in HTTP handler by [@milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4068 - Add v2.8.3 release notes by [@milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4088 #### New Contributors - [@marcusirgens](https://github.com/marcusirgens) made their first contribution in https://github.com/distribution/distribution/pull/3926 **Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3 ### [`v2.8.2`](https://github.com/distribution/distribution/releases/tag/v2.8.2) [Compare Source](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2) #### What's Changed - Revert registry/client: set `Accept: identity` header when getting layers by [@ndeloof](https://github.com/ndeloof) in https://github.com/distribution/distribution/pull/3783 - Parse `http` forbidden as denied by [@vvoland](https://github.com/vvoland) in https://github.com/distribution/distribution/pull/3914 - Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 by [@thaJeztah](https://github.com/thaJeztah) ([#3650](https://github.com/distribution/distribution/pull/3650)) - Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/\_catalog by [@josegomezr](https://github.com/josegomezr) [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54) - Fix panic in inmemory driver by [@wy65701436](https://github.com/wy65701436) in https://github.com/distribution/distribution/pull/3815 - bump up golang version (alternative) by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3903 - Dockerfile: update xx to v1.2.1 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3907 - update to go1.19.9 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3908 - Add code to handle pagination of parts. Fixes max layer size of 10GB bug by [@DavidSpek](https://github.com/DavidSpek) in https://github.com/distribution/distribution/pull/3893 - Dockerfile: fix filenames of artifacts by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3911 **Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2 </details> <details> <summary>docker/docker</summary> ### [`v26.0.0`](https://github.com/moby/moby/releases/tag/v26.0.0) [Compare Source](https://github.com/docker/docker/compare/v25.0.5...v26.0.0) ##### 26.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 26.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A26.0.0) - [moby/moby, 26.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A26.0.0) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v26.0.0/docs/api/version-history.md). ##### Security This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers. ##### New - Add `Subpath` field to the `VolumeOptions` making it possible to mount a subpath of a volume. [moby/moby#45687](https://github.com/moby/moby/pull/45687) - Add `volume-subpath` support to the mount flag (`--mount type=volume,...,volume-subpath=<subpath>`). [docker/cli#4331](https://github.com/docker/cli/pull/4331) - Accept `=` separators and `[ipv6]` in compose files for `docker stack deploy`. [docker/cli#4860](https://github.com/docker/cli/pull/4860) - rootless: Add support for enabling host loopback by setting the `DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK` environment variable to `false` (defaults to `true`). This lets containers connect to the host by using IP address `10.0.2.2`. [moby/moby#47352](https://github.com/moby/moby/pull/47352) - containerd image store: `docker image ls` no longer creates duplicates entries for multi-platform images. [moby/moby#45967](https://github.com/moby/moby/pull/45967) - containerd image store: Send Prometheus metrics. [moby/moby#47555](https://github.com/moby/moby/pull/47555) ##### Bug fixes and enhancements - [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#47589](https://github.com/moby/moby/pull/47589) - Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#47233](https://github.com/moby/moby/pull/47233) > \[!WARNING] > > Containers created using Docker Engine 25.0.0 may have duplicate MAC addresses, they must be re-created. > Containers created using version 25.0.0 or 25.0.1 with user-defined MAC addresses will get generated MAC addresses when they are started using 25.0.2. They must also be re-created. - Always attempt to enable IPv6 on a container's loopback interface, and only include IPv6 in `/etc/hosts` if successful. [moby/moby#47062](https://github.com/moby/moby/pull/47062) > \[!NOTE] > > By default, IPv6 will remain enabled on a container's loopback interface when the container is not connected to an IPv6-enabled network. > For example, containers that are only connected to an IPv4-only network now have the `::1` address on their loopback interface. > > To disable IPv6 in a container, > use option `--sysctl net.ipv6.conf.all.disable_ipv6=1` in the `create` or `run` command, > or the equivalent `sysctls` option in the service configuration section of a Compose file. > > If IPv6 is not available in a container because it has been explicitly disabled for the container, > or the host's networking stack does not have IPv6 enabled (or for any other reason) > the container's `/etc/hosts` file will not include IPv6 entries. - Fix `ADD` Dockerfile instruction failing with `lsetxattr <file>: operation not supported` when unpacking archive with xattrs onto a filesystem that doesn't support them. [moby/moby#47175](https://github.com/moby/moby/pull/47175) - Fix `docker container start` failing when used with `--checkpoint`. [moby/moby#47456](https://github.com/moby/moby/pull/47456) - Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#47356](https://github.com/moby/moby/pull/47356) - Do not enforce new validation rules for existing swarm networks. [moby/moby#47361](https://github.com/moby/moby/pull/47361) - Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#47375](https://github.com/moby/moby/pull/47375) - Print hint when invoking `docker image ls` with ambiguous argument. [docker/cli#4849](https://github.com/docker/cli/pull/4849) - Cleanup `@docker_cli_[UUID]` files on OpenBSD. [docker/cli#4862](https://github.com/docker/cli/pull/4862) - Add explicit [deprecation notice](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md#unauthenticated-tcp-connections) message when using remote TCP connections without TLS. [docker/cli#4928](https://github.com/docker/cli/pull/4928), [moby/moby#47556](https://github.com/moby/moby/pull/47556) - Use IPv6 nameservers from the host's `resolv.conf` as upstream resolvers for Docker Engine's internal DNS, rather than listing them in the container's `resolv.conf`. [moby/moby#47512](https://github.com/moby/moby/pull/47512) - containerd image store: Isolate images with different containerd namespaces when `--userns-remap` option is used. [moby/moby#46786](https://github.com/moby/moby/pull/46786) - containerd image store: Fix image pull not emitting `Pulling fs layer` status. [moby/moby#47432](https://github.com/moby/moby/pull/47432) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ##### API - To preserve backwards compatibility, read-only mounts are not recursive by default when using older clients (API version < v1.44). [moby/moby#47391](https://github.com/moby/moby/pull/47391) - `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#47451](https://github.com/moby/moby/pull/47451) - Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#47387](https://github.com/moby/moby/pull/47387) - The `is_automated` field in the `POST /images/search` endpoint results is always `false` now. Consequently, searching for `is-automated=true` will yield no results, while `is-automated=false` will be a no-op. [moby/moby#47465](https://github.com/moby/moby/pull/47465) - Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#47430](https://github.com/moby/moby/pull/47430) ##### Packaging updates - Update API to v1.45. [moby#47582](https://github.com/moby/moby/pull/47118) - Update BuildKit to [v0.13.1](https://github.com/moby/buildkit/releases/tag/v0.13.1). [moby/moby#47582](https://github.com/moby/moby/pull/47582) - Update Buildx to [v0.13.1](https://github.com/docker/buildx/releases/tag/v0.13.1). [docker/docker-ce-packaging#1000](https://github.com/docker/docker-ce-packaging/pull/1000) - Update Compose to [v2.25.0](https://github.com/docker/compose/releases/tag/v2.25.0). [docker/docker-ce-packaging#1002](https://github.com/docker/docker-ce-packaging/pull/1002) - Update Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#47502](https://github.com/moby/moby/pull/47502) - Update RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2). [moby/moby#47508](https://github.com/moby/moby/pull/47504) - Update containerd to v1.7.13 (static binaries only) [moby/moby#47278](https://github.com/moby/moby/pull/47278) - Update runc binary to v1.1.12 [moby/moby#47268](https://github.com/moby/moby/pull/47268) - Update OTel to v0.46.1 / v1.21.0 [moby/moby#47245](https://github.com/moby/moby/pull/47245) ##### Removed - Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#47430](https://github.com/moby/moby/pull/47430) - Deprecate the ability to accept remote TCP connections without TLS. [Deprecation notice](https://github.com/docker/cli/tree/v26.0.0/deprecation.md#unauthenticated-tcp-connections) [docker/cli#4928](https://github.com/docker/cli/pull/4928) [moby/moby#47556](https://github.com/moby/moby/pull/47556). - Remove deprecated API versions (API < v1.24) [moby/moby#47155](https://github.com/moby/moby/pull/47155) - Disable pulling of deprecated image formats by default. These image formats are deprecated, and support will be removed in a future version. [moby/moby#47459](https://github.com/moby/moby/pull/47459) - image: remove deprecated IDFromDigest [moby/moby#47198](https://github.com/moby/moby/pull/47198) - Remove the deprecated `github.com/docker/docker/pkg/loopback` package. [moby/moby#47128](https://github.com/moby/moby/pull/47128) - pkg/system: remove deprecated `ErrNotSupportedOperatingSystem`, `IsOSSupported` [moby/moby#47129](https://github.com/moby/moby/pull/47129) - pkg/homedir: remove deprecated Key() and GetShortcutString() [moby/moby#47130](https://github.com/moby/moby/pull/47130) - pkg/containerfs: remove deprecated ResolveScopedPath [moby/moby#47131](https://github.com/moby/moby/pull/47131) - The daemon flag `--oom-score-adjust` was deprecated in v24.0 and is now removed. [moby/moby#46113](https://github.com/moby/moby/pull/46113) - Remove deprecated aliases from the api/types package. These types were deprecated in v25.0.0, which provided temporary aliases. [moby/moby#47148](https://github.com/moby/moby/pull/47148) These aliases are now removed: `types.Info`, `types.Commit`, `types.PluginsInfo`, `types.NetworkAddressPool`, `types.Runtime`, `types.SecurityOpt`, `types.KeyValue`, `types.DecodeSecurityOptions`, `types.CheckpointCreateOptions`, `types.CheckpointListOptions`, `types.CheckpointDeleteOptions`, `types.Checkpoint`, `types.ImageDeleteResponseItem`, `types.ImageSummary`, `types.ImageMetadata`, `types.ServiceUpdateResponse`, `types.ServiceCreateResponse`, `types.ResizeOptions`, `types.ContainerAttachOptions`, `types.ContainerCommitOptions`, `types.ContainerRemoveOptions`, `types.ContainerStartOptions`, `types.ContainerListOptions`, `types.ContainerLogsOptions` - cli/command/container: remove deprecated `NewStartOptions()` [docker/cli#4811](https://github.com/docker/cli/pull/4811) - cli/command: remove deprecated `DockerCliOption`, `InitializeOpt` [docker/cli#4810](https://github.com/docker/cli/pull/4810) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ### [`v25.0.5`](https://github.com/moby/moby/releases/tag/v25.0.5) [Compare Source](https://github.com/docker/docker/compare/v25.0.4...v25.0.5) #### 25.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.5) - [moby/moby, 25.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.5) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.5/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.5/docs/api/version-history.md). ##### Security This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers. ##### Bug fixes and enhancements - [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#47589](https://github.com/moby/moby/pull/47589) - plugin: fix mounting /etc/hosts when running in UserNS. [moby/moby#47588](https://github.com/moby/moby/pull/47588) - rootless: fix `open /etc/docker/plugins: permission denied`. [moby/moby#47587](https://github.com/moby/moby/pull/47587) - Fix multiple parallel `docker build` runs leaking disk space. [moby/moby#47527](https://github.com/moby/moby/pull/47527) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ### [`v25.0.4`](https://github.com/moby/moby/releases/tag/v25.0.4) [Compare Source](https://github.com/docker/docker/compare/v25.0.3...v25.0.4) #### 25.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.4) - [moby/moby, 25.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.4) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.4/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.4/docs/api/version-history.md). ##### Bug fixes and enhancements - Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#47490](https://github.com/moby/moby/pull/47490) - Fix `docker start` failing when used with `--checkpoint` [moby/moby#47466](https://github.com/moby/moby/pull/47466) - Don't enforce new validation rules for existing swarm networks [moby/moby#47482](https://github.com/moby/moby/pull/47482) - Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#47481](https://github.com/moby/moby/pull/47481) - Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS [moby/moby#47483](https://github.com/moby/moby/pull/47483) - containerd image store: Fix image pull not emitting `Pulling fs layer` status [moby/moby#47484](https://github.com/moby/moby/pull/47484) ##### API - To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). [moby/moby#47393](https://github.com/moby/moby/pull/47393) - `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#47451](https://github.com/moby/moby/pull/47451) - Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#47387](https://github.com/moby/moby/pull/47387) - Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. [moby/moby#47470](https://github.com/moby/moby/pull/47470) - Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but `NetworkMode` name-or-id is not the same as the name-or-id used in `NetworkSettings.Networks`. [moby/moby#47510](https://github.com/moby/moby/pull/47510) ##### Packaging updates - Upgrade Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#47503](https://github.com/moby/moby/pull/47503) - Upgrade RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2). [moby/moby#47508](https://github.com/moby/moby/pull/47508) - Upgrade Compose to [v2.24.7](https://github.com/docker/compose/releases/tag/v2.24.7). https://github.com/docker/docker-ce-packaging/pull/998 - Upgrade Buildx to [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0). https://github.com/docker/docker-ce-packaging/pull/997 **Full Changelog**: https://github.com/moby/moby/compare/v25.0.3...v25.0.4 ### [`v25.0.3`](https://github.com/moby/moby/releases/tag/v25.0.3) [Compare Source](https://github.com/docker/docker/compare/v25.0.2...v25.0.3) #### 25.0.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.3) - [moby/moby, 25.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.3) ##### Bug fixes and enhancements - containerd image store: Fix a bug where `docker image history` would fail if a manifest wasn't found in the content store. [moby/moby#47348](https://github.com/moby/moby/pull/47348) - Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#47304](https://github.com/moby/moby/pull/47304) > **Note** > > - Containers created with Docker Engine version 25.0.0 may have duplicate MAC addresses. > They must be re-created. > - Containers with user-defined MAC addresses created with Docker Engine versions 25.0.0 or 25.0.1 > receive new MAC addresses when started using Docker Engine version 25.0.2. > They must also be re-created.  - Fix `docker save <image>@<digest>` producing an OCI archive with index without manifests. [moby/moby#47294](https://github.com/moby/moby/pull/47294) - Fix a bug preventing bridge networks from being created with an MTU higher than 1500 on RHEL and CentOS 7. [moby/moby#47308](https://github.com/moby/moby/issues/47308), [moby/moby#47311](https://github.com/moby/moby/pull/47311) - Fix a bug where containers are unable to communicate over an `internal` network. [moby/moby#47303](https://github.com/moby/moby/pull/47303) - Fix a bug where the value of the `ipv6` daemon option was ignored. [moby/moby#47310](https://github.com/moby/moby/pull/47310) - Fix a bug where trying to install a pulling using a digest revision would cause a panic. [moby/moby#47323](https://github.com/moby/moby/pull/47323) - Fix a potential race condition in the managed containerd supervisor. [moby/moby#47313](https://github.com/moby/moby/pull/47313) - Fix an issue with the `journald` log driver preventing container logs from being followed correctly with systemd version 255. [moby/moby47243](https://github.com/moby/moby/pull/47243) - seccomp: Update the builtin seccomp profile to include syscalls added in kernel v5.17 - v6.7 to align the profile with the profile used by containerd. [moby/moby#47341](https://github.com/moby/moby/pull/47341) - Windows: Fix cache not being used when building images based on Windows versions older than the host's version. [moby/moby#47307](https://github.com/moby/moby/pull/47307), [moby/moby#47337](https://github.com/moby/moby/pull/47337) ##### Packaging updates - Removed support for Ubuntu Lunar (23.04). [docker/ce-packaging#986](https://github.com/docker/docker-ce-packaging/pull/986) ### [`v25.0.2`](https://github.com/moby/moby/releases/tag/v25.0.2) [Compare Source](https://github.com/docker/docker/compare/v25.0.1...v25.0.2) #### 25.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.2) - [moby/moby, 25.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.2) ##### Security This release contains security fixes for the following CVEs affecting Docker Engine and its components. | CVE | Component | Fix version | Severity | | ----------------------------------------------------------- | ------------- | ----------- | ---------------- | | [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc | 1.1.12 | High, CVSS 8.6 | | [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) | BuildKit | 1.12.5 | High, CVSS 8.7 | | [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) | BuildKit | 1.12.5 | High, CVSS 8.7 | | [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) | BuildKit | 1.12.5 | High, CVSS 7.7 | | [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) | BuildKit | 1.12.5 | Medium, CVSS 5.5 | | [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 25.0.2 | Medium, CVSS 6.9 | The potential impacts of the above vulnerabilities include: - Unauthorized access to the host filesystem - Compromising the integrity of the build cache - In the case of CVE-2024-21626, a scenario that could lead to full container escape For more information about the security issues addressed in this release, refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory: - [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-23651](https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv) - [CVE-2024-23652](https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8) - [CVE-2024-23653](https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g) - [CVE-2024-23650](https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ##### Packaging updates - Upgrade containerd to [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28). - Upgrade containerd to v1.7.13 (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) - Upgrade runc to v1.1.12. [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade Compose to v2.24.5. [docker/docker-ce-packaging#985](https://github.com/docker/docker-ce-packaging/pull/985) - Upgrade BuildKit to v0.12.5. [moby/moby#47273](https://github.com/moby/moby/pull/47273) ### [`v25.0.1`](https://github.com/moby/moby/releases/tag/v25.0.1) [Compare Source](https://github.com/docker/docker/compare/v25.0.0...v25.0.1) #### 25.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.1) - [moby/moby, 25.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.1) ##### Bug fixes and enhancements - API: Fix incorrect HTTP status code for containers with an invalid network configuration created before upgrading to Docker Engine v25.0. [moby/moby#47159](https://github.com/moby/moby/pull/47159) - Ensure that a MAC address based on a container's IP address is re-generated when the container is stopped and restarted, in case the generated IP/MAC addresses have been reused. [moby/moby#47171](https://github.com/moby/moby/pull/47171) - Fix `host-gateway-ip` not working during build when not set through configuration. [moby/moby#47192](https://github.com/moby/moby/pull/47192) - Fix a bug that prevented a container from being renamed twice. [moby/moby#47196](https://github.com/moby/moby/pull/47196) - Fix an issue causing containers to have their short ID added to their network alias when inspecting them. [moby/moby#47182](https://github.com/moby/moby/pull/47182) - Fix an issue in detecting whether a remote build context is a Git repository. [moby/moby#47136](https://github.com/moby/moby/pull/47136) - Fix an issue with layers order in OCI manifests. [moby/moby#47150](https://github.com/moby/moby/issues/47150) - Fix volume mount error when passing an `addr` or `ip` mount option. [moby/moby#47185](https://github.com/moby/moby/pull/47185) - Improve error message related to extended attributes that can't be set due to improperly namespaced attribute names. [moby/moby#47178](https://github.com/moby/moby/pull/47178) - Swarm: Fixed `start_interval` not being passed to the container config. [moby/moby#47163](https://github.com/moby/moby/pull/47163) ##### Packaging updates - Upgrade Compose to `2.24.2`. [docker/docker-ce-packaging#981](https://github.com/docker/docker-ce-packaging/pull/981) ### [`v25.0.0`](https://github.com/moby/moby/releases/tag/v25.0.0) [Compare Source](https://github.com/docker/docker/compare/v24.0.9...v25.0.0) #### 25.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.0) - [moby/moby, 25.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.0) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.0/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.0/docs/api/version-history.md). ##### New - Add OpenTelemetry tracing. [moby/moby#45652](https://github.com/moby/moby/pull/45652), [moby/moby#45579](https://github.com/moby/moby/pull/45579) - Add support for CDI devices under Linux. [moby/moby#45134](https://github.com/moby/moby/pull/45134), [docker/cli#4510](https://github.com/docker/cli/pull/4510), [moby/moby#46004](https://github.com/moby/moby/pull/46004) - Add an additional interval to be used by healthchecks during the container start period. [moby/moby#40894](https://github.com/moby/moby/pull/40894), [docker/cli#4405](https://github.com/docker/cli/pull/4405), [moby/moby#45965](https://github.com/moby/moby/pull/45965) - Add a `--log-format` flag to `dockerd` to control the logging format: text (default) or JSON. [moby/moby#45737](https://github.com/moby/moby/pull/45737) - Add support for recursive read-only mounts. [moby/moby#45278](https://github.com/moby/moby/pull/45278), [moby/moby#46037](https://github.com/moby/moby/pull/46037) - Add support for filtering images based on timestamp with `docker image ls --filter=until=<timestamp>`. [moby/moby#46577](https://github.com/moby/moby/pull/46577) ##### Bug fixes and enhancements - API: Fix error message for invalid policies at `ValidateRestartPolicy`. [moby/moby#46352](https://github.com/moby/moby/pull/46352) - API: Update `/info` endpoint to use singleflight. [moby/moby#45847](https://github.com/moby/moby/pull/45847) - Add an error message for when specifying a Dockerfile filename with `-f`, and also using `stdin`. [docker/cli#4346](https://github.com/docker/cli/pull/4346) - Add support for `mac-address` and `link-local-ip` fields in `--network` long format. [docker/cli#4419](https://github.com/docker/cli/pull/4419) - Add support for specifying multiple `--network` flags with `docker container create` and `docker run`. [moby/moby#45906](https://github.com/moby/moby/pull/45906) - Automatically enable IPv6 on a network when an IPv6 subnet is specified. [moby/moby#46455](https://github.com/moby/moby/pull/46455) - Add support for overlay networks over IPv6 transport. [moby/moby#46790](https://github.com/moby/moby/pull/46790) - Configuration reloading is now more robust: if there's an error during the configuration reload process, no configuration changes are applied. [moby/moby#43980](https://github.com/moby/moby/pull/43980) - Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#46857](https://github.com/moby/moby/pull/46857) - Live restore: containers that are live-restored will now be given another health-check start period when the daemon restarts. [moby/moby#47051](https://github.com/moby/moby/pull/47051) - Container health status is flushed to disk less frequently, reducing wear on flash storage. [moby/moby#47044](https://github.com/moby/moby/pull/47044) - Ensure network names are unique. [moby/moby#46251](https://github.com/moby/moby/pull/46251) - Ensure that overlay2 layer metadata is correct. [moby/moby#46471](https://github.com/moby/moby/pull/46471) - Fix `Downloading` progress message on image pull. [moby/moby#46515](https://github.com/moby/moby/pull/46515) - Fix `NetworkConnect` and `ContainerCreate` with improved data validation, and return all validation errors at once. [moby/moby#46183](https://github.com/moby/moby/pull/46183) - Fix `com.docker.network.host_ipv4` option when IPv6 and ip6tables are enabled. [moby/moby#46446](https://github.com/moby/moby/pull/46446) - Fix daemon's `cleanupContainer` if containerd is stopped. [moby/moby#46213](https://github.com/moby/moby/pull/46213) - Fix returning incorrect HTTP status codes for libnetwork errors. [moby/moby#46146](https://github.com/moby/moby/pull/46146) - Fix various issues with images/json API filters and image list. [moby/moby#46034](https://github.com/moby/moby/pull/46034) - CIFS volumes now resolves FQDN correctly. [moby/moby#46863](https://github.com/moby/moby/pull/46863) - Improve validation of the `userland-proxy-path` daemon configuration option. Validation now happens during daemon startup, instead of producing an error when starting a container with port-mapping. [moby/moby#47000](https://github.com/moby/moby/pull/47000) - Set the MAC address of container's interface when network mode is a short network ID. [moby/moby#46406](https://github.com/moby/moby/pull/46406) - Sort unconsumed build arguments before display in build output. [moby/moby#45917](https://github.com/moby/moby/pull/45917) - The `docker image save` tarball output is now OCI compliant. [moby/moby#44598](https://github.com/moby/moby/pull/44598) - The daemon no longer appends `ACCEPT` rules to the end of the `INPUT` iptables chain for encrypted overlay networks. Depending on firewall configuration, a rule may be needed to permit incoming encrypted overlay network traffic. [moby/moby#45280](https://github.com/moby/moby/pull/45280) - Unpacking layers with extended attributes onto an incompatible filesystem will now fail instead of silently discarding extended attributes. [moby/moby#45464](https://github.com/moby/moby/pull/45464) - Update daemon MTU option to BridgeConfig and display warning on Windows. [moby/moby#45887](https://github.com/moby/moby/pull/45887) - Validate IPAM config when creating a network. Automatically fix networks created prior to this release where `--ip-range` is larger than `--subnet`. [moby/moby#45759](https://github.com/moby/moby/pull/45759) - containerd image store: Add image events for `push`, `pull`, and `save`. [moby/moby#46405](https://github.com/moby/moby/pull/46405) - containerd image store: Add support for pulling legacy schema1 images. [moby/moby#46513](https://github.com/moby/moby/pull/46513) - containerd image store: Add support for pushing all tags. [moby/moby#46485](https://github.com/moby/moby/pull/46485) - containerd image store: Add support for registry token. [moby/moby#46475](https://github.com/moby/moby/pull/46475) - containerd image store: Add support for showing the number of containers that use an image. [moby/moby#46511](https://github.com/moby/moby/pull/46511) - containerd image store: Fix a bug related to the `ONBUILD`, `MAINTAINER`, and `HEALTHCHECK` Dockerfile instructions. [moby/moby#46313](https://github.com/moby/moby/pull/46313) - containerd image store: Fix `Pulling from` progress message. [moby/moby#46494](https://github.com/moby/moby/pull/46494) - containerd image store: Add support for referencing images via the truncated ID with `sha256:` prefix. [moby/moby#46435](https://github.com/moby/moby/pull/46435) - containerd image store: Fix `docker images` showing intermediate layers by default. [moby/moby#46423](https://github.com/moby/moby/pull/46423) - containerd image store: Fix checking if the specified platform exists when getting an image. [moby/moby#46495](https://github.com/moby/moby/pull/46495) - containerd image store: Fix errors when multiple `ADD` or `COPY` instructions were used with the classic builder. [moby/moby#46383](https://github.com/moby/moby/pull/46383) - containerd image store: Fix stack overflow errors when importing an image. [moby/moby#46418](https://github.com/moby/moby/pull/46418) - containerd image store: Improve `docker pull` progress output. [moby/moby#46412](https://github.com/moby/moby/pull/46412) - containerd image store: Print the tag, digest, and size after pushing an image. [moby/moby#46384](https://github.com/moby/moby/pull/46384) - containerd image store: Remove panic from `UpdateConfig`. [moby/moby#46433](https://github.com/moby/moby/pull/46433) - containerd image store: Return an error when an image tag resembles a digest. [moby/moby#46492](https://github.com/moby/moby/pull/46492) - containerd image store: `docker image ls` now shows the correct image creation time and date. [moby/moby#46719](https://github.com/moby/moby/pull/46719) - containerd image store: Fix an issue handling user namespace settings. [moby/moby#46375](https://github.com/moby/moby/pull/46375) - containerd image store: Add support for pulling all tags (`docker pull -a`). [moby/moby#46618](https://github.com/moby/moby/pull/46618) - containerd image store: Use the domain name in the image reference as the default registry authentication domain. [moby/moby#46779](https://github.com/moby/moby/pull/46779) ##### Packaging updates - Upgrade API to v1.44. [moby/moby#45468](https://github.com/moby/moby/pull/45468) - Upgrade Compose to `2.24.1`. [docker/docker-ce-packaging#980](https://github.com/docker/docker-ce-packaging/pull/980) - Upgrade containerd to v1.7.12 (static binaries only). [moby/moby#47070](https://github.com/moby/moby/pull/47070) - Upgrade Go runtime to [1.21.6](https://go.dev/doc/devel/release#go1.21.minor). [moby/moby#47053](https://github.com/moby/moby/pull/47053) - Upgrade runc to v1.1.11. [moby/moby#47007](https://github.com/moby/moby/pull/47007) - Upgrade BuildKit to v0.12.4. [moby/moby#46882](https://github.com/moby/moby/pull/46882) - Upgrade Buildx to v0.12.1. [docker/docker-ce-packaging#979](https://github.com/docker/docker-ce-packaging/pull/979) ##### Removed - API: Remove VirtualSize field for the `GET /images/json` and `GET /images/{id}/json` endpoints. [moby/moby#45469](https://github.com/moby/moby/pull/45469) - Remove deprecated `devicemapper` storage driver. [moby/moby#43637](https://github.com/moby/moby/pull/43637) - Remove deprecated orchestrator options. [docker/cli#4366](https://github.com/docker/cli/pull/4366) - Remove support for Debian Upstart init system. [moby/moby#45548](https://github.com/moby/moby/pull/45548), [moby/moby#45551](https://github.com/moby/moby/pull/45551) - Remove the `--oom-score-adjust` daemon option. [moby/moby#45484](https://github.com/moby/moby/pull/45484) - Remove warning for deprecated `~/.dockercfg` file. [docker/cli#4281](https://github.com/docker/cli/pull/4281) - Remove `logentries` logging driver. [moby/moby#46925](https://github.com/moby/moby/pull/46925) ##### Deprecated - Deprecate API versions older than 1.24. [Deprecation notice](../deprecated.md#deprecate-legacy-api-versions) - Deprecate `IsAutomated` field and `is-automated` filter for `docker search`. [Deprecation notice](../deprecated.md#isautomated-field-and-is-automated-filter-on-docker-search) - API: Deprecate `Container` and `ContainerConfig` properties for `/images/{id}/json` (`docker image inspect`). [moby/moby#46939](https://github.com/moby/moby/pull/46939) ### [`v24.0.9`](https://github.com/moby/moby/releases/tag/v24.0.9) [Compare Source](https://github.com/docker/docker/compare/v24.0.8...v24.0.9) #### 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.9) - [moby/moby, 24.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.9) #### Security This release contains security fixes for the following CVEs affecting Docker Engine and its components. | CVE | Component | Fix version | Severity | | ----------------------------------------------------------- | ------------- | ----------- | ---------------- | | [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc | 1.1.12 | High, CVSS 8.6 | | [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 24.0.9 | Medium, CVSS 6.9 | > **Important** ⚠️ > > Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit: > > - [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) > - [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) > - [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) > - [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) > > To address these vulnerabilities, upgrade to [Docker Engine v25.0.2](./25.0.md#2502). For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory: - [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ##### Packaging updates - Upgrade runc to [v1.1.12](https://github.com/opencontainers/runc/releases/tag/v1.1.12). [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade containerd to [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) ### [`v24.0.8`](https://github.com/moby/moby/releases/tag/v24.0.8) [Compare Source](https://github.com/docker/docker/compare/v24.0.7...v24.0.8) #### 24.0.8 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.8) - [moby/moby, 24.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.8) ##### Bug fixes and enhancements - Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#46857](https://github.com/moby/moby/pull/46869) ##### Packaging updates - Upgrade Go to `go1.20.13`. [moby/moby#47054](https://github.com/moby/moby/pull/47054), [docker/cli#4826](https://github.com/docker/cli/pull/4826), [docker/docker-ce-packaging#975](https://github.com/docker/docker-ce-packaging/pull/975) - Upgrade containerd (static binaries only) to [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) [moby/moby#47096](https://github.com/moby/moby/pull/47096) - Upgrade runc to v1.1.11. [moby/moby#47010](https://github.com/moby/moby/pull/47010) ### [`v24.0.7`](https://github.com/moby/moby/releases/tag/v24.0.7) [Compare Source](https://github.com/docker/docker/compare/v24.0.6...v24.0.7) #### 24.0.7 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.7) - [moby/moby, 24.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.7) ##### Bug fixes and enhancements - Write overlay2 layer metadata atomically. [moby/moby#46703](https://github.com/moby/moby/pull/46703) - Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. [moby/moby#46626](https://github.com/moby/moby/pull/46626) - Fix `dockerd-rootless-setuptools.sh` when username contains a backslash. [moby/moby#46407](https://github.com/moby/moby/pull/46407) - Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when `dockerd --bridge=none` is used. [moby/moby#46702](https://github.com/moby/moby/pull/46702) - Fix a bug where cancelling an API request could interrupt container restart. [moby/moby#46697](https://github.com/moby/moby/pull/46697) - Fix an issue where containers would fail to start when providing `--ip-range` with a range larger than the subnet. [docker/for-mac#6870](https://github.com/docker/for-mac/issues/6870) - Fix data corruption with zstd output. [moby/moby#46709](https://github.com/moby/moby/pull/46709) - Fix the conditions under which the container's MAC address is applied. [moby/moby#46478](https://github.com/moby/moby/pull/46478) - Improve the performance of the stats collector. [moby/moby#46448](https://github.com/moby/moby/pull/46448) - Fix an issue with source policy rules ending up in the wrong order. [moby/moby#46441](https://github.com/moby/moby/pull/46441) ##### Packaging updates - Add support for Fedora 39 and Ubuntu 23.10. [docker/docker-ce-packaging#940](https://github.com/docker/docker-ce-packaging/pull/940), [docker/docker-ce-packaging#955](https://github.com/docker/docker-ce-packaging/pull/955) - Fix `docker.socket` not getting disabled when uninstalling the `docker-ce` RPM package. [docker/docker-ce-packaging#852](https://github.com/docker/docker-ce-packaging/pull/852) - Upgrade Go to `go1.20.10`. [docker/docker-ce-packaging#951](https://github.com/docker/docker-ce-packaging/pull/951) - Upgrade containerd to `v1.7.6` (static binaries only). [moby/moby#46103](https://github.com/moby/moby/pull/46103) - Upgrade the `containerd.io` package to [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24). ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/c9ccbfad11a60e703e91b6cca4f48927828c7e35). ### [`v24.0.6`](https://github.com/moby/moby/releases/tag/v24.0.6) [Compare Source](https://github.com/docker/docker/compare/v24.0.5...v24.0.6) #### 24.0.6 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.6) - [moby/moby, 24.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.6) ##### Bug fixes and enhancements - containerd storage backend: Fix `docker ps` failing when a container image is no longer present in the content store. [moby/moby#46095](https://github.com/moby/moby/pull/46095) - containerd storage backend: Fix `docker ps -s -a` and `docker container prune` failing when a container image config is no longer present in the content store. [moby/moby#46097](https://github.com/moby/moby/pull/46097) - containerd storage backend: Fix `docker inspect` failing when a container image config is no longer (or was never) present in the content store. [moby/moby#46244](https://github.com/moby/moby/pull/46244) - containerd storage backend: Fix diff and export with the `overlayfs` snapshotter by using reference-counted rootfs mounts. [moby/moby#46266](https://github.com/moby/moby/pull/46266) - containerd storage backend: Fix a misleading error message when the image platforms available locally do not match the desired platform. [moby/moby#46300](https://github.com/moby/moby/pull/46300) - containerd storage backend: Fix the `FROM scratch` Dockerfile instruction with the classic builder. [moby/moby#46302](https://github.com/moby/moby/pull/46302) - containerd storage backend: Fix `mismatched image rootfs and manifest layers` errors with the classic builder. [moby/moby#46310](https://github.com/moby/moby/pull/46310) - Warn when pulling Docker Image Format v1, and Docker Image manifest version 2, schema 1 images from all registries. [moby/moby#46290](https://github.com/moby/moby/pull/46290) - Fix live-restore of volumes with custom volume options. [moby/moby#46366](https://github.com/moby/moby/pull/46366) - Fix incorrectly dropping capabilities bits when running a container as a non-root user (note: this change was already effectively present due to a regression). [moby/moby#46221](https://github.com/moby/moby/pull/46221) - Fix network isolation iptables rules preventing IPv6 Neighbor Solicitation packets from being exchanged between containers. [moby/moby#46214](https://github.com/moby/moby/pull/46214) - Fix `dockerd.exe --register-service` not working when the binary is in the current directory on Windows. [moby/moby#46215](https://github.com/moby/moby/pull/46215) - Add a hint suggesting the use of a PAT to `docker login` against Docker Hub. [docker/cli#4500](https://github.com/docker/cli/pull/4500) - Improve shell startup time for users of Bash completion for the CLI. [docker/cli#4517](https://github.com/docker/cli/pull/4517) - Improve the speed of some commands by skipping `GET /_ping` when possible. [docker/cli#4508](https://github.com/docker/cli/pull/4508) - Fix credential scopes when using a PAT to `docker manifest inspect` an image on Docker Hub. [docker/cli#4512](https://github.com/docker/cli/pull/4512) - Fix `docker events` not supporting `--format=json`. [docker/cli#4544](https://github.com/docker/cli/pull/4544) ##### Packaging updates - Upgrade Go to `go1.20.7`. [moby/moby#46140](https://github.com/moby/moby/pull/46140), [docker/cli#4476](https://github.com/docker/cli/pull/4476), [docker/docker-ce-packaging#932](https://github.com/docker/docker-ce-packaging/pull/932) - Upgrade containerd to `v1.7.3` (static binaries only). [moby/moby#46103](https://github.com/moby/moby/pull/46103) - Upgrade Compose to `v2.21.0`. [docker/docker-ce-packaging#936](https://github.com/docker/docker-ce-packaging/pull/936) ### [`v24.0.5`](https://github.com/moby/moby/releases/tag/v24.0.5) [Compare Source](https://github.com/docker/docker/compare/v24.0.4...v24.0.5) #### 24.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.5) - [moby/moby, 24.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.5) ##### Bug fixes and enhancements - The Go client now avoids using UNIX socket paths in the HTTP `Host:` header, in order to be compatible with changes introduced in `go1.20.6`. [moby/moby#45962](https://github.com/moby/moby/pull/45962), [moby/moby#45990](https://github.com/moby/moby/pull/45990) - containerd storage backend: Fix `Variant` not being included in `docker image inspect` and `GET /images/{name}/json`. [moby/moby#46025](https://github.com/moby/moby/pull/46025) - containerd storage backend: Prevent potential garbage collection of content during image export. [moby/moby#46021](https://github.com/moby/moby/pull/46021) - containerd storage backend: Prevent duplicate digest entries in `RepoDigests`. [moby/moby#46014](https://github.com/moby/moby/pull/46014) - containerd storage backend: Fix operations taking place against the incorrect tag when working with an image referenced by tag and digest. [moby/moby#46013](https://github.com/moby/moby/pull/46013) - containerd storage backend: Fix a panic caused by `EXPOSE` when building containers with the legacy builder. [moby/moby#45921](https://github.com/moby/moby/pull/45921) - Fix a regression causing unintuitive errors to be returned when attempting to create an `overlay` network on a non-Swarm node. [moby/moby#45974](https://github.com/moby/moby/pull/45974) - Properly report errors parsing volume specifications from the command line. [docker/cli#4423](https://github.com/docker/cli/pull/4423) - Fix a panic caused when `auths: null` is found in the CLI config file. [docker/cli#4450](https://github.com/docker/cli/pull/4450) ##### Packaging updates - Use init scripts as provided by moby/moby `contrib/init`. [docker/docker-ce-packaging#914](https://github.com/docker/docker-ce-packaging/pull/914), [docker/docker-ce-packaging#926](https://github.com/docker/docker-ce-packaging/pull/926) - Drop Upstart from `contrib/init`. [moby/moby#46044](https://github.com/moby/moby/pull/46044) - Upgrade Go to `go1.20.6`. [docker/cli#4428](https://github.com/docker/cli/pull/4428), [moby/moby#45970](https://github.com/moby/moby/pull/45970), [docker/docker-ce-packaging#921](https://github.com/docker/docker-ce-packaging/pull/921) - Upgrade Compose to `v2.20.2`. [docker/docker-ce-packaging#924](https://github.com/docker/docker-ce-packaging/pull/924) - Upgrade buildx to `v0.11.2`. [docker/docker-ce-packaging#922](https://github.com/docker/docker-ce-packaging/pull/922) ### [`v24.0.4`](https://github.com/moby/moby/releases/tag/v24.0.4) [Compare Source](https://github.com/docker/docker/compare/v24.0.3...v24.0.4) #### 24.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.4) - [moby/moby, 24.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.4) ##### Bug fixes and enhancements - Fix a regression introduced during 24.0.3 that causes a panic during live-restore of containers with bind mounts. [moby/moby#45903](https://github.com/moby/moby/pull/45903) ### [`v24.0.3`](https://github.com/moby/moby/releases/tag/v24.0.3) [Compare Source](https://github.com/docker/docker/compare/v24.0.2...v24.0.3) #### 24.0.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.3) - [moby/moby, 24.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.3) ##### Bug fixes and enhancements - containerd image store: Fix an issue where multi-platform images that did not include a manifest for the default platform could not be interacted with. [moby/moby#45849](https://github.com/moby/moby/pull/45849) - containerd image store: Fix specious attempts to cache `FROM scratch` in container builds. [moby/moby#45822](https://github.com/moby/moby/pull/45822) - containerd image store: Fix `docker cp` with snapshotters that cannot mount the same content multiple times. [moby/moby#45780](https://github.com/moby/moby/pull/45780), [moby/moby#45786](https://github.com/moby/moby/pull/45786) - containerd image store: Fix builds with `type=image` not being correctly unpacked/stored. [moby/moby#45692](https://github.com/moby/moby/pull/45692) - containerd image store: Fix incorrectly attempting to unpack pseudo-images (including attestations) in `docker load`. [moby/moby#45688](https://github.com/moby/moby/pull/45688) - containerd image store: Correctly set the user agent, and include additional information like the snapshotter when interacting with registries. [moby/moby#45671](https://github.com/moby/moby/pull/45671), [moby/moby#45684](https://github.com/moby/moby/pull/45684) - containerd image store: Fix a failure to unpack already-pulled content after switching between snapshotters. [moby/moby#45678](https://github.com/moby/moby/pull/45678) - containerd image store: Fix images that have been re-tagged or with all tags removed being pruned while still in use. [moby/moby#45857](https://github.com/moby/moby/pull/45857) - Fix a Swarm CSI issue where the Topology field was not propagated into NodeCSIInfo. [moby/moby#45810](https://github.com/moby/moby/pull/45810) - Fix failures to add new Swarm managers caused by a very large raft log. [moby/moby#45703](https://github.com/moby/moby/pull/45703), [moby/swarmkit#3122](https://github.com/moby/swarmkit/pull/3122), [moby/swarmkit#3128](https://github.com/moby/swarmkit/pull/3128) - `name_to_handle_at(2)` is now always allowed in the default seccomp profile. [moby/moby#45833](https://github.com/moby/moby/pull/45833) - Fix an issue that prevented encrypted Swarm overlay networks from working on ports other than the default (4789). [moby/moby#45637](https://github.com/moby/moby/pull/45637) - Fix a failure to restore mount reference-counts during live-restore. [moby/moby#45824](https://github.com/moby/moby/pull/45824) - Fix various networking-related failures during live-restore. [moby/moby#45658](https://github.com/moby/moby/pull/45658), [moby/moby#45659](https://github.com/moby/moby/pull/45659) - Fix running containers restoring with a zero (successful) exit status when the daemon is unexpectedly terminated. [moby/moby#45801](https://github.com/moby/moby/pull/45801) - Fix a potential panic while executing healthcheck probes. [moby/moby#45798](https://github.com/moby/moby/pull/45798) - Fix a panic caused by a race condition in container exec start. [moby/moby#45794](https://github.com/moby/moby/pull/45794) - Fix an exception caused by attaching a terminal to an exec with a non-existant command. [moby/moby#45643](https://github.com/moby/moby/pull/45643) - Fix `host-gateway` with BuildKit by passing the IP as a label (also requires [docker/buildx#1894](https://github.com/docker/buildx/pull/1894)). [moby/moby#45790](https://github.com/moby/moby/pull/45790) - Fix an issue where `POST /containers/{id}/stop` would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. [moby/moby#45774](https://github.com/moby/moby/pull/45774) - Fix an issue where `docker cp -a` from the root (`/`) directory would fail. [moby/moby#45748](https://github.com/moby/moby/pull/45748) - Improve compatibility with non-runc container runtimes by more correctly setting resource constraint parameters in the OCI config. [moby/moby#45746](https://github.com/moby/moby/pull/45746) - Fix an issue caused by overlapping subuid/subgid ranges in certain configurations (e.g. LDAP) in rootless mode. [moby/moby#45747](https://github.com/moby/moby/pull/45747), [rootless-containers/rootlesskit#369](https://github.com/rootless-containers/rootlesskit/pull/369) - Greatly reduce CPU and memory usage while populating the Debug section of `GET /info`. [moby/moby#45856](https://github.com/moby/moby/pull/45856) - Fix an issue where debug information was not correctly printed during `docker info` when only the client is in debug mode. [docker/cli#4393](https://github.com/docker/cli/pull/4393) - Fix issues related to hung connections when connecting to hosts over a SSH connection. [docker/cli#4395](https://github.com/docker/cli/pull/4395) ##### Packaging updates - Upgrade Go to `go1.20.5`. [moby/moby#45745](https://github.com/moby/moby/pull/45745), [docker/cli#4351](https://github.com/docker/cli/pull/4351), [docker/docker-ce-packaging#904](https://github.com/docker/docker-ce-packaging/pull/904) - Upgrade Compose to `v2.19.1`. [docker/docker-ce-packaging#916](https://github.com/docker/docker-ce-packaging/pull/916) - Upgrade buildx to `v0.11.1`. [docker/docker-ce-packaging#918](https://github.com/docker/docker-ce-packaging/pull/918) ### [`v24.0.2`](https://github.com/moby/moby/releases/tag/v24.0.2) [Compare Source](https://github.com/docker/docker/compare/v24.0.1...v24.0.2) #### 24.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.2) - [moby/moby, 24.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.2) ##### Bug fixes and enhancements - Fix a panic during build when referencing locally tagged images. [moby/buildkit#3899](https://github.com/moby/buildkit/pull/3899), [moby/moby#45582](https://github.com/moby/moby/pull/45582) - Fix builds potentially failing with `exit code: 4294967295` when performing many concurrent build stages. [moby/moby#45620](https://github.com/moby/moby/pull/45620) - Fix DNS resolution on Windows ignoring `etc/hosts` (`%WINDIR%\System32\Drivers\etc\hosts`), including resolution of `localhost`. [moby/moby#45562](https://github.com/moby/moby/pull/45562) - Apply a workaround for a containerd bug that causes concurrent `docker exec` commands to take significantly longer than expected. [moby/moby#45625](https://github.com/moby/moby/pull/45625) - containerd image store: Fix an issue where the image `Created` field would contain an incorrect value. [moby/moby#45623](https://github.com/moby/moby/pull/45623) - containerd image store: Adjust the output of image pull progress so that the output has the same format regardless of whether the containerd image store is enabled. [moby/moby#45602](https://github.com/moby/moby/pull/45602) - containerd image store: Switching between the default and containerd image store now requires a daemon restart. [moby/moby#45616](https://github.com/moby/moby/pull/45616) ### [`v24.0.1`](https://github.com/moby/moby/releases/tag/v24.0.1) [Compare Source](https://github.com/docker/docker/compare/v24.0.0...v24.0.1) #### 24.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.1) - [moby/moby, 24.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.1) ##### Removed - Remove CLI completions for storage drivers removed in the 24.0 major release. [docker/cli#4302](https://github.com/docker/cli/pull/4302) ##### Bug fixes and enhancements - Fix an issue where DNS query NXDOMAIN replies from external servers were forwarded to the client as SERVFAIL. [moby/moby#45573](https://github.com/moby/moby/pull/45573) - Fix an issue where `docker pull --platform` would report `No such image` regarding another tag pointing to the same image. [moby/moby#45562](https://github.com/moby/moby/pull/45562) - Fix an issue where insecure registry configuration would be forgotten during config reload. [moby/moby#45571](https://github.com/moby/moby/pull/45571) - containerd image store: Fix an issue where images which have no layers would not be listed in `docker images -a` [moby/moby#45588](https://github.com/moby/moby/pull/45588) - API: Fix an issue where `GET /images/{id}/json` would return `null` instead of empty `RepoTags` and `RepoDigests`. [moby/moby#45564](https://github.com/moby/moby/pull/45564) - API: Fix an issue where `POST /commit` did not accept an empty request body. [moby/moby#45568](https://github.com/moby/moby/pull/45568) ##### Packaging updates - Upgrade Compose to `v2.18.1`. [docker/docker-ce-packaging#896](hhttps://github.com/docker/docker-ce-packaging/pull/896) ### [`v24.0.0`](https://github.com/moby/moby/releases/tag/v24.0.0) [Compare Source](https://github.com/docker/docker/compare/v23.0.10...v24.0.0) #### 24.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.0) - [moby/moby, 24.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.0) ##### New - Introduce experimental support for containerd as the content store (replacing the existing storage drivers). [moby/moby#43735](https://github.com/moby/moby/pull/43735), [other moby/moby pull requests](https://github.com/moby/moby/pulls?q=is%3Apr+is%3Amerged+milestone%3A24.0.0+-label%3Aprocess%2Fcherry-picked+label%3Acontainerd-integration+) - The `--host` CLI flag now supports a path component in a `ssh://` host address, allowing use of an alternate socket path without configuration on the remote host. [docker/cli#4073](https://github.com/docker/cli/pull/4073) - The `docker info` CLI command now reports a version and platform field. [docker/cli#4180](https://github.com/docker/cli/pull/4180) - Introduce the daemon flag `--default-network-opt` to configure options for newly created networks. [moby/moby#43197](https://github.com/moby/moby/pull/43197) - Restrict access to `AF_VSOCK` in the `socket(2)` family of syscalls in the default seccomp profile. [moby/moby#44562](https://github.com/moby/moby/pull/44562) - Introduce support for setting OCI runtime annotations on containers. [docker/cli#45025](https://github.com/docker/cli/pull/4156), [moby/moby#45025](https://github.com/moby/moby/pull/45025) - Alternative runtimes can now be configured in `daemon.json`, enabling runtime names to be aliased and options to be passed. [moby/moby#45032](https://github.com/moby/moby/pull/45032) - The `docker-init` binary will now be discovered in FHS-compliant libexec directories, in addition to the `PATH`. [moby/moby#45198](https://github.com/moby/moby/pull/45198) - API: Surface the daemon-level `--no-new-privileges` in `GET /info`. [moby/moby#45320](https://github.com/moby/moby/pull/45320) ##### Removed - `docker info` no longer reports `IndexServiceAddress`. [docker/cli#4204](https://github.com/docker/cli/pull/4204) - libnetwork: Remove fallback code for obsolete kernel versions. [moby/moby#44684](https://github.com/moby/moby/pull/44684), [moby/moby#44802](https://github.com/moby/moby/pull/44802) - libnetwork: Remove unused code related to classic Swarm. [moby/moby#44965](https://github.com/moby/moby/pull/44965) - libnetwork: Remove usage of the `xt_u32` kernel module from encrypted Swarm overlay networks. [moby/moby#45281](https://github.com/moby/moby/pull/45281) - Remove support for buildkit's deprecated `buildinfo` in favor of standard provenance attestations. [moby/moby#45097](https://github.com/moby/moby/pull/45097) - Remove the deprecated AUFS and legacy `overlay` storage drivers. [moby/moby#45342](https://github.com/moby/moby/pull/45342), [moby/moby#45359](https://github.com/moby/moby/pull/45359) - Remove the deprecated `overlay2.override_kernel_check` storage driver option. [moby/moby#45368](https://github.com/moby/moby/pull/45368) - Remove workarounds for obsolete versions of `apparmor_parser` from the AppArmor profiles. [moby/moby#45500](https://github.com/moby/moby/pull/45500) - API: `GET /images/json` no longer represents empty RepoTags and RepoDigests as`<none>:<none>`/`<none>@<none>`. Empty arrays are be returned instead on API >= 1.43. [moby/moby#45068](https://github.com/moby/moby/pull/45068) ##### Deprecated - Deprecate the `--oom-score-adjust` daemon option. [moby/moby#45315](https://github.com/moby/moby/pull/45315) - API: Deprecate the `VirtualSize` field in `GET /images/json` and `GET /images/{id}/json`. [moby/moby#45346](https://github.com/moby/moby/pull/45346) ##### Bug fixes and enhancements - The `docker stack` command no longer validates the `build` section of Compose files. [docker/cli#4214](https://github.com/docker/cli/pull/4214) - Fix lingering healthcheck processes after timeout is reached. [moby/moby#43739](https://github.com/moby/moby/pull/43739) - Reduce the overhead of container startup when using the `overlay2` storage driver. [moby/moby#44285](https://github.com/moby/moby/pull/44285) - API: Handle multiple `before=` and `since=` filters in `GET /images`. [moby/moby#44503](https://github.com/moby/moby/pull/44503) - Fix numerous bugs in the embedded DNS resolver implementation used by user-defined networks. [moby/moby#44664](https://github.com/moby/moby/pull/44664) - Add `execDuration` field to the map of event attributes. [moby/moby#45494](https://github.com/moby/moby/pull/45494) - Swarm-level networks can now be created with the Windows `internal`, `l2bridge`, and `nat` drivers. [moby/swarmkit#3121](https://github.com/moby/swarmkit/pull/3121), [moby/moby#45291](https://github.com/moby/moby/pull/45291) ##### Packaging updates - Update Go to `1.20.4`. [docker/cli#4253](https://github.com/docker/cli/pull/4253), [moby/moby#45456](https://github.com/moby/moby/pull/45456) - Update `containerd` to [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1). [moby/moby#45537](https://github.com/moby/moby/pull/45537) - Update `buildkit` to [`v0.11.6`](https://github.com/moby/buildkit/releases/v0.11.6). [moby/moby#45367](https://github.com/moby/moby/pull/45367) ### [`v23.0.10`](https://github.com/moby/moby/releases/tag/v23.0.10) [Compare Source](https://github.com/docker/docker/compare/v23.0.9...v23.0.10) #### 23.0.10 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.10 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.10) - [moby/moby, 23.0.10 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.10) ### [`v23.0.9`](https://github.com/moby/moby/releases/tag/v23.0.9) [Compare Source](https://github.com/docker/docker/compare/v23.0.8...v23.0.9) #### 23.0.9 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.9) - [moby/moby, 23.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.9) ### [`v23.0.8`](https://github.com/moby/moby/releases/tag/v23.0.8) [Compare Source](https://github.com/docker/docker/compare/v23.0.7...v23.0.8) #### 23.0.8 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.8) - [moby/moby, 23.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.8) ##### Bug Fixes and Enhancements - Make one-shot stats faster. https://github.com/moby/moby/pull/46617 - Fix "Rootful-in-Rootless" Docker-in-Docker on systemd >= 250. https://github.com/moby/moby/pull/46627 - Add `IP_NF_MANGLE` to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46675 - Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46704 - Update github.com/klauspost/compress to v1.17.2 to fix data corruption with zstd output in "best". https://github.com/moby/moby/pull/46710 ##### Packaging Updates - Update Go to 1.20.10. https://github.com/moby/moby/pull/46625 - Update golang.org/x/net to v0.17.0. https://github.com/moby/moby/pull/46691 ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/48ebe353e49a9def5e6679f6e386b0efb1c95f0e). ### [`v23.0.7`](https://github.com/moby/moby/releases/tag/v23.0.7) [Compare Source](https://github.com/docker/docker/compare/v23.0.6...v23.0.7) #### 23.0.7 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.7) - [moby/moby, 23.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.7) ##### Bug Fixes and Enhancements - Fix reloading the `insecure-registries` daemon configuration. https://github.com/moby/moby/pull/45572 - Allow empty body for `POST /commit` again. https://github.com/moby/moby/pull/45569 - Fix an issue which prevented encrypted overlay networks from functioning when the Swarm data path port is not set to 4789. https://github.com/moby/moby/pull/45638 - Fix an issue with graceful container shutdown. https://github.com/moby/moby/pull/45775 - Fix host-gateway support in `docker build`. https://github.com/moby/moby/pull/45791 - Fix missing Topology in Swarm cluster volume `NodeCSIInfo`. https://github.com/moby/moby/pull/45809 - seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45834 - Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45825 - client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45971 - Fix an issue which prevented process capabilities from being retained when starting a container as a non-root user with `--security-opt=no-new-privileges`. https://github.com/moby/moby/pull/46222 - Fixed a bug which caused named volumes that set custom `device` or `type` volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367 - windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46216 - Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46408 ##### Packaging Updates - Update Go to 1.20.7. https://github.com/moby/moby/pull/46141 - Update containerd to v1.6.22. https://github.com/moby/moby/pull/46104 - Update runc to v1.1.9. https://github.com/moby/moby/pull/46229 - Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46046 ### [`v23.0.6`](https://github.com/moby/moby/releases/tag/v23.0.6) [Compare Source](https://github.com/docker/docker/compare/v23.0.5...v23.0.6) #### 23.0.6 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.6) - [moby/moby, 23.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.6) ##### Bug fixes and enhancements - Fix vfs storage driver not working on NFS. [moby/moby#45465](https://github.com/moby/moby/pull/45465) ##### Packaging Updates - Upgrade Go to `1.19.9`. [docker/docker-ce-packaging#889](https://github.com/docker/docker-ce-packaging/pull/889), [docker/cli#4254](https://github.com/docker/cli/pull/4254), [moby/moby#45455](https://github.com/moby/moby/pull/45455) - Upgrade `containerd` to [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21) - Upgrade `runc` to [v1.1.7](https://github.com/opencontainers/runc/releases/tag/v1.1.7) ### [`v23.0.5`](https://github.com/moby/moby/releases/tag/v23.0.5) [Compare Source](https://github.com/docker/docker/compare/v23.0.4...v23.0.5) #### 23.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.5 milestone](https://github.com/docker/cli/milestone/79?closed=1) - [moby/moby, 23.0.5 milestone](https://github.com/moby/moby/milestone/118?closed=1) ##### Bug fixes and enhancements - Add the `--all` / `-a` option when pruning volumes. [docker/cli#4229](https://github.com/docker/cli/pull/4229) - Add `--format=json` for `docker info`. [docker/cli#4320](https://github.com/docker/cli/pull/4230) - Fix log loss with the AWSLogs log driver. [moby/moby#45350](https://github.com/moby/moby/pull/45350) - Fix a regression introduced in v23.0.4 where dockerd would refuse to start if the fixed-cidr config parameter is provided but not bip. [moby/moby#45403](https://github.com/moby/moby/pull/45403) - Fix a panic in libnetwork during daemon start [moby/moby#45376](https://github.com/moby/moby/pull/45376) - Fix "tag" event not being sent when an image is built with `buildx`. [moby/moby#45410](https://github.com/moby/moby/pull/45410) ##### Packaging Updates - Upgrade Compose to `2.17.3`. [docker/docker-ce-packaging#883](https://github.com/docker/docker-ce-packaging/pull/883) ### [`v23.0.4`](https://github.com/moby/moby/releases/tag/v23.0.4) [Compare Source](https://github.com/docker/docker/compare/v23.0.3...v23.0.4) #### 23.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.4 milestone](https://github.com/docker/cli/milestone/77?closed=1) - [moby/moby, 23.0.4 milestone](https://github.com/moby/moby/milestone/117?closed=1) ##### Bug fixes and enhancements - Fix a performance regression in Docker CLI 23.0.0 [docker/cli#4141](https://github.com/docker/cli/pull/4141). - Fix progress indicator on `docker cp` not functioning as intended [docker/cli#4157](https://github.com/docker/cli/pull/4157). - Fix shell completion for `docker compose --file` [docker/cli#4177](https://github.com/docker/cli/pull/4177). - Fix an error caused by incorrect handling of "default-address-pools" in `daemon.json` [moby/moby#45246](https://github.com/moby/moby/pull/45246). ##### Packaging Updates - Fix missing packages for CentOS 9 Stream. - Upgrade Go to `1.19.8`. [docker/docker-ce-packaging#878](https://github.com/docker/docker-ce-packaging/pull/878), [docker/cli#4164](https://github.com/docker/cli/pull/4164), [moby/moby#45277](https://github.com/moby/moby/pull/45277), which contains fixes for [CVE-2023-24537](https://github.com/advisories/GHSA-fp86-2355-v99r), [CVE-2023-24538](https://github.com/advisories/GHSA-v4m2-x4rp-hv22), [CVE-2023-24534](https://github.com/advisories/GHSA-8v5j-pwr7-w5f8), and [CVE-2023-24536](https://github.com/advisories/GHSA-9f7g-gqwh-jpf5) ### [`v23.0.3`](https://github.com/moby/moby/releases/tag/v23.0.3) [Compare Source](https://github.com/docker/docker/compare/v23.0.2...v23.0.3) #### 23.0.3 > **Note** > > Due to an issue with CentOS 9 Stream's package repositories, packages for > CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later, > or as part of the next (23.0.4) patch release. ##### Bug fixes and enhancements - Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). - A lack of kernel support for encrypted overlay networks now reports as an error. - Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach. - Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the `xt_bpf` kernel module. - Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw) to ensure that unintentional exposure has not occurred. ##### Packaging Updates - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20). - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5). ### [`v23.0.2`](https://github.com/moby/moby/releases/tag/v23.0.2) [Compare Source](https://github.com/docker/docker/compare/v23.0.1...v23.0.2) #### 23.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.2 milestone](https://github.com/docker/cli/milestone/75?closed=1) - [moby/moby, 23.0.2 milestone](https://github.com/moby/moby/milestone/114?closed=1) ##### Bug fixes and enhancements - Fully resolve missing checks for `apparmor_parser` when an AppArmor enabled kernel is detected. [containerd/containerd#8087](https://github.com/containerd/containerd/pull/8087), [moby/moby#45043](https://github.com/moby/moby/pull/45043) - Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes [CVE-2023-26054](https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc). [moby/moby#45110](https://github.com/moby/moby/pull/45110) - Fix anonymous volumes created by a `VOLUME` line in a Dockerfile being excluded from volume prune. [moby/moby#45159](https://github.com/moby/moby/pull/45159) - Fix a failure to properly propagate errors during removal of volumes on a Swarm node. [moby/moby#45155](https://github.com/moby/moby/pull/45155) - Temporarily work around a bug in BuildKit `COPY --link` by disabling mergeop/diffop optimization. [moby/moby#45112](https://github.com/moby/moby/pull/45112) - Properly clean up child tasks when a parent Swarm job is removed. [moby/swarmkit#3112](https://github.com/moby/swarmkit/pull/3112), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. [moby/swarmkit#3082](https://github.com/moby/swarmkit/pull/3082), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. [moby/swarmkit#3116](https://github.com/moby/swarmkit/pull/3116), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix a panic caused by log buffering in some configurations. [containerd/fifo#47](https://github.com/containerd/fifo/pull/47), [moby/moby#45051](https://github.com/moby/moby/pull/45051) - Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. [moby/moby#45016](https://github.com/moby/moby/pull/45016) - Fix a DNS resolution issue affecting containers created with `--dns-opt` or `--dns-search` when `systemd-resolved` is used outside the container. [moby/moby#45000](https://github.com/moby/moby/pull/45000) - Fix a panic when logging errors in handling DNS queries originating from inside a container. [moby/moby#44980](https://github.com/moby/moby/pull/44980) - Improve the speed of `docker ps` by allowing users to opt out of size calculations with `--size=false`. [docker/cli#4107](https://github.com/docker/cli/pull/4107) - Extend support for Bash completion to all plugins. [docker/cli#4092](https://github.com/docker/cli/pull/4092) - Fix `docker stack deploy` failing on Windows when special environment variables set by `cmd.exe` are present. [docker/cli#4083](https://github.com/docker/cli/pull/4083) - Add forward compatibility for future API versions by considering empty image tags to be the same as `<none>`. [docker/cli#4065](https://github.com/docker/cli/pull/4065) - Atomically write context files to greatly reduce the probability of corruption, and improve the error message for a corrupt context. [docker/cli#4063](https://github.com/docker/cli/pull/4063) ##### Packaging - Upgrade Go to `1.19.7`. [docker/docker-ce-packaging#857](https://github.com/docker/docker-ce-packaging/pull/857), [docker/cli#4086](https://github.com/docker/cli/pull/4086), [moby/moby#45137](https://github.com/moby/moby/pull/45137) - Upgrade `containerd` to `v1.6.19`. [moby/moby#45084](https://github.com/moby/moby/pull/45084), [moby/moby#45099](https://github.com/moby/moby/pull/45099) - Upgrade Buildx to `v0.10.4`. [docker/docker-ce-packaging#855](https://github.com/docker/docker-ce-packaging/pull/855) - Upgrade Compose to `v2.17.2`. [docker/docker-ce-packaging#867](hhttps://github.com/docker/docker-ce-packaging/pull/867) ### [`v23.0.1`](https://github.com/moby/moby/releases/tag/v23.0.1) [Compare Source](https://github.com/docker/docker/compare/v23.0.0...v23.0.1) #### 23.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.1 milestone](https://github.com/docker/cli/milestone/73?closed=1) - [moby/moby, 23.0.1 milestone](https://github.com/moby/moby/milestone/113?closed=1) ##### Bug fixes and enhancements - Fix containers not starting if the kernel has AppArmor enabled, but `apparmor_parser` is not available. [moby/moby#44942](https://github.com/moby/moby/pull/44942) - Fix BuildKit-enabled builds with inline caching causing the daemon to crash. [moby/moby#44944](https://github.com/moby/moby/pull/44944) - Fix BuildKit improperly loading cached layers created by previous versions. [moby/moby#44959](https://github.com/moby/moby/pull/44959) - Fix an issue where `ipvlan` networks created prior to upgrading would prevent the daemon from starting. [moby/moby#44937](https://github.com/moby/moby/pull/44937) - Fix the `overlay2` storage driver failing early in `metacopy` testing when initialized on an unsupported backing filesystem. [moby/moby#44922](https://github.com/moby/moby/pull/44922) - Fix `exec` exit events being misinterpreted as container exits under some runtimes, such as Kata Containers. [moby/moby#44892](https://github.com/moby/moby/pull/44892) - Improve the error message returned by the CLI when recieving a truncated JSON response caused by the API hanging up mid-request. [docker/cli#4004](https://github.com/docker/cli/pull/4004) - Fix an incorrect CLI exit code when attempting to execute a directory with a `runc` compiled using Go 1.20. [docker/cli#4004](https://github.com/docker/cli/pull/4004) - Fix mishandling the size argument to `--device-write-bps` as a path. [docker/cli#4004](https://github.com/docker/cli/pull/4004) ##### Packaging - Add `/etc/docker` to RPM and DEB packaging. [docker/docker-ce-packaging#842](https://github.com/docker/docker-ce-packaging/pull/842) - Not all use cases will benefit; if you depend on this, you should explicitly `mkdir -p /etc/docker`. - Upgrade Compose to `v2.16.0`. [docker/docker-ce-packaging#844](https://github.com/docker/docker-ce-packaging/pull/844) ### [`v23.0.0`](https://github.com/moby/moby/releases/tag/v23.0.0) [Compare Source](https://github.com/docker/docker/compare/v20.10.27...v23.0.0) #### 23.0.0 For more information about: - Deprecated and removed features, see [Deprecated Engine Features](https://github.com/docker/cli/blob/v23.0.0/docs/deprecated.md). - Changes to the Engine API, see [Engine API version history](https://github.com/moby/moby/blob/v23.0.0/docs/api/version-history.md). For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.0 milestone](https://github.com/docker/cli/milestone/51?closed=1) - [moby/moby, 23.0.0 milestone](https://github.com/moby/moby/milestone/91?closed=1) ##### New - Set Buildx and BuildKit as the default builder on Linux. [moby/moby#43992](https://github.com/moby/moby/pull/43992) - Alias `docker build` to `docker buildx build`. [docker/cli#3314](https://github.com/docker/cli/pull/3314) - The legacy builder can still be used by explicitly setting `DOCKER_BUILDKIT=0`. - There are differences in how BuildKit and the legacy builder handle multi-stage builds. For more information, see [Multi-stage builds](../../build/building/multi-stage.md#differences-between-legacy-builder-and-buildkit). - Add support for pulling `zstd` compressed layers. [moby/moby#41759](https://github.com/moby/moby/pull/41759), [moby/moby#42862](https://github.com/moby/moby/pull/42862) - Add support for alternate OCI runtimes on Linux, compatible with the containerd runtime v2 API. [moby/moby#43887](https://github.com/moby/moby/pull/43887), [moby/moby#43993](https://github.com/moby/moby/pull/43993) - Add support for the containerd `runhcs` shim on Windows (off by default). [moby/moby#42089](https://github.com/moby/moby/pull/42089) - Add `dockerd --validate` to check the daemon JSON config and exit. [moby/moby#42393](https://github.com/moby/moby/pull/42393) - Add the ability to configure the daemon's HTTP proxy via flags or JSON config. [moby/moby#42835](https://github.com/moby/moby/pull/42835) - Add support for RFC 3021 point-to-point networks (IPv4 /31s) and single hosts (IPv4 /32s). For networks with two or fewer addresses, IPAM won't reserve a network and broadcast address. [moby/moby#42626](https://github.com/moby/moby/pull/42626) - Add support for setting `ipvlan_flag` and using the `l3s` `ipvlan_mode` in the `ipvlan` network driver. [moby/moby#42542](https://github.com/moby/moby/pull/42542) - Add support for displaying the value of the `metacopy` option for the `overlay2` storage driver. [moby/moby#43557](https://github.com/moby/moby/pull/43557) - Add support for describing Windows devices using the syntax `IDType://ID`. [moby/moby#43368](https://github.com/moby/moby/pull/43368) - Add `RootlessKit`, `slirp4netns`, and `VPNKit` version reporting. [moby/moby#42330](https://github.com/moby/moby/pull/42330) - Add experimental support for SwarmKit cluster volumes (CSI). [moby/moby#41982](https://github.com/moby/moby/pull/41982) - CLI: Add cluster volume (CSI) options to `docker volume`. [docker/cli#3606](https://github.com/docker/cli/pull/3606) - CLI: Add cluster volume (CSI) support to `docker stack`. [docker/cli#3662](https://github.com/docker/cli/pull/3662) - Add support for SwarmKit jobs in `docker stack deploy`. [docker/cli#2907](https://github.com/docker/cli/pull/2907) - Add the `docker stack config` command to output the merged and interpolated config files as utilized by `stack deploy`. [docker/cli#3544](https://github.com/docker/cli/pull/3544) - Add a new `docker context show` command that prints the name of the current context. [docker/cli#3567](https://github.com/docker/cli/pull/3567) - Add the `--format=json` shorthand variant of `--format="{{ json . }}"` to all commands supporting the `--format` flag. [docker/cli#2936](https://github.com/docker/cli/pull/2936) - Add a `--quiet` option to `docker create` and `docker run` commands to suppress output when pulling an image. [docker/cli#3377](https://github.com/docker/cli/pull/3377) - Add a `--force` option to `docker network rm` subcommand. Causes CLI to return a 0 exit code even if the network doesn't exist. Has no effect on the server-side procedure for removing a network. [docker/cli#3547](https://github.com/docker/cli/pull/3547) - Add a `--signal` option to `docker stop` and `docker restart`. [docker/cli#3614](https://github.com/docker/cli/pull/3614) - Add a `-v/--version` flag to `docker-proxy`. [moby/moby#44703](https://github.com/moby/moby/pull/44703) - Plugins are now discovered in well-known user-level paths when the daemon is running in rootless mode. [moby/moby#44778](https://github.com/moby/moby/pull/44778) - The daemon now handles common alternate JSON encodings in the JSON configuration file gracefully, and reports useful errors. [moby/moby#44777](https://github.com/moby/moby/pull/44777), [moby/moby#44832](https://github.com/moby/moby/pull/44832) - UTF-8 with a byte order mark is accepted. - UTF-16 with a byte order mark is accepted. - Invalid UTF-8 is reported early and with a comprehensible error message. - Allow use of `STOPSIGNAL` via `docker commit`. [moby/moby#43369](https://github.com/moby/moby/pull/43369) - Add a new option to the `awslogs` log driver to allow skipping log stream creation in CloudWatch. [moby/moby#42132](https://github.com/moby/moby/pull/42132) - Add a new option to the `awslogs` log driver to specify the log format that's sent to CloudWatch. [moby/moby#42838](https://github.com/moby/moby/pull/42838) - Add a new option to the `fluentd` log driver to set the reconnection interval. [moby/moby#43100](https://github.com/moby/moby/pull/43100) - Add new options-setters to the Go API client: `WithTLSClientConfigFromEnv()`, `WithHostFromEnv()`, and `WithVersionFromEnv()`. [moby/moby#42224](https://github.com/moby/moby/pull/42224) - Add generation of shell command completion through a `docker completion` subcommand. [docker/cli#3429](https://github.com/docker/cli/pull/3429) - API: Add a `Swarm` header to `GET /_ping` and `HEAD /_ping`, allowing single-request detection of Swarm support. [moby/moby#42064](https://github.com/moby/moby/pull/42064) - API: Add a `signal` parameter to `POST /containers/{id}/stop` and `POST /containers/{id}/restart` to set the signal used. [moby/moby#43206](https://github.com/moby/moby/pull/43206) - API: Add a `CreateMountPoint` parameter to `POST /containers/create`. [moby/moby#43484](https://github.com/moby/moby/pull/43484) - API: Add a `shared-size` parameter to `GET /images/json` to enable shared-size computation of images. [moby/moby#42531](https://github.com/moby/moby/pull/42531) - API: Add a `type` parameter to `GET /system/df`, to control what object types to are considered when computing disk usage. [moby/moby#42559](https://github.com/moby/moby/pull/42559) - systemd: Start `docker.service` after `time-set.target`. [moby/moby#43107](https://github.com/moby/moby/pull/43107) ##### Removed - Remove support for reading configuration from `~/.dockercfg`. [docker/cli#2504](https://github.com/docker/cli/pull/2504) - This location has been deprecated since 1.7.0. - [Deprecation notice](../deprecated.md#support-for-legacy-dockercfg-configuration-files) - Remove the `-g` and `--graph` daemon options in favor of `--data-root`. [docker/cli#3739](https://github.com/docker/cli/pull/3739) - These options have been hidden and deprecated since 17.05. - [Deprecation notice](../deprecated.md#-g-and---graph-flags-on-dockerd) - Remove client-side sorting of results, in favor of the order in which the search API returns. [docker/cli#3470](https://github.com/docker/cli/pull/3470) - Remove warnings related to deprecated storage drivers from the CLI. Warnings are now handled by the daemon instead. [docker/cli#3542](https://github.com/docker/cli/pull/3542) - Remove `Experimental` client field from `docker version`. [docker/cli#3543](https://github.com/docker/cli/pull/3543) - [Deprecation notice](../deprecated.md#configuration-options-for-experimental-cli-features) - Require explicit opt-in to use deprecated storage drivers, and don't automatically select them when upgrading. [moby/moby#43378](https://github.com/moby/moby/pull/43378) - Remove deprecated support for `overlay` and `overlay2` storage drivers on backing filesystems without `d_type` support. [moby/moby#43472](https://github.com/moby/moby/pull/43472) - [Deprecation notice](../deprecated.md#backing-filesystem-without-d_type-support-for-overlayoverlay2) - Remove the deprecated `overrideKernelCheck` option from the `overlay2` storage driver. [moby/moby#44279](https://github.com/moby/moby/pull/44279) [Deprecation notice](../deprecated.md#support-for-the-overlay2override_kernel_check-storage-option) - Remove support for the deprecated `io.containerd.runtime.v1.linux` OCI runtime. [moby/moby#43695](https://github.com/moby/moby/pull/43695) - Remove LCOW (Linux Containers on Windows). [moby/moby#42451](https://github.com/moby/moby/pull/42451), [moby/moby#42499](https://github.com/moby/moby/pull/42499), [moby/moby#42506](https://github.com/moby/moby/pull/42506), [moby/moby#42511](https://github.com/moby/moby/pull/42511), [moby/moby#42520](https://github.com/moby/moby/pull/42520), [moby/moby#42683](https://github.com/moby/moby/pull/42683), [moby/moby#42684](https://github.com/moby/moby/pull/42684), [moby/moby#42685](https://github.com/moby/moby/pull/42685), [moby/moby#43187](https://github.com/moby/moby/pull/43187) - LCOW was introduced as a technical preview in 17.09 and deprecated in 20.10. - [Deprecation notice](../deprecated.md#linux-containers-on-windows-lcow-experimental) - Remove daemon options related to legacy overlay networks used with standalone Swarm. - Remove `--cluster-xx` options from `dockerd`. [moby/moby#40383](https://github.com/moby/moby/issues/40383) - Remove `host-discovery` and overlay networks with external k/v stores. [moby/moby#42247](https://github.com/moby/moby/pull/42247) - [Deprecation notice](../deprecated.md#classic-swarm-and-overlay-networks-using-cluster-store) - Remove a deprecated `arm` platform fallback. `--platform linux/arm/vY` will now return a error when `arm/vY` isn't available instead of pulling the wrong image. [moby/moby#44414](https://github.com/moby/moby/pull/44414) - Remove the deprecated `SetCustomHTTPHeaders()`, `CustomHTTPHeaders()` options-setters from the Go client API. [moby/moby#42694](https://github.com/moby/moby/pull/42694) - Remove the deprecated `WithDialer()` option-setter from the Go client API. [moby/moby#44022](https://github.com/moby/moby/pull/44022) - Use `WithDialContext()` instead. - Remove the daemon implementation of `opts.QuotedString`. The implementation has moved to the CLI. [moby/moby#43250](https://github.com/moby/moby/pull/43250) - Remove separate daemon ID from trust-key in the daemon, and disable generating the trust-key. [moby/moby#43555](https://github.com/moby/moby/pull/43555) - API: Remove the deprecated `KernelMemory` option from `POST /containers/create` on API version >= 1.42. [moby/moby#43214](https://github.com/moby/moby/pull/43214) - [Deprecation notice](../deprecated.md#kernel-memory-limit) ##### Deprecated - Require Windows Server RS5 / LTSC 2019 (build 17763) as the minimum to run the daemon. [moby/moby#43254](https://github.com/moby/moby/pull/43254) - Deprecate `BuilderSize` in API versions >= 1.42 [moby/moby#42608](https://github.com/moby/moby/pull/42608) - Deprecate `BuildCache.Parent` in favor of the newly introduced `BuildCache.Parents` in API version >= 1.42. [moby/moby#43908](https://github.com/moby/moby/pull/43908) - Deprecate `pkg/urlutil`, moving the implementation to `builder/remotecontext/urlutil`. [moby/moby#43477](https://github.com/moby/moby/pull/43477) ##### Upgrades - Upgrade Go to `1.19.5`. [docker/cli#3958](https://github.com/docker/cli/pull/3958), [moby/moby#44794](https://github.com/moby/moby/pull/44794) - Upgrade `rootlesskit` to `v0.14.4`. [moby/moby#42708](https://github.com/moby/moby/pull/42708) - Upgrade `buildkit` to `v0.10.6`. [moby/moby#43239](https://github.com/moby/moby/pull/43239) - Upgrade `buildx` to `v0.10.2`. [docker/docker-ce-packaging#840](https://github.com/docker/docker-ce-packaging/pull/840) - Upgrade `swarmkit` to `v2.0.0-20230119195359-904c221ac281`. [moby/moby#44858](https://github.com/moby/moby/pull/44858) - Upgrade `containerd` to `v1.6.16`. [moby/moby#44766](https://github.com/moby/moby/pull/44766), [moby/moby#44769](https://github.com/moby/moby/pull/44769), [moby/moby#44881](https://github.com/moby/moby/pull/44881) - Upgrade `runc` to `v1.1.4`. [moby/moby#44039](https://github.com/moby/moby/pull/44039) - Upgrade `hcsshim` `v0.9.6`. [moby/moby#44658](https://github.com/moby/moby/pull/44658) - The `btrfs` storage driver now depends on Linux kernel headers (>= 4.12) instead of headers from btrfs-progs. [moby/moby#44776](https://github.com/moby/moby/pull/44776) ##### Security - Change permissions on container `hostconfig.json` files to `0600` (was `0644`). [moby/moby#41620](https://github.com/moby/moby/pull/41620) - Fix `--seccomp-profile` not accepting `unconfined` and renamed the default seccomp profile to `builtin`. [moby/moby#42481](https://github.com/moby/moby/pull/42481) - Always build with seccomp support, and remove the `seccomp` build tag. [moby/moby#42501](https://github.com/moby/moby/pull/42501) - Add seccomp support on `riscv64`. [moby/moby#43553](https://github.com/moby/moby/pull/43553) - Add support for setting flags passed to `seccomp(2)` in seccomp profiles. [moby/moby#42648](https://github.com/moby/moby/pull/42648) - Refactor seccomp types to reuse runtime-spec, and add support for `ErrnoRet`. [moby/moby#42005](https://github.com/moby/moby/pull/42005) - Add support for `DefaultErrnoRet` in `seccomp` profiles. [moby/moby#42604](https://github.com/moby/moby/pull/42604) - Add an explicit `DefaultErrnoRet` field to the default seccomp profile, with no behavior change. [moby/moby#42649](https://github.com/moby/moby/pull/42649) - Block `socket` with `AF_VSOCK` in the default seccomp profile. [moby/moby#44563](https://github.com/moby/moby/pull/44563) - Re-enable `process_vm_readv` and `process_vm_writev` in the default seccomp profile. [moby/moby#42083](https://github.com/moby/moby/pull/42083) - Add syscalls related to PKU to the default seccomp profile. [moby/moby#43812](https://github.com/moby/moby/pull/43812) - Allow `clock_settime64` with `CAP_SYS_TIME`. [moby/moby#43775](https://github.com/moby/moby/pull/43775) - Allow `bpf` with `CAP_BPF` and `perf_event_open` with `CAP_PERFMON`. [moby/moby#43988](https://github.com/moby/moby/pull/43988) - Explicitly set the `clone3` syscall to return `ENOSYS` in the default seccomp profile, in order to ensure `glibc` will correctly fallback to using `clone`. [moby/moby#42681](https://github.com/moby/moby/pull/42681) ##### Bug fixes and enhancements - Promote `overlay2` to be the default storage driver (`btrfs` and `zfs` are now opt-in). [moby/moby#42661](https://github.com/moby/moby/pull/42661) - Add a loading spinner to the `docker cp` command. [docker/cli#2708](https://github.com/docker/cli/pull/2708) - Deprecate the `ElectAuthServer` function, and made it return the default registry without calling the `GET /info` API endpoint. [docker/cli#2819](https://github.com/docker/cli/pull/2819) - Progress bars are no longer reversed when rolling back Swarm services [docker/cli#2940](https://github.com/docker/cli/pull/2940) - Use `net.JoinHostPort()` to fix formatting with IPv6 addresses [docker/cli#2972](https://github.com/docker/cli/pull/2972) - CLI error messages are now printed to `stderr`. [docker/cli#3044](https://github.com/docker/cli/pull/3044) - Improve performance of `docker info` if a custom `--format` is used that only uses local information. With this change, the CLI only uses the daemon API if it detects that information from the daemon is needed. [docker/cli#3179](https://github.com/docker/cli/pull/3179) - Remove the default value from the `--stop-signal` flag, as it may not reflect the actual default used by the daemon. [docker/cli#3245](https://github.com/docker/cli/pull/3245) - Add Compose schema `3.10` to `docker stack`; allow omitting the `version` field (resulting in `latest`). [docker/cli#3257](https://github.com/docker/cli/pull/3257) - Compose version `3` is now equivalent to `3.x` (latest) in `docker stack`. [docker/cli#3445](https://github.com/docker/cli/pull/3445) - Fix `<Ctrl-c>` hanging on Windows to exit after running a container in non-interactive mode. [docker/cli#3302](https://github.com/docker/cli/pull/3302) - Add relative source paths to the `run` command in the `-v`/`--volume` and `-m`/`--mount` flags. [docker/cli#3469](https://github.com/docker/cli/pull/3469) - `docker exec -t` now sets the console size for the executed process immediately when it's created. [docker/cli#3627](https://github.com/docker/cli/pull/3627) - Update the pretty-print format of `docker info` to provide more details on installed plugins. [docker/cli#3645](https://github.com/docker/cli/pull/3645) - Print warning messages for the `docker context list` and `docker context use` commands when the context is overridden by the environment. [docker/cli#3668](https://github.com/docker/cli/pull/3668) - Add a custom `aliases` annotation that can be used to print all available aliases for a command. [docker/cli#3694](https://github.com/docker/cli/pull/3694) - The CLI no longer creates or updates the CLI configuration file when running `docker context use` and selecting the current context. [docker/cli#3721](https://github.com/docker/cli/pull/3721) - Non-existing contexts are now ignored when running `docker context rm --force`. [docker/cli#3791](https://github.com/docker/cli/pull/3791) - Add the ability to override integers to `0` in Compose files [docker/cli#3812](https://github.com/docker/cli/pull/3812) - SIGINT (`<Ctrl-c>`) now passes through to running containers instead of causing the CLI to exit. [docker/cli#3849](https://github.com/docker/cli/pull/3849) - Improve `docker port CONTAINER` UX by sorting ports before printing. [docker/cli#3892](https://github.com/docker/cli/pull/3892) - API: `GET /containers/{id}/logs` and `POST /containers/{id}/attach` now report which raw-stream format is in use using the `Content-type` response header on API version >= 1.42. [moby/moby#39812](https://github.com/moby/moby/pull/39812) - Set default sandbox size for Windows layers to 127GB, and ensure that the `--storage-opts` flag applies to all storage on Windows. [moby/moby#41636](https://github.com/moby/moby/pull/41636) - Remove the plugin section from the containerd configuration file `(/var/run/docker/containerd/containerd.toml)`. [moby/moby#41675](https://github.com/moby/moby/pull/41675) - Reject `null` manifests during tar import. [moby/moby#41842](https://github.com/moby/moby/pull/41842) - Add shim config for custom runtimes for plugins. [moby/moby#41854](https://github.com/moby/moby/pull/41854) - Container health checks now resume when the daemon is restarted. [moby/moby#41935](https://github.com/moby/moby/pull/41935) - Quota is no longer disabled on cleanup of the `btrfs` driver. [moby/moby#42273](https://github.com/moby/moby/pull/42273) - Host devices that are accessible can now be mounted in `--privileged` rootless containers. [moby/moby#42638](https://github.com/moby/moby/pull/42638) - Fix incorrect handling of `**/foo` recursive wildcard directory patterns in `.dockerignore`. [moby/moby#42676](https://github.com/moby/moby/pull/42676) - Extend `docker import --platform` to allow marking an imported image as a foreign architecture. [moby/moby#43103](https://github.com/moby/moby/pull/43103) - Validation of CPU real-time options is now performed when the daemon starts instead of performing validations for each individual container, allowing startup to fail early. [moby/moby#43131](https://github.com/moby/moby/pull/43131) - Freeze the `namesgenerator` package against new additions. Users will have to be satisfied with the existing 25359 adjective-name combinations. [moby/moby#43210](https://github.com/moby/moby/pull/43210) - API: `containers/{id}/attach/ws` only to streams according by `stdin`, `stdout` and `stderr` parameters on API version >= 1.42. [moby/moby#43322](https://github.com/moby/moby/pull/43322) - Fix UDP traffic in containers not working after the container is restarted under sustained traffic. [moby/moby#43409](https://github.com/moby/moby/pull/43409) - Add support for pulling images with custom amd64 micro-architecture feature levels as supported by the latest versions of Go, GCC, LLVM, and other compiler tools. [moby/moby#43434](https://github.com/moby/moby/pull/43434) - Improve validation of invalid JSON requests in the API. [moby/moby#43463](https://github.com/moby/moby/pull/43463) - Mitigate the impact of slow `exec` starts on health checks. Check timeout now only applies to the duration that the health check command is running. The time it takes to start the command no longer counts against the timeout. [moby/moby#43480](https://github.com/moby/moby/pull/43480) - Console `tty` size is set immediately on creation. [moby/moby#43593](https://github.com/moby/moby/pull/43593), [moby/moby#43622](https://github.com/moby/moby/pull/43622) - Fix `overlay2` mounts not being cleaned up after failed container starts, or daemon shutdown. [moby/moby#43659](https://github.com/moby/moby/pull/43659) - Match manifest list resolution with `containerd`. [moby/moby#43675](https://github.com/moby/moby/pull/43675) - Skip use of `firewalld` for networking when the daemon is running in rootless mode. [moby/moby#43813](https://github.com/moby/moby/pull/43813) - Custom NAT networks are now re-created after daemon restart if missing on Windows. [moby/moby#43858](https://github.com/moby/moby/pull/43858) - Fix terminating the container health-check process when it times out. [moby/moby#43994](https://github.com/moby/moby/pull/43994) - Fix `live-restore` with restart policies and volume refs. [moby/moby#44237](https://github.com/moby/moby/pull/44237) - API: Only anonymous volumes now pruned by default on API version >= v1.42. Pass the filter `all=true` to prune named volumes in addition to anonymous. [moby/moby#44259](https://github.com/moby/moby/pull/44259) - API: Support concurrent calls on the `GET /system/df` endpoint. [moby/moby#42715](https://github.com/moby/moby/pull/42715) - Improve the reliability of the daemon dumping the stack and exits with code 2 when sent a SIGQUIT. [moby/moby#44831](https://github.com/moby/moby/pull/44831) - Fix a rare deadlock in the daemon caused by buffering of container logs. [moby/moby#44856](https://github.com/moby/moby/pull/44856) - Improve error handling in misc filesystem operations so that the daemon can start on a overlayfs backing filesystem. [moby/moby#44834](https://github.com/moby/moby/pull/44834) - Fix an issue where `--ipc=host` wasn't handled correctly when the daemon is running in rootless mode. [moby/moby#44863](https://github.com/moby/moby/pull/44863) - Fix a long-standing set of issues where stale conntrack entries caused incorrect routing of UDP traffic for containers. [moby/moby#44752](https://github.com/moby/moby/pull/44752) - Fix half-registered containers being listed in the API, as well as a nil pointer de-reference and panic caused by using a partially registered container in API calls. [moby/moby#44633](https://github.com/moby/moby/pull/44633) - Fix a failure to create the `DOCKER-USER` ip6tables chain. [moby/moby#44845](https://github.com/moby/moby/pull/44845) - Fix a failure to clean up iptables rules when the `ip6tables` command isn't available. [moby/moby#44727](https://github.com/moby/moby/pull/44727) - Fix an issue where some iptables NAT rules weren't cleaned up after enabling the userland proxy. [moby/moby#44811](https://github.com/moby/moby/pull/44811) - Fix a potentially leaked process in rare situations where cleaning up a failed attempt to start a container was mishandled. [moby/moby#44400](https://github.com/moby/moby/pull/44400) - Fix the `CreatedAt` time of a volume reflecting initialization and not creation. [moby/moby#44725](https://github.com/moby/moby/pull/44725) - Fix an issue where the CLI incorrectly reported an incompatible server instead of an unreachable server in some commands. [docker/cli#3901](https://github.com/docker/cli/pull/3901), [docker/cli#3904](https://github.com/docker/cli/pull/3904) - Fix broken completion of volumes in Zsh. [docker/cli#2998](https://github.com/docker/cli/pull/2998) - Improve output of `docker context` when an invalid context is present. [docker/cli#3847](https://github.com/docker/cli/pull/3847) - Remove ANSI decoration of CLI help annotations when the output isn't a TTY, and added a newline for readability. [docker/cli#3973](https://github.com/docker/cli/pull/3973) - Add `docker container remove` as an alias for `docker container rm`. [docker/cli#3986](https://github.com/docker/cli/pull/3986) ### [`v20.10.27`](https://github.com/moby/moby/releases/tag/v20.10.27) [Compare Source](https://github.com/docker/docker/compare/v20.10.26...v20.10.27) #### v20.10.27 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 20.10.27 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.27) - [moby/moby, 20.10.27 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.27) ##### Bug Fixes and Enhancements - Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46424 - Add `IP_NF_MANGLE` to check-config.sh to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46674 - Fix a deadlock in libnetwork which could prevent containers from starting. https://github.com/moby/moby/pull/46693 - Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46705 - Support building with Go 1.20. https://github.com/moby/moby/pull/46694 https://github.com/moby/moby/pull/46695 https://github.com/moby/moby/pull/46696 ##### Packaging Updates - Update to go1.20.10, golang/org/x/net v0.17.0. https://github.com/moby/moby/pull/46692 ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/81ebe71275768629689a23bc3bca34b3b374a6a6). ### [`v20.10.26`](https://github.com/moby/moby/releases/tag/v20.10.26) [Compare Source](https://github.com/docker/docker/compare/v20.10.25...v20.10.26) #### 20.10.26 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 20.10.26 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.26) - [moby/moby, 20.10.26 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.26) ##### Bug Fixes and Enhancements - Support filesystems which do not support extended file attributes with the VFS graph driver. https://github.com/moby/moby/pull/45466 - Fix AppArmor profile docker-default `/proc/sys` rule. https://github.com/moby/moby/pull/45716 - seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45835 - Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45840 - client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45972 - windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46217 ##### Packaging Updates - Update Go to 1.19.12. https://github.com/moby/moby/pull/46142 - Update containerd to v1.6.22. https://github.com/moby/moby/pull/46105 - Update runc to v1.1.8. https://github.com/moby/moby/pull/46031 - Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46047 ### [`v20.10.25`](https://github.com/moby/moby/releases/tag/v20.10.25) [Compare Source](https://github.com/docker/docker/compare/v20.10.24...v20.10.25) #### Bug fixes and enhancements - Fix log loss with the AWSLogs log driver https://github.com/moby/moby/pull/45349 - Upgrade github.com/docker/libnetwork https://github.com/moby/moby/pull/45398 - Fix a panic in libnetwork during daemon start https://github.com/moby/libnetwork/pull/2677 - Fix a deadlock which can occur when attaching and detaching containers from a network https://github.com/moby/libnetwork/pull/2674 #### Packaging Updates - Update Go runtime to [1.19.9](https://go.dev/doc/devel/release#go1.19.minor) - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20) - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5) ### [`v20.10.24`](https://github.com/moby/moby/releases/tag/v20.10.24) [Compare Source](https://github.com/docker/docker/compare/v20.10.23...v20.10.24) #### 20.10.24 ##### Bug fixes and enhancements - Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). - A lack of kernel support for encrypted overlay networks now reports as an error. - Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach. - Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the `xt_bpf` kernel module. - Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw) to ensure that unintentional exposure has not occurred. - Upgrade github.com/containerd/fifo to v1.1.0 to fix a potential panic [moby/moby#45216](https://github.com/moby/moby/pull/45242). - Fix missing Bash completion for installed cli-plugins [docker/cli#4091](https://github.com/docker/cli/pull/4091). ##### Packaging Updates - Update Go runtime to [1.19.7](https://go.dev/doc/devel/release#go1.19.minor). - Update Docker Buildx to [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4). - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20). - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5). ### [`v20.10.23`](https://github.com/moby/moby/releases/tag/v20.10.23) [Compare Source](https://github.com/docker/docker/compare/v20.10.22...v20.10.23) ##### Bug fixes and enhancements - Fix an issue where `docker build` would fail when using `--add-host=host.docker.internal:host-gateway` with BuildKit enabled [moby/moby#44650](https://github.com/moby/moby/pull/44650). - Revert seccomp: block socket calls to `AF_VSOCK` in default profile [moby/moby#44712](https://github.com/moby/moby/pull/44712). This change, while favorable from a security standpoint, caused a change in behavior for some use-cases. As such, we are reverting it to ensure stability and compatibility for the affected users. However, users of `AF_VSOCK` in containers should recognize that this (special) address family is not currently namespaced in any version of the Linux kernel, and may result in unexpected behavior, like containers communicating directly with host hypervisors. Future releases, will filter `AF_VSOCK`. Users who need to allow containers to communicate over the unnamespaced `AF_VSOCK` will need to turn off seccomp confinement or set a custom seccomp profile. ##### Packaging Updates - Update Docker Compose to [v2.15.1](https://github.com/docker/compose/releases/tag/v2.15.1). - Update Docker Buildx to [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0). - Update containerd (`containerd.io` package) to [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15). - Update the package versioning format for `docker-compose-cli` to allow distro version updates [docker/docker-ce-packaging#822](https://github.com/docker/docker-ce-packaging/pull/822). - Update Go runtime to [1.18.10](https://go.dev/doc/devel/release#go1.18.minor). </details> <details> <summary>go-git/go-git</summary> ### [`v5.12.0`](https://github.com/go-git/go-git/releases/tag/v5.12.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0) #### What's Changed - git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by [@moranCohen26](https://github.com/moranCohen26) in https://github.com/go-git/go-git/pull/994 - git: Signer: fix usage of crypto.Signer interface by [@wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/1029 - git: Remote, fetch, adds the prune option. by [@juliens](https://github.com/juliens) in https://github.com/go-git/go-git/pull/366 - git: Add crypto.Signer option to CommitOptions. by [@wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/996 - git: Worktree checkout tag hash id ([#959](https://github.com/go-git/go-git/issues/959)) by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/966 - git: Worktree, Don't panic on empty or root path when checking if it is valid by [@tim775](https://github.com/tim775) in https://github.com/go-git/go-git/pull/1042 - git: Add commit validation for Reset by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1048 - git: worktree_commit, Fix amend commit to apply changes. Fixes [#1024](https://github.com/go-git/go-git/issues/1024) by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1045 - git: Implement Merge function with initial `FastForwardMerge` support by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1044 - plumbing: object, Make first commit visible on logs filtered with filename. Fixes [#191](https://github.com/go-git/go-git/issues/191) by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1036 - plumbing: no panic in printStats function. Fixes [#177](https://github.com/go-git/go-git/issues/177) by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/971 - plumbing: object, Optimize logging with file. by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1046 - plumbing: object, check legitimacy in (\*Tree).Encode by [@niukuo](https://github.com/niukuo) in https://github.com/go-git/go-git/pull/967 - plumbing: format/gitattributes, close file in ReadAttributesFile by [@prskr](https://github.com/prskr) in https://github.com/go-git/go-git/pull/1018 - plumbing: check setAuth error. Fixes [#185](https://github.com/go-git/go-git/issues/185) by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/969 - plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by [@Jerry-yz](https://github.com/Jerry-yz) in https://github.com/go-git/go-git/pull/987 - utils: merkletrie, calculate filesystem node's hash lazily. by [@candid82](https://github.com/candid82) in https://github.com/go-git/go-git/pull/825 - utils: update comment in node.go's Hash() by [@codablock](https://github.com/codablock) in https://github.com/go-git/go-git/pull/992 - \_example: fix 404 link and added ssh-agent clone link by [@grinish21](https://github.com/grinish21) in https://github.com/go-git/go-git/pull/1022 - \_example: checkout-branch example by [@dlambda](https://github.com/dlambda) in https://github.com/go-git/go-git/pull/446 - \_example: example for git clone using ssh-agent by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/998 #### New Contributors - [@candid82](https://github.com/candid82) made their first contribution in https://github.com/go-git/go-git/pull/825 - [@codablock](https://github.com/codablock) made their first contribution in https://github.com/go-git/go-git/pull/992 - [@Jerry-yz](https://github.com/Jerry-yz) made their first contribution in https://github.com/go-git/go-git/pull/987 - [@wlynch](https://github.com/wlynch) made their first contribution in https://github.com/go-git/go-git/pull/996 - [@moranCohen26](https://github.com/moranCohen26) made their first contribution in https://github.com/go-git/go-git/pull/994 - [@grinish21](https://github.com/grinish21) made their first contribution in https://github.com/go-git/go-git/pull/1022 - [@prskr](https://github.com/prskr) made their first contribution in https://github.com/go-git/go-git/pull/1018 - [@dlambda](https://github.com/dlambda) made their first contribution in https://github.com/go-git/go-git/pull/446 - [@juliens](https://github.com/juliens) made their first contribution in https://github.com/go-git/go-git/pull/366 - [@onee-only](https://github.com/onee-only) made their first contribution in https://github.com/go-git/go-git/pull/1036 - [@tim775](https://github.com/tim775) made their first contribution in https://github.com/go-git/go-git/pull/1042 - [@niukuo](https://github.com/niukuo) made their first contribution in https://github.com/go-git/go-git/pull/967 - [@avoidalone](https://github.com/avoidalone) made their first contribution in https://github.com/go-git/go-git/pull/1047 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0 ### [`v5.11.0`](https://github.com/go-git/go-git/releases/tag/v5.11.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0) #### What's Changed - git: validate reference names ([#929](https://github.com/go-git/go-git/issues/929)) by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/950 - git: stop iterating at oldest shallow when pulling. Fixes [#305](https://github.com/go-git/go-git/issues/305) by [@dhoizner](https://github.com/dhoizner) in https://github.com/go-git/go-git/pull/939 - plumbing: object, enable renames in getFileStatsFromFilePatches by [@djmoch](https://github.com/djmoch) in https://github.com/go-git/go-git/pull/941 - storage: filesystem, Add option to set a specific FS for alternates by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/953 - Align worktree validation with upstream and remove build warnings by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/958 #### New Contributors - [@dhoizner](https://github.com/dhoizner) made their first contribution in https://github.com/go-git/go-git/pull/939 - [@djmoch](https://github.com/djmoch) made their first contribution in https://github.com/go-git/go-git/pull/941 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0 ### [`v5.10.1`](https://github.com/go-git/go-git/releases/tag/v5.10.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1) #### What's Changed - Worktree, ignore ModeSocket files by [@steiler](https://github.com/steiler) in https://github.com/go-git/go-git/pull/930 - git: add tracer package by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/916 - remote: Flip clause for fast-forward only check by [@adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/875 - plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes [#900](https://github.com/go-git/go-git/issues/900) by [@anandf](https://github.com/anandf) in https://github.com/go-git/go-git/pull/901 - plumbing: uppload-server-info, implement upload-server-info by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/896 - plumbing: optimise memory consumption for filesystem storage by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/799 - plumbing: format/packfile, Refactor patch delta by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/908 - plumbing: fix empty uploadpack request error by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/932 - plumbing: transport/git, Improve tests error message by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/752 - plumbing: format/pktline, Respect pktline error-line errors by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/936 - utils: remove ioutil.Pipe and use std library io.Pipe by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/922 - utils: move trace to utils by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/931 - cli: separate go module for cli by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/914 - build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/887 - build: bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/891 - build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/888 - build: bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/890 - build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/907 - build: bump golang.org/x/text from 0.13.0 to 0.14.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/906 - build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/917 - build: bump golang.org/x/net from 0.17.0 to 0.18.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/918 #### New Contributors - [@anandf](https://github.com/anandf) made their first contribution in https://github.com/go-git/go-git/pull/901 - [@steiler](https://github.com/steiler) made their first contribution in https://github.com/go-git/go-git/pull/930 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1 ### [`v5.10.0`](https://github.com/go-git/go-git/releases/tag/v5.10.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0) #### What's Changed - PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/782 - Worktree, apply ProxyOption on Pull by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/840 - Repository: add clone --shared feature by [@enverbisevac](https://github.com/enverbisevac) in https://github.com/go-git/go-git/pull/860 - build: Add github workflow to check commit message format by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/867 - Improve handling of remote errors by [@makkes](https://github.com/makkes) in https://github.com/go-git/go-git/pull/866 - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/873 - plumbing: commitgraph, Add generation v2 support by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/869 - plumbing: protocol/packp, Add validation for decodeLine by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/868 - plumbing: parse the encoding header of the commit object by [@liwenqiu](https://github.com/liwenqiu) in https://github.com/go-git/go-git/pull/761 - plumbing: commitgraph, allow SHA256 commit-graphs by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/853 - plumbing: commitgraph, Allow reading commit-graph chains by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/854 - plumbing/object: Support mergetag in merge commits by [@adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/847 #### New Contributors - [@nodivbyzero](https://github.com/nodivbyzero) made their first contribution in https://github.com/go-git/go-git/pull/840 - [@adityasaky](https://github.com/adityasaky) made their first contribution in https://github.com/go-git/go-git/pull/847 - [@hezhizhen](https://github.com/hezhizhen) made their first contribution in https://github.com/go-git/go-git/pull/836 - [@0x34d](https://github.com/0x34d) made their first contribution in https://github.com/go-git/go-git/pull/855 - [@liwenqiu](https://github.com/liwenqiu) made their first contribution in https://github.com/go-git/go-git/pull/761 - [@enverbisevac](https://github.com/enverbisevac) made their first contribution in https://github.com/go-git/go-git/pull/860 - [@makkes](https://github.com/makkes) made their first contribution in https://github.com/go-git/go-git/pull/866 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0 ### [`v5.9.0`](https://github.com/go-git/go-git/releases/tag/v5.9.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0) #### What's Changed - git: worktree: add Amend option to CommitOptions by [@john-cai](https://github.com/john-cai) in https://github.com/go-git/go-git/pull/438 - git: worktree, reset ignored files that are part of the worktree: Fixes [#819](https://github.com/go-git/go-git/issues/819) by [@daolis](https://github.com/daolis) in https://github.com/go-git/go-git/pull/821 - plumbing: Do not swallow http message coming from VCS providers by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/835 - plumbing: transport, handle IPv6 while parsing endpoint. Fixes [#740](https://github.com/go-git/go-git/issues/740) by [@ninedraft](https://github.com/ninedraft) in https://github.com/go-git/go-git/pull/820 - \*: update goproxy dependency to fix CVE-2023-37788 vulnerability by [@svghadi](https://github.com/svghadi) in https://github.com/go-git/go-git/pull/832 - \*: bump dependencies and Go to 1.19 by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/837 #### New Contributors - [@svghadi](https://github.com/svghadi) made their first contribution in https://github.com/go-git/go-git/pull/832 - [@daolis](https://github.com/daolis) made their first contribution in https://github.com/go-git/go-git/pull/821 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0 ### [`v5.8.1`](https://github.com/go-git/go-git/releases/tag/v5.8.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1) #### What's Changed - \*: Bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/815 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1 ### [`v5.8.0`](https://github.com/go-git/go-git/releases/tag/v5.8.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.7.0...v5.8.0) #### What's Changed - git: Fix fetching after shallow clone. Fixes [#305](https://github.com/go-git/go-git/issues/305) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/778 - git: enable fetch with unqualified references by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/762 - git: don't add to want if exists, shallow and depth 1 by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/763 - git: Clone HEAD should not force master. Fixes [#363](https://github.com/go-git/go-git/issues/363) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/758 - git: fix the issue with submodules having the SCP style URL fail due to the wrong URL parsing by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/756 - git: add a clone option to allow for shallow cloning of submodules by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/765 - worktree: minor speedup for `doAddDirectory` by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/702 - \_examples: Remove wrong comment by [@pascal-hofmann](https://github.com/pascal-hofmann) in https://github.com/go-git/go-git/pull/357 - \*: Handle paths starting with tilde by [@ricci2511](https://github.com/ricci2511) in https://github.com/go-git/go-git/pull/808 - \*: Handle paths starting with ~Username by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/809 - storage: filesystem/dotgit, add support for tmp_objdir prefix by [@L11R](https://github.com/L11R) in https://github.com/go-git/go-git/pull/812 - plumbing: gitignore, replace user dir in path by [@Jleagle](https://github.com/Jleagle) in https://github.com/go-git/go-git/pull/772 - plumbing: gitignore, fix incorrect parsing. Fixes [#500](https://github.com/go-git/go-git/issues/500) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/781 - plumbing: http, Fix empty repos on Git v2.41+ by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/802 - plumbing: packp, A request is not empty if it contains shallows. Fixes [#328](https://github.com/go-git/go-git/issues/328) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/792 - plumbing: blame, Complete rewrite. Fixes [#603](https://github.com/go-git/go-git/issues/603) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/789 - plumbing: gitignore, Allow gitconfig to contain a gitignore relative to any user home. Fixes [#578](https://github.com/go-git/go-git/issues/578) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/785 #### New Contributors - [@Jleagle](https://github.com/Jleagle) made their first contribution in https://github.com/go-git/go-git/pull/772 - [@pascal-hofmann](https://github.com/pascal-hofmann) made their first contribution in https://github.com/go-git/go-git/pull/357 - [@ricci2511](https://github.com/ricci2511) made their first contribution in https://github.com/go-git/go-git/pull/808 - [@L11R](https://github.com/L11R) made their first contribution in https://github.com/go-git/go-git/pull/812 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.7.0...v5.7.1 ### [`v5.7.0`](https://github.com/go-git/go-git/releases/tag/v5.7.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) #### What's Changed - \*: Add support for initializing SHA256 repositories by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/707 - git: add mirror clone option by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/735 - git: Add support to ls-remote with peeled references. Fixes [#749](https://github.com/go-git/go-git/issues/749) by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/750 - git: fix cloning with branch name by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/755 - git: Worktree, add check to see if file already checked in. Fixes [#718](https://github.com/go-git/go-git/issues/718) by [@cbbm142](https://github.com/cbbm142) in https://github.com/go-git/go-git/pull/719 - git: Worktree, git grep bare repositories by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/728 - git: Add Depth to SubmoduleUpdateOptions by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/754 - git: Testing, Fix tests not cleaning temp folders by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/769 - git: remote, add support for a configurable timeout. by [@andrewpollock](https://github.com/andrewpollock) in https://github.com/go-git/go-git/pull/753 - git: Allow Initial Branch to be configurable by [@techknowlogick](https://github.com/techknowlogick) in https://github.com/go-git/go-git/pull/764 - storage: filesystem/dotgit, Improve load packed-refs by [@fcharlie](https://github.com/fcharlie) in https://github.com/go-git/go-git/pull/743 - storage: filesystem, Populate index before use. Fixes [#148](https://github.com/go-git/go-git/issues/148) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/722 - plumbing: resolve non-external delta references by [@ZauberNerd](https://github.com/ZauberNerd) in https://github.com/go-git/go-git/pull/485 - plumbing/transport: fix regression in scp-like match by [@jotadrilo](https://github.com/jotadrilo) in https://github.com/go-git/go-git/pull/715 - plumbing/transport: Add support for custom proxy settings by [@aryan9600](https://github.com/aryan9600) in https://github.com/go-git/go-git/pull/744 - \*: small fixes across the codebase by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/770 - \*: bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/776 - \*: bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/748 - \*: bump Go version to 1.18 on go.mod by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/774 - \*: add Codeql workflow and bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/775 - ci: fix upstream git build for master branch by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/739 #### New Contributors - [@ZauberNerd](https://github.com/ZauberNerd) made their first contribution in https://github.com/go-git/go-git/pull/485 - [@jotadrilo](https://github.com/jotadrilo) made their first contribution in https://github.com/go-git/go-git/pull/715 - [@fcharlie](https://github.com/fcharlie) made their first contribution in https://github.com/go-git/go-git/pull/743 - [@AriehSchneier](https://github.com/AriehSchneier) made their first contribution in https://github.com/go-git/go-git/pull/755 - [@cbbm142](https://github.com/cbbm142) made their first contribution in https://github.com/go-git/go-git/pull/719 - [@aryan9600](https://github.com/aryan9600) made their first contribution in https://github.com/go-git/go-git/pull/744 - [@matejrisek](https://github.com/matejrisek) made their first contribution in https://github.com/go-git/go-git/pull/754 - [@andrewpollock](https://github.com/andrewpollock) made their first contribution in https://github.com/go-git/go-git/pull/753 - [@techknowlogick](https://github.com/techknowlogick) made their first contribution in https://github.com/go-git/go-git/pull/764 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0 ### [`v5.6.1`](https://github.com/go-git/go-git/releases/tag/v5.6.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1) #### What's Changed - plumbing/transport: don't use the `firstErrLine` when it is empty by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/682 - plumbing/transport: ssh, unable to pass a custom HostKeyCallback func by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/655 - storage/filesystem: dotgit: fix a filesystem race in Refs/walkReferencesTree by [@MichaelMure](https://github.com/MichaelMure) in https://github.com/go-git/go-git/pull/659 - \*: bump golang.org/x/net from 0.2.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/684 - \*: bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/697 - \*: fix panic for empty revisions by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/696 - ci: bump GitHub actions, enable go test race detection and stop using developer's GPG keys during test execution by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/701 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1 ### [`v5.6.0`](https://github.com/go-git/go-git/releases/tag/v5.6.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) #### What's Changed - Worktree, check for empty parent dirs during Reset (Fixes [#670](https://github.com/go-git/go-git/issues/670)) by [@mbohy](https://github.com/mbohy) in https://github.com/go-git/go-git/pull/671 - \*: remove need to build with CGO by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/688 - plumbing: support SSH/X509 signed tags by [@hiddeco](https://github.com/hiddeco) in https://github.com/go-git/go-git/pull/690 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0 </details> <details> <summary>google/uuid</summary> ### [`v1.6.0`](https://github.com/google/uuid/releases/tag/v1.6.0) [Compare Source](https://github.com/google/uuid/compare/v1.5.0...v1.6.0) ##### Features - add Max UUID constant ([#149](https://github.com/google/uuid/issues/149)) ([c58770e](https://github.com/google/uuid/commit/c58770eb495f55fe2ced6284f93c5158a62e53e3)) ##### Bug Fixes - fix typo in version 7 uuid documentation ([#153](https://github.com/google/uuid/issues/153)) ([016b199](https://github.com/google/uuid/commit/016b199544692f745ffc8867b914129ecb47ef06)) - Monotonicity in UUIDv7 ([#150](https://github.com/google/uuid/issues/150)) ([a2b2b32](https://github.com/google/uuid/commit/a2b2b32373ff0b1a312b7fdf6d38a977099698a6)) ### [`v1.5.0`](https://github.com/google/uuid/releases/tag/v1.5.0) [Compare Source](https://github.com/google/uuid/compare/v1.4.0...v1.5.0) ##### Features - Validate UUID without creating new UUID ([#141](https://github.com/google/uuid/issues/141)) ([9ee7366](https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29)) ### [`v1.4.0`](https://github.com/google/uuid/releases/tag/v1.4.0) [Compare Source](https://github.com/google/uuid/compare/v1.3.1...v1.4.0) ##### Features - UUIDs slice type with Strings() convenience method ([#133](https://github.com/google/uuid/issues/133)) ([cd5fbbd](https://github.com/google/uuid/commit/cd5fbbdd02f3e3467ac18940e07e062be1f864b4)) ##### Fixes - Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior) ### [`v1.3.1`](https://github.com/google/uuid/releases/tag/v1.3.1) [Compare Source](https://github.com/google/uuid/compare/v1.3.0...v1.3.1) ##### Bug Fixes - Use .EqualFold() to parse urn prefixed UUIDs ([#118](https://github.com/google/uuid/issues/118)) ([574e687](https://github.com/google/uuid/commit/574e6874943741fb99d41764c705173ada5293f0)) </details> <details> <summary>moby/buildkit</summary> ### [`v0.13.1`](https://github.com/moby/buildkit/releases/tag/v0.13.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.13.0...v0.13.1) buildkit 0.13.1 Welcome to the 0.13.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Fix handling of deleted blobs when importing cache from Github Actions cache backend [#4771](https://github.com/moby/buildkit/issues/4771) - Fix unclean shutdown error on WCOW on Ctrl-C [#4774](https://github.com/moby/buildkit/issues/4774) - Mitigate issue with mounting OpenTelemetry socket in containers in some installations [#4778](https://github.com/moby/buildkit/issues/4778) - Fix parsing `./.git` source path as Git URL. [#4776](https://github.com/moby/buildkit/issues/4776) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.13.0](https://github.com/moby/buildkit/releases/tag/v0.13.0) ### [`v0.13.0`](https://github.com/moby/buildkit/releases/tag/v0.13.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.5...v0.13.0) buildkit 0.13.0 Welcome to the 0.13.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Justin Chadwell - Sebastiaan van Stijn - Akihiro Suda - Jonathan A. Sternberg - Kohei Tokunaga - David Karlsson - Leandro Santiago - Gabriel Adrian Samfira - Chris Goller - Anthony Nandaa - Erik Sipsma - Paweł Gronowski - Jakub Ciolek - Paul "TBBle" Hampson - Brian Goff - Adrien Delorme - Artem Khramov - Nguyễn Đức Chiến - Aaron Lehmann - Dan Duvall - Mark Yen - Milas Bowman - Tristan Stenner - Yan Song - Ahmon Dancy - Alex Couture-Beil - Alex Suraci - Arnaldo Garcia Rincon - Austin Vazquez - Bjorn Neergaard - Brennan Kinney - Bunyamin Dokmetas - Burt Holzman - Dennis Haney - Derek McGowan - Erik McKelvey - Frank Villaro-Dixon - Grégoire Payen de La Garanderie - Guilhem Charles - Ian King'ori - James Carnegie - Kazuyoshi Kato - Reshen - Sascha Hemleb - Tibor Vass - Zhizhen He - fanjiyun.fjy - frankyang - guangwu - liulanzheng - njucjc - omahs - retornam - x893675 - yumemio - yzewei - 蝦米 ##### Notable Changes - Default Dockerfile frontend has been updated to [v1.7.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.7.0) - Experimental Windows Containers support is now available with containerd worker. Windows release artifacts now also contain the `buildkitd.exe` binary. [#3518](https://github.com/moby/buildkit/issues/3518) [#3517](https://github.com/moby/buildkit/issues/3517) [#4494](https://github.com/moby/buildkit/issues/4494) [#4479](https://github.com/moby/buildkit/issues/4479) [#4432](https://github.com/moby/buildkit/issues/4432) [#4387](https://github.com/moby/buildkit/issues/4387) [#4364](https://github.com/moby/buildkit/issues/4364) [#4670](https://github.com/moby/buildkit/issues/4670) [#4692](https://github.com/moby/buildkit/issues/4692) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/windows.md) - Multiple exporters(outputs) can now be specified with a single build request [#4134](https://github.com/moby/buildkit/issues/4134) - New option `rewrite-timestamps` is available when exporting images that with convert files in exported layers according to the epoch time for reproducible builds [#4057](https://github.com/moby/buildkit/issues/4057) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/build-repro.md#source_date_epoch) - There is a new bridge network mode `--oci-worker-net=bridge` that can be used to set up CNI bridge networking with no external dependencies for better network isolation of build containers. It is expected that v0.14.0 release will enable this network mode by default. [#4352](https://github.com/moby/buildkit/issues/4352) [#4650](https://github.com/moby/buildkit/issues/4650) [#4539](https://github.com/moby/buildkit/issues/4539) - `SOURCE_DATE_EPOCH` in now not applied to the layer records of the base image to keep them immutable [#4663](https://github.com/moby/buildkit/issues/4663) - Github Actions cache backend now supports defining timeout in case the service gets rate-limited [#4702](https://github.com/moby/buildkit/issues/4702) - Gateway API has a new method `ResolveSourceMeta` that will replace the previous `ResolveImageConfig` method. The new method works with all LLB source types, not just images, and correctly handles policy conversions between sources. [#4563](https://github.com/moby/buildkit/issues/4563) [#4647](https://github.com/moby/buildkit/issues/4647) - When using host networking, local host DNS routes can also be used instead of the default [#4524](https://github.com/moby/buildkit/issues/4524) - Changing cache mount's ID property does not invalidate cache for the build step anymore [#4585](https://github.com/moby/buildkit/issues/4585) - Basic metrics support has been added via OpenTelemetry and Prometheus [#4460](https://github.com/moby/buildkit/issues/4460) - Token cache is no longer shared between parallel push requests [#3592](https://github.com/moby/buildkit/issues/3592) - Update insecure registry fallback logic to only fallback with previous host [#4613](https://github.com/moby/buildkit/issues/4613) - Build secrets can now avoid `noexec` mount restrictions if file mode set execution bit [#4670](https://github.com/moby/buildkit/issues/4670) - GRPC socket for OpenTelemetry tracing now defaults to runtime directory path [#4078](https://github.com/moby/buildkit/issues/4078) [#4619](https://github.com/moby/buildkit/issues/4619) - LLB API now has new options to directly control how different mounts for container steps are cached [#4624](https://github.com/moby/buildkit/issues/4624) - Cancellation and timeout errors should now contain better stacktraces on `--debug` mode [#4587](https://github.com/moby/buildkit/issues/4587) [#4457](https://github.com/moby/buildkit/issues/4457) - Edge case of empty multiplatform build result does not generate errors anymore [#4526](https://github.com/moby/buildkit/issues/4526) - Prune command now avoids taking database lock for a long time if deletion takes too much time [#4413](https://github.com/moby/buildkit/issues/4413) - Healthcheck service has been added to Control API [#4145](https://github.com/moby/buildkit/issues/4145) - Buildctl has new `quiet` and `rawjson` progress mode [#4213](https://github.com/moby/buildkit/issues/4213) [#4113](https://github.com/moby/buildkit/issues/4113) - Buildctl has new `--debug-json-cache-metrics` debug option [#4464](https://github.com/moby/buildkit/issues/4464) - Buildctl now supports `--registry-auth-tlscontext` flag for controlling the client authentication requests [#4420](https://github.com/moby/buildkit/issues/4420) [#4211](https://github.com/moby/buildkit/issues/4211) - Buildctl now propagates `SOURCE_DATE_EPOCH` to build arg automatically if it is defined [#4231](https://github.com/moby/buildkit/issues/4231) - LLB client now allows exposing local sources via `FS` interface instead of local path [#4094](https://github.com/moby/buildkit/issues/4094) - Ensure only one platform is pulled on resolving image config, even if multiple match [#4311](https://github.com/moby/buildkit/issues/4311) - Rootless version supports new `--detach-netns` mode [#4546](https://github.com/moby/buildkit/issues/4546) - Update default CNI config path for rootless mode to `~/.config/buildkit/cni.json` [#4547](https://github.com/moby/buildkit/issues/4547) - Ensure correct pinned commit is checked out if tags that have same path components [#4473](https://github.com/moby/buildkit/issues/4473) - Exporting caches for results with no layers is now skipped in OCI structures [#4336](https://github.com/moby/buildkit/issues/4336) - New debugging options have been added to the scheduler component [#4410](https://github.com/moby/buildkit/issues/4410) - Improve error messages on `StatFile` requests [#4321](https://github.com/moby/buildkit/issues/4321) - Daemon logs can now be exported in JSON format [#4044](https://github.com/moby/buildkit/issues/4044) - Qemu emulation for loongarch64 is now detected if available [#4392](https://github.com/moby/buildkit/issues/4392) - Number of log lines per build step on TTY mode can now be configured with `BUILDKIT_TTY_LOG_LINES` [#4284](https://github.com/moby/buildkit/issues/4284) - Empty `OnBuild` value is now omitted from image config [#4648](https://github.com/moby/buildkit/issues/4648) - Fixes for bridge networking on Rootless mode [#4655](https://github.com/moby/buildkit/issues/4655) - Fix possible "missing lease requirement" error on canceling one of parallel exports [#4529](https://github.com/moby/buildkit/issues/4529) - Fix file permissions error if `ADD <tar.gz>` used with User namespace [#4712](https://github.com/moby/buildkit/issues/4712) - Fix possible permission error when using custom frontends with User namespace on certain systems [#4714](https://github.com/moby/buildkit/issues/4714) - Fixes for merging parallel build steps that generate the same cache keys [#4559](https://github.com/moby/buildkit/issues/4559) [#4285](https://github.com/moby/buildkit/issues/4285) - Fix processing result map in LLB API if the evaluate option is set to true [#4544](https://github.com/moby/buildkit/issues/4544) - Fix hardlink issue with whiteout deletes in the merge snapshotter [#4516](https://github.com/moby/buildkit/issues/4516) - Fix issue with caching multiple mounts originating from the same source [#4270](https://github.com/moby/buildkit/issues/4270) [#4281](https://github.com/moby/buildkit/issues/4281) - Fix possible panic condition on deleting history records [#4451](https://github.com/moby/buildkit/issues/4451) - Fix issue where same source image layer chains could end up in the provenance attestation multiple times [#4433](https://github.com/moby/buildkit/issues/4433) - Fix possible pull error caused by previous cache [#4428](https://github.com/moby/buildkit/issues/4428) - Fix possible data race on transfer progress handling [#4726](https://github.com/moby/buildkit/issues/4726) - Fix issues where session messages could grow bigger than maximum message size when transferring SBOM to client [#4313](https://github.com/moby/buildkit/issues/4313) - Fix issue where specific build steps could drop progress messages [#4347](https://github.com/moby/buildkit/issues/4347) - Fix possible wrong usage statitics in merged snapshotters [#4389](https://github.com/moby/buildkit/issues/4389) - Fix possible storage leak for compression variants [#4353](https://github.com/moby/buildkit/issues/4353) - Fix handling of certain SSH Git URLs [#4326](https://github.com/moby/buildkit/issues/4326) - Fix possible missing blob error on mapping files to SBOM packages [#4210](https://github.com/moby/buildkit/issues/4210) - Fix diffing layers when custom Gzip compression level is set [#4275](https://github.com/moby/buildkit/issues/4275) - Fix possible panic with stargz snapshotter [#4187](https://github.com/moby/buildkit/issues/4187) - Fix generation of cache checksums for Merge and Diff operations [#4192](https://github.com/moby/buildkit/issues/4192) - Fix possible negative pull time in progressbar on parallel pulls [#4183](https://github.com/moby/buildkit/issues/4183) - Fix handling of missing files in LLB File remove API [#4051](https://github.com/moby/buildkit/issues/4051) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) -> [`ced1acd`](https://github.com/moby/buildkit/commit/ced1acdcaa24) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) -> [`8075edf`](https://github.com/moby/buildkit/commit/8075edf89bb0) - **github.com/Microsoft/hcsshim** v0.10.0-rc.8 -> v0.11.4 - **github.com/aws/aws-sdk-go-v2** v1.17.6 -> v1.24.1 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.4.10 -> v1.5.4 - **github.com/aws/aws-sdk-go-v2/config** v1.18.16 -> v1.26.6 - **github.com/aws/aws-sdk-go-v2/credentials** v1.13.16 -> v1.16.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.24 -> v1.14.11 - **github.com/aws/aws-sdk-go-v2/feature/s3/manager** v1.11.56 -> v1.15.15 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.30 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.24 -> v2.5.10 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.31 -> v1.7.3 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.0.22 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.9.11 -> v1.10.4 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.1.25 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.24 -> v1.10.10 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.13.24 -> v1.16.10 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.30.6 -> v1.48.1 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.12.5 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 -> v1.21.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.18.6 -> v1.26.7 - **github.com/aws/smithy-go** v1.13.5 -> v1.19.0 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd** v1.7.2 -> v1.7.13 - **github.com/containerd/continuity** v0.4.1 -> v0.4.3 - **github.com/containerd/fuse-overlayfs-snapshotter** v1.0.2 -> v1.0.8 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nydus-snapshotter** v0.8.2 -> v0.13.7 - **github.com/containerd/stargz-snapshotter** v0.14.3 -> v0.15.1 - **github.com/containerd/stargz-snapshotter/estargz** v0.14.3 -> v0.15.1 - **github.com/containernetworking/plugins** v1.4.0 ***new*** - **github.com/distribution/reference** v0.5.0 ***new*** - **github.com/docker/cli** v24.0.4 -> v25.0.3 - **github.com/docker/docker** [`8e51b8b`](https://github.com/moby/buildkit/commit/8e51b8b59cb8) -> v25.0.3 - **github.com/docker/docker-credential-helpers** v0.7.0 -> v0.8.0 - **github.com/docker/go-connections** v0.4.0 -> v0.5.0 - **github.com/felixge/fgprof** v0.9.3 ***new*** - **github.com/felixge/httpsnoop** v1.0.3 -> v1.0.4 - **github.com/go-logr/logr** v1.2.3 -> v1.3.0 - **github.com/golang-jwt/jwt/v4** v4.4.2 -> v4.5.0 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/pprof** [`e72429f`](https://github.com/moby/buildkit/commit/e72429f035bd) ***new*** - **github.com/google/uuid** v1.3.0 -> v1.5.0 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 -> v2.16.0 - **github.com/hanwen/go-fuse/v2** v2.2.0 -> v2.4.0 - **github.com/hashicorp/go-retryablehttp** v0.7.2 -> v0.7.5 - **github.com/klauspost/compress** v1.17.2 -> v1.17.4 - **github.com/moby/docker-image-spec** v1.3.1 ***new*** - **github.com/moby/patternmatcher** v0.5.0 -> v0.6.0 - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/moby/term** v0.5.0 ***new*** - **github.com/opencontainers/image-spec** v1.1.0-rc3 -> v1.1.0-rc5 - **github.com/opencontainers/runtime-spec** v1.1.0-rc.2 -> v1.1.0 - **github.com/pkg/profile** v1.5.0 -> v1.7.0 - **github.com/prometheus/client_golang** v1.14.0 -> v1.17.0 - **github.com/prometheus/client_model** v0.3.0 -> v0.5.0 - **github.com/prometheus/common** v0.42.0 -> v0.44.0 - **github.com/prometheus/procfs** v0.9.0 -> v0.12.0 - **github.com/serialx/hashring** [`8b29126`](https://github.com/moby/buildkit/commit/8b2912629002) -> [`22c0c7a`](https://github.com/moby/buildkit/commit/22c0c7ab6b1b) - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/spdx/tools-golang** v0.5.1 -> v0.5.3 - **github.com/stretchr/testify** v1.8.3 -> v1.8.4 - **github.com/tonistiigi/fsutil** [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/moby/buildkit/commit/7525a1af2bb5) - **github.com/tonistiigi/go-actions-cache** [`0bdeb6e`](https://github.com/moby/buildkit/commit/0bdeb6e1eac7) -> [`a0b64f3`](https://github.com/moby/buildkit/commit/a0b64f338598) - **github.com/urfave/cli** v1.22.12 -> v1.22.14 - **github.com/vbatts/tar-split** v0.11.2 -> v0.11.5 - **github.com/vishvananda/netlink** v1.2.1-beta.2 ***new*** - **github.com/vishvananda/netns** v0.0.4 ***new*** - **go.etcd.io/bbolt** v1.3.7 -> v1.3.9 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/otel** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/jaeger** v1.14.0 -> v1.17.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 ***new*** - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) - **google.golang.org/genproto/googleapis/api** [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.59.0 Previous release can be found at [v0.12.5](https://github.com/moby/buildkit/releases/tag/v0.12.5) ### [`v0.12.5`](https://github.com/moby/buildkit/releases/tag/v0.12.5) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.4...v0.12.5) https://hub.docker.com/r/moby/buildkit ##### Notable changes: ##### This release contains following security fixes: - Runc has been updated to v1.1.12 addressing https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv - Fix possible race condition with accessing subpaths from cache mounts https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv - Fix possible host system access from mount stub cleaner https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8 - Fix interactive containers API validation against entitlements https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g - Fix possible panic when incorrect parameters sent from frontend https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx ### [`v0.12.4`](https://github.com/moby/buildkit/releases/tag/v0.12.4) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.3...v0.12.4) Welcome to the 0.12.4 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible concurrent map access on remote cache export [#4346](https://github.com/moby/buildkit/issues/4346) - Fix hang on debug server listener [#4361](https://github.com/moby/buildkit/issues/4361) - Fix possible deadlock in History API under high number of parallel builds [#4362](https://github.com/moby/buildkit/issues/4362) - Fix possible panic on handling deleted records in History API [#4451](https://github.com/moby/buildkit/issues/4451) - Fix possible data corruption in zstd library [#4372](https://github.com/moby/buildkit/issues/4372) ### [`v0.12.3`](https://github.com/moby/buildkit/releases/tag/v0.12.3) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.2...v0.12.3) Welcome to the 0.12.3 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible duplicate source files in provenance attestation for chained builds [#4190](https://github.com/moby/buildkit/issues/4190) - Fix possible negative step time in progressbar for step shared with other build request [#4183](https://github.com/moby/buildkit/issues/4183) - Fix properly closing history and cache DB on shutdown to avoid corruption [#4185](https://github.com/moby/buildkit/issues/4185) [#4189](https://github.com/moby/buildkit/issues/4189) - Fix incorrect error handling for invalid HTTP source URLs [#4201](https://github.com/moby/buildkit/issues/4201) - Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. [#4299](https://github.com/moby/buildkit/issues/4299) - Fix possible data race with parallel image config resolves [#4157](https://github.com/moby/buildkit/issues/4157) - Fix regression in v0.12 for clients waiting on buildkitd to become available [#4200](https://github.com/moby/buildkit/issues/4200) - Fix Cgroup NS handling for hosts supporting only CgroupV1 [#4308](https://github.com/moby/buildkit/issues/4308) ### [`v0.12.2`](https://github.com/moby/buildkit/releases/tag/v0.12.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.1...v0.12.2) Welcome to the 0.12.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible discarded network error when exporting result to client [#4117](https://github.com/moby/buildkit/issues/4117) - Avoid unnecessary memory allocations when writing build progress [#4116](https://github.com/moby/buildkit/issues/4116) ### [`v0.12.1`](https://github.com/moby/buildkit/releases/tag/v0.12.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.0...v0.12.1) Welcome to the 0.12.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible goroutine leak in resource monitor for failed containers [#4081](https://github.com/moby/buildkit/issues/4081) - Fix possible tracing socket path length error on some configurations [#3483](https://github.com/moby/buildkit/issues/3483) ### [`v0.12.0`](https://github.com/moby/buildkit/releases/tag/v0.12.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.6...v0.12.0) buildkit 0.12.0 Welcome to the 0.12.0 release of buildkit! *This is a pre-release of buildkit* Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - Justin Chadwell - CrazyMax - Sebastiaan van Stijn - Akihiro Suda - Erik Sipsma - Gabriel Adrian Samfira - Kohei Tokunaga - Alex Couture-Beil - Cory Bennett - Brian Goff - Nick Santos - Wei Zhang - Alex Suraci - Alexis Murzeau - Changwei Ge - David Karlsson - Paweł Gronowski - Aaron Lehmann - Jordan Goasdoue - Seiya Miyata - Ben Longo - Jacob Gillespie - Alan Fregtman - Andy Alt - Bertrand Paquet - Chaerim Yeo - Chris Goller - Cory Snider - Dan Duvall - Gabriel - Gahl Saraf - George - Hugo Santos - Ilya Dmitrichenko - Kang, Matthew - Matias Insaurralde - Matt Kang - Nick Miyake - Pranav Pandit - Sertac Ozercan - Vladislav Ivanov - Yan Song - Yurii Rashkovskii - [@ggjulio](https://github.com/ggjulio) - [@chengjoey](https://github.com/chengjoey) - [@lomot](https://github.com/lomot) ##### Notable Changes - Default Dockerfile frontend has been updated to [1.6.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.6.0) - Remote cache export/import to the registry now supports OCI image manifest compatible format when setting `image-manifest=true` [#3724](https://github.com/moby/buildkit/issues/3724) - Local and Tar exporters now support `platform-split=false` option to merge all artifacts for multiple platforms to the same directory. [#3161](https://github.com/moby/buildkit/issues/3161) - Provenance attestation can now capture resource usage information for the system and individual build steps. This information can be written to exported attestation by setting `capture-usage=true` attestation option and is set automatically for History API records. This feature depends on CgroupV2, and some fields require kernel configured with `CONFIG_PSI` enabled. [#3860](https://github.com/moby/buildkit/issues/3860) [#3999](https://github.com/moby/buildkit/issues/3999) - `SOURCE_DATE_EPOCH` value for reproducible builds is now set as the creation timestamp when exporting image to containerd image store [#3263](https://github.com/moby/buildkit/issues/3263) - `buildctl` has new `--wait` flag to block RPCs until the connection becomes available [#3586](https://github.com/moby/buildkit/issues/3586) - WCOW support for certain actions has improved [#3783](https://github.com/moby/buildkit/issues/3783) [#3782](https://github.com/moby/buildkit/issues/3782) [#3907](https://github.com/moby/buildkit/issues/3907) [#3906](https://github.com/moby/buildkit/issues/3906) [#3545](https://github.com/moby/buildkit/issues/3545) [#3544](https://github.com/moby/buildkit/issues/3544) [#3516](https://github.com/moby/buildkit/issues/3516) [#3908](https://github.com/moby/buildkit/issues/3908) - Stargz support is out of experimental [#3637](https://github.com/moby/buildkit/issues/3637) - Creating layer blobs now uses deterministic timestamps for whiteout files when Overlay snapshotter is supported for more reproducible builds [#3981](https://github.com/moby/buildkit/issues/3981) - Source policy support now also applies to image config metadata requests. These requests can return a new source reference defined by the policy that the frontend can use in follow-up LLB requests. [#3956](https://github.com/moby/buildkit/issues/3956) [#4014](https://github.com/moby/buildkit/issues/4014) - Sourcemaps in provenance attestations and errors now allow setting the source language name [#3620](https://github.com/moby/buildkit/issues/3620) - File operations are now always platform-independent for better direct cache reuse [#3858](https://github.com/moby/buildkit/issues/3858) - When exporting an image to Containerd image store, unpack logic now works for multi-platform images by unpacking only the native platform by default [#3982](https://github.com/moby/buildkit/issues/3982) [#3983](https://github.com/moby/buildkit/issues/3983) - Cgroup namespace isolation is enabled for containers on supported systems [#4003](https://github.com/moby/buildkit/issues/4003) - New DockerUI package is provided by frontend authors who want to target `docker buildx` flags without the need to copy code from Dockerfile frontend [#3606](https://github.com/moby/buildkit/issues/3606) - Downloading image layers in the exporter can now work in parallel for different platforms [#3984](https://github.com/moby/buildkit/issues/3984) - Zstd compressed layers are now supported also with Docker-style mediatypes [#3968](https://github.com/moby/buildkit/issues/3968) - Secret environment variables can now be set using the interactive container API [#3957](https://github.com/moby/buildkit/issues/3957) - TOML buildkitd config now supports multiple units for storage limits [#3773](https://github.com/moby/buildkit/issues/3773) - gRPC API now enables reflection [#3790](https://github.com/moby/buildkit/issues/3790) - HTTP sources now have better caching for servers that handle `Accept-Encoding` differently for different HTTP methods [#3745](https://github.com/moby/buildkit/issues/3745) [#3788](https://github.com/moby/buildkit/issues/3788) - New `buildctl` commands `debug histories` and `prune-histories` [#3498](https://github.com/moby/buildkit/issues/3498) - Loading SBOM generator image can now be configured with resolve mode parameter [#3446](https://github.com/moby/buildkit/issues/3446) - Gateway frontend source image can now be set with defining named context [#3633](https://github.com/moby/buildkit/issues/3633) - Performance improvements to scanning local files for context upload [#3977](https://github.com/moby/buildkit/issues/3977) - Interactive container API now supports setting container Hostname [#3680](https://github.com/moby/buildkit/issues/3680) - History API now uses a separate Containerd namespace for its objects, fixing some issues when the same blobs are used by image store [#3833](https://github.com/moby/buildkit/issues/3833) - Make files created by Git source more deterministic [#3598](https://github.com/moby/buildkit/issues/3598) - Git source now handles URLs that define subdir and empty reference [#3596](https://github.com/moby/buildkit/issues/3596) - Remote cache export now supports `registry.insecure` option like the Image exporter [#3501](https://github.com/moby/buildkit/issues/3501) - Azure Blob storage cache export supports setting the account name as parameter [#3476](https://github.com/moby/buildkit/issues/3476) - New client APIs for configuring TLS authentication to use system certificates [#3760](https://github.com/moby/buildkit/issues/3760) - Fixes for copying Unicode filenames with local context [#3946](https://github.com/moby/buildkit/issues/3946) [#4009](https://github.com/moby/buildkit/issues/4009) - Fix the issue where some builds could fail with "missing provenance" error [#3945](https://github.com/moby/buildkit/issues/3945) - Fix lazy loaded layers reuse for cache when running parallel builds [#3109](https://github.com/moby/buildkit/issues/3109) - Fix issue with missing GC label for layers when exporting image to containerd image store [#3161](https://github.com/moby/buildkit/issues/3161) - Fix possible progressbar panic on resizing terminal window [#3967](https://github.com/moby/buildkit/issues/3967) - Fix possible "inconsistent graph state" error when running parallel cached, and no-cache builds [#3953](https://github.com/moby/buildkit/issues/3953) - Fix possible zero build step index numbers on progressbar [#3942](https://github.com/moby/buildkit/issues/3942) [#3838](https://github.com/moby/buildkit/issues/3838) - Fix possible "container does not exist" error [#3940](https://github.com/moby/buildkit/issues/3940) - Fix possible "concurrent map read and write" error [#3938](https://github.com/moby/buildkit/issues/3938) - Fix possible issue where the status stream could be missing for History record [#3937](https://github.com/moby/buildkit/issues/3937) - Fix possible data races [#4004](https://github.com/moby/buildkit/issues/4004) [#3994](https://github.com/moby/buildkit/issues/3994) [#4010](https://github.com/moby/buildkit/issues/4010) - Fix OCI layout URIs in provenance attestation [#3918](https://github.com/moby/buildkit/issues/3918) - Fix regression bug in v0.11.x OpenTelemetry trace delegation from the client [#3909](https://github.com/moby/buildkit/issues/3909) - Fix possible deadlock on network error [#3857](https://github.com/moby/buildkit/issues/3857) - Fix filtering out deleted History API records [#3827](https://github.com/moby/buildkit/issues/3827) [#3733](https://github.com/moby/buildkit/issues/3733) - Fix possible build cache reference leak [#3851](https://github.com/moby/buildkit/issues/3851) [#3815](https://github.com/moby/buildkit/issues/3815) - Fix possible FD leak in SSH forwarding [#3848](https://github.com/moby/buildkit/issues/3848) - Fix possible concurrent map access in Client library [#3813](https://github.com/moby/buildkit/issues/3813) - Fixes for Runc container SIGKILL/exit-code handling [#3754](https://github.com/moby/buildkit/issues/3754) [#3765](https://github.com/moby/buildkit/issues/3765) [#3658](https://github.com/moby/buildkit/issues/3658) [#3722](https://github.com/moby/buildkit/issues/3722) - Fix creating `oci-layout` file when exporting uncompressed OCI layout [#3729](https://github.com/moby/buildkit/issues/3729) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) ***new*** - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) ***new*** - **github.com/Masterminds/semver/v3** v3.1.0 ***new*** - **github.com/Microsoft/go-winio** v0.5.2 -> v0.6.1 - **github.com/Microsoft/hcsshim** v0.9.6 -> v0.10.0-rc.8 - **github.com/anchore/go-struct-converter** [`c68fdcf`](https://github.com/moby/buildkit/commit/c68fdcfa2092) ***new*** - **github.com/aws/aws-sdk-go-v2** v1.16.3 -> v1.17.6 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 ***new*** - **github.com/aws/smithy-go** v1.11.2 -> v1.13.5 - **github.com/containerd/cgroups** v1.0.4 -> v1.1.0 - **github.com/containerd/containerd** v1.6.14 -> v1.7.2 - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 - **github.com/containerd/fifo** v1.0.0 -> v1.1.0 - **github.com/containerd/go-cni** v1.1.6 -> v1.1.9 - **github.com/containerd/go-runc** v1.0.0 -> v1.1.0 - **github.com/containerd/nydus-snapshotter** v0.3.1 -> v0.8.2 - **github.com/containerd/stargz-snapshotter** v0.13.0 -> v0.14.3 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.1 ***new*** - **github.com/containernetworking/cni** v1.1.1 -> v1.1.2 - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/docker/cli** v23.0.0-rc.1 -> v24.0.2 - **github.com/docker/distribution** v2.8.1 -> v2.8.2 - **github.com/docker/docker** v23.0.0-rc.1 -> [`98d3da7`](https://github.com/moby/buildkit/commit/98d3da79ef9c) - **github.com/felixge/httpsnoop** v1.0.2 -> v1.0.3 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 ***new*** - **github.com/hanwen/go-fuse/v2** [`f57e95b`](https://github.com/moby/buildkit/commit/f57e95bda82d) -> v2.2.0 - **github.com/hashicorp/go-cleanhttp** v0.5.1 -> v0.5.2 - **github.com/hashicorp/go-retryablehttp** v0.7.1 -> v0.7.2 - **github.com/klauspost/compress** v1.15.12 -> v1.16.3 - **github.com/opencontainers/image-spec** [`02efb9a`](https://github.com/moby/buildkit/commit/02efb9a75ee1) -> v1.1.0-rc3 - **github.com/opencontainers/runc** v1.1.3 -> v1.1.7 - **github.com/opencontainers/runtime-spec** [`1c3f411`](https://github.com/moby/buildkit/commit/1c3f411f0417) -> v1.1.0-rc.2 - **github.com/opencontainers/selinux** v1.10.2 -> v1.11.0 - **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5 - **github.com/prometheus/common** v0.37.0 -> v0.42.0 - **github.com/prometheus/procfs** v0.8.0 -> v0.9.0 - **github.com/spdx/tools-golang** [`d6f5855`](https://github.com/moby/buildkit/commit/d6f58551be3f) -> v0.5.1 - **github.com/stretchr/testify** v1.8.0 -> v1.8.3 - **github.com/tonistiigi/fsutil** [`fb43384`](https://github.com/moby/buildkit/commit/fb433841cbfa) -> [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb) - **github.com/tonistiigi/vt100** [`8066bb9`](https://github.com/moby/buildkit/commit/8066bb97264f) -> [`f9a4f7e`](https://github.com/moby/buildkit/commit/f9a4f7ef6531) - **github.com/urfave/cli** v1.22.4 -> v1.22.12 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/jaeger** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.27.0 -> v0.37.0 - **go.opentelemetry.io/otel/sdk** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.12.0 -> v0.19.0 - **golang.org/x/mod** v0.9.0 ***new*** - **golang.org/x/tools** v0.7.0 ***new*** - **google.golang.org/genproto** [`7780775`](https://github.com/moby/buildkit/commit/7780775163c4) -> [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.50.1 -> v1.53.0 - **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.67 ***new*** - **kernel.org/pub/linux/libs/security/libcap/psx** v1.2.67 ***new*** Previous release can be found at [v0.11.6](https://github.com/moby/buildkit/releases/tag/v0.11.6) ### [`v0.11.6`](https://github.com/moby/buildkit/releases/tag/v0.11.6) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.5...v0.11.6) https://hub.docker.com/r/moby/buildkit Notable changes: - Revert previous signal handling fix to make sure no process leaks happen. The signaling issue will be fixed in the next feature release. https://github.com/moby/buildkit/pull/3757 - Update runc to v1.1.5 for security https://github.com/moby/buildkit/pull/3763 - Update containerd to v1.6.20 . Brings in fix for not writing local user/group names in differ. [#3736](https://github.com/moby/buildkit/issues/3736) - Fix possible "duplicate output 0" error on parallel builds [#3774](https://github.com/moby/buildkit/issues/3774) - Fix token management for servers that don't return proper `IssuedAt` value [#3779](https://github.com/moby/buildkit/issues/3779) - Fix SBOM and provenance processing for certain nil-result cases [#3805](https://github.com/moby/buildkit/issues/3805) ### [`v0.11.5`](https://github.com/moby/buildkit/releases/tag/v0.11.5) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.4...v0.11.5) https://hub.docker.com/r/moby/buildkit ##### Notable changes: - Fix process termination handling to Runc when running interactive processes [#3722](https://github.com/moby/buildkit/issues/3722) - Fix gateway exec tty cleanup on context.Canceled [#3658](https://github.com/moby/buildkit/issues/3658) - Register builds before recording build history to avoid possible timeout error [#3726](https://github.com/moby/buildkit/issues/3726) - Fix performance regression in creating LLB graphs [#3732](https://github.com/moby/buildkit/issues/3732) - Fix sorting of build history records for GC [#3733](https://github.com/moby/buildkit/issues/3733) - Fix an issue where linking builds with providing LLB inputs dropped the original source information for such inputs [#3678](https://github.com/moby/buildkit/issues/3678) - Fix running BuildKit on BottleRocket OS [#3697](https://github.com/moby/buildkit/issues/3697) ### [`v0.11.4`](https://github.com/moby/buildkit/releases/tag/v0.11.4) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.3...v0.11.4) https://hub.docker.com/r/moby/buildkit ##### Notable changes: ##### This release contains two security fixes. - Fix the issue where credentials inlined to Git URLs could end up in provenance attestation https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc - Containerd has been updated to 1.6.18 , fixing issue with supplementary groups not being set up properly https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p [#3651](https://github.com/moby/buildkit/issues/3651) ##### Other updates - Fix possible panic with writing annotations [#3670](https://github.com/moby/buildkit/issues/3670) - Fix possible panic with passing nil frontend input [#3659](https://github.com/moby/buildkit/issues/3659) - Fix file capabilities in merged snapshots by changing chown order [#3671](https://github.com/moby/buildkit/issues/3671) ### [`v0.11.3`](https://github.com/moby/buildkit/releases/tag/v0.11.3) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.2...v0.11.3) Welcome to the 0.11.3 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Builtin Dockerfile frontend updated to v1.5.2 - Fix not mounting optional secrets missing from build requests [#3561](https://github.com/moby/buildkit/issues/3561) - Fix an issue with Github cache backend that could cause invalid range requests [#3618](https://github.com/moby/buildkit/issues/3618) - Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 [#3605](https://github.com/moby/buildkit/issues/3605) - Fix issues with missing layer metadata in SBOMs in latest releases [#3594](https://github.com/moby/buildkit/issues/3594) - Fix possible "digest not found" error on exporting build results [#3566](https://github.com/moby/buildkit/issues/3566) - Make sure timezones are dropped on handling `SOURCE_DATE_EPOCH` [#3559](https://github.com/moby/buildkit/issues/3559) ##### Dependency Changes - **github.com/containerd/containerd** [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9) -> v1.6.16 Previous release can be found at [v0.11.2](https://github.com/moby/buildkit/releases/tag/v0.11.2) ### [`v0.11.2`](https://github.com/moby/buildkit/releases/tag/v0.11.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.1...v0.11.2) Welcome to the 0.11.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Update containerd patches to fix regression in handling push errors [#3531](https://github.com/moby/buildkit/issues/3531) - Multiple fixes for History API [#3530](https://github.com/moby/buildkit/issues/3530) - Fix issue with parallel build requests using local cache imports [#3493](https://github.com/moby/buildkit/issues/3493) ##### Dependency Changes - **github.com/containerd/containerd** v1.6.14 -> [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9) - **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5 Previous release can be found at [v0.11.1](https://github.com/moby/buildkit/releases/tag/v0.11.1) ### [`v0.11.1`](https://github.com/moby/buildkit/releases/tag/v0.11.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.0...v0.11.1) Welcome to the 0.11.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Builtin Dockerfile frontend has been updated to [1.5.1](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.1), fixing possible panic in certain warning condition [#3505](https://github.com/moby/buildkit/issues/3505) - Fix possible hang when closing down the SSH forwarding socket in v0.11.0 [#3506](https://github.com/moby/buildkit/issues/3506) - Fix typo in an environment variable used to configure OpenTelemetry endpoints [#3508](https://github.com/moby/buildkit/issues/3508) </details> <details> <summary>opencontainers/image-spec</summary> ### [`v1.1.0`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc6...v1.1.0) Vote Passed `[+7-0]` - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag **Release PR** : https://github.com/opencontainers/image-spec/pull/1161 **Full Changelog**: https://github.com/opencontainers/image-spec/compare/v1.0.2...v1.1.0 Associated Distribution Specification Release - https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.0 ### [`v1.1.0-rc6`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc6) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc5...v1.1.0-rc6) Vote passed \[+6 -0] - https://groups.google.com/a/opencontainers.org/g/dev/c/HOxZlfhr9-o For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1157 ### [`v1.1.0-rc5`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc5) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5) For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1109 Vote - https://groups.google.com/a/opencontainers.org/g/dev/c/KIwyzExcjZ8 ### [`v1.1.0-rc4`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc4) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc3...v1.1.0-rc4) Vote passed \[+6 -0]: https://groups.google.com/a/opencontainers.org/g/dev/c/gPgzESGb7xs For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1080 </details> <details> <summary>rs/zerolog</summary> ### [`v1.32.0`](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0) ### [`v1.31.0`](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0) ### [`v1.30.0`](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0) ### [`v1.29.1`](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1) [Compare Source](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1) ### [`v1.29.0`](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0) </details> <details> <summary>sergi/go-diff</summary> ### [`v1.3.1`](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1) [Compare Source](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1) ### [`v1.3.0`](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0) [Compare Source](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0) </details> <details> <summary>sirupsen/logrus</summary> ### [`v1.9.3`](https://github.com/sirupsen/logrus/releases/tag/v1.9.3) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3) - Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines https://github.com/sirupsen/logrus/commit/f9291a534cac1466d26414fd9e326381cd64ecef (re-apply https://github.com/sirupsen/logrus/pull/1376) - Fix panic in Writer https://github.com/sirupsen/logrus/commit/d40e25cd45ed9c6b2b66e6b97573a0413e4c23bd **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3 ### [`v1.9.2`](https://github.com/sirupsen/logrus/releases/tag/v1.9.2) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2) - Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1 **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2 ### [`v1.9.1`](https://github.com/sirupsen/logrus/releases/tag/v1.9.1) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1) #### What's Changed - Fix data race in hooks.test package by [@FrancoisWagner](https://github.com/FrancoisWagner) in https://github.com/sirupsen/logrus/pull/1362 - Add instructions to use different log levels for local and syslog by [@tommyblue](https://github.com/tommyblue) in https://github.com/sirupsen/logrus/pull/1372 - This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by [@ozfive](https://github.com/ozfive) in https://github.com/sirupsen/logrus/pull/1376 - Use text when shows the logrus output by [@xieyuschen](https://github.com/xieyuschen) in https://github.com/sirupsen/logrus/pull/1339 #### New Contributors - [@FrancoisWagner](https://github.com/FrancoisWagner) made their first contribution in https://github.com/sirupsen/logrus/pull/1362 - [@tommyblue](https://github.com/tommyblue) made their first contribution in https://github.com/sirupsen/logrus/pull/1372 - [@ozfive](https://github.com/ozfive) made their first contribution in https://github.com/sirupsen/logrus/pull/1376 - [@xieyuschen](https://github.com/xieyuschen) made their first contribution in https://github.com/sirupsen/logrus/pull/1339 **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1 </details> <details> <summary>spf13/cobra</summary> ### [`v1.8.0`](https://github.com/spf13/cobra/releases/tag/v1.8.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0) #### ✨ Features - Support usage as plugin for tools like kubectl by [@nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.) - Move documentation sources to site/content by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1428 - Add 'one required flag' group by [@marevers](https://github.com/marevers) in https://github.com/spf13/cobra/pull/1952 - this includes a new `MarkFlagsOneRequired` API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked. - Customizable error message prefix by [@5ouma](https://github.com/5ouma) in https://github.com/spf13/cobra/pull/2023 - This adds the `SetErrPrefix` and `ErrPrefix` APIs on the `Command` struct to allow for setting a custom prefix for errors - feat: add getters for flag completions by [@avirtopeanu-ionos](https://github.com/avirtopeanu-ionos) in https://github.com/spf13/cobra/pull/1943 - Feature: allow running persistent run hooks of all parents by [@vkhoroz](https://github.com/vkhoroz) in https://github.com/spf13/cobra/pull/2044 - Improve API to get flag completion function by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2063 #### 🐛 Bug fixes - Fix typo in fish completions by [@twpayne](https://github.com/twpayne) in https://github.com/spf13/cobra/pull/1945 - Fix grammar: 'allows to' by [@supertassu](https://github.com/supertassu) in https://github.com/spf13/cobra/pull/1978 - powershell: escape variable with curly brackets by [@Luap99](https://github.com/Luap99) in https://github.com/spf13/cobra/pull/1960 - Don't complete --help flag when flag parsing disabled by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2061 - Replace all non-alphanumerics in active help env var program prefix by [@scop](https://github.com/scop) in https://github.com/spf13/cobra/pull/1940 #### 🔧 Maintenance - build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1971 - build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1976 - build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2021 - build(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1934 - build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2047 - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2028 - command: temporarily disable G602 due to [securego/gosec#1005](https://github.com/securego/gosec/issues/1005) by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/2022 #### 🧪 Testing & CI/CD - test: make fish_completions_test more robust by [@branchvincent](https://github.com/branchvincent) in https://github.com/spf13/cobra/pull/1980 - golangci: enable 'unused' and disable deprecated replaced by it by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1983 - cleanup: minor corrections to unit tests by [@JunNishimura](https://github.com/JunNishimura) in https://github.com/spf13/cobra/pull/2003 - ci: test golang 1.21 by [@nunoadrego](https://github.com/nunoadrego) in https://github.com/spf13/cobra/pull/2024 - Fix linter errors by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2052 - Add tests for flag completion registration by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2053 #### ✏️ Documentation - doc: fix typo, Deperecated -> Deprecated by [@callthingsoff](https://github.com/callthingsoff) in https://github.com/spf13/cobra/pull/2000 - Add notes to doc about the execution condition of \*PreRun and \*PostRun functions by [@haoming29](https://github.com/haoming29) in https://github.com/spf13/cobra/pull/2041 *** Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0 ### [`v1.7.0`](https://github.com/spf13/cobra/releases/tag/v1.7.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0) ##### ✨ Features - Allow to preserve ordering of completions in `bash`, `zsh`, `pwsh`, & `fish`: [@h4ck3rk3y](https://github.com/h4ck3rk3y) [#1903](https://github.com/spf13/cobra/issues/1903) - Add support for PowerShell 7.2+ in completions: [@oldium](https://github.com/oldium) [#1916](https://github.com/spf13/cobra/issues/1916) - Allow sourcing zsh completion script: [@marckhouzam](https://github.com/marckhouzam) [#1917](https://github.com/spf13/cobra/issues/1917) ##### 🐛 Bug fixes - Don't remove flag values that match sub-command name: [@brianpursley](https://github.com/brianpursley) [#1781](https://github.com/spf13/cobra/issues/1781) - Fix powershell completions not returning single word: [@totkeks](https://github.com/totkeks) [#1850](https://github.com/spf13/cobra/issues/1850) - Remove masked `template` import variable name: [@yashLadha](https://github.com/yashLadha) [#1879](https://github.com/spf13/cobra/issues/1879) - Correctly detect completions with dash in argument: [@oncilla](https://github.com/oncilla) [#1817](https://github.com/spf13/cobra/issues/1817) ##### 🧪 Testing & CI/CD - Deprecate Go 1.15 in CI: [@umarcor](https://github.com/umarcor) [#1866](https://github.com/spf13/cobra/issues/1866) - Deprecate Go 1.16 in CI: [@umarcor](https://github.com/umarcor) [#1926](https://github.com/spf13/cobra/issues/1926) - Add testing for Go 1.20 in CI: [@umarcor](https://github.com/umarcor) [#1925](https://github.com/spf13/cobra/issues/1925) - Add tests to illustrate unknown flag bug: [@brianpursley](https://github.com/brianpursley) [#1854](https://github.com/spf13/cobra/issues/1854) ##### 🔧 Maintenance - Update main image to better handle dark backgrounds: [@Deleplace](https://github.com/Deleplace) and [@marckhouzam](https://github.com/marckhouzam) [#1883](https://github.com/spf13/cobra/issues/1883) - Fix `stale.yaml` mispellings: [@enrichman](https://github.com/enrichman) [#1863](https://github.com/spf13/cobra/issues/1863) - Remove stale bot from GitHub actions: [@jpmcb](https://github.com/jpmcb) [#1908](https://github.com/spf13/cobra/issues/1908) - Add makefile target for installing dependencies: [@umarcor](https://github.com/umarcor) [#1865](https://github.com/spf13/cobra/issues/1865) - Add Sia to projects using Cobra: [@mike76-dev](https://github.com/mike76-dev) [#1844](https://github.com/spf13/cobra/issues/1844) - Add `Vitess` and `Arewefastyet` to projects using cobra: [@frouioui](https://github.com/frouioui) [#1932](https://github.com/spf13/cobra/issues/1932) - Fixup for Kubescape github org: [@dwertent](https://github.com/dwertent) [#1874](https://github.com/spf13/cobra/issues/1874) - Fix route for GitHub workflows badge: [@sh-cho](https://github.com/sh-cho) [#1884](https://github.com/spf13/cobra/issues/1884) - Fixup for GoDoc style documentation: [@yashLadha](https://github.com/yashLadha) [#1885](https://github.com/spf13/cobra/issues/1885) - Various bash scripting improvements for completion: [@scop](https://github.com/scop) [#1702](https://github.com/spf13/cobra/issues/1702) - Add Constellation to projects using Cobra: [@datosh](https://github.com/datosh) [#1829](https://github.com/spf13/cobra/issues/1829) ##### ✏️ Documentation - Add documentation about disabling completion descriptions: [@Shihta](https://github.com/Shihta) [#1901](https://github.com/spf13/cobra/issues/1901) - Improve `MarkFlagsMutuallyExclusive` example in user guide: [@janhn](https://github.com/janhn) [#1904](https://github.com/spf13/cobra/issues/1904) - Update `shell_completions.md`: [@gusega](https://github.com/gusega) [#1907](https://github.com/spf13/cobra/issues/1907) - Update copywrite year: [@umarcor](https://github.com/umarcor) [#1927](https://github.com/spf13/cobra/issues/1927) - Document suggested layout of subcommands: [@lcarva](https://github.com/lcarva) [#1930](https://github.com/spf13/cobra/issues/1930) - Replace deprecated ExactValidArgs with MatchAll in doc: [@doniacld](https://github.com/doniacld) [#1836](https://github.com/spf13/cobra/issues/1836) *** This release contains several long running fixes, improvements to powershell completions, and further optimizations for completions. Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you! 🐍 Full changelog: https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0 </details> <details> <summary>spf13/viper</summary> ### [`v1.18.2`](https://github.com/spf13/viper/releases/tag/v1.18.2) [Compare Source](https://github.com/spf13/viper/compare/v1.18.1...v1.18.2) **tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.** This release fixes a regression that appears in rare circumstances when using `Unmarshal` or `UnmarshalExact` to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs. The feature is now disabled by default and can be enabled using the `viper_bind_struct` build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future. #### What's Changed ##### Bug Fixes 🐛 - feat!: hide struct binding behind a feature flag by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1715 **Full Changelog**: https://github.com/spf13/viper/compare/v1.18.1...v1.18.2 ### [`v1.18.1`](https://github.com/spf13/viper/releases/tag/v1.18.1) [Compare Source](https://github.com/spf13/viper/compare/v1.18.0...v1.18.1)  #### What's Changed ##### Bug Fixes 🐛 - Merge missing struct keys inside UnmarshalExact by [@krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1704 **Full Changelog**: https://github.com/spf13/viper/compare/v1.18.0...v1.18.1 ### [`v1.18.0`](https://github.com/spf13/viper/releases/tag/v1.18.0) [Compare Source](https://github.com/spf13/viper/compare/v1.17.0...v1.18.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### `AutomaticEnv` works with `Unmarshal` Previously, environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#761](https://github.com/spf13/viper/issues/761)) [#1429](https://github.com/spf13/viper/issues/1429) introduced a solution that solves that issue. #### What's Changed ##### Enhancements 🚀 - chore: rename files according to enabled build tags by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1642 - test: replace ifs with asserts to simplify tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1656 - ci: enable test shuffle and fix tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1643 - fix: gocritic lint issues by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1696 ##### Bug Fixes 🐛 - Implement viper.BindStruct for automatic unmarshalling from environment variables by [@krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1429 - fix isPathShadowedInFlatMap type cast bug by [@linuxsong](https://github.com/linuxsong) in https://github.com/spf13/viper/pull/1585 ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1661 - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1659 - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1663 - build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1686 - build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1688 - build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1692 - build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1690 - build(deps): bump cachix/install-nix-action from 23 to 24 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1689 - build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1672 - build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1691 - build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1668 - chore: update dependencies by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1694 - chore: update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1701 ##### Other Changes - Add info about multiple hosts for remote config by [@KaymeKaydex](https://github.com/KaymeKaydex) in https://github.com/spf13/viper/pull/1684 - refactor: drop fsonitfy wrapper by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1693 - Note Get\* behavior on parse failure by [@scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1687 - fix: godot lint issues by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1657 #### New Contributors - [@KaymeKaydex](https://github.com/KaymeKaydex) made their first contribution in https://github.com/spf13/viper/pull/1684 - [@krakowski](https://github.com/krakowski) made their first contribution in https://github.com/spf13/viper/pull/1429 - [@linuxsong](https://github.com/linuxsong) made their first contribution in https://github.com/spf13/viper/pull/1585 **Full Changelog**: https://github.com/spf13/viper/compare/v1.17.0...v1.18.0 ### [`v1.17.0`](https://github.com/spf13/viper/releases/tag/v1.17.0) [Compare Source](https://github.com/spf13/viper/compare/v1.16.0...v1.17.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### Minimum Go version: 1.19 Viper now requires Go 1.19 This change ensures we can stay up to date with modern practices and dependencies. ##### `log/slog` support **\[BREAKING]** Viper [v1.11.0](https://github.com/spf13/viper/releases/tag/v1.11.0) added an experimental `Logger` interface to allow custom implementations (besides [jwalterweatherman](https://github.com/spf13/jwalterweatherman)). In addition, it also exposed an experimental `WithLogger` function allowing to set a custom logger. This release deprecates that interface in favor of [log/slog](https://pkg.go.dev/log/slog) released in Go 1.21. > \[!WARNING] > `WithLogger` accepts an [\*slog.Logger](https://pkg.go.dev/log/slog#Logger) from now on. To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a [\*golang.org/x/exp/slog.Logger](https://pkg.go.dev/golang.org/x/exp/slog#Logger). The experimental flag is removed. ##### New finder implementation **\[BREAKING]** As of this release, Viper uses a new library to look for files, called [locafero](https://github.com/sagikazarmark/locafero). The new library is better covered by tests and has been built from scratch as a general purpose file finder library. The implementation is experimental and is hidden behind a `finder` build tag. > \[!WARNING] > The `io/fs` based implementation (that used to be hidden behind a `finder` build tag) has been removed. #### What's Changed ##### Exciting New Features 🎉 - Add NATS support by [@hooksie1](https://github.com/hooksie1) in https://github.com/spf13/viper/pull/1590 - Add slog support by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1627 ##### Enhancements 🚀 - chore: add local development environment using nix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1572 - feat: add func GetEnvPrefix by [@baruchiro](https://github.com/baruchiro) in https://github.com/spf13/viper/pull/1565 - Improve dev env by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1575 - fix: code optimization by [@testwill](https://github.com/testwill) in https://github.com/spf13/viper/pull/1557 - test: remove not needed testutil.Setenv by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1610 - new finder library based on afero by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1625 - refactor: make use of `strings.Cut` by [@scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1650 ##### Breaking Changes 🛠 - feat: drop support for Go 1.17 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1574 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 4 to 5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1563 - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1558 - build(deps): bump cachix/install-nix-action from 21 to 22 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1573 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1586 - chore: upgrade crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1589 - build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1616 - build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1615 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1614 - build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1605 - build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1604 - build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1593 - build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1603 - build(deps): bump cachix/install-nix-action from 22 to 23 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1620 - chore(deps): update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1621 - build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1623 - Bump minimum Go version to 1.19 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1626 - build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1632 - build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1634 - build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1641 - build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1640 - build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1638 - build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1648 - chore(deps): update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1652 ##### Other Changes - \[StepSecurity] ci: Harden GitHub Actions by [@step-security-bot](https://github.com/step-security-bot) in https://github.com/spf13/viper/pull/1592 - Add Vitess to list of projects using Viper by [@systay](https://github.com/systay) in https://github.com/spf13/viper/pull/1619 - docs: fix typos in comments by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1609 - ci: add Go 1.21 to the test matrix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1622 - Remove usages of deprecated io/ioutil; simplify viper tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1631 - chore: remove deprecated build tags by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1630 - refactor: replace 'interface{}' with 'any' by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1646 - test: refactor asserts by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1644 - docs: add set subset KV example by [@yhliyr](https://github.com/yhliyr) in https://github.com/spf13/viper/pull/1647 - Make deps fixes by [@bersace](https://github.com/bersace) in https://github.com/spf13/viper/pull/1628 #### New Contributors - [@goldeneggg](https://github.com/goldeneggg) made their first contribution in https://github.com/spf13/viper/pull/1561 - [@baruchiro](https://github.com/baruchiro) made their first contribution in https://github.com/spf13/viper/pull/1565 - [@testwill](https://github.com/testwill) made their first contribution in https://github.com/spf13/viper/pull/1557 - [@step-security-bot](https://github.com/step-security-bot) made their first contribution in https://github.com/spf13/viper/pull/1592 - [@systay](https://github.com/systay) made their first contribution in https://github.com/spf13/viper/pull/1619 - [@alexandear](https://github.com/alexandear) made their first contribution in https://github.com/spf13/viper/pull/1609 - [@hooksie1](https://github.com/hooksie1) made their first contribution in https://github.com/spf13/viper/pull/1590 - [@yhliyr](https://github.com/yhliyr) made their first contribution in https://github.com/spf13/viper/pull/1647 - [@bersace](https://github.com/bersace) made their first contribution in https://github.com/spf13/viper/pull/1628 - [@scop](https://github.com/scop) made their first contribution in https://github.com/spf13/viper/pull/1650 **Full Changelog**: https://github.com/spf13/viper/compare/v1.16.0...v1.17.0 ### [`v1.16.0`](https://github.com/spf13/viper/releases/tag/v1.16.0) [Compare Source](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0)  #### What's Changed ##### Enhancements 🚀 - Sub parent inheritance by [@TaylorOno](https://github.com/TaylorOno) in https://github.com/spf13/viper/pull/1056 - fix: fix typo by [@yquansah](https://github.com/yquansah) in https://github.com/spf13/viper/pull/1523 - ci: add Go 1.20 to build matrix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1506 - extend v.find() to handle stringToInt value types with stringToInt pflag [#1435](https://github.com/spf13/viper/issues/1435) by [@vorishirne](https://github.com/vorishirne) in https://github.com/spf13/viper/pull/1462 - add:viper: allow to disable internal log messages by [@burgesQ](https://github.com/burgesQ) in https://github.com/spf13/viper/pull/1483 - Allow ConfigParseError to unwrap by [@andig](https://github.com/andig) in https://github.com/spf13/viper/pull/1433 ##### Bug Fixes 🐛 - fix: time.Duration slice type conversion by [@UrbanskiDawid](https://github.com/UrbanskiDawid) in https://github.com/spf13/viper/pull/1498 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1533 - build(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1526 - build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1519 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1516 - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1515 - build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1518 - build(deps): bump github.com/sagikazarmark/crypt from 0.9.0 to 0.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1550 - build(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1551 - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1553 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.7 to 2.0.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1555 ##### Other Changes - Update main image to better handle dark background by [@Deleplace](https://github.com/Deleplace) in https://github.com/spf13/viper/pull/1532 #### New Contributors - [@UrbanskiDawid](https://github.com/UrbanskiDawid) made their first contribution in https://github.com/spf13/viper/pull/1498 - [@TaylorOno](https://github.com/TaylorOno) made their first contribution in https://github.com/spf13/viper/pull/1056 - [@yquansah](https://github.com/yquansah) made their first contribution in https://github.com/spf13/viper/pull/1523 - [@Azanul](https://github.com/Azanul) made their first contribution in https://github.com/spf13/viper/pull/1544 - [@Deleplace](https://github.com/Deleplace) made their first contribution in https://github.com/spf13/viper/pull/1532 - [@cfabianski](https://github.com/cfabianski) made their first contribution in https://github.com/spf13/viper/pull/1552 - [@vorishirne](https://github.com/vorishirne) made their first contribution in https://github.com/spf13/viper/pull/1462 - [@burgesQ](https://github.com/burgesQ) made their first contribution in https://github.com/spf13/viper/pull/1483 - [@andig](https://github.com/andig) made their first contribution in https://github.com/spf13/viper/pull/1433 **Full Changelog**: https://github.com/spf13/viper/compare/v1.15.0...v1.16.0 ### [`v1.15.0`](https://github.com/spf13/viper/releases/tag/v1.15.0) [Compare Source](https://github.com/spf13/viper/compare/v1.14.0...v1.15.0)  #### What's Changed ##### Exciting New Features 🎉 - feat: add multiple endpoints support for remote by [@mozartz](https://github.com/mozartz) in https://github.com/spf13/viper/pull/1464 ##### Enhancements 🚀 - Add DocBlock to WatchConfig by [@glebik000](https://github.com/glebik000) in https://github.com/spf13/viper/pull/1467 ##### Breaking Changes 🛠 - Drop YAML v2 and TOML v1 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1493 - Drop support for Go 1.16 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1494 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.9.2 to 1.9.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1465 - build(deps): bump github.com/magiconair/properties from 1.8.6 to 1.8.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1475 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.5 to 2.0.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1466 - build(deps): bump mheap/github-action-required-labels from 2 to 3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1482 - build(deps): bump github.com/subosito/gotenv from 1.4.1 to 1.4.2 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1488 - build(deps): bump github.com/sagikazarmark/crypt from 0.8.0 to 0.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1490 #### New Contributors - [@choar816](https://github.com/choar816) made their first contribution in https://github.com/spf13/viper/pull/1481 - [@lol768](https://github.com/lol768) made their first contribution in https://github.com/spf13/viper/pull/1485 - [@mozartz](https://github.com/mozartz) made their first contribution in https://github.com/spf13/viper/pull/1464 - [@glebik000](https://github.com/glebik000) made their first contribution in https://github.com/spf13/viper/pull/1467 **Full Changelog**: https://github.com/spf13/viper/compare/v1.14.0...v1.15.0 </details> <details> <summary>stretchr/testify</summary> ### [`v1.9.0`](https://github.com/stretchr/testify/releases/tag/v1.9.0) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0) #### What's Changed - Fix Go modules version by [@SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1394 - Document that require is not safe to call in created goroutines by [@programmer04](https://github.com/programmer04) in https://github.com/stretchr/testify/pull/1392 - Remove myself from MAINTAINERS.md by [@mvdkleijn](https://github.com/mvdkleijn) in https://github.com/stretchr/testify/pull/1367 - Correct spelling/grammar by [@echarrod](https://github.com/echarrod) in https://github.com/stretchr/testify/pull/1389 - docs: Update URLs in README by [@davidjb](https://github.com/davidjb) in https://github.com/stretchr/testify/pull/1349 - Update mockery link to Github Pages in README by [@LandonTClipp](https://github.com/LandonTClipp) in https://github.com/stretchr/testify/pull/1346 - docs: Fix typos in tests and comments by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1410 - CI: tests from go1.17 by [@SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1409 - Fix adding ? when no values passed by [@lesichkovm](https://github.com/lesichkovm) in https://github.com/stretchr/testify/pull/1320 - codegen: use standard header for generated files by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1406 - mock: AssertExpectations log reason only on failure by [@hikyaru-suzuki](https://github.com/hikyaru-suzuki) in https://github.com/stretchr/testify/pull/1360 - assert: fix flaky TestNeverTrue by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1417 - README: fix typos "set up" vs "setup" by [@ossan-dev](https://github.com/ossan-dev) in https://github.com/stretchr/testify/pull/1428 - mock: move regexp compilation outside of `Called` by [@aud10slave](https://github.com/aud10slave) in https://github.com/stretchr/testify/pull/631 - assert: refactor internal func getLen() by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1445 - mock: deprecate type AnythingOfTypeArgument ([#1434](https://github.com/stretchr/testify/issues/1434)) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1441 - Remove no longer needed assert.canConvert by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1470 - assert: ObjectsAreEqual: use time.Equal for time.Time types by [@tscales](https://github.com/tscales) in https://github.com/stretchr/testify/pull/1464 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1466 - Bump actions/setup-go from 3.2.0 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1451 - fix: make EventuallyWithT concurrency safe by [@czeslavo](https://github.com/czeslavo) in https://github.com/stretchr/testify/pull/1395 - assert: fix httpCode and HTTPBody occur panic when http.Handler read Body by [@hidu](https://github.com/hidu) in https://github.com/stretchr/testify/pull/1484 - assert.EqualExportedValues: fix handling of arrays by [@zrbecker](https://github.com/zrbecker) in https://github.com/stretchr/testify/pull/1473 - .github: use latest Go versions by [@kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1489 - assert: Deprecate EqualExportedValues by [@HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1488 - suite: refactor test assertions by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1474 - suite: fix SetupSubTest and TearDownSubTest execution order by [@linusbarth](https://github.com/linusbarth) in https://github.com/stretchr/testify/pull/1471 - docs: Fix deprecation comments for http package by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1335 - Add map support doc comments to Subset and NotSubset by [@jedevc](https://github.com/jedevc) in https://github.com/stretchr/testify/pull/1306 - TestErrorIs/TestNotErrorIs: check error message contents by [@craig65535](https://github.com/craig65535) in https://github.com/stretchr/testify/pull/1435 - suite: fix subtest names (fix [#1501](https://github.com/stretchr/testify/issues/1501)) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1504 - assert: improve unsafe.Pointer tests by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1505 - assert: simplify isNil implementation by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1506 - assert.InEpsilonSlice: fix expected/actual order and other improvements by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1483 - Fix dependency cycle with objx [#1292](https://github.com/stretchr/testify/issues/1292) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1453 - mock: refactor TestIsArgsEqual by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1444 - mock: optimize argument matching checks by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1416 - assert: fix TestEventuallyTimeout by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1412 - CI: add go 1.21 in GitHub Actions by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1450 - suite: fix recoverAndFailOnPanic to report test failure at the right location by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1502 - Update maintainers by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1533 - assert: Fix EqualValues to handle overflow/underflow by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1531 - assert: better formatting for Len() error by [@kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1485 - Ensure AssertExpectations does not fail in skipped tests by [@ianrose14](https://github.com/ianrose14) in https://github.com/stretchr/testify/pull/1331 - suite: fix deadlock in suite.Require()/Assert() by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1535 - Revert "assert: ObjectsAreEqual: use time.Equal for time.Time type" by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1537 - \[chore] Add issue templates by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1538 - Update the build status badge by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1540 - Update Github workflows setup-go to V5 by [@hendrywiranto](https://github.com/hendrywiranto) in https://github.com/stretchr/testify/pull/1545 - Support Pointer to Struct in EqualExportedValues by [@Lucaber](https://github.com/Lucaber) in https://github.com/stretchr/testify/pull/1517 - README: drop link to gorc by [@guettli](https://github.com/guettli) in https://github.com/stretchr/testify/pull/1248 - http_assertions: honour the msgAndArgs provided with each assertion by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1548 - fix typos in comments and tests by [@ccoVeille](https://github.com/ccoVeille) in https://github.com/stretchr/testify/pull/1247 - Include the auto-release notes in releases by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1550 - Add `NotImplements` and variants by [@hslatman](https://github.com/hslatman) in https://github.com/stretchr/testify/pull/1385 - Add support to compare uintptr by [@bogdandrutu](https://github.com/bogdandrutu) in https://github.com/stretchr/testify/pull/1339 - build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1552 #### New Contributors - [@SuperQ](https://github.com/SuperQ) made their first contribution in https://github.com/stretchr/testify/pull/1394 - [@programmer04](https://github.com/programmer04) made their first contribution in https://github.com/stretchr/testify/pull/1392 - [@echarrod](https://github.com/echarrod) made their first contribution in https://github.com/stretchr/testify/pull/1389 - [@davidjb](https://github.com/davidjb) made their first contribution in https://github.com/stretchr/testify/pull/1349 - [@LandonTClipp](https://github.com/LandonTClipp) made their first contribution in https://github.com/stretchr/testify/pull/1346 - [@alexandear](https://github.com/alexandear) made their first contribution in https://github.com/stretchr/testify/pull/1410 - [@lesichkovm](https://github.com/lesichkovm) made their first contribution in https://github.com/stretchr/testify/pull/1320 - [@dolmen](https://github.com/dolmen) made their first contribution in https://github.com/stretchr/testify/pull/1406 - [@hikyaru-suzuki](https://github.com/hikyaru-suzuki) made their first contribution in https://github.com/stretchr/testify/pull/1360 - [@ossan-dev](https://github.com/ossan-dev) made their first contribution in https://github.com/stretchr/testify/pull/1428 - [@aud10slave](https://github.com/aud10slave) made their first contribution in https://github.com/stretchr/testify/pull/631 - [@tscales](https://github.com/tscales) made their first contribution in https://github.com/stretchr/testify/pull/1464 - [@czeslavo](https://github.com/czeslavo) made their first contribution in https://github.com/stretchr/testify/pull/1395 - [@hidu](https://github.com/hidu) made their first contribution in https://github.com/stretchr/testify/pull/1484 - [@zrbecker](https://github.com/zrbecker) made their first contribution in https://github.com/stretchr/testify/pull/1473 - [@kevinburkesegment](https://github.com/kevinburkesegment) made their first contribution in https://github.com/stretchr/testify/pull/1489 - [@linusbarth](https://github.com/linusbarth) made their first contribution in https://github.com/stretchr/testify/pull/1471 - [@jedevc](https://github.com/jedevc) made their first contribution in https://github.com/stretchr/testify/pull/1306 - [@craig65535](https://github.com/craig65535) made their first contribution in https://github.com/stretchr/testify/pull/1435 - [@arjunmahishi](https://github.com/arjunmahishi) made their first contribution in https://github.com/stretchr/testify/pull/1531 - [@ianrose14](https://github.com/ianrose14) made their first contribution in https://github.com/stretchr/testify/pull/1331 - [@hendrywiranto](https://github.com/hendrywiranto) made their first contribution in https://github.com/stretchr/testify/pull/1545 - [@Lucaber](https://github.com/Lucaber) made their first contribution in https://github.com/stretchr/testify/pull/1517 - [@guettli](https://github.com/guettli) made their first contribution in https://github.com/stretchr/testify/pull/1248 - [@ccoVeille](https://github.com/ccoVeille) made their first contribution in https://github.com/stretchr/testify/pull/1247 - [@hslatman](https://github.com/hslatman) made their first contribution in https://github.com/stretchr/testify/pull/1385 - [@bogdandrutu](https://github.com/bogdandrutu) made their first contribution in https://github.com/stretchr/testify/pull/1339 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0 ### [`v1.8.4`](https://github.com/stretchr/testify/releases/tag/v1.8.4) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4) #### What's Changed - Create GitHub release when new release tag is pushed by [@aldas](https://github.com/aldas) in https://github.com/stretchr/testify/pull/1354 #### New Contributors - [@aldas](https://github.com/aldas) made their first contribution in https://github.com/stretchr/testify/pull/1354 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4 ### [`v1.8.3`](https://github.com/stretchr/testify/releases/tag/v1.8.3) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3) #### What's Changed - Compare public elements of struct by [@mchlp](https://github.com/mchlp) in https://github.com/stretchr/testify/pull/1309 - assert: fix error message formatting for NotContains by [@wwade](https://github.com/wwade) in https://github.com/stretchr/testify/pull/1362 - allow testing for functional options by [@nbaztec](https://github.com/nbaztec) in https://github.com/stretchr/testify/pull/1023 - add EventuallyWithT assertion by [@tobikris](https://github.com/tobikris) in https://github.com/stretchr/testify/pull/1264 - EqualExportedValues: Handle nested pointer, slice and map fields by [@HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1379 #### New Contributors - [@mchlp](https://github.com/mchlp) made their first contribution in https://github.com/stretchr/testify/pull/1309 - [@wwade](https://github.com/wwade) made their first contribution in https://github.com/stretchr/testify/pull/1362 - [@nbaztec](https://github.com/nbaztec) made their first contribution in https://github.com/stretchr/testify/pull/1023 - [@tobikris](https://github.com/tobikris) made their first contribution in https://github.com/stretchr/testify/pull/1264 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3 </details> <details> <summary>grpc/grpc-go</summary> ### [`v1.63.0`](https://github.com/grpc/grpc-go/releases/tag/v1.63.0): Release 1.63.0 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.2...v1.63.0) ### Behavior Changes - grpc: Return canonical target string from `resolver.Address.String()` (experimental) ([#6923](https://github.com/grpc/grpc-go/issues/6923)) - client & server: when using write buffer pooling, use input value for buffer size instead of size\*2 ([#6983](https://github.com/grpc/grpc-go/issues/6983)) - Special Thanks: [@raghav-stripe](https://github.com/raghav-stripe) ### New Features - grpc: add `ClientConn.CanonicalTarget()` to return the canonical target string. ([#7006](https://github.com/grpc/grpc-go/issues/7006)) - xds: implement LRS named metrics support ([gRFC A64](https://github.com/grpc/proposal/blob/master/A64-lrs-custom-metrics.md)) ([#7027](https://github.com/grpc/grpc-go/issues/7027)) - Special Thanks: [@danielzhaotongliu](https://github.com/danielzhaotongliu) - grpc: introduce `grpc.NewClient` to allow users to create new clients in idle mode and with "dns" as the default resolver ([#7010](https://github.com/grpc/grpc-go/issues/7010)) - Special Thanks: [@bruuuuuuuce](https://github.com/bruuuuuuuce) ### API Changes - grpc: stabilize experimental method `ClientConn.Target()` ([#7006](https://github.com/grpc/grpc-go/issues/7006)) ### Bug Fixes - xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server ([#7026](https://github.com/grpc/grpc-go/issues/7026)) - server: Fix some errors returned by a server when using a `grpc.Server` as an `http.Handler` with the Go stdlib HTTP server ([#6989](https://github.com/grpc/grpc-go/issues/6989)) - resolver/dns: add `SetResolvingTimeout` to allow configuring the DNS resolver's global timeout ([#6917](https://github.com/grpc/grpc-go/issues/6917)) - Special Thanks: [@and1truong](https://github.com/and1truong) - Set the security level of Windows named pipes to NoSecurity ([#6956](https://github.com/grpc/grpc-go/issues/6956)) - Special Thanks: [@irsl](https://github.com/irsl) ### [`v1.62.2`](https://github.com/grpc/grpc-go/releases/tag/v1.62.2): Release 1.62.2 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.62.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.62.1`](https://github.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1) ### Bug Fixes - xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#6997](https://github.com/grpc/grpc-go/issues/6997)) - server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#6766](https://github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@hueypark](https://github.com/hueypark) - grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#6766](https://github.com/grpc/grpc-go/is </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

kjuulh force-pushed renovate/all from 83be5837c2 to e3e8eafbc0

2023-01-13 14:07:19 +01:00

Compare

kjuulh changed title from ~~fix(deps): update module google.golang.org/grpc to v1.52.0~~ to fix(deps): update all dependencies

2023-01-13 14:07:20 +01:00

kjuulh force-pushed renovate/all from e3e8eafbc0 to 4929a594dd

2023-01-18 13:59:36 +01:00

Compare

kjuulh force-pushed renovate/all from 4929a594dd to 779d92e0e9

2023-01-19 17:19:00 +01:00

Compare

kjuulh force-pushed renovate/all from 779d92e0e9 to 5d058d0dc4

2023-01-20 13:49:37 +01:00

Compare

kjuulh force-pushed renovate/all from 5d058d0dc4 to b4f122abbe

2023-01-23 20:52:37 +01:00

Compare

kjuulh force-pushed renovate/all from b4f122abbe to 4030ea5769

2023-01-24 21:49:15 +01:00

Compare

kjuulh force-pushed renovate/all from 4030ea5769 to 90b8aa2f38

2023-01-24 22:34:36 +01:00

Compare

kjuulh force-pushed renovate/all from 90b8aa2f38 to e531935494

2023-01-25 21:46:15 +01:00

Compare

kjuulh force-pushed renovate/all from e531935494 to 8298a656d7

2023-01-26 17:55:53 +01:00

Compare

kjuulh force-pushed renovate/all from 8298a656d7 to 8626a6bcac

2023-01-26 19:57:05 +01:00

Compare

kjuulh force-pushed renovate/all from 8626a6bcac to d2cd406bfa

2023-01-26 21:20:30 +01:00

Compare

kjuulh force-pushed renovate/all from d2cd406bfa to d9323e2545

2023-01-27 16:43:40 +01:00

Compare

kjuulh force-pushed renovate/all from d9323e2545 to 3238c1c834

2023-01-28 19:37:58 +01:00

Compare

kjuulh force-pushed renovate/all from 3238c1c834 to 82ef0c08f2

2023-01-30 21:06:55 +01:00

Compare

kjuulh force-pushed renovate/all from 82ef0c08f2 to 3818919fcd

2023-01-31 22:49:54 +01:00

Compare

kjuulh force-pushed renovate/all from 3818919fcd to 1101456237

2023-02-01 02:30:04 +01:00

Compare

kjuulh force-pushed renovate/all from 1101456237 to 1a4c279fd6

2023-02-02 12:34:43 +01:00

Compare

kjuulh commented

2023-02-02 12:34:49 +01:00

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: errors parsing go.mod:
go.mod:149:2: replace github.com/docker/docker: version "v26.0.0" invalid: should be v0 or v1, not v26

### ⚠ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: go.sum ``` Command failed: go get -d -t ./... go: errors parsing go.mod: go.mod:149:2: replace github.com/docker/docker: version "v26.0.0" invalid: should be v0 or v1, not v26 ```

kjuulh force-pushed renovate/all from 1a4c279fd6 to 0b120a21aa

2023-02-02 18:26:25 +01:00

Compare

kjuulh force-pushed renovate/all from 0b120a21aa to 70f6f3a75f

2023-02-05 12:12:53 +01:00

Compare

kjuulh force-pushed renovate/all from 70f6f3a75f to 29b3804526

2023-02-07 20:43:18 +01:00

Compare

kjuulh force-pushed renovate/all from 29b3804526 to 04d14a6332

2023-02-07 21:04:26 +01:00

Compare

kjuulh force-pushed renovate/all from 04d14a6332 to 121d4258df

2023-02-07 23:27:01 +01:00

Compare

kjuulh force-pushed renovate/all from 121d4258df to 5a2994e663

2023-02-08 12:39:36 +01:00

Compare

kjuulh force-pushed renovate/all from 5a2994e663 to c04d1667e1

2023-02-08 18:43:30 +01:00

Compare

kjuulh force-pushed renovate/all from c04d1667e1 to 93ad4480d0

2023-02-08 19:23:50 +01:00

Compare

kjuulh force-pushed renovate/all from 93ad4480d0 to beffc95d32

2023-02-08 20:06:08 +01:00

Compare

kjuulh force-pushed renovate/all from beffc95d32 to 9628a810c0

2023-02-10 01:38:28 +01:00

Compare

kjuulh force-pushed renovate/all from 9628a810c0 to d85e53944b

2023-02-10 16:53:16 +01:00

Compare

kjuulh force-pushed renovate/all from d85e53944b to a7abf2858c

2023-02-10 17:31:25 +01:00

Compare

kjuulh force-pushed renovate/all from a7abf2858c to dfdabc4d87

2023-02-10 19:31:00 +01:00

Compare

kjuulh force-pushed renovate/all from dfdabc4d87 to edea3523bc

2023-02-11 16:58:21 +01:00

Compare

kjuulh force-pushed renovate/all from edea3523bc to b98c3762fc

2023-02-12 13:59:15 +01:00

Compare

kjuulh force-pushed renovate/all from b98c3762fc to c0a6353e57

2023-02-13 03:00:17 +01:00

Compare

kjuulh force-pushed renovate/all from c0a6353e57 to b0229ff992

2023-02-13 13:06:23 +01:00

Compare

kjuulh force-pushed renovate/all from b0229ff992 to 3d0c37e68a

2023-02-13 17:11:35 +01:00

Compare

kjuulh force-pushed renovate/all from 3d0c37e68a to 1e0426a466

2023-02-13 19:15:18 +01:00

Compare

kjuulh force-pushed renovate/all from 1e0426a466 to 35eedf63ff

2023-02-13 19:50:53 +01:00

Compare

kjuulh force-pushed renovate/all from 35eedf63ff to 70f23587f9

2023-02-13 21:16:13 +01:00

Compare

kjuulh force-pushed renovate/all from 70f23587f9 to 7af41342fc

2023-02-14 16:40:41 +01:00

Compare

kjuulh force-pushed renovate/all from 7af41342fc to 8df9611d61

2023-02-14 20:46:02 +01:00

Compare

kjuulh force-pushed renovate/all from 8df9611d61 to 0c9fd97370

2023-02-14 21:05:34 +01:00

Compare

kjuulh force-pushed renovate/all from 0c9fd97370 to 52dd18f4e4

2023-02-15 00:04:32 +01:00

Compare

kjuulh force-pushed renovate/all from 52dd18f4e4 to e56bbb5073

2023-02-15 19:01:05 +01:00

Compare

kjuulh force-pushed renovate/all from e56bbb5073 to d3d4a292bc

2023-02-16 00:01:01 +01:00

Compare

kjuulh force-pushed renovate/all from d3d4a292bc to 2013a80b23

2023-02-16 10:40:16 +01:00

Compare

kjuulh force-pushed renovate/all from 2013a80b23 to fc2ccb62b2

2023-02-16 14:33:06 +01:00

Compare

kjuulh force-pushed renovate/all from fc2ccb62b2 to 867a9da212

2023-02-17 15:02:18 +01:00

Compare

kjuulh force-pushed renovate/all from 867a9da212 to b060488b26

2023-02-17 16:28:24 +01:00

Compare

kjuulh force-pushed renovate/all from b060488b26 to c7573ca769

2023-02-17 23:03:37 +01:00

Compare

kjuulh force-pushed renovate/all from c7573ca769 to 27499f2933

2023-02-18 02:03:45 +01:00

Compare

kjuulh force-pushed renovate/all from 27499f2933 to fad41cca1d

2023-02-18 16:04:13 +01:00

Compare

kjuulh force-pushed renovate/all from fad41cca1d to a9c723f800

2023-02-25 10:19:11 +01:00

Compare

kjuulh force-pushed renovate/all from a9c723f800 to 6b4d695af4

2023-02-25 14:18:44 +01:00

Compare

kjuulh force-pushed renovate/all from 6b4d695af4 to df90154f1a

2023-02-26 20:39:16 +01:00

Compare

kjuulh force-pushed renovate/all from df90154f1a to 5bc02e7c06

2023-02-27 20:18:07 +01:00

Compare

kjuulh changed title from ~~fix(deps): update all dependencies~~ to chore(deps): update all dependencies

2023-02-27 20:18:12 +01:00

kjuulh force-pushed renovate/all from 5bc02e7c06 to af44b52cd7

2023-02-27 23:41:33 +01:00

Compare

kjuulh force-pushed renovate/all from af44b52cd7 to fb5531f4cc

2023-02-28 00:05:30 +01:00

Compare

kjuulh force-pushed renovate/all from fb5531f4cc to e4b00622d3

2023-02-28 00:27:42 +01:00

Compare

kjuulh force-pushed renovate/all from e4b00622d3 to 9e5de6500a

2023-02-28 00:50:48 +01:00

Compare

kjuulh force-pushed renovate/all from 9e5de6500a to 024b43cd22

2023-02-28 01:13:40 +01:00

Compare

kjuulh force-pushed renovate/all from 024b43cd22 to 379748adb4

2023-03-01 17:43:42 +01:00

Compare

kjuulh force-pushed renovate/all from 379748adb4 to d8728adf6e

2023-03-04 16:22:16 +01:00

Compare

kjuulh force-pushed renovate/all from d8728adf6e to 21bd28f76f

2023-03-05 15:52:47 +01:00

Compare

kjuulh force-pushed renovate/all from 21bd28f76f to 8d578e53b1

2023-03-06 20:46:38 +01:00

Compare

kjuulh force-pushed renovate/all from 8d578e53b1 to f5e8457287

2023-03-07 13:35:32 +01:00

Compare

kjuulh force-pushed renovate/all from f5e8457287 to a6d9b7b69b

2023-03-08 20:01:48 +01:00

Compare

kjuulh force-pushed renovate/all from a6d9b7b69b to aa0cca07e6

2023-03-10 18:03:05 +01:00

Compare

kjuulh force-pushed renovate/all from aa0cca07e6 to 785499712b

2023-03-10 19:38:11 +01:00

Compare

kjuulh force-pushed renovate/all from 785499712b to b95d9f51a9

2023-03-10 21:46:11 +01:00

Compare

kjuulh force-pushed renovate/all from b95d9f51a9 to 45515a0475

2023-03-10 23:57:38 +01:00

Compare

kjuulh force-pushed renovate/all from 45515a0475 to 6514d01cf5

2023-03-11 12:31:51 +01:00

Compare

kjuulh force-pushed renovate/all from 6514d01cf5 to 9b969ab2ba

2023-03-14 18:18:57 +01:00

Compare

kjuulh force-pushed renovate/all from 9b969ab2ba to 9e4e567314

2023-03-14 22:29:28 +01:00

Compare

kjuulh force-pushed renovate/all from 9e4e567314 to 3e057add7b

2023-03-15 15:49:24 +01:00

Compare

kjuulh force-pushed renovate/all from 3e057add7b to cc5edf7de3

2023-03-15 22:16:49 +01:00

Compare

kjuulh force-pushed renovate/all from cc5edf7de3 to be3471937a

2023-03-16 21:51:59 +01:00

Compare

kjuulh force-pushed renovate/all from be3471937a to 33b5c02e72

2023-03-22 01:59:07 +01:00

Compare

kjuulh force-pushed renovate/all from 33b5c02e72 to 8242f7a7e5

2023-03-22 16:52:21 +01:00

Compare

kjuulh force-pushed renovate/all from 8242f7a7e5 to d37a761061

2023-03-23 16:20:16 +01:00

Compare

kjuulh force-pushed renovate/all from d37a761061 to 57268b9e8d

2023-03-23 19:20:52 +01:00

Compare

kjuulh force-pushed renovate/all from 57268b9e8d to 870c5f06d2

2023-03-23 19:43:55 +01:00

Compare

kjuulh force-pushed renovate/all from 870c5f06d2 to dceef950ea

2023-03-23 22:44:32 +01:00

Compare

kjuulh force-pushed renovate/all from dceef950ea to ba8c02b613

2023-03-24 23:08:47 +01:00

Compare

kjuulh changed title from ~~chore(deps): update all dependencies~~ to fix(deps): update all dependencies

2023-03-24 23:08:59 +01:00

kjuulh force-pushed renovate/all from ba8c02b613 to ba4ff2ab0f

2023-03-28 14:01:38 +02:00

Compare

kjuulh force-pushed renovate/all from ba4ff2ab0f to 647b86e331

2023-03-28 20:58:06 +02:00

Compare

kjuulh force-pushed renovate/all from 647b86e331 to 2ab1dc22c1

2023-03-29 01:05:36 +02:00

Compare

kjuulh force-pushed renovate/all from 2ab1dc22c1 to bef732c89d

2023-03-29 07:13:38 +02:00

Compare

kjuulh force-pushed renovate/all from bef732c89d to 061ce3eff2

2023-04-03 16:46:53 +02:00

Compare

kjuulh force-pushed renovate/all from 061ce3eff2 to 8efa2f47a1

2023-04-03 19:06:36 +02:00

Compare

kjuulh force-pushed renovate/all from 8efa2f47a1 to 424ff78c07

2023-04-04 17:03:26 +02:00

Compare

kjuulh force-pushed renovate/all from 424ff78c07 to 390aa9b0c6

2023-04-04 17:25:36 +02:00

Compare

kjuulh force-pushed renovate/all from 390aa9b0c6 to c36d4c81f9

2023-04-04 18:53:49 +02:00

Compare

kjuulh force-pushed renovate/all from c36d4c81f9 to d22d7184cf

2023-04-04 21:12:53 +02:00

Compare

kjuulh force-pushed renovate/all from d22d7184cf to e27c04e282

2023-04-04 23:31:02 +02:00

Compare

kjuulh force-pushed renovate/all from e27c04e282 to b23b68725b

2023-04-05 02:38:50 +02:00

Compare

kjuulh force-pushed renovate/all from b23b68725b to 686830d0be

2023-04-05 20:22:01 +02:00

Compare

kjuulh force-pushed renovate/all from 686830d0be to 415108ea41

2023-04-06 19:44:57 +02:00

Compare

kjuulh force-pushed renovate/all from 415108ea41 to 9152963d60

2023-04-07 00:11:31 +02:00

Compare

kjuulh force-pushed renovate/all from 9152963d60 to 4ea46f671e

2023-04-07 18:26:31 +02:00

Compare

kjuulh force-pushed renovate/all from 4ea46f671e to fffeaf3be1

2023-04-12 01:12:20 +02:00

Compare

kjuulh force-pushed renovate/all from fffeaf3be1 to 7cc1cb2472

2023-04-12 17:21:18 +02:00

Compare

kjuulh force-pushed renovate/all from 7cc1cb2472 to 6a25f4b5e2

2023-04-13 15:13:20 +02:00

Compare

kjuulh force-pushed renovate/all from 6a25f4b5e2 to f59fc345dc

2023-04-13 19:41:28 +02:00

Compare

kjuulh force-pushed renovate/all from f59fc345dc to 108ad6c0d7

2023-04-13 20:26:09 +02:00

Compare

kjuulh force-pushed renovate/all from 108ad6c0d7 to 6262fca8a3

2023-04-15 13:22:37 +02:00

Compare

kjuulh force-pushed renovate/all from 6262fca8a3 to fd30aaf824

2023-04-17 20:55:47 +02:00

Compare

kjuulh force-pushed renovate/all from fd30aaf824 to 30ffbeabf6

2023-04-17 22:27:27 +02:00

Compare

kjuulh force-pushed renovate/all from 30ffbeabf6 to 49e151a841

2023-04-18 23:10:25 +02:00

Compare

kjuulh force-pushed renovate/all from 49e151a841 to e4cf5095b2

2023-04-20 20:24:13 +02:00

Compare

kjuulh force-pushed renovate/all from e4cf5095b2 to 8e50af8757

2023-04-20 20:45:46 +02:00

Compare

kjuulh force-pushed renovate/all from 8e50af8757 to 5f9fc1f801

2023-04-26 21:57:43 +02:00

Compare

kjuulh force-pushed renovate/all from 5f9fc1f801 to 3451faa6bb

2023-04-26 22:31:19 +02:00

Compare

kjuulh force-pushed renovate/all from 3451faa6bb to 05e068532f

2023-04-27 14:17:35 +02:00

Compare

kjuulh force-pushed renovate/all from 05e068532f to 2e2c491943

2023-04-27 18:19:52 +02:00

Compare

kjuulh force-pushed renovate/all from 2e2c491943 to b500c54fae

2023-04-27 19:25:43 +02:00

Compare

kjuulh force-pushed renovate/all from b500c54fae to 4a7b4b2228

2023-04-29 01:52:05 +02:00

Compare

kjuulh force-pushed renovate/all from 4a7b4b2228 to bf32b8a111

2023-04-29 21:21:12 +02:00

Compare

kjuulh force-pushed renovate/all from bf32b8a111 to 52318186a1

2023-05-02 19:50:41 +02:00

Compare

kjuulh force-pushed renovate/all from 52318186a1 to d13fe7dc11

2023-05-02 21:35:01 +02:00

Compare

kjuulh force-pushed renovate/all from d13fe7dc11 to 00bf3c7066

2023-05-04 20:53:02 +02:00

Compare

kjuulh force-pushed renovate/all from 00bf3c7066 to 9b4acc0b0f

2023-05-04 23:31:52 +02:00

Compare

kjuulh force-pushed renovate/all from 9b4acc0b0f to ac27805cfb

2023-05-06 17:09:51 +02:00

Compare

kjuulh force-pushed renovate/all from ac27805cfb to 3361cc4b16

2023-05-08 20:11:16 +02:00

Compare

kjuulh force-pushed renovate/all from 3361cc4b16 to e947b3024f

2023-05-09 13:49:56 +02:00

Compare

kjuulh force-pushed renovate/all from e947b3024f to 3dd02c48ec

2023-05-10 00:49:02 +02:00

Compare

kjuulh force-pushed renovate/all from 3dd02c48ec to 9369aba38c

2023-05-10 12:15:04 +02:00

Compare

kjuulh force-pushed renovate/all from 9369aba38c to 75ddc24f17

2023-05-11 17:02:52 +02:00

Compare

kjuulh force-pushed renovate/all from 75ddc24f17 to 9db5d9d2b2

2023-05-13 07:09:58 +02:00

Compare

kjuulh force-pushed renovate/all from 9db5d9d2b2 to 0ee3471438

2023-05-13 08:25:55 +02:00

Compare

kjuulh force-pushed renovate/all from 0ee3471438 to 78b41a6db1

2023-05-13 11:51:09 +02:00

Compare

kjuulh force-pushed renovate/all from 78b41a6db1 to 6bfa5dddbb

2023-05-16 19:49:29 +02:00

Compare

kjuulh force-pushed renovate/all from 6bfa5dddbb to cb5726c077

2023-05-17 01:06:39 +02:00

Compare

kjuulh force-pushed renovate/all from cb5726c077 to 23bccff952

2023-05-17 20:28:06 +02:00

Compare

kjuulh force-pushed renovate/all from 23bccff952 to a0fc646005

2023-05-19 02:09:30 +02:00

Compare

kjuulh force-pushed renovate/all from a0fc646005 to da9c4813e0

2023-05-20 01:59:28 +02:00

Compare

kjuulh force-pushed renovate/all from da9c4813e0 to d453eaa01c

2023-05-23 12:24:34 +02:00

Compare

kjuulh force-pushed renovate/all from d453eaa01c to 9c9f229c7a

2023-05-23 17:10:44 +02:00

Compare

kjuulh force-pushed renovate/all from 9c9f229c7a to 302350bdcb

2023-05-24 01:42:36 +02:00

Compare

kjuulh force-pushed renovate/all from 302350bdcb to 6650ce5d07

2023-05-26 10:47:57 +02:00

Compare

kjuulh force-pushed renovate/all from 6650ce5d07 to fe5dd08170

2023-05-30 12:57:44 +02:00

Compare

kjuulh force-pushed renovate/all from fe5dd08170 to 2f6a30145f

2023-06-07 23:54:46 +02:00

Compare

kjuulh force-pushed renovate/all from 2f6a30145f to efd86ac5e1

2023-06-08 02:53:22 +02:00

Compare

kjuulh force-pushed renovate/all from efd86ac5e1 to 810fa5c99f

2023-06-08 04:08:37 +02:00

Compare

kjuulh force-pushed renovate/all from 810fa5c99f to cf5e694074

2023-06-09 11:24:47 +02:00

Compare

kjuulh force-pushed renovate/all from cf5e694074 to f7488bcb00

2023-06-09 18:07:03 +02:00

Compare

kjuulh force-pushed renovate/all from f7488bcb00 to cb557ece16

2023-06-12 21:07:09 +02:00

Compare

kjuulh force-pushed renovate/all from cb557ece16 to 66a4ee26bb

2023-06-13 16:51:44 +02:00

Compare

kjuulh force-pushed renovate/all from 66a4ee26bb to a365233ea5

2023-06-14 03:17:04 +02:00

Compare

kjuulh force-pushed renovate/all from a365233ea5 to 66e6c7b142

2023-06-14 17:57:19 +02:00

Compare

kjuulh force-pushed renovate/all from 66e6c7b142 to fb3bcfc191

2023-06-14 18:24:04 +02:00

Compare

kjuulh force-pushed renovate/all from fb3bcfc191 to f082ce81fb

2023-06-18 02:32:54 +02:00

Compare

kjuulh force-pushed renovate/all from f082ce81fb to 7e386c460b

2023-06-18 22:42:12 +02:00

Compare

kjuulh force-pushed renovate/all from 7e386c460b to c0774979ff

2023-06-19 11:15:44 +02:00

Compare

kjuulh force-pushed renovate/all from c0774979ff to 4ede96376f

2023-06-20 20:59:01 +02:00

Compare

kjuulh force-pushed renovate/all from 4ede96376f to 3b2ed3cbeb

2023-06-21 03:36:33 +02:00

Compare

kjuulh force-pushed renovate/all from 3b2ed3cbeb to 463e09d049

2023-06-21 21:53:07 +02:00

Compare

kjuulh force-pushed renovate/all from 463e09d049 to 9c755a0f43

2023-06-22 00:39:09 +02:00

Compare

kjuulh force-pushed renovate/all from 9c755a0f43 to 075533668f

2023-06-23 06:44:59 +02:00

Compare

kjuulh force-pushed renovate/all from 075533668f to ee18115a53

2023-06-27 23:58:32 +02:00

Compare

kjuulh force-pushed renovate/all from ee18115a53 to 2475e239df

2023-06-29 19:48:33 +02:00

Compare

kjuulh force-pushed renovate/all from 2475e239df to 6096b9ff51

2023-06-29 21:09:20 +02:00

Compare

kjuulh force-pushed renovate/all from 6096b9ff51 to bc3071b258

2023-06-29 23:09:54 +02:00

Compare

kjuulh force-pushed renovate/all from bc3071b258 to f7fe7d0cf1

2023-06-30 19:06:38 +02:00

Compare

kjuulh force-pushed renovate/all from f7fe7d0cf1 to 1eabe7acca

2023-07-01 19:10:19 +02:00

Compare

kjuulh force-pushed renovate/all from 1eabe7acca to e010a3e5d0

2023-07-04 17:00:50 +02:00

Compare

kjuulh force-pushed renovate/all from e010a3e5d0 to 2a8dc072c3

2023-07-23 12:42:42 +02:00

Compare

kjuulh force-pushed renovate/all from 2a8dc072c3 to 5d965f3efc

2023-07-24 18:20:24 +02:00

Compare

kjuulh force-pushed renovate/all from 5d965f3efc to 1beced8359

2023-07-26 10:19:18 +02:00

Compare

kjuulh force-pushed renovate/all from 1beced8359 to 6df58098e6

2023-07-26 22:09:35 +02:00

Compare

kjuulh force-pushed renovate/all from 6df58098e6 to 866f9faf4b

2023-07-27 23:31:41 +02:00

Compare

kjuulh force-pushed renovate/all from 866f9faf4b to 50da8edbc0

2023-07-30 01:34:01 +02:00

Compare

kjuulh force-pushed renovate/all from 50da8edbc0 to b462b83147

2023-08-01 02:09:40 +02:00

Compare

kjuulh force-pushed renovate/all from b462b83147 to d36c62f4a4

2023-08-01 23:32:03 +02:00

Compare

kjuulh force-pushed renovate/all from d36c62f4a4 to d298f54cd1

2023-08-02 00:53:45 +02:00

Compare

kjuulh force-pushed renovate/all from d298f54cd1 to f9668938ab

2023-08-02 14:09:44 +02:00

Compare

kjuulh force-pushed renovate/all from f9668938ab to 1ae1c9977a

2023-08-04 17:43:46 +02:00

Compare

kjuulh force-pushed renovate/all from 1ae1c9977a to 1c9a3a7fe0

2023-08-08 23:58:16 +02:00

Compare

kjuulh force-pushed renovate/all from 1c9a3a7fe0 to 5ab5ebc967

2023-08-09 12:58:20 +02:00

Compare

kjuulh force-pushed renovate/all from 5ab5ebc967 to b341a44fff

2023-08-09 23:57:33 +02:00

Compare

kjuulh force-pushed renovate/all from b341a44fff to 534b8b70c9

2023-08-10 01:21:23 +02:00

Compare

kjuulh force-pushed renovate/all from 534b8b70c9 to de831ed013

2023-08-14 10:15:04 +02:00

Compare

kjuulh force-pushed renovate/all from de831ed013 to f887423459

2023-08-15 09:00:29 +02:00

Compare

kjuulh force-pushed renovate/all from f887423459 to 4a4f123b13

2023-08-15 22:31:34 +02:00

Compare

kjuulh force-pushed renovate/all from 4a4f123b13 to 56f985823d

2023-08-17 21:46:41 +02:00

Compare

kjuulh force-pushed renovate/all from 56f985823d to 25b0b8b5b5

2023-08-19 00:19:38 +02:00

Compare

kjuulh force-pushed renovate/all from 25b0b8b5b5 to a845db5b39

2023-08-21 18:54:21 +02:00

Compare

kjuulh force-pushed renovate/all from a845db5b39 to 80e6357166

2023-08-22 09:46:31 +02:00

Compare

kjuulh force-pushed renovate/all from 80e6357166 to eb13a8a420

2023-08-23 20:59:39 +02:00

Compare

kjuulh force-pushed renovate/all from eb13a8a420 to 1121987669

2023-08-24 20:32:51 +02:00

Compare

kjuulh force-pushed renovate/all from 1121987669 to e93a83d43c

2023-08-25 16:35:43 +02:00

Compare

kjuulh force-pushed renovate/all from e93a83d43c to 50d52c94eb

2023-08-25 21:27:33 +02:00

Compare

kjuulh force-pushed renovate/all from 50d52c94eb to 20ec8fc62f

2023-08-25 23:36:59 +02:00

Compare

kjuulh force-pushed renovate/all from 20ec8fc62f to 2f799a8059

2023-08-29 19:12:47 +02:00

Compare

kjuulh force-pushed renovate/all from 2f799a8059 to 24feeb75af

2023-08-31 23:34:37 +02:00

Compare

kjuulh force-pushed renovate/all from 24feeb75af to 2e22ae3b86

2023-09-03 16:06:16 +02:00

Compare

kjuulh force-pushed renovate/all from 2e22ae3b86 to 3739fcc75e

2023-09-04 14:34:55 +02:00

Compare

kjuulh force-pushed renovate/all from 3739fcc75e to aa67702699

2023-09-05 23:27:38 +02:00

Compare

kjuulh force-pushed renovate/all from aa67702699 to b9b6ba48cb

2023-09-06 21:32:55 +02:00

Compare

kjuulh force-pushed renovate/all from b9b6ba48cb to 6429d54988

2023-09-06 23:49:10 +02:00

Compare

kjuulh force-pushed renovate/all from 6429d54988 to 79b6260c15

2023-09-10 14:41:33 +02:00

Compare

kjuulh force-pushed renovate/all from 79b6260c15 to 8815a11afd

2023-09-11 20:28:00 +02:00

Compare

kjuulh force-pushed renovate/all from 8815a11afd to 7824d490f7

2023-09-12 19:29:03 +02:00

Compare

kjuulh force-pushed renovate/all from 7824d490f7 to 5d4800cba5

2023-09-12 20:19:39 +02:00

Compare

kjuulh force-pushed renovate/all from 5d4800cba5 to 29eb013a33

2023-09-12 20:50:22 +02:00

Compare

kjuulh force-pushed renovate/all from 29eb013a33 to e3b0f7ede9

2023-09-14 02:58:47 +02:00

Compare

kjuulh force-pushed renovate/all from e3b0f7ede9 to 09165a1916

2023-09-14 19:26:06 +02:00

Compare

kjuulh force-pushed renovate/all from 09165a1916 to 1d97282acd

2023-09-14 20:14:27 +02:00

Compare

kjuulh force-pushed renovate/all from 1d97282acd to 296e17a7d5

2023-09-20 18:33:54 +02:00

Compare

kjuulh force-pushed renovate/all from 296e17a7d5 to 4511485ea8

2023-09-21 03:27:35 +02:00

Compare

kjuulh force-pushed renovate/all from 4511485ea8 to 9aacbd2fa0

2023-09-21 15:29:27 +02:00

Compare

kjuulh force-pushed renovate/all from 9aacbd2fa0 to 9d5928b742

2023-09-22 02:10:51 +02:00

Compare

kjuulh force-pushed renovate/all from 9d5928b742 to 79875ea83c

2023-09-25 11:45:27 +02:00

Compare

kjuulh force-pushed renovate/all from 79875ea83c to 5edbb272c1

2023-09-27 18:28:43 +02:00

Compare

kjuulh force-pushed renovate/all from 5edbb272c1 to 8390ab1855

2023-10-02 20:32:11 +02:00

Compare

kjuulh force-pushed renovate/all from 8390ab1855 to 70768113e3

2023-10-05 15:08:45 +02:00

Compare

kjuulh force-pushed renovate/all from 70768113e3 to 482b849dc0

2023-10-05 15:30:36 +02:00

Compare

kjuulh force-pushed renovate/all from 482b849dc0 to 8b0756b8e9

2023-10-05 17:10:34 +02:00

Compare

kjuulh force-pushed renovate/all from 8b0756b8e9 to f2626e50e3

2023-10-06 00:40:29 +02:00

Compare

kjuulh force-pushed renovate/all from f2626e50e3 to b598fdd8ad

2023-10-06 01:09:26 +02:00

Compare

kjuulh force-pushed renovate/all from b598fdd8ad to 6f0f1ec159

2023-10-06 14:41:29 +02:00

Compare

kjuulh force-pushed renovate/all from 6f0f1ec159 to fe0acf2383

2023-10-09 23:30:00 +02:00

Compare

kjuulh force-pushed renovate/all from fe0acf2383 to 6e1f938d46

2023-10-10 02:10:56 +02:00

Compare

kjuulh force-pushed renovate/all from 6e1f938d46 to 4942d64805

2023-10-10 21:06:11 +02:00

Compare

kjuulh force-pushed renovate/all from 4942d64805 to cac9a238c8

2023-10-10 21:58:40 +02:00

Compare

kjuulh force-pushed renovate/all from cac9a238c8 to 59cdd7531a

2023-10-10 22:43:05 +02:00

Compare

kjuulh force-pushed renovate/all from 59cdd7531a to bf1c51e9af

2023-10-12 01:36:14 +02:00

Compare

kjuulh force-pushed renovate/all from bf1c51e9af to d09ff00959

2023-10-12 02:10:54 +02:00

Compare

kjuulh force-pushed renovate/all from d09ff00959 to 6f340c697d

2023-10-18 00:00:40 +02:00

Compare

kjuulh force-pushed renovate/all from 6f340c697d to b946533f7f

2023-10-18 00:24:04 +02:00

Compare

kjuulh force-pushed renovate/all from b946533f7f to a183345750

2023-10-18 22:55:34 +02:00

Compare

kjuulh force-pushed renovate/all from a183345750 to 86c8a80e7a

2023-10-19 04:00:52 +02:00

Compare

kjuulh force-pushed renovate/all from 86c8a80e7a to ffd566007e

2023-10-19 21:50:03 +02:00

Compare

kjuulh force-pushed renovate/all from ffd566007e to ced306bfd1

2023-10-24 20:57:46 +02:00

Compare

kjuulh force-pushed renovate/all from ced306bfd1 to 26c04701ee

2023-10-24 22:55:23 +02:00

Compare

kjuulh force-pushed renovate/all from 26c04701ee to 70c49c5e1a

2023-10-25 11:43:44 +02:00

Compare

kjuulh force-pushed renovate/all from 70c49c5e1a to f434dbf17c

2023-10-26 03:18:35 +02:00

Compare

kjuulh force-pushed renovate/all from f434dbf17c to fa06232ca9

2023-10-26 18:12:05 +02:00

Compare

kjuulh force-pushed renovate/all from fa06232ca9 to edd3ff0912

2023-10-26 19:02:09 +02:00

Compare

kjuulh force-pushed renovate/all from edd3ff0912 to 3ebe1e3b83

2023-10-27 00:34:52 +02:00

Compare

kjuulh force-pushed renovate/all from 3ebe1e3b83 to c8abe0591e

2023-10-30 23:02:52 +01:00

Compare

kjuulh force-pushed renovate/all from c8abe0591e to c214e9fd09

2023-10-31 17:01:44 +01:00

Compare

kjuulh force-pushed renovate/all from c214e9fd09 to 54f410fed5

2023-11-04 16:01:23 +01:00

Compare

kjuulh force-pushed renovate/all from 54f410fed5 to eac0794978

2023-11-04 16:24:44 +01:00

Compare

kjuulh force-pushed renovate/all from eac0794978 to d0fadcd740

2023-11-04 21:20:24 +01:00

Compare

kjuulh force-pushed renovate/all from d0fadcd740 to aefdb97d4b

2023-11-04 22:35:58 +01:00

Compare

kjuulh force-pushed renovate/all from aefdb97d4b to 49a2090b7d

2023-11-05 07:32:34 +01:00

Compare

kjuulh force-pushed renovate/all from 49a2090b7d to d4f2242a49

2023-11-07 22:15:04 +01:00

Compare

kjuulh force-pushed renovate/all from d4f2242a49 to eade311c39

2023-11-08 04:25:55 +01:00

Compare

kjuulh force-pushed renovate/all from eade311c39 to 6a3c95e2e3

2023-11-09 00:26:30 +01:00

Compare

kjuulh force-pushed renovate/all from 6a3c95e2e3 to b2fe8468fa

2023-11-14 20:42:04 +01:00

Compare

kjuulh force-pushed renovate/all from b2fe8468fa to 91ccc2910f

2023-11-14 22:03:03 +01:00

Compare

kjuulh force-pushed renovate/all from 91ccc2910f to 88f4036b9c

2023-11-15 19:51:37 +01:00

Compare

kjuulh force-pushed renovate/all from 88f4036b9c to c88ab31725

2023-11-16 05:40:25 +01:00

Compare

kjuulh force-pushed renovate/all from c88ab31725 to df1cc0b3a8

2023-11-16 16:55:53 +01:00

Compare

kjuulh force-pushed renovate/all from df1cc0b3a8 to bfac543c56

2023-11-16 23:50:12 +01:00

Compare

kjuulh force-pushed renovate/all from bfac543c56 to 604dbd41c6

2023-11-21 23:16:19 +01:00

Compare

kjuulh force-pushed renovate/all from 604dbd41c6 to fba1c97c17

2023-11-22 01:11:41 +01:00

Compare

kjuulh force-pushed renovate/all from fba1c97c17 to 5d4c5c59d1

2023-11-22 08:51:27 +01:00

Compare

kjuulh force-pushed renovate/all from 5d4c5c59d1 to 9f47963537

2023-11-27 16:51:06 +01:00

Compare

kjuulh force-pushed renovate/all from 9f47963537 to 200efb5d54

2023-11-27 17:40:45 +01:00

Compare

kjuulh force-pushed renovate/all from 200efb5d54 to dee42ad6aa

2023-11-29 23:38:59 +01:00

Compare

kjuulh force-pushed renovate/all from dee42ad6aa to 047362929e

2023-11-30 20:09:59 +01:00

Compare

kjuulh force-pushed renovate/all from 047362929e to 06963dbf18

2023-12-01 07:18:19 +01:00

Compare

kjuulh force-pushed renovate/all from 06963dbf18 to e74da147b2

2023-12-05 20:27:08 +01:00

Compare

kjuulh force-pushed renovate/all from e74da147b2 to 5c45bdf1a9

2023-12-05 22:00:26 +01:00

Compare

kjuulh force-pushed renovate/all from 5c45bdf1a9 to 1cd8b8b3ac

2023-12-06 13:35:14 +01:00

Compare

kjuulh force-pushed renovate/all from 1cd8b8b3ac to c212ad9141

2023-12-06 15:59:03 +01:00

Compare

kjuulh force-pushed renovate/all from c212ad9141 to 89d703d0d4

2023-12-06 16:47:00 +01:00

Compare

kjuulh force-pushed renovate/all from 89d703d0d4 to bf241e2eb5

2023-12-07 14:22:05 +01:00

Compare

kjuulh force-pushed renovate/all from bf241e2eb5 to 4f94399a1c

2023-12-08 15:14:57 +01:00

Compare

kjuulh force-pushed renovate/all from 4f94399a1c to e679647b10

2023-12-09 00:48:23 +01:00

Compare

kjuulh force-pushed renovate/all from e679647b10 to a5fd913a5e

2023-12-09 21:11:36 +01:00

Compare

kjuulh force-pushed renovate/all from a5fd913a5e to bac134dc16

2023-12-12 01:11:36 +01:00

Compare

kjuulh force-pushed renovate/all from bac134dc16 to 1447f76b90

2023-12-12 18:28:43 +01:00

Compare

kjuulh force-pushed renovate/all from 1447f76b90 to 6587ce8a46

2023-12-14 18:08:34 +01:00

Compare

kjuulh force-pushed renovate/all from 6587ce8a46 to 267ea601ff

2023-12-18 19:33:27 +01:00

Compare

kjuulh force-pushed renovate/all from 267ea601ff to 572a3f7299

2023-12-19 00:11:40 +01:00

Compare

kjuulh force-pushed renovate/all from 572a3f7299 to 4627c0b900

2023-12-21 10:52:51 +01:00

Compare

kjuulh force-pushed renovate/all from 4627c0b900 to bf735f99cb

2023-12-21 11:37:23 +01:00

Compare

kjuulh force-pushed renovate/all from bf735f99cb to 25685ea9f5

2023-12-26 18:19:46 +01:00

Compare

kjuulh force-pushed renovate/all from 25685ea9f5 to 1a57c60773

2023-12-26 19:58:14 +01:00

Compare

kjuulh force-pushed renovate/all from 1a57c60773 to f15bf132ca

2023-12-29 00:42:03 +01:00

Compare

kjuulh force-pushed renovate/all from f15bf132ca to fe82ec47f5

2023-12-29 20:55:25 +01:00

Compare

kjuulh force-pushed renovate/all from fe82ec47f5 to c3ddfbb65b

2023-12-29 21:40:40 +01:00

Compare

kjuulh force-pushed renovate/all from c3ddfbb65b to ae9d4798c1

2024-01-02 23:24:34 +01:00

Compare

kjuulh force-pushed renovate/all from ae9d4798c1 to b6d69e5e0e

2024-01-04 16:30:43 +01:00

Compare

kjuulh force-pushed renovate/all from b6d69e5e0e to a6fef9d524

2024-01-05 20:19:39 +01:00

Compare

kjuulh force-pushed renovate/all from a6fef9d524 to e3c0f47042

2024-01-09 23:56:27 +01:00

Compare

kjuulh force-pushed renovate/all from e3c0f47042 to 98da6a7e76

2024-01-12 03:49:11 +01:00

Compare

kjuulh force-pushed renovate/all from 98da6a7e76 to ea3398fd0f

2024-01-12 17:58:22 +01:00

Compare

kjuulh force-pushed renovate/all from ea3398fd0f to 5958dc0bc0

2024-01-16 22:42:43 +01:00

Compare

kjuulh force-pushed renovate/all from 5958dc0bc0 to e832a14265

2024-01-18 04:27:26 +01:00

Compare

kjuulh force-pushed renovate/all from e832a14265 to e69756c8d2

2024-01-18 20:20:58 +01:00

Compare

kjuulh force-pushed renovate/all from e69756c8d2 to 2fccf25dbb

2024-01-19 13:00:51 +01:00

Compare

kjuulh force-pushed renovate/all from 2fccf25dbb to d057e2c6b8

2024-01-23 20:50:56 +01:00

Compare

kjuulh force-pushed renovate/all from d057e2c6b8 to e443f11e9e

2024-01-24 02:06:44 +01:00

Compare

kjuulh force-pushed renovate/all from e443f11e9e to dad5f726b9

2024-01-24 11:12:33 +01:00

Compare

kjuulh force-pushed renovate/all from dad5f726b9 to ceaa341c55

2024-01-25 09:52:44 +01:00

Compare

kjuulh force-pushed renovate/all from ceaa341c55 to 9858a4b01d

2024-01-26 02:06:39 +01:00

Compare

kjuulh force-pushed renovate/all from 9858a4b01d to 5e845fc111

2024-01-26 14:24:42 +01:00

Compare

kjuulh force-pushed renovate/all from 5e845fc111 to 0a6cacfa24

2024-01-29 20:13:28 +01:00

Compare

kjuulh force-pushed renovate/all from 0a6cacfa24 to 677cf3837a

2024-01-30 19:36:59 +01:00

Compare

kjuulh force-pushed renovate/all from 677cf3837a to e6ffdfef82

2024-01-31 21:54:33 +01:00

Compare

kjuulh force-pushed renovate/all from e6ffdfef82 to e4e41d767d

2024-02-01 03:51:49 +01:00

Compare

kjuulh force-pushed renovate/all from e4e41d767d to ceaaffea64

2024-02-04 16:18:27 +01:00

Compare

kjuulh force-pushed renovate/all from ceaaffea64 to 252fdc8ba1

2024-02-05 18:43:49 +01:00

Compare

kjuulh force-pushed renovate/all from 252fdc8ba1 to 440ce21739

2024-02-07 01:53:50 +01:00

Compare

kjuulh force-pushed renovate/all from 440ce21739 to 530e71cec7

2024-02-07 04:54:38 +01:00

Compare

kjuulh force-pushed renovate/all from 530e71cec7 to fea836129d

2024-02-07 18:43:42 +01:00

Compare

kjuulh force-pushed renovate/all from fea836129d to 4723ccf1e8

2024-02-07 19:44:29 +01:00

Compare

kjuulh force-pushed renovate/all from 4723ccf1e8 to dbef10ebe8

2024-02-08 19:17:07 +01:00

Compare

kjuulh force-pushed renovate/all from dbef10ebe8 to fb0a626543

2024-02-08 20:08:33 +01:00

Compare

kjuulh force-pushed renovate/all from fb0a626543 to 00255b3aa8

2024-02-10 11:13:21 +01:00

Compare

kjuulh force-pushed renovate/all from 00255b3aa8 to ee43f7b636

2024-02-12 16:26:40 +01:00

Compare

kjuulh force-pushed renovate/all from ee43f7b636 to 783c2730bf

2024-02-13 05:51:05 +01:00

Compare

kjuulh force-pushed renovate/all from 783c2730bf to 293c386164

2024-02-13 19:40:20 +01:00

Compare

kjuulh force-pushed renovate/all from 293c386164 to 9097a53768

2024-02-14 00:19:27 +01:00

Compare

kjuulh force-pushed renovate/all from 9097a53768 to a3b192a1c9

2024-02-15 19:54:11 +01:00

Compare

kjuulh force-pushed renovate/all from a3b192a1c9 to 11be840a49

2024-02-16 03:07:30 +01:00

Compare

kjuulh force-pushed renovate/all from 11be840a49 to 972cc371a4

2024-02-16 19:10:22 +01:00

Compare

kjuulh force-pushed renovate/all from 972cc371a4 to e56109ab5f

2024-02-20 22:38:29 +01:00

Compare

kjuulh force-pushed renovate/all from e56109ab5f to 993c15b16c

2024-02-21 03:53:38 +01:00

Compare

kjuulh force-pushed renovate/all from 993c15b16c to 4f5244d688

2024-02-21 21:28:11 +01:00

Compare

kjuulh force-pushed renovate/all from 4f5244d688 to 5a8918c6d5

2024-02-22 01:28:19 +01:00

Compare

kjuulh force-pushed renovate/all from 5a8918c6d5 to 5d48b26061

2024-02-22 22:58:54 +01:00

Compare

kjuulh force-pushed renovate/all from 5d48b26061 to bb43ac8e94

2024-02-23 20:21:54 +01:00

Compare

kjuulh force-pushed renovate/all from bb43ac8e94 to 7cea8300cc

2024-02-25 14:39:40 +01:00

Compare

kjuulh force-pushed renovate/all from 7cea8300cc to cb23381f3b

2024-02-26 20:43:30 +01:00

Compare

kjuulh force-pushed renovate/all from cb23381f3b to ede986463f

2024-03-01 12:42:13 +01:00

Compare

kjuulh force-pushed renovate/all from ede986463f to a4d07b3966

2024-03-01 13:56:02 +01:00

Compare

kjuulh force-pushed renovate/all from a4d07b3966 to c756cb1362

2024-03-04 16:25:47 +01:00

Compare

kjuulh force-pushed renovate/all from c756cb1362 to 8dcd28c880

2024-03-04 19:00:48 +01:00

Compare

kjuulh force-pushed renovate/all from 8dcd28c880 to 0a8548a8e3

2024-03-05 19:21:34 +01:00

Compare

kjuulh force-pushed renovate/all from 0a8548a8e3 to eacd9b028d

2024-03-05 20:44:37 +01:00

Compare

kjuulh force-pushed renovate/all from eacd9b028d to d2d1335a56

2024-03-07 12:04:16 +01:00

Compare

kjuulh force-pushed renovate/all from d2d1335a56 to 282d3120f9

2024-03-11 16:20:22 +01:00

Compare

kjuulh force-pushed renovate/all from 282d3120f9 to b4948a117a

2024-03-12 18:35:15 +01:00

Compare

kjuulh force-pushed renovate/all from b4948a117a to 471550136b

2024-03-13 17:25:46 +01:00

Compare

kjuulh force-pushed renovate/all from 471550136b to b380997823

2024-03-13 22:51:05 +01:00

Compare

kjuulh force-pushed renovate/all from b380997823 to f1da9eb206

2024-03-15 12:03:34 +01:00

Compare

kjuulh force-pushed renovate/all from f1da9eb206 to 5067863a02

2024-03-15 13:44:10 +01:00

Compare

kjuulh force-pushed renovate/all from 5067863a02 to 4e0f74b890

2024-03-18 20:12:31 +01:00

Compare

kjuulh force-pushed renovate/all from 4e0f74b890 to 714ab1748b

2024-03-19 18:41:15 +01:00

Compare

kjuulh force-pushed renovate/all from 714ab1748b to 2a6b3d6657

2024-03-19 22:44:29 +01:00

Compare

kjuulh force-pushed renovate/all from 2a6b3d6657 to 2315f6af43

2024-03-20 20:41:29 +01:00

Compare

kjuulh force-pushed renovate/all from 2315f6af43 to 5c1fd54f9c

2024-03-21 22:45:47 +01:00

Compare

kjuulh force-pushed renovate/all from 5c1fd54f9c to 68a21e28a1

2024-03-24 16:58:19 +01:00

Compare

kjuulh force-pushed renovate/all from 68a21e28a1 to 9b119afcd7

2024-03-26 22:47:11 +01:00

Compare

kjuulh force-pushed renovate/all from 9b119afcd7 to fa84fb611a

2024-03-29 18:29:24 +01:00

Compare

kjuulh force-pushed renovate/all from fa84fb611a to f3f479f63a

2024-03-29 19:13:40 +01:00

Compare

kjuulh force-pushed renovate/all from f3f479f63a to 4cf632d999

2024-03-31 15:06:37 +02:00

Compare

kjuulh force-pushed renovate/all from 4cf632d999 to 7bf92990dc

2024-04-02 23:03:28 +02:00

Compare

kjuulh force-pushed renovate/all from 7bf92990dc to 2a726da59f

2024-04-03 10:52:56 +02:00

Compare

kjuulh force-pushed renovate/all from 2a726da59f to f2d8f44177

2024-04-03 23:46:00 +02:00

Compare

kjuulh force-pushed renovate/all from f2d8f44177 to d6f31b4982

2024-04-04 03:47:49 +02:00

Compare

kjuulh force-pushed renovate/all from d6f31b4982 to 250a9d9406

2024-04-04 10:18:29 +02:00

Compare

kjuulh force-pushed renovate/all from 250a9d9406 to 88185fb561

2024-04-04 17:25:48 +02:00

Compare

kjuulh force-pushed renovate/all from 88185fb561 to 336e55341f

2024-04-04 18:09:23 +02:00

Compare

kjuulh force-pushed renovate/all from 336e55341f to 08d6745a51

2024-04-04 18:57:52 +02:00

Compare

kjuulh force-pushed renovate/all from 08d6745a51 to 9f52c3df03

2024-04-04 20:36:21 +02:00

Compare

kjuulh force-pushed renovate/all from 9f52c3df03 to ba31795303

2024-04-05 19:30:57 +02:00

Compare

kjuulh closed this pull request

2024-04-08 21:37:05 +02:00

This repo is archived. You cannot comment on pull requests.

No reviewers

No Label

No Milestone

No project

No Assignees

1 Participants

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kjuulh/dagger#52