fix(deps): update all dependencies #52

kjuulh · 2023-01-11T14:40:05+01:00

kjuulh commented

2023-01-11 14:40:05 +01:00

This PR contains the following updates:

Package	Type	Update	Change
@svgr/webpack (source)	dependencies	major	`6.5.1` -> `8.1.0`
actions/add-to-project	action	major	`v0.4.0` -> `v1.0.0`
actions/checkout	action	major	`v3` -> `v4`
actions/setup-go	action	major	`v3` -> `v5`
actions/stale	action	major	`v7` -> `v9`
actions/upload-artifact	action	major	`v3` -> `v4`
amplitude-js	dependencies	patch	`8.21.3` -> `8.21.9`
bats	devDependencies	minor	`1.8.2` -> `1.11.0`
clsx	dependencies	major	`1.2.1` -> `2.1.0`
concurrently	devDependencies	major	`7.6.0` -> `8.2.2`
crazy-max/ghaction-github-runtime	action	major	`v2` -> `v3`
cuelang.org/go	require	minor	`v0.4.3` -> `v0.8.1`
cypress (source)	devDependencies	major	`12.3.0` -> `13.7.2`
cypress-localstorage-commands	devDependencies	patch	`2.2.2` -> `2.2.5`
dagger/dagger-for-github	action	major	`v3` -> `v5`
docusaurus-plugin-sass	dependencies	patch	`0.2.3` -> `0.2.5`
github.com/Microsoft/go-winio	require	patch	`v0.6.0` -> `v0.6.1`
github.com/containerd/console	require	patch	`v1.0.3` -> `v1.0.4`
github.com/containerd/containerd	require	minor	`v1.6.15` -> `v1.7.15`
github.com/docker/buildx	require	minor	`v0.10.0` -> `v0.13.1`
github.com/docker/distribution	require	patch	`v2.8.1+incompatible` -> `v2.8.3`
github.com/docker/docker	replace	major	`v20.10.22+incompatible` -> `v26.0.0`
github.com/go-git/go-git/v5	require	minor	`v5.5.2` -> `v5.12.0`
github.com/google/uuid	require	minor	`v1.3.0` -> `v1.6.0`
github.com/moby/buildkit	require	minor	`v0.11.0` -> `v0.13.1`
github.com/opencontainers/image-spec	require	patch	`v1.1.0-rc2.0.20221116213201-188d3a4e1942` -> `v1.1.0`
github.com/rs/zerolog	require	minor	`v1.28.0` -> `v1.32.0`
github.com/sergi/go-diff	require	minor	`v1.2.0` -> `v1.3.1`
github.com/sirupsen/logrus	require	patch	`v1.9.0` -> `v1.9.3`
github.com/spf13/cobra	require	minor	`v1.6.1` -> `v1.8.0`
github.com/spf13/viper	require	minor	`v1.14.0` -> `v1.18.2`
github.com/stretchr/testify	require	minor	`v1.8.2` -> `v1.9.0`
github.com/tonistiigi/fsutil	require	digest	`fb43384` -> `7525a1a`
github.com/tonistiigi/vt100	require	digest	`8066bb9` -> `f9a4f7e`
golang	final	minor	`1.19.4-alpine` -> `1.22.2-alpine`
golang.org/x/mod	require	minor	`v0.7.0` -> `v0.17.0`
golang.org/x/sync	require	minor	`v0.1.0` -> `v0.7.0`
golang.org/x/term	require	minor	`v0.4.0` -> `v0.19.0`
golang.org/x/time	require	minor	`v0.3.0` -> `v0.5.0`
google.golang.org/grpc	require	minor	`v1.51.0` -> `v1.63.0`
goreleaser/goreleaser-action	action	major	`v4` -> `v5`
lewagon/wait-on-check-action	action	minor	`v1.2.0` -> `v1.3.4`
react-social-login-buttons (source)	dependencies	major	`3.6.1` -> `4.1.0`
remark-code-import	dependencies	minor	`1.1.1` -> `1.2.0`
sass	dependencies	minor	`1.57.1` -> `1.74.1`
start-server-and-test	devDependencies	major	`1.15.2` -> `2.0.3`

Release Notes

gregberge/svgr

`v8.1.0`

Compare Source

Bug Fixes

cli: fix default dimensions, prettier & svgo (571d5c8)
config: prefer cli config over rc config (#845) (8b97248)
react-native: fix duplicate import (#894) (e612b6a)

Features

esm: add support for svgo.config.cjs (#879) (ae91e2e)

8.0.1 (2023-05-09)

Bug Fixes

fix peer dependencies (2e05255)

`v8.0.1`

Compare Source

Bug Fixes

fix peer dependencies (2e05255)

`v8.0.0`

Compare Source

Bug Fixes

parseObject error causes website broken (05f2946)

Features

add snake_case filename option (#857) (428b0c7)
make index template more flexible (#861) (003009c)
types: change SVGProps from import to import type (#853) (095f021)

BREAKING CHANGES

index template now receives an array of objects containing both the created
component path (path) and the original SVG path (originalPath)

`v7.0.0`

Compare Source

Features

allow specifying jsxRuntimeImport in config (86bb86f), closes #801 #801
remove @svgr/plugin-jsx from core (a0f078d)
upgrade to svgo v3 (#798) (21b6209)

BREAKING CHANGES

plugin-jsx is no longer included by default in core
svgr now requires Node.js v14+

6.5.1 (2022-10-27)

Reverts

Revert "feat(a11y): add attribute role="img" to the svg element (#750)" (1382232), closes #750

actions/add-to-project

`v1.0.0`

Compare Source

Summary

This release promotes actions/add-to-projects to a major version 1 and marks the public API stable.

actions/checkout

`v4`

Compare Source

Fix: Disable sparse checkout whenever sparse-checkout option is not present @dscho in https://github.com/actions/checkout/pull/1598

actions/setup-go

`v5`

Compare Source

`v4`

Compare Source

actions/stale

`v9`

Compare Source

`v8`

Compare Source

actions/upload-artifact

`v4`

Compare Source

amplitude/amplitude-javascript

`v8.21.9`

Compare Source

Bug Fixes

do not overwrite flushIntervalMillis=0 with default value (10 seconds) (#589) (9c96890)

`v8.21.8`

Compare Source

Bug Fixes

upgrade to @amplitude/ua-parser-js @0.7.33 (#588) (d2dec38)

`v8.21.7`

Compare Source

Bug Fixes

reset referring_domain (eaa7446)

`v8.21.6`

Compare Source

Bug Fixes

skip top domain when cookie is disabled (#580) (a9ff324)

`v8.21.5`

Compare Source

Bug Fixes

wait to create cookie storage based on user options in init() (#579) (a682c5b)

`v8.21.4`

Compare Source

Bug Fixes

remove events when 200, no need to check response (#572) (5b52d16)
upgrade dependencies to resolve dependabot vulnerability alerts (#567) (9207b46)

bats-core/bats-core

`v1.11.0`

Compare Source

Added:

hardened CI scripts by using hashes instead of versions for actions and restricting permissions (#754, #770)
add security.md (#762)
add codespell CI checks (#720)
dynamic test registration via bats_test_function (#349)
add check that Bats is executed with Bash >= 3.2 (#873)

Fixed:

install.sh now works for deviating lib/ dirs (like lib32,lib64) (#487)
catch unset BATS_TEST_SOURCE in lib/bats-core/tracing.bash so
set -u/set -o nounset works as expected (#827)
fix --gather-test-outputs-in fails on tests with multiple / (#789)
install does not create unused /usr/share/bats anymore (#857)
ensure IFS is unchanged in {setup,teardown}{_suite,_file,}, @test and free code (#879)
junit formatter: remove ANSI Codes to avoid invalid XML character (#886)

Changed:

update Docker image with the latest bats-file version 0.4.0 (#780)
update Docker image with the latest bats-detik version 1.3.0 (#876)

Documentation

clarify docker usage (#741)
update Arch Linux package URL in installation.rst (#821)
rename bash-bats to bats for Arch Linux in installation.rst (#836)
fix FAQ entry about setup-/teardown_suite, as they are available now (#861)
added logo (#881)

`v1.10.0`

Compare Source

Added:

add ${BATS_TEST_TAGS[@]} for querying the tags during a test (#705)
print tags on failing tests (#705)
test for negative arguments to --jobs (#693)
add tests for --formatter cat (#710)
test coverage in CI (#718)
Support for rush as alternative to GNU parallel (#729)
add bats_pipe helper function for run that executes \| as pipes (#663)
publish docker images to ghcr.io (additionally to Dockerhub) (#740)

Documentation:

clarify use cases of --formatter cat (#710)

Fixed:

fix run with options overwriting the value of i (#726, #727)
fix ${BATS_TEST_NAMES[@]} containing only --tags instead of test name since Bats v1.8.0 (#705)
fix run --keep-empty-lines counting trailing \n as (empty) new line (#711)
fix short flag unpacker creating bogus command lines with valued flags (#732)
fix formatter becoming confused with retries (#734)
fix --gather-test-outputs-in fails on tests with / (#735)
fix overriding date breaks --timing (#736)

Documentation

typos, minor edits (#704)
simplified contributing.md (#718)

`v1.9.0`

Compare Source

Added:

add installation instructions for Debian, Fedora, Gentoo, and OpenSUSE (#659)
add --line-reference-format to switch file/line references in stack traces (#665)
- comma_line (default): file.bats, line 1
- colon: file.bats:1
- uri: file:///path/to/file.bats:1
- custom: define your own formatter in bats_format_file_line_reference_custom
add bats:focus tag to run only focused tests (#679)
add bats-support, bats-assert, bats-file and bats-detik to Dockerfile (#674)

Documentation:

add --help text and man page content for --filter-tags (#679)

Fixed:

explicitly check for GNU parallel (#691)
wait for report-formatter to finish before ending bats' execution,
to fix empty files with --report-fomatter junit under Docker (#692)

Documentation

improved clarity of section about output in free code (#671)
fixed typos (#673)
clarify use cases of run (#366)

lukeed/clsx

`v2.1.0`

Compare Source

Features

Add new clsx/lite submodule for string-only usage: 1a49142

This is a 140b version of clsx that is ideal for Tailwind and/or React contexts, which typically follow this clsx usage pattern:

clsx('foo bar', props.maybe && 'conditional classes', props.className);

Important: This clsx/lite module ignores all non-string arguments and is therefore not a 1:1 replacement for clsx itself!

import { clsx } from 'clsx';
import { clsx as lite } from 'clsx/lite';

// strings-only usage is identical
clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"
lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz"

// clsx/lite ignores all non-strings
clsx('foo', { a: true, b: false, c: true }); //=> "foo a c"
lite('foo', { a: true, b: false, c: true }); //=> "foo"

Full Changelog: https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0

`v2.0.1`

Compare Source

Patches

(perf) Cache arguments.length & array.length for 6% performance gain (#26): deff09b
Adds 5 bytes (+2%) for ~3% avg performance gain
Thank you @jalalazimi

Chores

Update module size: bf64e71
Update benchmark results: 855eec2, 6e3b2b9,
Replace nyc with c8 in CI: 6e2468e
Update Node CI matrix: 308a238
Fix readme typos (#76, #82): 42354d3, 4c9a55d
Thank you @andipaetzold and @acusti

Full Changelog: https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1

`v2.0.0`

Compare Source

Breaking

Add "exports" map for native ESM support (#57): 3ec8e9f, 0949868
Also supports TypeScript's node16/nodenext module resolution
Maintains CommonJS support (with fixed TS definitions)
Thank you @remcohaszing~!

Chores

Add Tailwind Support section to README (#65, #68): 496db1d, 4a4eadd
Thank you @kevinlowe0x3F7 & @kevinlowe0x3F7
Add tests for numbers & variadic number arguments: c520353
Update package module size: 03e1cf9

Full Changelog: https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0

open-cli-tools/concurrently

`v8.2.2`

Compare Source

What's Changed

fix(suggestion): prefixColors API type to embrace string type by @SeiwonPark in https://github.com/open-cli-tools/concurrently/pull/439
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/441
Test against Node.js v20 instead of v19 by @paescuj in https://github.com/open-cli-tools/concurrently/pull/442
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/449

New Contributors

@SeiwonPark made their first contribution in https://github.com/open-cli-tools/concurrently/pull/439

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2

`v8.2.1`

Compare Source

What's Changed

Delay summary timings output until finished by @kayahr in https://github.com/open-cli-tools/concurrently/pull/431
Replace deprecated RxJS code by @paescuj in https://github.com/open-cli-tools/concurrently/pull/343

New Contributors

@kayahr made their first contribution in https://github.com/open-cli-tools/concurrently/pull/431

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1

`v8.2.0`

Compare Source

What's Changed

Support REPL languages that use colons by @wyattades in https://github.com/open-cli-tools/concurrently/pull/393
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/427

New Contributors

@wyattades made their first contribution in https://github.com/open-cli-tools/concurrently/pull/393

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0

`v8.1.0`

Compare Source

What's Changed

fix: move types condition to the front by @Andarist in https://github.com/open-cli-tools/concurrently/pull/422
Allow setting raw per command when using the API by @chbiel in https://github.com/open-cli-tools/concurrently/pull/411

New Contributors

@Andarist made their first contribution in https://github.com/open-cli-tools/concurrently/pull/422
@chbiel made their first contribution in https://github.com/open-cli-tools/concurrently/pull/411

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0

`v8.0.1`

Compare Source

What's Changed

Fix release workflow by @paescuj in https://github.com/open-cli-tools/concurrently/pull/408
Update dependencies by @paescuj in https://github.com/open-cli-tools/concurrently/pull/409

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1

`v8.0.0`

Compare Source

What's Changed

Breaking change: Drop support for Node.js v12 & add support for Node.js v18 by @paescuj in https://github.com/open-cli-tools/concurrently/pull/342
Add support for Bun by @jakeboone02 in https://github.com/open-cli-tools/concurrently/pull/406
Add --kill-signal option by @paulsmithkc in https://github.com/open-cli-tools/concurrently/pull/402
Fixed broken link in the readme by @abstractpoint in https://github.com/open-cli-tools/concurrently/pull/390

New Contributors

@abstractpoint made their first contribution in https://github.com/open-cli-tools/concurrently/pull/390
@jakeboone02 made their first contribution in https://github.com/open-cli-tools/concurrently/pull/406
@paulsmithkc made their first contribution in https://github.com/open-cli-tools/concurrently/pull/402

Full Changelog: https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0

crazy-max/ghaction-github-runtime

`v3`

Compare Source

cue-lang/cue

`v0.8.1`

Compare Source

This release includes a number of fixes detailed below:

CL 1186144 fixes a number of evaluator panics which could be triggered by calling the cue.Value.Expr method, which also happened when using the OpenAPI encoder.

CL 1173100 fixes cue get go panics which might occur when any Go packages are vendored or use imported alias declarations.

CL 1185281 fixes a regression introduced in v0.8.0 which led to some incorrect failures in tools/flow and cue cmd.

Full list of changes since v0.8.0

internal/cueversion: bump for v0.8.1 by @mvdan in 95bed3d
cue: adjust Environment for comprehensions by @mpvl in 4cdb317
Revert "tools/flow: check and return errors from task values" by @rogpeppe in 0630a37
cmd/cue: find packages by canonical path in get go by @uhthomas in 773ab2d

`v0.8.0`

Compare Source

This release includes experimental support for CUE Modules (more details below), as well as a number of improvements and fixes.

More CLs and refactors have also landed for the core evaluator's performance work. These aren't enabled yet as the work isn't complete; subscribe to the performance umbrella issue to read regular updates.

As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. It continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Modules

This release includes experimental support for CUE modules in cmd/cue, as outlined in the updated Modules and package management proposal v3.

Alongside this release, we have published a tutorial on the new website which shows how to publish and fetch modules with a custom module registry.

We have also published the first version of the Modules reference documentation, the canonical documentation page describing how CUE modules work in detail.

Note that support for CUE modules is still experimental and subject to change, and needs to be explicitly enabled via CUE_EXPERIMENT=modules. See cue help environment for more information on the environment variables used below.

CUE maps modules to registries via $CUE_REGISTRY, which supports a simple string configuration format as well as a more detailed CUE configuration format which can be read from disk. See cue help registryconfig for more details.

The new cue mod tidy command rewrites cue.mod/module.cue in its canonical format, adds any missing module dependency requirements, and removes unused ones.

The new cue mod publish command publishes the current module to a module registry.

The new cue mod get command can add a new module dependency, update an existing one, or downgrade an existing one as long as it does not cause any conflict.

When running commands like cue export with CUE_EXPERIMENT=modules, dependencies are automatically fetched from module registries following $CUE_REGISTRY and cached on disk inside $CUE_CACHE_DIR.

CUE Language Server Protocol Implementation

This release includes the first early version of an experimental Language Server Protocol (LSP) implementation for CUE. Whilst it remains experimental, the cmd/cuepls binary is separate from cmd/cue. However at a later date it will most likely to become a subcommand of cmd/cue like cue lsp serve.

We are working on updating the VSCode plugin to use cmd/cuepls, as well as supporting an initial version of a plugin for Neovim. For JetBrains users, we are working with the author of the CUE plugin to understand how best to integrate cmd/cuepls with JetBrains.

We will share announcements once the editor integrations are ready for use, and once more LSP features beyond formatting files are available. Subscribe to the LSP announce discussion, or join us in #cuepls on CUE Slack.

Go API

Note that this version of CUE requires Go 1.21 or later, following our policy to support the latest two stable Go releases just like upstream.

The cue/load package supports the CUE Modules experiment out of the box with the environment variable CUE_EXPERIMENT=modules. Alternatively, a custom registry and authorizer can be configured with the Config.Registry field via the modconfig.NewRegistry API.

cue/load also has a new Config.Env struct field to provide the environment variables used to load CUE modules from registries. It defaults to using os.Environ.

We have also added new Go examples to the cue/load package, including an example demonstrating the use of a CUE modules registry.

CL 1173271 drops support for legacy pkg directories, which have been deprecated since the transition to a cue.mod directory in 2019.

CL 1174069 replaces a few more uses of the deprecated cue.Instance type with cue.InstanceOrValue.

CL 1175779 deprecates the FileOffset and File.Base APIs in cue/token, which were inherited from go/token but never had any effect.

Language

There are no changes to the language in this version.

Spec

CL 1173197 makes the use of the term "builtin function" consistent across the document.

Core Evaluator

CL 1173262 fixes a regression introduced by v0.7.0's upgrade to github.com/cockroachdb/apd/v3 where some arithmetic operations would result in an extra 0 digit.

Encoders

CL 1173689 fixes the YAML encoder so that strings looking like hexadecimal numbers are properly quoted.

Builtins

CL 1173735 replaces the uses of Go's net package with net/netip when dealing with IP addresses, which makes them immutable, comparable, and take less memory.

CL 1173926 adds an IPv6 API to net to check that a value is a valid IPv6 address, mirroring IPv4 and taking advantage of the switch to the Go net/netip package.

CL 1174339 fixes tool/exec so that it correctly applies env defaults in CUE values.

CL 1174623 fixes tool/exec so that it accepts env list values as documented.

`cmd/cue`

CL 1176194 adds a language.version field to cue.mod/module.cue to track what CUE language version a module was written for. This will become necessary to make future language changes as smooth as possible for CUE users. For example, running cue mod init or cue mod tidy with the v0.8.0 release should add language: version: "v0.8.0" when the field isn't present.

CL 1173892 adds a cue help environment section to document the environment variables used by the CLI, such as CUE_EXPERIMENT and CUE_REGISTRY.

CL 1176665 fixes cue cmd so that legacy commands always get the corresponding CUE schema unified.

CL 1177330 fixes a bug where some evaluation errors in tools/flow and cue cmd were omitted, causing unintended results.

CL 1177546 tweaks cmd/cue so that it obeys the --package flag when the output format is CUE.

Full list of changes since v0.7.1

internal/cueversion: bump fallbackVersion for v0.8.0 by @mvdan in 7d75741
cue/load: make packages specified as args work correctly by @rogpeppe in c399d88
internal/mod/modresolve: do not use regular field in registry config schema by @rogpeppe in d272140
update cuelabs.dev/oci/ociregistry to pull in fix for #2934 by @mvdan in 0e33883
cmd/cue: mod init should only add @v0 with the experiment by @mvdan in 24f93c9
cmd/cue: repurpose modinit test for language.version by @mvdan in 77741ff
cmd/cue: mention CUE_DEBUG in cue help environment by @rogpeppe in d5ecd6c
internal/mod/modresolve: fix stripPrefix for exact match by @rogpeppe in fa65317
internal/_e2e: remove cleanup.go and tools.go by @mvdan in ec6cc09
internal/e2e: join into the root Go module by @mvdan in 31e47e2
internal/e2e: test that we can't replace published versions by @mvdan in d1104bd
internal/e2e: stop creating GitHub repositories by @mvdan in ba698de
all: prevent tests from using the host's docker/config.json by @mvdan in d48dcbe
internal/cueversion: bump fallbackVersion for v0.8.0-rc.1 by @mvdan in ccb64b1
doc/tutorial: skip module.cue as a golden file to avoid churn by @mvdan in d97e914
cmd/cue: use CUE_VERSION_OVERRIDE in script tests to avoid churn by @mvdan in e529ce6
cmd/cue: fix "login" on a clean environment, and add tests by @mvdan in f6238e5
internal/cueversion: convert spaces to underscore in Go version by @rogpeppe in 0b7c434
cmd/cue,mod/modconfig: send User-Agent header by @rogpeppe in 6db0b7f
internal/cueversion: new package by @rogpeppe in 5dbbbcb
cmd/cue: enable HTTP logging for cue login by @rogpeppe in 9f556fe
cmd/cue: implement cue mod tidy --check by @rogpeppe in 9789ee6
internal/modload: implement tidiness checker by @rogpeppe in 405511d
mod/modfile: check canonical language version by @rogpeppe in 2e503e0
internal/mod/modload: split Tidy from UpdateVersions by @rogpeppe in 0a23647
bump ociregistry dependency to pull in a panic fix by @mvdan in 382ea51
cmd/cue: implement support for HTTP logging by @rogpeppe in 9c8b09a
internal/httplog: new package by @rogpeppe in 893798b
Revert "internal/e2e: partially revert using cue mod init modpath@version" by @mvdan in b1e40ae
cmd/cue: use fallbackVersion when built via a directory replace by @mvdan in e54fb85
cmd/cue: hard-code a fallback CUE semver version by @mvdan in fc7038a
update golang.org/x/... dependencies for v0.8.0 by @mvdan in 6afa3ef
internal/ci: update the pinned Go version for v0.8 by @mvdan in a1e8429
internal/cuedebug: new package by @rogpeppe in 6ad495d
cue/load: fix race in testing by @rogpeppe in ee26ee2
mod/modconfig: make http transport configurable by @rogpeppe in 0ef11fc
internal/core/adt: set nonRooted by @mpvl in 28ae97d
internal/core/debug: more state in formation by @mpvl in 2273c7d
internal/core/adt: make runner a struct instead of func by @mpvl in 0651453
internal/core/adt: fix conjunct index by @mpvl in 2554094
internal/core/adt: implement new evaluator by @mpvl in 5f55954
internal/core/adt: only error if inspected node missed counters by @mpvl in c547590
internal/core/adt: closedness improvements by @mpvl in b7f76be
internal/core/adt: add lifetime check for closedness by @mpvl in cdcb6fa
internal/core/adt: mark functions only used in old evaluator by @mpvl in f55405b
internal/core/adt: exclude tests with disjunctions by @mpvl in 145b436
internal/core/adt: propagate closedness up by @mpvl in 9d951f6
internal/core/adt: introduce visual CUE debugger by @mpvl in 37c0260
mod/...: API tweaks by @rogpeppe in 7d4d90d
cmd/cue: implement cue mod get by @rogpeppe in 93643a3
cue/load: implement UpdateRequirements by @rogpeppe in 2dc8879
cue/load,mod/modconfig: support custom environment variables by @rogpeppe in bab5d3a
bump ociregistry dependency by @rogpeppe in 50c2472
mod/...: remove three somewhat unnecessary APIs by @mvdan in 6cba4c0
mod/module: assume Go 1.21 or later by @mvdan in aa60650
cue/load: delete unexported funcs only used in tests by @mvdan in 812bd85
internal/str: remove as it only had one trivial use by @mvdan in 77d5973
cue/load: remove unused code from the modules refactors by @mvdan in c5e67f2
cmd/cue: fix bad variable reference by @rogpeppe in 77936ec
cmd/cue: add registryconfig help by @rogpeppe in 91c72d9
internal/e2e: partially revert using cue mod init modpath@version by @mvdan in 94a444f
cmd/cue: support --package flag when output is CUE by @myitcv in 93acaa3
cue/load: add runnable example for external modules by @rogpeppe in cc98a77
mod/modconfig: factor out from cmd/cue by @rogpeppe in 59e6fd0
mod/...: mark as experimental by @rogpeppe in 3210353
mod/modcache: move from internal/mod/modcache by @rogpeppe in 4232562
internal/par: move from internal/mod/internal/par by @rogpeppe in d1fba4f
mod/modregistry: move from internal/mod/modregistry by @rogpeppe in aabff10
mod/modfile: move from internal/mod/modfile by @rogpeppe in 8533c7d
mod/module: move from internal/mod/module by @rogpeppe in 2727766
cue: fix typos in the Hid function documentation by @kharf in 723438a
cue/load: add a runnable package example by @mvdan in 5b4a581
internal/ci: fix reference to tool/file.RemoveAll by @mvdan in d42ab3d
tools/flow: check and return errors from task values by @nickfiggins in 9ef35eb
cmd/cue: stop trying to set $HOME in script_test.go by @mvdan in ff8d497
cmd/cue: skip the logins.json authorizer if no file is found by @mvdan in 32a72ae
bump ociregistry module version by @rogpeppe in 30cae5b
internal/ci: fix goreleaser when using gomod.proxy by @mvdan in d779310
internal/ci: print goreleaser config yaml before using it by @mvdan in 3b9da48
bump ociregistry dependency by @rogpeppe in 44fbc2a
cmd/cue: improve error message when modules experiment not enabled by @rogpeppe in d1f1793
hide testdata cue files to allow cue mod tidy to pass by @mvdan in bd96660
cmd/cue: clarify prefix matching semantics by @rogpeppe in 7a9e47c
cue.mod: add language.version to the root module by @mvdan in ac53f42
cmd/cue: add language version in "mod init" by @rogpeppe in eb5dc6a
all: replace uses of deprecated ioutil APIs by @mvdan in d6ecc3d
bump golang.org/x dependencies for v0.8 by @mvdan in 88431ee
cmd/cue: use CUE_CACHE_DIR instead of CUE_MODCACHE by @mvdan in 8bc8b1e
cmd/cue: support registry file configuration by @rogpeppe in c1e1a52
internal/mod/modresolve: use same registry representation as CUE_REGISTRY by @rogpeppe in cbf84aa
cmd/cue: update mod docs by @rogpeppe in fa30d88
all: replace mpvl/unique with slices.Compact by @mvdan in 057c324
cmd/cue: use single implementation of CUE_REGISTRY logic by @rogpeppe in 59b92a4
cmd/cue: fix other commands to work with modules by @rogpeppe in 3d9e272
internal/mod/modresolve: add config file functionality by @rogpeppe in be5d706
doc/tutorial: fix broken install.md link by @TheCoreMan in 6691137
all: start taking advantage of Go 1.21+ by @mvdan in 40d5162
cmd/cue: use immutable tags in cue mod registry by @rogpeppe in e0c253b
internal/ci: add cuepls to goreleaser config by @myitcv in c36b959
cuepls: support formatting of CUE files by @myitcv in d185263
cuepls: support .cue filetype by @myitcv in 55f965d
cuepls: remove more server implementation by @myitcv in 1ae88a6
cuepls: first integration test by @myitcv in 181a537
cuepls: renaming gopls -> cuepls by @myitcv in 0b6bc2f
cuepls: initial version of cmd/cuepls by @myitcv in 6a435cf
cuepls: slim down to single format command by @myitcv in 3e7e903
cuepls: remove any mention of vulnerability analysis by @myitcv in 821973b
cuepls: minimal changes to telemetry by @myitcv in ae69f66
cuepls: remove gopls hooks by @myitcv in 09f11f9
cuepls: run internal/golangorgx/revendorToolsInternal.sh by @myitcv in 6229d62
cuepls: initial version of "vendor" script by @myitcv in c207a2d
README: briefly document that we support two Go versions by @mvdan in e69d893
cue/interpreter/wasm: rework the way we test Wasm by @4ad in 41b9e66
cue/interpreter/wasm: remove Wazero global state by @4ad in 6d68b3a
cue/interpreter/wasm: add support for Wasm functions that take and return structs by @4ad in 2ce1036
cue/interpreter/wasm: add support for arbitrary types in extern attributes by @4ad in c896078
internal/core/runtime: expand runtime.Compile signature to accomodate non-builtins by @4ad in 063b8c1
cmd/cue,pkg/tool/exec: rely on cue schema for exec.Run defaults by @nickfiggins in b460e71
cmd/cue: unhide mod tidy and mod publish by @myitcv in d37ea66
internal/ci: run the end-to-end tests with -race by @mvdan in a948eb5
cmd/cue: add testscript for registry auth via logins.json by @mvdan in 64c5656
cmd/cue: fix registry client race by @rogpeppe in 3d1c0cb
cmd/cue: add mod registry server command by @rogpeppe in 649c7f6
clarify that we require Go 1.21 or later now by @mvdan in bef7c4e
internal/ci: upgrade Go matrix include go1.22.0 by @myitcv in 63dbc2d
internal/ci: use node.js 20-compatible action versions by @myitcv in 15a4b3e
README: simplify "install from source" instructions by @mvdan in 5037afc
README: add Docker badge and instructions by @mvdan in b6a6f67
bump cuelabs.dev/go/oci/ociregistry dependency by @mvdan in 0eb0106
cmd/cue: simplify exec trimming in TestX by @nnnkkk7 in eafeb11
pkg/path: fix package comment by @jpluscplusm in 4818cf7
cue/load: allow conversion of module-local paths to OS paths by @rogpeppe in 20451a6
cmd/cue: add test for self import in modules mode by @rogpeppe in 707c6d7
internal/e2e: switch all tests to cue mod publish by @mvdan in 2930a8e
README: remove obsolete mention of Google by @jpluscplusm in 64a117c
cue/load: make the tests less noisy by @mvdan in 079532c
cue/load: use fewer absolute paths in tests by @mvdan in a25c24b
cue/parser: make the example self-contained by @mvdan in fc77363
internal/mod/modload: fix panic on error in tidy by @rogpeppe in 3146f22
internal/mod: fix tidy in the presence of local code by @rogpeppe in 2a56875
cmd/cue: make the config directory configurable by @mvdan in 22b1ca3
internal/e2e: start using cue mod tidy by @mvdan in 34db9eb
cmd/cue: add version to module.cue file by @rogpeppe in 9ceec10
cue/load: fix crash when there is no module file by @rogpeppe in ec7ca0a
internal/e2e: start using cue mod init modpath@version by @mvdan in 7855e15
cue/token: deprecate base offset by @rogpeppe in b0358a6
cmd/cue/cmd: support major versions in module path by @rogpeppe in e8efa7e
internal/mod/modload: support adding language version by @rogpeppe in 2120803
internal/mod/modpkgload: support gen directories by @rogpeppe in c6e4adf
internal/e2e: tweak expected error string after the cue/load changes by @mvdan in b67300b
cue/load: use modpkgload to resolve dependencies by @rogpeppe in fa12218
cmd/cue/cmd: add (failing) submodule test by @rogpeppe in 8889d6a
cue/load: implement io/fs.FS for overlay filesystem by @rogpeppe in 83a70c6
cue/load: remove unused code by @rogpeppe in 2be5931
cmd/cue: use tokens from "cue login" before docker's config.json by @mvdan in 0e4ec67
cmd/cue: store tokens once "cue login" succeeds by @mvdan in 786095f
internal/mod: track dependencies at package level by @rogpeppe in af405f0
cue/load: use module.ParseImportPath by @rogpeppe in 36a4ce4
internal/mod/module: add ParseImportPath by @rogpeppe in 22cf402
cmd/cmd: add environment help by @rogpeppe in ed4fcdc
internal/mod/modpkgload: add test for package-level dependencies by @rogpeppe in b6032be
pkg/tool/exec: update env spec to support lists by @nickfiggins in 92d99d0
internal/core/adt: use ConjunctGroup in fields by @mpvl in a849212
internal/mod/modresolve: allow other forms of IPv6 localhost by @rogpeppe in 522eb97
cue/errors: remove unused field by @rogpeppe in 693cc0e
internal/mod: remove TODOs that have been done by @rogpeppe in 1fff098
internal/core/adt: remove disallowedField by @mpvl in 657ae6b
internal/core/adt: use OpContext instead of nodeContext for decDependant by @mpvl in 1df027b
pkg: fix CUE source escaping TODO by @mvdan in 1dda25a
internal/e2e: write the rest of an inline comment by @mvdan in 97826df
tools/flow: use atomic.Bool by @mvdan in fefadfc
internal/ci: add a TODO about "goreleaser test" by @mvdan in 21086d0
cue: replace Instance.value with Instance.Value by @mvdan in 20a4505
encoding/gocode: replace cue.Instance with InstanceOrValue by @mvdan in dbf2b75
internal/ci: support co-authors in the signed-off-by check by @mvdan in 87a2e5c
pkg/tool/exec: support defaults in env values by @nickfiggins in e7c2ede
internal/core/adt: implement checks for closedness counters by @mpvl in 928ff3e
internal/core/adt: reorganize for field checks by @mpvl in 2b483d7
internal/core/adt: move rootCloseContext to Vertex by @mpvl in 596adda
internal/core/adt: copy node method for comprehensions by @mpvl in 122b11f
internal/core/adt: only show stats for old evaluator by @mpvl in ce798a7
internal/core/adt: pass flags needed for new evaluator by @mpvl in 7fcc936
internal/core/adt: fix typo in insertion.txtar by @mpvl in 409ab1e
internal/core/adt: add positions of ConjunctGroup by @mpvl in d06d126
internal/core/adt: handle comprehension cycle errors by @mpvl in 0b90ccc
internal/core/adt: add tests to pass for new evaluator by @mpvl in 7453a50
internal/code/adt: hoist position to different line by @mpvl in 106ce1a
internal/core/adt: bail out early from resolve upon error by @mpvl in 6ead06a
internal/core/adt: hoist hasConjuncts by @mpvl in cbcabcf
internal/core/adt: don't match patters for non-regular fields by @mpvl in ca725a8
internal/core/runtime: move EvaluatorVersion to Runtime by @mpvl in 53ed0f6
internal/core/adt: move OpContext out of nodeContext by @mpvl in 200c994
internal/core/adt: add scheduler implementation by @mpvl in 9728b7d
all: update Wazero to 1.6.0 by @4ad in 5c5d291
internal/cli: improve error message on parse issue by @cedricgc in b55e471
internal/core/adt: hoist getNonCyclicCount by @mpvl in 4cc7bc7
internal/cuetxtar: use go-internal diff by @mpvl in 54e1699
internal/core/adt: include ConjunctGroup in addPositions by @mpvl in d5431b2
internal/core/adt: modify some tests by @mpvl in 82e4cef
internal/core/adt: prep for new evaluator by @mpvl in 8146191
internal/core/adt: introduce ConjunctGroup by @mpvl in afed6ae
internal/core/adt: unroll Evaluate in OpContext.concrete by @mpvl in 8933b8c
internal/core/adt: add String implementation for ArcType by @mpvl in cc76012
pkg/net: add IPv6 check by @martingreber in bc91ca7
internal/core: remove unused argument by @mpvl in da0eab4
internal/e2e: use cue mod publish by @rogpeppe in 3d09a4a
cmd/cue: add hidden login command by @mvdan in 0a5e225
cmd/cue/cmd: amend the default for CUE_REGISTRY by @mvdan in b01d129
cmd/cue: rename mod upload to mod publish by @rogpeppe in cc1eaf0
cmd/cue: allow cue mod tidy in non-module root by @rogpeppe in f260855
internal/registrytest: upload deterministically by @rogpeppe in c4c064d
internal/mod/modfile: avoid unnecessary braces by @rogpeppe in 7bcfd0b
internal/mod/modregistry: add Module.Version method by @rogpeppe in 72766c2
internal/registrytest: add Upload function by @rogpeppe in 414695f
internal/mod/modregistry: add GetModuleWithManifest method by @rogpeppe in 76298d4
pkg/net: replace net with net/netip by @martingreber in 87a3b17
internal/cmd: add cue-ast-print to visualize syntax trees by @mvdan in bf94b66
deps: upgrade to latest cuelabs.dev/go/oci/ociregistry by @myitcv in c84175b
go.mod: bump non-user-facing dependencies by @mvdan in 3594d13
internal/encoding/yaml: quote hexadecimal-looking strings by @vikstrous in 0b3455c
internal/e2e: set CUE_MODCACHE in TestScript's Setup by @mvdan in db98219
cue/load: use cached registry by @rogpeppe in 7dc80ff
cmd/cue: use cached registry for cue mod tidy by @rogpeppe in 400f829
internal/mod/modfile: guard against cue.Value race by @rogpeppe in 53d036a
internal/mod/modcache: use robustio by @rogpeppe in c5e1342
internal/mod/modcache: new package by @rogpeppe in c3ec30c
cmd/cue: remove a stale TODO on marshaler types by @mvdan in a567677
internal/mod/modregistry: avoid round trip by @rogpeppe in e090abf
internal/mod/module: add support for escaping by @rogpeppe in 576c564
internal/mod/modregistry: add ManifestDigest by @rogpeppe in 3c187c5
doc/ref: use builtin instead of built-in by @jpluscplusm in 7ed1bca
internal/mod/modload: support major version defaults by @rogpeppe in ac248f4
internal/maps: new package by @rogpeppe in 1958c32
internal/mod/modpkgload: support packages without major versions by @rogpeppe in 3cfb6e2
internal/mod/modrequirements: support major version defaults by @rogpeppe in 7afd472
internal/mod/modregistry: support cross-major-version queries by @rogpeppe in 4773bf6
modfile: support major version defaults by @rogpeppe in faf7cd5
cmd/cue: prevent failures if /tmp/cue.mod exists by @mvdan in c8073f4
cue/load: drop support for legacy pkg directories by @mvdan in e81d181
cmd/cue: cue mod tidy command by @rogpeppe in 2635119
internal/mod/modload: new package by @rogpeppe in 6bd89dc
internal/mod/modpkgload: new package by @rogpeppe in 3632c1f
internal/core: use precise apd.Decimal by @myitcv in 8271724
internal/mod/modrequirements: add GraphIsLoaded and RootModules by @rogpeppe in 74d7664
internal/mod/module: add Version.IsValid by @rogpeppe in 71ab88a
internal/mod/modregistry: return no tags for non-existent repo by @rogpeppe in 0c2c730
internal/mod/modfile: add Format by @rogpeppe in 7d588b9
internal/mod/modimports: discard package qualifier in import paths by @rogpeppe in 4edbf9d
README: drop golangci badge by @mvdan in 967c9c6
update ociregistry dependency by @rogpeppe in e07c4b8
internal/slices: add Equal by @rogpeppe in 4f4f718
internal/mod/modimports: support scanning single directory by @rogpeppe in 413d0d5
internal/mod/modrequirements: new package by @rogpeppe in 0e0d638
internal/ci: limit goreleaser to doing release drafts by @mvdan in f3411b4

`v0.7.1`

Compare Source

This release is a re-build of CUE v0.7.0 with Go 1.22.0 to prevent cue get go panics; see https://github.com/cue-lang/cue/issues/2802.

`v0.7.0`

Compare Source

This release comprises a number of bug fixes and small improvements, as well as more ground work for Modules, WebAssembly, and the core evaluator's performance refactors.

Note that v0.7 was originally planned to center around the core evaluator's performance improvements. Since those refactors are not ready, and we have other fixes and improvements we want to release, we have slightly altered the release plan accordingly. We will share more details on our next community call.

As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. Unity continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Thank you to @SteVwonder, @bozaro, @cedricgc, @howardjohn, @mpvl, @mvdan, @myitcv, @nickfiggins, @rogpeppe, @rudifa, and @uhthomas for contributing to this release!

And a special thanks to all who joined the recent contributor office hours calls on our community calendar, as well as our #contributing channel on Slack! Thanks to their involvement, more issues can be investigated and fixed each release.

Go API

Note that this version of CUE requires Go 1.20 or later, per our policy to support the latest two stable Go releases just like upstream.

CL 1172105 fixes a regression introduced in v0.6.0 where calling Iterator.Selector.Index while iterating over a list would incorrectly panic.

CL 1167597 fixes cue/load so it now errors on package import cycles, following the spec.

CL 1167647 adjusts cue.Value.Decode to decode empty CUE lists into a Go interface{} as a non-nil empty slice.

CL 547369 teaches cue.Value.Decode how to decode values which aren't entirely concrete into a Go type by using cue.Value as part of the destination type.

Language

There are no changes to the language in this version.

Spec

CL 1171216 fixes two errors in a dynamic fields example.

Core Evaluator

CL 1172014 disallows the direct use of unary operators with basic types, since they would result in confusing bounds which seemed incorrect.

CL 1172013 fixes a closedness bug where close did not properly apply when used inside definitions.

CL 1172874 fixes a panic in cue export introduced by v0.6.0.

Encoders

CL 1172314 teaches encoding/protobuf to follow the field_behavior annotation marking a field as either optional or required when decoding.

Builtins

CL 1172991 adds a mustSucceed boolean parameter to tool/exec.Run, which can be set to false to allow a command to fail and set its own field success to false.

CL 557322 fixes the values of math's Log2E and Log10E constants, which were being incorrectly truncated.

`cmd/cue`

CLs 1170966 and 1171302 fix a number of issues in cue fmt (and by extension the cue/format package), resulting in better and more consistent formatting of CUE files.

CLs 1171292, 1171015, 1170115, and 1171971 implement a variety of improvements and bug fixes for cue get go.

CL 1172017 fixes a number of issues with the line and column positions reported by our YAML decoder, which could result in weird CUE formatting when using cue import or misleading positions being shown to the user.

CL 1169709 increases the robustness of cue export -o, which in some situations could ignore file errors or incorrectly replace an existing file without the -f flag.

CL 1173072 fixes a panic when using cue import --list with empty YAML input.

CL 1168436 updates the cue export documentation to add the missing cue and binary supported export formats.

Modules

A number of changes are included to support an experimental implementation of the proposed modules and package management support. These aren't enabled by default, and will be announced soon.

Full list of changes since v0.6.0

internal/ci: bump to Go 1.21.5 for the upcoming release by @mvdan in ce1ad81
cmd/cue: fix panic when importing empty files as a list by @uhthomas in b36b477
internal/core/adt: change semantics of unary_op(basictype) by @mpvl in e1ceed4
internal/core/adt: fix closedness bug by @mpvl in 886eefd
internal/core/adt: add test to prepare for fix by @mpvl in 145764d
CONTRIBUTING: mention the Slack channel and office hours calls by @mvdan in 16a0cda
pkg/tool/exec: add a Run.mustSucceed parameter by @nickfiggins in 10c4796
cue: explicitly document values are not safe for concurrent use by @mvdan in d805c22
internal/ci: bump Go and GoReleaser for v0.7.0-rc.1 by @mvdan in 8f88dcb
internal/slices: move from internal/mod/mvs/internal/slices by @rogpeppe in 0e51dbb
internal/mod/internal/par: move from internal/mod/mvs/internal/par by @rogpeppe in fe0e04a
internal/registrytest: do not check that dependencies exist by @rogpeppe in 99bdbad
internal/mod/modimports: new package by @rogpeppe in 79033c2
internal/core/export: fix a recent nil pointer regression by @rudifa in 141925a
internal/core/adt: use state directly by @mpvl in bba2263
internal/core/adt: expand on permutations for test by @mpvl in 596fdc9
internal/cuetxtar: include diff between test and fallback test by @mpvl in 6774d0d
internal/txtarfs: factor out from registrytest by @rogpeppe in 265a7a0
internal/cueimports: export API and fix for CUE syntax by @rogpeppe in 47d6dce
internal/cueimports: copy code from cue/load by @rogpeppe in 9e55783
cue/load: remove unused functionality by @rogpeppe in b727189
all: replace html/template by text/template by @mvdan in 361ae4f
encoding/protobuf: support field_behavior "required" option by @howardjohn in 80b0eee
cmd/cue: fix incorrect position in yaml import by @uhthomas in d97b0c3
all: adopt .gitignore for new delve binary naming by @mpvl in 68e9d5d
internal/core/adt: make ListMarker Src an expression by @mpvl in f59894c
internal/core/adt: changes needed for new evaluator by @mpvl in fb88beb
cue: don't panic on Iterator.Selector.Index with lists by @mvdan in 9dd0f82
cue: allow top level JSON marshalers in EncodeType by @rogpeppe in 8f796bf
cue: support decoding into cue.Value fields by @rogpeppe in b25fc05
internal/mod/mvs: discard copied par tests by @mvdan in 4e30101
CONTRIBUTING: fix repo reference rendering by @cedricgc in 7a4ea86
internal/e2e: make unique module names more robust by @mvdan in a404c89
cmd/cue: support optional comments in get go by @uhthomas in 67ea9cf
cmd/cue: ignore complex types in get go by @uhthomas in 112b0b2
pkg/internal/builtintest: don't print superfluous newlines by @uhthomas in 8b32c49
internal/tdtest: document how the name field is used by @rogpeppe in deab307
internal/e2e: add a test for a private github repo by @mvdan in 4d2ba88
internal/ci: add gcloud auth to the e2e tests by @mvdan in 95a88a5
CONTRIBUTING: clarify two sections by @cedricgc in d947a69
internal/e2e: add a "cue mod upload" end-to-end test with gcloud by @mvdan in a060f85
internal/e2e: rename existing testscript and add a summary by @mvdan in 4dba8dd
internal/e2e: tweak how we use secret env vars by @mvdan in d3efde7
internal/mod/modfile: add copyright message by @rogpeppe in f9c8d98
cmd/cue: cue mod upload command by @rogpeppe in ca20656
internal/ci: enforce vet and mod tidy on all modules by @mvdan in 2ae1a9e
internal/e2e: run go mod tidy by @mvdan in 8b95971
cue/load: do not format registry as a string by @rogpeppe in 4fd631d
internal/mod/modzip: rename from internal/mod/zip by @rogpeppe in 5365838
cmd/cue: wire up OCI authorization by @rogpeppe in b2ac3f7
internal/registrytest: remove _registry remnants by @rogpeppe in 273602f
internal/ci: only run e2e tests in source repo by @myitcv in b15fcb0
internal/ci: test internal/e2e on protected branches by @mvdan in d72997f
cmd/format: be consistent with whitespace in lists by @uhthomas in d70007c
internal/e2e: first version of the end-to-end module tests by @mvdan in 8c826bc
cmd/cue: support type parameters in get go by @uhthomas in 3b4e03d
cue: add more godoc links by @mvdan in 286dfcb
cmd/cue: support unsafe pointer in get go by @uhthomas in 05ceba6
spec: fix two errors in the dynamic fields example by @SteVwonder in 200a8ec
README: add a direct mention of the community calendar by @mvdan in 8a98ac0
cmd/cue/cmd: wire up modmux by @rogpeppe in ac1b433
internal/mod/modmux: new package by @rogpeppe in 8e24597
cue/format: indent list elements correctly by @uhthomas in eddccfc
internal/registrytest: do not assume subdirectory by @rogpeppe in f892345
internal/mod/modregistry: remove error return from New by @rogpeppe in 1e26aa2
internal/mod/modresolve: new package by @rogpeppe in 2a7d1d6
internal/mod/module: add CheckPathWithoutVersion by @rogpeppe in c6da768
cue: make use of some godoc links by @mvdan in 63307bd
internal/registrytest: support prefix by @rogpeppe in 6c71b2c
cmd/cue/cmd: support CUE_REGISTRY by @rogpeppe in d5c0745
update ociregistry dependency by @rogpeppe in a43792c
internal/mod: kick off WIP doc to track FAQs, points to document by @myitcv in b664f0c
pkg/path: use a subtest helper to test for each OS value by @mvdan in 1227a83
internal/core/adt: avoid chatty tests by @mvdan in 55c6db6
internal/mod/zip: skip SizeLimit tests with -race by @mvdan in 91d9766
internal/mod/zip: silence "err value not used" warnings by @mvdan in 665d19a
internal/mod/zip: use testing.T.TempDir by @mvdan in fd8d5f9
internal/mod/zip: make all tests parallel by @mvdan in b004dd6
internal/mod/zip: remove duplicate test case by @mvdan in 6c51cf0
cue/load: make Config.Registry an ociregistry.Interface by @mvdan in fefeb36
internal/registrytest: rewrite in terms of io/fs by @mvdan in 5f19042
internal/registrytest: move from cue/load/internal by @mvdan in 633874c
internal/semver: copy from golang.org/x/mod by @rogpeppe in a9a6965
internal/cueexperiment: parse CUE_EXPERIMENT by @rogpeppe in b4583de
cue/load: update for OCI modules by @rogpeppe in b951b07
internal/mod/modregistry: new package by @rogpeppe in 3c368d3
update testscript so that it propagates GORACE by @mvdan in e3d42af
cmd/cue: do not ignore Encoder.Close errors on export by @mvdan in f3a515e
cmd/cue: add more test case for exporting to a filename by @mvdan in 388f9a1
internal/ci: set GORACE=atexit_sleep_ms=10 for go test -race by @mvdan in cbdd996
internal/core/export: fix a few staticcheck warnings by @mvdan in 6923617
cmd/cue/cmd: remove a few unused parameters by @mvdan in 2f6b27b
go.mod: update a few dependencies by @mvdan in c08344a
cue: simplify the reflect checks in Value.Decode by @mvdan in 8709d8a
cue/ast/astutil: use generics to remove some reflect by @mvdan in b8cb9a4
cue/load: use tdtest for TestLoad by @rogpeppe in 7389fe9
internal/tdtest: clean filenames before comparison by @rogpeppe in 28f34a2
internal/cuetxtar: report full result for cuetxtar test failures by @rogpeppe in bfa250d
internal/mod/modfile: new package by @rogpeppe in 551fe68
internal/mod/module: improve error message by @rogpeppe in 0e95843
internal/mod/zip: adapt to CUE semantics by @rogpeppe in 3142030
internal/mod/mvs: adapt to CUE semantics by @rogpeppe in 4eca0c7
internal/mod/mvs/internal/...: remove ignore build tags by @rogpeppe in a102419
internal/mod/module: adapt to CUE semantics by @rogpeppe in 38cf584
internal/mod/mvs: copy from cue/load/internal/mvs by @rogpeppe in 204665c
internal/mod/module: split module.go by @rogpeppe in c6e91b1
internal/mod: copy files from golang.org/x/mod by @rogpeppe in 6f5b370
cmd/cue: update the list of output formats by @mvdan in 42ae8e4
cue: minor drive-by cleanups by @mvdan in a44c805
all: fix two minor printf bugs spotted by staticcheck by @mvdan in 7b49758
all: fix issues spotted by nilness by @mvdan in 382449b
pkg/math: reuse Ln2 and Ln10 in Log2E and Log10E by @mvdan in fe2f216
pkg: teach gen.go about go/types by @mvdan in 2091170
pkg: swap go/build for go/packages in gen.go by @mvdan in e9a412d
bump golang.org/x dependencies by @mvdan in bf3ac20
all: clean up some TODOs for old Go versions by @mvdan in 106fc3a
cue: make use of Go 1.20+ APIs by @mvdan in fae9c82
internal/core/adt: change slice type of notify by @mpvl in 3165a5e
internal/core/adt: rename node to vertex by @mpvl in 0b96e3b
internal/cuetxtar: allow using a fallback golden set by @mpvl in 826f28c
internal/core/adt: hoist the test body of TestEval by @mpvl in ca254d6
internal/core/adt: add new closedness implementation by @mpvl in 5062118
internal/tdtest: make function detection more robust by @mpvl in 49728f7
internal/tdtest: mimic replacement of testing.Run in Select by @mpvl in 1763cea
cue/load: add package import cycle error by @bozaro in 220b44e
cue: decode empty list as empty slice instead of slice-typed nil by @bozaro in 66ebe0f
internal/core/adt: fix nil pointer dereference by @bozaro in 3286ead
pkg/math: fix Log2E and Log10E constant expressions by @mvdan in a1038f7
pkg/math: add tests which show the API constants by @mvdan in 63a4256
all: add Go 1.21, drop Go 1.19 by @mvdan in 3a101ba
all: minor wins with strings.Cut and utf8.AppendRune by @mvdan in 72ba066
cmd/cue: fix up fmt_multi comparison by @mvdan in d4d109e
encoding/gocode: don't require output to be stable by @mvdan in 3bf3dbd

`v0.6.0`

Compare Source

The main focus of this release is the introduction of required fields, as well as fixing a number of issues and regressions introduced in the v0.5.0 release.

As a reminder: users can register their projects with unity, our regression and performance testing setup. unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. unity continues to catch multiple issues with each release. Adding your project to unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. Follow this link to learn more about Unity, install it, or get in touch with any questions.

Thank you to @4ad, @Abirdcfly, @alexandear, @chee-zaram, @eraserhd, @ghostwheel42, @joanlopez, @jpluscplusm, @kcburge, @mpvl, @mvdan, @myitcv, @rogpeppe, @toshi0607, and @zeithaste for contributing to this release!

API

CL 543335 adds arch to set of injectable system variables understood by cue/load. The text at cue help injection explains how this in more detail.

CL 552142 adds support for zero values in cue.Value.Float64, which has the effect of fixing the error when attempting to use strconv.FormatFloat with a zero value.

CL 548783 fixes a long-standing bug to make HTML escaping in JSON an opt-in. This means that cue export now respects the --escape flag when set, and encoding/json only escapes HTML when HTMLEscape is used.

Language

Required fields

The main focus of the v0.6.0 release is the introduction of required fields.

CUE already supports the “optional field constraint”, denoted foo?: value.

Required fields add a “required field constraint”, denoted foo!: value, which is like foo?: value, but requires a regular field be provided for foo (a field foo: without !: or ?:).

We refer to optional field constraints and required field constraints collectively as “field constraints”.

As a general rule, all data and data templating should be defined with regular fields, whereas schemas would be defined in terms of field constraints. Of course, CUE being CUE, mixing these two fields is allowed: this rule is not a restriction but suggested as a matter of style and proper usage.

Here are some examples of how exclamation marks can be used to express things that were previously not possible.

#Def: {
    kind!: "def"
    intList!: [...int]
}

Using required fields can also result in better error messages. Consider this schema:

#Person: {
    name: string
    age?: int
}

Note that this is non-idiomatic, because our new guidelines suggest schemas should only be defined in terms of field constraints, but we will use this for illustration purposes.

Now consider this usage of #Person:

jack: #Person & {age: 3}

In data mode, the error message here is currently jack.name: incomplete value string, which does not provide much actionable information to the user to help them fix the problem.

Now consider how #Person looks with required fields, idiomatically only using field constraints:

#Person: {
    name!: string
    age?:  int
}

jack: #Person & {age: 3}

Now the error message reads:

jack.name: field is required but not present

which more closely reflects the underlying problem..

This error could be resolved by adding jack: name: "Jack".

For more details and background on the change, please see the original required fields proposal.

Other changes

Whilst it should not be a breaking change from a CUE perspective, we have upgraded to use github.com/cockroachdb/apd/v3. We have also increased apd.Context precision from 24 to 34.

CL 551207 adds support for making dynamic fields optional or required. For example, the following is now possible:

x:	"y"
(x):  "foo"
(x)?: "foo"
(x)!: "foo"

and yields:

x: "y"
y: "foo"

CL 546886 removes support for old-style :: definitions. This also includes deprecation support. In a similar vein, CL 547011 removes the last vestiges of <foo>: T. This was once the notation for pattern constraints.

Spec

Various bug fixes, with special thanks to @nicuveo for raising many of these.

Builtins

The following four functions have been added to the net package:

PathEscape
PathUnescape
QueryEscape
QueryUnescape

Thanks to @eraserhd for this change.

CL 549087 reimplements pkg/list.Sort. The resulting reduction in the number of allocations and other work gives rise to a ~80% reduction in running time against CUE benchmarks.

`cmd/cue`

CL 547212 improves the documentation for the -l flag passed to cue import. This addresses a frequent point of confusion in questions to GitHub Discussions and on Slack.

CL 550616 fixes cue get go to respect the --exclude flag for constants. This makes it possible to (for example) exclude all unexported identifiers from a cue get go run.

CL 555576 fixed an important bug where cmd/cue vet was not properly consuming all input data.

CL 556526 fixed a bug where CUE files beginning with an underscore were not being loaded when explicitly given as filename arguments.

WebAssembly (Wasm)

We have added preliminary support for Wasm. Users can compile code from any language and toolchain that supports Wasm into plugins that are dynamically loaded by CUE. Users can then call and use functions from these Wasm modules, just like they can use standard library functions.

See the documentation at cuelang.org/go/cue/interpreter/wasm to learn more about Wasm and its current limitations.

Changelog

Expand for the full changelog

internal/core/dep: always introduce Environment for Comprehension Value to fix panic by @mpvl in 99e8578
internal/core/dep: adapt Recurse to mimic dep.Visit by @mvdan in 97d7109
internal/ci: use cue-lang/cuelang.org workflow_dispatch for tip by @myitcv in 33b7393
cmd/cue: fix regression when injecting vars with cue cmd by @mvdan in da3ee7d
internal/core/adt: lets of comprehensions are multi lets by @mpvl in 43b4674
internal/core/adt: always mark let in comprehension as "complete" by @mpvl in 5123737
cue/ast: clarify what is a valid identifier by @mvdan in c4ced5e
internal/core/adt: find late-stage conflict errors by @mpvl in 0c48837
internal/core/adt: add tests to fix 2481 by @mpvl in d3444e3
internal/core/adt: fix stack overflow with comprehensions by @mpvl in 33071c0
deps: upgrade to go1.20.6 for release builds by @myitcv in 538eb9c
internal/core/compile: reject "_" as an alias name by @mvdan in bcbe967
all: remove a few more unused bits of code by @mvdan in c8e51a5
internal/core/dep: prevent passing "empty" vertices to tools/flow by @mvdan in c3eda1d
internal/core/adt: do not delay processing of fields by @mpvl in e7cfb50
internal/core/adt: add tests for upcoming issues by @mpvl in cabc1db
CONTRIBUTING: fix references to the old Unity repo by @mvdan in 23e265d
cmd/cue: print returned error by @mpvl in 450ff90
deduplicate content between README and CONTRIBUTING by @mvdan in 4c48cee
move doc/contribute.md to CONTRIBUTING.md by @mvdan in db28ec6
readme: warn new contributors not to use SSH auth by @jpluscplusm in f4c5639
internal/core/adt: pass state to addList by @mpvl in b38aece
internal/core/adt: set scalar more proactively by @mpvl in ab15bb8
internal/core/adt: better error message for cycles by @mpvl in 5e84a6d
internal/ci: count number of Signed-off-by lines by @myitcv in 4ba1b15
internal: remove a few unused APIs by @mvdan in 1c1a7b3
cue/load: fix Instances race by @rogpeppe in c10d7cb
cue/load: allow _*.cue files when explicitly listed by @myitcv in b16f6ce
internal/core/dep: fix recursive let processing by @mpvl in ca1f812
internal/core/dep: add Dependency.Recurse by @mpvl in f6e49bd
internal/core/dep: prepare for public APi by @mpvl in 0554d4e
internal/core/adt: mark comprehension key as dynamic by @mpvl in d4fd104
internal/core/dep: further improve dependency analysis by @mpvl in f513654
internal/core/dep: add more tests ahead of changes by @mpvl in 202eb3e
cue: fix some low hanging fruit from staticcheck by @mvdan in 41b38fe
all: replace godebug/diff with go-cmp/cmp by @mvdan in fa6e229
encoding/gocode/gocodec: use different generic type signature by @rogpeppe in 1a98ee1
internal/core/dep: add references and line in test output by @mpvl in 518bafa
internal: use Scanner API to parse attributes by @rogpeppe in 3400e74
internal/core/dep: require importPath argument by @mpvl in 4fcf29c
internal/core/dep: handle inline composite literals by @mpvl in 07ae1be
cue: report useful error for uninitalized Context by @mpvl in b8e2bf0
cue: add extra TestAttributeString test by @rogpeppe in 876af7a
internal/core/export: avoid _#def if unnecessary by @mpvl in d112f64
cmd/cue/cmd: add test for issue 2251 by @mpvl in 19af1e9
cue/scanner: add Offset method and export DontInsertCommas by @rogpeppe in de9e760
cue: add more attribute tests by @rogpeppe in d8a0e26
internal: change attribute tests to be less implementation-specific by @rogpeppe in 7741d21
encoding/gocode/gocodec: allow cue.Context by @rogpeppe in 1e76095
internal/core/dep: add and modify some tests for issue 2247 by @mpvl in 24e8d56
internal/core/export: fix panic converting int label to identifier by @mpvl in 24f3fb3
encoding/json: check that required fields are present by @mpvl in adbe80e
pkg/encoding/json: add tests that needs to be fixed by @mpvl in 8df1034
pkg/encoding/json: add more structure to tests by @mpvl in 6922e14
cue: document UnifyAccept by @mpvl in c054274
internal/core/export: preserve original field aliases by @mpvl in 7be6224
internal/core/compile: fix offset error in pattern alias by @mpvl in 914d64d
internal/ci: consistently trigger Unity as porcuepine by @mvdan in a0510ac
internal/ci: bump Go and GoReleaser prior to alpha.2 by @mvdan in b6a32da
correct misleading phrases in documentation by @chee-zaram in 0755dc8
internal/core/export: avoid panics on computed comprehensions by @mvdan in 6db2253
internal/core/adt: return from Accept earlier for hidden fields by @mpvl in c724eef
cue/ast: fix staticcheck warnings by @mvdan in cc6b544
internal/core/adt: add missed error by @mpvl in 19749aa
internal/core/adt: fail on missing required field in comprehension by @mpvl in a991bd6
cue: allow iterating hidden fields and definitions of embedded scalars by @mpvl in de44cab
internal/core/adt: add position for required field error by @mpvl in 452e143
internal/core/validate: allow required fields in definitions by @mpvl in 317f88d
cue/ast: support specifying required fields in NewStruct by @mpvl in 1432683
tools/flow: check cycle marker by @mpvl in 9a566ed
spec: add definition for dynamic fields by @mpvl in 3a635fc
spec: various fixes by @mpvl in e46324e
cmd/cue: properly consume all data input in vet by @mvdan in b22ec6a
cmd/cue: add AllocBytes and AllocObjects to stats by @mvdan in 03d85b8
increase apd.Context precision from 24 to 34 by @mvdan in 7bcbcd6
update to cockroachdb/apd v3 by @mvdan in 4728223
cue: add a "decimal" benchmark by @mvdan in f3be10a
deps: switch to use quicktest instead of testify by @myitcv in 12908b3
cue/testdata: add regression test for #2244 by @mvdan in 442c023
internal/cuetest: remove support for CUE_LONG by @mvdan in cb461fd
all: sed-replace all trivial uses of ioutil by @mvdan in f56ccf0
pkg/path: remove unused code by @rogpeppe in ab48c0f
encoding/protobuf/jsonpb: remove unused code by @rogpeppe in b2476bd
encoding/protobuf: remove unused code by @rogpeppe in b41f26f
tools/fix: remove unused code by @rogpeppe in 1f888b5
all: use strings.Builder in a few more places by @mvdan in 97cba0b
internal/encoding: remove unused code by @rogpeppe in 251790e
encoding/openapi: remove unused code by @rogpeppe in 36645d1
all: go fix to remove old build tags by @mvdan in 8868ae6
internal/ci: trigger Unity on master as porcuepine by @mvdan in 2148aed
internal/ci: remove cue-unity/unity from codereview.cfg by @mvdan in c341427
internal/core/conver: make use of reflect.Value.IsZero by @mvdan in 5318af1
internal/ci: further tidy up by @myitcv in 82f96c5
cue/interpreter/wasm: add user-level docs by @4ad in 40fb30d
cue/interpreter/wasm: add Wasm support for abi=c by @4ad in 0520a3f
internal/pkg: move pkg/internal to internal/pkg by @4ad in 88922d1
codereview.cfg: add cue-unity-new by @mvdan in a670427
doc/tutorial: fix typo by @toshi0607 in 2304cb5
cue/load: replace go-internal/semver with x/mod by @mvdan in 6c92698
internal/cuetxtar: print error details by @rogpeppe in 80d6ea0
tools/flow: support tasks inside slices by @rogpeppe in 6e0366f
internal/core/convert: split the cue tag commas after the last quote by @ghostwheel42 in 49a64f4
pkg/net: add Path{E,Une}sape and Query{E,Une}scape by @eraserhd in 9082446
cmd/cue: refactor our use of cobra by @mvdan in 59080b6
cmd/cue: do not defer closing files in fmt's loop by @mvdan in 7f79469
cmd/cue: check all file I/O errors in fmt by @mvdan in 8c6d9ba
docs/tutorial: revert to using cue eval -i by @myitcv in 5e66c83
all: move pkg/gen and internal/cmd/qgo to build-ignored files by @mvdan in bad36b2
internal/ci: use go1.20.3 for releases by @myitcv in 9db1b95
internal/tdtest: use field name in default error message by @mpvl in 401cab2
internal/core/adt: fix Definition closedness bug in API by @mpvl in c3c8eb7
update txtpbfmt to drop indirect dependency on glog by @mvdan in 410eea1
internal/core/adt: fix NotEqualOp for lists with differing lengths by @mvdan in 6e185bb
cmd/cue: remove skipped test scripts for fixing old definitions by @mvdan in 9505e90
all: make HTML escaping in JSON an opt-in by @mvdan in 48207fb
all: add tests to cover HTML escaping via encoding/json by @mvdan in 1aefd09
cue/build: remove context.Context field by @rogpeppe in 1932295
cue/ast: fix IsValidIdent for _0 by @rogpeppe in 9422314
internal/diff: remove unused code by @rogpeppe in 9e22283
cmd/cue/cmd: remove unused code by @rogpeppe in aa8c66f
internal/core/adt: fix let closedness issue with API use by @mpvl in 731ddd9
internal/core/export: avoid introducing shadowing by @mpvl in 1c9a3b2
internal/tdtest: new table-driven test package by @mpvl in 102150d
cue: more support for required fields for selectors by @mpvl in 0e16084
internal/core: fail on missing required only when concrete by @mpvl in f85172a
cue: fail on required field in various cases by @mpvl in e7d7c6a
internal/core/adt: add wrapper for inline Vertex by @mpvl in 071c4ab
internal/core/export: always export required fields by @mpvl in d5dd9ec
cue: remove field type by @mpvl in d05d9c1
cmd/cue: avoid loading the current package in cue help by @mvdan in 143b102
all: remove duplicate words in comments by @Abirdcfly in d8c71fa
internal/ci: fix cache eviction by @myitcv in 53d3bc7
internal/ci: address review feedback from CL 551352 by @myitcv in 06397b5
cue: add support for zero values in Value.Float64 by @kcburge in 8d31dad
cue/load/tags: add arch to set of injectable system variables by @jpluscplusm in 752b8e4
internal/ci: allow trybot workflows to be workflow_dispatch-ed by @myitcv in 09221a3
internal/core/adt: required fields checked for closedness by @mpvl in 42580d5
doc/ref/spec.md: fix uint16 and uint32 values range by @joanlopez in c67fe60
all: correct typos and duplicate words in comments by @alexandear in 2e28b01
cue/errors: remove redundant Sort call in list.sanitize by @zeithaste in f106acf
internal/ci: refactor CI workflows by @myitcv in d71a76c
internal/ci: remove hard-codings in base package by @myitcv in f881884
internal/core/adt: change addList signature by @mpvl in 0c840f6
internal/core/adt: introduce ArcNotPresent by @mpvl in e3a7fcf
internal/core/adt: use value array for Disjunction by @mpvl in 166ac88
internal/core/adt: specialize injectComprehension by @mpvl in fa4f2d3
internal/core/adt: hoist comprehension loop body by @mpvl in e0f5681
internal/ci: move evict_caches to base by @myitcv in cef63a3
internal/ci: remove mention of matrix and runner from base by @myitcv in 3ed9f92
internal/ci: remove trybot from push branches by @myitcv in 5cd427a
internal/ci: refactor base caching pattern by @myitcv in 92b28c4
internal/ci: drop pullThroughProxy step by @myitcv in 79aceb7
cue/errors: better vetting of error formats by @rogpeppe in c630554
internal/ci: improve push_tip_to_trybot defaults by @myitcv in be0601b
internal/ci/github: rename repo -> _repo by @myitcv in 646e965
internal/ci: import repo package once in github package by @myitcv in 7aec30c
internal/ci: drop parameter from trybotDispatchWorkflow by @myitcv in 6318def
cue/load: minimal module fetching implementation by @rogpeppe in cb9d6ed
bump golang.org/x and go-internal deps by @mvdan in 3f51337
internal/ci: bump GoReleaser to v1.16.2 ahead of v0.5.0 release by @myitcv in 5ec06d9
internal/ci: rename core -> repo by @myitcv in 6d6ffb4
start using Go 1.20, drop Go 1.18 by @mvdan in d1a6da8
internal/ci: switch to actions/setup-go@v4 by @mvdan in d9c354b
internal/ci: always force push to trybot repo by @myitcv in ed2a9c7
cue/load: avoid using ioutil.ReadDir to list directories by @mvdan in d077202
pkg/tool: small fixes to CUE docs by @mvdan in 3d08fb2
internal/ci: use unity and cuelang.org config from core by @myitcv in 4cbb563
internal/ci: DRY up core based on new base defaults by @myitcv in 1195b3d
internal/ci: establish better defaults in base by @myitcv in af02a2c
internal/ci: move away from using defs in github by @myitcv in 7a7ca81
internal/ci: move away from using definitions in base by @myitcv in d7a1740
internal/ci: use core directly instead of _base alias by @myitcv in f446b87
internal/ci: move away from using defs as params in base by @myitcv in 305dc1d
internal/ci: collapse gerrithub package into base by @myitcv in 9729270
internal/ci: tweak gerrithub package "params" ahead of move to base by @myitcv in 1980621
internal/ci: split base into separate files by @myitcv in 3a52c19
internal/ci: rename base parameter field name by @myitcv in cdd5730
internal/ci: move pushTipToTryBot workflow to gerrithub package by @myitcv in 0290e04
internal/ci: rename gerrithub #dispatchWorkflow by @myitcv in 0cfd8c5
internal/ci: remove hard-codings in gerrithub package by @myitcv in f5277b9
internal/ci: move configuration from workflows.cue to core by @myitcv in 1bb7e10
internal/ci: remove workflow files pre generate by @myitcv in b418955
Revert "internal/ci: move pushTipToTryBot workflow to gerrithub package" by @myitcv in 87db1a5
Revert "internal/ci: rename base parameter field name" by @myitcv in 2461c51
Revert "internal/ci: move configuration from workflows.cue to core" by @myitcv in 26ff449
Revert "internal/ci: rename gerrithub #dispatchWorkflow" by @myitcv in 38156f2
Revert "internal/ci: remove workflow files pre generate" by @myitcv in 0d89b9b
Revert "internal/ci: split base into separate files" by @myitcv in ee7509f
internal/ci: split base into separate files by @myitcv in d638a35
internal/ci: remove workflow files pre generate by @myitcv in f723eb7
internal/ci: rename gerrithub #dispatchWorkflow by @myitcv in d276f58
internal/ci: move configuration from workflows.cue to core by @myitcv in 5a0922e
internal/ci: rename base parameter field name by @myitcv in 584f3f0
internal/ci: move pushTipToTryBot workflow to gerrithub package by @myitcv in e440409
internal/ci: hoist dispatch keys to base by @myitcv in e3ed297
internal/ci: move workflows.cue defs to better places by @myitcv in 0250807
internal/ci: hoist cache steps to base package by @myitcv in 019f6dd
internal/ci: improve base package docs by @myitcv in 57066d4
internal/ci: make our checkout step configurable by @myitcv in ee093e2
internal/ci: specify githubRepositoryPath directly by @myitcv in 9c075ca
internal/ci: move core._#URLPath to base by @myitcv in dd965ad
internal/ci: move core.#codeReview to base by @myitcv in 8b14836
internal/ci: move core package away from definitions by @myitcv in 5475370
internal/ci: improve core package docs by @myitcv in e1a8bee
internal/ci: refactor the way we declare workflows by @myitcv in 09b06ff
internal/core/adt: hoist value validation by @mpvl in eea60b9
internal/core/adt: hoist comprehension code by @mpvl in 47f0025
internal/core/adt: reorganize nodeContext fields by @mpvl in f807ee8
internal/core/adt: unexport more methods by @mpvl in ce65141
internal/core/adt: unexport VertexStatus by @mpvl in 185eed7
internal/core/adt: remove state arg from Err, SetValue, and UpdateValue by @mpvl in 97904e3
internal/core/adt: unexport Unify by @mpvl in 7851142
internal/core/adt: clone arcMap by @mpvl in dbf7bb8
internal/ci: remove the cachePost steps by @myitcv in 6843415
internal/ci: bump default of cue version to v0.5.0-beta.5 by @myitcv in 3121a27
internal/ci: update base early git checks from alpha.cuelang.org by @myitcv in 4509e7f
internal/core/adt: allow required dynamic fields by @mpvl in c3138e3
internal/ci: skip test cache on protected branches by @myitcv in 21f494d
internal/core/adt: implement required fields. by @mpvl in 0b681f5
cue/ast: prepare for required fields by @mpvl in 1da0fd9
internal/core/adt: merge OptionalField and Field types by @mpvl in 1822d52
internal/ci: bump pinned version of Go for releases by @mvdan in e5cd9ac
internal/ci: use a group of cue commands for go:generate by @mvdan in d16b575
cmd/cue: remove fallback version code for Go 1.17 by @mvdan in e806bba
internal/ci: rerun trybot workflows post eviction by @myitcv in a632d16
internal/ci: tidy up use of curl for GitHub API calls by @myitcv in f4d0802
internal/ci: do not evict caches on push to ci/test by @myitcv in 254f0f1
internal/ci: evict workflow caches on a daily basis by @myitcv in ee81e77
internal/ci: bump to use ubuntu-22.04 as our linux machine by @myitcv in 4686700
internal/ci: use actions/cache/restore for non-protected branch by @myitcv in 38ee1c2
cue/load: don't read parent directories in tests by @mvdan in 9e014c3
internal/ci: reset git directory timestamps faster by @mvdan in c7fd893
internal/ci: fix up modified times for all directories by @mvdan in e31b8f7
internal/ci: run long tests on linux when testing CLs by @mvdan in daa4022
cmd/cue: remove go install long tests by @mvdan in fa1f369
internal/ci: restore git modified times after cloning by @mvdan in 829bd64
doc/tutorial/kubernetes: fix build breakage by @mpvl in b05585b
internal/core/adt: use ? in debug output by @mpvl in 5fe040a
internal/core/adt: optional field rewrite by @mpvl in 19bfdb9
internal/ci/gerrithub: update comment to be clearer by @mvdan in 4fed730
internal/core/adt: finalize earlier for arcs by @mpvl in c80a690
internal/core/adt: pass member type to insertField by @mpvl in 27b096c
internal/core/adt: remove duplicate statement by @mpvl in 383ff3e
internal/core/adt: export arcType and friends by @mpvl in 4f32fb4
internal/core/adt: revert fix for 2209 by @mpvl in c8e580e
cue/ast, cue/parser: parse function types by @4ad in 8f0fe77
cmd/cue: add CUE_DEBUG_PARSER_TRACE environment variable by @4ad in 34a27bb
internal/core/adt: fix possible infinte loop for API usage by @mpvl in 782cae0
internal/core/adt: fix regression in comparing to bottom by @mpvl in 9954cc2
internal/core/adt: remove unnecessary check by @mpvl in 1a0a81b
internal/core/adt: detect closed lists as fatal errors by @mpvl in 06fbefe
internal/core/adt: sharpen condition for scalar setting by @mpvl in 9b1f222
cmd/cue: respect --exclude for constants by @rogpeppe in b44e16d
cmd/cue: add test case for --exclude by @rogpeppe in 2fa4ee6
cue/context: support internal interpreters by @mpvl in 7617de2
internal/cuetxtar: configurable load.Config by @rogpeppe in 7485f58
cue/load/internal/...: copy pkgs from Go source by @rogpeppe in 5723470
cue/load: refactor loader by @rogpeppe in c28d75a
cue/load: move code before refactoring by @rogpeppe in 87b91c9
internal/ci: use simpler "go get" to pull a version through the proxy by @mvdan in eff0108
cue/stats: use int64 for stats counters by @mvdan in 7073554
cmd/cue: remove use of stderr directive by @mpvl in 7d89acd
doc/ref/spec.md: add required fields by @mpvl in 9a7c8fb
pkg/list: simply template for Ascending by @mpvl in 9dbb373
cue/testdata/benchmarks: add benchmark for sort by @mpvl in 9f538a6
cue/load: add initial module.cue schema by @rogpeppe in b2087b9
internal/ci: only run release workflow on main repo by @myitcv in ce37b63
cue/load: use cue package to interpret module.cue file by @rogpeppe in 1b6fb4e
cue/load: minor tweaks by @rogpeppe in d78f1a2
.github: clarify what we mean by "latest release" by @mvdan in 03e8f29
internal/ci: do not release "zero" releases in release workflow by @myitcv in 02e19c8
internal/ci: fix goreleaser in non-snapshot mode again by @mvdan in ae0d7ca
cmd/cue: include Go in the version command by @mvdan in 879f902
internal/ci: fix and test the release workflow on branches by @mvdan in 266bb32
cmd/cue: mention doc location for -l flag by @rogpeppe in 56caeaf
internal/core/adt: fix 2235 by @mpvl in 3c8f0ad
pkg/list: reimplement sort by @mpvl in 2e70ac7
cue/scanner: remove block comment scanning by @mpvl in 5d0a6f2
internal/core/adt: add tests for 2235 by @mpvl in 125e40b
cue/parser: remove last vestiges of : T by @mpvl in fd170da
all: remove support for :: by @mpvl in a6055ea
internal/encoding/{json|yaml}: disallow non-regular fields by @mpvl in 76e0be4
cmd/cue: add tests for issue 1926 by @mpvl in 9b573be

`v0.5.0`

Compare Source

This release focuses on changes to the implementation of comprehensions, the algorithm for detecting cycles in CUE, and the reimplementation of let comprehensions as fields.

Also included are a number of bug fixes and changes to help the KubeVela project upgrade off CUE v0.2.2 to the latest release. v0.5.0 is the first release since v0.4.3 back in April 2022. It has been a long time in the making, and is comprised of 277 commits.

It is worth noting that we do not plan nor wish for such long gaps between releases. For more details on upcoming releases and steps we are taking to increase release cadence as well as our confidence in each release, please see this discussion.

As a reminder: users can register their projects with unity, our regression and performance testing setup. unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. unity continues to catch multiple issues with each release. Adding your project to unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. We are currently in the process of releasing Unity as a GitHub App on the public Marketplace. Sign up to receive updates; we will be in touch as soon as the GitHub App is ready.

Thank you to @djosephsen, @joaopapereira, @mpvl, @mvdan, @myitcv, @qequ, @rogpeppe, @rytswd, @satotake, @spachava753, and @tmm1 for contributing to this release!

Project-level changes

Various CI-related changes have been made to simplify and streamline the GerritHub-based CI setup across the various CUE repositories. A common base package is vendored into each repository and used as a template for GitHub workflows and other configuration. For those interested in studying the setup, please see the files beneath internal/ci.

This release drops support for go1.16.x , go1.17.x and go1.18.x, is tested against go1.19.x and go1.20.x, and is built using go1.20.2.

Our dependency on github.com/rogpeppe/go-internal is upgraded to v1.9.0 and various testscript-related improvements have been made to CUE's tests.

GoReleaser has been upgrade to v1.16.2 as part of the release workflow. In a related change, CL 546920 moves us to a CUE-based source configuration for GoReleaser. This allows us to define the concept of 'latest', state which indicates whether we should perform the homebrew release and the Docker manifest latest steps. This fixes a long-standing bug whereby homebrew taps and Docker images were created for the latest release, regardless of whether that was a pre-release, or indeed a patch version of a non-current minor version.

As of CL 547507, CUE build artefacts published on GitHub are entirely reproducible, thanks to Go's support for reproducible, verifiable and verified builds.

Encoders

When cue import-ing YAML, the -R recursive flag now only recursively interprets text as YAML if it contains a newline CL 536902.

API

Various APIs have been transitioned to drop use of the deprecated cue.Runtime type, as well as migrating away from cue.Instance via cue.InstanceOrValue. Some use of these deprecated types remains: #1035, #1735, #1806. These will be tidied up in later releases as the API surface matures towards v1.0.0.

The cue package now supports InlineImports for Value.Syntax CL 541561. This leverages new support within the internal exporter to creating self-contained CUE. This change also deprecates Value.ResolveReferences().

Package cue adds Selector.Type to make it easier to pull out selector-specific information from a selector (for example, it makes it possible and cheap to retrieve the unquoted string label from a regular field selector) CL 542738.

Package cue adds Value.BuildInstance(). If a cue.Value exactly represents a package, BuildInstance() returns the build instance corresponding to the value CL 542769.

cue/stats is introduced as a new package for getting CUE operation statistics. The functionality is hoisted from internal/core/adt, but the package should for all practical purposes be seen as a new implementation. The stats have been aggregated as experimental functionality to the tools/flow package.

CL 546763 disallowed deprecated language features in the Go API. These features had long been deprecated in cmd/cue. This means that API operations will now fail on deprecated features whereas before they were handled in compatibility mode. The parser.FromVersion feature can be used to reenable these deprecated features.

Language

This release does not introduce any language changes. CL 537264 made some minor adjustments to the language specification to improve readability.

CL 541457 removes support for re-writing of old-style let declarations. This had already been deprecated for a long time and this change was made to enable support for aliases of embeddings.

Core evaluator

Per-field comprehensions

One of the major changes introduced in this release is how comprehensions are handled. CL 529524 move the evaluator to a model of per-field comprehensions.

Comprehensions are expanded for, if, and let clauses that yield zero or more structs to be embedded in the enclosing list or struct.

CUE does not allow cyclic dependencies between comprehensions if they result in an ambiguous set of fields. It does allow cascading insertions as in:

a?: int
b?: int
if a != _|_ {
    b: 2
}
if b != _|_ {
    c: 3
    d: 4
}

The way this works is that for fields with a fixed prefix path in a comprehension value, the comprehension is assigned to these respective fields.

More concretely, the above example is rewritten to:

a?: int
b: if a != _|_ { 2 }
c: if b != _|_ { 3 }
d: if b != _|_ { 4 }

where the fields with if clause are only inserted if their condition resolves to true. Note that this is not valid CUE; it may be in the future.

With this rewrite, dependencies in comprehension expressions are handled analogously to other expressions.

Note that a single comprehension may be distributed across multiple fields. The evaluator will ensure, however, that a comprehension is only evaluated once.

Analogous to reference cycles, as of CL 544129 we allow comprehensions to use the struct in which they are defined as source, as long as they do not introduce new fields, which would alter the source on which they iterate.

Reimplementation of cycle detection

The new algorithm is inspired by the cycle detection used by Tomabechi's ¹ and Van Lohuizen's ² graph unification algorithms.

Unlike with traditional graph unification, however, CUE uses references, which, unlike node equivalence, are unidirectional. This means that the technique to track equivalence through dereference, as common in graph unification algorithms like Tomabechi's, does not work unaltered.

The unidirectional nature of references imply that each reference equates an exact copy of the value it points to. This renders the original approach of node-pointer equivalence useless.

The new algorithm, a variant of Tomabechi's and Van Lohuizen's algorithm, looks at references equality on conjuncts, instead of node equality. This simplifies the accounting and allows for far simpler and precise accounting when using references instead of the traditional node equivalence.

More background info on cycles

We have to define when a cycle is detected. CUE implementations MUST report an error upon a structural cycle, and SHOULD report cycles at the shortest possible paths at which they occur, but MAY report these at deeper paths. For instance, the following CUE has a structural cycle:

f: g: f

The shortest path at which the cycle can be reported is f.g, but as all failed configurations are logically equal, it is fine for implementations to report them at f.g.g, for instance.

It is not, however, correct to assume that a reference to a parent is always a cycle. Consider this case:

a: [string]: b: a

Even though reference a refers to a parent node, the cycle needs to be fed by a concrete field in struct a to persist, meaning it cannot result in a cycle as defined in the spec as it is defined here. Note however, that a specialization of this configuration can result in a cycle. Consider

a: [string]: b: a
a: c: _

Here reference a is guaranteed to result in a structural cycle, as field c will match the pattern constraint unconditionally.

In other words, it is not possible to exclude tracking references across pattern constraints from cycle checking.

It is tempting to try to find a complete set of these edge cases with the aim to statically determine cases in which this occurs. But as Carpenter [^Carpenter] demonstrates, it is possible for cycles to be created as a result of unifying two graphs that are themselves acyclic. The following example is a translation of Carpenters example to CUE:

y: {
	f: h: g
	g: _
}
x: {
	f: _
	g: f
}

Even though the above contains no cycles, the result of x & y is cyclic:

f: h: g
g: f

This means that, in practice, cycle detection has at least partially a dynamic component to it.

The language specification contains a higher-level and more complete overview of structural cycles.

Hideto Tomabechi. 1992. Quasi-Destructive Graph Unification with
Structure-Sharing. In COLING 1992 Volume 2: The 14th International
Conference on Computational Linguistics.

Marcel P. van Lohuizen. 2000. "Memory-Efficient and Thread-Safe
Quasi-Destructive Graph Unification". In Proceedings of the 38th Annual
Meeting of the Association for Computational Linguistics, pages 352–359,
Hong Kong. Association for Computational Linguistics.

[^Carpenter]:
Bob Carpenter, "The logic of typed feature structures."
Cambridge University Press, ISBN:0-521-41932-8

Reimplementation of `let` comprehensions

CL 543362 made a change to internal/core to reimplement let comprehensions as fields. This makes it easier to track context as let comprehensions then follow the same paradigm as fields. It also allows debug information to be shown as to where lets are added in the tree. This change was accompanied by number of others that refined the approach.

Self-contained export

internal/core/export now implements an algorithm for generating self-contained CUE on export, an option that can further be refined by asking the exporter to inline imports. These internal changes manifest in changes to cue def and cuelang.org/go/cue that are described elsewhere.

Other changes

CL 545897 started tracking stats within the core CUE tests. This book keeping helps to spot likely regressions in performance early by collocating the stats with the CUE that is being evaluated.

Builtins

In the strconv package, strconv.FormatInt and strconv.FormatUint now support arbitary-precision format; see CL 538512.

CL 545898 improved the error messages for pkg builtins, by including the path in error in many cases, and passing a wrapped message for encoding/yaml.

CL 546237 allows incomplete list.MinItems constraints. Before it either returned false or true, ignoring that making a configuration more specific might still satisfy MinItems later on. CL 546238 made a similar change for struct.MinFields.

Tooling layer

Standard input is now parsed correctly in cue cmd-declared command tasks; see CL 541898.

`cmd/cue`

Version control system (VCS) information is included in cue version as of CL 540297. The Go version used to build cmd/cue is included as of CL 549302.

cue def now supports an --inline-imports flag which resolves imports to print a self-contained version of the command input. For example, given the txtar input:

-- cue.mod/module.cue --
module: "example.com/a"

-- in.cue --
package a

import "example.com/a/pkg"
import "list"

v: pkg.v

-- pkg/pkg.cue --
package pkg

v: { x: 3, y: x }

The running cue def --inline-imports in.cue will give:

package a

import "list"

v: {
	x: 3
	y: x
}

CL 546243 fixed a long-standing bug whereby the --ignore errors flag was not observed by cue eval.

Changelog

[release-branch.v0.5] internal/ci: use go1.19.8 for the release of v0.5.0 by @myitcv in d780488
internal/ci: fix cache eviction by @myitcv in a1d9054
internal/ci: address review feedback from CL 551352 by @myitcv in af01db1
internal/ci: allow trybot workflows to be workflow_dispatch-ed by @myitcv in 22156ef
internal/ci: refactor CI workflows by @myitcv in a4403eb
internal/ci: remove hard-codings in base package by @myitcv in 0eaee71
internal/ci: move evict_caches to base by @myitcv in 584b21e
internal/ci: remove mention of matrix and runner from base by @myitcv in 7c07680
internal/ci: remove trybot from push branches by @myitcv in 9f3af8f
internal/ci: refactor base caching pattern by @myitcv in 390bca5
internal/ci: drop pullThroughProxy step by @myitcv in a14fbf4
[release-branch.v0.5] internal/ci: bring inline with be0601b by @myitcv in f4d04a7
internal/ci: bump pinned version of Go for releases by @mvdan in 374a2cc
internal/core/adt: revert fix for 2209 by @mpvl in c0421b4
internal/core/adt: fix possible infinte loop for API usage by @mpvl in 1ce9120
internal/core/adt: fix regression in comparing to bottom by @mpvl in 87c79ef
internal/core/adt: remove unnecessary check by @mpvl in 28321f6
internal/core/adt: detect closed lists as fatal errors by @mpvl in 5d42c6c
internal/core/adt: sharpen condition for scalar setting by @mpvl in 3ba76ba
internal/ci: fix goreleaser in non-snapshot mode again by @mvdan in 576d0e4
internal/core/adt: fix 2235 by @mpvl in ca411de
internal/core/adt: add tests for 2235 by @mpvl in 89693e1
cmd/cue: include Go in the version command by @mvdan in 9b1f248
internal/ci: fix and test the release workflow on branches by @mvdan in 63749fe
cmd/cue: add evaluator stats support by @mpvl in d573e0c
cmd/cue: add tests for issue 345 by @mpvl in 352a736
internal/core/adt: filter more disjunctions by @mpvl in 5a6bd19
internal/core/adt: add tests for 2209 by @mpvl in 6b45d7e
internal/core/adt: improve mechanism for conjunct insertion by @mpvl in 887f564
internal/core/adt: add tests for conjunct insertion by @mpvl in 81e4cba
internal/core/adt: only set scalar if not already defined by @mpvl in f23e3d5
github: bring the bug report template up to date by @mvdan in b75fdc8
internal/ci: make github CLI shell invocations safer by @mvdan in 94765d6
internal/core: clone let upon use of for var references by @mpvl in 3a79e96
internal/core/debug: change notation for "multi" lets by @mpvl in fd05908
internal/core/adt: don't add errors to "void" arcs by @mpvl in 0b41dbb
cue/testdata/benchmarks: add benchmark for let key by @mpvl in a8d7c59
internal/core/adt: evaluate expressions directly by @mpvl in 8fb13d4
internal/core/eval: node should not finalize itself mid flight by @mpvl in 9d27e0d
cmd/cue: don't panic in vet if a schema has incomplete errors by @mvdan in f6841d1
internal/ci: deploy tip.cuelang.org via repository_dispatch by @myitcv in 632cc62
internal/ci: enable push_to_tip_trybot by @myitcv in fe692c5
internal/ci: apply various CI-related changes from cuelang.org repo by @myitcv in 4eaa946
internal/ci/goreleaser: actually make builds reproducible by @myitcv in 45aa5c0
internal/ci/goreleaser: make builds reproducible by @myitcv in 16edb00
cue/export/extract: fix comments with comprehensions by @mpvl in 959dc46
internal/core/adt: don't evaluate inlined structs prematurely by @mpvl in 45ff282
internal/core/adt: add tests for issue #2163 by @mpvl in a9f4fc3
internal/ci: review follow-up changes to goreleaser_tool.cue by @mvdan in 7ea44a3
internal/ci: switch to CUE based definition for goreleaser by @myitcv in 79a476b
internal/ci: import for current goreleaser configuration by @myitcv in e69c517
internal/ci: upgrade to later GitHub workflow schema by @myitcv in f036b34
internal/ci: upgrade to latest GoReleaser version by @myitcv in 248f2b3
goreleaser: formatting changes in Yaml file by @myitcv in e93b5ed
internal/ci: use newer versions of the docker github actions by @mvdan in f56600d
internal/core/adt: base error mode on requested state by @mpvl in 214e112
internal/core/adt: only set validation result when safe by @mpvl in 88857e0
internal/core/adt: pass desired state to more functions by @mpvl in 55cdb74
internal/core/adt: pass more state around by @mpvl in 3dfeb41
internal/core/adt: pass state to validation by @mpvl in 0954c6f
internal/core/adt: pass state to evaluate by @mpvl in 7d50228
internal/core/adt: avoid duplicate insertion of conjuncts by @mpvl in d341814
internal/core/adt: tighten uniqueness of conjuncts by @mpvl in a68c6ce
cue/parser: disallow deprecated language features in API by @mpvl in 67ace83
internal/core/adt: remove nested comprehension special casing by @mpvl in 3c0b2ec
README: fix the stale GitHub Actions badge by @mvdan in 4fee020
internal/core/adt: disambiguate let cache by @mpvl in 43fc681
internal/core/adt: update stats to fix build breakage by @mpvl in a800e6f
internal/core/adt: merge Conjunct and Partial processing by @mpvl in 121894c
internal/core/adt: remove assertion by @mpvl in 129c343
internal/core/adt: add test cases for issue 2119 by @mpvl in 2499719
internal/core/adt: add tests related to Issue #2113 by @mpvl in 525648d
internal/core/adt: evaluate let fields earlier in comprehensions by @mpvl in e5fb5af
internal/core/adt: detect cycles in patterns by @mpvl in c048135
cue: update Value.Source doc comment by @rogpeppe in 45ce7a3
tools/flow: add debug support via CUE_DEBUG_TOOLS_FLOW by @myitcv in d85f950
internal/core/adt: fix comprehension cycle regression by @mpvl in 32bfffd
internal/core/adt: add tests to address regressions by @mpvl in 82bf036
internal/core/adt: split some tests into files by @mpvl in 69ee994
infra: upgrade goreleaser by @myitcv in 7bdeb14
doc: simple whitespace change to track down GerritHub replication issue by @myitcv in 1bb7fed
cmd/cue: fix --ignore errors flag by @mpvl in ab14c86
pkg/list: make error of MaxItems consistent with MinItems by @mpvl in c5fbbab
pkg/struct: fix MinFields analogously to MinItems by @mpvl in 849371d
all: remove mistakenly added file by @mpvl in 68445d8
internal/core/adt: fix panic using builtin validators by @mpvl in 9bbc14b
internal/core/adt: don't bump state by @mpvl in b18d00f
internal/core/adt: prevent early error assignment by @mpvl in 27b6e87
internal/core/adt: relax cycle tracking by @mpvl in 9c761dd
pkg/internal: allow incomplete list.MinItems by @mpvl in 354f4e6
internal/core/adt: add tests for #2052 by @mpvl in 6162b95
internal/core/adt: fix redundant errors in calls by @mpvl in 959605e
drop support for Go 1.17.x ahead of the v0.5 release by @mvdan in 0292e7f
internal/core/adt: improved reporting disjunction errors by @mpvl in a8d68ad
internal/core/adt: avoid uninformative cyclic error by @mpvl in 1d8d8ff
internal/core/adt: remove over-aggressive deduplication by @mpvl in 74b4288
internal/core/adt: fix error checking bug by @mpvl in 28088ac
internal/core/adt: add cycle detection for alt evaluation path by @mpvl in 4eb2280
internal/core/adt: errors in let expressions are okay by @mpvl in 30b2007
pkg: improve error messages by @mpvl in fa36be4
internal/core/adt: add stats by @mpvl in e2a0ef6
internal/core/dep: handle recursive lets by @mpvl in 1d8663e
internal/core/adt: fix comprehension bug by @mpvl in 87347d2
internal/core/adt: remove redundant state change by @mpvl in 24576a0
cue/ast: fix StructLit.End by @rogpeppe in b23ece3
internal/third_party/yaml: fix float parsing by @rogpeppe in a4941ed
internal/third_party/yaml: slim down API by @rogpeppe in 794d078
doc/ref/spec.md: binary literals support _ separators as well by @spachava753 in 712d8c6
internal/core/adt: recursively pre-expand comprehensions by @mpvl in 102b034
internal/core/adt: represent comprehension clauses as list by @mpvl in b3bcc7a
internal/core/dep: remove useless code by @mpvl in 309b965
internal/core/adt: fix cycle detection bug for lets by @mpvl in f2b9479
internal/core/adt: allow self-referential comprehensions by @mpvl in f1daf4b
internal/core/adt: update state constants and docs by @mpvl in e4f4900
internal/core/adt: add conjuncts to dynamic list as well by @mpvl in 637a325
internal/core/adt: report cycle error in comprehension source by @mpvl in 6668dc8
internal/core/adt: rename test by @mpvl in f30a8e7
internal/core/adt: add IsDefined to filter out void arcs by @mpvl in 2ae37df
internal/core/adt: fix closedness regression by @mpvl in ed4f885
internal/core/dep: fix comprehension environment binding by @mpvl in 6824f7d
deps: bump golang.org/x/text dependency by @joaopapereira in dd1169c
.gitignore: add .DS_Store by @mpvl in 79d80ef
internal/core/adt: fix broken let lookup in embedded scalars by @mpvl in cad3f23
internal/core/adt: optimize cycle detection for disjunctions by @mpvl in 830b138
internal/ci: test and release on Go 1.19.x by @mvdan in fe50dff
internal/core/adt: remove problematic Ref deletion by @mpvl in 7518952
cue/testdata/benchmarks: add stats by @mpvl in 3bcf4a4
encoding/gocode: encode hex consistently like Go 1.19+ by @mvdan in f5c3e4e
doc/tutorial/kubernetes: mark both tests as long by @mvdan in 06aaef6
internal/core/adt: add test for issue 1837 by @mpvl in 839e33b
internal/core/adt: make some errors semi-permanent by @mpvl in 4a3a494
internal/core/adt: reduce size of ErrorCode by @mpvl in 53dfffa
internal/core/export: fix crash in dynamic fields by @mpvl in ad253ed
all: apply and follow Go 1.19's gofmt by @mvdan in 519d326
internal/core: implement let as fields by @mpvl in 36bd656
pkg: reuse pkg/gen to generate package godocs by @mvdan in df148ee
internal/core/adt: eliminate disjuncts for incomplete errors by @mpvl in c556a19
doc/tutorial/kubernetes: only run as a long test by @mvdan in 6551ea5
internal/core/adt: fix test by @mpvl in d3959eb
internal/core/adt: add tests for let by @mpvl in 7c7056c
internal/core/compile: prepare for let change by @mpvl in 739713c
internal/core/...: fix various attributes printing issues by @mpvl in 82933ad
internal/core/adt: remove StructInfo for unused structs by @mpvl in c89ab8b
internal/core/compile: add missing import in test by @mpvl in be9cc0d
internal/cuetxtar: add method for getting a single instance by @rogpeppe in e5f21db
internal/filetypes: not a file extension if the file starts with a dot by @rogpeppe in db0897b
internal/core/adt: defensive use of CloseInfo by @mpvl in 9e9786e
internal/filetypes: fix TestParseFile tests by @rogpeppe in 3290797
internal/cuetxtar: improve docs by @rogpeppe in d2250b9
encoding/gocode: be resilient to Go string literal changes by @rogpeppe in 1cfb57c
doc/tutorial/basics: make test scripts run again by @mvdan in 6cb877e
encoding/openapi: update API by @rogpeppe in 74566cf
cue/stats: new package for getting operation statistics by @mpvl in 535d188
errors: make Errors and Print respect wrapped errors by @rogpeppe in 4007775
internal/core/path: package for Selector to Feature conversion by @mpvl in 4c9d0ac
cue: tweaks to selector API by @mpvl in cd27b12
cue: add Value.BuildInstance method by @rogpeppe in a552c1f
encoding/yaml: be clearer about the role of the src argument by @rogpeppe in 351a9fb
internal/core/adt: fix cycles in evaluation by @mpvl in ac11215
internal/core/adt: tighten structural cycle detection by @mpvl in f8e363e
internal/core/adt: tighten structural cycle detection by @mpvl in 68152ec
internal/core/adt: fix spurious cycle for inline recursion by @mpvl in c997044
internal/core/adt: fix issue with references cycles by @mpvl in cd4bf2b
internal/core/adt: some fixes to structural cycle detection by @mpvl in 8133f55
internal/core/compile: fix aliases to dynamic fields by @mpvl in 353833c
cue: add Selector.Type API by @rogpeppe in 8e8f1cf
cue/load: deterministically sort CUE files when loading by @mvdan in 295786e
internal/core/adt: count conjuncts by @mpvl in 1a12916
internal/core/adt: finalize arcs that are almost done by @mpvl in 8ee1127
internal/core/adt: remove redundant line by @mpvl in 37ee967
internal/core/adt: clean up some span logic and add a comment by @mpvl in ce30e67
internal/core/adt: move Label for better bin packing by @mpvl in e398e10
internal/core/adt: clean up some closedness code by @mpvl in 9e15ca1
internal/core/adt: fix spurious child error by @mpvl in 830847b
all: start using testscript.Params.RequireExplicitExec by @mvdan in 37a2a07
internal/core/adt: pick defaults for label evaluation by @mpvl in 83d37e7
cmd/cue/cmd: testscript moved its gopath location by @mvdan in 4a73630
internal/core/adt: SpawnRef loop optimization by @rogpeppe in 7292034
all: use txtar filename extensions consistently by @mvdan in c1689bb
mod: drop x/xerrors from the module graph by @mvdan in 0460b47
mod: drop apd v1 from the module graph by @mvdan in d663a8c
all: apply Go 1.19's gofmt by @mvdan in 3f3f181
internal/core/adt: fix spurious cycle by @mpvl in e187f9f
internal/core/adt: reimplementation of cycle algorithm by @mpvl in 6b3fd65
internal/core/adt: hoist cycle logic by @mpvl in eab8c8e
internal/core/adt: pass Conjunct instead of Environment to Resolve by @mpvl in 428d395
internal/core/adt: don't spawn duplicate locations by @mpvl in 3bedf8e
internal/core/adt: fix env linking for comprehensions by @mpvl in b00f5d6
cmd/cue: remove all stdin buffering by @mvdan in b4d1b16
all: use the .test TLD for module paths in tests by @mvdan in 5a08d2f
CI: only pull master commits through a proxy on Linux by @mvdan in 395df20
CI: try "pull through proxy" go get up to five times by @mvdan in 4f15036
all: fix migration to x/tools/txtar by @myitcv in 0a46a16
cmd/cue/cmd: add --inline-imports flag by @mpvl in 974a09b
cue: support InlineImports for Syntax by @mpvl in ae56267
internal/core/export: don't inline for errors by @mpvl in e87bc25
internal/core/export: enhancements for import inlining by @mpvl in 62fedc3
internal/core/export: implement self-contained algo for export by @mpvl in c71f674
all: fix common pattern of calling cuextxtar.Load by @myitcv in bdaadc9
pkg/tool/cli: rework Stdin and make Ask read an entire line by @mvdan in 4432aa6
all: swap rogpeppe/go-internal/txtar for x/tools/txtar by @mvdan in 9f3d9d2
internal/ci: use consistent name for CUELANGORGTIPREBUILDHOOK by @myitcv in a9f8bd2
cmd/cue/cmd: remove bits of unused code by @mvdan in 4d7edeb
internal/diff: two different errors are equal by @mpvl in 6e95220
interal/diff: skip hidden fields by default by @mpvl in 5151417
.gitignore: ignore some binaries by @mpvl in 2d10d0f
internal/core/export: cleanup of initialization and finalize by @mpvl in 8a7ebf9
internal/core/export: simplify dynamic labels by @mpvl in 8edd739
internal/core/export: refactor uniqueFeature by @mpvl in 9777511
internal/core/export: fix bug exporting dynamic references by @mpvl in 360ef5f
internal/core/adt: clarify examples for references by @mpvl in 5cb52c8
internal/core/export: hoist FieldReference logic by @mpvl in 82a2513
internal/core/export: pass Environment by @mpvl in 254d0de
internal/core/export: move tests to subdir by @mpvl in 08c0689
tools/fix: remove rewriting support for old-style let by @mpvl in 9a66c51
internal/core/export: hoist reference logic by @mpvl in 580edf4
cue/format: fix StructLit trailing comma bug by @satotake in d16c799
internal/ci/github: skip non-race tests when running race tests by @myitcv in 4113ec3
internal/ci: refactor CI workflows by @myitcv in 236a565
internal/ci: split github workflows into separate files by @myitcv in 9d366cd
internal/ci: write netrc file for triggering trybots by @myitcv in 62ccbc0
internal/ci: move to using gerritstatusupdater by @myitcv in f28ad41
internal/ci: rename test and repository_dispatch workflows by @myitcv in d4526fe
cuego: fix example in docs by @rogpeppe in 2fea90a
internal/ci: move workflow declarations to their own package by @myitcv in 2795dcc
cue/load: actually apply the latest doc wording per the reviews by @mvdan in f32ea8e
cue/load: remove old reference to a "query tool" by @mvdan in 03ed417
internal/ci: stop using txtar tests for GitHub actions workflows by @myitcv in 1876276
cmd/cue: support buildinfo in version sub-command by @djosephsen in b8703c8
doc/spec: minor adjustments after a careful read by @mvdan in cf3ba23
pkg/gen: remove unreachable code by @rogpeppe in 2f05fc9
pkg/gen: generate (almost) all pkg.go files in one call by @rogpeppe in 23dc354
all: use go-cmp.Diff more consistently by @mvdan in b30eb99
cmd/cue: use cue in test scripts rather than exec cue by @mvdan in 621f437
internal/core/adt: remove stutter in error by @mpvl in 41ceff3
internal/core/adt: keep arc on comprehension error by @mpvl in 309f8e7
internal/core/adt: use per-field comprehensions by @mpvl in 748a685
cmd/cue/cmd: remove usage of cue.Runtime by @mpvl in 0b0f1d3
tools/flow: get rid of deprecated cue.Runtime by @mpvl in 3ac85dc
internal/core/adt: move closedness check by @mpvl in abd2ba3
internal/core/adt: prepare for comprehension change by @mpvl in 38b5fe2
internal/core/adt: remove redundant indirection by @mpvl in 5201fde
internal/core/adt: add convenience logging method by @mpvl in ee36170
internal/encoding: always validate when exporting by @qequ in 5b8860a
cue/pkg/strconv: support arbitary-precision format by @satotake in 9bda220
pkg/internal: make it clearer that const is exclusive to func by @rogpeppe in e77a879
cue/format: escape tabs when printing comments, literals, and attributes by @mvdan in dac4917
all: replace filepath.Walk with WalkDir by @mvdan in 79b324d
cmd/cue: initialize toTop and toString without go/packages by @mvdan in 0f66c58
doc/contribute.md: simplify code backticks by @rytswd in 193e320
internal/ci: avoid merge commits when testing GitHub PRs by @mvdan in 6de1c17
internal/encoding/yaml: update dependencies by @myitcv in ef1b8aa
encoding/protobuf: update dependencies by @mvdan in 31be9e3
Revert "all: avoid using too many packages.Need bits" by @mvdan in 87408d7
all: avoid using too many packages.Need bits by @mvdan in aa9b1bd
all: fix a few more staticcheck nits by @mvdan in 92b9a06
cmd/cue: remove the need for embedpkg by @mvdan in 89c6cdc
all: make use of t.TempDir and t.Setenv by @mvdan in 6634a00
pkg/strconv: Revert "pkg/strconv: allow string argument for format" by @rogpeppe in 1ed6195
pkg/strconv: allow string argument for format by @rogpeppe in 053c4ac
internal/core: comment improvements by @rogpeppe in 34782fe
cue/literal: allow escaped newlines in multiline strings by @rogpeppe in 618e530
all: drop support for Go 1.16.x by @mvdan in bd9ae53
all: make vet happy by @mvdan in a58ac53
doc/ref: mention that newlines can be escaped in multiline strings by @rogpeppe in 13918dd
all: check the filepath.Walk error parameter by @mvdan in 2caf6e0
bump x/tools and x/net dependencies by @mvdan in 79a3fa7
all: fix a few minor typos spotted by gospel by @mvdan in 7881588
cue/scanner: allow leading double-quote in #-quoted string by @rogpeppe in db398ad
internal/ci: remove gorelease check step by @mvdan in c942d0a
internal/ci: enforce Signed-off-by temporarily by @mvdan in 7dd325d
all: remove redundant interface type assertions by @mvdan in 74d55b7
pkg/list/sort: fix syntax in docs by @tmm1 in 00c5ddf
internal/ci: bump GitHub Actions OS versions by @mvdan in db3e6ac
cmd/cue: remove duplicate files from get_go_types.txt by @mvdan in eb0a4ff
internal/cuetest: drive long tests via an env var by @mvdan in 33b18be
cmd/cue: import -R: don't treat text with no newlines as YAML by @rogpeppe in f207b0b
cmd/cue: better test for import --recursive by @rogpeppe in 7f3c0a2

cypress-io/cypress

`v13.7.2`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2

`v13.7.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1

`v13.7.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-7-0

`v13.6.6`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-6

`v13.6.5`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-5

`v13.6.4`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-4

`v13.6.3`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-3

`v13.6.2`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-2

`v13.6.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-1

`v13.6.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-6-0

`v13.5.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-1

`v13.5.0`: v.13.5.0

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-5-0

`v13.4.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-4-0

`v13.3.3`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-3

`v13.3.2`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-2

`v13.3.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-1

`v13.3.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-3-0

`v13.2.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-2-0

`v13.1.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-1-0

`v13.0.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#13-0-0

`v12.17.4`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-4

`v12.17.3`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-3

`v12.17.2`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-2

`v12.17.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-1

`v12.17.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-17-0

`v12.16.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-16-0

`v12.15.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-15-0

`v12.14.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-14-0

`v12.13.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-13-0

`v12.12.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-12-0

`v12.11.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-11-0

`v12.10.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-10-0

`v12.9.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-9-0

`v12.8.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-8-1

`v12.8.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12.8.0

`v12.7.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12.7.0

`v12.6.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12.6.0

`v12.5.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-5-1

`v12.5.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-5-0

`v12.4.1`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-4-1

`v12.4.0`

Compare Source

Changelog: https://docs.cypress.io/guides/references/changelog#12-4-0

javierbrea/cypress-localstorage-commands

`v2.2.5`

Compare Source

Changed

chore(deps): Update devDependencies

`v2.2.4`

Compare Source

Changed

chore(deps): Update devDependencies

`v2.2.3`

Compare Source

Changed

chore(deps): Update devDependencies

dagger/dagger-for-github

`v5`

Compare Source

`v4`

Compare Source

rlamana/docusaurus-plugin-sass

`v0.2.5`

Compare Source

`v0.2.4`

Compare Source

What's Changed

fix: resolve sass-loader to avoid phantom dependencies by @ChrisCindy in https://github.com/rlamana/docusaurus-plugin-sass/pull/25
Bump semver from 7.3.5 to 7.5.3 by @dependabot in https://github.com/rlamana/docusaurus-plugin-sass/pull/31

New Contributors

@ChrisCindy made their first contribution in https://github.com/rlamana/docusaurus-plugin-sass/pull/25

Full Changelog: https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4

Microsoft/go-winio

`v0.6.1`

Compare Source

What's Changed

Soften linter by @helsaawy in https://github.com/microsoft/go-winio/pull/264
Bump linter, remove structcheck, ignore unhandled_errors by @helsaawy in https://github.com/microsoft/go-winio/pull/265
pkg/etw/sample: remove dependency on github.com/sirupsen/logrus by @thaJeztah in https://github.com/microsoft/go-winio/pull/267
Update go.mod dependencies by @helsaawy in https://github.com/microsoft/go-winio/pull/277
Add some basic bind filter functions by @gabriel-samfira in https://github.com/microsoft/go-winio/pull/274
Apply two upstream CL to mkwinsyscall by @helsaawy in https://github.com/microsoft/go-winio/pull/278
Unable to create named pipe on certain WS2012, Win 10 Pro machines by @rcarman-r7 in https://github.com/microsoft/go-winio/pull/280
Add fs.ResolvePath to resolve symbolic links by @helsaawy in https://github.com/microsoft/go-winio/pull/275
update linter and fix lint errors by @helsaawy in https://github.com/microsoft/go-winio/pull/284

New Contributors

@gabriel-samfira made their first contribution in https://github.com/microsoft/go-winio/pull/274
@rcarman-r7 made their first contribution in https://github.com/microsoft/go-winio/pull/280

Full Changelog: https://github.com/microsoft/go-winio/compare/v0.6.0...v0.6.1

containerd/console

`v1.0.4`

Compare Source

What's Changed

gha: update to go 1.17, update golangci-lint to v1.44, and gofmt by @thaJeztah in https://github.com/containerd/console/pull/61
remove solaris implementation by @thaJeztah in https://github.com/containerd/console/pull/62
zos: share implementation with unix (less DRY) by @thaJeztah in https://github.com/containerd/console/pull/63
Update GitHub actions CI workflow by @austinvazquez in https://github.com/containerd/console/pull/68
Add containerd project checks to CI by @austinvazquez in https://github.com/containerd/console/pull/69
fix: don't abort on first encountered error when resetting Windows console by @muesli in https://github.com/containerd/console/pull/67
Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 by @dependabot in https://github.com/containerd/console/pull/72
fix: don't print to stdout when initializing console fails on Windows by @muesli in https://github.com/containerd/console/pull/66
[Doc]update links to main by @fangn2 in https://github.com/containerd/console/pull/74
fix: add shim for js by @paralin in https://github.com/containerd/console/pull/60
docs: fix typo in the comment of Console.Reset by @davidhsingyuchen in https://github.com/containerd/console/pull/73
tc_unix.go: Make cfmakeraw compatible to Linux by @ktock in https://github.com/containerd/console/pull/77

New Contributors

@austinvazquez made their first contribution in https://github.com/containerd/console/pull/68
@muesli made their first contribution in https://github.com/containerd/console/pull/67
@dependabot made their first contribution in https://github.com/containerd/console/pull/72
@fangn2 made their first contribution in https://github.com/containerd/console/pull/74
@paralin made their first contribution in https://github.com/containerd/console/pull/60
@davidhsingyuchen made their first contribution in https://github.com/containerd/console/pull/73
@ktock made their first contribution in https://github.com/containerd/console/pull/77

Full Changelog: https://github.com/containerd/console/compare/v1.0.3...v1.0.4

containerd/containerd

`v1.7.15`: containerd 1.7.15

Compare Source

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a
regression introduced in v1.7.14 in the way process exits were handled.

Highlights

Adds mediatype to OCI index record on export (#9990)

Runtime

Fix runc shim to only defer init process exits (#10037)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Phil Estes
Austin Vazquez
Laura Brehm
Sebastiaan van Stijn
Talon

Changes

12 commits

Prepare for v1.7.15 release (#10039)
- 4d4759b54 Prep v1.7.15 release
Fix runc shim to only defer init process exits (#10037)
- 21df46766 runc-shim: only defer init process exits
Fix compile from version control system (source) use case (#10012)
- 2a054213e Fix compile from version control system (source) use case
Adds mediatype to OCI index record on export (#9990)
- 6605c47a4 adds mediatype to oci index record
vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9975)
- e6d91d843 vendor: github.com/golang/protobuf v1.5.4
- 2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
- a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

github.com/golang/protobuf v1.5.3 -> v1.5.4
google.golang.org/protobuf v1.31.0 -> v1.33.0

Previous release can be found at v1.7.14

`v1.7.14`: containerd 1.7.14

Compare Source

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

Update builds to use go 1.21.8 (#9933)
Fix various timing issues with docker pusher (#9921)
Register imagePullThroughput and count with MiB (#9855)
Move high volume event logs to Trace level (#9823)

Container Runtime Interface (CRI)

Handle pod transition states gracefully while listing pod stats (#9905)

Runtime

Update runc-shim to process exec exits before init (#9928)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Wei Fu
Derek McGowan
Maksym Pavlenko
Krisztian Litkey
Akihiro Suda
Justin Chadwell
Sebastiaan van Stijn
Phil Estes
Kirtana Ashok
Akhil Mohan
Austin Vazquez
Etienne Champetier
Jordan Liggitt
Kohei Tokunaga
Mike Brown
Samuel Karp
Davanum Srinivas
Edgar Lee
Henry Wang
James Sturtevant
Laura Brehm
Nashwan Azhari
Robbie Buxton
Robert-André Mauchin
Shukui Yang

Changes

70 commits

Prepare release notes for v1.7.14 (#9953)
- 1babe6b58 Prepare release notes for v1.7.14
Backport use Go toolchain in CI matrix to build binaries (#9951)
- a9bbbefcf Use the Go toolchain in CI matrix to build binaries
Update builds to use go 1.21.8 (#9933)
- 1ca9a643a update to go 1.21.8, 1.22.1
Move inline PS scripts into files (#9938)
- 39caf532e Move inline PS scripts into files
Disable OOM set score unpriv test temporarily (#9944)
- 630226bb4 Disable OOM set score unpriv test temporarily
Update runc-shim to process exec exits before init (#9928)
- de7b6bae9 runc-shim: process exec exits before init
update to go 1.21.6, test 1.22.0 (#9860)
- 3b3e537ea Uninstall mingw before attempting upgrade
- 9e24388b2 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
- 5b23a4127 seccomp, apparmor: add go:noinline
- 753422ac1 Drop go 1.20 and build against 1.22
- a2d64218c Fix windows integration tests
- 6379dd6f4 Update workflow files to install Go via composite action
- a5c0d061c Extract a composite action to install Go
Fix various timing issues with docker pusher (#9921)
- 52a1402df copy: prevent potential deadlock if close before fully written
- 872746386 copy: setError should imply Close
- a8004007a copy: remove max number of ErrResets
- 0465472ed pushWriter: refactor reset pipe logic into separate function
- 2577207cc copy: improve error detection from closed pipes
- d081da86b copy: check if writer was closed before setting a pipe
- 2a25c085b copy: remove wrapping io.NopCloser from push writer pipe
Register imagePullThroughput and count with MiB (#9855)
- 711cebd48 Register imagePullThroughput and count with MiB
Update golangci-lint to v1.56.1 (#9900)
- 926ceb036 fix golangci-lint errors
- 4030ae235 Update golangci-lint to v1.56.1
- 6620d6bfd ci: bump up golangci-lint to v1.55.2
- b16ca72b2 Bump up golangci-lint to v1.54.2
Handle pod transition states gracefully while listing pod stats (#9905)
- 39db3f18b adjust test cases to run for windows
- 579d8b463 [cri] Handle Windows pod transitions gracefully
Backport GitHub actions package updates (#9876)
- 8d6f0f2ae build(deps): bump golangci/golangci-lint-action from 3 to 4
- 7929592b9 build(deps): bump actions/upload-artifact from 3 to 4
- e11de777d build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
- 2b40a4074 build(deps): bump actions/checkout from 3 to 4
- 22feefa57 build(deps): bump actions/setup-go from 3 to 5
- b96aa4012 build(deps): bump actions/upload-artifact from 1 to 3
- 97763f91d build(deps): bump docker/setup-buildx-action from 2 to 3
- 6875bb14f build(deps): bump github/codeql-action from 2 to 3
- 87f9adb6b build(deps): bump actions/download-artifact from 3 to 4
.github: windows should use fix critool version (#9874)
- d9c099a9a .github: windows should use fix critool version
ci: update crun version to 1.14.3 (#9850)
- dc594b01d ci: update crun version to 1.14.3
Add WithMetaStore to overlay snapshotter and missing unpacker.Wait for image import (#9837)
- 8fe0b26f1 Add missing unpacker.Wait for image import
- 31ea2d7d9 Add WithMetaStore to overlay snapshotter to allow bringing your own
Move high volume event logs to Trace level (#9823)
- 982e0cffb Move high volume event logs to Trace level
cri: propagate deprecation list to runtime status (#9818)
- c79ffa277 cri: propagate deprecation list to runtime status
ctr: print deprecation warnings on every invocation (#9820)
- eaebe23de ctr: print deprecation warnings on every invocation
bug fix: make sure cri image is pinned when it is pulled outside cri (#9784)
- 26c057423 bug fix: make sure cri image is pinned when it is pulled outside cri
go.{mod,sum}: update NRI dependency, fixing a potential fd double close error. (#9783)
- d3e997556 go.{mod,sum}: update NRI dependency, re-vendor.
Add option to perform syncfs after pull (#9769)
- ea0a92ec3 *: introduce image_pull_with_sync_fs in CRI
- 4caf44032 api: introduce sync_fs to diff.ApplyRequest
Move certain debug logs to trace logs (#9761)
- 3f75af7bf Move certain debug logs to trace logs

Changes from containerd/nri

23 commits

socketpair_windows: remove implementation for now (containerd/nri#69)
- e47f09b socketpair_windows: remove implementation for now
adaptation, stub: allow extra ttrpc client and server options. (containerd/nri#67)
- 45b9e3f plugins: update dependencies.
- f600cf6 go.{mod,sum}: update dependencies.
- 13ee978 pkg/stub: add support for extra ttrpc options.
- c4e2f81 pkg/adaptation: add support for extra ttrpc options.
socketpair_unix: avoid double close(), set FD_CLOEXEC (containerd/nri#66)
- 5d0b52b sockerpair_unix: avoid double close(), set FD_CLOEXEC
Task: fix typo in godoc (containerd/nri#61)
- ae7840b Task: fix typo in godoc
Take pkg/hooks from github.com/containers/common (carry 46) (containerd/nri#55)
- b4ac58c Take pkg/hooks from github.com/containers/common
gha: remove GOPATH and workingdir, update actions/setup-go@v4, actions/checkout@v4 (containerd/nri#53)
- ee96969 gha: update actions/checkout@v4
- 7b33fbf gha: update actions/setup-go@v4
- e33ac3e gha: remove working-dir and GOPATH
remove containerd as dependency (containerd/nri#51)
- da8a7e5 remove containerd as dependency
make plugins/ulimit-adjuster a separate module (containerd/nri#54)
- 934815e make plugins/ulimit-adjuster a separate module
scripts: fix protobuf URL on arm64 (containerd/nri#52)
- 9b43daa scripts: fix protobuf URL on arm64

Changes from containerd/ttrpc

21 commits

Fix streaming with empty payloads (containerd/ttrpc#157)
- 44ca009 Add comment
- 6615f15 Fix linter
- dea99e9 Fix handling of empty payloads
- 336fc1b Add integration test to reproduce issue with empty payloads
Bump google.golang.org/grpc from 1.57.0 to 1.57.1 (containerd/ttrpc#156)
- 1e51c46 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
Bump golang.org/x/net from 0.10.0 to 0.17.0 (containerd/ttrpc#155)
- bea960d Bump golang.org/x/net from 0.10.0 to 0.17.0
Implement support for unary interceptor chaining. (containerd/ttrpc#152)
- 40f227d server: implement UnaryServerInterceptor chaining.
- f984c9b client: implement UnaryClientInterceptor chaining.
Fix grammar in comment for UserOnCloseWait. (containerd/ttrpc#153)
- 8ca4110 Fix comment for UserOnCloseWait.
Bump genproto dependency (containerd/ttrpc#154)
- a2fbc14 go.mod: google.golang.org/genproto/googleapis/rpc v0.0.0-20230731190214-cbb8c96f2d6d
- cf2b85d go.mod: bump to supported go version
server_test: wait for OnClose in TestClientEOF. (containerd/ttrpc#150)
- e0cd801 server_test: wait for OnClose in TestClientEOF.
.github: give more slack for build+tests. (containerd/ttrpc#151)
- 8d47846 .github: give more slack for build+tests.

Dependency Changes

github.com/containerd/nri v0.4.0 -> v0.6.0
github.com/containerd/ttrpc v1.2.2 -> v1.2.3
google.golang.org/genproto/googleapis/rpc 782d3b1 -> cbb8c96

Previous release can be found at v1.7.13

`v1.7.13`: containerd 1.7.13

Compare Source

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary
in the release builds to address CVE-2024-21626

Notable Updates

Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
Update seccomp profile for new syscalls added since Linux 5.16 (#9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Akihiro Suda
Evan Lezar
Paweł Gronowski
Phil Estes
Wei Fu

Changes

9 commits

Prepare v1.7.13 and update runc to v1.1.12 (#9724)
- b97e611b9 Prepare release notes for v1.7.13
- 2e7fa14db Update runc binary to v1.1.12
[release/1.7] seccomp: kernel 6.7 (#9693)
- 1bed37871 seccomp: kernel 6.7
[release/1.7] Update container-device-interface to v0.6.2 (#9685)
- 14628d4aa Update container-device-interface to v0.6.2
[release/1.7] content: Add InfoReaderProvider (#9658)
- 836477930 content: Add InfoReaderProvider

Dependency Changes

tags.cncf.io/container-device-interface v0.6.2 new
tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

`v1.7.12`: containerd 1.7.12

Compare Source

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Fix on dialer function for Windows (#9501)
Improve /etc/group handling when appending groups (#9544)
Update shim pidfile permissions to 0644 (#9548)
Update runc binary to v1.1.11 (#9596)
Allow import and export to reference missing content (#9600)
Remove runc import (#9605)
Update Go version to 1.20.13 (#9624)

Deprecation Warnings

Emit deprecation warning for containerd.io/restart.logpath label usage (#9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Sebastiaan van Stijn
Wei Fu
Derek McGowan
Paweł Gronowski
Jaroslav Jindrak
Maksym Pavlenko
Samuel Karp
Anthony Nandaa
Bjorn Neergaard
Djordje Lukic
Kay Yan

Changes

34 commits

[release/1.7] Prepare release notes for v1.7.12 (#9632)
- 775d544fe Prepare release notes for v1.7.12
[release/1.7] update to go1.20.13, test go1.21.6 (#9624)
- a5dc5b894 update to go1.20.13, test go1.21.6
[release/1.7] shim: Create pid-file and address with 0644 permissions (#9548)
- 8d82242eb shim: Create address file with 0644 permissions
- 260963a35 shim: Create pid-file with 0644 permissions
[release/1.7 backport] switch back from golang.org/x/sys/execabs to os/exec (go1.19) (#9602)
- 872af82f5 remove remaining uses of golang.org/x/sys/execabs
- 2ad2a2e83 switch back from golang.org/x/sys/execabs to os/exec (go1.19)
[release/1.7] update to CDI v0.6.1, and remove github.com/opencontainers/runc dependency (#9605)
- 9251072f7 remove github.com/opencontainers/runc dependency
- 4e67213d4 vendor: github.com/cncf-tags/container-device-interface v0.6.1
- e0ee0be0d go.mod: github.com/opencontainers/runtime-spec v1.1.0
- 02be2236a go.mod: github.com/.../container-device-interface v0.6.0
- 91f953bb4 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2
[release/1.7 backport] import/export: Support references to missing content (#9600)
- 6089b05d9 images/Export: Revert signature change
- 6b4b760c3 integration/import-export: Add WithSkipMissing tests
- abb3c5ef9 export: Copy distribution source labels to manifest annotations
- 9609f04f6 import/export: Support references to missing content
- 42b60d865 images/archive: use mediatype helpers
[release/1.7 backport] update runc binary to v1.1.11 (#9596)
- 23516a99c update runc binary to v1.1.11
[release/1.7 backport] go.mod: dario.cat/mergo v1.0.0 (#9569)
- 428714e32 go.mod: dario.cat/mergo v1.0.0
[release/1.7] restart: containerd.io/restart.logpath warning (#9567)
- 03fed557e restart: containerd.io/restart.logpath warning
[release 1.7] backport: fix on dialer function for windows (#9501)
- 68d237392 fix(pkg/dialer): minor fix on dialer function for windows
[release/1.7] *: enable ARM64 runner (#9502)
- c63165123 *: enable ARM64 runner
[release/1.7 backport] WithAppendAdditionalGroups: better /etc/group handling (#9544)
- 55e570844 WithAppendAdditionalGroups: better /etc/group handling

Dependency Changes

dario.cat/mergo v1.0.0 new
github.com/container-orchestrated-devices/container-device-interface v0.5.4 -> v0.6.1
github.com/moby/sys/user v0.1.0 new
github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.1.0

Previous release can be found at v1.7.11

`v1.7.11`: containerd 1.7.11

Compare Source

Welcome to the v1.7.11 release of containerd!

The eleventh patch release for containerd 1.7 contains various fixes and updates including
one security issue.

Notable Updates

Fix Windows default path overwrite issue (#9440)
Update push to always inherit distribution sources from parent (#9452)
Update shim to use net dial for gRPC shim sockets (#9458)
Fix otel version incompatibility (#9483)
Fix Windows snapshotter blocking snapshot GC on remove failure (#9482)
Mask /sys/devices/virtual/powercap path in runtime spec and deny in default apparmor profile (GHSA-7ww5-4wqc-m92c)

Deprecation Warnings

Emit deprecation warning for AUFS snapshotter (#9436)
Emit deprecation warning for v1 runtime (#9450)
Emit deprecation warning for deprecated CRI configs (#9469)
Emit deprecation warning for CRI v1alpha1 usage (#9479)
Emit deprecation warning for CRIU config in CRI (#9481)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Derek McGowan
Phil Estes
Bjorn Neergaard
Danny Canter
Sebastiaan van Stijn
ruiwen-zhao
Akihiro Suda
Amit Barve
Charity Kathure
Maksym Pavlenko
Milas Bowman
Paweł Gronowski
Wei Fu

Changes

39 commits

[release/1.7] Prepare release notes for v1.7.11 (#9491)
- dfae68bc3 Prepare release notes for v1.7.11
[release/1.7] update to go1.20.12, test go1.21.5 (#9352)
- 0d314401d update to go1.20.12, test go1.21.5
- 1ec1ae2c6 update to go1.20.11, test go1.21.4
Github Security Advisory GHSA-7ww5-4wqc-m92c
- cb804da21 contrib/apparmor: deny /sys/devices/virtual/powercap
- 40162a576 oci/spec: deny /sys/devices/virtual/powercap
[release/1.7] Don't block snapshot garbage collection on Remove failures (#9482)
- ed7c6895b Don't block snapshot garbage collection on Remove failures
[release/1.7] Add warning for CRIU config usage (#9481)
- 1fdefdd22 Add warning for CRIU config usage
[release/1.7] Fix otel version incompatibility (#9483)
- f8f659e66 Add HTTP client update function to tracing library
- 807ddd658 fix(tracing): use latest version of semconv
[release/1.7] Add cri-api v1alpha2 usage warning to all api calls (#9479)
- dc45bc838 Add cri-api v1alpha2 usage warning to all api calls
[release/1.7] cri: add deprecation warnings for deprecated CRI configs (#9469)
- 9d1bad62e deprecation: fix missing spaces in warnings
- 51a604c07 cri: add deprecation warning for runtime_root
- 8040e74bf cri: add deprecation warning for rutnime_engine
- 99adc40eb cri: add deprecation warning for default_runtime
- afef7ec64 cri: add warning for untrusted_workload_runtime
- 6220dc190 cri: add warning for old form of systemd_cgroup
[release/1.7] runtime/v2: net.Dial gRPC shim sockets before trying grpc (#9458)
- 80f96cd18 runtime/v2: net.Dial gRPC shim sockets before trying grpc
[release/1.7] tasks: emit warning for v1 runtime and runc v1 runtime (#9450)
- f471bb2b8 tasks: emit warning for runc v1 runtime
- 329e1d487 tasks: emit warning for v1 runtime
[release/1.7] push: always inherit distribution sources from parent (#9452)
- 4464fde12 push: always inherit distribution sources from parent
[release/1.7] Update tar tests to run on Darwin (#9451)
- 7e069ee25 Update tar tests to run on Darwin
[release/1.7] ctr: Add sandbox flag to ctr run (#9449)
- 5fc0e4e61 ctr: Add sandbox flag to ctr run
[release/1.7] Windows default path overwrite fix (#9440)
- 31fe03764 Fix windows default path overwrite issue
[release/1.7] snapshots: emit deprecation warning for aufs (#9436)
- 625b35e4b snapshots: emit deprecation warning for aufs

Dependency Changes

github.com/felixge/httpsnoop v1.0.3 new
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.45.0 new

Previous release can be found at v1.7.10

`v1.7.10`: containerd 1.7.10

Compare Source

Welcome to the v1.7.10 release of containerd!

The tenth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Enhance container image unpack client logs (#9379)
cri: fix using the pinned label to pin image (#9381)
fix: ImagePull should close http connection if there is no available data to read. (#9409)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Wei Fu
Iceber Gu
Austin Vazquez
Derek McGowan
Phil Estes
Samuel Karp
ruiwen-zhao

Changes

11 commits

Add release notes for v1.7.10 (#9426)
- a995fe3a8 Add release notes for v1.7.10
[release/1.7] fix: ImagePull should close http connection if there is no available data to read. (#9409)
- 206806128 remotes/docker: close connection if no more data
- 328493962 integration: reproduce #9347
- d1aab27cb fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter
[release/1.7] cri: fix using the pinned label to pin image (#9381)
- a2b16d7f9 cri: fix update of pinned label for images
- 8dc861844 cri: fix using the pinned label to pin image
[release/1.7] Enhance container image unpack client logs (#9379)
- 5930a3750 Enhance container image unpack client logs

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.7.9

`v1.7.9`: containerd 1.7.9

Compare Source

Welcome to the v1.7.9 release of containerd!

The ninth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

update runc binary to v1.1.10:: (#9359)
vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 (#9301)
Expose usage of cri-api v1alpha2 (#9336)
integration: deflake TestIssue9103 (#9354)
fix: shimv1 leak issue (#9344)
cri: add deprecation warnings for mirrors, auths, and configs (#9327)
Update hcsshim tag to v0.11.4 (#9326)
Expose usage of deprecated features (#9315)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Kazuyoshi Kato
Wei Fu
Kirtana Ashok
Derek McGowan
Milas Bowman
Sebastiaan van Stijn
ruiwen-zhao

Changes

28 commits

[release/1.7] Add release notes for v1.7.9 (#9333)
- 4b912af52 Add release notes for v1.7.9
[release/1.7 backport] update runc binary to v1.1.10 (#9359)
- eff291713 update runc binary to v1.1.10
[release/1.7] vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 (#9301)
- bd9428ff7 vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0
[release/1.7] Expose usage of cri-api v1alpha2 (#9336)
- d62cba40c Expose usage of cri-api v1alpha2
[release/1.7] integration: deflake TestIssue9103 (#9354)
- 5dbc258a8 integration: deflake TestIssue9103
[release/1.7] fix: shimv1 leak issue (#9344)
- 449912857 fix: shimv1 leak issue
[release/1.7] cri: add deprecation warnings for mirrors, auths, and configs (#9327)
- 152c57e91 cri: add deprecation warning for configs
- 689a1036d cri: add deprecation warning for auths
- 8c38975bf cri: add deprecation warning for mirrors
- 1fbce40c4 cri: add ability to emit deprecation warnings
[release/1.7] Update hcsshim tag to v0.11.4 (#9326)
- 73f15bdb6 Update hcsshim tag to v0.11.4
[release/1.7] Expose usage of deprecated features (#9315)
- 60d48ffea ctr: new deprecations command
- 74a06671a plugin: record deprecation for dynamic plugins
- fa5f3c91a server: add ability to record config deprecations
- f7880e7f0 pull: record deprecation warning for schema 1
- 1dd2f2c02 introspection: add support for deprecations
- aaf000c18 api/introspection: deprecation warnings in server
- 9b7ceee54 warning: new service for deprecations
- b708f8bfa deprecation: new package for deprecations

Dependency Changes

github.com/Microsoft/hcsshim v0.11.1 -> v0.11.4
github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
github.com/go-logr/logr v1.2.3 -> v1.2.4
github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 -> v2.16.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.40.0 -> v0.45.0
go.opentelemetry.io/otel v1.14.0 -> v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.14.0 -> v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.14.0 -> v1.19.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.14.0 -> v1.19.0
go.opentelemetry.io/otel/metric v0.37.0 -> v1.19.0
go.opentelemetry.io/otel/sdk v1.14.0 -> v1.19.0
go.opentelemetry.io/otel/trace v1.14.0 -> v1.19.0
go.opentelemetry.io/proto/otlp v0.19.0 -> v1.0.0

Previous release can be found at v1.7.8

`v1.7.8`: containerd 1.7.8

Compare Source

Welcome to the v1.7.8 release of containerd!

The eighth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Fix ambiguous TLS fallback (#9299)
Update Go to 1.20.10 (#9265)
Add a new image label on converted schema 1 images (#9252)
Fix handling for missing basic auth credentials (#9235)
Fix potential deadlock in create handler for containerd-shim-runc-v2 (#9209)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Sebastiaan van Stijn
Derek McGowan
Phil Estes
Chen Yiyang
Wei Fu
Akihiro Suda
Maksym Pavlenko
Marat Radchenko
Milas Bowman
Qiutong Song
Samuel Karp

Changes

27 commits

[release/1.7] Prepare release notes for v1.7.8 (#9278)
- 48dbdf871 Prepare release notes for v1.7.8
[release/1.7] Fix ambiguous tls fallback (#9299)
- 68abc543b Check scheme and host of request on push redirect
- 35c7634e3 Avoid TLS fallback when protocol is not ambiguous
[release/1.7] vendor: google.golang.org/grpc v1.58.3 (#9281)
- f36948cad vendor: gRPC v1.58.3
[release/1.7 backport] vendor: golang.org/x/net v0.17.0 (#9276)
- c67a53190 vendor: golang.org/x/net v0.17.0
- 71f4b36ca vendor: golang.org/x/text v0.13.0
- a7b3b7090 vendor: golang.org/x/sys v0.13.0
[release/1.7] vendor: google.golang.org/grpc v1.56.3 (#9248)
- 26736d6e1 vendor: google.golang.org/grpc v1.56.3
- 54a69a6e4 vendor: golang.org/x/oauth2 v0.7.0
- ac15a7f5b vendor: google.golang.org/protobuf v1.30.0
[release/1.7] update to go1.20.10, test go1.21.3 (#9265)
- 2479c3321 [release/1.7] update to go1.20.10, test go1.21.3
- 11f40e9d8 [release/1.7] update to go1.20.9, test go1.21.2
[release/1.7] Add a new image label if it is docker schema 1 (#9252)
- cac1bab79 Add a new image label if it is docker schema 1
[release/1.7] remotes: add handling for missing basic auth credentials (#9235)
- 6cd2cc4a8 remotes: add handling for missing basic auth credentials
[release/1.7 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler (#9209)
- d0a1fedb5 *: add runc-fp as runc wrapper to inject failpoint
- 04491240a containerd-shim-runc-v2: avoid potential deadlock in create handler
- 6982a0df5 containerd-shim-runc-v2: remove unnecessary s.getContainer()
- 0e2320398 Uncopypaste parsing of OCI Bundle spec file

Dependency Changes

golang.org/x/crypto v0.11.0 -> v0.14.0
golang.org/x/mod v0.9.0 -> v0.11.0
golang.org/x/net v0.13.0 -> v0.17.0
golang.org/x/oauth2 v0.4.0 -> v0.10.0
golang.org/x/sync v0.1.0 -> v0.3.0
golang.org/x/sys v0.10.0 -> v0.13.0
golang.org/x/term v0.10.0 -> v0.13.0
golang.org/x/text v0.11.0 -> v0.13.0
golang.org/x/tools v0.7.0 -> v0.10.0
google.golang.org/genproto 7f2fa6f -> 782d3b1
google.golang.org/genproto/googleapis/api 782d3b1 new
google.golang.org/genproto/googleapis/rpc 782d3b1 new
google.golang.org/grpc v1.53.0 -> v1.58.3
google.golang.org/protobuf v1.29.1 -> v1.31.0

Previous release can be found at v1.7.7

`v1.7.7`: containerd 1.7.7

Compare Source

Welcome to the v1.7.7 release of containerd!

The seventh patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Require plugins to succeed after registering readiness (#9165)
Handle unexpected shim kill events (#9132)
Build binaries with Go 1.21.1 (#9167)
cri: Stop recommending disable_cgroup (#9168)
remotes/docker: Fix MountedFrom prefixed with target repository (#9193)
remotes: always try to establish tls connection when tls configured (#9188)
NRI: Add support for rlimits (#48)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Samuel Karp
Krisztian Litkey
Wei Fu
Phil Estes
Sebastiaan van Stijn
Iceber Gu
Mike Brown
Akihiro Suda
Paweł Gronowski
Steve Griffith
Aditya Ramani
Austin Vazquez
Danny Canter
James Sturtevant
Kern Walster
ZP-AlwaysWin

Changes

31 commits

[release/1.7] Prepare release notes for v1.7.7 (#9194)
- a34fa5681 Prepare release notes for v1.7.7
[release/1.7] Allow for images with artifacts to pull (#9149)
- 6ca0aebf0 Allow for images with artifacts to pull
[release 1.7] remotes/docker: Fix MountedFrom prefixed with target repository (#9193)
- 7df492a95 remotes/docker: Fix MountedFrom prefixed with target repository
[release/1.7] Update x/net to 0.13 (#9134)
- b3db314a5 Bump x/net to 0.13
[release/1.7] remotes: always try to establish tls connection when tls configured (#9188)
- 7779ce64e remotes: always try to establish tls connection when tls configured
[release/1.7] cri: stop recommending disable_cgroup (#9168)
- 6013b5e03 cri: stop recommending disable_cgroup
[release/1.7] Require plugins to succeed after registering readiness (#9165)
- a83c66813 Require plugins to succeed after registering readiness
- 171d76849 cri: call RegisterReadiness after NewCRIService
[release/1.7] Handle unexpected shim kill events (#9132)
- 3d27bc738 Handle unexpected shim kill events
[release/1.7] Build binaries with 1.21.1 (#9167)
- 4ffa3ed29 Build binaries with 1.21.1
[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 (#9127)
- 5756f6064 [release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1
[release/1.7 backport] alias log package to github.com/containerd/log v0.1.0 (#9106)
- 09633b539 deprecate logs package, but disable linter (for transitioning)
- cb201519f alias log package to github.com/containerd/log v0.1.0
- a5024e6dd vendor: github.com/stretchr/testify v1.8.4
- 7bd976af3 vendor: github.com/sirupsen/logrus v1.9.3
[release/1.7] remotes/docker: Add MountedFrom and Exists push status (#9097)
- 8cd2d33c2 [release/1.7] remotes/docker: Add MountedFrom and Exists push status
[release/1.7] vendor: update github.com/containerd/nri@v0.4.0 (#9099)
- 3ca015e55 nri: update mock plugin handlers
- 4cd208c1f vendor: update github.com/containerd/nri@v0.4.0

Changes from containerd/log

9 commits

Update golangci to 1.49 (#1)
- 89c9a54 Update golangci to 1.49
- cf26711 Update description in README
- f9f250c Add project details
- fb7fe3d Add github CI flow
- 7e13034 Add go module
- 16a3c76 Rename log import from logtest
- 698c398 Add README
- 87c83c4 Add license file

Changes from containerd/nri

35 commits

releases: update note about 0.4.0 (#50)
- 5f13915 releases: update note about 0.4.0
Add support for rlimits (#48)
- 5ecea04 ulimit-adjuster: add validation for hard limits
- db3de10 test: exclude ulimit-adjuster from ginkgo
- f0deb59 ulimit-adjuster: new sample plugin
- d2dd708 Add support for rlimits
- efaf36e api: add POSIXRlimit type
.github: add test build to CI workflow. (#47)
- 3f092c2 .github: add test build to CI workflow.
stub: pass context to plugins, pass updated resources to UpdateContainers. (#40)
- 01d5f14 Add a note about NRI API stability and release notes.
- ea9976d adaptation: add UpdateContainer tests.
- d042d24 stub: fix plugin UpdateContainerInterface.
- f5d0f51 plugins: update plugins for stub changes.
- b4bd301 adaptation: update tests with stub changes.
- 9d86150 stub: pass context to plugin event handlers.
Updated the OCI Hook Injector README to resovle broken links to the p… (#34)
- 5eee915 removed link
- c783fc7 Resolves broken podman links and adds details to help better guide people in testing.
Fix ParseEventMask to produce proper masks for 'pod' and 'container' shorthand event notations. (#39)
- da291a6 Fix ParseEventMask to produce proper masks
fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin (#42)
- 4a4cea6 fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin
- a67478e stub: update setIdentify to ensureIdentify
update module name of the logger plugin (#41)
- 841f5ed update module name of the logger plugin
Add gitignore for build artifacts (#32)
- 8d9c64d Add gitignore for build artifacts
Makefile: fix 'install-*' targets. (#38)
- c03d1be Makefile: fix 'install-*' targets.
docs: add a chapter about security considerations. (#36)
- ab28e71 docs: add a chapter about security considerations.
api: initialize OCI LinuxMemory resources to empty. (#37)
- 2862d98 api: initialize OCI LinuxMemory resources to empty.

Dependency Changes

github.com/Microsoft/hcsshim v0.11.0 -> v0.11.1
github.com/containerd/log v0.1.0 new
github.com/containerd/nri v0.3.0 -> v0.4.0
github.com/sirupsen/logrus v1.9.0 -> v1.9.3
github.com/stretchr/testify v1.8.2 -> v1.8.4
golang.org/x/crypto v0.1.0 -> v0.11.0
golang.org/x/net v0.8.0 -> v0.13.0
golang.org/x/sys v0.7.0 -> v0.10.0
golang.org/x/term v0.6.0 -> v0.10.0
golang.org/x/text v0.8.0 -> v0.11.0

Previous release can be found at v1.7.6

Which file should I download?

containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz: (Deprecated)
cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz: (Deprecated)

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

`v1.7.6`: containerd 1.7.6

Compare Source

Welcome to the v1.7.6 release of containerd!

The sixth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Fix log package for clients overwriting the global logger (#9032)
Fix blockfile snapshotter copy on Darwin (#9047)
Add support for Linux usernames on non-Linux platforms (#9015)
Update Windows platform matcher to invoke stable ABI compability function (#9069)
Update Golang to 1.20.8 (#9074)
Update push to inherit distribution sources from parent (#9084)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Kirtana Ashok
Phil Estes
Akihiro Suda
Danny Canter
Sebastiaan van Stijn
Akhil Mohan
Maksym Pavlenko
Samuel Karp
Wei Fu

Changes

20 commits

[release/1.7] Prepare release notes for 1.7.6 (#9085)
- 3e09c65b2 Prepare release notes for v1.7.6
[release/1.7] Invoke Stable ABI compatibility function in windows platform matcher (#9069)
- c7a35ccdc Fix transfer service dependencies:
- 38d4e506d Invoke Stable ABI compatibility function in windows platform matcher
[release/1.7] push: inherit distribution sources from parent (#9084)
- 5ebf05d97 push: inherit distribution sources from parent
- d206896dd content: add InfoProvider interface
[release/1.7] update to go1.20.8 (#9074)
- 423693d7b [release/1.7] update to go1.20.8
[release/1.7] Update hcsshim tag to v0.11.0 (#9063)
- ddffc7c9a Update hcsshim tag to v0.11.0
[release/1.7] CRI: Support Linux usernames for !linux platforms (#9015)
- b449440a4 CRI: Support Linux usernames for !linux platforms
[release/1.7] Blockfile: Enlighten blockfile copy on Darwin (#9047)
- ed4bac11e Blockfile: Enlighten blockfile copy on Darwin
[release/1.7 backport] Revert "log: define G() as a function instead of a variable" (#9032)
- 4d1cfbbdd Revert "log: define G() as a function instead of a variable"
[release/1.7 backport] make repositories of install dependencies configurable (#9025)
- a34e93241 make repositories of install dependencies configurable

Dependency Changes

github.com/Microsoft/hcsshim v0.10.0-rc.8 -> v0.11.0

Previous release can be found at v1.7.5

`v1.7.5`: containerd 1.7.5

Compare Source

Welcome to the v1.7.5 release of containerd!

The fifth patch release for containerd 1.7 fixes a versioning issue from
the previous release and includes some internal logging API changes.

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Sebastiaan van Stijn
Derek McGowan
Akihiro Suda
Antonio Huete Jimenez
Phil Estes
Samuel Karp

Changes

18 commits

[release/1.7] Prepare release notes for 1.7.5 (#9010)
- 93b23eb10 Prepare release notes for v1.7.5
- fb1292c8d Bump version to v1.7.4
[release/1.7 backport] go.mod: github.com/containerd/continuity v0.4.2 (#9012)
- 503ab21bf go.mod: github.com/containerd/continuity v0.4.2
[release/1.7 backport] log: cleanups and improvements to decouple more from logrus (#9001)
- 2a9ae3c51 log: swap logrus functions with their equivalent on default logger
- 01445bb73 log: add package documentation and summary of package's purpose
- 932795f45 log: make Fields type a generic map[string]any
- 707ca94d8 log: add log.Entry type
- 0a79e67e4 log: define OutputFormat type
- dbbe28b7d log: define G() as a function instead of a variable
- 93b6cb784 log: add all log-levels that are accepted
- e8e086e02 log: group "enum" consts and touch-up docs
- 7aa4f8fdc log: WithLogger: remove redundant intermediate var
- bfdce4ce4 log: SetFormat: include returns in switch
- 6621e0888 log: remove testify dependency
- df76aaede removes/docker: remove unnecessary conversion (unconvert)

Changes from containerd/continuity

2 commits

Add initial DragonFly BSD support (#230)
- bcc6e25 dragonfly: Initial porting work

Dependency Changes

github.com/containerd/continuity 1e0d26e -> v0.4.2

Previous release can be found at v1.7.4

`v1.7.4`: containerd 1.7.4

Compare Source

Welcome to the v1.7.4 release of containerd!

The fourth patch release for containerd 1.7 contains remote differ plugin support,
a new block file based snapshotter, and various fixes and updates.

Notable Updates

Add blockfile snapshotter (#8986)
Add remote/proxy differ (#8985)
Update runc binary to v1.1.9 (#8965)
Cri: Don't use rel path for image volumes (#8926)
Allow attaching to any combination of stdin/out/err (#8910)
Fix ro mount option being passed (#8887)
Fix leaked shim caused by high IO pressure (#9003)
Add configurable mount options to overlay snapshotter (#9005)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Wei Fu
Derek McGowan
Akihiro Suda
Kazuyoshi Kato
Cardy.Tang
Phil Estes
Ben Foster
Danny Canter
Hsing-Yu (David) Chen
James Jenkins
James Sturtevant
Maksym Pavlenko
Rodrigo Campos
Sebastiaan van Stijn
rongfu.leng

Changes

43 commits

[release/1.7] Prepare release notes for v1.7.4 (#9000)
- 7a0cae3ca [release/1.7] Prepare release notes for v1.7.4
[releases/1.7] *: fix leaked shim caused by high IO pressure (#9003)
- 537d7526e integration: issue7496 case should work for runc.v2 only
- 5add172be Vagrantfile: add strace tool
- 207e28f36 integration: add ShouldRetryShutdown case based on #7496
- b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
- 88ff575c5 pkg/cri/server: fix leaked shim issue
- 9f61dfb7c integration: add case to reproduce #7496
[release/1.7] Cherry-pick: [overlay] add configurable mount options to overlay snapshotter (#9005)
- 0f4885c16 Add configurable mount options to overlay
- 8804a27d7 feat: make overlay sync removal configurable
[release/1.7] Remove temporary replace (#8997)
- 1c2dd5198 Remove temporary replace
[release/1.7] Add blockfile snapshotter (#8986)
- 2bf6bd143 vendor: update github.com/containerd/continuity
- 30a163086 snapshots|pkg: umount without DETACH and nosync after umount
- c9eebe3d1 mount: support direct-io for loopback device
- 1c2977db0 Modify loopback size
- cf9c78d2d snapshots/blockfile: fix lint issue
- b823b4f54 snapshots/blockfile: deflaky the testsuite
- 6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator
- 99b61aee3 snapshots/blockfile: use loop if options is empty
- fd39769ac Add mount options to blockfile snapshotter
- 8d732c6c2 Add sync before unmount on snapshotter layer test
- 8472a407e Add blockfile snapshotter to snapshotters doc
- 6740d77ca Add blockfile as a builtin
- 07cc24b32 Add blockfile snapshotter
[release/1.7] Backport remote/proxy differ (#8985)
- 32e3b76ee Add diffservice to contrib
- 661e505c8 Add proxy differ
[release/1.7 backport] update runc binary to v1.1.9 (#8965)
- af79c07fd update runc binary to v1.1.9
[release/1.7] Port fix for Linux Integration test failure (#8950)
- c0b1c8f74 fix ci Linux Integration test fail
[release/1.7] cri: Don't use rel path for image volumes (#8926)
- 4e97a115f cri: Don't use rel path for image volumes
[release/1.7] fix: allow attaching to any combination of stdin/stdout/stderr (#8910)
- 34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr
[release/1.7 backport] update to go1.20.7, go1.19.12 (#8906)
- c5e7b84c0 update to go1.20.7, go1.19.12
[release/1.7] cherry-pick: Fix ro mount option being passed (#8887)
- 2eaeb3205 Fix ro mount option being passed

Changes from containerd/continuity

4 commits

fs: use io.Copy because go supports CopyFileRange (#227)
- 4b8bec5 fs: use io.Copy because go supports CopyFileRange
fs/fstest: CreateFile should use sync (#228)
- 3fa7d7a fs/fstest: CreateFile should use sync

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 1f10f66 -> ced1acd
github.com/AdamKorcz/go-118-fuzz-build 5330a85 -> 8075edf
github.com/containerd/continuity v0.4.1 -> 1e0d26e

Previous release can be found at v1.7.3

`v1.7.3`: containerd 1.7.3

Compare Source

Welcome to the v1.7.3 release of containerd!

The third patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

RunC: Update runc binary to v1.1.8 (#8843)
CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8824)
CRI: write generated CNI config atomically (#8825)
Port-Forward: Correctly handle known errors (#8806)
Resolve docker.NewResolver race condition (#8799)
Fix net.ipv4.ping_group_range with userns (#8786)
Runtime/V2/RunC: handle early exits w/o big locks (#8712)
SecComp: always allow name_to_handle_at (#8753)
CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running (#8654)
Task: don't close() io before cancel() (#8658)
Remove CNI conf_template deprecation (#8638)
Fix issue for HPC pod metrics (#8634)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Phil Estes
Sebastiaan van Stijn
Wei Fu
Derek McGowan
Kazuyoshi Kato
Austin Vazquez
Samuel Karp
Shingo Omura
Jin Dong
Maksym Pavlenko
Aditi Sharma
Danny Canter
James Sturtevant
Laura Brehm
Rodrigo Campos
Akhil Mohan
Andrey Epifanov
Bjorn Neergaard
Cory Snider
Madhav Jivrajani
Mahamed Ali
Priyanka Saggu
Qasim Sarfraz
wangxiang
zounengren

Changes

63 commits

[release/1.7] Prepare release notes for v1.7.3 (#8871)
- 4cb2f1515 [release/1.7] Add release notes for v1.7.3
[release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory (#8869)
- b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory
[release/1.7] migrate to community owned bucket for node e2e tests (#8875)
- 14328ae03 migrate to community owned bucket
[release/1.7 backport] update runc binary to v1.1.8 (#8843)
- b985f7ef1 update runc binary to v1.1.8
[release/1.7 backport] [CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8824)
- 083f57160 capture desc variable in range variable just in case that it run in parallel mode
- a9440ce6b Use t.TempDir instead of os.MkdirTemp
- eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User
- eace67180 fix userstr for dditionalGids on Linux
[release/1.7 backport] cri: write generated CNI config atomically (#8825)
- 7353c0286 ctr: update WritePidFile to use atomicfile
- ae7021300 shim: WritePidFile & WriteAddress use atomicfile
- 186eb64b7 cri: write generated CNI config atomically on Unix
- 64c3dcd8e atomicfile: new package for atomic file writes
[release/1.7 backport] Move logrus setup code to log package (#8831)
- f7a20e17c Move logrus setup code to log package
[release/1.7 backport] Cirrus CI: configure apt-get to wait for locks (#8814)
- 60a6db9c2 Cirrus CI: configure apt-get to wait for locks
[release/1.7 backport] Update Go to 1.20.6,1.19.11 (#8815)
- 973778193 Update Go to 1.20.6,1.19.11
[release/1.7 backport] update go to go1.20.5, go1.19.10 (#8716)
- 403033e52 update go to go1.20.5, go1.19.10
[release/1.7 backport] bugfix(port-forward): Correctly handle known errors (#8806)
- 6b6b0c828 bugfix(port-forward): Correctly handle known errors
[release/1.7] Resolve docker.NewResolver race condition (#8799)
- 898eca21e Change http.Header copy to builtin Clone
- fa2efc406 Resolve docker.NewResolver race condition
[release/1.7] Fix net.ipv4.ping_group_range with userns (#8786)
- 241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
- 801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
[release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 (#8782)
- d5639a5a8 vendor: github.com/containerd/zfs v1.1.0
[release/1.7 backport] ci: remove libseccomp-dev installation for nightly (#8772)
- 15d65709e ci: remove libseccomp-dev installation for nightly
[release/1.7] go.mod: Update cgroups to 3.0.2 (#8769)
- a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2
[release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks (#8712)
- 18c6503d9 runtime/v2/runc: handle early exits w/o big locks
[release/1.7 backport] integration/client: add timeout to TestShimOOMScore (#8750)
- 3bf3996d9 integration/client: add timeout to TestShimOOMScore
[release/1.7 backport] Update ginkgo to match cri-tools' version (#8760)
- c2c54af9d Update ginkgo to match cri-tools' version
[release/1.7 backport] seccomp: always allow name_to_handle_at (#8753)
- 6281d46df seccomp: always allow name_to_handle_at
[release/1.7] Pinned image support (#8718)
- 699d6701a Pinned image support
[release/1.7] cherry-pick: No more nondistributable layers in MS registry (#8690)
- dafbeb5b1 No more nondistributable layers in MS registry
[release/1.7] [cri] Windows Pod Stats: Add a check to skip stats for containers that are not running (#8654)
- 58b6b99cd Add a check to skip stats for containers that are not running
[release/1.7 backport] task: don't close() io before cancel() (#8658)
- e5b2a0131 task: don't close() io before cancel()
[release/1.7 backport] move to CRI-TOOLS v1.27.0 (#8656)
- a6a15afe3 move to CRI-TOOLS v1.27.0
[release/1.7] Remove cni conf_template deprecation (#8638)
- 0b2b96479 RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3
- a24267b28 Remove cni conf_template deprecation
[release/1.7] Fix issue for HPC pod metrics (#8634)
- 89415fe36 Fix issue for HPC pod metrics

Changes from containerd/zfs

49 commits

gofumpt and update status badges (#75)
- 5e3457b TestZFSUsage: use t.TempDir()
- 6e9c675 README: update badges
- ff17a79 gofmt code
go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 (#73)
- d3485b9 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
gha: fix golangci-lint, and upgrade to v1.52.2 (#74)
- 23c831a remove pre-go1.17 build-tags, and fix missing build-tags in plugin
- e5acd95 gha: fix golangci-lint, upgrade to v1.52.2
Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#72)
- 00b96c2 Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 (#69)
- a099def Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
Add CodeQL analysis workflow (#67)
- fee1db7 Add CodeQL analysis workflow
Update GitHub actions CI workflow (#66)
- b8b7ab2 Update GitHub actions CI workflow
Upgrade compiler to Go 1.19 and update dependencies (#68)
- 3e729b3 Update dependencies
- 3c003f8 Upgrade compiler to Go 1.19
Remove references to io/ioutil package (#65)
- d700762 Remove references to io/ioutil package
Update go.mod and move to supported Go version (#62)
- f52906e Update Go version to supported version
- 79ca2cb Update containerd depedency to latest
go.mod: github.com/mistifyio/go-zfs v3.0.0 (#59)
- 2e3db29 go.mod: github.com/mistifyio/go-zfs v3.0.0
go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 (#58)
- d904e63 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
Update vendoring to containerd 1.6.x (#57)
- e021180 Update vendoring to containerd 1.6.x
Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 (#55)
- fc0c9a9 Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 (#54)
- 5d2f28c Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
follow-up-#52: fix the order of cause in fmt.Errorf (#53)
- b3f193d follow-up-#52: fix the order of cause in fmt.Errorf
replace pkg/errors (#52)
- d5b0a2f replace pkg/errors
Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 (#51)
- fd6afa5 Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
Bump containerd to 1.5.2 (#50)
- aef875e bump containerd to 1.5.2
Rename branches from master to main (#49)
- 35c6af7 Rename branches from master to main
sync up with containerd 1.5 GA (#47)
- 3d5efef vendor sync up with containerd 1.5 ga
README.md: fix CI badge (#46)
- 0977d81 README.md: fix CI badge

Dependency Changes

github.com/containerd/cgroups/v3 v3.0.1 -> v3.0.2
github.com/containerd/zfs v1.0.0 -> v1.1.0
github.com/mistifyio/go-zfs/v3 v3.0.1 new

Previous release can be found at v1.7.2

`v1.7.2`: containerd 1.7.2

Compare Source

Welcome to the v1.7.2 release of containerd!

The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode,
Windows snapshot mounting support, and CRI and container IO bug fixes.

CRI/Sandbox Updates

Publish sandbox events (#8613)
Make stats respect sandbox's platform (#8604)

Other Notable Updates

Mount snapshots on Windows (#8616)
Notify readiness when registered plugins are ready (#8584)
Fix cio.Cancel() should close pipes (#8624)
CDI: Use CRI Config.CDIDevices field for CDI injection (#8519)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Gabriel Adrian Samfira
Derek McGowan
Paul "TBBle" Hampson
Maksym Pavlenko
Phil Estes
Austin Vazquez
Akihiro Suda
Kazuyoshi Kato
Danny Canter
Samuel Karp
Sebastiaan van Stijn
Ed Bartosh
Henry Wang
Hsing-Yu (David) Chen
Jan Dubois
Mike Brown
Wei Fu
helen

Changes

59 commits

[release/1.7] Prepare release notes for v1.7.2 (#8629)
- 0e41daaea [release/1.7] Prepare release notes for v1.7.2
[1.7 backport] Fix panic when remote differ returns empty result (#8631)
- e134b6393 Fix panic when remote differ returns empty result
[release/1.7 backport] Mount snapshots on Windows (#8616)
- 313c226b8 Update continuity to a tagged version
- 8dd16285a UnmountAll is a no-op for missing mount points
- acff3eefa Improve error messages and remove check
- b4dd3bf4e Make ReadOnly() available on all platforms
- 08d8baf3f Increase integration test tmieout to 20m
- 1f0dbd011 Remove bind code path in mount()
- 8f37b1c63 Remove "bind" code path from diff
- 9139208b3 Properly mount base layers
- e61e7b312 Skip parent layer options on bind mounts
- e4307926f Add ReadOnly() function
- 0277b9b01 Remove escalated privileges
- d5c18dfb7 Use DefaultSnapshotter
- 853179366 use t.Fatal if we cannot enable process privileges
- 5b3ee413f Update continuity
- 375172604 Fix go.mod, simplify boolean logic, add logging
- 600abd137 Ignore ERROR_NOT_FOUND error when removing mount
- df7295dcd Update continuity, go-winio and hcsshim
- 0db78c482 Remove unused function
- 219058766 Grant needed privileges for snapshotter tests
- 96fbe5bc8 Fix layer comparison and enable read-only checks
- 279e0d3c9 Use bind filer for mounts
- 93e94da40 Enable TestSnapshotterClient on Windows
- 3a3da693a Run Windows snapshotter through the test suite
- e7b62322f Fix misspelling of 'Native' as 'Naive'
- e1f999a18 Add paired 'mount' log for 'unmount'
- 5788d6e52 Don't use all-upper-case filenames in snapshot tests
- 3cdcb2f10 Skip tests that do not apply to WCOW on Windows
- b0968b8bb Ensure mounts are unmounted before leaving the test
- b57424851 Unify testutil.Unmount on Windows and Unix
- b9a8aad45 Implement Windows mounting for bind and windows-layer mounts
- 1a64ee183 Implement WCOW parentless active snapshots and view snapshots
[release/1.7] fix: cio.Cancel() should close the pipes (#8624)
- 99582fb1a fix: cio.Cancel() should close the pipes
[release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments (#8621)
- eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments
[release/1.7] Publish sandbox events (#8613)
- e21c8beee Post cherry-pick fixes
- 246240f71 Move PLEG event back to CRI
- 16f3726dd Generate sandbox exit events from CRI
- 0c8cfb1a7 Move pod sandbox recovery to podsandbox/ package
- 91d9f5c64 Publish sandbox events
- 4b77683b4 Add sandbox events protos
[release/1.7] notify readiness when registered plugins are ready (#8584)
- 2c38cad77 notify readiness when registered plugins are ready
[release/1.7] Backport CRI sandbox server stats changes (#8604)
- 7851b0a9f CRI: Make stats respect sandbox's platform
- 8d7c340ca [sbserver] handle missing cpu stats
- d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes
[release/1.7] Cherry-pick: Update volume-ownership image with latest hashes (#8574)
- 08de6e7b8 Update volume-ownership image with latest hashes
[release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection (#8519)
- 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field
[release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility (#8510)
- 9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility

Changes from containerd/continuity

31 commits

Fall back to Copyfile when Clonefile detects a cross-device request (#225)
- 7df79f5 Fall back to Copyfile when Clonefile detects a cross-device request
Support darwin clonefile (#223)
- 30cf84d Add support for Darwin clonefile
- ebdd069 Add copy benchmark
Update golang.org/x/sys to v0.1.0 (#222)
- 2db84b9 Update golang.org/x/sys to v0.1.0
Enable tests for all platforms (#220)
- b449cd0 Fix tests on Windows
- eb05879 Fix Darwin tests
- 9cd17be Enable tests for all platforms
Add more Windows metadata files (#219)
- cdfbe61 Add more Windows metadata files
atomicWriteFile: file defer close (#213)
- 9eb2a49 atomicWriteFile: file defer close
Update GitHub Actions runner images (#216)
- ad9c903 Update GitHub Actions runner images
Add CodeQL security scan workflow (#215)
- c8de034 Add CodeQL security scan workflow
Add Go 1.20 support to CI (#214)
- be62cc1 Add Go 1.20 support to CI
Add paths to windows metadataFiles (#212)
- 68f7b34 Add paths to windows metadataFiles
Remove references to io/ioutil package (#211)
- e22f001 Remove references to io/ioutil package
Update GitHub actions CI workflow (#210)
- 1c3fa33 Update GitHub actions CI workflow
format code with gofumpt (#209)
- f5d245e format code with gofumpt
Correctly ignore error wrapping ErrNotSupported (#207)
- 1ee38b5 Correctly ignore error wrapping ErrNotSupported

Dependency Changes

github.com/containerd/continuity v0.3.0 -> v0.4.1

Previous release can be found at v1.7.1

`v1.7.1`: containerd 1.7.1

Compare Source

Welcome to the v1.7.1 release of containerd!

The first patch release for containerd 1.7 includes many fixes to CRI
sandbox mode, various other fixes, runc update, and important fixes in
core dependencies such as ttrpc and typeurl.

CRI/Sandbox Updates

Throw not supported error when UID or GID mappings provided (#8211)
Cleanup shim on start failure (#8282)
Fix premature close of CRI service when there are no CNI configuration monitors (#8282)
Avoid UID lookup from mount on Darwin (#8314)
Keep Linux mounts for Linux sandboxes on non-Linux hosts (#8331)
Add noexec,nodev,nosuid to /etc/resolv.conf bind mount (#8336)
Remove entry for container from container store on error (#8457)
Fix unmarshal in container metrics (#8472)

Other Notable Updates

Use readonly for temporary mounts (#8300 #8358)
Fix skip docker manifest option on image exporter (#8344)
Update runc binary to v1.1.7 (#8451)
Fix runtime path task option (#8453)
Fix panic from nil checkpoint options (#8475)
Fix transfer service configuration options (#8491)
Fix server-side goroutine leak on receive message error (ttrpc#141)
Fix panic caused by race to close send channel (ttrpc#140)
Fix unmarshal to return non-nil object when nil value (ttrpc#140)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Sebastiaan van Stijn
Akihiro Suda
Iceber Gu
Phil Estes
Maksym Pavlenko
Wei Fu
Danny Canter
Kirtana Ashok
Rodrigo Campos
Samuel Karp
Vinayak Goyal
Austin Vazquez
Justin Chadwell
Kazuyoshi Kato
Brad Davidson
Djordje Lukic
Ethan Lowman
Laura Brehm
Michael Crosby

Changes

68 commits

[release/1.7] Prepare release notes for v1.7.1 (#8501)
- 27a0d957b Prepare release notes for v1.7.1
[release/1.7] Update ttrpc v1.2.2 (#8499)
- 7b288e2d7 Update ttrpc to v1.2.2
[release/1.7] runtime/shim: fix the nil checkpoint options (#8475)
- 3ef5b689a runtime/shim: fix the nil checkpoint options
[release/1.7] bump typeurl to v2.1.1 (#8495)
- 0e0532eb2 bump typeurl to v2.1.1
[release/1.7] Transfer service backports (#8491)
- 35e86f96c [transfer] avoid setting limiters when max is 0
- f7233811f Update transfer configuration
- 4510eac00 Fix image pulling with Transfer service
[release/1.7]Update hcsshim tag to v0.10.0-rc.8 (#8480)
- aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8
[release/1.7] cri: Fix umarshal metrics (#8472)
- 95ef67e19 Fix umarshal metrics for CRI server
[release/1.7 backport] update go to go1.20.4, go1.19.9 (#8471)
- 021bba28b update go to go1.20.4, go1.19.9
[release/1.7] fix the task setting the runtime path (#8453)
- c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1
- aa3c63c15 integration: add container start test using abs runtime path
- d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field
[release/1.7] Remove entry for container from container store on error (#8457)
- 6b3ae0129 Remove entry for container from container store on error
[release/1.7 backport] update runc binary to v1.1.7 (#8451)
- fae4b6223 update runc binary to v1.1.7
[release/1.7] cri: Vendor v0.27.1 (#8444)
- 571715a9d cri: Vendor v0.27.1
[release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses (#8404)
- 1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses
[release/1.7] Fix argsEscaped tests (#8405)
- a6d336c1f Fix argsEscaped tests
[release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings (#8211)
- 7de8629be cri: Throw an error if idmap mounts is requested
- 75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
[release/1.7] go.mod: remove redundant replace, and some cleaning-up (#8396)
- 8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule
- 1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools
- e9f962187 go.mod: integration: use non-pre-release of containerd
- 84393b005 go.mod: integration: move indirect dependencies to the right group
[release/1.7 backport] update runc binary to v1.1.6 (#8386)
- dec2595af update runc binary to v1.1.6
[release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups (#8358)
- 54d12b872 oci: Use WithReadonlyTempMount when adding users/groups
[release/1.7 backport] update go to go1.20.3, go1.19.8 (#8354)
- 624327651 update go to go1.20.3, go1.19.8
[release/1.7] archive: consistently respect value of WithSkipDockerManifest (#8344)
- 1d6641b7c export: add test for WithSkipDockerManifest
- 0e0d84f6b archive: consistently respect value of WithSkipDockerManifest
[release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. (#8336)
- 9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
- 5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
- 0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
[release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 (#8335)
- 1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1
[release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin (#8331)
- 17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin
[release/1.7] update runc binary to v1.1.5 (#8325)
- d81fc15af update runc binary to v1.1.5
- 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5
[backport 1.7] Defer uid lookups on Darwin (#8314)
- 90591db47 Defer uid lookups on Darwin
[release/1.7 backport] Add WithReadonlyTempMount to create readonly temporary mounts (#8300)
- b7d87b190 Add WithReadonlyTempMount to create readonly temporary mounts
[release/1.7] Backport Sandbox/CRI fixes (#8282)
- 1c1b6bcb2 CRI: Don't always close netConfMonitor channel
- cf2e454bf Sandbox: Correct/add some fields to Status()
- ce68e8e0d Sandbox: Cleanup shim on Start failure

Changes from containerd/ttrpc

8 commits

First process the pending messages in recv channel (#144)
- c51165f First process the pending messages in recv channel
Add recvClose channel to stream (#140)
- 471297e Add recvClose channel to stream
Unwrap IO errors in server connection error handling (#141)
- 9599fad Unwrap io errors in server connection receive error handling
Update GitHub actions CI workflow (#124)
- c7b5a32 Update GitHub actions CI workflow

Dependency Changes

github.com/Microsoft/go-winio v0.6.0 -> v0.6.1
github.com/Microsoft/hcsshim v0.10.0-rc.7 -> v0.10.0-rc.8
github.com/containerd/ttrpc v1.2.1 -> v1.2.2
github.com/containerd/typeurl/v2 v2.1.0 -> v2.1.1
github.com/golang/protobuf v1.5.2 -> v1.5.3
github.com/opencontainers/runc v1.1.4 -> v1.1.5
github.com/opencontainers/runtime-tools 946c877 -> 2e043c6
golang.org/x/mod v0.7.0 -> v0.9.0
golang.org/x/net v0.7.0 -> v0.8.0
golang.org/x/sys v0.6.0 -> v0.7.0
golang.org/x/term v0.5.0 -> v0.6.0
golang.org/x/text v0.7.0 -> v0.8.0
golang.org/x/tools v0.5.0 -> v0.7.0
google.golang.org/protobuf v1.28.1 -> v1.29.1
k8s.io/cri-api v0.26.2 -> v0.27.1

Previous release can be found at v1.7.0

`v1.7.0`: containerd 1.7.0

Compare Source

Welcome to the v1.7.0 release of containerd!

The eighth major release of containerd includes new functionality alongside many improvements.
This release is the last major release of containerd 1.x before 2.0.
Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0.
This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations.
The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality.

Highlights

Sandbox API (experimental)

The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs.
This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients.

Sandbox API (#6703)
CRI Sandbox API Implementation (#7228)

Transfer Service (experimental)

Transfer Service (#7320)

The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for
pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release
to allow for further plugin development and integration into existing plugins.

See the Transfer Docs

NRI (experimental)

Extend NRI scope (nri#16)
Support for updated NRI (#6019)

The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides
basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration.

This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases.

See the NRI Docs

Platform Support

Linux containers on FreeBSD (#7000)

Runtime Features

Add support for CDI device injection (#6654)
Support for cgroups blockio (#5490)
Add restart policy for enhanced restart manager (#6744)

gRPC Shim Support (experimental)

Initial gRPC shim support (#8052)

Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going
away and will continue to be recommended for the best performance and lowest shim memory overhead.
The gRPC support allows implementation of a wider range of shim implementations which may not
have access to a stable ttrpc library in the implementation language. The shim protocol is also
updated to allow the shims to specify the protocol which is supported.

Road to 2.0

Refactoring

There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points.

The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality
out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this,
but it also being done for image and network management.

The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc.
Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability.

Remove gogoproto.customtype (#6699)
Remove enumvalue_customname, goproto_enum_prefix and enum_customname (#6708)
Remove all gogoproto extensions (#6829)
Migrate off from github.com/gogo/protobuf (#6841)
ttrpc streaming (ttrpc#107)
Add unpack interface for client (#6749)
Add collectible resources to metadata gc (#6804)
Add version to shim protocol (#8177)

Configuration

Existing CRI configurations will be supported until 2.0.
Any functionality split out of CRI will have their configuration migrated to new plugins.
Deprecated configuration versions and configurations for deprecated features will be removed in 2.0.

Deprecation

The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include.

Docker Schema 1 Image Deprecation (#6884)

CRI Updates

Fix CRI plugin to setup pod network after creating the sandbox container (#5904)
Support image pull progress timeout (#6150)
Add experimental support for runtime specific snapshotters (#6899)
Pass all TOML runtime configuration options from CRI to the runtime (#7764)
Support for user namespaces in stateless pods (KEP-127) (experimental) (#7679)
Add timeout option for drain exec io (#7832)
Add network plugin metrics (#7858)
CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23 (#7863)

Other

Support shallow content copy by adding reader option to local content reader at (#7414)
Add NoSameOwner option when unpacking tars (#7386)
Add FetcherByDigest for fetching blobs without fetching a manifest (#7460)
Update default seccomp profile to block socket calls to AF_VSOCK (#7510)
Replace fork on mount logic with CLONE_FS (#7513)
Add support for default registry host configuration (#7607)
Use github.com/minio/sha256-simd for more efficient sha256 calculation (#7732)
Make OCI options cross-platform (#7928)
Update release builds to build from Ubuntu 20.04 with glibc 2.31 (#8021)
Use data field from OCI descriptor when provided for fetch (#8076)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Kazuyoshi Kato
Maksym Pavlenko
Wei Fu
Phil Estes
Akihiro Suda
Sebastiaan van Stijn
Samuel Karp
Krisztian Litkey
Mike Brown
Stefan Berger
Danny Canter
Austin Vazquez
Daniel Canter
yanggang
Iceber Gu
Ye Sijun
Ed Bartosh
Luca Comellini
Adam Korcz
Nashwan Azhari
Tony Fang
ruiwen-zhao
xin.li
Brian Goff
Gabriel Adrian Samfira
Paul "TBBle" Hampson
Henry Wang
Kevin Parsons
Rodrigo Campos
zounengren
Justin Terry
Paco Xu
Shengjing Zhu
Swagat Bora
wanglei
Gavin Inglis
Akhil Mohan
Hsing-Yu (David) Chen
Zechun Chen
guodong
lengrongfu
James Jenkins
James Sturtevant
Kirtana Ashok
Michael Crosby
Qiutong Song
Shiming Zhang
Vincent Batts
Antonio Ojea
Cameron Sparr
Casey Callendrello
Changwei Ge
Jian Zeng
Josh Seba
Junyu Liu
Kohei Tokunaga
Michael Zappa
Qasim Sarfraz
Tobias Klauser
Zhang Tianyang
pigletfly
yaoyinnan
Abirdcfly
Aditi Sharma
Amit Barve
Bennett-White
Bjorn Neergaard
Cory Snider
Craig Ingram
Eng Zer Jun
Eric Lin
Ethan Lowman
Fabian Hoffmann
Jess
Jiongchi Yu
Jonny Stoten
Juan Hoyos
Kang.Zhang
Kay Yan
Markus Lehtonen
Mikko Ylinen
Mohit Sharma
Paul Cacheux
Paul S. Schweigert
Qian Zhang
Tõnis Tiigi
Yasin Turan
bin liu
helen
yulng
Aman Sharma
Anastassios Nanos
Andrew G. Morgan
Andrey Klimentyev
Aniruddha Basak
Anthony Nandaa
Antti Kervinen
Aviral Takkar
Baoshuo
Benjamin Elder
Benjamin Wang
Brandon Lum
Chao Dai
Chuanying Du
Claudiu Belu
Daniel Lenar
Danielle Lancashire
Dat Nguyen
Davanum Srinivas
Dave
David Leadbeater
David Porter
Dmitry Shurupov
Edgar Lee
Eric Ernst
Fahed Dorgaa
Gabriela Cervantes
Gijs Peskens
Hamza El-Saawy
Ikko Ashimine
Jeff Widman
Jeff Zvier
Jeremi Piotrowski
Jimmy Hsiao
Jin Dong
Jordan Karaze
Joseph Sheng
Joyce Brum
Jukka Rissanen
Justin Chadwell
Kate
Kathryn Baldauf
Kyle L Frisbie
LongtaoZhang
Manuel Alejandro de Brito Fontes
Marc Schwind
Mark Rossetti
Mark Zhang
Marvin Giessing
Mathis Michel
Merlin Ran
Nabeel Rana
Nathan
Nguyen Phan Huy
Nikita Rybak
Nobel Barakat
Oleg Atamanenko
Oleg Zhurakivskyy
Oliver Radwell
Paweł Gronowski
Quan Tian
Roy Yang
Samuel Ortiz
Serge Logvinov
Shane Jennings
Shaun Lawrie
Shinichi Morimoto
SilverSoldier
Sophie Liu
Su Fei
Taeho Nam
Takumasa Sakao
Tiger Kaovilai
Tom Godkin
Tomoya.Fujita
Xinlin Ma
Yakul Garg
Zhongming Chang
Zhuchen Wang
austinvazquez
cardy.tang
chaunceyjiang
dabaooline
guiyong.ou
huoqifeng
jianfei.zhang
liyuxuan.darfux
ningmingxiao
panguicai008
shi yixue
shuaichang
songjiang han
wen chen
wusong
xiaoyang zhu
yanghesong
yaozhenxiu
zhang he

Changes

1753 commits

Prepare release notes for v1.7.0 (#8242)
RELEASES.md: describe the deprecated config properties (#8241)
Flag usage uses uppercase letters (#8232)
docs: link docs/managed-opt.md to client.Install (#8240)
Prepare release notes for v1.7.0-rc.3 (#8233)
Go 1.20.2 (#8237)
Update ttrpc to v1.2.1 (#8236)
sandbox: create sandbox with network namespace path (#8149)
labels: Add LabelDistributionSource (#8224)
archive: disable looking up usernames and groupnames on the host (#8220)
go.mod: go.opentelemetry.io/otel/* v1.14.0 (#8222)
metadata: add comments about Image.CreatedAt (#8225)
Add release notes for v1.7.0-rc.2 (#8216)
go.mod: {hcsshim, containerd/, go-restful/v3, mergo, klauspost/compress, opencontainers/} latest (#8221)
Bump k8s.io deps (#8131)
Update imgcrypt to v1.1.7 (#8217)
Add ArgsEscaped support for CRI (#8198)
Sandbox: Delete shim+shutdown sandbox on create failure (#8204)
[Feature] Transfer tag image (#8205)
docs: fix typo of shim.RunManager's function comment (#8214)
[cri] Implement CRI Pod and Container stats for Windows (#7099)
Sandbox: Fix/enhance error messages for Create (#8203)
epoch: fix unit test when SOURCE_DATE_EPOCH is set (#8202)
pkg/cri: add timeout to drain exec io (#7832)
Prepare release notes for v1.7.0-rc.1 (#8192)
Transfer export image (#8191)
Create config struct to take user input (#8193)
ctr/tasks: support remapped UID/GID (#7864)
Add experimental section to RELEASES.md (#8119)
Fix streaming manager deadlock on collection (#8188)
Update CRI guide link (#8190)
Add max shim version environment variable (#8189)
Update README with location of security audits (#8187)
docs: fix typos in historical/design/data-flow.md (#8181)
Increase CI workflow timeout on Windows. (#8183)
releases: mark 1.5 as EOL (#8178)
Add version to shim protocol (#8177)
Rework install-protobuf script and add new targets (#8164)
bump go-cni to v1.1.9 (#8173)
Treat sandboxes as root gc resources and scan referenced objects (#8172)
update CDI version to v0.5.4 (#8152)
Prepare release notes for v1.7.0-rc.0 (#8162)
pkg/nri: pull in latest NRI, update NRI configuration. (#8140)
[transfer]Config options followup (#8165)
Add configuration options to local transfer service (#8062)
docs: Show how to select GRPC for shims (#8134)
CRI: remove duplicated snapshotters code (#8154)
docs: add more comment to logging.LoggerFunc (#8142)
contrib/apparmor: remove code related to apparmor_parser version (#8069)
runtime/v2: Call onCloseWithShimLog for grpc shims (#8120)
Add Fields type alias to log package (#8143)
Migrate from k8s.gcr.io to registry.k8s.io (#8125)
sandbox: start sandbox with options (#8129)
Add macOS build note (#8115)
Fix concurrent writes for UpdateContainerStats (#8130)
dependency: bump go.etcd.io/bbolt to v1.3.7 (#8128)
runtime/v2: Log BootstrapParams (#8124)
Prepare release notes for v1.7.0 beta.4 (#8110)
Go 1.20.1 (#8103)
ctr version: add args check (#8096)
pkg/cri/config: fix Mirrors deprecation comment (#8041)
docs: fix function names in fuzzing test documentation (#8044)
fix: 'go routine' should be 'goroutine' (#8051)
Github Security Advisory GHSA-hmfx-3pcx-653p
Github Security Advisory GHSA-259w-8hf6-59c2
pkg/cri/sbserver: experimental NRI integration for CRI. (#7954)
Clean up error strings that start with uppercase (#8114)
Clean up repeated package import (#8113)
Go 1.19.6 (#8109)
Initial GRPC shims support (#8052)
CRI: Pass sandbox annotations to _other platforms (#8060)
cmd/ctr/commands/images: support usage subcommand (#8105)
cni: pass in the cgroupPath capability argument (#8067)
Add fallback for windows platforms without osversion (#8101)
release: xx v1.2.1 (#8104)
[transfer] update imagestore interface to support multiple references (#7964)
[sandbox] Use options to pass PodSandboxConfig to shims (#8100)
Send container events with nil PodSandboxStatus (#8047)
test: add hostNetwork tests for both windows and linux (#7984)
loadConfig pre-inspection in advance (#8097)
contrib/apparmor: remove version-dependent rules (#8068)
*: introduce wrapper pkgs for blockio and rdt (#8066)
Extract CRI instrument into separate package (#8093)
CRI: Mirror generic toml runtime config under server (#8091)
go.mod: github.com/containerd/typeurl/v2 v2.1.0 (#8092)
Revert apparmor_parser regression (#8086)
[sandbox] refactor controller interface (#7981)
btrfs: depend on kernel UAPI instead of libbtrfs (#7933)
CI: skip some jobs when repo != containerd/containerd (#8082)
chore: clean up repeated package import (#8078)
fetch: Use data from descriptor when available. (#8076)
chore: use http constants instead of string (#8077)
Fix retry logic within devmapper device deactivation (#8075)
Clean CI yaml (#8071)
Add critest.exe in $PATH (#8074)
keep the uppercase letter for flag info (#7976)
go.mod: Bump hcsshim to v0.10.0-rc.5 (#8049)
Fix sandbox exit monitor (#8045)
Generate GRPC contracts for runtime APIs (#7979)
Make argument validation of mount.UnmountRecursive compatible to mount.UnmountAll (#8035)
Export remote snapshotter label handler (#8036)
Adding support to run install hcsshim from local clone (#7989)
go.mod: github.com/urfave/cli v1.22.12 (#8040)
cmd/ctr/commands: clean up the func IntToInt32Array in utils.go (#8039)
pkg/epoch: drop timezone (#8037)
go.mod: update github.com/containerd/nri. (#8034)
fix(docs): minor fix on the windows installation steps (#8013)
Add integration test to opentelemetry tracing on image pull (#7847)
Use mount.Target to specify subdirectory of rootfs mount (#7840)
cri: mkdir /etc/cni with 0755, not 0700 (#8020)
log/logtest: add testcase as debug field (#8025)
go.mod: github.com/containerd/cgroups/v3 v3.0.0 (#8027)
Update CNI plugins to 1.2.0 (#7977)
go.mod: go.opentelemetry.io/otel v1.12.0 (#8026)
Move PLEG events for pause container under podsandbox package (#8007)
runtime docs: Clarify delete cwd behavior (#8012)
release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles (#8019)
RELEASES.md: update release status (#8022)
deflake: TestContainerPids (#8023)
release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) (#8021)
Update the EOL date for 1.5 release (#8015)
Prepare release notes for v1.7.0-beta.3 (#8014)
Fix Memory Limit test (#7959)
Reused package errdefs for not supported error (#8005)
pkg/cri: optimize slice initialization (#7994)
go.mod: update goresctrl to v0.3.0 (#7987)
pushWriter: correctly propagate errors (#7985)
CI: test release.yml on every PR (#7968)
fix incorrect namespace of event when create/update namespace (#7129)
Backport changes to sandboxed CRI (#7973)
Fix syntax errors in the document (#7970)
release/Dockerfile: set DEBIAN_FRONTEND=noninteractive (#7969)
use local variable for rt when iterating collectors (#7963)
Add basic spec and mounts for Darwin (#7960)
go.mod: Bump hcsshim to v0.10.0-rc.4 (#7810)
Use specs Platform instead of generated API (#7958)
Make OCI options cross-platform (#7928)
update to go1.19.5, go1.18.10 (#7948)
fuzzing: improve archive fuzzer (#7957)
shim: enable debug logging for delete (#7943)
cri: Fix TestUpdateOCILinuxResource for host w/o swap controller (#7946)
ctr/run: flags --detach and --rm cannot be specified together (#7929)
Fix Flaky Windows CRI Integration test on TestContainerConsumedStats (#7935)
Refactor snapshotters metastore transaction (#7917)
mod: update github.com/pelletier/go-toml@v1.9.5 (#7932)
archive: improve TestSourceDateEpoch (#7927)
Add tracing plugin test (#7883)
docs/content-flow: update the description of the content labels (#7925)
Add cleanup package for context management during cleanup (#7861)
Fix race between stream registration and use (#7886)
Prepare release notes for v1.7.0-beta.2 (#7903)
Cirrus CI (Fedora 37, Rocky 8): enable cri-integration (#7892)
contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages (#7891)
docs: fix a typo in tracing documentation (#7914)
CI: Pass GITHUB_TOKEN to containerd/project-checks (#7913)
Enable dupword linter (#7911)
ctr: Add platform flag to 'oci spec' command (#7905)
Vagrantfile: fix disk resize error with VirtualBox (#7907)
Vagrantfile: fix comments about SELinux (#7908)
Use the const labels.LabelUncompressed (#7906)
[sandbox] Add sandbox store plugin type (#7850)
Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts (#7893)
CRI: Comment cleanup/misc fixes (#7904)
Move snapshot event publishing into metadata store (#5674)
Vagrantfile: install-rootless-podman: remove setenforce 0 (#7887)
reused package errdefs for error (#7894)
integration/images: switch away from Docker Hub to avoid rate limit (#7888)
Validate userns container config is consistent with sandbox userns config (#7882)
ctr contents ls sorts the labels of the content (#7881)
chore: use go fix to cleanup old +build buildtag (#7879)
cri: Shadow variables to avoid t.Parallel() issues (#7880)
Add support for user namespaces in stateless pods (KEP-127) (#7679)
Refactor metastore transaction (#7529)
oci: appendOSMounts(): remove unused error, and move (#7874)
add kube v1.26: remove v1alph2 cri support (#7863)
make runc 1.1 for oss_fuzz_build.sh (#7875)
CRI sbserver: Prevent server reuse after Shutdown (#7872)
Fix incorrect defer usage and refactor judgement (#7521)
oci: Add WithDomainname (#7869)
Reused errdefs define error (#7871)
fix ctr tasks kill does not remove cni network under windows (#7866)
add network plugin metrics (#7858)
Avoid using canceled context in unpacker cleanup (#7859)
image/label: print more characters of label keys (#7618)
prevent Server reuse after a Shutdown (#7165)
Check containerd's readiness before calling critest (#7851)
Fix grammatical errors in Readme (#7837)
Fix cpu architecture detection issue on linux/arm (#7636)
CRI: Fix no CNI info for pod sandbox on restart (#7845)
Enable checkRename test (#7081)
metastore: Add WithTransaction convenience method (#7781)
Prevent a race condition in testHook (#7831)
cri: fix memory.memsw.limit_in_bytes: no such file or directory (#7836)
go.mod: update fuzz-headers and fuzz-build (#7824)
Remove github.com/gogo/protobuf again (#7825)
CRI: Add host networking helper (#7814)
Support sandbox shutdown in shim runtimes (#7792)
move up to CRI-TOOLS v1.26.0 (#7818)
Minor fix when querying pod sandbox status (#7812)
nil check to avoid panic on upgrade (#7809)
Bump grpc to v1.51.0 (#7709)
fatal error: concurrent map iteration and map write (#7805)
Bump golangci-lint to v1.50.1 (#7804)
cri: make swapping disabled with memory limit (#7783)
add metrics for image pulling: error; in progress count; thoughput (#7313)
Prepare release notes for v1.7.0-beta.1 (#7793)
support fetching containerd from non public GCS buckets (#7771)
images: support specifying SourceDateEpoch via ctx (#7651)
fuzzing: improve archive fuzzer (#7718)
fix sdNotify func when debug level (#7798)
Upgrade GitHub actions packages in release workflow (#7794)
Enable GitHub Actions local Linux CI runs (#7796)
integration: increase timeout in container_event_test.go (#7791)
digest: use github.com/minio/sha256-simd (#7732)
allow client to remove created tasks with PID 0 (#7787)
Add container event support to containerd (#7073)
docs: Authorizer.Authorize could return ErrUnexpectedStatus (#7786)
fix: check for tmpfs when evaluating if userxattr is needed (#7772)
Pass TOML configuration options for runtimes CRI is not aware of (#7764)
Cleanup build constraints (#7776)
There is no way to disable debug endpoint on Darwin (#7775)
CI: Vagrant: pin rockylinux/8 to v5.0.0 (#7777)
vendor: golang.org/x/net v0.4.0 (#7774)
Fix context when waiting sandbox (#7773)
Github Security Advisory GHSA-2qjp-425j-52j9
update to go1.19.4, go1.18.9 (#7765)
Change PushContent to require only Provider (#7763)
sbserver bug fixing (#7768)
Add unit test to Opentelemetry tracing (#7671)
remove some (aliases for) deprecated functions (#7525)
Refactor ctr restore to allow for tty allocation (#7673)
fix panic when containerd-stress density --count 0 (#7748)
Unwrap proto errors in streaming client (#7753)
Fix process_vm_* syscall names in seccomp (#7755)
upgrade the ops.md output for current 1.7 version . (#7747)
docs: Add extra security instructions (#7743)
go.mod: re-vendor NRI from the official repo. (#7744)
[Sandbox API] CRI status cleanup (#7731)
Transfer service (#7320)
NRI: add support for NRI with extended scope. (#6019)
archive: set WithModTimeUpperBound when WithSourceDateEpoch is set (#7710)
Fix order of operations when setting lease labels (#7702)
Add ctr image prune command (#7730)
Check for nullptr before dereferencing (#7708)
use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers (#7736)
introspection: expose the daemon's PID and PIDNS (#7694)
reference/docker: synchronize fork with upstream distribution/distribution (#7635)
go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions (#7721)
Add ptrace readby and tracedby to default AppArmor profile (#7714)
Fix sandbox API when calling sandboxed shims (#7684)
make status more readable and update easy. (#7669)
integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 (#7720)
Resolve warnings in Windows GitHub Actions periodic workflows (#7706)
Sandbox API: implement Controller.Status for SandboxAPI (#7470)
[port #5904 to sbserver] Setup pod network after creating the sandbox container (#7426)
fix for OSS-Fuzz infra changes (#7677)
runtime/v2/shim: clean up the use of containerdBinary (#7499)
Add process_vm read and write calls to default seccomp profile (#7693)
Resolve Scorecards GitHub Actions workflow warnings (#7707)
cri: add pod uid annotation (#7697)
Missed out platform interface when reused the conn for Client. (#7699)
overlayfs: remove duplicated tx rollback (#7700)
go.mod: update some dependencies (#7704)
update github.com/cpuguy83/go-md2man/v2 to v2.0.2 (#7705)
Fsnotify bump and change code (#7703)
fix build containerd in centos9 (#7683)
Bump urfave-cli to v1.22.10 (#7701)
can set up the network serially by CNI plugins (#7685)
Update cri-api dependency to v0.26.0-beta.0 (#7656)
overlay: Remove unused method param (#7696)
CI: update Fedora to 37 (#7691)
tx rollback when GetInfo return error (#7678)
Upgrade github.com/containerd/cgroups from v1 to v3 (#7601)
Remove OpenTelementry imports from remotes/docker package (#7675)
Expose Done and Err in Shutdown service (#7686)
gotestsum match go version 1.19 (#7688)
complement sub-command note for containerd-main (#7670)
keep the lower case letter for flag info (#7668)
bump critools into ca1571e (#7666)
Fix broken link for CRI plugin in docs (#7667)
add option to resolve symlinks in WithLinuxDevice (#7523)
Bump k8s.io deps to v0.25.4 (#7663)
Release: add static binaries (#7659)
Bump OpenTelemetry contrib to v0.36.4 (#7662)
Fix slice append error (spec.Linux.Resources.HugepageLimits) (#7661)
Bump OpenTelemetry to v1.11.1 (#7660)
feature: add gc scheduler metrics collection count (#5263)
Add --debug args to all subcommands of ctr pprof (#7629)
Add a thin wrapper around otel Span object (#7655)
Bump grpc to v1.50.1 (#7643)
replace strings.Split(N) for strings.Cut() or alternatives (#7631)
add oci.WithCPURT (#7642)
Sandbox API: Add a new mode config for sandbox controller impls (#7590)
fuzzing: bump go-fuzz-headers (#7625)
Bump k8s.io deps to v0.25.3 (#7637)
Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex (#7641)
Extra documentation for content interfaces (#7640)
Fix shim socket permissions on Darwin (#7638)
s390x: build and package s390x bin in release assets (#7614)
Replace mount fork hack with CLONE_FS (#7513)
remotes: add FetcherByDigest for fetching blobs without foreknown descriptors (useful for general-purpose CAS) (#7460)
Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 (#7403)
Support default hosts.toml configuration (#7607)
Add tracing spans in CRI image service and pull.go (#7453)
Fix missing closed fifo (#7604)
fix comments (#7624)
docs: add additional info in backport process (#7626)
go.mod: golang.org/x/*: use tagged versions (#7621)
Bump go version to 1.19.3 (#7620)
ctr export strictly matching (#7615)
Fix ctr crash when pulling with --http-dump and --http-trace simultaneously (#7617)
Harden GITHUB_TOKEN permissions for OSSF Scorecard (#7599)
overlayutils: Add fastpath for userxattr check (#7611)
Add sequence diagram for shim runtime v2 (#7606)
Sandbox API: Move remote impls to /sandbox/proxy (#7600)
fuzzing: improve archive fuzzer (#7588)
Retry client connection in waitForStart (#7537)
Add Workflow for running critest with Hyper-V Containers on Windows. (#7025)
Add release notes for v1.7.0-beta.0 (#7575)
Cleanup sandbox interfaces (#7576)
Update GitHub actions release workflow set output (#7581)
Fix LogURI generation-related tests on Windows. (#7569)
maintenance: Remove WithWindowsNetworkNamespace from pkg/cri (#7577)
CRI: implement Controller.Delete for SandboxAPI (#7457)
Configure CDI registry only on start (#7419)
update codeql-action to v2 (#7568)
Add logging related metrics to Containerd CRI plugin (#7546)
sys: optimize and refactor MkdirAllWithACL() (#7531)
fix install cni script (#7484)
Update 1.5 release support timeframe (#7560)
bump go-fuzz-headers (#7503)
Add long term stable release branches (#7454)
fix pusher concurrent close channel (#7473)
Make tests on GitHub less noisy (#7530)
containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded (#7541)
Update required Go version in BUILDING.md (#7544)
go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) (#7522)
Use go env to determine GOPATH in Makefile. (#7542)
clean-up "nolint" comments, remove unused ones, update golangci-lint (#7349)
Don't unmount on Darwin when deleting bundle (#7534)
Add timeouts to all CI jobs (#7538)
Vagrantfile: explicitly specify rsync as the shared folder driver (#7539)
sys: remove unused IsAbs() (windows) (#7527)
cri: PodSandboxStatus should tolerate missing task (#7535)
CI: update GHA instances from Ubuntu 18.04 to 20.04 (#7489)
fix the --no-pivot flag being ignored by ctr tasks start (#7519)
Update the default seccomp to block socket calls to AF_VSOCK (#7510)
cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() (#7511)
Stats() shouldn't assume s.container is non-nil (#7517)
Move up actions versions to prep for NodeJS 12 deprecation (#7516)
cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() (#7512)
Updates oci image config to support upstream ArgsEscaped (#7483)
cmd/containerd: replace deprecated windows.IsAnInteractiveSession() (#7497)
Update container with sandbox metadata after NetNS is created (#7481)
archive: add WithSourceDateEpoch() for whiteouts (#7478)
TestTaskResize must use a terminal (#7492)
diff/apply.readCounter: check negative size (#7494)
Add new ctr option for discarding unpacked layers (#7425)
archive: windows: chtimes(): remove redundant conversion (#7491)
archive: validate digests before use (#7488)
vendor: github.com/opencontainers/selinux v1.10.2 (#7482)
fuzzing: create structured tar bytes in archive fuzzer (#7477)
Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 (#7474)
use raw link to containerd.service config (#7463)
cri doc: Update kata containers reference (#7466)
Setup pod network after creating the sandbox container (#5904)
Swap to net.ErrClosed checks for services (#7446)
go.mod: Bump go-winio to v0.6.0 (#7443)
fix retry when writer is reset on push (#6995)
CI: Output a summary using GITHUB_SUMMARY (#7192)
Fix missing close (#7430)
Add test flag for skipping shim cgroup test (#7424)
Refactor CRI fuzzers (#7405)
Fix LogURIGenerator on Windows (#7351)
Set grpc code for unimplemented cri-api methods (#7417)
Add reader option to local content reader at (#7414)
Sandbox API: implement Controller.Wait and Controller.Stop (#7401)
remove stray .zuul.yaml (#7416)
reference CDI configuration details (#7408)
cri-integration: propagate ENABLE_CRI_SANDBOXES (#7413)
Enable OpenSSF Scorecard Github Action (#7404)
Add ext2 fs support to devmapper snapshotter (#7402)
Fuzzing: Instrument with new sanitizers (#7396)
Upgrade fuzzing-related packages to reduce dependencies (#7397)
remotes/docker/config: Skipping TLS verification for localhost (#7393)
Replace github.com/emicklei/go-restful package, versions <2.16.0 (#7395)
Add NoSameOwner option when unpacking tars (#7386)
ctr: add privileged-without-host-devices for run command (#7328)
chore: matching the casing of other flags for ctr's pull command (#7341)
windows: Add runhcs-wcow-hypervisor runtimeclass to the default config (#6901)
Fix missing close (#7370)
CRI: update cdi version to v0.5.1 (#7374)
Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 (#7372)
vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c (#7373)
Remove unused variable from images action (#7371)
feature: use client default namespace (#7291)
integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment (#7367)
feature: upgrade registry.k8s.io/pause version (#7359)
metrics/cgroups/v1: Remove unused event parameter (#7361)
.zuul: remove the zuul because it is offline (#7369)
Update golangci-lint timeout to match config (#7356)
delete redundent import alias and and type conversion (#7345)
Make checkContainerTimestamps less strict on Windows (#7350)
Make oss-fuzz mandatory (#7346)
Add kubernetes v1.25 supported version as v1.24 (#7326)
sys: move ForceRemoveAll to integration/client (#7335)
chore: remove duplicate word in comments (#7338)
Use ioctl helpers from x/sys/unix (#7342)
archive: replace tarName() with filepath.ToSlash() (#7344)
mount: remove unused ErrNotImplementOnWindows (#7339)
replace sys Sequential funcs with moby/sys/sequential (#7334)
Clarify containerd 1.5.0+ for k8s 1.20,1.21 (#7324)
update runc binary to v1.1.4 (#7315)
Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 (#7325)
Update k8s.io/cri-api to v0.25.0 (#7287)
script/setup: handle cnidir with SUDO (#7322)
ContainerStatus to return container resources (#6517)
migrate from k8s.gcr.io to registry.k8s.io (#7038)
Do not rename test files on-the-fly to share functions (#7309)
ctr import: strictly match platform (#6906)
Revert "Downgrade MinGW to version 10.2.0" (#7308)
Follow up #7254 (Switch to Go 1.19) (#7286)
Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer (#7304)
Adding support of CAP_BPF and CAP_PERFMON (#7301)
go.mod: Bump hcsshim to v0.10.0-rc.1 (#7284)
Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset (#7306)
ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 (#7293)
Runtime cleanup (Shim manager and task service) (#7280)
containerd-stress: add support for running through CRI (#6931)
Switch to Go 1.19 (#7254)
Vagrantfile: dump containerd log after critest (#7265)
oci: skip checking group id for WithAppendAdditionalGroups (#7257)
release workflow: increase timeout to 30 minutes & remove Go setup action (#7259)
release: rollback Ubuntu to 18.04 (except for riscv64) (#7258)
Initial sandbox API CRI integration (implement Controller.Start) (#7228)
Use environment variable to specify Go version on CI (#7251)
Update golang to 1.18.5, 1.17.13 (#7243)
Change os.Stderr reassign for Windows service (#7023)
script/setup: fix protobuf for aarch64 (#7237)
Fix cleanup in critest (#7232)
fix: support simultaneous create diff for same parent snapshot (#7204)
Windows HostProcess container CRI stats test (#7223)
Regenerate protos with updated protoc-gen-go (#7226)
test: error strings should not be capitalized (#7195)
Add extra context to error when push unauthorized (#7220)
replace with selinux label (#7207)
Use httputil.DumpRequestOut for dumping client req (#7221)
Fix CRI image pull timeout test for ppc64le (#7215)
test: introduce failpoint control to runc-shimv2 and cni (#7069)
chore: bump macos runner version (#7206)
Use image lists form integration/client tests (#7210)
go.mod: Bump hcsshim to v0.9.4 (#7212)
Drop deprecated ioutil (#7203)
Make getServicesOpts a helper (#7201)
adds an env var commented out for sandboxed mode (#7183)
cri_stats: handle missing cpu stats (#7198)
using ContextDialer instead (#7189)
test: Add ability to switch between cgroupv1 or cgroupv2 for node e2e (#7173)
code cleanup (#7182)
Update k8s.io/cri-api to v0.25.0-alpha2 (#7114)
Refactor usageNanoCores be to used for all OSes (#7186)
adds support for using env file for systemd boot (#7191)
go.mod: github.com/stretchr/testify v1.8.0 (#7185)
ctr: support --user for run/create (#7145)
docs: Fix sample config.toml syntax (#7174)
seccomp: seccomp: add syscalls related to PKU in default policy (#7163)
Update and align golangci-lint version (#7168)
adds a comment explaining how to disable experimental sbserver (#7169)
ci: workaround Cirrus CI's INVALID_ARGUMENT (#7177)
Update install-protobuf script to install protobuf on Darwin (#7153)
Fork CRI server for Sandbox API integration work (#7164)
seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE (#7167)
cri doc: fix formatting for CDI options (#7158)
update golang to 1.18.4, 1.17.12 (#7159)
Fix out of date comments for CRI store packages (#7152)
update some devmapper docs (#7124)
seccomp: allow clock_settime64 when CAP_SYS_TIME is added (#7149)
Copy fuzzers from github.com/cncf/cncf-fuzzing (#7123)
fix can't edit object by using ctr content edit command (#6847)
integration/client: fix typo in export_test.go (#7130)
Fix WWW-Authenticate parsing (#7126)
LCOW differ return ErrNotImplemented for wrong mount type (#7112)
Update go-restful/v3 to latest release (#7117)
pkg/cri: use marshal wrapper for version convertor (#7108)
Remove hacks around contrib/fuzz (#7087)
Fix missing closed HTTP Body (#7107)
Cleanup metadata tests (#7105)
Downgrade MinGW to version 10.2.0 (#7106)
ctr: Fix ctr c create fails to parse arguments (#7098)
Fix Documentation Issue (#7103)
refactor: reduce duplicate code (#7100)
make xattr EPERM non-fatal in createTarFile (#7094)
Move metadata plugin registration to seperate package (#7096)
fix: missing sudo for devmapper doc (#7092)
Ensure Windows Periodic workflow errors out while still uploading results. (#7085)
Add snapshotter key to snapshot events (#7084)
add WithAdditionalGIDs test (#7072)
Forward ctr snapshotter flags on Windows (#7086)
add WithAppendAdditionalGroups helper (#7070)
Make CI Fuzz less noisy (#7065)
ctr: add --hostname flag to create, run (#7082)
improve content-flow (#7077)
Make CI Fuzz optional (#7067)
Use Go 1.18's testing.F on simple fuzzers (#7056)
Downgrade MinGW in Windows setup scripts. (#7062)
Make test path a constant (#7057)
Run fuzzers in CI (#7052)
CRI: Improve the /dev/shm mount options in Sandbox. (#6913)
fix:userattr-unmount unexpected timeout (#7008)
Port (some) unit tests to FreeBSD (#7042)
Bump Golang and MinGW versions in Windows setup script. (#6888)
Windows snapshotter touch ups and new functionality (#6918)
Improve naming consistencies in comments in snapshotter.go (#7032)
Make building static binaries simpler (#7022)
Allow CRI on Darwin (#7033)
update runc binary to v1.1.3 (#7034)
Linux containers on FreeBSD (#7000)
go.mod: github.com/moby/sys/mountinfo v0.6.2 (#7026)
fix minor spelling mistake: lablel -> label (#7031)
go.mod: github.com/containerd/cgroups v1.0.4 (#7027)
go.mod: github.com/containerd/continuity v0.3.0 (#7028)
Correct spelling mistake ("sanbdox" to "sandbox") (#7029)
Github Security Advisory GHSA-5ffw-gxpp-mxpf
Bump grpc to v1.47.0 (#7018)
Bump k8s.io deps to v0.24.1 (#7017)
Support runtime level snapshotter for issue 6657 (#6899)
update golang to 1.18.3, 1.17.11 (#7012)
Fix containerd-stress duration flag (#7004)
update go-cni/for cni update fixing plugins that don't respond with version (#7009)
Add validations for Windows HostProcess CRI configs (#6996)
Move docker reference logic to reference/docker package (#7007)
promote pause image to 3.7 (sync with kube v1.24) (#7003)
Makefile: use urfave_cli_no_docs for binaries that don't need it (#6998)
CRI: cleanup cri/store package (#6993)
Use t.Run for /pkg/cri tests (#7001)
vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script (#6997)
sandbox: replace github.com/pkg/errors with native errors (#6937)
build: Fix references to check-protos target in Makefile (#6983)
ctr: fix label args used in NewContainer (#6954)
ctr sandbox: handle sandbox config (#6959)
Fix broken oss-fuzz build (#6975)
archive: add human-readable hint to Lchown error (#6982)
Fix tx closed error when upperdirlabel specified (#6978)
config: improve config v1 deprecation message (#6972)
Fix Windows install powershell script (#6969)
fix comments on metadata schema and update namespace doc (#6955)
adjust format in comment (#6956)
Restore decompression benchmarks (#6957)
cmd/ctr/commands/content: fix typo in fetch command usage (#6960)
fix some confusing typos (#6950)
update doc url about k8s (#6952)
Separate windows-2019 and windows-2022 test results (#6946)
shim: fix debug flag not working (#6910)
Reverts removal of parallel run from critest (#6938)
Bump OpenTelemetry dependencies (#6932)
update runc binary and vendor to v1.1.2 (#6934)
oci: WithDefaultUnixDevices(): remove tun/tap from the default devices (#6923)
update golang to 1.18.2, 1.17.10 (#6926)
CI: update Fedora to 36 (#6925)
Add Wait to binaryProcessor (#6916)
go.mod: Bump k8s deps to v0.24.0 (#6905)
(Vagrant CI) Enable git commands due to git CVE fix (#6915)
Pass explicit JUnit outfile to critest.exe in Windows workflow. (#6912)
Update critools to v1.24 (#6894)
devmapper docs: small fixes (#6904)
move report dir option to end of line for vagrant cri tests (#6900)
Update Kubernetes version matrix in release docs (#6892)
Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy (#6889)
containerd 1.6.4 k8s 1.24 readme announce (#6890)
Cleanup leaked shim process (#6866)
Add collectible resources to metadata gc (#6804)
Update k8 docurl in file (#6881)
Support RISC-V 64 (#6882)
docs: minor fixes in snapshots.Snapshotter comments (#6885)
Officially deprecate Schema 1 (#6884)
Make Cirrus CI tests more stable (#6880)
docs: Adding windows installation steps to getting-started.md (#6875)
Add ctr support for CPUMax and CPUShares (#6809)
Support for cgroups blockio (#5490)
Fix comment for metadata/db.go (#6871)
Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies (#6867)
Update go-cni to v1.1.5 (#6868)
Bump opencontainers/selinux from 1.10.0 to 1.10.1 (#6865)
Upgrade google.golang.org/grpc and google.golang.org/protobuf (#6864)
Don't use "uname -a" as Cirrus CI's cache key (#6863)
remove duplicate (#6856)
Create ppc64le release (#6858)
Move Vagrant-based tests from GitHub Actions to Cirrus CI (#6854)
feature: support image pull progress timeout (#6150)
Add unpack interface to be used by client (#6749)
Fix undefined error in use of errors package (#6855)
Migrate off from github.com/gogo/protobuf (#6841)
images/image.go: typo (#6851)
Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices (#5686)
integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage (#6180)
fix incorrect syntax in comments (#6845)
cri: close fifos when container is deleted (#6842)
diff: hide types.Any from clients (#6832)
Add Container-Optimized OS into Adopters (#6838)
Prepare for google.golang.org/protobuf (#6835)
fix the restart desired to running when task not found (#6833)
Remove all gogoproto extensions (#6829)
fix nil pointer panic for monitor (#6830)
remotes/docker: log registry URLs as info instead of debug (#5681)
Rename runtime/v2/task to api/runtime (#6827)
Fix protoc-gen-go-fieldpath (#6828)
Consolidate gogo/protobuf dependencies under our own protobuf package (#6826)
Add restart policy for enhanced restart manager (#6744)
Remove gogoproto.stdtime (#6821)
Set timeout when collecting metrics from shim's Stat (#6781)
Fuzz filter package with Go 1.18's fuzzer (#6819)
allow ptrace(2) by default for kernel >= 4.8 (#6810)
Build bin/gen-manpages instead of using "go run" (#6820)
update golang to 1.18.1, 1.17.9 (#6822)
Sandbox API (#6703)
Move lease manager plugin to separate package (#6811)
fix pool_device_test (#6807)
check for duplicate nspath possibilities (#6806)
Do not append []string{""} to command to preserve Docker compatibility (#6805)
tracing: fix panic on startup when configured (#6789)
Optimize loading performance for cri recover (#6680)
Change architecture path in README.md (#6798)
make consistent for checkpoint path (#6792)
metrics/cgroups: fix deadlock issue in Add during Collect (#6788)
ADOPTERS: Update AKS Info (#6794)
Pin upload-cloud-storage action to 0.8.0 in Windows workflow. (#6790)
docs: add Deckhouse to the list of adopters (#6785)
Add docs/snapshotters; simplify docs/cri (#6778)
Turn paths from cmdline into absolute paths (#6672)
CRI: add support for CDI device injection (#6654)
Disable writing freelist to make the file robust against data corruptions (#6761)
mv design docs/historical/design (#6777)
CRI: improve image pulling performance (#6702)
docs: remove runtime v1; migrate config v1 to v2 (#6776)
Skip flaky test on Windows (#6779)
docs/getting-started.md: typo (#6775)
Add no_tracing tag (#6750)
Move historical docs to docs/historical (#6754)
Run go mod tidy in integration tests (#6768)
go.mod: move indirects, and update integration go.mod to 1.18 (#6765)
Drop gotest.tools (#6762)
Use t.Setenv instead of os.Setenv (#6760)
Upgrade to Go 1.18 (#6709)
Adding multi-arch support for the configure.sh script (#6751)
docs/getting-started.md: massive update (#6758)
Remove unmaintained contrib/linuxkit (#6755)
[Windows CI] Address some timeout issues (#6757)
BUILDING.md: update supported Go versions (#6756)
update runc to 1.1.1 (#6753)
CI: add Rocky Linux 8 (#6747)
CI: bump up crun to 1.4.4 (#6748)
added make help for cri integration (#6743)
Update README.md cncf landscape url (#6740)
Fix error message in TestNewBinaryIO (#6738)
Use typeurl.Any instead of github.com/gogo/protobuf/types.Any (#6706)
Use cgroups.AddProc() for cgroups v1 (#5738)
fix: ctr images mount with snapshotter option can't get snapshotter (#6713)
cgroup2: monitor OOMKill instead of OOM to prevent missing container events (#6323)
moving up to go-cni v1.1.4 (#6721)
native: fix deadlock from leaving transactions open (#6722)
go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 (#5390)
Github Security Advisory GHSA-c9cp-9c75-9v8c
runtime: deprecate runc --criu / -criu-path option (#6496)
Bug fix for mount path handling (#6651)
Upgrade containerd/imgcrypt and opencontainers/image-spec (#6711)
Remove enumvalue_customname, goproto_enum_prefix and enum_customname (#6708)
Remove gogoproto.customtype (#6699)
Skip tty critest testcase on Windows Server 2022 (#6698)
Build with Go 1.18 (#6605)
Update prometheus client vendor (#6690)
vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd (#6687)
Make the temp mount as ready only in container WithVolumes (#6593)
fix: ctr run --cni get failed (#6670)
test: use T.TempDir to create temporary test directory (#6681)
Make OpenLab's CI jobs blocking (#6679)
document log level and format (#6683)
Add shared content label to namespaces (#6660)
Add protoc-gen-go-fieldpath (#6562)
Enable gosec linter for golangci-lint (#6669)
Make mkfs.xfs available on OpenLab's CI environment (#6668)
ctr: improve error relative shim path error msg (#6519)
typo fixes under cmd. (#6674)
Handle CRI Device.HostPath on Windows (#6618)
Upgrade golangci-lint and its GitHub Action (#6666)
Don't build a second copy of containerd-shim-runhcs-v1.exe (#6661)
Update TestNormalize to only test Windows platform (#6569)
Fix link in getting-started.md (#6663)
Fuzzing: refactor metadata fuzzers (#6423)
Two xfs file systems with same UUID can not be mounted on the same sy… (#6650)
[Windows] Fix deadline exceeded in daemon restart (#6635)
Use temp file for export/import test (#6658)
strip path-info from -v (version) output, and implement -v flag for containerd-shim (#6495)
Improve unexpected response error handling in resolver (#6617)
Use the latest tag for azure images (#6601)
Run CRI integration tests in GitHub Actions (Windows) (#6626)
cri: fix integration test on cgroupsv2 system (#6595)
Use version 2 configuration format in docs/PLUGINS.md (#6613)
update to go 1.16.15, 1.17.8 to address CVE-2022-24921 (#6619)
Update status of 1.4 release (#6614)
Update TestContainerSymlinkVolumes to use windows path (#6568)
Add --user support for ctr run Windows (#6603)
Update releases (#6608)
Github Security Advisory GHSA-crp2-qrr5-8pq7
Adds support for Windows ArgsEscaped images (#6479)
Do not use weak import (#6558)
cri: relax test for system without hugetlb (#6596)
Use containerd/protobuild instead of stevvooe/protobuild (#6578)
integration: remove duplicated util pkg (#6597)
go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 (#6591)
Update Go version recommendation in getting started (#6585)
go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 (#6337)
fix Implicit memory aliasing in for loop (#6331)
Fix build with gccgo (#6579)
Replace golang.org/x/net/context with std library (#6580)
containerd-shim-runc-v1: return init pid when clean dead shim (#6571)
Use Windows matcher when on Windows platform in all code paths (#6491)
containerd-shim-runc-v2: return init pid when clean dead shim (#6452)
[Windows][Integration] Enable TestRestartMonitor (#6515)
go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 (#6554)

Changes from containerd/cgroups

49 commits

Upgrade GitHub actions CI workflow (#249)
Upgrade Go compiler to 1.19 (#248)
Don't use ioutil (#246)
Check that cgroup is empty before deleting (#228)
Support cgroup.AddThread in cgroupv2 manager (#243)
Support to handle more than 4 fields in cpuacct.stat (#231)
typo shoulld -> should (#236)
Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 (#241)
go.mod: github.com/stretchr/testify v1.8.0 (#240)
.github: use ubuntu-22.04 to test cgroupv2 (#237)
feat(v2): Support cgroup.MoveTo in cgroupv2 manager (#235)
Update README to include usage examples of v2 client (#233)
ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path (#232)
Bump go version to 1.17 in go.mod (#230)
make cmd/ a separate module (as it's only for testing) (#226)
feat(v2): add Update method for v2.Manager (#225)
feat: add memory.min param (#211)
modified the dereference null pointer value. (#218)
update readme for cpu cgroup demo (#217)
Fix systemd full path (#221)
Update Go version and fedora base (#223)
Fix panic in NewSystemd on nil values (#219)

Changes from containerd/continuity

28 commits

go.mod: update dependencies (take 2) (#204)
Revert "go.mod: update dependencies" (#205)
Various small fix-ups (#202)
update authors and mailmap (#201)
move cmd/continuity to its own go module (#200)
CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir) (#198)
fs.CopyDir: support sockets and pipes (#197)
Fix wrapping errors (#196)

Changes from containerd/fifo

26 commits

Update Go vers, x/sys vendor (#51)
chore: cleanup old buildtags by go fix (#49)
Return nil when openFifo returns nil (#47)
Resolve golangci-lint-action package warnings (#48)
Remove references to io/ioutil package (#45)
Update GitHub actions CI workflow (#46)
go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 (#44)
fifo_test: Add 2 tests for closing after reading (#42)
replace pkg/errors (#41)
fifo.Close(): prevent possible panic if fifo is nil (#32)
Update branch name in GitHub Actions (#40)

Changes from containerd/go-cni

38 commits

Add Go 1.20 support (#111)
opts: add cgroupPath capability (#110)
go.mod: github.com/containernetworking/cni v1.1.2 (#109)
Remove references to io/ioutil package (#106)
Update golangci/golangci-lint package (#108)
Update GitHub actions CI workflow (#107)
Add support for Windows default conf paths (#103)
go.mod: github.com/stretchr/testify v1.8.0 (#104)
go.mod: update libcni to v1.1.1 (#101)
add in some serial setup tests; a little make cleanup (#100)
Re-introduce serial network setup (#99)
bump github.com/containernetworking/cni v1.1.0 (#98)
Revert "Update loopback version to support check" (#96)
Use revive instead of golint (#92)
Bump go verion to 1.17 (#91)
moving up to latest CNI plugin release (#90)
Fix Loopback Version (#88)
Update comment for capabilities (#89)
Add integration test for linux and update go version from 1.16 to 1.17 (#84)

Changes from containerd/imgcrypt

49 commits

CHANGES: Updated CHANGES document for 1.1.7 release (#97)
Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers (#96)
build(deps): Update to containerd 1.6.8 (#92)
tests: Add -traditional to OpenSSL command line when OSSL v3 is used (#90)
chore: fix readme typo (#87)
Update to min golang 1.18 (#88)
CHANGES: Updated CHANGES document for 1.1.6 release (#85)
build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 (#83)
CI: Upgrade to golangci-lint v1.46.2 (#84)
CICD: Rename master branch to main (#79)
Rename any to pbAny (#78)
Use reflect to support diff.ApplyConfig with/without gogo's types.Any (#75)
Upgrade golangci-lint-action and golangci-lint (#76)
CHANGES: Updated CHANGES document for 1.1.4 release (#74)
Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 (#73)
images: prepare for typeurl.Any (#72)
Bump ocicrypt to 1.1.3 (#71)
Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 (#67)

Changes from containerd/nri

56 commits

Add Go 1.20 support to CI (#30)
Add CodeQL Security scan workflow (#31)
fixes: sort final adjusted mount slice. (#29)
fixes: fix resource adjustment to properly ignore unset/unadjusted fields. (#28)
adaptation: fix mount and device adjustment. (#27)
Make plugin timeouts configurable, adjust default socket path. (#26)
pkg/adaptation: eliminate configuration file. (#24)
stub: fix a potential plugin crash. (#25)
adaptation: fix a panic for unsolicited updates. (#23)
pkg/adaptaton: log errors with %v not %w. (#22)
chore: cleanup old buildtags by go fix (#21)
add back project info (#20)
Extend scope to enable common pluggable runtime extensions. (#16)
Update GitHub actions CI workflow (#19)
replace pkg/errors (#17)
Update the examples in README.md (#15)
Rename branch from master to main (#12)
Update to containerd 1.5.1 (#11)

Changes from containerd/ttrpc

62 commits

Rework deadline assertion logging to be more clear (#132)
Fix server shutdown logic (#130)
Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 (#133)
Make checkServerShutdown verbose (#128)
server: Fix connection issues when receiving ECONNRESET (#123)
README: protobuild is in containerd org now (#125)
stream: fix the map of streams leak (#120)
Regenerated pb.go files to fix mismatches (#122)
build: Fix references to check-protos target in Makefile (#118)
Add service prefix option to generator (#116)
doc: ttrpc supports stream (#121)
*: remove codecov (#114)
Only generate a Go file if the file has some services (#112)
*.go: organize errors to one spot (#113)
PROTOCOL: slight markdown touchup (#111)
Introduce streaming (#107)
Update checkout and lint actions (#109)
Add Makefile and update protobuf (#106)
Add ttrpc protocol definition (#102)
Enable Codecov again (#105)
Use CR+LF instead of LF regardless of OS (#103)
Log the error's underyling errno if there is (#104)
Use google.golang.org/protobuf instead of github.com/gogo/protobuf (#99)
Wrap correct error on unix.GetsockoptUcred failure (#100)
Update CI project checks to use containerd project action (#101)

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 6c3934b -> 1f10f66
github.com/AdamKorcz/go-118-fuzz-build 5330a85 new
github.com/Microsoft/go-winio v0.5.1 -> v0.6.0
github.com/Microsoft/hcsshim v0.9.2 -> v0.10.0-rc.7
github.com/blang/semver/v4 v4.0.0 new
github.com/cenkalti/backoff/v4 v4.1.2 -> v4.2.0
github.com/cespare/xxhash/v2 v2.1.2 -> v2.2.0
github.com/cilium/ebpf v0.7.0 -> v0.9.1
github.com/container-orchestrated-devices/container-device-interface v0.5.4 new
github.com/containerd/btrfs/v2 v2.0.0 new
github.com/containerd/cgroups v1.0.3 -> v1.1.0
github.com/containerd/cgroups/v3 v3.0.1 new
github.com/containerd/continuity v0.2.2 -> v0.3.0
github.com/containerd/fifo v1.0.0 -> v1.1.0
github.com/containerd/go-cni v1.1.3 -> v1.1.9
github.com/containerd/imgcrypt v1.1.3 -> v1.1.7
github.com/containerd/nri v0.1.0 -> v0.3.0
github.com/containerd/ttrpc v1.1.0 -> v1.2.1
github.com/containerd/typeurl/v2 v2.1.0 new
github.com/containernetworking/cni v1.0.1 -> v1.1.2
github.com/containernetworking/plugins v1.0.1 -> v1.2.0
github.com/containers/ocicrypt v1.1.2 -> v1.1.6
github.com/coreos/go-systemd/v22 v22.3.2 -> v22.5.0
github.com/cpuguy83/go-md2man/v2 v2.0.0 -> v2.0.2
github.com/cyphar/filepath-securejoin v0.2.3 new
github.com/docker/go-units v0.4.0 -> v0.5.0
github.com/emicklei/go-restful/v3 v3.10.1 new
github.com/fsnotify/fsnotify v1.4.9 -> v1.6.0
github.com/go-logr/logr v1.2.2 -> v1.2.3
github.com/godbus/dbus/v5 v5.0.6 -> v5.1.0
github.com/google/go-cmp v0.5.6 -> v0.5.9
github.com/google/uuid v1.2.0 -> v1.3.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 new
github.com/imdario/mergo v0.3.12 -> v0.3.13
github.com/intel/goresctrl v0.2.0 -> v0.3.0
github.com/klauspost/compress v1.11.13 -> v1.16.0
github.com/klauspost/cpuid/v2 v2.0.4 new
github.com/miekg/pkcs11 v1.0.3 -> v1.1.1
github.com/minio/sha256-simd v1.0.0 new
github.com/moby/sys/mountinfo v0.5.0 -> v0.6.2
github.com/moby/sys/sequential v0.5.0 new
github.com/moby/sys/signal v0.6.0 -> v0.7.0
github.com/opencontainers/image-spec 693428a -> 3a7f492
github.com/opencontainers/runc v1.1.0 -> v1.1.4
github.com/opencontainers/runtime-spec 1c3f411 -> v1.1.0-rc.1
github.com/opencontainers/runtime-tools 946c877 new
github.com/opencontainers/selinux v1.10.0 -> v1.11.0
github.com/pelletier/go-toml v1.9.3 -> v1.9.5
github.com/prometheus/client_golang v1.11.0 -> v1.14.0
github.com/prometheus/client_model v0.2.0 -> v0.3.0
github.com/prometheus/common v0.30.0 -> v0.37.0
github.com/prometheus/procfs v0.7.3 -> v0.8.0
github.com/russross/blackfriday/v2 v2.0.1 -> v2.1.0
github.com/sirupsen/logrus v1.8.1 -> v1.9.0
github.com/stretchr/testify v1.7.0 -> v1.8.2
github.com/syndtr/gocapability 42c35b4 new
github.com/tchap/go-patricia/v2 v2.3.1 new
github.com/urfave/cli v1.22.1 -> v1.22.12
github.com/vishvananda/netlink f5de759 -> v1.2.1-beta.2
go.etcd.io/bbolt v1.3.6 -> v1.3.7
go.opencensus.io v0.23.0 -> v0.24.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.28.0 -> v0.40.0
go.opentelemetry.io/otel v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/metric v0.37.0 new
go.opentelemetry.io/otel/sdk v1.3.0 -> v1.14.0
go.opentelemetry.io/otel/trace v1.3.0 -> v1.14.0
go.opentelemetry.io/proto/otlp v0.11.0 -> v0.19.0
golang.org/x/crypto 32db794 -> v0.1.0
golang.org/x/mod v0.7.0 new
golang.org/x/net fe4d628 -> v0.7.0
golang.org/x/oauth2 2bc19b1 -> v0.4.0
golang.org/x/sync 036812b -> v0.1.0
golang.org/x/sys 1d35b9e -> v0.6.0
golang.org/x/term 6886f2d -> v0.5.0
golang.org/x/text v0.3.7 -> v0.7.0
golang.org/x/time 1f47c86 -> 90d013b
golang.org/x/tools v0.5.0 new
google.golang.org/genproto e50cd97 -> 7f2fa6f
google.golang.org/grpc v1.43.0 -> v1.53.0
google.golang.org/protobuf v1.27.1 -> v1.28.1
gopkg.in/yaml.v3 496545a -> v3.0.1
k8s.io/api v0.22.5 -> v0.26.2
k8s.io/apimachinery v0.22.5 -> v0.26.2
k8s.io/apiserver v0.22.5 -> v0.26.2
k8s.io/client-go v0.22.5 -> v0.26.2
k8s.io/component-base v0.22.5 -> v0.26.2
k8s.io/cri-api v0.23.1 -> v0.26.2
k8s.io/klog/v2 v2.30.0 -> v2.90.1
k8s.io/utils cb0fa31 -> a5ecb01
sigs.k8s.io/json f223a00 new
sigs.k8s.io/structured-merge-diff/v4 v4.1.2 -> v4.2.3
sigs.k8s.io/yaml v1.2.0 -> v1.3.0

Previous release can be found at v1.6.0

Which file should I download?

containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.
cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz: (Deprecated)
cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz: (Deprecated)

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

`v1.6.31`: containerd 1.6.31

Compare Source

Welcome to the v1.6.31 release of containerd!

The thirty-first patch release for containerd 1.6 contains a few fixes, one for
a regression that was introduced in v1.6.30 in the way process exits were handled.

Highlights

Adds mediatype to OCI index record on export (#9991)

Runtime

Fix runc shim to only defer init process exits (#10038)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Phil Estes
Akihiro Suda
Austin Vazquez
Laura Brehm
Maksym Pavlenko
Sebastiaan van Stijn
Talon

Changes

14 commits

Prepare for v1.6.31 release (#10040)
- 7f7012bad Prepare for v1.6.31 release
Fix runc shim to only defer init process exits (#10038)
- 5e53da4a1 runc-shim: only defer init process exits
Fix compile from version control system (source) use case (#10011)
- 7592f87f0 Fix compile from version control system (source) use case
Adds mediatype to OCI index record on export (#9991)
- 8d415fd0e adds mediatype to oci index record
vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9974)
- 2dbb59b5a vendor: github.com/golang/protobuf v1.5.4
- 069bb78c9 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
- 68d395cad build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0
Backport test release on PR (#9955)
- b3713136d CI: test release.yml on every PR

Dependency Changes

github.com/golang/protobuf v1.5.3 -> v1.5.4
google.golang.org/protobuf v1.31.0 -> v1.33.0

Previous release can be found at v1.6.30

`v1.6.30`: containerd 1.6.30

Compare Source

Welcome to the v1.6.30 release of containerd!

The thirtieth patch release for containerd 1.6 contains various fixes and updates
as well as a build fix which prevented the v1.6.29 tag from being released.

Highlights

Update builds to go 1.21.8 (#9945)
Fix config import relative path glob (#9835)
Move high volume event logs to Trace level (#9824)
Move certain debug logs to trace logs (#9762)

Container Runtime Interface (CRI)

Add timeout to drain exec io (#9768)
Propagate deprecation list to runtime status (#9819)
Fix image pinning when image is not pulled through cri (#9785)

Runtime

Update runc-shim to process exec exits before init (#9927)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Derek McGowan
Wei Fu
Maksym Pavlenko
Phil Estes
Kirtana Ashok
Mike Brown
Akhil Mohan
Angelos Kolaitis
Austin Vazquez
Henry Wang
Laura Brehm
Nashwan Azhari
Sebastiaan van Stijn
Tony Fang

Changes

59 commits

Prepare v1.6.30 (#9952)
- 8268fc6e9 Prepare release notes for v1.6.30
- 614ca2e12 Revert go version environment removal
Prepare release notes for v1.6.29 (#9950)
- 9ef6d9d03 Add release notes for v1.6.29.toml
use a composite action to install Go (#9949)
- cfbbb510c Use the Go toolchain in CI matrix to build binaries
- f015dbc5a use composite action in ci workflow
Update builds to go 1.21.8 (#9945)
- ccf3eb6a2 update to go 1.21.8, 1.22.1
Backport easy go install and update go (#9890)
- f6475ea59 Drop go 1.20 and build against 1.22
- 7c45ad092 Extract a composite action to install Go
- 4f7305414 update to go1.21.6, go1.20.13
- da5a36c37 Use testify
- afe6efee3 Revert container_stats_test.go change which caused Windows CRI integration test failure
- 370ef115f container_stats_test.go: avoid checking snapshot size
- 935720b8c Move inline PS scripts into files
- 74bae5af8 Uninstall mingw before attempting upgrade
- 9b9500bb0 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
- 4814f9e48 seccomp, apparmor: add go:noinline
Disable OOM set score unpriv test temporarily (#9943)
- c7c8ce6bc Disable OOM set score unpriv test temporarily
Update runc-shim to process exec exits before init (#9927)
- 65915f0a2 runc-shim: process exec exits before init
Backport GitHub actions package updates (#9877)
- e552c8898 build(deps): bump golangci/golangci-lint-action from 3 to 4
- 888ae152c build(deps): bump actions/cache from 3 to 4
- dd913a0de build(deps): bump actions/upload-artifact from 3 to 4
- a250c101a build(deps): bump actions/download-artifact from 3 to 4
- 7c8fd2255 build(deps): bump github/codeql-action from 2 to 3
- f325e559e build(deps): bump docker/setup-buildx-action from 2 to 3
- 1bae160de build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
- 3c81dc13b build(deps): bump actions/upload-artifact from 1 to 3
- 9b3b80eea build(deps): bump actions/setup-go from 3 to 5
- 6b74818d8 build(deps): bump actions/checkout from 3 to 4
Fix config import relative path glob (#9835)
- 0f2068a70 Fix config import relative path glob
ci: update crun version to 1.14.3 (#9851)
- 89d00db95 ci: update crun version to 1.14.3
Add timeout to drain exec io (#9768)
- aac488730 *: fix code style issue
- 2a38c7e2e cri: add config ut for invalid drain io timeout value
- ce213431f integration: add testcase to drain exec IO in time
- b5d52efca cri: disable drain-exec-IO if it is empty timeout
- 85bed5863 *: update drainExecSyncIO docs and validate the timeout
- 0438e477c *: add DrainExecSyncIOTimeout config and disable as by default
- fb262317c *: fix typo and skip exec-io-drain-testcase in win
- f50c9922b pkg/cri/server: add timeout to drain exec io
Move high volume event logs to Trace level (#9824)
- 99fa35e70 Move high volume event logs to Trace level
Propagate deprecation list to runtime status (#9819)
- 3785deac4 cri: propagate deprecation list to runtime status
ctr: print deprecation warnings on every invocation (#9821)
- b7a0b1b8e ctr: print deprecation warnings on every invocation
Fix image pinning when image is not pulled through cri (#9785)
- 2d43994fb bug fix: make sure cri image is pinned when it is pulled outside cri
Move certain debug logs to trace logs (#9762)
- 195ef7691 Move certain debug logs to trace logs

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.28

`v1.6.29`

Compare Source

`v1.6.28`: containerd 1.6.28

Compare Source

Welcome to the v1.6.28 release of containerd!

The twenty-eighth patch release for containerd 1.6 updates the runc binary
in the release builds to address CVE-2024-21626

Notable Updates

Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
Update seccomp profile for new syscalls added since Linux 5.16 (#9694)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Andrey Epifanov
Derek McGowan
Akihiro Suda
Maksym Pavlenko
Phil Estes
Shengjing Zhu
Wei Fu

Changes

13 commits

Prepare v1.6.28 and update runc to v1.1.12 (#9723)
570c7c637 Prepare release notes for v1.6.28
b20b9f86b Update runc binary to v1.1.12
[release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. (#9707)
- 19500722a [release/1.6] vendor: golang.org/x/crypto v0.18.0
- 919928f6b [release/1.6] vendor: golang.org/x/term v0.16.0
- 7d6a4d23b [release/1.6] vendor: golang.org/x/sys v0.16.0
- 16ac018ae [release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0
[release/1.6] seccomp: kernel 6.7 (#9694)
- f44628305 seccomp: kernel 6.7
[release/1.6] carry #9557 - enable ARM CI (#9636)
- 65e1656f2 cri: fix integration test on cgroupsv2 system
- 9cf1e1a39 *: enable ARM64 runner

Dependency Changes

github.com/go-logr/logr v1.2.2 -> v1.3.0
github.com/google/go-cmp v0.5.9 -> v0.6.0
github.com/google/uuid v1.3.0 -> v1.3.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.28.0 -> v0.46.0
go.opentelemetry.io/otel v1.3.0 -> v1.21.0
go.opentelemetry.io/otel/metric v1.21.0 new
go.opentelemetry.io/otel/sdk v1.3.0 -> v1.21.0
go.opentelemetry.io/otel/trace v1.3.0 -> v1.21.0
golang.org/x/crypto v0.14.0 -> v0.18.0
golang.org/x/net v0.17.0 -> v0.18.0
golang.org/x/oauth2 v0.10.0 -> v0.11.0
golang.org/x/sys v0.13.0 -> v0.16.0
golang.org/x/term v0.13.0 -> v0.16.0
golang.org/x/text v0.13.0 -> v0.14.0
google.golang.org/grpc v1.58.3 -> v1.59.0

Previous release can be found at v1.6.27

`v1.6.27`: containerd 1.6.27

Compare Source

Welcome to the v1.6.27 release of containerd!

The twenty-seventh patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

Improve /etc/group handling when appending groups (#9543)
Update runc binary to v1.1.11 (#9597)
Remove runc import (#9606)
Update shim pidfile permissions to 0644 (#9613)
Update Go version to 1.20.13 (#9625)

Deprecation Warnings

Emit deprecation warning for CRIU config usage (#9448)
Emit deprecation warning for some CRI configs (#9447)
Emit deprecation warning for containerd.io/restart.logpath label usage (#9572)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Akihiro Suda
Derek McGowan
Sebastiaan van Stijn
Djordje Lukic
Jaroslav Jindrak
Kay Yan
Maksym Pavlenko
Phil Estes
Wei Fu
ruiwen-zhao

Changes

26 commits

[release/1.6] Prepare release notes for v1.6.27 (#9631)
- d0edecf28 Prepare release notes for v1.6.27
[release/1.6] update to go1.20.13, test go1.21.6 (#9625)
- 32a515211 update to go1.20.13, test go1.21.6
[release/1.6 backport] shim: Create pid-file with 0644 permissions (#9613)
- 37de14d95 shim: Create pid-file with 0644 permissions
[release/1.6 backport] remove github.com/opencontainers/runc dependency (#9606)
- 3938d63de remove github.com/opencontainers/runc dependency
[release/1.6 backport] update runc binary to v1.1.11 (#9597)
- 9a9b11f73 update runc binary to v1.1.11
[release/1.6 backport] go.mod: dario.cat/mergo v1.0.0 (#9570)
- 6cd8e17ab go.mod: dario.cat/mergo v1.0.0
- 4f8ff5154 go.mod: github.com/imdario/mergo v0.3.13
[release/1.6] restart: containerd.io/restart.logpath warning (#9572)
- d24d263a4 restart: containerd.io/restart.logpath warning
[release/1.6 backport] WithAppendAdditionalGroups: better /etc/group handling (#9543)
- 9489c0eb0 WithAppendAdditionalGroups: better /etc/group handling
[release/1.6] cri: add deprecation warnings for deprecated CRI configs (#9547)
- 713065793 deprecation: fix missing spaces in warnings
- de0cc92a7 cri: add deprecation warning for runtime_root
- 833b94149 cri: add deprecation warning for rutnime_engine
- 47de3d63d cri: add deprecation warning for default_runtime
- d421b8fda cri: add warning for untrusted_workload_runtime
- 802cb64b0 cri: add warning for old form of systemd_cgroup
[release/1.6] Add warning for CRIU config usage (#9546)
- f8447466c Add warning for CRIU config usage

Dependency Changes

dario.cat/mergo v1.0.0 new
github.com/moby/sys/user v0.1.0 new

Previous release can be found at v1.6.26

`v1.6.26`: containerd 1.6.26

Compare Source

Welcome to the v1.6.26 release of containerd!

The twenty-sixth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

Fix windows default path overwrite issue (#9441)
Update push to inherit distribution sources from parent (#9453)
Mask /sys/devices/virtual/powercap path in runtime spec and deny in default apparmor profile (GHSA-7ww5-4wqc-m92c)

Deprecation Warnings

Emit deprecation warning for AUFS snapshotter usage (#9448)
Emit deprecation warning for v1 runtime usage (#9468)
Emit deprecation warning for CRI v1alpha1 usage (#9468)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Derek McGowan
Kohei Tokunaga
Phil Estes
Bjorn Neergaard
Sebastiaan van Stijn
Brian Goff
Charity Kathure
Kazuyoshi Kato
Milas Bowman
Wei Fu
ruiwen-zhao

Changes

30 commits

[release/1.6] Prepare release notes for v1.6.26 (#9490)
- ac5c5d3e0 Prepare release notes for v1.6.26
Github Security Advisory GHSA-7ww5-4wqc-m92c
- 02f07fe19 contrib/apparmor: deny /sys/devices/virtual/powercap
- c94577e78 oci/spec: deny /sys/devices/virtual/powercap
[release/1.6] update to go1.20.12, test go1.21.5 (#9472)
- 7cbdfc92e update to go1.20.12, test go1.21.5
- 024b1cce6 update to go1.20.11, test go1.21.4
[release/1.6] Add cri-api v1alpha2 usage warning to all api calls (#9484)
- 64e56bfde Add cri-api v1alpha2 usage warning to all api calls
[release/1.6] tasks: emit warning for v1 runtime and runc v1 runtime (#9468)
- efefd3bf3 tasks: emit warning for runc v1 runtime
- 7825689b4 tasks: emit warning for v1 runtime
[release/1.6] snapshots: emit deprecation warning for aufs (#9448)
- 7cfe7052f snapshots: emit deprecation warning for aufs
[release/1.6] cherry-pick/backport: Update golangci lint (#9455)
- a1ae572a2 Fix linter error with updated linter
- b638791d6 ci: bump up golangci-lint to v1.55.0
- 2370a2842 Fix linter issues for golangci-lint 1.54.2
- 8a65e2e31 Bump up golangci-lint to v1.54.2
- 969f8feb2 Bump up golangci-lint to v1.52.2
[release/1.6] push: inherit distribution sources from parent (#9453)
- 66959fdf5 push: inherit distribution sources from parent
- b4dcffcfb content: add InfoProvider interface
- bef4145c1 Change PushContent to require only Provider
[release/1.6] Bump google.golang.org/grpc to v1.58.3 (#9408)
- a5fc21060 vendor: google.golang.org/grpc v1.58.3
- 4fa05b3d8 Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9
[release/1.6] Windows default path overwrite fix (#9441)
- ede0ad5e1 Fix windows default path overwrite issue

Dependency Changes

cloud.google.com/go/compute/metadata v0.2.3 new
github.com/cespare/xxhash/v2 v2.1.2 -> v2.2.0
github.com/golang/protobuf v1.5.2 -> v1.5.3
github.com/klauspost/compress v1.11.13 -> v1.15.9
go.opencensus.io v0.23.0 -> v0.24.0
golang.org/x/oauth2 2bc19b1 -> v0.10.0
golang.org/x/sync v0.1.0 -> v0.3.0
google.golang.org/grpc v1.50.1 -> v1.58.3
google.golang.org/protobuf v1.28.1 -> v1.31.0

Previous release can be found at v1.6.25

`v1.6.25`: containerd 1.6.25

Compare Source

Welcome to the v1.6.25 release of containerd!

The twenty-fifth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

Check whether content did not needs to be pushed to remote registry and cross-repo mounted or already existed (#9111)
Soft deprecate log package (#9105)
Always try to establish tls connection when tls configured (#9189)
CRI: stop recommending disable_cgroup (#9169)
Allow for images with artifacts layers to pull (#9150)
Require plugins to succeed after registering readiness (#9166)
Avoid potential deadlock in create handler in containerd-shim-runc-v2 (#9210)
Add handling for missing basic auth credentials (#9236)
Add a new image label if it is docker schema 1 (#9267)
Fix ambiguous tls fallback (#9300)
Expose usage of deprecated features (#9329)
Fix shimv1 leak issue (#9345)
Go version update to 1.20.10(#9264)
Update runc to v1.1.10 (#9360)
CRI: fix using the pinned label to pin image (#9382)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Derek McGowan
Sebastiaan van Stijn
Phil Estes
Wei Fu
Kazuyoshi Kato
Akhil Mohan
Akihiro Suda
Chen Yiyang
Fabian Hoffmann
Iceber Gu
Mike Brown
Paweł Gronowski
Austin Vazquez
Fahed Dorgaa
James Sturtevant
Kern Walster
Marat Radchenko
Qiutong Song
Tony Fouchard
ruiwen-zhao

Changes

82 commits

[release/1.6] Prepare release notes for v1.6.25 (#9394)
- 723d26ab2 Prepare release notes for v1.6.25
- 1f865eba1 update mailmap
[release/1.6] cri: fix using the pinned label to pin image (#9382)
- b49815300 cri: fix update of pinned label for images
- 751b0c186 cri: fix using the pinned label to pin image
[Release/1.6] vendor: golang.org/x/net v0.17.0 (#9387)
- fb5568608 vendor: golang.org/x/net v0.17.0
- 61ad86f6f vendor: golang.org/x/text v0.13.0
- 4b431c844 vendor: golang.org/x/sys v0.13.0
[Release/1.6] CVE-2022-1996 fix for go-restful (#9385)
- 62d402275 Remove CVE-2022-1996 from containerd binary upgrading go-restful to 2.16.0
[release/1.6] Enhance container image unpack client logs (#9380)
- 3e68bf65a Enhance container image unpack client logs
[release/1.6] update github.com/containerd/nri v0.1.1 (#9107)
- 0dd65c826 [release/1.6] update github.com/containerd/nri v0.1.1
[release/1.6 backport] update runc binary to v1.1.10 (#9360)
- c73be2446 update runc binary to v1.1.10
[release/1.6] Expose usage of cri-api v1alpha2 (#9357)
- 746bcf2eb Expose usage of cri-api v1alpha2
[release/1.6] fix: shimv1 leak issue (#9345)
- 8b51a95fb fix: shimv1 leak issue
[release/1.6] update to go1.20.10, test go1.21.3 (#9264)
- 6741f819b [release/1.6] update to go1.20.10, test go1.21.3
- 49615a0e9 [release/1.6] update to go1.20.9, test go1.21.2
[release/1.6] cri: add deprecation warnings for mirrors, auths, and configs (#9355)
- b68204e53 cri: add deprecation warning for configs
- ae8c58319 cri: add deprecation warning for auths
- 455edcad2 cri: add deprecation warning for mirrors
- 878823f4d cri: add ability to emit deprecation warnings
[release/1.6] deprecation: new package for deprecations (#9329)
- 477b7d6a1 ctr: new deprecations command
- 24068b813 dynamic: record deprecation for dynamic plugins
- 218c7a1df server: add ability to record config deprecations
- dfb9e1deb pull: record deprecation warning for schema 1
- 90b42da6f introspection: add support for deprecations
- 0b6766b37 api/introspection: deprecation warnings in server
- de3cb4c18 warning: new service for deprecations
- da1b4419b deprecation: new package for deprecations
[release/1.6] integration: deflake TestIssue9103 (#9353)
- bca8a3f65 integration: deflake TestIssue9103
[release/1.6] ci: Use Vagrant on ubuntu-latest-4-cores (#9332)
- 0985f7a43 ci: Use Vagrant on ubuntu-latest-4-cores
[release/1.6] Fix ambiguous tls fallback (#9300)
- 5dd64301c Check scheme and host of request on push redirect
- 51df21d09 Avoid TLS fallback when protocol is not ambiguous
[release/1.6] Add a new image label if it is docker schema 1 (#9267)
- 8108f0d03 Add a new image label if it is docker schema 1
[release/1.6 backport] fix protobuf aarch64 (#9284)
- 5376afb3d fix protobuf aarch64
[release/1.6] remotes: add handling for missing basic auth credentials (#9236)
- e529741d3 remotes: add handling for missing basic auth credentials
- ca45b92f4 Add ErrUnexpectedStatus to resolver
- 77c0175b4 Improve ErrUnexpectedStatus default string
[release/1.6] Update x/net to 0.13 (#9130)
- 275fc594d Bump x/net to 0.13
[release/1.6] Require plugins to succeed after registering readiness (#9166)
- 5223bf39a Require plugins to succeed after registering readiness
- 8f5eba314 cri: call RegisterReadiness after NewCRIService
[release/1.6 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler (#9210)
- 7b61862e7 *: add runc-fp as runc wrapper to inject failpoint
- 5238a6470 containerd-shim-runc-v2: avoid potential deadlock in create handler
- 65e908ee1 containerd-shim-runc-v2: remove unnecessary s.getContainer()
- 1dd9acecb Uncopypaste parsing of OCI Bundle spec file
- 71c89ddf2 [release/1.6]: Vagrantfile: install failpoint binaries
[release/1.6] cri: stop recommending disable_cgroup (#9169)
- 7a0c8b6b7 cri: stop recommending disable_cgroup
[release/1.6] Allow for images with artifacts to pull (#9150)
- 8066dd81c Allow for images with artifacts to pull
[release 1.6] remotes/docker: Fix MountedFrom prefixed with target repository (#9192)
- 2fffc344a remotes/docker: Fix MountedFrom prefixed with target repository
[release/1.6] remotes: always try to establish tls connection when tls configured (#9189)
- 6b5912220 remotes: always try to establish tls connection when tls configured
[release/1.6] Build binaries with 1.21.1 (#9180)
- 37c758de1 Build binaries with 1.21.1
[release/1.6 backport] alias log package to github.com/containerd/log v0.1.0 (#9105)
- f1591cc9b alias log package to github.com/containerd/log v0.1.0
- f68d2d93b vendor: golang.org/x/sys v0.7.0
- f305fb233 vendor: github.com/stretchr/testify v1.8.4
- 4e24a30af vendor: github.com/sirupsen/logrus v1.9.3
[release/1.6] remotes/docker: Add MountedFrom and Exists push status (#9111)
- b66c818ba remotes/docker: Add MountedFrom and Exists push status

Changes from containerd/log

9 commits

Update golangci to 1.49 (#1)
- 89c9a54 Update golangci to 1.49
- cf26711 Update description in README
- f9f250c Add project details
- fb7fe3d Add github CI flow
- 7e13034 Add go module
- 16a3c76 Rename log import from logtest
- 698c398 Add README
- 87c83c4 Add license file

Changes from containerd/nri

3 commits

[release/0.1 backport] remove containerd as dependency (#58)
- 4275101 Task: fix typo in godoc
- f6acbf1 remove containerd as dependency

Dependency Changes

github.com/containerd/log v0.1.0 new
github.com/containerd/nri v0.1.0 -> v0.1.1
github.com/emicklei/go-restful v2.9.5 -> v2.16.0
github.com/sirupsen/logrus v1.9.0 -> v1.9.3
github.com/stretchr/testify v1.8.1 -> v1.8.4
golang.org/x/crypto 3147a52 -> v0.14.0
golang.org/x/net v0.8.0 -> v0.17.0
golang.org/x/sys v0.6.0 -> v0.13.0
golang.org/x/term v0.6.0 -> v0.13.0
golang.org/x/text v0.8.0 -> v0.13.0

Previous release can be found at v1.6.24

`v1.6.24`: containerd 1.6.24

Compare Source

Welcome to the v1.6.24 release of containerd!

The twenty-fourth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

CRI: fix leaked shim caused by high IO pressure (#9004)
Update to go1.20.8 (#9073)
Update runc to v1.1.9 (#8966)
Backport: add configurable mount options to overlay snapshotter (#8961)
log: cleanups and improvements to decouple more from logrus (#9002)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Sebastiaan van Stijn
Akihiro Suda
Wei Fu
Derek McGowan
Akhil Mohan
Cardy.Tang
Danny Canter
Kazuyoshi Kato
Mike Brown
Phil Estes
Samuel Karp

Changes

45 commits

[release/1.6] Prepare release notes for v1.6.24 (#9087)
- cdd59290d Prepare release notes for v1.6.24
[release/1.6 backport] log: cleanups and improvements to decouple more from logrus (#9002)
- 33c2d88e7 Revert "log: define G() as a function instead of a variable"
- 0a7f2975e log: swap logrus functions with their equivalent on default logger
- 9d175a19b log: add package documentation and summary of package's purpose
- 96fb65529 log: make Fields type a generic map[string]any
- bace17e2e log: add log.Entry type
- dd127885f log: define OutputFormat type
- 5b4cf2329 log: define G() as a function instead of a variable
- ee1b4a1e2 log: add all log-levels that are accepted
- d563a411f log: group "enum" consts and touch-up docs
- 6e8f4555b log: WithLogger: remove redundant intermediate var
- c19325559 log: SetFormat: include returns in switch
- c3c22f8cb log: remove gotest.tools dependency
[release/1.6] update to go1.20.8 (#9073)
- a2c294800 [release/1.6] update to go1.20.8
[release/1.6 backport] make repositories of install dependencies configurable (#9024)
- 0da8dcaa7 make repositories of install dependencies configurable
[release/1.6 backport] update Golang to go1.20.7, minimum version go1.19 (#9020)
- 8e6a9de5b update to go1.20.7, go1.19.12
- 8b2eb371f Update Go to 1.20.6,1.19.11
- cff669c7a update go to go1.20.5, go1.19.10
- f34a22de9 update go to go1.20.4, go1.19.9
- e8e73065e update go to go1.20.3, go1.19.8
- 9b3f950d6 Go 1.20.2
- 17d03ac68 Go 1.20.1
- 861f65447 go.mod: go 1.19
- 81fa93784 Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20)
- 70dc11a6c lint: remove //nolint:dupword that are no longer needed
- fec784a06 lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)"
- 6648df1ad lint: silence "type HostFileConfig is unused (unused)"
- e6b268bc7 golangci-lint v1.51.1
- c552ccf67 go.mod: golang.org/x/sync v0.1.0
[releases/1.6] *: fix leaked shim caused by high IO pressure (#9004)
- d00af5c3e integration: issue7496 case should work for runc.v2 only
- 583696e4e Vagrantfile: add strace tool
- ab21d60d2 pkg/cri/server: add criService as argument when handle exit event
- a229883cb pkg/cri/server: fix leaked shim issue
- d8f824200 integration: add case to reproduce #7496
[release/1.6] Cherry-pick: [overlay] add configurable mount options to overlay snapshotter (#8961)
- 8cd40e1d0 Add configurable mount options to overlay
- 453fa397a feat: make overlay sync removal configurable
[release/1.6 backport] update runc binary to v1.1.9 (#8966)
- 4cb7764df update runc binary to v1.1.9

Dependency Changes

golang.org/x/sync 036812b -> v0.1.0

Previous release can be found at v1.6.23

`v1.6.23`: containerd 1.6.23

Compare Source

Welcome to the v1.6.23 release of containerd!

The twenty-third patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

**Add stable ABI support in windows platform matcher + update hcsshim tag (#8854)
**cri: Don't use rel path for image volumes (#8927)
**Upgrade GitHub actions packages in release workflow (#8908)
**update to go1.19.12 (#8905)
**backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed (#8888)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Kirtana Ashok
Maksym Pavlenko
Austin Vazquez
Ben Foster
Derek McGowan
Mike Brown
Phil Estes
Rodrigo Campos
Sebastiaan van Stijn
Wei Fu

Changes

13 commits

[release/1.6] Add release notes for v1.6.23 (#8939)
- e297a668f Add release notes for v1.6.23
[release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag (#8854)
- f51bf1960 Add support for stable ABI windows versions
- 43a02c0b2 Update hcsshim tag to v0.9.10
[release/1.6] cri: Don't use rel path for image volumes (#8927)
cc5b0a21b cri: Don't use rel path for image volumes
[release/1.6 backport] Upgrade GitHub actions packages in release workflow (#8908)
- 4238cff1c Upgrade GitHub actions packages in release workflow
[release/1.6] update to go1.19.12 (#8905)
- 00d1092b7 update to go1.19.12
[release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed (#8888)
- 47d73b2de Fix ro mount option being passed

Dependency Changes

github.com/Microsoft/hcsshim v0.9.8 -> v0.9.10

Previous release can be found at v1.6.22

`v1.6.22`: containerd 1.6.22

Compare Source

Welcome to the v1.6.22 release of containerd!

The twenty-second patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

RunC: Update runc binary to v1.1.8 (#8842)
CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8823)
CRI: Write generated CNI config atomically (#8826)
Fix concurrent writes for UpdateContainerStats (#8819)
Make checkContainerTimestamps less strict on Windows (#8827)
Port-Forward: Correctly handle known errors (#8805)
Resolve docker.NewResolver race condition (#8800)
SecComp: Always allow name_to_handle_at (#8754)
Adding support to run hcsshim from local clone (#8713)
Pinned image support (#8720)
Runtime/V2/RunC: Handle early exits w/o big locks (#8695)
CRITool: Move up to CRI-TOOLS v1.27.0 (#7997)
Fix cpu architecture detection issue on emulated ARM platform (#8533)
Task: Don't close() io before cancel() (#8659)
Fix panic when remote differ returns empty result (#8640)
Plugins: Notify readiness when registered plugins are ready (#8583)
Unwrap io errors in server connection receive error handling (ttrpc#143)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Phil Estes
Sebastiaan van Stijn
Derek McGowan
Wei Fu
Kazuyoshi Kato
Austin Vazquez
Samuel Karp
dependabot[bot]
Jin Dong
Maksym Pavlenko
Mike Brown
Shingo Omura
Akhil Mohan
Bjorn Neergaard
Laura Brehm
Tony Fang
Aditi Sharma
Andrey Epifanov
Benjamin Wang
Brian Goff
Cory Snider
Daniel Canter
Daniel Lenar
Henry Wang
Luca Comellini
Madhav Jivrajani
Mahamed Ali
Mohit Sharma
Oliver Radwell
Priyanka Saggu
Qasim Sarfraz
Takumasa Sakao
wangxiang
zounengren

Changes

95 commits

[release/1.6] Prepare release notes for v1.6.22 (#8863)
- 0770a4601 [release/1.6] Add release notes for v1.6.22
[release/1.6] migrate to community owned bucket for node e2e tests (#8876)
- 512a672af migrate to community owned bucket
[release/1.6] cri: memory.memsw.limit_in_bytes: no such file or directory (#8870)
- b585ff155 cri: memory.memsw.limit_in_bytes: no such file or directory
[release/1.6] Update go-restful to v3.10.1 (#8412)
- a322077bf go.mod: github.com/emicklei/go-restful/v3 v3.10.1
[release/1.6 backport] update runc binary to v1.1.8 (#8842)
- b3ac068eb update runc binary to v1.1.8
[release/1.6 backport] ci: remove libseccomp-dev installation for nightly (#8773)
- 6e2bcb6dd ci: remove libseccomp-dev installation for nightly
[release/1.6 backport] [CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty (#8823)
- cd06f23af capture desc variable in range variable just in case that it run in parallel mode
- 30f5c6a1f Use t.TempDir instead of os.MkdirTemp
- 59d8363ef fix userstr for dditionalGids on Linux
[release/1.6 backport] cri: write generated CNI config atomically (#8826)
- d75bf78c2 ctr: update WritePidFile to use atomicfile
- 5f70b23c1 shim: WritePidFile & WriteAddress use atomicfile
- 505d444b0 cri: write generated CNI config atomically on Unix
- b2d2d3829 atomicfile: new package for atomic file writes
[release/1.6 backport] Fix concurrent writes for UpdateContainerStats (#8819)
- 9f650143f Fix concurrent writes for UpdateContainerStats
[release/1.6 backport] Make checkContainerTimestamps less strict on Windows (#8827)
- 568ce91ca Make checkContainerTimestamps less strict on Windows
[release/1.6 backport] dependency: bump go.etcd.io/bbolt to v1.3.7 (#8817)
- d2f47192a dependency: bump go.etcd.io/bbolt to v1.3.7
- fb56dc245 [release/1.6] vendor: github.com/stretchr/testify v1.8.1
[release/1.6 backport] Move logrus setup code to log package (#8832)
- 7fbd5dc89 Move logrus setup code to log package
[release/1.6 backport] release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles (#8820)
- 59a143670 release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-* bundles
[release/1.6 backport] Use version 2 configuration format in docs (#8821)
- 5b51b79e2 [release/1.6] fix remaining "v1 config" plugin IDs
- b7cf26d8d docs: Fix sample config.toml syntax
- fcdaf0966 docs: migrate config v1 to v2
- 728d5c5f0 Use version 2 config and mention containerd config command
[release/1.6] update go to go1.19.11 (#8816)
- 81aa14718 [release/1.6] update go to go1.19.11
[release/1.6] update go to go1.19.10 (#8715)
- 17cd86629 [release/1.6] update go to go1.19.10
[release/1.6 backport] bugfix(port-forward): Correctly handle known errors (#8805)
- fdb65f214 bugfix(port-forward): Correctly handle known errors
[release/1.6] Resolve docker.NewResolver race condition (#8800)
- b5784af66 Change http.Header copy to builtin Clone
- 31c466f82 Resolve docker.NewResolver race condition
[release/1.6 backport] vendor: github.com/containerd/zfs v1.1.0 (#8781)
- be6406ca6 vendor: github.com/containerd/zfs v1.1.0
- 9f1260074 [release/1.6] vendor gotest.tools/v3 v3.5.0
- 526e9e0ce Bump grpc to v1.50.1
- 0e7d2d121 go.mod: github.com/sirupsen/logrus v1.9.0
- 5b153c621 go.mod: github.com/moby/sys/mountinfo v0.6.2
- 9dee60960 go.mod: github.com/moby/sys/mountinfo v0.6.0
[release/1.6 backport] seccomp: always allow name_to_handle_at (#8754)
- 07ea7b9e7 seccomp: always allow name_to_handle_at
[release/1.6 backport] Update ginkgo to match cri-tools' version (#8759)
- 1dae51fed Update ginkgo to match cri-tools' version
[release/1.6 backport] integration/client: add timeout to TestShimOOMScore (#8749)
- bd76ab978 integration/client: add timeout to TestShimOOMScore
[release/1.6 backport] Adding support to run hcsshim from local clone (#8713)
- 8e14eccb2 Adding support to run hcsshim from local clone
[1.6] Add Fields type alias to log package (#8739)
- 9f2cdd589 Add Fields type alias to log package
[release/1.6] Pinned image support (#8720)
- f4713aad0 Pinned image support
[release/1.6 backport] runtime/v2/runc: handle early exits w/o big locks (#8695)
- dbeec47b4 runtime/v2/runc: handle early exits w/o big locks
[release/1.6 backport] move up to CRI-TOOLS v1.27.0 (#7997)
- a8e01e40a move to CRI-TOOLS v1.27.0
- 755f80698 move up to CRI-TOOLS v1.26.0
- b29cc035f bump critools into ca1571e
- 9138999f5 Upgrade critools from 1.24.1 to 1.25.0
[release/1.6] cherry-pick: No more nondistributable layers in MS registry (#8691)
- 712ff8eb3 No more nondistributable layers in MS registry
[release/1.6] Fix cpu architecture detection issue on emulated ARM platform (#8533)
- 2b16e4bfa Add unit test to function GetCPUVariantFromArch
- 106e36ec3 Use uname machine field to get CPU variant if fails at /proc/cpuinfo
[release/1.6] Update lint timeout (#8679)
- 287fdfea6 Update linter timeout to match main branch
[release/1.6 backport] task: don't close() io before cancel() (#8659)
- b27f7daa5 task: don't close() io before cancel()
[release/1.6] update test box to fedora 37 (#8660)
- 8b4c69248 update test box to fedora 37
[release/1.6] Revert "Downgrade MinGW to version 10.2.0" (#8668)
- 81d6085af Revert "Downgrade MinGW to version 10.2.0"
[release/1.6 backport] Fix panic when remote differ returns empty result (#8640)
- f98122378 Fix panic when remote differ returns empty result
[1.6] Bump x/net to 0.8 (#8642)
- aa53f272d Bump x/net to 0.8
[release/1.6 backport] remotes/docker: ResolverOptions: fix deprecation comments (#8620)
- 56ff20839 remotes/docker: ResolverOptions: fix deprecation comments
[release/1.6] notify readiness when registered plugins are ready (#8583)
- bccaf68b7 notify readiness when registered plugins are ready
[release/1.6] Update ttrpc to 1.1.2 (#8528)
- 1cdbbe76b Update ttrpc to 1.1.2

Changes from containerd/ttrpc

2 commits

[release/1.1] Unwrap io errors in server connection receive error handling (#143)
- d5f7eed Unwrap io errors in server connection receive error handling

Changes from containerd/zfs

49 commits

gofumpt and update status badges (#75)
- 5e3457b TestZFSUsage: use t.TempDir()
- 6e9c675 README: update badges
- ff17a79 gofmt code
go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 (#73)
- d3485b9 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1
gha: fix golangci-lint, and upgrade to v1.52.2 (#74)
- 23c831a remove pre-go1.17 build-tags, and fix missing build-tags in plugin
- e5acd95 gha: fix golangci-lint, upgrade to v1.52.2
Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#72)
- 00b96c2 Bump github.com/containerd/containerd from 1.6.12 to 1.6.18
Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 (#69)
- a099def Bump github.com/containerd/containerd from 1.6.9 to 1.6.12
Add CodeQL analysis workflow (#67)
- fee1db7 Add CodeQL analysis workflow
Update GitHub actions CI workflow (#66)
- b8b7ab2 Update GitHub actions CI workflow
Upgrade compiler to Go 1.19 and update dependencies (#68)
- 3e729b3 Update dependencies
- 3c003f8 Upgrade compiler to Go 1.19
Remove references to io/ioutil package (#65)
- d700762 Remove references to io/ioutil package
Update go.mod and move to supported Go version (#62)
- f52906e Update Go version to supported version
- 79ca2cb Update containerd depedency to latest
go.mod: github.com/mistifyio/go-zfs v3.0.0 (#59)
- 2e3db29 go.mod: github.com/mistifyio/go-zfs v3.0.0
go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 (#58)
- d904e63 go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309
Update vendoring to containerd 1.6.x (#57)
- e021180 Update vendoring to containerd 1.6.x
Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 (#55)
- fc0c9a9 Bump github.com/containerd/containerd from 1.5.8 to 1.5.9
Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 (#54)
- 5d2f28c Bump github.com/containerd/containerd from 1.5.5 to 1.5.8
follow-up-#52: fix the order of cause in fmt.Errorf (#53)
- b3f193d follow-up-#52: fix the order of cause in fmt.Errorf
replace pkg/errors (#52)
- d5b0a2f replace pkg/errors
Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 (#51)
- fd6afa5 Bump github.com/containerd/containerd from 1.5.2 to 1.5.4
Bump containerd to 1.5.2 (#50)
- aef875e bump containerd to 1.5.2
Rename branches from master to main (#49)
- 35c6af7 Rename branches from master to main
sync up with containerd 1.5 GA (#47)
- 3d5efef vendor sync up with containerd 1.5 ga
README.md: fix CI badge (#46)
- 0977d81 README.md: fix CI badge

Dependency Changes

github.com/containerd/ttrpc v1.1.1 -> v1.1.2
github.com/containerd/zfs v1.0.0 -> v1.1.0
github.com/emicklei/go-restful/v3 v3.7.3 -> v3.10.1
github.com/google/go-cmp v0.5.6 -> v0.5.9
github.com/google/uuid v1.2.0 -> v1.3.0
github.com/mistifyio/go-zfs/v3 v3.0.1 new
github.com/moby/sys/mountinfo v0.5.0 -> v0.6.2
github.com/sirupsen/logrus v1.8.1 -> v1.9.0
github.com/stretchr/testify v1.7.0 -> v1.8.1
go.etcd.io/bbolt v1.3.6 -> v1.3.7
golang.org/x/net a158d28 -> v0.8.0
golang.org/x/sys 8c9f86f -> v0.6.0
golang.org/x/term 03fcf44 -> v0.6.0
golang.org/x/text v0.3.7 -> v0.8.0
google.golang.org/grpc v1.47.0 -> v1.50.1
google.golang.org/protobuf v1.28.0 -> v1.28.1
gotest.tools/v3 v3.0.3 -> v3.5.0

Previous release can be found at v1.6.21

`v1.6.21`: containerd 1.6.21

Compare Source

Welcome to the v1.6.21 release of containerd!

The twenty-first patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

**update runc binary to v1.1.7 (#8450)
**Remove entry for container from container store on error (#8456)
**oci: partially restore comment on read-only mounts for uid/gid uses (#8403)
**windows: Add ArgsEscaped support for CRI (#8247)
**oci: Use WithReadonlyTempMount when adding users/groups (#8357)
**archive: consistently respect value of WithSkipDockerManifest (#8345)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Sebastiaan van Stijn
Iceber Gu
Kirtana Ashok
Justin Chadwell
Phil Estes
Akihiro Suda
Djordje Lukic
Kazuyoshi Kato
Mike Brown
Wei Fu
kiashok

Changes

26 commits

[release/1.6] Prepare release notes for v1.6.21 (#8463)
- 9226c362a Add release notes for v1.6.21
[release/1.6] update go to go1.19.9 (#8469)
- 39566aade [release/1.6] update go to go1.19.9
[release/1.6] fix the task setting the runtime path (#8454)
- e8840f688 skip TestContainerStartWithAbsRuntimePath if the runtime is v1
- 75ab094de integration: add container start test using abs runtime path
- f49254f0b WithRuntimePath uses the TaskInfo.RuntimePath field
[release/1.6 backport] update runc binary to v1.1.7 (#8450)
- ccb51ff26 update runc binary to v1.1.7
[release/1.6] Remove entry for container from container store on error (#8456)
- 95d31551d Remove entry for container from container store on error
[release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses (#8403)
- c33eb574d oci: partially restore comment on read-only mounts for uid/gid uses
[release/1.6 ] Add ArgsEscaped support for CRI (#8247)
- bc2e01303 Fix argsEscaped tests
- 8b81d5acc Add ArgsEscaped support for CRI
[release/1.6 backport] update runc binary to v1.1.6 (#8385)
- 57d953482 update runc binary to v1.1.6
[release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups (#8357)
- fb5e663d0 oci: Use WithReadonlyTempMount when adding users/groups
[release/1.6] update go to go1.19.8 (#8353)
- 26efb8fd5 [release/1.6] update go to go1.19.8
[release/1.6] archive: consistently respect value of WithSkipDockerManifest (#8345)
- ec13b497e export: add test for WithSkipDockerManifest
- d1f3771c4 archive: consistently respect value of WithSkipDockerManifest

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.20

`v1.6.20`: containerd 1.6.20

Compare Source

Welcome to the v1.6.20 release of containerd!

The twentieth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

Disable looking up usernames and groupnames on host (#8230)
Add support for Windows ArgsEscaped images (#8273)
Update hcsshim to v0.9.8 (#8274)
Fix debug flag in shim (#8288)
Add WithReadonlyTempMount to support readonly temporary mounts (#8299)
Update ttrpc to fix file descriptor leak (#8308)
Update runc binary to v1.1.5 (#8324)
Update image config to support ArgsEscaped (#8306)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Sebastiaan van Stijn
Derek McGowan
Maksym Pavlenko
Akihiro Suda
Phil Estes
Eng Zer Jun
Justin Terry
Kazuyoshi Kato
Wei Fu
Abirdcfly
Gabriel Adrian Samfira
Henry Wang
Kang.Zhang
Kirtana Ashok
Laura Brehm
Luca Comellini
Paul "TBBle" Hampson
liyuxuan.darfux
ningmingxiao
wanglei

Changes

48 commits

[release/1.6] Prepare release notes for v1.6.20 (#8310)
- a039a2b9c Prepare release notes for v1.6.20
[release/1.6]Updates oci image config to support upstream ArgsEscaped (#8306)
- 5dd94a7e6 Updates oci image config to support upstream ArgsEscaped
[release/1.6] update runc binary to v1.1.5 (#8324)
- 59fa6b191 update runc binary to v1.1.5
- 0c0aad93e go.mod: github.com/opencontainers/runc v1.1.5
[release/1.6] Update ttrpc to v1.1.1 (#8308)
- 50a6be0b4 Update ttrpc to v1.1.1
[release/1.6 backport] Add WithReadonlyTempMount to create readonly temporary mounts (#8299)
- 8cead6594 Add WithReadonlyTempMount to create readonly temporary mounts
[release/1.6] Adds support for Windows ArgsEscaped images (#8273)
- f0dc0297d Adds support for Windows ArgsEscaped images
[release/1.6]go.mod: Bump hcsshim tag to v0.9.8 (#8274)
- 5981a24e2 Update hcsshim tag to v0.9.8
[1.6] shim: fix debug flag not working (#8288)
- 28f1e32e3 shim: fix debug flag not working
[release/1.6] cherry-pick: Update go-restful to v3 (#8271)
- 5a8ea75df Update go-restful to v3
- 59bdc1d5a go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3
[release/1.6] Go 1.19.7 (#8238)
- 86e0bd9e3 Go 1.19.7
[release/1.6 backport] archive: disable looking up usernames and groupnames on the host (#8230)
- 063ad2f19 archive: disable looking up usernames and groupnames on the host
[release/1.6 backport] assorted linting, and golang update-related changes (#8229)
- 9cbea6fe7 Enable dupword linter
- c73f1abff Bump golangci-lint to v1.50.1
- f198f7724 update golangci-lint to v1.49.0
- e6179af1e remove unneeded nolint-comments (nolintlint), disable deprecated linters
- 77160e6b5 [release/1.6] adjust some nolint comments
- 95655f4ce clean-up "nolint" comments, remove unused ones
- 9f0617ecc pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint
- e66397d83 golangci-lint: sort linters in config file
- 682a567e9 linting: address gosec G112/G114
- 627f563e6 chore: remove duplicate word in comments
- efb88a8bb pkg/cri/streaming: increase ReadHeaderTimeout
- 45f055df6 Update protobuf definitions
- 584707524 Run gofmt 1.19
- f33e38572 Switch to Go 1.19
- fc10cd23a remove duplicate
- 7cbb9e746 Update linters to use t.Setenv
- 4347a3265 Use t.Setenv instead of os.Setenv
- 10357eab5 Address some timeout issues in the Windows CI
- 977ce8ef5 Enable gosec linter for golangci-lint
- c23945c5f test: remove redundant mountPoint
- 588ed91d3 test: use T.TempDir to create temporary test directory
- c2ed63c86 Remove hardcoded /tmp in tempfile paths
- 7e382c516 fix Implicit memory aliasing in for loop

Changes from containerd/ttrpc

2 commits

[release/1.1] server: Fix connection leak when receiving ECONNRESET (#136)
- 8977f59 server: Fix connection leak when receiving ECONNRESET

Dependency Changes

github.com/Microsoft/hcsshim v0.9.7 -> v0.9.8
github.com/containerd/ttrpc v1.1.0 -> v1.1.1
github.com/emicklei/go-restful/v3 v3.7.3 new
github.com/opencontainers/image-spec c5a74bc -> 3a7f492
github.com/opencontainers/runc v1.1.2 -> v1.1.5

Previous release can be found at v1.6.19

`v1.6.19`: containerd 1.6.19

Compare Source

Welcome to the v1.6.19 release of containerd!

The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms

Notable Updates

Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers (#8153)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Kirtana Ashok
Derek McGowan
Wei Fu

Changes

4 commits

[release/1.6] Prepare release notes for v1.6.19 (#8157)
- 23e94075a Add release notes for v1.6.19
[release/1.6] go.mod: Bump hcsshim to v0.9.7 (#8153)
- f488a6241 Update hcsshim tag to v0.9.7

Dependency Changes

github.com/Microsoft/hcsshim v0.9.6 -> v0.9.7

Previous release can be found at v1.6.18

`v1.6.18`: containerd 1.6.18

Compare Source

Welcome to the v1.6.18 release of containerd!

The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173
along with a security update for Go.

Notable Updates

Fix OCI image importer memory exhaustion (GHSA-259w-8hf6-59c2)
Fix supplementary groups not being set up properly (GHSA-hmfx-3pcx-653p)
Revert removal of /sbin/apparmor_parser check (#8087)
Update Go to 1.19.6 (#8111)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Derek McGowan
Ye Sijun
Samuel Karp
Bjorn Neergaard
Wei Fu
Brian Goff
Iceber Gu
Kazuyoshi Kato
Phil Estes
Swagat Bora

Changes

24 commits

[release/1.6] Prepare release notes for v1.6.18 (#8118)
- 44e61d764 Add release notes for v1.6.18
Github Security Advisory GHSA-hmfx-3pcx-653p
- 286a01f35 oci: fix additional GIDs
- 301823453 oci: fix loop iterator aliasing
- 0070ab70f oci: skip checking gid for WithAppendAdditionalGroups
- 16d52de64 refactor: reduce duplicate code
- b45e30292 add WithAdditionalGIDs test
- 0a06c284a add WithAppendAdditionalGroups helper
Github Security Advisory GHSA-259w-8hf6-59c2
- 84936fd1f importer: stream oci-layout and manifest.json
[1.6] Add fallback for windows platforms without osversion (#8106)
- b327af6a4 Add fallback for windows platforms without osversion
[release/1.6] Go 1.19.6 (#8111)
- 54ead5b7b Go 1.19.6
[release/1.6] ctr/run: flags --detach and --rm cannot be specified together (#8094)
- 2b4b35ab4 ctr/run: flags --detach and --rm cannot be specified together
[release/1.6] Fix retry logic within devmapper device deactivation (#8088)
- d5284157b Fix retry logic within devmapper device deactivation
[release/1.6 backport] Revert apparmor_parser regression (#8087)
- 624ff636b pkg/apparmor: clarify Godoc
- 3a0a35b36 Revert "Don't check for apparmor_parser to be present"
[release/1.6] CI: skip some jobs when repo != containerd/containerd (#8083)
- 664a938a3 CI: skip some jobs when repo != containerd/containerd

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.17

`v1.6.17`: containerd 1.6.17

Compare Source

Welcome to the v1.6.17 release of containerd!

The seventeenth patch release for containerd 1.6 includes various updates.

Notable Updates

Add network plugin metrics (#8018)
Update mkdir permission on /etc/cni to 0755 instead of 0700 (#8030)
Export remote snapshotter label handler (#8054)
Add support for default hosts.toml configuration (#8065)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan
Akihiro Suda
Jess
Antonio Ojea
Kohei Tokunaga
Phil Estes
Wei Fu

Changes

11 commits

[release/1.6] Prepare release notes for v1.6.17 (#8080)
- a1aa9b900 Prepare release notes for v1.6.17
[1.6] Backport default registry hosts config (#8065)
- 1436641b8 Support default hosts.toml configuration
- 87acecd04 Update hosts doc
[release/1.6 backport] Export remote snapshotter label handler (#8054)
- a6544ed7d Export remote snapshotter label handler
[release/1.6] cri: mkdir /etc/cni with 0755, not 0700 (#8030)
- ae02a24a3 cri: mkdir /etc/cni with 0755, not 0700
[release/1.6] add network plugin metrics (#8018)
- 6c6cc5ec1 add network plugin metrics

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.16

`v1.6.16`: containerd 1.6.16

Compare Source

Welcome to the v1.6.16 release of containerd!

The sixteenth patch release for containerd 1.6 includes various bug fixes and updates.

Notable Updates

Fix push error propagation (#7990)
Fix slice append error with HugepageLimits for Linux (#7995)
Update default seccomp profile for PKU and CAP_SYS_NICE (#8001)
Fix overlayfs error when upperdirlabel option is set (#8002)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda
Derek McGowan
Samuel Karp
Sebastiaan van Stijn
Phil Estes
Craig Ingram
Justin Chadwell
Qasim Sarfraz
Wei Fu
bin liu
cardy.tang
rongfu.leng

Changes

30 commits

[release/1.6] Prepare v1.6.16 (#8016)
- d3c595aa3 Prepare release notes for v1.6.16
[release/1.6 backport] Fix tx closed error when upperdirlabel specified (#8002)
- 8c704036a Fix tx closed error when upperdirlabel specified
[release/1.6 backport] assorted test-fixes (#8000)
- 91a68edd7 cri: Fix TestUpdateOCILinuxResource for host w/o swap controller
- 5594f706e Fix TestUpdateContainerResources_Memory* on cgroup v2 hosts
[release/1.6 backport] seccomp updates (#8001)
- 7037f5313 seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE
- d22919a1c seccomp: seccomp: add syscalls related to PKU in default policy
[release/1.6 backport] Harden GITHUB_TOKEN permissions (#7999)
- 8b8a21fe4 Harden GITHUB_TOKEN permissions
[release/1.6 backport] assorted updates to Vagrantfile (#7996)
- 8009948bb Vagrantfile: fix comments about SELinux
- 550424f92 Vagrantfile: install-rootless-podman: remove setenforce 0
- 2c32f8559 CI: update Fedora to 37
- 556bb0cc8 Vagrantfile: explicitly specify rsync as the shared folder driver
- edfac1834 fix install cni script
- 91d5e53fb Vagrantfile: dump containerd log after critest
[release/1.6 backport] Fix slice append error (#7995)
- ab193eb20 pkg/cri: optimize slice initialization
- e6cf5ec58 Fix slice append error
[release/1.6] update to go1.18.10 (#7992)
- 6a8a6531f [release/1.6] update to go1.18.10
[release/1.6 backport] release/Dockerfile: set DEBIAN_FRONTEND=noninteractive (#7991)
- d0dc7988a release/Dockerfile: set DEBIAN_FRONTEND=noninteractive
[release/1.6 backport] pushWriter: correctly propagate errors (#7990)
- 1584c2581 pushWriter: correctly propagate errors
[release/1.6] mod: update github.com/pelletier/go-toml@v1.9.5 (#7942)
- 545f22091 mod: update github.com/pelletier/go-toml@v1.9.5

Dependency Changes

github.com/pelletier/go-toml v1.9.3 -> v1.9.5

Previous release can be found at v1.6.15

docker/buildx

`v0.13.1`

Compare Source

buildx 0.13.1

Welcome to the 0.13.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Notable changes

Fix connecting to docker-container:// and kube-pod:// style URLs with remote driver #2327
Fix handling of --push with Bake when a target has already defined a non-image output #2330

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.13.0

`v0.13.0`

Compare Source

buildx 0.13.0

Welcome to the 0.13.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

CrazyMax
Tõnis Tiigi
Sebastiaan van Stijn
David Karlsson
Jonathan A. Sternberg
Justin Chadwell
Laura Brehm
Akihiro Suda
Ian King'ori
Paweł Gronowski
Brian Goff
Kushagra Mansingh
Laurent Goderre
Nicolas De Loof
Rob Murray
Simon A. Eugster

Notable Changes

Builds can now use multiple outputs with a single command (requires BuildKit v0.13+) #2290 #2302
Bake command now supports defining shm-size and ulimit values #2279 #2242
Windows container based builder instances can now be created with remote driver and npipe connections #2287
New dial-stdio command is available for directly contacting BuildKit daemon of the configured builder instance #2112
Container and Kubernetes builder instances now allow network.host entitlement by default (allowing access to the container's network) #2266
ls command now supports --format options for controlling the output #1787
--metadata-file option can now also return build reference that can be used for further build debugging, for example, in Docker Desktop #2263
New experimental OpenTelemetry metrics exporting is available for build duration and transfer sizes #2235 #2258 #2225 #2224 #2155
Fix possible cache invalidation when using linked targets in Bake #2265
Container driver now supports driver opt for defining restart policy for BuildKit container #1271
Compose spec support has been updated to v2.0.0-rc.8 #2205
Bake command has been updated to share the same authentication provider for all targets for improved performance #2147
New cancellation signal handling via UNIX socket is supported with new Docker CLI #2184 #2289
Multiple builders can now be removed with a single command #2140
--add-host flag now permits = separator for IPv6 addresses #2121
VCS attributes exported from Buildx now include the local directory subpaths if they are relative to the current Git repository #2156
imagetools inspect command can now show DSSE-signed SBOM and Provenance attestations #2194
Fixes for Git repository path sanitization in WSL #2167
Default Git repository path is now found via configured tracking branch #2146
Certain error messages for attestations have been improved #2268
Better handling of connecting to unhealthy nodes with remote driver #2130
Fix possible panic in imagetools create command #2230
Fix additional output when exporting progress in rawjson mode #2252
Fix possible inconsistent configuration merge order when using Bake with many configurations #2237
Npipe URL scheme is now supported on Windows #2250
Fix possible console warnings on Windows #2238

Dependency Changes

github.com/Microsoft/hcsshim v0.11.1 -> v0.11.4
github.com/aws/aws-sdk-go-v2 v1.17.6 -> v1.24.1
github.com/aws/aws-sdk-go-v2/config v1.18.16 -> v1.26.6
github.com/aws/aws-sdk-go-v2/credentials v1.13.16 -> v1.16.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.24 -> v1.14.11
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.30 -> v1.2.10
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.24 -> v2.5.10
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.31 -> v1.7.3
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.10.4 new
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.24 -> v1.10.10
github.com/aws/aws-sdk-go-v2/service/sso v1.12.5 -> v1.18.7
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.5 -> v1.21.7
github.com/aws/aws-sdk-go-v2/service/sts v1.18.6 -> v1.26.7
github.com/aws/smithy-go v1.13.5 -> v1.19.0
github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
github.com/compose-spec/compose-go/v2 v2.0.0-rc.8 new
github.com/containerd/console v1.0.3 -> v1.0.4
github.com/containerd/containerd v1.7.7 -> v1.7.13
github.com/containerd/continuity v0.4.2 -> v0.4.3
github.com/docker/cli v24.0.5 -> v26.0.0-rc1
github.com/docker/cli-docs-tool v0.6.0 -> v0.7.0
github.com/docker/docker v24.0.5 -> v26.0.0-rc1
github.com/docker/docker-credential-helpers v0.7.0 -> v0.8.0
github.com/docker/go-connections v0.4.0 -> v0.5.0
github.com/emicklei/go-restful/v3 v3.10.1 -> v3.11.0
github.com/felixge/httpsnoop v1.0.3 -> v1.0.4
github.com/go-logr/logr v1.2.3 -> v1.3.0
github.com/go-openapi/jsonpointer v0.19.5 -> v0.19.6
github.com/go-openapi/jsonreference v0.20.0 -> v0.20.2
github.com/go-openapi/swag v0.19.14 -> v0.22.3
github.com/google/gnostic-models v0.6.8 new
github.com/google/go-cmp v0.5.9 -> v0.6.0
github.com/google/uuid v1.3.0 -> v1.6.0
github.com/gorilla/websocket v1.5.0 new
github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 -> v2.16.0
github.com/klauspost/compress v1.16.3 -> v1.17.4
github.com/mailru/easyjson v0.7.6 -> v0.7.7
github.com/mattn/go-runewidth v0.0.15 new
github.com/mitchellh/copystructure v1.2.0 new
github.com/mitchellh/reflectwalk v1.0.2 new
github.com/moby/buildkit d5c1d78 -> v0.13.0
github.com/moby/docker-image-spec v1.3.1 new
github.com/moby/sys/mountinfo v0.6.2 -> v0.7.1
github.com/moby/sys/user v0.1.0 new
github.com/mxk/go-flowrate cca7078 new
github.com/prometheus/client_golang v1.14.0 -> v1.17.0
github.com/prometheus/client_model v0.3.0 -> v0.5.0
github.com/prometheus/common v0.42.0 -> v0.44.0
github.com/prometheus/procfs v0.9.0 -> v0.12.0
github.com/rivo/uniseg v0.2.0 new
github.com/serialx/hashring 8b29126 -> 22c0c7a
github.com/spf13/cobra v1.7.0 -> v1.8.0
github.com/tonistiigi/fsutil 36ef4d8 -> 7525a1a
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.40.0 -> v0.46.1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.40.0 -> v0.46.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.40.0 -> v0.46.1
go.opentelemetry.io/otel v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/prometheus v0.42.0 new
go.opentelemetry.io/otel/metric v0.37.0 -> v1.21.0
go.opentelemetry.io/otel/sdk v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/sdk/metric v1.21.0 new
go.opentelemetry.io/otel/trace v1.14.0 -> v1.21.0
go.opentelemetry.io/proto/otlp v0.19.0 -> v1.0.0
golang.org/x/exp 613f0c0 -> db7319d
google.golang.org/genproto 7f2fa6f -> 49dd2c1
google.golang.org/genproto/googleapis/api 49dd2c1 new
google.golang.org/genproto/googleapis/rpc 49dd2c1 new
google.golang.org/grpc v1.53.0 -> v1.59.0
k8s.io/api v0.26.7 -> v0.29.2
k8s.io/apimachinery v0.26.7 -> v0.29.2
k8s.io/apiserver v0.26.7 -> v0.29.2
k8s.io/client-go v0.26.7 -> v0.29.2
k8s.io/klog/v2 v2.90.1 -> v2.110.1
k8s.io/kube-openapi 172d655 -> 2dd684a
k8s.io/utils a5ecb01 -> 3b25d92
sigs.k8s.io/json f223a00 -> bc3834c
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 -> v4.4.1

Previous release can be found at v0.12.1

`v0.12.1`

Compare Source

Welcome to the v0.12.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Changes

Fix incorrect validation of some driver-opt values that could cause invalid state to be stored #2176

Previous release can be found at v0.12.0

`v0.12.0`

Compare Source

Welcome to the 0.12.0 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Contributors

CrazyMax
Justin Chadwell
Tõnis Tiigi
Sebastiaan van Stijn
Kohei Tokunaga
David Karlsson
Jonathan A. Sternberg
Guillaume Lours
Kenyon Ralph
Qasim Sarfraz
Silvin Lubecki
Akihiro Suda
Aleksa Sarai
Cameron Adams
Dmitry Makovey
Jhan S. Álvarez
Jonathan Piché
Kenyon Ralph
Kijima Daigo
Silvin Lubecki
Zero
guoguangwu

Notable Changes

OCI Annotations can be added to build results with a new --annotation flag for the build command and annotations key in the Bake file. Annotations added to OCI manifests, indexes, and descriptors. #2020 #2098
New debugging features have been added with a new debug command and interactive debugging console. This feature currently requires setting BUILDX_EXPERIMENTAL=1 #2006 #1896 #1970 #1914 #2026 #2086 docs
Special host-gateway IP mapping can now be used with the --add-host flag during build #1894 #2083
Bake command now allows adding local source files when building from remote definition #1838
The status of uploading build results to Docker is now shown interactively on progressbar #1994
Error handling has been improved when bootstrapping multi-node build clusters #1869
Compose support has been updated to 1.20, enabling "include" functionality when using the Bake command #1971 #2065 #2094
Imagetools create command now allows adding annotation when creating new images in the registry #1965
OpenTelemetry build trace delegation from buildx is now possible with Docker and Remote driver #2034
Bake command now shows all files where the build definition was loaded from on the progressbar #2076
Bake files now allow the same attributes to be defined in multiple definition files. #1062
Using the Bake command with a remote definition now allows this definition to use local Dockerfiles #2015
Docker container driver now explicitly sets BuildKit config path to make sure configurations are loaded from same location for both mainline and rootless images #2093
Improve performance of detecting when BuildKit instance has completed booting #1934
Container driver now accepts many new driver options for defining the resource limits for BuildKit container #2048
Inspection commands formatting has been improved #2068
Error messages about driver capabilities have been improved #1998
Improve errors when invoking Bake command without targets #2100
Allow enabling debug logs with environment variables when running in standalone mode #1821
When using Docker driver the default image resolve mode has been updated to prefer local Docker images for backward compatibility #1886
Kubernetes driver now allows setting custom annotations and labels to the BuildKit deployments and pods #1938
Kubernetes driver now allows setting authentication token with endpoint configuration #1891
Fix possible issue with chained targets in Bake that could result in build failing or local source for a target uploaded multiple times #2113
Fix issue when accessing global target properties when using the matrix feature of the Bake command #2106
Fixes for formatting validation of certain build flags #2040
Fixes to avoid locking certain commands unnecessarily while booting builder nodes. #2066
Fix cases where multiple builds try to bootstrap the same builder instance in parallel #2000
Fix cases where errors on uploading build results to docker could be dropped in some cases #1927
Fix detecting capabilities for missing attestation support based on build output #1988
Fix the build for loading in Bake remote definition to not show up in build history records #1961 #1954
Fix errors when building Compose files using the that define profiles with Bake #1903
Fix possible time correction errors on progressbar #1968
Fix passing custom Cgroup parent to builds that used the new controller interface #1913

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 43070de -> ced1acd
github.com/Microsoft/hcsshim v0.11.1 new
github.com/Shopify/logrus-bugsnag 577dee2 new
github.com/apparentlymart/go-textseg/v15 v15.0.0 new
github.com/compose-spec/compose-go v1.14.0 -> v1.20.0
github.com/containerd/containerd v1.7.2 -> v1.7.7
github.com/containerd/continuity v0.4.1 -> v0.4.2
github.com/containerd/log v0.1.0 new
github.com/creack/pty v1.1.18 new
github.com/distribution/reference v0.5.0 new
github.com/docker/cli v24.0.2 -> v24.0.5
github.com/docker/docker 36e9e79 -> v24.0.5
github.com/hashicorp/go-cleanhttp v0.5.2 new
github.com/hashicorp/go-cty-funcs 2721b1e -> a090f58
github.com/hashicorp/hcl/v2 v2.8.2 -> v2.19.1
github.com/imdario/mergo v0.3.15 -> v0.3.16
github.com/moby/buildkit faa0cc7 -> d5c1d78
github.com/moby/patternmatcher v0.5.0 -> v0.6.0
github.com/opencontainers/image-spec v1.1.0-rc3 -> v1.1.0-rc5
github.com/opencontainers/runc v1.1.7 -> v1.1.9
github.com/sirupsen/logrus v1.9.0 -> v1.9.3
github.com/theupdateframework/notary v0.6.1 -> v0.7.0
github.com/zclconf/go-cty v1.10.0 -> v1.14.1
golang.org/x/exp 613f0c0 new
k8s.io/api v0.26.2 -> v0.26.7
k8s.io/apimachinery v0.26.2 -> v0.26.7
k8s.io/apiserver v0.26.2 -> v0.26.7
k8s.io/client-go v0.26.2 -> v0.26.7

Previous release can be found at v0.11.2

`v0.11.2`

Compare Source

Welcome to the v0.11.2 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

Changes

Fix a regression that caused buildx to not read the KUBECONFIG path from the instance store #1941
Fix a regression with result handle builds showing up in the build history incorrectly #1954

Dependency Changes

github.com/docker/docker v24.0.2 -> 36e9e79
github.com/moby/buildkit 67a0862 -> faa0cc7
github.com/tonistiigi/fsutil 9e7a6df -> 36ef4d8
github.com/xeipuuv/gojsonpointer 4e3ac27 -> 02993c4

Previous release can be found at v0.11.1

`v0.11.1`

Compare Source

Welcome to the v0.11.1 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Contributors

Changes

Fix a regression for bake where services in profiles would not be loaded. #1903
Fix a regression where --cgroup-parent option had no effect during build. #1913
Fix a regression where valid docker contexts could fail buildx builder name validation. #1879
Fix an issue where the host-gateway special address could not be used as an argument to --add-host. #1894 (also requires https://github.com/moby/moby/pull/45767)
Fix a possible panic when terminal is resized during the build. #1929

Dependency Changes

github.com/docker/cli-docs-tool v0.5.1 -> v0.6.0

Previous release can be found at v0.11.0

`v0.11.0`

Compare Source

Welcome to the v0.11.0 release of buildx!

Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues.

Notable changes

--load now supports loading multi-platform images when used with the containerd image store in moby #1813
Commands now display the current builder name in the build progress output #1177
Bake now supports matrix builds. The new matrix field on target blocks allows easily creating multiple similar sets of targets to remove duplication in bake files #1690 docs
New experimental --detach flag for the build command to run the build in a detached server, allowing attaching to the build later using debug-shell (requires BUILDX_EXPERIMENTAL=1) #1296 #1620 #1614 #1737 #1755
docs
New monitor mode commands exec and attach to allow spawning additional processes in a debugging session (requires BUILDX_EXPERIMENTAL=1) #1626 docs
New experimental debug-shell command to directly start the build debugging monitor without starting a build, allowing connecting to previously --detached builds (requires BUILDX_EXPERIMENTAL=1) #1640
docs
New experimental --invoke=on-error option for the --invoke command to start the build debugging monitor at the point at which a build fails (requires BUILDX_EXPERIMENTAL=1) #1640 docs
Bake now supports detecting compose.yml/compose.yaml files in addition to docker-compose.yml/docker-compose.yaml #1752
Bake now supports new compose build keys dockerfile_inline and additional_contexts #1784 docs
Bake now supports replace HCL function #1720
Initial support for CLI command completion, including: builder names, folder names for build commands and bake targets #1727
Builds support the new EXPERIMENTAL_BUILDKIT_SOURCE_POLICY environment variable to set the path to a source policy docs #1628
BuildKit versions are correctly displayed in buildx ls and buildx inspect for builders using the Docker driver #1552
Display additional builder node details in buildx inspect view #1440 #1854
Builders using the remote driver allow using TLS without proving its own key/cert (if BuildKit remote is configured to support it) #1693
Builders using the kubernetes driver allow automatically generating the node name if not provided #1673
Builders using the kubernetes driver support a new serviceaccount option, which will set the created pod's serviceAccountName #1597
Builders using the kubernetes driver support the proxy-url kubeconfig option docs #1780
Bake now allows merging multiple similar attestation parameters into a single parameter to allow overriding with a single global value #1699
Fix possible panic when no builders are available #1732
Fix docker-container driver hang on container panic #1772
Fix invalid path when writing certificates for docker-container driver on Windows #1831
Fix bake failure when remote bake file is accessed using SSH #1711 #1734
Fix bake failure when remote bake context is incorrectly resolved #1783
Fix path resolution of BAKE_CMD_CONTEXT and cwd:// paths in bake contexts #1840
Fix mixed OCI and Docker media types when creating images using imagetools create #1797
Fix mismatched image id between --iidfile and -q #1844
Fix opaque error messages on invalid edge-case git urls #1710 #1733
Fix previously discarded error messages from logrus #1853
Fix AWS authentication when mixing static creds and IAM profiles #1816
Fix race in printer so that logrus warning messages appear at the end of the build deterministically #1794
Fix connection leak for feature check on default docker driver #1776

Contributors

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 43070de new
github.com/Masterminds/semver/v3 v3.2.1 new
github.com/Microsoft/go-winio v0.5.2 -> v0.6.1
github.com/aws/aws-sdk-go-v2 v1.16.3 -> v1.17.6
github.com/aws/aws-sdk-go-v2/config v1.15.5 -> v1.18.16
github.com/aws/aws-sdk-go-v2/credentials v1.12.0 -> v1.13.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.4 -> v1.12.24
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.10 -> v1.1.30
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.4 -> v2.4.24
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.11 -> v1.3.31
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.4 -> v1.9.24
github.com/aws/aws-sdk-go-v2/service/sso v1.11.4 -> v1.12.5
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.5 new
github.com/aws/aws-sdk-go-v2/service/sts v1.16.4 -> v1.18.6
github.com/aws/smithy-go v1.11.2 -> v1.13.5
github.com/cenkalti/backoff/v4 v4.1.2 -> v4.2.0
github.com/cespare/xxhash/v2 v2.1.2 -> v2.2.0
github.com/compose-spec/compose-go v1.6.0 -> v1.14.0
github.com/containerd/containerd 1709cfe -> v1.7.2
github.com/containerd/continuity v0.3.0 -> v0.4.1
github.com/containerd/ttrpc v1.1.0 -> v1.2.2
github.com/containerd/typeurl/v2 v2.1.1 new
github.com/cyphar/filepath-securejoin v0.2.3 new
github.com/distribution/distribution/v3 4bf3547 -> 36d8c59
github.com/docker/cli v23.0.0-rc.1 -> v24.0.2
github.com/docker/distribution v2.8.1 -> v2.8.2
github.com/docker/docker v23.0.0-rc.1 -> v24.0.2
github.com/emicklei/go-restful/v3 v3.10.1 new
github.com/felixge/httpsnoop v1.0.2 -> v1.0.3
github.com/go-openapi/jsonpointer v0.19.5 new
github.com/go-openapi/jsonreference v0.20.0 new
github.com/go-openapi/swag v0.19.14 new
github.com/golang/protobuf v1.5.2 -> v1.5.3
github.com/google/certificate-transparency-go v1.0.21 -> v1.1.4
github.com/google/gnostic v0.5.7-v3refs new
github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 new
github.com/imdario/mergo v0.3.13 -> v0.3.15
github.com/in-toto/in-toto-golang v0.5.0 new
github.com/inconshreveable/mousetrap v1.0.1 -> v1.1.0
github.com/josharian/intern v1.0.0 new
github.com/klauspost/compress v1.15.12 -> v1.16.3
github.com/kr/pretty v0.3.0 -> v0.2.1
github.com/mailru/easyjson v0.7.6 new
github.com/moby/buildkit v0.11.2 -> 67a0862
github.com/moby/term abb1982 -> v0.5.0
github.com/munnerz/goautoneg a7dc8b6 new
github.com/opencontainers/image-spec 02efb9a -> v1.1.0-rc3
github.com/opencontainers/runc v1.1.3 -> v1.1.7
github.com/prometheus/common v0.37.0 -> v0.42.0
github.com/prometheus/procfs v0.8.0 -> v0.9.0
github.com/secure-systems-lab/go-securesystemslib v0.4.0 new
github.com/sergi/go-diff v1.2.0 new
github.com/shibumi/go-pathspec v1.3.0 new
github.com/spf13/cobra v1.6.1 -> v1.7.0
github.com/stretchr/testify v1.8.1 -> v1.8.4
github.com/tonistiigi/fsutil fb43384 -> 9e7a6df
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.29.0 -> v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.29.0 -> v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.29.0 -> v0.40.0
go.opentelemetry.io/otel v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/metric v0.27.0 -> v0.37.0
go.opentelemetry.io/otel/sdk v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/trace v1.4.1 -> v1.14.0
go.opentelemetry.io/proto/otlp v0.12.0 -> v0.19.0
golang.org/x/mod v0.9.0 new
golang.org/x/net v0.4.0 -> v0.8.0
golang.org/x/oauth2 6fdb5e3 -> v0.5.0
golang.org/x/sync v0.1.0 -> v0.2.0
golang.org/x/sys v0.3.0 -> v0.7.0
golang.org/x/term v0.3.0 -> v0.6.0
golang.org/x/text v0.5.0 -> v0.8.0
golang.org/x/time v0.1.0 -> v0.3.0
golang.org/x/tools v0.7.0 new
google.golang.org/genproto 1bc688f -> 7f2fa6f
google.golang.org/grpc v1.50.1 -> v1.53.0
google.golang.org/protobuf v1.28.1 -> v1.30.0
k8s.io/api v0.22.4 -> v0.26.2
k8s.io/apimachinery v0.22.4 -> v0.26.2
k8s.io/apiserver v0.26.2 new
k8s.io/client-go v0.22.4 -> v0.26.2
k8s.io/klog/v2 v2.30.0 -> v2.90.1
k8s.io/kube-openapi 172d655 new
k8s.io/utils cb0fa31 -> a5ecb01
sigs.k8s.io/json f223a00 new
sigs.k8s.io/structured-merge-diff/v4 v4.1.2 -> v4.2.3
sigs.k8s.io/yaml v1.2.0 -> v1.3.0

Previous release can be found at v0.10.4

`v0.10.5`

Compare Source

Welcome to the 0.10.5 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

Fix issue where build progress could pause for a couple of seconds with no new output because of a race condition. This issue was more likely to appear when using Docker driver with Docker Engine v24.0 release #1815
Fix handling NO_COLOR with empty value #1815

`v0.10.4`

Compare Source

Welcome to the 0.10.4 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

Add BUILDX_NO_DEFAULT_ATTESTATIONS as alternative to --provenance false #1645
Disable dirty Git checkout detection by default for performance. Can be enabled with BUILDX_GIT_CHECK_DIRTY opt-in #1650
Strip credentials from VCS hint URL before sending to BuildKit #1664

`v0.10.3`

Compare Source

Welcome to the 0.10.3 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

Fix reachable commit and warnings on collecting Git provenance info #1592 #1634
Fix a regression where docker context was not being validated #1596
Fix function resolution with JSON bake definition #1605
Fix case where original HCL bake diagnostic is discarded #1607
Fix labels not correctly set with bake and compose file #1631

`v0.10.2`

Compare Source

Welcome to the 0.10.2 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

Fix preferred platforms order not taken into account in multi-node builds #1561
Fix possible panic on handling SOURCE_DATE_EPOCH environment variable #1564
Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries #1566
Improve warnings on collecting Git provenance info #1568

`v0.10.1`

Compare Source

Welcome to the 0.10.1 release of buildx!

Please try out the release binaries and report any issues at
https://github.com/docker/buildx/issues.

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and Lambda). You can optionally disable the default provenance attestation functionality using --provenance=false.

Notable changes

Fix sending the correct origin URL as vsc:source metadata #1548
Fix possible panic from data-race #1504
Fix regression with rm --all-inactive #1547
Improve attestation access in imagetools inspect by lazily loading data #1546
Correctly mark capabilities request as internal #1538
Detect invalid attestation configuration #1545
Update containerd patches to fix possible push regression affecting imagetools commands #1559

Dependency Changes

github.com/containerd/containerd v1.6.14 -> 1709cfe
github.com/moby/buildkit v0.11.0 -> v0.11.2

Previous release can be found at v0.10.0

docker/distribution

`v2.8.3`

Compare Source

What's Changed

Pass BUILDTAGS argument to go build by @marcusirgens in https://github.com/distribution/distribution/pull/3926
Enable Go build tags by @thaJeztah in https://github.com/distribution/distribution/pull/4009
reference: replace deprecated function SplitHostname by @thaJeztah in https://github.com/distribution/distribution/pull/4032
Dont parse errors as JSON unless Content-Type is set to JSON by @thaJeztah in https://github.com/distribution/distribution/pull/4054
update to go 1.20.8 by @thaJeztah in https://github.com/distribution/distribution/pull/4056
Set Content-Type header in registry client ReadFrom by @thaJeztah in https://github.com/distribution/distribution/pull/4053
deprecate reference package, migrate to github.com/distribution/reference by @thaJeztah in https://github.com/distribution/distribution/pull/4063
digestset: deprecate package in favor of go-digest/digestset by @thaJeztah in https://github.com/distribution/distribution/pull/4064
Do not close HTTP request body in HTTP handler by @milosgajdos in https://github.com/distribution/distribution/pull/4068
Add v2.8.3 release notes by @milosgajdos in https://github.com/distribution/distribution/pull/4088

New Contributors

@marcusirgens made their first contribution in https://github.com/distribution/distribution/pull/3926

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3

`v2.8.2`

Compare Source

What's Changed

Revert registry/client: set Accept: identity header when getting layers by @ndeloof in https://github.com/distribution/distribution/pull/3783
Parse http forbidden as denied by @vvoland in https://github.com/distribution/distribution/pull/3914
Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by @thaJeztah (#3650)
Fix CVE-2023-2253 runaway allocation on /v2/_catalog by @josegomezr 521ea3d9
Fix panic in inmemory driver by @wy65701436 in https://github.com/distribution/distribution/pull/3815
bump up golang version (alternative) by @thaJeztah in https://github.com/distribution/distribution/pull/3903
Dockerfile: update xx to v1.2.1 by @thaJeztah in https://github.com/distribution/distribution/pull/3907
update to go1.19.9 by @thaJeztah in https://github.com/distribution/distribution/pull/3908
Add code to handle pagination of parts. Fixes max layer size of 10GB bug by @DavidSpek in https://github.com/distribution/distribution/pull/3893
Dockerfile: fix filenames of artifacts by @thaJeztah in https://github.com/distribution/distribution/pull/3911

Full Changelog: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2

docker/docker

`v26.0.0`

Compare Source

26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 26.0.0 milestone
moby/moby, 26.0.0 milestone
Deprecated and removed features, see Deprecated Features.
Changes to the Engine API, see API version history.

Security

This release contains a security fix for CVE-2024-29018, a potential data exfiltration from 'internal' networks via authoritative DNS servers.

New

Add Subpath field to the VolumeOptions making it possible to mount a subpath of a volume. moby/moby#45687
Add volume-subpath support to the mount flag (--mount type=volume,...,volume-subpath=<subpath>). docker/cli#4331
Accept = separators and [ipv6] in compose files for docker stack deploy. docker/cli#4860
rootless: Add support for enabling host loopback by setting the DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK environment variable to false (defaults to true). This lets containers connect to the host by using IP address 10.0.2.2. moby/moby#47352
containerd image store: docker image ls no longer creates duplicates entries for multi-platform images. moby/moby#45967
containerd image store: Send Prometheus metrics. moby/moby#47555

Bug fixes and enhancements

CVE-2024-29018: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589
Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. moby/moby#47233

[!WARNING]

Containers created using Docker Engine 25.0.0 may have duplicate MAC addresses, they must be re-created.
Containers created using version 25.0.0 or 25.0.1 with user-defined MAC addresses will get generated MAC addresses when they are started using 25.0.2. They must also be re-created.

Always attempt to enable IPv6 on a container's loopback interface, and only include IPv6 in /etc/hosts if successful. moby/moby#47062

[!NOTE]

By default, IPv6 will remain enabled on a container's loopback interface when the container is not connected to an IPv6-enabled network.
For example, containers that are only connected to an IPv4-only network now have the ::1 address on their loopback interface.

To disable IPv6 in a container,
use option --sysctl net.ipv6.conf.all.disable_ipv6=1 in the create or run command,
or the equivalent sysctls option in the service configuration section of a Compose file.

If IPv6 is not available in a container because it has been explicitly disabled for the container,
or the host's networking stack does not have IPv6 enabled (or for any other reason)
the container's /etc/hosts file will not include IPv6 entries.

Fix ADD Dockerfile instruction failing with lsetxattr <file>: operation not supported when unpacking archive with xattrs onto a filesystem that doesn't support them. moby/moby#47175
Fix docker container start failing when used with --checkpoint. moby/moby#47456
Restore IP connectivity between the host and containers on an internal bridge network. moby/moby#47356
Do not enforce new validation rules for existing swarm networks. moby/moby#47361
Restore DNS names for containers in the default "nat" network on Windows. moby/moby#47375
Print hint when invoking docker image ls with ambiguous argument. docker/cli#4849
Cleanup @docker_cli_[UUID] files on OpenBSD. docker/cli#4862
Add explicit deprecation notice message when using remote TCP connections without TLS. docker/cli#4928, moby/moby#47556
Use IPv6 nameservers from the host's resolv.conf as upstream resolvers for Docker Engine's internal DNS, rather than listing them in the container's resolv.conf. moby/moby#47512
containerd image store: Isolate images with different containerd namespaces when --userns-remap option is used. moby/moby#46786
containerd image store: Fix image pull not emitting Pulling fs layer status. moby/moby#47432

API

To preserve backwards compatibility, read-only mounts are not recursive by default when using older clients (API version < v1.44). moby/moby#47391
GET /images/{id}/json omits the Created field (previously it was 0001-01-01T00:00:00Z) if the Created field is missing from the image config. moby/moby#47451
Populate a missing Created field in GET /images/{id}/json with 0001-01-01T00:00:00Z for API version <= 1.43. moby/moby#47387
The is_automated field in the POST /images/search endpoint results is always false now. Consequently, searching for is-automated=true will yield no results, while is-automated=false will be a no-op. moby/moby#47465
Remove Container and ContainerConfig fields from the GET /images/{name}/json response. moby/moby#47430

Packaging updates

Update API to v1.45. moby#47582
Update BuildKit to v0.13.1. moby/moby#47582
Update Buildx to v0.13.1. docker/docker-ce-packaging#1000
Update Compose to v2.25.0. docker/docker-ce-packaging#1002
Update Go runtime to 1.21.8. moby/moby#47502
Update RootlessKit to v2.0.2. moby/moby#47508
Update containerd to v1.7.13 (static binaries only) moby/moby#47278
Update runc binary to v1.1.12 moby/moby#47268
Update OTel to v0.46.1 / v1.21.0 moby/moby#47245

Removed

Remove Container and ContainerConfig fields from the GET /images/{name}/json response. moby/moby#47430
Deprecate the ability to accept remote TCP connections without TLS. Deprecation notice docker/cli#4928 moby/moby#47556.
Remove deprecated API versions (API < v1.24) moby/moby#47155
Disable pulling of deprecated image formats by default. These image formats are deprecated, and support will be removed in a future version. moby/moby#47459
image: remove deprecated IDFromDigest moby/moby#47198
Remove the deprecated github.com/docker/docker/pkg/loopback package. moby/moby#47128
pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported moby/moby#47129
pkg/homedir: remove deprecated Key() and GetShortcutString() moby/moby#47130
pkg/containerfs: remove deprecated ResolveScopedPath moby/moby#47131
The daemon flag --oom-score-adjust was deprecated in v24.0 and is now removed. moby/moby#46113
Remove deprecated aliases from the api/types package. These types were deprecated in v25.0.0, which provided temporary aliases. moby/moby#47148
These aliases are now removed: types.Info, types.Commit, types.PluginsInfo, types.NetworkAddressPool, types.Runtime, types.SecurityOpt, types.KeyValue, types.DecodeSecurityOptions, types.CheckpointCreateOptions, types.CheckpointListOptions, types.CheckpointDeleteOptions, types.Checkpoint, types.ImageDeleteResponseItem, types.ImageSummary, types.ImageMetadata, types.ServiceUpdateResponse, types.ServiceCreateResponse, types.ResizeOptions, types.ContainerAttachOptions, types.ContainerCommitOptions, types.ContainerRemoveOptions, types.ContainerStartOptions, types.ContainerListOptions, types.ContainerLogsOptions
cli/command/container: remove deprecated NewStartOptions() docker/cli#4811
cli/command: remove deprecated DockerCliOption, InitializeOpt docker/cli#4810

`v25.0.5`

Compare Source

25.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.5 milestone
moby/moby, 25.0.5 milestone
Deprecated and removed features, see Deprecated Features.
Changes to the Engine API, see API version history.

Security

This release contains a security fix for CVE-2024-29018, a potential data exfiltration from 'internal' networks via authoritative DNS servers.

Bug fixes and enhancements

CVE-2024-29018: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589
plugin: fix mounting /etc/hosts when running in UserNS. moby/moby#47588
rootless: fix open /etc/docker/plugins: permission denied. moby/moby#47587
Fix multiple parallel docker build runs leaking disk space. moby/moby#47527

`v25.0.4`

Compare Source

25.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.4 milestone
moby/moby, 25.0.4 milestone
Deprecated and removed features, see Deprecated Features.
Changes to the Engine API, see API version history.

Bug fixes and enhancements

Restore DNS names for containers in the default "nat" network on Windows. moby/moby#47490
Fix docker start failing when used with --checkpoint moby/moby#47466
Don't enforce new validation rules for existing swarm networks moby/moby#47482
Restore IP connectivity between the host and containers on an internal bridge network. moby/moby#47481
Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS moby/moby#47483
containerd image store: Fix image pull not emitting Pulling fs layer status moby/moby#47484

API

To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). moby/moby#47393
GET /images/{id}/json omits the Created field (previously it was 0001-01-01T00:00:00Z) if the Created field is missing from the image config. moby/moby#47451
Populate a missing Created field in GET /images/{id}/json with 0001-01-01T00:00:00Z for API version <= 1.43. moby/moby#47387
Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. moby/moby#47470
Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but NetworkMode name-or-id is not the same as the name-or-id used in NetworkSettings.Networks. moby/moby#47510

Packaging updates

Upgrade Go runtime to 1.21.8. moby/moby#47503
Upgrade RootlessKit to v2.0.2. moby/moby#47508
Upgrade Compose to v2.24.7. https://github.com/docker/docker-ce-packaging/pull/998
Upgrade Buildx to v0.13.0. https://github.com/docker/docker-ce-packaging/pull/997

Full Changelog: https://github.com/moby/moby/compare/v25.0.3...v25.0.4

`v25.0.3`

Compare Source

25.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

containerd image store: Fix a bug where docker image history would fail if a manifest wasn't found in the content store. moby/moby#47348
Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. moby/moby#47304
Note
- Containers created with Docker Engine version 25.0.0 may have duplicate MAC addresses.
  They must be re-created.
- Containers with user-defined MAC addresses created with Docker Engine versions 25.0.0 or 25.0.1
  receive new MAC addresses when started using Docker Engine version 25.0.2.
  They must also be re-created.

Fix docker save <image>@<digest> producing an OCI archive with index without manifests. moby/moby#47294
Fix a bug preventing bridge networks from being created with an MTU higher than 1500 on RHEL and CentOS 7. moby/moby#47308, moby/moby#47311
Fix a bug where containers are unable to communicate over an internal network. moby/moby#47303
Fix a bug where the value of the ipv6 daemon option was ignored. moby/moby#47310
Fix a bug where trying to install a pulling using a digest revision would cause a panic. moby/moby#47323
Fix a potential race condition in the managed containerd supervisor. moby/moby#47313
Fix an issue with the journald log driver preventing container logs from being followed correctly with systemd version 255. moby/moby47243
seccomp: Update the builtin seccomp profile to include syscalls added in kernel v5.17 - v6.7 to align the profile with the profile used by containerd. moby/moby#47341
Windows: Fix cache not being used when building images based on Windows versions older than the host's version. moby/moby#47307, moby/moby#47337

Packaging updates

Removed support for Ubuntu Lunar (23.04). docker/ce-packaging#986

`v25.0.2`

Compare Source

25.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains security fixes for the following CVEs
affecting Docker Engine and its components.

CVE	Component	Fix version	Severity
CVE-2024-21626	runc	1.1.12	High, CVSS 8.6
CVE-2024-23651	BuildKit	1.12.5	High, CVSS 8.7
CVE-2024-23652	BuildKit	1.12.5	High, CVSS 8.7
CVE-2024-23653	BuildKit	1.12.5	High, CVSS 7.7
CVE-2024-23650	BuildKit	1.12.5	Medium, CVSS 5.5
CVE-2024-24557	Docker Engine	25.0.2	Medium, CVSS 6.9

The potential impacts of the above vulnerabilities include:

Unauthorized access to the host filesystem
Compromising the integrity of the build cache
In the case of CVE-2024-21626, a scenario that could lead to full container escape

For more information about the security issues addressed in this release,
refer to the blog post.
For details about each vulnerability, see the relevant security advisory:

Packaging updates

Upgrade containerd to v1.6.28.
Upgrade containerd to v1.7.13 (static binaries only). moby/moby#47280
Upgrade runc to v1.1.12. moby/moby#47269
Upgrade Compose to v2.24.5. docker/docker-ce-packaging#985
Upgrade BuildKit to v0.12.5. moby/moby#47273

`v25.0.1`

Compare Source

25.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

API: Fix incorrect HTTP status code for containers with an invalid network configuration created before upgrading to Docker Engine v25.0. moby/moby#47159
Ensure that a MAC address based on a container's IP address is re-generated when the container is stopped and restarted, in case the generated IP/MAC addresses have been reused. moby/moby#47171
Fix host-gateway-ip not working during build when not set through configuration. moby/moby#47192
Fix a bug that prevented a container from being renamed twice. moby/moby#47196
Fix an issue causing containers to have their short ID added to their network alias when inspecting them. moby/moby#47182
Fix an issue in detecting whether a remote build context is a Git repository. moby/moby#47136
Fix an issue with layers order in OCI manifests. moby/moby#47150
Fix volume mount error when passing an addr or ip mount option. moby/moby#47185
Improve error message related to extended attributes that can't be set due to improperly namespaced attribute names. moby/moby#47178
Swarm: Fixed start_interval not being passed to the container config. moby/moby#47163

Packaging updates

Upgrade Compose to 2.24.2. docker/docker-ce-packaging#981

`v25.0.0`

Compare Source

25.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.0 milestone
moby/moby, 25.0.0 milestone
Deprecated and removed features, see Deprecated Features.
Changes to the Engine API, see API version history.

New

Add OpenTelemetry tracing. moby/moby#45652, moby/moby#45579
Add support for CDI devices under Linux. moby/moby#45134, docker/cli#4510, moby/moby#46004
Add an additional interval to be used by healthchecks during the container start period. moby/moby#40894, docker/cli#4405, moby/moby#45965
Add a --log-format flag to dockerd to control the logging format: text (default) or JSON. moby/moby#45737
Add support for recursive read-only mounts. moby/moby#45278, moby/moby#46037
Add support for filtering images based on timestamp with docker image ls --filter=until=<timestamp>. moby/moby#46577

Bug fixes and enhancements

API: Fix error message for invalid policies at ValidateRestartPolicy. moby/moby#46352
API: Update /info endpoint to use singleflight. moby/moby#45847
Add an error message for when specifying a Dockerfile filename with -f, and also using stdin. docker/cli#4346
Add support for mac-address and link-local-ip fields in --network long format. docker/cli#4419
Add support for specifying multiple --network flags with docker container create and docker run. moby/moby#45906
Automatically enable IPv6 on a network when an IPv6 subnet is specified. moby/moby#46455
Add support for overlay networks over IPv6 transport. moby/moby#46790
Configuration reloading is now more robust: if there's an error during the configuration reload process, no configuration changes are applied. moby/moby#43980
Live restore: Containers with auto remove (docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857
Live restore: containers that are live-restored will now be given another health-check start period when the daemon restarts. moby/moby#47051
Container health status is flushed to disk less frequently, reducing wear on flash storage. moby/moby#47044
Ensure network names are unique. moby/moby#46251
Ensure that overlay2 layer metadata is correct. moby/moby#46471
Fix Downloading progress message on image pull. moby/moby#46515
Fix NetworkConnect and ContainerCreate with improved data validation, and return all validation errors at once. moby/moby#46183
Fix com.docker.network.host_ipv4 option when IPv6 and ip6tables are enabled. moby/moby#46446
Fix daemon's cleanupContainer if containerd is stopped. moby/moby#46213
Fix returning incorrect HTTP status codes for libnetwork errors. moby/moby#46146
Fix various issues with images/json API filters and image list. moby/moby#46034
CIFS volumes now resolves FQDN correctly. moby/moby#46863
Improve validation of the userland-proxy-path daemon configuration option. Validation now happens during daemon startup, instead of producing an error when starting a container with port-mapping. moby/moby#47000
Set the MAC address of container's interface when network mode is a short network ID. moby/moby#46406
Sort unconsumed build arguments before display in build output. moby/moby#45917
The docker image save tarball output is now OCI compliant. moby/moby#44598
The daemon no longer appends ACCEPT rules to the end of the INPUT iptables chain for encrypted overlay networks. Depending on firewall configuration, a rule may be needed to permit incoming encrypted overlay network traffic. moby/moby#45280
Unpacking layers with extended attributes onto an incompatible filesystem will now fail instead of silently discarding extended attributes. moby/moby#45464
Update daemon MTU option to BridgeConfig and display warning on Windows. moby/moby#45887
Validate IPAM config when creating a network. Automatically fix networks created prior to this release where --ip-range is larger than --subnet. moby/moby#45759
containerd image store: Add image events for push, pull, and save. moby/moby#46405
containerd image store: Add support for pulling legacy schema1 images. moby/moby#46513
containerd image store: Add support for pushing all tags. moby/moby#46485
containerd image store: Add support for registry token. moby/moby#46475
containerd image store: Add support for showing the number of containers that use an image. moby/moby#46511
containerd image store: Fix a bug related to the ONBUILD, MAINTAINER, and HEALTHCHECK Dockerfile instructions. moby/moby#46313
containerd image store: Fix Pulling from progress message. moby/moby#46494
containerd image store: Add support for referencing images via the truncated ID with sha256: prefix. moby/moby#46435
containerd image store: Fix docker images showing intermediate layers by default. moby/moby#46423
containerd image store: Fix checking if the specified platform exists when getting an image. moby/moby#46495
containerd image store: Fix errors when multiple ADD or COPY instructions were used with the classic builder. moby/moby#46383
containerd image store: Fix stack overflow errors when importing an image. moby/moby#46418
containerd image store: Improve docker pull progress output. moby/moby#46412
containerd image store: Print the tag, digest, and size after pushing an image. moby/moby#46384
containerd image store: Remove panic from UpdateConfig. moby/moby#46433
containerd image store: Return an error when an image tag resembles a digest. moby/moby#46492
containerd image store: docker image ls now shows the correct image creation time and date. moby/moby#46719
containerd image store: Fix an issue handling user namespace settings. moby/moby#46375
containerd image store: Add support for pulling all tags (docker pull -a). moby/moby#46618
containerd image store: Use the domain name in the image reference as the default registry authentication domain. moby/moby#46779

Packaging updates

Upgrade API to v1.44. moby/moby#45468
Upgrade Compose to 2.24.1. docker/docker-ce-packaging#980
Upgrade containerd to v1.7.12 (static binaries only). moby/moby#47070
Upgrade Go runtime to 1.21.6. moby/moby#47053
Upgrade runc to v1.1.11. moby/moby#47007
Upgrade BuildKit to v0.12.4. moby/moby#46882
Upgrade Buildx to v0.12.1. docker/docker-ce-packaging#979

Removed

API: Remove VirtualSize field for the GET /images/json and GET /images/{id}/json endpoints. moby/moby#45469
Remove deprecated devicemapper storage driver. moby/moby#43637
Remove deprecated orchestrator options. docker/cli#4366
Remove support for Debian Upstart init system. moby/moby#45548, moby/moby#45551
Remove the --oom-score-adjust daemon option. moby/moby#45484
Remove warning for deprecated ~/.dockercfg file. docker/cli#4281
Remove logentries logging driver. moby/moby#46925

Deprecated

Deprecate API versions older than 1.24. Deprecation notice
Deprecate IsAutomated field and is-automated filter for docker search. Deprecation notice
API: Deprecate Container and ContainerConfig properties for /images/{id}/json (docker image inspect). moby/moby#46939

`v24.0.9`

Compare Source

24.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE	Component	Fix version	Severity
CVE-2024-21626	runc	1.1.12	High, CVSS 8.6
CVE-2024-24557	Docker Engine	24.0.9	Medium, CVSS 6.9

Important

⚠️

Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit:

CVE-2024-23651

CVE-2024-23652

CVE-2024-23653

CVE-2024-23650

To address these vulnerabilities, upgrade to Docker Engine v25.0.2.

For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the
blog post. For details about each vulnerability, see the relevant security advisory:

Packaging updates

Upgrade runc to v1.1.12. moby/moby#47269
Upgrade containerd to v1.7.13 (static binaries only). moby/moby#47280

`v24.0.8`

Compare Source

24.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Live restore: Containers with auto remove (docker run --rm) are no longer forcibly removed on engine restart. moby/moby#46857

Packaging updates

Upgrade Go to go1.20.13. moby/moby#47054, docker/cli#4826, docker/docker-ce-packaging#975
Upgrade containerd (static binaries only) to v1.7.12 moby/moby#47096
Upgrade runc to v1.1.11. moby/moby#47010

`v24.0.7`

Compare Source

24.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Write overlay2 layer metadata atomically. moby/moby#46703
Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. moby/moby#46626
Fix dockerd-rootless-setuptools.sh when username contains a backslash. moby/moby#46407
Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when dockerd --bridge=none is used. moby/moby#46702
Fix a bug where cancelling an API request could interrupt container restart. moby/moby#46697
Fix an issue where containers would fail to start when providing --ip-range with a range larger than the subnet. docker/for-mac#6870
Fix data corruption with zstd output. moby/moby#46709
Fix the conditions under which the container's MAC address is applied. moby/moby#46478
Improve the performance of the stats collector. moby/moby#46448
Fix an issue with source policy rules ending up in the wrong order. moby/moby#46441

Packaging updates

Add support for Fedora 39 and Ubuntu 23.10. docker/docker-ce-packaging#940, docker/docker-ce-packaging#955
Fix docker.socket not getting disabled when uninstalling the docker-ce RPM package. docker/docker-ce-packaging#852
Upgrade Go to go1.20.10. docker/docker-ce-packaging#951
Upgrade containerd to v1.7.6 (static binaries only). moby/moby#46103
Upgrade the containerd.io package to v1.6.24.

Security

Deny containers access to /sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.

`v24.0.6`

Compare Source

24.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

containerd storage backend: Fix docker ps failing when a container image is no longer present in the content store. moby/moby#46095
containerd storage backend: Fix docker ps -s -a and docker container prune failing when a container image config is no longer present in the content store. moby/moby#46097
containerd storage backend: Fix docker inspect failing when a container image config is no longer (or was never) present in the content store. moby/moby#46244
containerd storage backend: Fix diff and export with the overlayfs snapshotter by using reference-counted rootfs mounts. moby/moby#46266
containerd storage backend: Fix a misleading error message when the image platforms available locally do not match the desired platform. moby/moby#46300
containerd storage backend: Fix the FROM scratch Dockerfile instruction with the classic builder. moby/moby#46302
containerd storage backend: Fix mismatched image rootfs and manifest layers errors with the classic builder. moby/moby#46310
Warn when pulling Docker Image Format v1, and Docker Image manifest version 2, schema 1 images from all registries. moby/moby#46290
Fix live-restore of volumes with custom volume options. moby/moby#46366
Fix incorrectly dropping capabilities bits when running a container as a non-root user (note: this change was already effectively present due to a regression). moby/moby#46221
Fix network isolation iptables rules preventing IPv6 Neighbor Solicitation packets from being exchanged between containers. moby/moby#46214
Fix dockerd.exe --register-service not working when the binary is in the current directory on Windows. moby/moby#46215
Add a hint suggesting the use of a PAT to docker login against Docker Hub. docker/cli#4500
Improve shell startup time for users of Bash completion for the CLI. docker/cli#4517
Improve the speed of some commands by skipping GET /_ping when possible. docker/cli#4508
Fix credential scopes when using a PAT to docker manifest inspect an image on Docker Hub. docker/cli#4512
Fix docker events not supporting --format=json. docker/cli#4544

Packaging updates

Upgrade Go to go1.20.7. moby/moby#46140, docker/cli#4476, docker/docker-ce-packaging#932
Upgrade containerd to v1.7.3 (static binaries only). moby/moby#46103
Upgrade Compose to v2.21.0. docker/docker-ce-packaging#936

`v24.0.5`

Compare Source

24.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

The Go client now avoids using UNIX socket paths in the HTTP Host: header, in order to be compatible with changes introduced in go1.20.6. moby/moby#45962, moby/moby#45990
containerd storage backend: Fix Variant not being included in docker image inspect and GET /images/{name}/json. moby/moby#46025
containerd storage backend: Prevent potential garbage collection of content during image export. moby/moby#46021
containerd storage backend: Prevent duplicate digest entries in RepoDigests. moby/moby#46014
containerd storage backend: Fix operations taking place against the incorrect tag when working with an image referenced by tag and digest. moby/moby#46013
containerd storage backend: Fix a panic caused by EXPOSE when building containers with the legacy builder. moby/moby#45921
Fix a regression causing unintuitive errors to be returned when attempting to create an overlay network on a non-Swarm node. moby/moby#45974
Properly report errors parsing volume specifications from the command line. docker/cli#4423
Fix a panic caused when auths: null is found in the CLI config file. docker/cli#4450

Packaging updates

Use init scripts as provided by moby/moby contrib/init. docker/docker-ce-packaging#914, docker/docker-ce-packaging#926
Drop Upstart from contrib/init. moby/moby#46044
Upgrade Go to go1.20.6. docker/cli#4428, moby/moby#45970, docker/docker-ce-packaging#921
Upgrade Compose to v2.20.2. docker/docker-ce-packaging#924
Upgrade buildx to v0.11.2. docker/docker-ce-packaging#922

`v24.0.4`

Compare Source

24.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fix a regression introduced during 24.0.3 that causes a panic during live-restore of containers with bind mounts. moby/moby#45903

`v24.0.3`

Compare Source

24.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

containerd image store: Fix an issue where multi-platform images that did not include a manifest for the default platform could not be interacted with. moby/moby#45849
containerd image store: Fix specious attempts to cache FROM scratch in container builds. moby/moby#45822
containerd image store: Fix docker cp with snapshotters that cannot mount the same content multiple times. moby/moby#45780, moby/moby#45786
containerd image store: Fix builds with type=image not being correctly unpacked/stored. moby/moby#45692
containerd image store: Fix incorrectly attempting to unpack pseudo-images (including attestations) in docker load. moby/moby#45688
containerd image store: Correctly set the user agent, and include additional information like the snapshotter when interacting with registries. moby/moby#45671, moby/moby#45684
containerd image store: Fix a failure to unpack already-pulled content after switching between snapshotters. moby/moby#45678
containerd image store: Fix images that have been re-tagged or with all tags removed being pruned while still in use. moby/moby#45857
Fix a Swarm CSI issue where the Topology field was not propagated into NodeCSIInfo. moby/moby#45810
Fix failures to add new Swarm managers caused by a very large raft log. moby/moby#45703, moby/swarmkit#3122, moby/swarmkit#3128
name_to_handle_at(2) is now always allowed in the default seccomp profile. moby/moby#45833
Fix an issue that prevented encrypted Swarm overlay networks from working on ports other than the default (4789). moby/moby#45637
Fix a failure to restore mount reference-counts during live-restore. moby/moby#45824
Fix various networking-related failures during live-restore. moby/moby#45658, moby/moby#45659
Fix running containers restoring with a zero (successful) exit status when the daemon is unexpectedly terminated. moby/moby#45801
Fix a potential panic while executing healthcheck probes. moby/moby#45798
Fix a panic caused by a race condition in container exec start. moby/moby#45794
Fix an exception caused by attaching a terminal to an exec with a non-existant command. moby/moby#45643
Fix host-gateway with BuildKit by passing the IP as a label (also requires docker/buildx#1894). moby/moby#45790
Fix an issue where POST /containers/{id}/stop would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. moby/moby#45774
Fix an issue where docker cp -a from the root (/) directory would fail. moby/moby#45748
Improve compatibility with non-runc container runtimes by more correctly setting resource constraint parameters in the OCI config. moby/moby#45746
Fix an issue caused by overlapping subuid/subgid ranges in certain configurations (e.g. LDAP) in rootless mode. moby/moby#45747, rootless-containers/rootlesskit#369
Greatly reduce CPU and memory usage while populating the Debug section of GET /info. moby/moby#45856
Fix an issue where debug information was not correctly printed during docker info when only the client is in debug mode. docker/cli#4393
Fix issues related to hung connections when connecting to hosts over a SSH connection. docker/cli#4395

Packaging updates

Upgrade Go to go1.20.5. moby/moby#45745, docker/cli#4351, docker/docker-ce-packaging#904
Upgrade Compose to v2.19.1. docker/docker-ce-packaging#916
Upgrade buildx to v0.11.1. docker/docker-ce-packaging#918

`v24.0.2`

Compare Source

24.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fix a panic during build when referencing locally tagged images. moby/buildkit#3899, moby/moby#45582
Fix builds potentially failing with exit code: 4294967295 when performing many concurrent build stages. moby/moby#45620
Fix DNS resolution on Windows ignoring etc/hosts (%WINDIR%\System32\Drivers\etc\hosts), including resolution of localhost. moby/moby#45562
Apply a workaround for a containerd bug that causes concurrent docker exec commands to take significantly longer than expected. moby/moby#45625
containerd image store: Fix an issue where the image Created field would contain an incorrect value. moby/moby#45623
containerd image store: Adjust the output of image pull progress so that the output has the same format regardless of whether the containerd image store is enabled. moby/moby#45602
containerd image store: Switching between the default and containerd image store now requires a daemon restart. moby/moby#45616

`v24.0.1`

Compare Source

24.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Removed

Remove CLI completions for storage drivers removed in the 24.0 major release. docker/cli#4302

Bug fixes and enhancements

Fix an issue where DNS query NXDOMAIN replies from external servers were forwarded to the client as SERVFAIL. moby/moby#45573
Fix an issue where docker pull --platform would report No such image regarding another tag pointing to the same image. moby/moby#45562
Fix an issue where insecure registry configuration would be forgotten during config reload. moby/moby#45571
containerd image store: Fix an issue where images which have no layers would not be listed in docker images -a moby/moby#45588
API: Fix an issue where GET /images/{id}/json would return null instead of empty RepoTags and RepoDigests. moby/moby#45564
API: Fix an issue where POST /commit did not accept an empty request body. moby/moby#45568

Packaging updates

Upgrade Compose to v2.18.1. docker/docker-ce-packaging#896

`v24.0.0`

Compare Source

24.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

Introduce experimental support for containerd as the content store (replacing the existing storage drivers). moby/moby#43735, other moby/moby pull requests
The --host CLI flag now supports a path component in a ssh:// host address, allowing use of an alternate socket path without configuration on the remote host. docker/cli#4073
The docker info CLI command now reports a version and platform field. docker/cli#4180
Introduce the daemon flag --default-network-opt to configure options for newly created networks. moby/moby#43197
Restrict access to AF_VSOCK in the socket(2) family of syscalls in the default seccomp profile. moby/moby#44562
Introduce support for setting OCI runtime annotations on containers. docker/cli#45025, moby/moby#45025
Alternative runtimes can now be configured in daemon.json, enabling runtime names to be aliased and options to be passed. moby/moby#45032
The docker-init binary will now be discovered in FHS-compliant libexec directories, in addition to the PATH. moby/moby#45198
API: Surface the daemon-level --no-new-privileges in GET /info. moby/moby#45320

Removed

docker info no longer reports IndexServiceAddress. docker/cli#4204
libnetwork: Remove fallback code for obsolete kernel versions. moby/moby#44684, moby/moby#44802
libnetwork: Remove unused code related to classic Swarm. moby/moby#44965
libnetwork: Remove usage of the xt_u32 kernel module from encrypted Swarm overlay networks. moby/moby#45281
Remove support for buildkit's deprecated buildinfo in favor of standard provenance attestations. moby/moby#45097
Remove the deprecated AUFS and legacy overlay storage drivers. moby/moby#45342, moby/moby#45359
Remove the deprecated overlay2.override_kernel_check storage driver option. moby/moby#45368
Remove workarounds for obsolete versions of apparmor_parser from the AppArmor profiles. moby/moby#45500
API: GET /images/json no longer represents empty RepoTags and RepoDigests as<none>:<none>/<none>@<none>. Empty arrays are be returned instead on API >= 1.43. moby/moby#45068

Deprecated

Deprecate the --oom-score-adjust daemon option. moby/moby#45315
API: Deprecate the VirtualSize field in GET /images/json and GET /images/{id}/json. moby/moby#45346

Bug fixes and enhancements

The docker stack command no longer validates the build section of Compose files. docker/cli#4214
Fix lingering healthcheck processes after timeout is reached. moby/moby#43739
Reduce the overhead of container startup when using the overlay2 storage driver. moby/moby#44285
API: Handle multiple before= and since= filters in GET /images. moby/moby#44503
Fix numerous bugs in the embedded DNS resolver implementation used by user-defined networks. moby/moby#44664
Add execDuration field to the map of event attributes. moby/moby#45494
Swarm-level networks can now be created with the Windows internal, l2bridge, and nat drivers. moby/swarmkit#3121, moby/moby#45291

Packaging updates

Update Go to 1.20.4. docker/cli#4253, moby/moby#45456
Update containerd to v1.7.1. moby/moby#45537
Update buildkit to v0.11.6. moby/moby#45367

`v23.0.10`

Compare Source

23.0.10

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

`v23.0.9`

Compare Source

23.0.9

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

`v23.0.8`

Compare Source

23.0.8

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug Fixes and Enhancements

Make one-shot stats faster. https://github.com/moby/moby/pull/46617
Fix "Rootful-in-Rootless" Docker-in-Docker on systemd >= 250. https://github.com/moby/moby/pull/46627
Add IP_NF_MANGLE to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46675
Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46704
Update github.com/klauspost/compress to v1.17.2 to fix data corruption with zstd output in "best". https://github.com/moby/moby/pull/46710

Packaging Updates

Update Go to 1.20.10. https://github.com/moby/moby/pull/46625
Update golang.org/x/net to v0.17.0. https://github.com/moby/moby/pull/46691

Security

Deny containers access to /sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.

`v23.0.7`

Compare Source

23.0.7

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug Fixes and Enhancements

Fix reloading the insecure-registries daemon configuration. https://github.com/moby/moby/pull/45572
Allow empty body for POST /commit again. https://github.com/moby/moby/pull/45569
Fix an issue which prevented encrypted overlay networks from functioning when the Swarm data path port is not set to 4789. https://github.com/moby/moby/pull/45638
Fix an issue with graceful container shutdown. https://github.com/moby/moby/pull/45775
Fix host-gateway support in docker build. https://github.com/moby/moby/pull/45791
Fix missing Topology in Swarm cluster volume NodeCSIInfo. https://github.com/moby/moby/pull/45809
seccomp: always allow name_to_handle_at(2). https://github.com/moby/moby/pull/45834
Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45825
client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45971
Fix an issue which prevented process capabilities from being retained when starting a container as a non-root user with --security-opt=no-new-privileges. https://github.com/moby/moby/pull/46222
Fixed a bug which caused named volumes that set custom device or type volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367
windows: fix --register-service when executed from within binary directory. https://github.com/moby/moby/pull/46216
Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46408

Packaging Updates

Update Go to 1.20.7. https://github.com/moby/moby/pull/46141
Update containerd to v1.6.22. https://github.com/moby/moby/pull/46104
Update runc to v1.1.9. https://github.com/moby/moby/pull/46229
Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46046

`v23.0.6`

Compare Source

23.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fix vfs storage driver not working on NFS. moby/moby#45465

Packaging Updates

Upgrade Go to 1.19.9. docker/docker-ce-packaging#889, docker/cli#4254, moby/moby#45455
Upgrade containerd to v1.6.21
Upgrade runc to v1.1.7

`v23.0.5`

Compare Source

23.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Add the --all / -a option when pruning volumes. docker/cli#4229
Add --format=json for docker info. docker/cli#4320
Fix log loss with the AWSLogs log driver. moby/moby#45350
Fix a regression introduced in v23.0.4 where dockerd would refuse to start if the fixed-cidr config parameter is provided but not bip. moby/moby#45403
Fix a panic in libnetwork during daemon start moby/moby#45376
Fix "tag" event not being sent when an image is built with buildx. moby/moby#45410

Packaging Updates

Upgrade Compose to 2.17.3. docker/docker-ce-packaging#883

`v23.0.4`

Compare Source

23.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fix a performance regression in Docker CLI 23.0.0 docker/cli#4141.
Fix progress indicator on docker cp not functioning as intended docker/cli#4157.
Fix shell completion for docker compose --file docker/cli#4177.
Fix an error caused by incorrect handling of "default-address-pools" in daemon.json moby/moby#45246.

Packaging Updates

Fix missing packages for CentOS 9 Stream.
Upgrade Go to 1.19.8. docker/docker-ce-packaging#878,
docker/cli#4164, moby/moby#45277,
which contains fixes for CVE-2023-24537,
CVE-2023-24538,
CVE-2023-24534,
and CVE-2023-24536

`v23.0.3`

Compare Source

23.0.3

Note

Due to an issue with CentOS 9 Stream's package repositories, packages for
CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later,
or as part of the next (23.0.4) patch release.

Bug fixes and enhancements

Fixed a number of issues that can cause Swarm encrypted overlay networks
to fail to uphold their guarantees, addressing CVE-2023-28841,
CVE-2023-28840, and
CVE-2023-28842.
- A lack of kernel support for encrypted overlay networks now reports
  as an error.
- Encrypted overlay networks are eagerly set up, rather than waiting for
  multiple nodes to attach.
- Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
  through the use of the xt_bpf kernel module.
- Users of Swarm overlay networks should review GHSA-vwm3-crmr-xfxw
  to ensure that unintentional exposure has not occurred.

Packaging Updates

Update containerd to v1.6.20.
Update runc to v1.1.5.

`v23.0.2`

Compare Source

23.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fully resolve missing checks for apparmor_parser when an AppArmor enabled kernel is detected. containerd/containerd#8087, moby/moby#45043
Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes CVE-2023-26054. moby/moby#45110
Fix anonymous volumes created by a VOLUME line in a Dockerfile being excluded from volume prune. moby/moby#45159
Fix a failure to properly propagate errors during removal of volumes on a Swarm node. moby/moby#45155
Temporarily work around a bug in BuildKit COPY --link by disabling mergeop/diffop optimization. moby/moby#45112
Properly clean up child tasks when a parent Swarm job is removed. moby/swarmkit#3112, moby/moby#45107
Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. moby/swarmkit#3082, moby/moby#45107
Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. moby/swarmkit#3116, moby/moby#45107
Fix a panic caused by log buffering in some configurations. containerd/fifo#47, moby/moby#45051
Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. moby/moby#45016
Fix a DNS resolution issue affecting containers created with --dns-opt or --dns-search when systemd-resolved is used outside the container. moby/moby#45000
Fix a panic when logging errors in handling DNS queries originating from inside a container. moby/moby#44980
Improve the speed of docker ps by allowing users to opt out of size calculations with --size=false. docker/cli#4107
Extend support for Bash completion to all plugins. docker/cli#4092
Fix docker stack deploy failing on Windows when special environment variables set by cmd.exe are present. docker/cli#4083
Add forward compatibility for future API versions by considering empty image tags to be the same as <none>. docker/cli#4065
Atomically write context files to greatly reduce the probability of corruption, and improve the error message for a corrupt context. docker/cli#4063

Packaging

Upgrade Go to 1.19.7. docker/docker-ce-packaging#857, docker/cli#4086, moby/moby#45137
Upgrade containerd to v1.6.19. moby/moby#45084, moby/moby#45099
Upgrade Buildx to v0.10.4. docker/docker-ce-packaging#855
Upgrade Compose to v2.17.2. docker/docker-ce-packaging#867

`v23.0.1`

Compare Source

23.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Fix containers not starting if the kernel has AppArmor enabled, but apparmor_parser is not available. moby/moby#44942
Fix BuildKit-enabled builds with inline caching causing the daemon to crash. moby/moby#44944
Fix BuildKit improperly loading cached layers created by previous versions. moby/moby#44959
Fix an issue where ipvlan networks created prior to upgrading would prevent the daemon from starting. moby/moby#44937
Fix the overlay2 storage driver failing early in metacopy testing when initialized on an unsupported backing filesystem. moby/moby#44922
Fix exec exit events being misinterpreted as container exits under some runtimes, such as Kata Containers. moby/moby#44892
Improve the error message returned by the CLI when recieving a truncated JSON response caused by the API hanging up mid-request. docker/cli#4004
Fix an incorrect CLI exit code when attempting to execute a directory with a runc compiled using Go 1.20. docker/cli#4004
Fix mishandling the size argument to --device-write-bps as a path. docker/cli#4004

Packaging

Add /etc/docker to RPM and DEB packaging. docker/docker-ce-packaging#842
- Not all use cases will benefit; if you depend on this, you should explicitly mkdir -p /etc/docker.
Upgrade Compose to v2.16.0. docker/docker-ce-packaging#844

`v23.0.0`

Compare Source

23.0.0

For more information about:

Deprecated and removed features, see Deprecated Engine Features.
Changes to the Engine API, see Engine API version history.

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

Set Buildx and BuildKit as the default builder on Linux. moby/moby#43992
- Alias docker build to docker buildx build. docker/cli#3314
- The legacy builder can still be used by explicitly setting DOCKER_BUILDKIT=0.
- There are differences in how BuildKit and the legacy builder handle multi-stage builds. For more information, see
  Multi-stage builds.
Add support for pulling zstd compressed layers. moby/moby#41759, moby/moby#42862
Add support for alternate OCI runtimes on Linux, compatible with the containerd runtime v2 API. moby/moby#43887, moby/moby#43993
Add support for the containerd runhcs shim on Windows (off by default). moby/moby#42089
Add dockerd --validate to check the daemon JSON config and exit. moby/moby#42393
Add the ability to configure the daemon's HTTP proxy via flags or JSON config. moby/moby#42835
Add support for RFC 3021 point-to-point networks (IPv4 /31s) and single hosts (IPv4 /32s). For networks with two or fewer addresses, IPAM won't reserve a network and broadcast address. moby/moby#42626
Add support for setting ipvlan_flag and using the l3s ipvlan_mode in the ipvlan network driver. moby/moby#42542
Add support for displaying the value of the metacopy option for the overlay2 storage driver. moby/moby#43557
Add support for describing Windows devices using the syntax IDType://ID. moby/moby#43368
Add RootlessKit, slirp4netns, and VPNKit version reporting. moby/moby#42330
Add experimental support for SwarmKit cluster volumes (CSI). moby/moby#41982
- CLI: Add cluster volume (CSI) options to docker volume. docker/cli#3606
- CLI: Add cluster volume (CSI) support to docker stack. docker/cli#3662
Add support for SwarmKit jobs in docker stack deploy. docker/cli#2907
Add the docker stack config command to output the merged and interpolated config files as utilized by stack deploy. docker/cli#3544
Add a new docker context show command that prints the name of the current context. docker/cli#3567
Add the --format=json shorthand variant of --format="{{ json . }}" to all commands supporting the --format flag. docker/cli#2936
Add a --quiet option to docker create and docker run commands to suppress output when pulling an image. docker/cli#3377
Add a --force option to docker network rm subcommand. Causes CLI to return a 0 exit code even if the network doesn't exist. Has no effect on the server-side procedure for removing a network. docker/cli#3547
Add a --signal option to docker stop and docker restart. docker/cli#3614
Add a -v/--version flag to docker-proxy. moby/moby#44703
Plugins are now discovered in well-known user-level paths when the daemon is running in rootless mode. moby/moby#44778
The daemon now handles common alternate JSON encodings in the JSON configuration file gracefully, and reports useful errors. moby/moby#44777, moby/moby#44832
- UTF-8 with a byte order mark is accepted.
- UTF-16 with a byte order mark is accepted.
- Invalid UTF-8 is reported early and with a comprehensible error message.
Allow use of STOPSIGNAL via docker commit. moby/moby#43369
Add a new option to the awslogs log driver to allow skipping log stream creation in CloudWatch. moby/moby#42132
Add a new option to the awslogs log driver to specify the log format that's sent to CloudWatch. moby/moby#42838
Add a new option to the fluentd log driver to set the reconnection interval. moby/moby#43100
Add new options-setters to the Go API client: WithTLSClientConfigFromEnv(), WithHostFromEnv(), and WithVersionFromEnv(). moby/moby#42224
Add generation of shell command completion through a docker completion subcommand. docker/cli#3429
API: Add a Swarm header to GET /_ping and HEAD /_ping, allowing single-request detection of Swarm support. moby/moby#42064
API: Add a signal parameter to POST /containers/{id}/stop and POST /containers/{id}/restart to set the signal used. moby/moby#43206
API: Add a CreateMountPoint parameter to POST /containers/create. moby/moby#43484
API: Add a shared-size parameter to GET /images/json to enable shared-size computation of images. moby/moby#42531
API: Add a type parameter to GET /system/df, to control what object types to are considered when computing disk usage. moby/moby#42559
systemd: Start docker.service after time-set.target. moby/moby#43107

Removed

Remove support for reading configuration from ~/.dockercfg. docker/cli#2504
- This location has been deprecated since 1.7.0.
- Deprecation notice
Remove the -g and --graph daemon options in favor of --data-root. docker/cli#3739
- These options have been hidden and deprecated since 17.05.
- Deprecation notice
Remove client-side sorting of results, in favor of the order in which the search API returns. docker/cli#3470
Remove warnings related to deprecated storage drivers from the CLI. Warnings are now handled by the daemon instead. docker/cli#3542
Remove Experimental client field from docker version. docker/cli#3543
- Deprecation notice
Require explicit opt-in to use deprecated storage drivers, and don't automatically select them when upgrading. moby/moby#43378
Remove deprecated support for overlay and overlay2 storage drivers on backing filesystems without d_type support. moby/moby#43472
- Deprecation notice
Remove the deprecated overrideKernelCheck option from the overlay2 storage driver. moby/moby#44279
Deprecation notice
Remove support for the deprecated io.containerd.runtime.v1.linux OCI runtime. moby/moby#43695
Remove LCOW (Linux Containers on Windows). moby/moby#42451, moby/moby#42499, moby/moby#42506, moby/moby#42511, moby/moby#42520, moby/moby#42683, moby/moby#42684, moby/moby#42685, moby/moby#43187
- LCOW was introduced as a technical preview in 17.09 and deprecated in 20.10.
- Deprecation notice
Remove daemon options related to legacy overlay networks used with standalone Swarm.
- Remove --cluster-xx options from dockerd. moby/moby#40383
- Remove host-discovery and overlay networks with external k/v stores. moby/moby#42247
- Deprecation notice
Remove a deprecated arm platform fallback. --platform linux/arm/vY will now return a error when arm/vY isn't available instead of pulling the wrong image. moby/moby#44414
Remove the deprecated SetCustomHTTPHeaders(), CustomHTTPHeaders() options-setters from the Go client API. moby/moby#42694
Remove the deprecated WithDialer() option-setter from the Go client API. moby/moby#44022
- Use WithDialContext() instead.
Remove the daemon implementation of opts.QuotedString. The implementation has moved to the CLI. moby/moby#43250
Remove separate daemon ID from trust-key in the daemon, and disable generating the trust-key. moby/moby#43555
API: Remove the deprecated KernelMemory option from POST /containers/create on API version >= 1.42. moby/moby#43214
- Deprecation notice

Deprecated

Require Windows Server RS5 / LTSC 2019 (build 17763) as the minimum to run the daemon. moby/moby#43254
Deprecate BuilderSize in API versions >= 1.42 moby/moby#42608
Deprecate BuildCache.Parent in favor of the newly introduced BuildCache.Parents in API version >= 1.42. moby/moby#43908
Deprecate pkg/urlutil, moving the implementation to builder/remotecontext/urlutil. moby/moby#43477

Upgrades

Upgrade Go to 1.19.5. docker/cli#3958, moby/moby#44794
Upgrade rootlesskit to v0.14.4. moby/moby#42708
Upgrade buildkit to v0.10.6. moby/moby#43239
Upgrade buildx to v0.10.2. docker/docker-ce-packaging#840
Upgrade swarmkit to v2.0.0-20230119195359-904c221ac281. moby/moby#44858
Upgrade containerd to v1.6.16. moby/moby#44766, moby/moby#44769, moby/moby#44881
Upgrade runc to v1.1.4. moby/moby#44039
Upgrade hcsshim v0.9.6. moby/moby#44658
The btrfs storage driver now depends on Linux kernel headers (>= 4.12) instead of headers from btrfs-progs. moby/moby#44776

Security

Change permissions on container hostconfig.json files to 0600 (was 0644). moby/moby#41620
Fix --seccomp-profile not accepting unconfined and renamed the default seccomp profile to builtin. moby/moby#42481
Always build with seccomp support, and remove the seccomp build tag. moby/moby#42501
Add seccomp support on riscv64. moby/moby#43553
Add support for setting flags passed to seccomp(2) in seccomp profiles. moby/moby#42648
Refactor seccomp types to reuse runtime-spec, and add support for ErrnoRet. moby/moby#42005
Add support for DefaultErrnoRet in seccomp profiles. moby/moby#42604
Add an explicit DefaultErrnoRet field to the default seccomp profile, with no behavior change. moby/moby#42649
Block socket with AF_VSOCK in the default seccomp profile. moby/moby#44563
Re-enable process_vm_readv and process_vm_writev in the default seccomp profile. moby/moby#42083
Add syscalls related to PKU to the default seccomp profile. moby/moby#43812
Allow clock_settime64 with CAP_SYS_TIME. moby/moby#43775
Allow bpf with CAP_BPF and perf_event_open with CAP_PERFMON. moby/moby#43988
Explicitly set the clone3 syscall to return ENOSYS in the default seccomp profile, in order to ensure glibc will correctly fallback to using clone. moby/moby#42681

Bug fixes and enhancements

Promote overlay2 to be the default storage driver (btrfs and zfs are now opt-in). moby/moby#42661
Add a loading spinner to the docker cp command. docker/cli#2708
Deprecate the ElectAuthServer function, and made it return the default registry without calling the GET /info API endpoint. docker/cli#2819
Progress bars are no longer reversed when rolling back Swarm services docker/cli#2940
Use net.JoinHostPort() to fix formatting with IPv6 addresses docker/cli#2972
CLI error messages are now printed to stderr. docker/cli#3044
Improve performance of docker info if a custom --format is used that only uses local information. With this change, the CLI only uses the daemon API if it detects that information from the daemon is needed. docker/cli#3179
Remove the default value from the --stop-signal flag, as it may not reflect the actual default used by the daemon. docker/cli#3245
Add Compose schema 3.10 to docker stack; allow omitting the version field (resulting in latest). docker/cli#3257
Compose version 3 is now equivalent to 3.x (latest) in docker stack. docker/cli#3445
Fix <Ctrl-c> hanging on Windows to exit after running a container in non-interactive mode. docker/cli#3302
Add relative source paths to the run command in the -v/--volume and -m/--mount flags. docker/cli#3469
docker exec -t now sets the console size for the executed process immediately when it's created. docker/cli#3627
Update the pretty-print format of docker info to provide more details on installed plugins. docker/cli#3645
Print warning messages for the docker context list and docker context use commands when the context is overridden by the environment. docker/cli#3668
Add a custom aliases annotation that can be used to print all available aliases for a command. docker/cli#3694
The CLI no longer creates or updates the CLI configuration file when running docker context use and selecting the current context. docker/cli#3721
Non-existing contexts are now ignored when running docker context rm --force. docker/cli#3791
Add the ability to override integers to 0 in Compose files docker/cli#3812
SIGINT (<Ctrl-c>) now passes through to running containers instead of causing the CLI to exit. docker/cli#3849
Improve docker port CONTAINER UX by sorting ports before printing. docker/cli#3892
API: GET /containers/{id}/logs and POST /containers/{id}/attach now report which raw-stream format is in use using the Content-type response header on API version >= 1.42. moby/moby#39812
Set default sandbox size for Windows layers to 127GB, and ensure that the --storage-opts flag applies to all storage on Windows. moby/moby#41636
Remove the plugin section from the containerd configuration file (/var/run/docker/containerd/containerd.toml). moby/moby#41675
Reject null manifests during tar import. moby/moby#41842
Add shim config for custom runtimes for plugins. moby/moby#41854
Container health checks now resume when the daemon is restarted. moby/moby#41935
Quota is no longer disabled on cleanup of the btrfs driver. moby/moby#42273
Host devices that are accessible can now be mounted in --privileged rootless containers. moby/moby#42638
Fix incorrect handling of **/foo recursive wildcard directory patterns in .dockerignore. moby/moby#42676
Extend docker import --platform to allow marking an imported image as a foreign architecture. moby/moby#43103
Validation of CPU real-time options is now performed when the daemon starts instead of performing validations for each individual container, allowing startup to fail early. moby/moby#43131
Freeze the namesgenerator package against new additions. Users will have to be satisfied with the existing 25359 adjective-name combinations. moby/moby#43210
API: containers/{id}/attach/ws only to streams according by stdin, stdout and stderr parameters on API version >= 1.42. moby/moby#43322
Fix UDP traffic in containers not working after the container is restarted under sustained traffic. moby/moby#43409
Add support for pulling images with custom amd64 micro-architecture feature levels as supported by the latest versions of Go, GCC, LLVM, and other compiler tools. moby/moby#43434
Improve validation of invalid JSON requests in the API. moby/moby#43463
Mitigate the impact of slow exec starts on health checks. Check timeout now only applies to the duration that the health check command is running. The time it takes to start the command no longer counts against the timeout. moby/moby#43480
Console tty size is set immediately on creation. moby/moby#43593, moby/moby#43622
Fix overlay2 mounts not being cleaned up after failed container starts, or daemon shutdown. moby/moby#43659
Match manifest list resolution with containerd. moby/moby#43675
Skip use of firewalld for networking when the daemon is running in rootless mode. moby/moby#43813
Custom NAT networks are now re-created after daemon restart if missing on Windows. moby/moby#43858
Fix terminating the container health-check process when it times out. moby/moby#43994
Fix live-restore with restart policies and volume refs. moby/moby#44237
API: Only anonymous volumes now pruned by default on API version >= v1.42. Pass the filter all=true to prune named volumes in addition to anonymous. moby/moby#44259
API: Support concurrent calls on the GET /system/df endpoint. moby/moby#42715
Improve the reliability of the daemon dumping the stack and exits with code 2 when sent a SIGQUIT. moby/moby#44831
Fix a rare deadlock in the daemon caused by buffering of container logs. moby/moby#44856
Improve error handling in misc filesystem operations so that the daemon can start on a overlayfs backing filesystem. moby/moby#44834
Fix an issue where --ipc=host wasn't handled correctly when the daemon is running in rootless mode. moby/moby#44863
Fix a long-standing set of issues where stale conntrack entries caused incorrect routing of UDP traffic for containers. moby/moby#44752
Fix half-registered containers being listed in the API, as well as a nil pointer de-reference and panic caused by using a partially registered container in API calls. moby/moby#44633
Fix a failure to create the DOCKER-USER ip6tables chain. moby/moby#44845
Fix a failure to clean up iptables rules when the ip6tables command isn't available. moby/moby#44727
Fix an issue where some iptables NAT rules weren't cleaned up after enabling the userland proxy. moby/moby#44811
Fix a potentially leaked process in rare situations where cleaning up a failed attempt to start a container was mishandled. moby/moby#44400
Fix the CreatedAt time of a volume reflecting initialization and not creation. moby/moby#44725
Fix an issue where the CLI incorrectly reported an incompatible server instead of an unreachable server in some commands. docker/cli#3901, docker/cli#3904
Fix broken completion of volumes in Zsh. docker/cli#2998
Improve output of docker context when an invalid context is present. docker/cli#3847
Remove ANSI decoration of CLI help annotations when the output isn't a TTY, and added a newline for readability. docker/cli#3973
Add docker container remove as an alias for docker container rm. docker/cli#3986

`v20.10.27`

Compare Source

v20.10.27

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug Fixes and Enhancements

Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46424
Add IP_NF_MANGLE to check-config.sh to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46674
Fix a deadlock in libnetwork which could prevent containers from starting. https://github.com/moby/moby/pull/46693
Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46705
Support building with Go 1.20. https://github.com/moby/moby/pull/46694 https://github.com/moby/moby/pull/46695 https://github.com/moby/moby/pull/46696

Packaging Updates

Update to go1.20.10, golang/org/x/net v0.17.0. https://github.com/moby/moby/pull/46692

Security

Deny containers access to /sys/devices/virtual/powercap by default. This change hardens against CVE-2020-8694, CVE-2020-8695, and CVE-2020-12912, and an attack known as the PLATYPUS attack. For more details, see advisory, commit.

`v20.10.26`

Compare Source

20.10.26

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug Fixes and Enhancements

Support filesystems which do not support extended file attributes with the VFS graph driver. https://github.com/moby/moby/pull/45466
Fix AppArmor profile docker-default /proc/sys rule. https://github.com/moby/moby/pull/45716
seccomp: always allow name_to_handle_at(2). https://github.com/moby/moby/pull/45835
Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45840
client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45972
windows: fix --register-service when executed from within binary directory. https://github.com/moby/moby/pull/46217

Packaging Updates

Update Go to 1.19.12. https://github.com/moby/moby/pull/46142
Update containerd to v1.6.22. https://github.com/moby/moby/pull/46105
Update runc to v1.1.8. https://github.com/moby/moby/pull/46031
Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46047

`v20.10.25`

Compare Source

Bug fixes and enhancements

Fix log loss with the AWSLogs log driver https://github.com/moby/moby/pull/45349
Upgrade github.com/docker/libnetwork https://github.com/moby/moby/pull/45398
- Fix a panic in libnetwork during daemon start https://github.com/moby/libnetwork/pull/2677
- Fix a deadlock which can occur when attaching and detaching containers from a network https://github.com/moby/libnetwork/pull/2674

Packaging Updates

Update Go runtime to 1.19.9
Update containerd to v1.6.20
Update runc to v1.1.5

`v20.10.24`

Compare Source

20.10.24

Bug fixes and enhancements

Fixed a number of issues that can cause Swarm encrypted overlay networks
to fail to uphold their guarantees, addressing CVE-2023-28841,
CVE-2023-28840, and
CVE-2023-28842.
- A lack of kernel support for encrypted overlay networks now reports
  as an error.
- Encrypted overlay networks are eagerly set up, rather than waiting for
  multiple nodes to attach.
- Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9
  through the use of the xt_bpf kernel module.
- Users of Swarm overlay networks should review GHSA-vwm3-crmr-xfxw
  to ensure that unintentional exposure has not occurred.
Upgrade github.com/containerd/fifo to v1.1.0 to fix a potential panic moby/moby#45216.
Fix missing Bash completion for installed cli-plugins docker/cli#4091.

Packaging Updates

Update Go runtime to 1.19.7.
Update Docker Buildx to v0.10.4.
Update containerd to v1.6.20.
Update runc to v1.1.5.

`v20.10.23`

Compare Source

Bug fixes and enhancements

Fix an issue where docker build would fail when using --add-host=host.docker.internal:host-gateway
with BuildKit enabled moby/moby#44650.
Revert seccomp: block socket calls to AF_VSOCK in default profile moby/moby#44712.
This change, while favorable from a security standpoint, caused a change
in behavior for some use-cases. As such, we are reverting it to ensure
stability and compatibility for the affected users.

However, users of AF_VSOCK in containers should recognize that this
(special) address family is not currently namespaced in any version of
the Linux kernel, and may result in unexpected behavior, like containers
communicating directly with host hypervisors.

Future releases, will filter AF_VSOCK. Users who need to allow containers
to communicate over the unnamespaced AF_VSOCK will need to turn off seccomp
confinement or set a custom seccomp profile.

Packaging Updates

Update Docker Compose to v2.15.1.
Update Docker Buildx to v0.10.0.
Update containerd (containerd.io package) to v1.6.15.
Update the package versioning format for docker-compose-cli to allow distro version updates docker/docker-ce-packaging#822.
Update Go runtime to 1.18.10.

go-git/go-git

`v5.12.0`

Compare Source

What's Changed

git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by @moranCohen26 in https://github.com/go-git/go-git/pull/994
git: Signer: fix usage of crypto.Signer interface by @wlynch in https://github.com/go-git/go-git/pull/1029
git: Remote, fetch, adds the prune option. by @juliens in https://github.com/go-git/go-git/pull/366
git: Add crypto.Signer option to CommitOptions. by @wlynch in https://github.com/go-git/go-git/pull/996
git: Worktree checkout tag hash id (#959) by @aymanbagabas in https://github.com/go-git/go-git/pull/966
git: Worktree, Don't panic on empty or root path when checking if it is valid by @tim775 in https://github.com/go-git/go-git/pull/1042
git: Add commit validation for Reset by @pjbgf in https://github.com/go-git/go-git/pull/1048
git: worktree_commit, Fix amend commit to apply changes. Fixes #1024 by @onee-only in https://github.com/go-git/go-git/pull/1045
git: Implement Merge function with initial FastForwardMerge support by @pjbgf in https://github.com/go-git/go-git/pull/1044
plumbing: object, Make first commit visible on logs filtered with filename. Fixes #191 by @onee-only in https://github.com/go-git/go-git/pull/1036
plumbing: no panic in printStats function. Fixes #177 by @nodivbyzero in https://github.com/go-git/go-git/pull/971
plumbing: object, Optimize logging with file. by @onee-only in https://github.com/go-git/go-git/pull/1046
plumbing: object, check legitimacy in (*Tree).Encode by @niukuo in https://github.com/go-git/go-git/pull/967
plumbing: format/gitattributes, close file in ReadAttributesFile by @prskr in https://github.com/go-git/go-git/pull/1018
plumbing: check setAuth error. Fixes #185 by @nodivbyzero in https://github.com/go-git/go-git/pull/969
plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by @Jerry-yz in https://github.com/go-git/go-git/pull/987
utils: merkletrie, calculate filesystem node's hash lazily. by @candid82 in https://github.com/go-git/go-git/pull/825
utils: update comment in node.go's Hash() by @codablock in https://github.com/go-git/go-git/pull/992
_example: fix 404 link and added ssh-agent clone link by @grinish21 in https://github.com/go-git/go-git/pull/1022
_example: checkout-branch example by @dlambda in https://github.com/go-git/go-git/pull/446
_example: example for git clone using ssh-agent by @pjbgf in https://github.com/go-git/go-git/pull/998

New Contributors

@candid82 made their first contribution in https://github.com/go-git/go-git/pull/825
@codablock made their first contribution in https://github.com/go-git/go-git/pull/992
@Jerry-yz made their first contribution in https://github.com/go-git/go-git/pull/987
@wlynch made their first contribution in https://github.com/go-git/go-git/pull/996
@moranCohen26 made their first contribution in https://github.com/go-git/go-git/pull/994
@grinish21 made their first contribution in https://github.com/go-git/go-git/pull/1022
@prskr made their first contribution in https://github.com/go-git/go-git/pull/1018
@dlambda made their first contribution in https://github.com/go-git/go-git/pull/446
@juliens made their first contribution in https://github.com/go-git/go-git/pull/366
@onee-only made their first contribution in https://github.com/go-git/go-git/pull/1036
@tim775 made their first contribution in https://github.com/go-git/go-git/pull/1042
@niukuo made their first contribution in https://github.com/go-git/go-git/pull/967
@avoidalone made their first contribution in https://github.com/go-git/go-git/pull/1047

Full Changelog: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0

`v5.11.0`

Compare Source

What's Changed

git: validate reference names (#929) by @aymanbagabas in https://github.com/go-git/go-git/pull/950
git: stop iterating at oldest shallow when pulling. Fixes #305 by @dhoizner in https://github.com/go-git/go-git/pull/939
plumbing: object, enable renames in getFileStatsFromFilePatches by @djmoch in https://github.com/go-git/go-git/pull/941
storage: filesystem, Add option to set a specific FS for alternates by @pjbgf in https://github.com/go-git/go-git/pull/953
Align worktree validation with upstream and remove build warnings by @pjbgf in https://github.com/go-git/go-git/pull/958

New Contributors

@dhoizner made their first contribution in https://github.com/go-git/go-git/pull/939
@djmoch made their first contribution in https://github.com/go-git/go-git/pull/941

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0

`v5.10.1`

Compare Source

What's Changed

Worktree, ignore ModeSocket files by @steiler in https://github.com/go-git/go-git/pull/930
git: add tracer package by @aymanbagabas in https://github.com/go-git/go-git/pull/916
remote: Flip clause for fast-forward only check by @adityasaky in https://github.com/go-git/go-git/pull/875
plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes #900 by @anandf in https://github.com/go-git/go-git/pull/901
plumbing: uppload-server-info, implement upload-server-info by @aymanbagabas in https://github.com/go-git/go-git/pull/896
plumbing: optimise memory consumption for filesystem storage by @pjbgf in https://github.com/go-git/go-git/pull/799
plumbing: format/packfile, Refactor patch delta by @pjbgf in https://github.com/go-git/go-git/pull/908
plumbing: fix empty uploadpack request error by @aymanbagabas in https://github.com/go-git/go-git/pull/932
plumbing: transport/git, Improve tests error message by @pjbgf in https://github.com/go-git/go-git/pull/752
plumbing: format/pktline, Respect pktline error-line errors by @aymanbagabas in https://github.com/go-git/go-git/pull/936
utils: remove ioutil.Pipe and use std library io.Pipe by @aymanbagabas in https://github.com/go-git/go-git/pull/922
utils: move trace to utils by @aymanbagabas in https://github.com/go-git/go-git/pull/931
cli: separate go module for cli by @aymanbagabas in https://github.com/go-git/go-git/pull/914
build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in https://github.com/go-git/go-git/pull/887
build: bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/go-git/go-git/pull/891
build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by @dependabot in https://github.com/go-git/go-git/pull/888
build: bump actions/checkout from 3 to 4 by @dependabot in https://github.com/go-git/go-git/pull/890
build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by @dependabot in https://github.com/go-git/go-git/pull/907
build: bump golang.org/x/text from 0.13.0 to 0.14.0 by @dependabot in https://github.com/go-git/go-git/pull/906
build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @dependabot in https://github.com/go-git/go-git/pull/917
build: bump golang.org/x/net from 0.17.0 to 0.18.0 by @dependabot in https://github.com/go-git/go-git/pull/918

New Contributors

@anandf made their first contribution in https://github.com/go-git/go-git/pull/901
@steiler made their first contribution in https://github.com/go-git/go-git/pull/930

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1

`v5.10.0`

Compare Source

What's Changed

PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by @ThinkChaos in https://github.com/go-git/go-git/pull/782
Worktree, apply ProxyOption on Pull by @nodivbyzero in https://github.com/go-git/go-git/pull/840
Repository: add clone --shared feature by @enverbisevac in https://github.com/go-git/go-git/pull/860
build: Add github workflow to check commit message format by @pjbgf in https://github.com/go-git/go-git/pull/867
Improve handling of remote errors by @makkes in https://github.com/go-git/go-git/pull/866
build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in https://github.com/go-git/go-git/pull/873
plumbing: commitgraph, Add generation v2 support by @zeripath in https://github.com/go-git/go-git/pull/869
plumbing: protocol/packp, Add validation for decodeLine by @pjbgf in https://github.com/go-git/go-git/pull/868
plumbing: parse the encoding header of the commit object by @liwenqiu in https://github.com/go-git/go-git/pull/761
plumbing: commitgraph, allow SHA256 commit-graphs by @zeripath in https://github.com/go-git/go-git/pull/853
plumbing: commitgraph, Allow reading commit-graph chains by @zeripath in https://github.com/go-git/go-git/pull/854
plumbing/object: Support mergetag in merge commits by @adityasaky in https://github.com/go-git/go-git/pull/847

New Contributors

@nodivbyzero made their first contribution in https://github.com/go-git/go-git/pull/840
@adityasaky made their first contribution in https://github.com/go-git/go-git/pull/847
@hezhizhen made their first contribution in https://github.com/go-git/go-git/pull/836
@0x34d made their first contribution in https://github.com/go-git/go-git/pull/855
@liwenqiu made their first contribution in https://github.com/go-git/go-git/pull/761
@enverbisevac made their first contribution in https://github.com/go-git/go-git/pull/860
@makkes made their first contribution in https://github.com/go-git/go-git/pull/866

Full Changelog: https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0

`v5.9.0`

Compare Source

What's Changed

git: worktree: add Amend option to CommitOptions by @john-cai in https://github.com/go-git/go-git/pull/438
git: worktree, reset ignored files that are part of the worktree: Fixes #819 by @daolis in https://github.com/go-git/go-git/pull/821
plumbing: Do not swallow http message coming from VCS providers by @matejrisek in https://github.com/go-git/go-git/pull/835
plumbing: transport, handle IPv6 while parsing endpoint. Fixes #740 by @ninedraft in https://github.com/go-git/go-git/pull/820
*: update goproxy dependency to fix CVE-2023-37788 vulnerability by @svghadi in https://github.com/go-git/go-git/pull/832
*: bump dependencies and Go to 1.19 by @pjbgf in https://github.com/go-git/go-git/pull/837

New Contributors

@svghadi made their first contribution in https://github.com/go-git/go-git/pull/832
@daolis made their first contribution in https://github.com/go-git/go-git/pull/821

Full Changelog: https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0

`v5.8.1`

Compare Source

What's Changed

*: Bump dependencies by @pjbgf in https://github.com/go-git/go-git/pull/815

Full Changelog: https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1

`v5.8.0`

Compare Source

What's Changed

git: Fix fetching after shallow clone. Fixes #305 by @AriehSchneier in https://github.com/go-git/go-git/pull/778
git: enable fetch with unqualified references by @AriehSchneier in https://github.com/go-git/go-git/pull/762
git: don't add to want if exists, shallow and depth 1 by @AriehSchneier in https://github.com/go-git/go-git/pull/763
git: Clone HEAD should not force master. Fixes #363 by @AriehSchneier in https://github.com/go-git/go-git/pull/758
git: fix the issue with submodules having the SCP style URL fail due to the wrong URL parsing by @matejrisek in https://github.com/go-git/go-git/pull/756
git: add a clone option to allow for shallow cloning of submodules by @matejrisek in https://github.com/go-git/go-git/pull/765
worktree: minor speedup for doAddDirectory by @ThinkChaos in https://github.com/go-git/go-git/pull/702
_examples: Remove wrong comment by @pascal-hofmann in https://github.com/go-git/go-git/pull/357
*: Handle paths starting with tilde by @ricci2511 in https://github.com/go-git/go-git/pull/808
*: Handle paths starting with ~Username by @AriehSchneier in https://github.com/go-git/go-git/pull/809
storage: filesystem/dotgit, add support for tmp_objdir prefix by @L11R in https://github.com/go-git/go-git/pull/812
plumbing: gitignore, replace user dir in path by @Jleagle in https://github.com/go-git/go-git/pull/772
plumbing: gitignore, fix incorrect parsing. Fixes #500 by @AriehSchneier in https://github.com/go-git/go-git/pull/781
plumbing: http, Fix empty repos on Git v2.41+ by @pjbgf in https://github.com/go-git/go-git/pull/802
plumbing: packp, A request is not empty if it contains shallows. Fixes #328 by @AriehSchneier in https://github.com/go-git/go-git/pull/792
plumbing: blame, Complete rewrite. Fixes #603 by @AriehSchneier in https://github.com/go-git/go-git/pull/789
plumbing: gitignore, Allow gitconfig to contain a gitignore relative to any user home. Fixes #578 by @AriehSchneier in https://github.com/go-git/go-git/pull/785

New Contributors

@Jleagle made their first contribution in https://github.com/go-git/go-git/pull/772
@pascal-hofmann made their first contribution in https://github.com/go-git/go-git/pull/357
@ricci2511 made their first contribution in https://github.com/go-git/go-git/pull/808
@L11R made their first contribution in https://github.com/go-git/go-git/pull/812

Full Changelog: https://github.com/go-git/go-git/compare/v5.7.0...v5.7.1

`v5.7.0`

Compare Source

What's Changed

*: Add support for initializing SHA256 repositories by @pjbgf in https://github.com/go-git/go-git/pull/707
git: add mirror clone option by @aymanbagabas in https://github.com/go-git/go-git/pull/735
git: Add support to ls-remote with peeled references. Fixes #749 by @pjbgf in https://github.com/go-git/go-git/pull/750
git: fix cloning with branch name by @AriehSchneier in https://github.com/go-git/go-git/pull/755
git: Worktree, add check to see if file already checked in. Fixes #718 by @cbbm142 in https://github.com/go-git/go-git/pull/719
git: Worktree, git grep bare repositories by @aymanbagabas in https://github.com/go-git/go-git/pull/728
git: Add Depth to SubmoduleUpdateOptions by @matejrisek in https://github.com/go-git/go-git/pull/754
git: Testing, Fix tests not cleaning temp folders by @AriehSchneier in https://github.com/go-git/go-git/pull/769
git: remote, add support for a configurable timeout. by @andrewpollock in https://github.com/go-git/go-git/pull/753
git: Allow Initial Branch to be configurable by @techknowlogick in https://github.com/go-git/go-git/pull/764
storage: filesystem/dotgit, Improve load packed-refs by @fcharlie in https://github.com/go-git/go-git/pull/743
storage: filesystem, Populate index before use. Fixes #148 by @AriehSchneier in https://github.com/go-git/go-git/pull/722
plumbing: resolve non-external delta references by @ZauberNerd in https://github.com/go-git/go-git/pull/485
plumbing/transport: fix regression in scp-like match by @jotadrilo in https://github.com/go-git/go-git/pull/715
plumbing/transport: Add support for custom proxy settings by @aryan9600 in https://github.com/go-git/go-git/pull/744
*: small fixes across the codebase by @pjbgf in https://github.com/go-git/go-git/pull/770
*: bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in https://github.com/go-git/go-git/pull/776
*: bump dependencies by @pjbgf in https://github.com/go-git/go-git/pull/748
*: bump Go version to 1.18 on go.mod by @pjbgf in https://github.com/go-git/go-git/pull/774
*: add Codeql workflow and bump dependencies by @pjbgf in https://github.com/go-git/go-git/pull/775
ci: fix upstream git build for master branch by @pjbgf in https://github.com/go-git/go-git/pull/739

New Contributors

@ZauberNerd made their first contribution in https://github.com/go-git/go-git/pull/485
@jotadrilo made their first contribution in https://github.com/go-git/go-git/pull/715
@fcharlie made their first contribution in https://github.com/go-git/go-git/pull/743
@AriehSchneier made their first contribution in https://github.com/go-git/go-git/pull/755
@cbbm142 made their first contribution in https://github.com/go-git/go-git/pull/719
@aryan9600 made their first contribution in https://github.com/go-git/go-git/pull/744
@matejrisek made their first contribution in https://github.com/go-git/go-git/pull/754
@andrewpollock made their first contribution in https://github.com/go-git/go-git/pull/753
@techknowlogick made their first contribution in https://github.com/go-git/go-git/pull/764

Full Changelog: https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0

`v5.6.1`

Compare Source

What's Changed

plumbing/transport: don't use the firstErrLine when it is empty by @ThinkChaos in https://github.com/go-git/go-git/pull/682
plumbing/transport: ssh, unable to pass a custom HostKeyCallback func by @aymanbagabas in https://github.com/go-git/go-git/pull/655
storage/filesystem: dotgit: fix a filesystem race in Refs/walkReferencesTree by @MichaelMure in https://github.com/go-git/go-git/pull/659
*: bump golang.org/x/net from 0.2.0 to 0.7.0 by @dependabot in https://github.com/go-git/go-git/pull/684
*: bump dependencies by @pjbgf in https://github.com/go-git/go-git/pull/697
*: fix panic for empty revisions by @pjbgf in https://github.com/go-git/go-git/pull/696
ci: bump GitHub actions, enable go test race detection and stop using developer's GPG keys during test execution by @pjbgf in https://github.com/go-git/go-git/pull/701

Full Changelog: https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1

`v5.6.0`

Compare Source

What's Changed

Worktree, check for empty parent dirs during Reset (Fixes #670) by @mbohy in https://github.com/go-git/go-git/pull/671
*: remove need to build with CGO by @pjbgf in https://github.com/go-git/go-git/pull/688
plumbing: support SSH/X509 signed tags by @hiddeco in https://github.com/go-git/go-git/pull/690

Full Changelog: https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0

google/uuid

`v1.6.0`

Compare Source

Features

add Max UUID constant (#149) (c58770e)

Bug Fixes

fix typo in version 7 uuid documentation (#153) (016b199)
Monotonicity in UUIDv7 (#150) (a2b2b32)

`v1.5.0`

Compare Source

Features

Validate UUID without creating new UUID (#141) (9ee7366)

`v1.4.0`

Compare Source

Features

UUIDs slice type with Strings() convenience method (#133) (cd5fbbd)

Fixes

Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

`v1.3.1`

Compare Source

Bug Fixes

Use .EqualFold() to parse urn prefixed UUIDs (#118) (574e687)

moby/buildkit

`v0.13.1`

Compare Source

buildkit 0.13.1

Welcome to the 0.13.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable Changes

Fix handling of deleted blobs when importing cache from Github Actions cache backend #4771
Fix unclean shutdown error on WCOW on Ctrl-C #4774
Mitigate issue with mounting OpenTelemetry socket in containers in some installations #4778
Fix parsing ./.git source path as Git URL. #4776

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.13.0

`v0.13.0`

Compare Source

buildkit 0.13.0

Welcome to the 0.13.0 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
CrazyMax
Justin Chadwell
Sebastiaan van Stijn
Akihiro Suda
Jonathan A. Sternberg
Kohei Tokunaga
David Karlsson
Leandro Santiago
Gabriel Adrian Samfira
Chris Goller
Anthony Nandaa
Erik Sipsma
Paweł Gronowski
Jakub Ciolek
Paul "TBBle" Hampson
Brian Goff
Adrien Delorme
Artem Khramov
Nguyễn Đức Chiến
Aaron Lehmann
Dan Duvall
Mark Yen
Milas Bowman
Tristan Stenner
Yan Song
Ahmon Dancy
Alex Couture-Beil
Alex Suraci
Arnaldo Garcia Rincon
Austin Vazquez
Bjorn Neergaard
Brennan Kinney
Bunyamin Dokmetas
Burt Holzman
Dennis Haney
Derek McGowan
Erik McKelvey
Frank Villaro-Dixon
Grégoire Payen de La Garanderie
Guilhem Charles
Ian King'ori
James Carnegie
Kazuyoshi Kato
Reshen
Sascha Hemleb
Tibor Vass
Zhizhen He
fanjiyun.fjy
frankyang
guangwu
liulanzheng
njucjc
omahs
retornam
x893675
yumemio
yzewei
蝦米

Notable Changes

Default Dockerfile frontend has been updated to v1.7.0
Experimental Windows Containers support is now available with containerd worker. Windows release artifacts now also contain the buildkitd.exe binary. #3518 #3517 #4494 #4479 #4432 #4387 #4364 #4670 #4692 docs
Multiple exporters(outputs) can now be specified with a single build request #4134
New option rewrite-timestamps is available when exporting images that with convert files in exported layers according to the epoch time for reproducible builds #4057 docs
There is a new bridge network mode --oci-worker-net=bridge that can be used to set up CNI bridge networking with no external dependencies for better network isolation of build containers. It is expected that v0.14.0 release will enable this network mode by default. #4352 #4650 #4539
SOURCE_DATE_EPOCH in now not applied to the layer records of the base image to keep them immutable #4663
Github Actions cache backend now supports defining timeout in case the service gets rate-limited #4702
Gateway API has a new method ResolveSourceMeta that will replace the previous ResolveImageConfig method. The new method works with all LLB source types, not just images, and correctly handles policy conversions between sources. #4563 #4647
When using host networking, local host DNS routes can also be used instead of the default #4524
Changing cache mount's ID property does not invalidate cache for the build step anymore #4585
Basic metrics support has been added via OpenTelemetry and Prometheus #4460
Token cache is no longer shared between parallel push requests #3592
Update insecure registry fallback logic to only fallback with previous host #4613
Build secrets can now avoid noexec mount restrictions if file mode set execution bit #4670
GRPC socket for OpenTelemetry tracing now defaults to runtime directory path #4078 #4619
LLB API now has new options to directly control how different mounts for container steps are cached #4624
Cancellation and timeout errors should now contain better stacktraces on --debug mode #4587 #4457
Edge case of empty multiplatform build result does not generate errors anymore #4526
Prune command now avoids taking database lock for a long time if deletion takes too much time #4413
Healthcheck service has been added to Control API #4145
Buildctl has new quiet and rawjson progress mode #4213 #4113
Buildctl has new --debug-json-cache-metrics debug option #4464
Buildctl now supports --registry-auth-tlscontext flag for controlling the client authentication requests #4420 #4211
Buildctl now propagates SOURCE_DATE_EPOCH to build arg automatically if it is defined #4231
LLB client now allows exposing local sources via FS interface instead of local path #4094
Ensure only one platform is pulled on resolving image config, even if multiple match #4311
Rootless version supports new --detach-netns mode #4546
Update default CNI config path for rootless mode to ~/.config/buildkit/cni.json #4547
Ensure correct pinned commit is checked out if tags that have same path components #4473
Exporting caches for results with no layers is now skipped in OCI structures #4336
New debugging options have been added to the scheduler component #4410
Improve error messages on StatFile requests #4321
Daemon logs can now be exported in JSON format #4044
Qemu emulation for loongarch64 is now detected if available #4392
Number of log lines per build step on TTY mode can now be configured with BUILDKIT_TTY_LOG_LINES #4284
Empty OnBuild value is now omitted from image config #4648
Fixes for bridge networking on Rootless mode #4655
Fix possible "missing lease requirement" error on canceling one of parallel exports #4529
Fix file permissions error if ADD <tar.gz> used with User namespace #4712
Fix possible permission error when using custom frontends with User namespace on certain systems #4714
Fixes for merging parallel build steps that generate the same cache keys #4559 #4285
Fix processing result map in LLB API if the evaluate option is set to true #4544
Fix hardlink issue with whiteout deletes in the merge snapshotter #4516
Fix issue with caching multiple mounts originating from the same source #4270 #4281
Fix possible panic condition on deleting history records #4451
Fix issue where same source image layer chains could end up in the provenance attestation multiple times #4433
Fix possible pull error caused by previous cache #4428
Fix possible data race on transfer progress handling #4726
Fix issues where session messages could grow bigger than maximum message size when transferring SBOM to client #4313
Fix issue where specific build steps could drop progress messages #4347
Fix possible wrong usage statitics in merged snapshotters #4389
Fix possible storage leak for compression variants #4353
Fix handling of certain SSH Git URLs #4326
Fix possible missing blob error on mapping files to SBOM packages #4210
Fix diffing layers when custom Gzip compression level is set #4275
Fix possible panic with stargz snapshotter #4187
Fix generation of cache checksums for Merge and Diff operations #4192
Fix possible negative pull time in progressbar on parallel pulls #4183
Fix handling of missing files in LLB File remove API #4051

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 43070de -> ced1acd
github.com/AdamKorcz/go-118-fuzz-build 5330a85 -> 8075edf
github.com/Microsoft/hcsshim v0.10.0-rc.8 -> v0.11.4
github.com/aws/aws-sdk-go-v2 v1.17.6 -> v1.24.1
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 -> v1.5.4
github.com/aws/aws-sdk-go-v2/config v1.18.16 -> v1.26.6
github.com/aws/aws-sdk-go-v2/credentials v1.13.16 -> v1.16.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.12.24 -> v1.14.11
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.56 -> v1.15.15
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.30 -> v1.2.10
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.24 -> v2.5.10
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.31 -> v1.7.3
github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.22 -> v1.2.10
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 -> v1.10.4
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.25 -> v1.2.10
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.24 -> v1.10.10
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.13.24 -> v1.16.10
github.com/aws/aws-sdk-go-v2/service/s3 v1.30.6 -> v1.48.1
github.com/aws/aws-sdk-go-v2/service/sso v1.12.5 -> v1.18.7
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.5 -> v1.21.7
github.com/aws/aws-sdk-go-v2/service/sts v1.18.6 -> v1.26.7
github.com/aws/smithy-go v1.13.5 -> v1.19.0
github.com/cenkalti/backoff/v4 v4.2.0 -> v4.2.1
github.com/containerd/console v1.0.3 -> v1.0.4
github.com/containerd/containerd v1.7.2 -> v1.7.13
github.com/containerd/continuity v0.4.1 -> v0.4.3
github.com/containerd/fuse-overlayfs-snapshotter v1.0.2 -> v1.0.8
github.com/containerd/log v0.1.0 new
github.com/containerd/nydus-snapshotter v0.8.2 -> v0.13.7
github.com/containerd/stargz-snapshotter v0.14.3 -> v0.15.1
github.com/containerd/stargz-snapshotter/estargz v0.14.3 -> v0.15.1
github.com/containernetworking/plugins v1.4.0 new
github.com/distribution/reference v0.5.0 new
github.com/docker/cli v24.0.4 -> v25.0.3
github.com/docker/docker 8e51b8b -> v25.0.3
github.com/docker/docker-credential-helpers v0.7.0 -> v0.8.0
github.com/docker/go-connections v0.4.0 -> v0.5.0
github.com/felixge/fgprof v0.9.3 new
github.com/felixge/httpsnoop v1.0.3 -> v1.0.4
github.com/go-logr/logr v1.2.3 -> v1.3.0
github.com/golang-jwt/jwt/v4 v4.4.2 -> v4.5.0
github.com/google/go-cmp v0.5.9 -> v0.6.0
github.com/google/pprof e72429f new
github.com/google/uuid v1.3.0 -> v1.5.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 -> v2.16.0
github.com/hanwen/go-fuse/v2 v2.2.0 -> v2.4.0
github.com/hashicorp/go-retryablehttp v0.7.2 -> v0.7.5
github.com/klauspost/compress v1.17.2 -> v1.17.4
github.com/moby/docker-image-spec v1.3.1 new
github.com/moby/patternmatcher v0.5.0 -> v0.6.0
github.com/moby/sys/mountinfo v0.6.2 -> v0.7.1
github.com/moby/sys/user v0.1.0 new
github.com/moby/term v0.5.0 new
github.com/opencontainers/image-spec v1.1.0-rc3 -> v1.1.0-rc5
github.com/opencontainers/runtime-spec v1.1.0-rc.2 -> v1.1.0
github.com/pkg/profile v1.5.0 -> v1.7.0
github.com/prometheus/client_golang v1.14.0 -> v1.17.0
github.com/prometheus/client_model v0.3.0 -> v0.5.0
github.com/prometheus/common v0.42.0 -> v0.44.0
github.com/prometheus/procfs v0.9.0 -> v0.12.0
github.com/serialx/hashring 8b29126 -> 22c0c7a
github.com/sirupsen/logrus v1.9.0 -> v1.9.3
github.com/spdx/tools-golang v0.5.1 -> v0.5.3
github.com/stretchr/testify v1.8.3 -> v1.8.4
github.com/tonistiigi/fsutil 36ef4d8 -> 7525a1a
github.com/tonistiigi/go-actions-cache 0bdeb6e -> a0b64f3
github.com/urfave/cli v1.22.12 -> v1.22.14
github.com/vbatts/tar-split v0.11.2 -> v0.11.5
github.com/vishvananda/netlink v1.2.1-beta.2 new
github.com/vishvananda/netns v0.0.4 new
go.etcd.io/bbolt v1.3.7 -> v1.3.9
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.40.0 -> v0.46.1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.40.0 -> v0.46.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.40.0 -> v0.46.1
go.opentelemetry.io/otel v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/jaeger v1.14.0 -> v1.17.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v0.42.0 new
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/exporters/prometheus v0.42.0 new
go.opentelemetry.io/otel/metric v0.37.0 -> v1.21.0
go.opentelemetry.io/otel/sdk v1.14.0 -> v1.21.0
go.opentelemetry.io/otel/sdk/metric v1.21.0 new
go.opentelemetry.io/otel/trace v1.14.0 -> v1.21.0
go.opentelemetry.io/proto/otlp v0.19.0 -> v1.0.0
google.golang.org/genproto 7f2fa6f -> 49dd2c1
google.golang.org/genproto/googleapis/api 49dd2c1 new
google.golang.org/genproto/googleapis/rpc 49dd2c1 new
google.golang.org/grpc v1.53.0 -> v1.59.0

Previous release can be found at v0.12.5

`v0.12.5`

Compare Source

https://hub.docker.com/r/moby/buildkit

Notable changes:

This release contains following security fixes:

Runc has been updated to v1.1.12 addressing https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv
Fix possible race condition with accessing subpaths from cache mounts https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv
Fix possible host system access from mount stub cleaner https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8
Fix interactive containers API validation against entitlements https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g
Fix possible panic when incorrect parameters sent from frontend https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx

`v0.12.4`

Compare Source

Welcome to the 0.12.4 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Fix possible concurrent map access on remote cache export #4346
Fix hang on debug server listener #4361
Fix possible deadlock in History API under high number of parallel builds #4362
Fix possible panic on handling deleted records in History API #4451
Fix possible data corruption in zstd library #4372

`v0.12.3`

Compare Source

Welcome to the 0.12.3 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Fix possible duplicate source files in provenance attestation for chained builds #4190
Fix possible negative step time in progressbar for step shared with other build request #4183
Fix properly closing history and cache DB on shutdown to avoid corruption #4185 #4189
Fix incorrect error handling for invalid HTTP source URLs #4201
Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. #4299
Fix possible data race with parallel image config resolves #4157
Fix regression in v0.12 for clients waiting on buildkitd to become available #4200
Fix Cgroup NS handling for hosts supporting only CgroupV1 #4308

`v0.12.2`

Compare Source

Welcome to the 0.12.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Fix possible discarded network error when exporting result to client #4117
Avoid unnecessary memory allocations when writing build progress #4116

`v0.12.1`

Compare Source

Welcome to the 0.12.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Fix possible goroutine leak in resource monitor for failed containers #4081
Fix possible tracing socket path length error on some configurations #3483

`v0.12.0`

Compare Source

buildkit 0.12.0

Welcome to the 0.12.0 release of buildkit!
This is a pre-release of buildkit

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi
Justin Chadwell
CrazyMax
Sebastiaan van Stijn
Akihiro Suda
Erik Sipsma
Gabriel Adrian Samfira
Kohei Tokunaga
Alex Couture-Beil
Cory Bennett
Brian Goff
Nick Santos
Wei Zhang
Alex Suraci
Alexis Murzeau
Changwei Ge
David Karlsson
Paweł Gronowski
Aaron Lehmann
Jordan Goasdoue
Seiya Miyata
Ben Longo
Jacob Gillespie
Alan Fregtman
Andy Alt
Bertrand Paquet
Chaerim Yeo
Chris Goller
Cory Snider
Dan Duvall
Gabriel
Gahl Saraf
George
Hugo Santos
Ilya Dmitrichenko
Kang, Matthew
Matias Insaurralde
Matt Kang
Nick Miyake
Pranav Pandit
Sertac Ozercan
Vladislav Ivanov
Yan Song
Yurii Rashkovskii
@ggjulio
@chengjoey
@lomot

Notable Changes

Default Dockerfile frontend has been updated to 1.6.0
Remote cache export/import to the registry now supports OCI image manifest compatible format when setting image-manifest=true #3724
Local and Tar exporters now support platform-split=false option to merge all artifacts for multiple platforms to the same directory. #3161
Provenance attestation can now capture resource usage information for the system and individual build steps. This information can be written to exported attestation by setting capture-usage=true attestation option and is set automatically for History API records. This feature depends on CgroupV2, and some fields require kernel configured with CONFIG_PSI enabled. #3860 #3999
SOURCE_DATE_EPOCH value for reproducible builds is now set as the creation timestamp when exporting image to containerd image store #3263
buildctl has new --wait flag to block RPCs until the connection becomes available #3586
WCOW support for certain actions has improved #3783 #3782 #3907 #3906 #3545 #3544 #3516 #3908
Stargz support is out of experimental #3637
Creating layer blobs now uses deterministic timestamps for whiteout files when Overlay snapshotter is supported for more reproducible builds #3981
Source policy support now also applies to image config metadata requests. These requests can return a new source reference defined by the policy that the frontend can use in follow-up LLB requests. #3956 #4014
Sourcemaps in provenance attestations and errors now allow setting the source language name #3620
File operations are now always platform-independent for better direct cache reuse #3858
When exporting an image to Containerd image store, unpack logic now works for multi-platform images by unpacking only the native platform by default #3982 #3983
Cgroup namespace isolation is enabled for containers on supported systems #4003
New DockerUI package is provided by frontend authors who want to target docker buildx flags without the need to copy code from Dockerfile frontend #3606
Downloading image layers in the exporter can now work in parallel for different platforms #3984
Zstd compressed layers are now supported also with Docker-style mediatypes #3968
Secret environment variables can now be set using the interactive container API #3957
TOML buildkitd config now supports multiple units for storage limits #3773
gRPC API now enables reflection #3790
HTTP sources now have better caching for servers that handle Accept-Encoding differently for different HTTP methods #3745 #3788
New buildctl commands debug histories and prune-histories #3498
Loading SBOM generator image can now be configured with resolve mode parameter #3446
Gateway frontend source image can now be set with defining named context #3633
Performance improvements to scanning local files for context upload #3977
Interactive container API now supports setting container Hostname #3680
History API now uses a separate Containerd namespace for its objects, fixing some issues when the same blobs are used by image store #3833
Make files created by Git source more deterministic #3598
Git source now handles URLs that define subdir and empty reference #3596
Remote cache export now supports registry.insecure option like the Image exporter #3501
Azure Blob storage cache export supports setting the account name as parameter #3476
New client APIs for configuring TLS authentication to use system certificates #3760
Fixes for copying Unicode filenames with local context #3946 #4009
Fix the issue where some builds could fail with "missing provenance" error #3945
Fix lazy loaded layers reuse for cache when running parallel builds #3109
Fix issue with missing GC label for layers when exporting image to containerd image store #3161
Fix possible progressbar panic on resizing terminal window #3967
Fix possible "inconsistent graph state" error when running parallel cached, and no-cache builds #3953
Fix possible zero build step index numbers on progressbar #3942 #3838
Fix possible "container does not exist" error #3940
Fix possible "concurrent map read and write" error #3938
Fix possible issue where the status stream could be missing for History record #3937
Fix possible data races #4004 #3994 #4010
Fix OCI layout URIs in provenance attestation #3918
Fix regression bug in v0.11.x OpenTelemetry trace delegation from the client #3909
Fix possible deadlock on network error #3857
Fix filtering out deleted History API records #3827 #3733
Fix possible build cache reference leak #3851 #3815
Fix possible FD leak in SSH forwarding #3848
Fix possible concurrent map access in Client library #3813
Fixes for Runc container SIGKILL/exit-code handling #3754 #3765 #3658 #3722
Fix creating oci-layout file when exporting uncompressed OCI layout #3729

Dependency Changes

github.com/AdaLogics/go-fuzz-headers 43070de new
github.com/AdamKorcz/go-118-fuzz-build 5330a85 new
github.com/Masterminds/semver/v3 v3.1.0 new
github.com/Microsoft/go-winio v0.5.2 -> v0.6.1
github.com/Microsoft/hcsshim v0.9.6 -> v0.10.0-rc.8
github.com/anchore/go-struct-converter c68fdcf new
github.com/aws/aws-sdk-go-v2 v1.16.3 -> v1.17.6
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.5 new
github.com/aws/smithy-go v1.11.2 -> v1.13.5
github.com/containerd/cgroups v1.0.4 -> v1.1.0
github.com/containerd/containerd v1.6.14 -> v1.7.2
github.com/containerd/continuity v0.3.0 -> v0.4.1
github.com/containerd/fifo v1.0.0 -> v1.1.0
github.com/containerd/go-cni v1.1.6 -> v1.1.9
github.com/containerd/go-runc v1.0.0 -> v1.1.0
github.com/containerd/nydus-snapshotter v0.3.1 -> v0.8.2
github.com/containerd/stargz-snapshotter v0.13.0 -> v0.14.3
github.com/containerd/ttrpc v1.1.0 -> v1.2.2
github.com/containerd/typeurl/v2 v2.1.1 new
github.com/containernetworking/cni v1.1.1 -> v1.1.2
github.com/cyphar/filepath-securejoin v0.2.3 new
github.com/docker/cli v23.0.0-rc.1 -> v24.0.2
github.com/docker/distribution v2.8.1 -> v2.8.2
github.com/docker/docker v23.0.0-rc.1 -> 98d3da7
github.com/felixge/httpsnoop v1.0.2 -> v1.0.3
github.com/golang/protobuf v1.5.2 -> v1.5.3
github.com/grpc-ecosystem/grpc-gateway/v2 v2.11.3 new
github.com/hanwen/go-fuse/v2 f57e95b -> v2.2.0
github.com/hashicorp/go-cleanhttp v0.5.1 -> v0.5.2
github.com/hashicorp/go-retryablehttp v0.7.1 -> v0.7.2
github.com/klauspost/compress v1.15.12 -> v1.16.3
github.com/opencontainers/image-spec 02efb9a -> v1.1.0-rc3
github.com/opencontainers/runc v1.1.3 -> v1.1.7
github.com/opencontainers/runtime-spec 1c3f411 -> v1.1.0-rc.2
github.com/opencontainers/selinux v1.10.2 -> v1.11.0
github.com/pelletier/go-toml v1.9.4 -> v1.9.5
github.com/prometheus/common v0.37.0 -> v0.42.0
github.com/prometheus/procfs v0.8.0 -> v0.9.0
github.com/spdx/tools-golang d6f5855 -> v0.5.1
github.com/stretchr/testify v1.8.0 -> v1.8.3
github.com/tonistiigi/fsutil fb43384 -> 36ef4d8
github.com/tonistiigi/vt100 8066bb9 -> f9a4f7e
github.com/urfave/cli v1.22.4 -> v1.22.12
go.etcd.io/bbolt v1.3.6 -> v1.3.7
go.opencensus.io v0.23.0 -> v0.24.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.29.0 -> v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.29.0 -> v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.29.0 -> v0.40.0
go.opentelemetry.io/otel v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/jaeger v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/internal/retry v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/metric v0.27.0 -> v0.37.0
go.opentelemetry.io/otel/sdk v1.4.1 -> v1.14.0
go.opentelemetry.io/otel/trace v1.4.1 -> v1.14.0
go.opentelemetry.io/proto/otlp v0.12.0 -> v0.19.0
golang.org/x/mod v0.9.0 new
golang.org/x/tools v0.7.0 new
google.golang.org/genproto 7780775 -> 7f2fa6f
google.golang.org/grpc v1.50.1 -> v1.53.0
kernel.org/pub/linux/libs/security/libcap/cap v1.2.67 new
kernel.org/pub/linux/libs/security/libcap/psx v1.2.67 new

Previous release can be found at v0.11.6

`v0.11.6`

Compare Source

https://hub.docker.com/r/moby/buildkit

Notable changes:

Revert previous signal handling fix to make sure no process leaks happen. The signaling issue will be fixed in the next feature release. https://github.com/moby/buildkit/pull/3757
Update runc to v1.1.5 for security https://github.com/moby/buildkit/pull/3763
Update containerd to v1.6.20 . Brings in fix for not writing local user/group names in differ. #3736
Fix possible "duplicate output 0" error on parallel builds #3774
Fix token management for servers that don't return proper IssuedAt value #3779
Fix SBOM and provenance processing for certain nil-result cases #3805

`v0.11.5`

Compare Source

https://hub.docker.com/r/moby/buildkit

Notable changes:

Fix process termination handling to Runc when running interactive processes #3722
Fix gateway exec tty cleanup on context.Canceled #3658
Register builds before recording build history to avoid possible timeout error #3726
Fix performance regression in creating LLB graphs #3732
Fix sorting of build history records for GC #3733
Fix an issue where linking builds with providing LLB inputs dropped the original source information for such inputs #3678
Fix running BuildKit on BottleRocket OS #3697

`v0.11.4`

Compare Source

https://hub.docker.com/r/moby/buildkit

Notable changes:

This release contains two security fixes.

Fix the issue where credentials inlined to Git URLs could end up in provenance attestation https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc
Containerd has been updated to 1.6.18 , fixing issue with supplementary groups not being set up properly https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p #3651

Other updates

Fix possible panic with writing annotations #3670
Fix possible panic with passing nil frontend input #3659
Fix file capabilities in merged snapshots by changing chown order #3671

`v0.11.3`

Compare Source

Welcome to the 0.11.3 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable Changes

Builtin Dockerfile frontend updated to v1.5.2
Fix not mounting optional secrets missing from build requests #3561
Fix an issue with Github cache backend that could cause invalid range requests #3618
Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 #3605
Fix issues with missing layer metadata in SBOMs in latest releases #3594
Fix possible "digest not found" error on exporting build results #3566
Make sure timezones are dropped on handling SOURCE_DATE_EPOCH #3559

Dependency Changes

github.com/containerd/containerd 1709cfe -> v1.6.16

Previous release can be found at v0.11.2

`v0.11.2`

Compare Source

Welcome to the 0.11.2 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Update containerd patches to fix regression in handling push errors #3531
Multiple fixes for History API #3530
Fix issue with parallel build requests using local cache imports #3493

Dependency Changes

github.com/containerd/containerd v1.6.14 -> 1709cfe
github.com/pelletier/go-toml v1.9.4 -> v1.9.5

Previous release can be found at v0.11.1

`v0.11.1`

Compare Source

Welcome to the 0.11.1 release of buildkit!

Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.

Notable changes

Builtin Dockerfile frontend has been updated to 1.5.1, fixing possible panic in certain warning condition #3505
Fix possible hang when closing down the SSH forwarding socket in v0.11.0 #3506
Fix typo in an environment variable used to configure OpenTelemetry endpoints #3508

opencontainers/image-spec

`v1.1.0`

Compare Source

Vote Passed [+7-0] - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag
Release PR : https://github.com/opencontainers/image-spec/pull/1161
Full Changelog: https://github.com/opencontainers/image-spec/compare/v1.0.2...v1.1.0

Associated Distribution Specification Release - https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.0

`v1.1.0-rc6`

Compare Source

Vote passed [+6 -0] - https://groups.google.com/a/opencontainers.org/g/dev/c/HOxZlfhr9-o

For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1157

`v1.1.0-rc5`

Compare Source

For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1109

Vote - https://groups.google.com/a/opencontainers.org/g/dev/c/KIwyzExcjZ8

`v1.1.0-rc4`

Compare Source

Vote passed [+6 -0]: https://groups.google.com/a/opencontainers.org/g/dev/c/gPgzESGb7xs

For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1080

rs/zerolog

`v1.32.0`

Compare Source

`v1.31.0`

Compare Source

`v1.30.0`

Compare Source

`v1.29.1`

Compare Source

`v1.29.0`

Compare Source

sergi/go-diff

`v1.3.1`

Compare Source

`v1.3.0`

Compare Source

sirupsen/logrus

`v1.9.3`

Compare Source

Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines f9291a534c (re-apply https://github.com/sirupsen/logrus/pull/1376)
Fix panic in Writer d40e25cd45

Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3

`v1.9.2`

Compare Source

Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1

Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2

`v1.9.1`

Compare Source

What's Changed

Fix data race in hooks.test package by @FrancoisWagner in https://github.com/sirupsen/logrus/pull/1362
Add instructions to use different log levels for local and syslog by @tommyblue in https://github.com/sirupsen/logrus/pull/1372
This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @ozfive in https://github.com/sirupsen/logrus/pull/1376
Use text when shows the logrus output by @xieyuschen in https://github.com/sirupsen/logrus/pull/1339

New Contributors

@FrancoisWagner made their first contribution in https://github.com/sirupsen/logrus/pull/1362
@tommyblue made their first contribution in https://github.com/sirupsen/logrus/pull/1372
@ozfive made their first contribution in https://github.com/sirupsen/logrus/pull/1376
@xieyuschen made their first contribution in https://github.com/sirupsen/logrus/pull/1339

Full Changelog: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1

spf13/cobra

`v1.8.0`

Compare Source

✨ Features

Support usage as plugin for tools like kubectl by @nirs in https://github.com/spf13/cobra/pull/2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.)
Move documentation sources to site/content by @umarcor in https://github.com/spf13/cobra/pull/1428
Add 'one required flag' group by @marevers in https://github.com/spf13/cobra/pull/1952 - this includes a new MarkFlagsOneRequired API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.
Customizable error message prefix by @5ouma in https://github.com/spf13/cobra/pull/2023 - This adds the SetErrPrefix and ErrPrefix APIs on the Command struct to allow for setting a custom prefix for errors
feat: add getters for flag completions by @avirtopeanu-ionos in https://github.com/spf13/cobra/pull/1943
Feature: allow running persistent run hooks of all parents by @vkhoroz in https://github.com/spf13/cobra/pull/2044
Improve API to get flag completion function by @marckhouzam in https://github.com/spf13/cobra/pull/2063

🐛 Bug fixes

Fix typo in fish completions by @twpayne in https://github.com/spf13/cobra/pull/1945
Fix grammar: 'allows to' by @supertassu in https://github.com/spf13/cobra/pull/1978
powershell: escape variable with curly brackets by @Luap99 in https://github.com/spf13/cobra/pull/1960
Don't complete --help flag when flag parsing disabled by @marckhouzam in https://github.com/spf13/cobra/pull/2061
Replace all non-alphanumerics in active help env var program prefix by @scop in https://github.com/spf13/cobra/pull/1940

🔧 Maintenance

build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by @dependabot in https://github.com/spf13/cobra/pull/1971
build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by @dependabot in https://github.com/spf13/cobra/pull/1976
build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in https://github.com/spf13/cobra/pull/2021
build(deps): bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/spf13/cobra/pull/1934
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by @dependabot in https://github.com/spf13/cobra/pull/2047
build(deps): bump actions/checkout from 3 to 4 by @dependabot in https://github.com/spf13/cobra/pull/2028
command: temporarily disable G602 due to securego/gosec#1005 by @umarcor in https://github.com/spf13/cobra/pull/2022

🧪 Testing & CI/CD

test: make fish_completions_test more robust by @branchvincent in https://github.com/spf13/cobra/pull/1980
golangci: enable 'unused' and disable deprecated replaced by it by @umarcor in https://github.com/spf13/cobra/pull/1983
cleanup: minor corrections to unit tests by @JunNishimura in https://github.com/spf13/cobra/pull/2003
ci: test golang 1.21 by @nunoadrego in https://github.com/spf13/cobra/pull/2024
Fix linter errors by @marckhouzam in https://github.com/spf13/cobra/pull/2052
Add tests for flag completion registration by @marckhouzam in https://github.com/spf13/cobra/pull/2053

✏️ Documentation

doc: fix typo, Deperecated -> Deprecated by @callthingsoff in https://github.com/spf13/cobra/pull/2000
Add notes to doc about the execution condition of *PreRun and *PostRun functions by @haoming29 in https://github.com/spf13/cobra/pull/2041

Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0

`v1.7.0`

Compare Source

✨ Features

Allow to preserve ordering of completions in bash, zsh, pwsh, & fish: @h4ck3rk3y #1903
Add support for PowerShell 7.2+ in completions: @oldium #1916
Allow sourcing zsh completion script: @marckhouzam #1917

🐛 Bug fixes

Don't remove flag values that match sub-command name: @brianpursley #1781
Fix powershell completions not returning single word: @totkeks #1850
Remove masked template import variable name: @yashLadha #1879
Correctly detect completions with dash in argument: @oncilla #1817

🧪 Testing & CI/CD

Deprecate Go 1.15 in CI: @umarcor #1866
Deprecate Go 1.16 in CI: @umarcor #1926
Add testing for Go 1.20 in CI: @umarcor #1925
Add tests to illustrate unknown flag bug: @brianpursley #1854

🔧 Maintenance

Update main image to better handle dark backgrounds: @Deleplace and @marckhouzam #1883
Fix stale.yaml mispellings: @enrichman #1863
Remove stale bot from GitHub actions: @jpmcb #1908
Add makefile target for installing dependencies: @umarcor #1865
Add Sia to projects using Cobra: @mike76-dev #1844
Add Vitess and Arewefastyet to projects using cobra: @frouioui #1932
Fixup for Kubescape github org: @dwertent #1874
Fix route for GitHub workflows badge: @sh-cho #1884
Fixup for GoDoc style documentation: @yashLadha #1885
Various bash scripting improvements for completion: @scop #1702
Add Constellation to projects using Cobra: @datosh #1829

✏️ Documentation

Add documentation about disabling completion descriptions: @Shihta #1901
Improve MarkFlagsMutuallyExclusive example in user guide: @janhn #1904
Update shell_completions.md: @gusega #1907
Update copywrite year: @umarcor #1927
Document suggested layout of subcommands: @lcarva #1930
Replace deprecated ExactValidArgs with MatchAll in doc: @doniacld #1836

This release contains several long running fixes, improvements to powershell completions, and further optimizations for completions.

Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you! 🐍

Full changelog: https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0

spf13/viper

`v1.18.2`

Compare Source

tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.

This release fixes a regression that appears in rare circumstances when using Unmarshal or UnmarshalExact to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the viper_bind_struct build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

What's Changed

Bug Fixes 🐛

feat!: hide struct binding behind a feature flag by @sagikazarmark in https://github.com/spf13/viper/pull/1715

Full Changelog: https://github.com/spf13/viper/compare/v1.18.1...v1.18.2

`v1.18.1`

Compare Source

What's Changed

Bug Fixes 🐛

Merge missing struct keys inside UnmarshalExact by @krakowski in https://github.com/spf13/viper/pull/1704

Full Changelog: https://github.com/spf13/viper/compare/v1.18.0...v1.18.1

`v1.18.0`

Compare Source

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

`AutomaticEnv` works with `Unmarshal`

Previously, environment variables that weren't bound manually or had no defaults could not be mapped by Unmarshal. (The problem is explained in details in this issue: #761)

#1429 introduced a solution that solves that issue.

What's Changed

Enhancements 🚀

chore: rename files according to enabled build tags by @alexandear in https://github.com/spf13/viper/pull/1642
test: replace ifs with asserts to simplify tests by @alexandear in https://github.com/spf13/viper/pull/1656
ci: enable test shuffle and fix tests by @alexandear in https://github.com/spf13/viper/pull/1643
fix: gocritic lint issues by @alexandear in https://github.com/spf13/viper/pull/1696

Bug Fixes 🐛

Implement viper.BindStruct for automatic unmarshalling from environment variables by @krakowski in https://github.com/spf13/viper/pull/1429
fix isPathShadowedInFlatMap type cast bug by @linuxsong in https://github.com/spf13/viper/pull/1585

Dependency Updates ⬆️

build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by @dependabot in https://github.com/spf13/viper/pull/1661
build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in https://github.com/spf13/viper/pull/1659
build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in https://github.com/spf13/viper/pull/1663
build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by @dependabot in https://github.com/spf13/viper/pull/1686
build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by @dependabot in https://github.com/spf13/viper/pull/1688
build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by @dependabot in https://github.com/spf13/viper/pull/1692
build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by @dependabot in https://github.com/spf13/viper/pull/1690
build(deps): bump cachix/install-nix-action from 23 to 24 by @dependabot in https://github.com/spf13/viper/pull/1689
build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by @dependabot in https://github.com/spf13/viper/pull/1672
build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by @dependabot in https://github.com/spf13/viper/pull/1691
build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by @dependabot in https://github.com/spf13/viper/pull/1668
chore: update dependencies by @sagikazarmark in https://github.com/spf13/viper/pull/1694
chore: update crypt by @sagikazarmark in https://github.com/spf13/viper/pull/1701

Other Changes

Add info about multiple hosts for remote config by @KaymeKaydex in https://github.com/spf13/viper/pull/1684
refactor: drop fsonitfy wrapper by @sagikazarmark in https://github.com/spf13/viper/pull/1693
Note Get* behavior on parse failure by @scop in https://github.com/spf13/viper/pull/1687
fix: godot lint issues by @alexandear in https://github.com/spf13/viper/pull/1657

New Contributors

@KaymeKaydex made their first contribution in https://github.com/spf13/viper/pull/1684
@krakowski made their first contribution in https://github.com/spf13/viper/pull/1429
@linuxsong made their first contribution in https://github.com/spf13/viper/pull/1585

Full Changelog: https://github.com/spf13/viper/compare/v1.17.0...v1.18.0

`v1.17.0`

Compare Source

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

Minimum Go version: 1.19

Viper now requires Go 1.19

This change ensures we can stay up to date with modern practices and dependencies.

`log/slog` support [BREAKING]

Viper v1.11.0 added an experimental Logger interface to allow custom implementations (besides jwalterweatherman).

In addition, it also exposed an experimental WithLogger function allowing to set a custom logger.

This release deprecates that interface in favor of log/slog released in Go 1.21.

[!WARNING]
WithLogger accepts an *slog.Logger from now on.

To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a *golang.org/x/exp/slog.Logger.

The experimental flag is removed.

New finder implementation [BREAKING]

As of this release, Viper uses a new library to look for files, called locafero.

The new library is better covered by tests and has been built from scratch as a general purpose file finder library.

The implementation is experimental and is hidden behind a finder build tag.

[!WARNING]
The io/fs based implementation (that used to be hidden behind a finder build tag) has been removed.

What's Changed

Exciting New Features 🎉

Add NATS support by @hooksie1 in https://github.com/spf13/viper/pull/1590
Add slog support by @sagikazarmark in https://github.com/spf13/viper/pull/1627

Enhancements 🚀

chore: add local development environment using nix by @sagikazarmark in https://github.com/spf13/viper/pull/1572
feat: add func GetEnvPrefix by @baruchiro in https://github.com/spf13/viper/pull/1565
Improve dev env by @sagikazarmark in https://github.com/spf13/viper/pull/1575
fix: code optimization by @testwill in https://github.com/spf13/viper/pull/1557
test: remove not needed testutil.Setenv by @alexandear in https://github.com/spf13/viper/pull/1610
new finder library based on afero by @sagikazarmark in https://github.com/spf13/viper/pull/1625
refactor: make use of strings.Cut by @scop in https://github.com/spf13/viper/pull/1650

Breaking Changes 🛠

feat: drop support for Go 1.17 by @sagikazarmark in https://github.com/spf13/viper/pull/1574

Dependency Updates ⬆️

build(deps): bump mheap/github-action-required-labels from 4 to 5 by @dependabot in https://github.com/spf13/viper/pull/1563
build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @dependabot in https://github.com/spf13/viper/pull/1558
build(deps): bump cachix/install-nix-action from 21 to 22 by @dependabot in https://github.com/spf13/viper/pull/1573
build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by @dependabot in https://github.com/spf13/viper/pull/1586
chore: upgrade crypt by @sagikazarmark in https://github.com/spf13/viper/pull/1589
build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by @dependabot in https://github.com/spf13/viper/pull/1616
build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by @dependabot in https://github.com/spf13/viper/pull/1615
build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by @dependabot in https://github.com/spf13/viper/pull/1614
build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by @dependabot in https://github.com/spf13/viper/pull/1605
build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @dependabot in https://github.com/spf13/viper/pull/1604
build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in https://github.com/spf13/viper/pull/1593
build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by @dependabot in https://github.com/spf13/viper/pull/1603
build(deps): bump cachix/install-nix-action from 22 to 23 by @dependabot in https://github.com/spf13/viper/pull/1620
chore(deps): update crypt by @sagikazarmark in https://github.com/spf13/viper/pull/1621
build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @dependabot in https://github.com/spf13/viper/pull/1623
Bump minimum Go version to 1.19 by @sagikazarmark in https://github.com/spf13/viper/pull/1626
build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by @dependabot in https://github.com/spf13/viper/pull/1632
build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by @dependabot in https://github.com/spf13/viper/pull/1634
build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in https://github.com/spf13/viper/pull/1641
build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by @dependabot in https://github.com/spf13/viper/pull/1640
build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @dependabot in https://github.com/spf13/viper/pull/1638
build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @dependabot in https://github.com/spf13/viper/pull/1648
chore(deps): update crypt by @sagikazarmark in https://github.com/spf13/viper/pull/1652

Other Changes

[StepSecurity] ci: Harden GitHub Actions by @step-security-bot in https://github.com/spf13/viper/pull/1592
Add Vitess to list of projects using Viper by @systay in https://github.com/spf13/viper/pull/1619
docs: fix typos in comments by @alexandear in https://github.com/spf13/viper/pull/1609
ci: add Go 1.21 to the test matrix by @sagikazarmark in https://github.com/spf13/viper/pull/1622
Remove usages of deprecated io/ioutil; simplify viper tests by @alexandear in https://github.com/spf13/viper/pull/1631
chore: remove deprecated build tags by @alexandear in https://github.com/spf13/viper/pull/1630
refactor: replace 'interface{}' with 'any' by @alexandear in https://github.com/spf13/viper/pull/1646
test: refactor asserts by @alexandear in https://github.com/spf13/viper/pull/1644
docs: add set subset KV example by @yhliyr in https://github.com/spf13/viper/pull/1647
Make deps fixes by @bersace in https://github.com/spf13/viper/pull/1628

New Contributors

@goldeneggg made their first contribution in https://github.com/spf13/viper/pull/1561
@baruchiro made their first contribution in https://github.com/spf13/viper/pull/1565
@testwill made their first contribution in https://github.com/spf13/viper/pull/1557
@step-security-bot made their first contribution in https://github.com/spf13/viper/pull/1592
@systay made their first contribution in https://github.com/spf13/viper/pull/1619
@alexandear made their first contribution in https://github.com/spf13/viper/pull/1609
@hooksie1 made their first contribution in https://github.com/spf13/viper/pull/1590
@yhliyr made their first contribution in https://github.com/spf13/viper/pull/1647
@bersace made their first contribution in https://github.com/spf13/viper/pull/1628
@scop made their first contribution in https://github.com/spf13/viper/pull/1650

Full Changelog: https://github.com/spf13/viper/compare/v1.16.0...v1.17.0

`v1.16.0`

Compare Source

What's Changed

Enhancements 🚀

Sub parent inheritance by @TaylorOno in https://github.com/spf13/viper/pull/1056
fix: fix typo by @yquansah in https://github.com/spf13/viper/pull/1523
ci: add Go 1.20 to build matrix by @sagikazarmark in https://github.com/spf13/viper/pull/1506
extend v.find() to handle stringToInt value types with stringToInt pflag #1435 by @vorishirne in https://github.com/spf13/viper/pull/1462
add:viper: allow to disable internal log messages by @burgesQ in https://github.com/spf13/viper/pull/1483
Allow ConfigParseError to unwrap by @andig in https://github.com/spf13/viper/pull/1433

Bug Fixes 🐛

fix: time.Duration slice type conversion by @UrbanskiDawid in https://github.com/spf13/viper/pull/1498

Dependency Updates ⬆️

build(deps): bump mheap/github-action-required-labels from 3 to 4 by @dependabot in https://github.com/spf13/viper/pull/1533
build(deps): bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/spf13/viper/pull/1526
build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by @dependabot in https://github.com/spf13/viper/pull/1519
build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.7 by @dependabot in https://github.com/spf13/viper/pull/1516
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by @dependabot in https://github.com/spf13/viper/pull/1515
build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5 by @dependabot in https://github.com/spf13/viper/pull/1518
build(deps): bump github.com/sagikazarmark/crypt from 0.9.0 to 0.10.0 by @dependabot in https://github.com/spf13/viper/pull/1550
build(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 by @dependabot in https://github.com/spf13/viper/pull/1551
build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by @dependabot in https://github.com/spf13/viper/pull/1553
build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.7 to 2.0.8 by @dependabot in https://github.com/spf13/viper/pull/1555

Other Changes

Update main image to better handle dark background by @Deleplace in https://github.com/spf13/viper/pull/1532

New Contributors

@UrbanskiDawid made their first contribution in https://github.com/spf13/viper/pull/1498
@TaylorOno made their first contribution in https://github.com/spf13/viper/pull/1056
@yquansah made their first contribution in https://github.com/spf13/viper/pull/1523
@Azanul made their first contribution in https://github.com/spf13/viper/pull/1544
@Deleplace made their first contribution in https://github.com/spf13/viper/pull/1532
@cfabianski made their first contribution in https://github.com/spf13/viper/pull/1552
@vorishirne made their first contribution in https://github.com/spf13/viper/pull/1462
@burgesQ made their first contribution in https://github.com/spf13/viper/pull/1483
@andig made their first contribution in https://github.com/spf13/viper/pull/1433

Full Changelog: https://github.com/spf13/viper/compare/v1.15.0...v1.16.0

`v1.15.0`

Compare Source

What's Changed

Exciting New Features 🎉

feat: add multiple endpoints support for remote by @mozartz in https://github.com/spf13/viper/pull/1464

Enhancements 🚀

Add DocBlock to WatchConfig by @glebik000 in https://github.com/spf13/viper/pull/1467

Breaking Changes 🛠

Drop YAML v2 and TOML v1 by @sagikazarmark in https://github.com/spf13/viper/pull/1493
Drop support for Go 1.16 by @sagikazarmark in https://github.com/spf13/viper/pull/1494

Dependency Updates ⬆️

build(deps): bump github.com/spf13/afero from 1.9.2 to 1.9.3 by @dependabot in https://github.com/spf13/viper/pull/1465
build(deps): bump github.com/magiconair/properties from 1.8.6 to 1.8.7 by @dependabot in https://github.com/spf13/viper/pull/1475
build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.5 to 2.0.6 by @dependabot in https://github.com/spf13/viper/pull/1466
build(deps): bump mheap/github-action-required-labels from 2 to 3 by @dependabot in https://github.com/spf13/viper/pull/1482
build(deps): bump github.com/subosito/gotenv from 1.4.1 to 1.4.2 by @dependabot in https://github.com/spf13/viper/pull/1488
build(deps): bump github.com/sagikazarmark/crypt from 0.8.0 to 0.9.0 by @dependabot in https://github.com/spf13/viper/pull/1490

New Contributors

@choar816 made their first contribution in https://github.com/spf13/viper/pull/1481
@lol768 made their first contribution in https://github.com/spf13/viper/pull/1485
@mozartz made their first contribution in https://github.com/spf13/viper/pull/1464
@glebik000 made their first contribution in https://github.com/spf13/viper/pull/1467

Full Changelog: https://github.com/spf13/viper/compare/v1.14.0...v1.15.0

stretchr/testify

`v1.9.0`

Compare Source

What's Changed

Fix Go modules version by @SuperQ in https://github.com/stretchr/testify/pull/1394
Document that require is not safe to call in created goroutines by @programmer04 in https://github.com/stretchr/testify/pull/1392
Remove myself from MAINTAINERS.md by @mvdkleijn in https://github.com/stretchr/testify/pull/1367
Correct spelling/grammar by @echarrod in https://github.com/stretchr/testify/pull/1389
docs: Update URLs in README by @davidjb in https://github.com/stretchr/testify/pull/1349
Update mockery link to Github Pages in README by @LandonTClipp in https://github.com/stretchr/testify/pull/1346
docs: Fix typos in tests and comments by @alexandear in https://github.com/stretchr/testify/pull/1410
CI: tests from go1.17 by @SuperQ in https://github.com/stretchr/testify/pull/1409
Fix adding ? when no values passed by @lesichkovm in https://github.com/stretchr/testify/pull/1320
codegen: use standard header for generated files by @dolmen in https://github.com/stretchr/testify/pull/1406
mock: AssertExpectations log reason only on failure by @hikyaru-suzuki in https://github.com/stretchr/testify/pull/1360
assert: fix flaky TestNeverTrue by @dolmen in https://github.com/stretchr/testify/pull/1417
README: fix typos "set up" vs "setup" by @ossan-dev in https://github.com/stretchr/testify/pull/1428
mock: move regexp compilation outside of Called by @aud10slave in https://github.com/stretchr/testify/pull/631
assert: refactor internal func getLen() by @dolmen in https://github.com/stretchr/testify/pull/1445
mock: deprecate type AnythingOfTypeArgument (#1434) by @dolmen in https://github.com/stretchr/testify/pull/1441
Remove no longer needed assert.canConvert by @alexandear in https://github.com/stretchr/testify/pull/1470
assert: ObjectsAreEqual: use time.Equal for time.Time types by @tscales in https://github.com/stretchr/testify/pull/1464
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/stretchr/testify/pull/1466
Bump actions/setup-go from 3.2.0 to 4.1.0 by @dependabot in https://github.com/stretchr/testify/pull/1451
fix: make EventuallyWithT concurrency safe by @czeslavo in https://github.com/stretchr/testify/pull/1395
assert: fix httpCode and HTTPBody occur panic when http.Handler read Body by @hidu in https://github.com/stretchr/testify/pull/1484
assert.EqualExportedValues: fix handling of arrays by @zrbecker in https://github.com/stretchr/testify/pull/1473
.github: use latest Go versions by @kevinburkesegment in https://github.com/stretchr/testify/pull/1489
assert: Deprecate EqualExportedValues by @HaraldNordgren in https://github.com/stretchr/testify/pull/1488
suite: refactor test assertions by @alexandear in https://github.com/stretchr/testify/pull/1474
suite: fix SetupSubTest and TearDownSubTest execution order by @linusbarth in https://github.com/stretchr/testify/pull/1471
docs: Fix deprecation comments for http package by @alexandear in https://github.com/stretchr/testify/pull/1335
Add map support doc comments to Subset and NotSubset by @jedevc in https://github.com/stretchr/testify/pull/1306
TestErrorIs/TestNotErrorIs: check error message contents by @craig65535 in https://github.com/stretchr/testify/pull/1435
suite: fix subtest names (fix #1501) by @dolmen in https://github.com/stretchr/testify/pull/1504
assert: improve unsafe.Pointer tests by @dolmen in https://github.com/stretchr/testify/pull/1505
assert: simplify isNil implementation by @dolmen in https://github.com/stretchr/testify/pull/1506
assert.InEpsilonSlice: fix expected/actual order and other improvements by @dolmen in https://github.com/stretchr/testify/pull/1483
Fix dependency cycle with objx #1292 by @dolmen in https://github.com/stretchr/testify/pull/1453
mock: refactor TestIsArgsEqual by @dolmen in https://github.com/stretchr/testify/pull/1444
mock: optimize argument matching checks by @dolmen in https://github.com/stretchr/testify/pull/1416
assert: fix TestEventuallyTimeout by @dolmen in https://github.com/stretchr/testify/pull/1412
CI: add go 1.21 in GitHub Actions by @dolmen in https://github.com/stretchr/testify/pull/1450
suite: fix recoverAndFailOnPanic to report test failure at the right location by @dolmen in https://github.com/stretchr/testify/pull/1502
Update maintainers by @brackendawson in https://github.com/stretchr/testify/pull/1533
assert: Fix EqualValues to handle overflow/underflow by @arjunmahishi in https://github.com/stretchr/testify/pull/1531
assert: better formatting for Len() error by @kevinburkesegment in https://github.com/stretchr/testify/pull/1485
Ensure AssertExpectations does not fail in skipped tests by @ianrose14 in https://github.com/stretchr/testify/pull/1331
suite: fix deadlock in suite.Require()/Assert() by @arjunmahishi in https://github.com/stretchr/testify/pull/1535
Revert "assert: ObjectsAreEqual: use time.Equal for time.Time type" by @brackendawson in https://github.com/stretchr/testify/pull/1537
[chore] Add issue templates by @arjunmahishi in https://github.com/stretchr/testify/pull/1538
Update the build status badge by @brackendawson in https://github.com/stretchr/testify/pull/1540
Update Github workflows setup-go to V5 by @hendrywiranto in https://github.com/stretchr/testify/pull/1545
Support Pointer to Struct in EqualExportedValues by @Lucaber in https://github.com/stretchr/testify/pull/1517
README: drop link to gorc by @guettli in https://github.com/stretchr/testify/pull/1248
http_assertions: honour the msgAndArgs provided with each assertion by @arjunmahishi in https://github.com/stretchr/testify/pull/1548
fix typos in comments and tests by @ccoVeille in https://github.com/stretchr/testify/pull/1247
Include the auto-release notes in releases by @brackendawson in https://github.com/stretchr/testify/pull/1550
Add NotImplements and variants by @hslatman in https://github.com/stretchr/testify/pull/1385
Add support to compare uintptr by @bogdandrutu in https://github.com/stretchr/testify/pull/1339
build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2 by @dependabot in https://github.com/stretchr/testify/pull/1552

New Contributors

@SuperQ made their first contribution in https://github.com/stretchr/testify/pull/1394
@programmer04 made their first contribution in https://github.com/stretchr/testify/pull/1392
@echarrod made their first contribution in https://github.com/stretchr/testify/pull/1389
@davidjb made their first contribution in https://github.com/stretchr/testify/pull/1349
@LandonTClipp made their first contribution in https://github.com/stretchr/testify/pull/1346
@alexandear made their first contribution in https://github.com/stretchr/testify/pull/1410
@lesichkovm made their first contribution in https://github.com/stretchr/testify/pull/1320
@dolmen made their first contribution in https://github.com/stretchr/testify/pull/1406
@hikyaru-suzuki made their first contribution in https://github.com/stretchr/testify/pull/1360
@ossan-dev made their first contribution in https://github.com/stretchr/testify/pull/1428
@aud10slave made their first contribution in https://github.com/stretchr/testify/pull/631
@tscales made their first contribution in https://github.com/stretchr/testify/pull/1464
@czeslavo made their first contribution in https://github.com/stretchr/testify/pull/1395
@hidu made their first contribution in https://github.com/stretchr/testify/pull/1484
@zrbecker made their first contribution in https://github.com/stretchr/testify/pull/1473
@kevinburkesegment made their first contribution in https://github.com/stretchr/testify/pull/1489
@linusbarth made their first contribution in https://github.com/stretchr/testify/pull/1471
@jedevc made their first contribution in https://github.com/stretchr/testify/pull/1306
@craig65535 made their first contribution in https://github.com/stretchr/testify/pull/1435
@arjunmahishi made their first contribution in https://github.com/stretchr/testify/pull/1531
@ianrose14 made their first contribution in https://github.com/stretchr/testify/pull/1331
@hendrywiranto made their first contribution in https://github.com/stretchr/testify/pull/1545
@Lucaber made their first contribution in https://github.com/stretchr/testify/pull/1517
@guettli made their first contribution in https://github.com/stretchr/testify/pull/1248
@ccoVeille made their first contribution in https://github.com/stretchr/testify/pull/1247
@hslatman made their first contribution in https://github.com/stretchr/testify/pull/1385
@bogdandrutu made their first contribution in https://github.com/stretchr/testify/pull/1339

Full Changelog: https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0

`v1.8.4`

Compare Source

What's Changed

Create GitHub release when new release tag is pushed by @aldas in https://github.com/stretchr/testify/pull/1354

New Contributors

@aldas made their first contribution in https://github.com/stretchr/testify/pull/1354

Full Changelog: https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4

`v1.8.3`

Compare Source

What's Changed

Compare public elements of struct by @mchlp in https://github.com/stretchr/testify/pull/1309
assert: fix error message formatting for NotContains by @wwade in https://github.com/stretchr/testify/pull/1362
allow testing for functional options by @nbaztec in https://github.com/stretchr/testify/pull/1023
add EventuallyWithT assertion by @tobikris in https://github.com/stretchr/testify/pull/1264
EqualExportedValues: Handle nested pointer, slice and map fields by @HaraldNordgren in https://github.com/stretchr/testify/pull/1379

New Contributors

@mchlp made their first contribution in https://github.com/stretchr/testify/pull/1309
@wwade made their first contribution in https://github.com/stretchr/testify/pull/1362
@nbaztec made their first contribution in https://github.com/stretchr/testify/pull/1023
@tobikris made their first contribution in https://github.com/stretchr/testify/pull/1264

Full Changelog: https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3

grpc/grpc-go

`v1.63.0`: Release 1.63.0

Compare Source

Behavior Changes

grpc: Return canonical target string from resolver.Address.String() (experimental) (#6923)
client & server: when using write buffer pooling, use input value for buffer size instead of size*2 (#6983)
- Special Thanks: @raghav-stripe

New Features

grpc: add ClientConn.CanonicalTarget() to return the canonical target string. (#7006)
xds: implement LRS named metrics support (gRFC A64) (#7027)
- Special Thanks: @danielzhaotongliu
grpc: introduce grpc.NewClient to allow users to create new clients in idle mode and with "dns" as the default resolver (#7010)
- Special Thanks: @bruuuuuuuce

API Changes

grpc: stabilize experimental method ClientConn.Target() (#7006)

Bug Fixes

xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server (#7026)
server: Fix some errors returned by a server when using a grpc.Server as an http.Handler with the Go stdlib HTTP server (#6989)
resolver/dns: add SetResolvingTimeout to allow configuring the DNS resolver's global timeout (#6917)
- Special Thanks: @and1truong
Set the security level of Windows named pipes to NoSecurity (#6956)
- Special Thanks: @irsl

`v1.62.2`: Release 1.62.2

Compare Source

Dependencies

Update http2 library to address vulnerability CVE-2023-45288

`v1.62.1`: Release 1.62.1

Compare Source

Bug Fixes

xds: fix a bug that results in no matching virtual host found RPC errors due to a difference between the target and LDS resource names (#6997)
server: fixed stats handler data InPayload.Length for unary RPC calls (#6766)
- Special Thanks: @hueypark
grpc: the experimental RecvBufferPool DialOption and ServerOption are now active during unary RPCs with compression ([#6766](https://github.com/grpc/grpc-go/is

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [@svgr/webpack](https://react-svgr.com) ([source](https://github.com/gregberge/svgr)) | dependencies | major | [`6.5.1` -> `8.1.0`](https://renovatebot.com/diffs/npm/@svgr%2fwebpack/6.5.1/8.1.0) | | [actions/add-to-project](https://github.com/actions/add-to-project) | action | major | `v0.4.0` -> `v1.0.0` | | [actions/checkout](https://github.com/actions/checkout) | action | major | `v3` -> `v4` | | [actions/setup-go](https://github.com/actions/setup-go) | action | major | `v3` -> `v5` | | [actions/stale](https://github.com/actions/stale) | action | major | `v7` -> `v9` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | action | major | `v3` -> `v4` | | [amplitude-js](https://github.com/amplitude/amplitude-javascript) | dependencies | patch | [`8.21.3` -> `8.21.9`](https://renovatebot.com/diffs/npm/amplitude-js/8.21.3/8.21.9) | | [bats](https://github.com/bats-core/bats-core) | devDependencies | minor | [`1.8.2` -> `1.11.0`](https://renovatebot.com/diffs/npm/bats/1.8.2/1.11.0) | | [clsx](https://github.com/lukeed/clsx) | dependencies | major | [`1.2.1` -> `2.1.0`](https://renovatebot.com/diffs/npm/clsx/1.2.1/2.1.0) | | [concurrently](https://github.com/open-cli-tools/concurrently) | devDependencies | major | [`7.6.0` -> `8.2.2`](https://renovatebot.com/diffs/npm/concurrently/7.6.0/8.2.2) | | [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime) | action | major | `v2` -> `v3` | | [cuelang.org/go](https://github.com/cue-lang/cue) | require | minor | `v0.4.3` -> `v0.8.1` | | [cypress](https://cypress.io) ([source](https://github.com/cypress-io/cypress)) | devDependencies | major | [`12.3.0` -> `13.7.2`](https://renovatebot.com/diffs/npm/cypress/12.3.0/13.7.2) | | [cypress-localstorage-commands](https://github.com/javierbrea/cypress-localstorage-commands) | devDependencies | patch | [`2.2.2` -> `2.2.5`](https://renovatebot.com/diffs/npm/cypress-localstorage-commands/2.2.2/2.2.5) | | [dagger/dagger-for-github](https://github.com/dagger/dagger-for-github) | action | major | `v3` -> `v5` | | [docusaurus-plugin-sass](https://github.com/rlamana/docusaurus-plugin-sass) | dependencies | patch | [`0.2.3` -> `0.2.5`](https://renovatebot.com/diffs/npm/docusaurus-plugin-sass/0.2.3/0.2.5) | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | require | patch | `v0.6.0` -> `v0.6.1` | | [github.com/containerd/console](https://github.com/containerd/console) | require | patch | `v1.0.3` -> `v1.0.4` | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | require | minor | `v1.6.15` -> `v1.7.15` | | [github.com/docker/buildx](https://github.com/docker/buildx) | require | minor | `v0.10.0` -> `v0.13.1` | | [github.com/docker/distribution](https://github.com/docker/distribution) | require | patch | `v2.8.1+incompatible` -> `v2.8.3` | | [github.com/docker/docker](https://github.com/docker/docker) | replace | major | `v20.10.22+incompatible` -> `v26.0.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | require | minor | `v5.5.2` -> `v5.12.0` | | [github.com/google/uuid](https://github.com/google/uuid) | require | minor | `v1.3.0` -> `v1.6.0` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | require | minor | `v0.11.0` -> `v0.13.1` | | [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | require | patch | `v1.1.0-rc2.0.20221116213201-188d3a4e1942` -> `v1.1.0` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | require | minor | `v1.28.0` -> `v1.32.0` | | [github.com/sergi/go-diff](https://github.com/sergi/go-diff) | require | minor | `v1.2.0` -> `v1.3.1` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | require | patch | `v1.9.0` -> `v1.9.3` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | require | minor | `v1.6.1` -> `v1.8.0` | | [github.com/spf13/viper](https://github.com/spf13/viper) | require | minor | `v1.14.0` -> `v1.18.2` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | require | minor | `v1.8.2` -> `v1.9.0` | | [github.com/tonistiigi/fsutil](https://github.com/tonistiigi/fsutil) | require | digest | `fb43384` -> `7525a1a` | | [github.com/tonistiigi/vt100](https://github.com/tonistiigi/vt100) | require | digest | `8066bb9` -> `f9a4f7e` | | golang | final | minor | `1.19.4-alpine` -> `1.22.2-alpine` | | golang.org/x/mod | require | minor | `v0.7.0` -> `v0.17.0` | | golang.org/x/sync | require | minor | `v0.1.0` -> `v0.7.0` | | golang.org/x/term | require | minor | `v0.4.0` -> `v0.19.0` | | golang.org/x/time | require | minor | `v0.3.0` -> `v0.5.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | require | minor | `v1.51.0` -> `v1.63.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | major | `v4` -> `v5` | | [lewagon/wait-on-check-action](https://github.com/lewagon/wait-on-check-action) | action | minor | `v1.2.0` -> `v1.3.4` | | [react-social-login-buttons](https://github.com/MichalSzorad/react-social-login-buttons#readme) ([source](https://github.com/michaeljscript/react-social-login-buttons)) | dependencies | major | [`3.6.1` -> `4.1.0`](https://renovatebot.com/diffs/npm/react-social-login-buttons/3.6.1/4.1.0) | | [remark-code-import](https://github.com/kevin940726/remark-code-import) | dependencies | minor | [`1.1.1` -> `1.2.0`](https://renovatebot.com/diffs/npm/remark-code-import/1.1.1/1.2.0) | | [sass](https://github.com/sass/dart-sass) | dependencies | minor | [`1.57.1` -> `1.74.1`](https://renovatebot.com/diffs/npm/sass/1.57.1/1.74.1) | | [start-server-and-test](https://github.com/bahmutov/start-server-and-test) | devDependencies | major | [`1.15.2` -> `2.0.3`](https://renovatebot.com/diffs/npm/start-server-and-test/1.15.2/2.0.3) | --- ### Release Notes <details> <summary>gregberge/svgr</summary> ### [`v8.1.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#810-httpsgithubcomgregbergesvgrcomparev801v810-2023-08-15) [Compare Source](https://github.com/gregberge/svgr/compare/v8.0.1...v8.1.0) ##### Bug Fixes - **cli:** fix default dimensions, prettier & svgo ([571d5c8](https://github.com/gregberge/svgr/commit/571d5c8bd18bc13c12eeb27a9052fa065aeb012e)) - **config:** prefer cli config over rc config ([#845](https://github.com/gregberge/svgr/issues/845)) ([8b97248](https://github.com/gregberge/svgr/commit/8b972484266c45c7f8e4acce4fe2930a024fb4bc)) - **react-native:** fix duplicate import ([#894](https://github.com/gregberge/svgr/issues/894)) ([e612b6a](https://github.com/gregberge/svgr/commit/e612b6a1a4e822178f1e15b82bd2991bf1e84cec)) ##### Features - **esm:** add support for svgo.config.cjs ([#879](https://github.com/gregberge/svgr/issues/879)) ([ae91e2e](https://github.com/gregberge/svgr/commit/ae91e2eacbe1156480c96219b993000eb1e7b9bf)) #### [8.0.1](https://github.com/gregberge/svgr/compare/v8.0.0...v8.0.1) (2023-05-09) ##### Bug Fixes - fix peer dependencies ([2e05255](https://github.com/gregberge/svgr/commit/2e0525546eb21aa4bb790aa4284f4fe34f96d6b9)) ### [`v8.0.1`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#801-httpsgithubcomgregbergesvgrcomparev800v801-2023-05-09) [Compare Source](https://github.com/gregberge/svgr/compare/v8.0.0...v8.0.1) ##### Bug Fixes - fix peer dependencies ([2e05255](https://github.com/gregberge/svgr/commit/2e0525546eb21aa4bb790aa4284f4fe34f96d6b9)) ### [`v8.0.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#800-httpsgithubcomgregbergesvgrcomparev700v800-2023-05-09) [Compare Source](https://github.com/gregberge/svgr/compare/v7.0.0...v8.0.0) ##### Bug Fixes - parseObject error causes website broken ([05f2946](https://github.com/gregberge/svgr/commit/05f2946d90b194eac17d51ca0562d13e9ed0c995)) ##### Features - add snake_case filename option ([#857](https://github.com/gregberge/svgr/issues/857)) ([428b0c7](https://github.com/gregberge/svgr/commit/428b0c7f4c5205bb67ae3e9e7c7e819ec3fc03ba)) - make index template more flexible ([#861](https://github.com/gregberge/svgr/issues/861)) ([003009c](https://github.com/gregberge/svgr/commit/003009c7b234cfe66686b629d3251edb8d46c759)) - **types:** change `SVGProps` from import to import type ([#853](https://github.com/gregberge/svgr/issues/853)) ([095f021](https://github.com/gregberge/svgr/commit/095f0216288ccb5b96a75f154fe3aead074bfa99)) ##### BREAKING CHANGES - index template now receives an array of objects containing both the created component path (`path`) and the original SVG path (`originalPath`) ### [`v7.0.0`](https://github.com/gregberge/svgr/blob/HEAD/CHANGELOG.md#700-httpsgithubcomgregbergesvgrcomparev651v700-2023-03-24) [Compare Source](https://github.com/gregberge/svgr/compare/v6.5.1...v7.0.0) ##### Features - allow specifying `jsxRuntimeImport` in config ([86bb86f](https://github.com/gregberge/svgr/commit/86bb86f47748618f729742e56199355d9c0bc518)), closes [#801](https://github.com/gregberge/svgr/issues/801) [#801](https://github.com/gregberge/svgr/issues/801) - remove [@svgr/plugin-jsx](https://github.com/svgr/plugin-jsx) from core ([a0f078d](https://github.com/gregberge/svgr/commit/a0f078db13936800a32c14ade08b670a14b5a886)) - upgrade to svgo v3 ([#798](https://github.com/gregberge/svgr/issues/798)) ([21b6209](https://github.com/gregberge/svgr/commit/21b6209ef34c51cc0313901f31061afe587ab29b)) ##### BREAKING CHANGES - plugin-jsx is no longer included by default in core - svgr now requires Node.js v14+ #### [6.5.1](https://github.com/gregberge/svgr/compare/v6.5.0...v6.5.1) (2022-10-27) ##### Reverts - Revert "feat(a11y): add attribute role="img" to the svg element ([#750](https://github.com/gregberge/svgr/issues/750))" ([1382232](https://github.com/gregberge/svgr/commit/138223284ad9aebc5bbf94ed3ae7174a66dbc7f5)), closes [#750](https://github.com/gregberge/svgr/issues/750) </details> <details> <summary>actions/add-to-project</summary> ### [`v1.0.0`](https://github.com/actions/add-to-project/releases/tag/v1.0.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.6.1...v1.0.0) #### Summary This release promotes `actions/add-to-projects` to a major version 1 and marks the public API stable. #### What's Changed - build(deps-dev): bump eslint-plugin-github from 4.10.0 to 4.10.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/532 - build(deps-dev): bump prettier from 3.0.3 to 3.2.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/531 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.0 to 0.38.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/530 - build(deps-dev): bump ts-jest from 29.1.1 to 29.1.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/528 - build(deps-dev): bump typescript from 5.4.2 to 5.4.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/533 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.7 to 29.5.12 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/534 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.9.1 to 7.3.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/529 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 7.0.1 to 7.4.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/536 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 7.3.1 to 7.4.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/535 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.6.1...v1.0.0 ### [`v0.6.1`](https://github.com/actions/add-to-project/releases/tag/v0.6.1) [Compare Source](https://github.com/actions/add-to-project/compare/v0.6.0...v0.6.1) #### What's Changed - build(deps-dev): bump eslint-plugin-prettier from 5.0.0 to 5.1.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/514 - build(deps-dev): bump concurrently from 8.2.1 to 8.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/498 - build(deps-dev): bump eslint from 8.49.0 to 8.57.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/520 - build(deps): bump github/codeql-action from 2 to 3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/507 - build(deps): bump actions/upload-artifact from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/508 - Improve output of `check-dist` workflow by [@camchenry](https://github.com/camchenry) in https://github.com/actions/add-to-project/pull/521 - build(deps): bump [@actions/core](https://github.com/actions/core) from 1.10.0 to 1.10.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/470 - build(deps): bump [@actions/github](https://github.com/actions/github) from 5.1.1 to 6.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/500 - build(deps): bump actions/setup-node from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/493 - Update readme and prepare release by [@talune](https://github.com/talune) in https://github.com/actions/add-to-project/pull/523 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.60 to 16.18.91 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/527 - build(deps-dev): bump eslint-plugin-jest from 27.6.0 to 27.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/525 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.7.0 to 7.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/524 - build(deps-dev): bump typescript from 5.2.2 to 5.4.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/526 #### New Contributors - [@camchenry](https://github.com/camchenry) made their first contribution in https://github.com/actions/add-to-project/pull/521 - [@talune](https://github.com/talune) made their first contribution in https://github.com/actions/add-to-project/pull/523 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.6.0...v0.6.1 ### [`v0.6.0`](https://github.com/actions/add-to-project/releases/tag/v0.6.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.5.0...v0.6.0) #### What's Changed - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.57.0 to 5.57.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/357 - build(deps-dev): bump eslint from 8.37.0 to 8.38.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/359 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.57.1 to 5.58.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/360 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.58.0 to 5.59.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/362 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.23 to 16.18.24 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/363 - build(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/365 - build(deps-dev): bump prettier from 2.8.7 to 2.8.8 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/366 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.24 to 16.18.25 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/368 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.0 to 5.59.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/371 - set [@types/node](https://github.com/types/node) version to latest v16 release by [@shiftkey](https://github.com/shiftkey) in https://github.com/actions/add-to-project/pull/373 - build(deps-dev): bump eslint from 8.39.0 to 8.40.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/375 - Added `reopened` event by [@LoneDev6](https://github.com/LoneDev6) in https://github.com/actions/add-to-project/pull/370 - Add details about using a classic PAT by [@LL782](https://github.com/LL782) in https://github.com/actions/add-to-project/pull/356 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.26 to 16.18.27 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/377 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.2 to 5.59.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/376 - chore: document outputs in action manifest by [@EndBug](https://github.com/EndBug) in https://github.com/actions/add-to-project/pull/381 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.27 to 16.18.29 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/379 - build(deps-dev): bump eslint from 8.40.0 to 8.41.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/386 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.29 to 16.18.32 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/385 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.5 to 5.59.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/387 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.32 to 16.18.33 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/388 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.33 to 16.18.34 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/390 - build(deps-dev): bump concurrently from 8.0.1 to 8.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/392 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.7 to 5.59.8 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/391 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.8 to 5.59.9 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/396 - build(deps-dev): bump eslint-plugin-github from 4.7.0 to 4.8.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/393 - build(deps-dev): bump eslint from 8.41.0 to 8.42.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/395 - build(deps-dev): bump concurrently from 8.1.0 to 8.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/397 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.9 to 5.59.11 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/400 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.34 to 16.18.36 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/399 - build(deps-dev): bump eslint from 8.42.0 to 8.43.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/402 - build(deps-dev): bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/403 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.59.11 to 5.60.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/405 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.60.0 to 5.61.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/410 - build(deps-dev): bump eslint from 8.43.0 to 8.44.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/409 - build(deps): bump tough-cookie from 4.0.0 to 4.1.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/414 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.36 to 16.18.38 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/408 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.61.0 to 5.62.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/415 - build(deps-dev): bump eslint-plugin-jest from 27.2.2 to 27.2.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/416 - build(deps-dev): bump eslint-plugin-github from 4.8.0 to 4.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/417 - build(deps-dev): bump eslint from 8.44.0 to 8.45.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/418 - build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/420 - build(deps-dev): bump eslint-plugin-github from 4.9.0 to 4.9.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/419 - build(deps-dev): bump eslint-plugin-github from 4.9.1 to 4.9.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/421 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.38 to 16.18.39 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/423 - build(deps-dev): bump prettier from 2.8.8 to 3.0.0 (and a few others) by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/412 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/426 - build(deps-dev): bump eslint from 8.45.0 to 8.46.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/428 - build(deps-dev): bump jest from 29.6.1 to 29.6.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/427 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/425 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.2.0 to 6.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/430 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.2.0 to 6.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/429 - build(deps-dev): bump prettier from 3.0.0 to 3.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/431 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.2.1 to 6.3.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/432 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.2.1 to 6.3.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/433 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.39 to 16.18.40 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/434 - build(deps-dev): bump prettier from 3.0.1 to 3.0.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/450 - build(deps-dev): bump eslint from 8.46.0 to 8.48.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/448 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.40 to 16.18.46 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/447 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.3.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/451 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.3.0 to 6.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/449 - build(deps-dev): bump eslint-plugin-github from 4.9.2 to 4.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/452 - build(deps-dev): bump concurrently from 8.2.0 to 8.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/453 - build(deps-dev): bump typescript from 5.1.6 to 5.2.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/454 - build(deps-dev): bump jest and [@types/jest](https://github.com/types/jest) by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/455 - build(deps-dev): bump eslint from 8.48.0 to 8.49.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/464 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.46 to 16.18.50 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/463 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.1 to 0.38.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/461 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.5.0 to 6.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/466 - build(deps-dev): bump [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/eslint-plugin) from 6.5.0 to 6.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/465 - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/457 - build(deps-dev): bump jest from 29.6.4 to 29.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/468 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.50 to 16.18.51 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/469 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 6.7.0 to 6.9.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/497 - build(deps-dev): bump [@babel/traverse](https://github.com/babel/traverse) from 7.22.8 to 7.23.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/487 - Correcting job name for PR example by [@CodyCBakerPhD](https://github.com/CodyCBakerPhD) in https://github.com/actions/add-to-project/pull/488 - build(deps-dev): bump [@types/jest](https://github.com/types/jest) from 29.5.4 to 29.5.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/496 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.51 to 16.18.60 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/495 - build(deps-dev): bump eslint-plugin-jest from 27.2.3 to 27.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/494 - Update action to node20 by [@takost](https://github.com/takost) in https://github.com/actions/add-to-project/pull/503 - Update action.yml by [@mattcosta7](https://github.com/mattcosta7) in https://github.com/actions/add-to-project/pull/517 #### New Contributors - [@shiftkey](https://github.com/shiftkey) made their first contribution in https://github.com/actions/add-to-project/pull/373 - [@LoneDev6](https://github.com/LoneDev6) made their first contribution in https://github.com/actions/add-to-project/pull/370 - [@LL782](https://github.com/LL782) made their first contribution in https://github.com/actions/add-to-project/pull/356 - [@EndBug](https://github.com/EndBug) made their first contribution in https://github.com/actions/add-to-project/pull/381 - [@CodyCBakerPhD](https://github.com/CodyCBakerPhD) made their first contribution in https://github.com/actions/add-to-project/pull/488 - [@takost](https://github.com/takost) made their first contribution in https://github.com/actions/add-to-project/pull/503 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.5.0...v0.6.0 ### [`v0.5.0`](https://github.com/actions/add-to-project/releases/tag/v0.5.0) [Compare Source](https://github.com/actions/add-to-project/compare/v0.4.1...v0.5.0) #### What's Changed - ✨ **GHES support: Allow projects outside github.com** by [@saravanan30erd](https://github.com/saravanan30erd) in https://github.com/actions/add-to-project/pull/338 - typo: repo -> project by [@rootulp](https://github.com/rootulp) in https://github.com/actions/add-to-project/pull/330 - Dependency updates: - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.12 to 16.18.14 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/328 - build(deps-dev): bump eslint from 8.34.0 to 8.35.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/326 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.53.0 to 5.54.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/329 - build(deps-dev): bump prettier from 2.8.4 to 2.8.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/334 - build(deps): bump [@actions/github](https://github.com/actions/github) from 5.0.3 to 5.1.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/226 - build(deps-dev): bump prettier from 2.8.5 to 2.8.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/340 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.54.1 to 5.57.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/346 - build(deps-dev): bump eslint from 8.35.0 to 8.37.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/348 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.14 to 16.18.23 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/350 - build(deps-dev): bump eslint-plugin-github from 4.6.1 to 4.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/351 - build(deps-dev): bump concurrently from 7.6.0 to 8.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/352 #### New Contributors ❤️ - [@rootulp](https://github.com/rootulp) made their first contribution in https://github.com/actions/add-to-project/pull/330 - [@saravanan30erd](https://github.com/saravanan30erd) made their first contribution in https://github.com/actions/add-to-project/pull/338 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.4.1...v0.5.0 ### [`v0.4.1`](https://github.com/actions/add-to-project/releases/tag/v0.4.1) [Compare Source](https://github.com/actions/add-to-project/compare/v0.4.0...v0.4.1) #### What's Changed - build(deps-dev): bump eslint from 8.26.0 to 8.28.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/263 - build(deps-dev): bump eslint-plugin-github from 4.4.0 to 4.4.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/253 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.42.0 to 5.43.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/262 - build(deps-dev): bump eslint-plugin-jest from 27.1.3 to 27.1.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/259 - build(deps-dev): bump concurrently from 7.5.0 to 7.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/265 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.43.0 to 5.44.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/266 - build(deps-dev): bump typescript from 4.8.4 to 4.9.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/267 - build(deps-dev): bump prettier from 2.7.1 to 2.8.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/268 - build(deps-dev): bump eslint-plugin-jest from 27.1.5 to 27.1.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/269 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.44.0 to 5.45.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/270 - build(deps-dev): bump [@github/prettier-config](https://github.com/github/prettier-config) from 0.0.4 to 0.0.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/271 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.3 to 16.18.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/272 - build(deps-dev): bump eslint from 8.28.0 to 8.29.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/273 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.4 to 16.18.6 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/275 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.45.0 to 5.45.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/276 - build(deps-dev): bump eslint-plugin-github from 4.4.1 to 4.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/277 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.34.0 to 0.36.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/274 - build(deps-dev): bump prettier from 2.8.0 to 2.8.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/278 - build(deps-dev): bump typescript from 4.9.3 to 4.9.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/280 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.45.1 to 5.46.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/279 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.6 to 16.18.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/281 - Add documentation for setting a default status by [@MasterMedo](https://github.com/MasterMedo) in https://github.com/actions/add-to-project/pull/282 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.7 to 16.18.9 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/285 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.46.0 to 5.46.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/284 - build(deps-dev): bump eslint-plugin-jest from 27.1.6 to 27.1.7 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/286 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.9 to 16.18.10 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/287 - build(deps-dev): bump eslint from 8.29.0 to 8.30.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/288 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.46.1 to 5.47.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/290 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.10 to 16.18.11 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/291 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.47.0 to 5.47.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/292 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.47.1 to 5.49.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/304 - build(deps-dev): bump eslint from 8.30.0 to 8.32.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/302 - build(deps-dev): bump eslint-plugin-jest from 27.1.7 to 27.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/298 - build(deps): bump json5 from 1.0.1 to 1.0.2 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/297 - build(deps-dev): bump prettier from 2.8.1 to 2.8.3 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/305 - build(deps-dev): bump typescript from 4.9.4 to 4.9.5 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/310 - build(deps-dev): bump [@vercel/ncc](https://github.com/vercel/ncc) from 0.36.0 to 0.36.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/307 - build(deps-dev): bump eslint from 8.32.0 to 8.33.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/308 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.49.0 to 5.50.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/309 - build(deps-dev): bump [@types/node](https://github.com/types/node) from 16.18.11 to 16.18.12 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/312 - build(deps-dev): bump prettier from 2.8.3 to 2.8.4 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/314 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.50.0 to 5.51.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/313 - build(deps-dev): bump eslint from 8.33.0 to 8.34.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/315 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.51.0 to 5.52.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/316 - build(deps-dev): bump eslint-plugin-github from 4.6.0 to 4.6.1 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/317 - build(deps-dev): bump [@typescript-eslint/parser](https://github.com/typescript-eslint/parser) from 5.52.0 to 5.53.0 by [@dependabot](https://github.com/dependabot) in https://github.com/actions/add-to-project/pull/319 - epuertat/patch 1 by [@epuertat](https://github.com/epuertat) in https://github.com/actions/add-to-project/pull/323 - Mattcosta7/patch 1 by [@mattcosta7](https://github.com/mattcosta7) in https://github.com/actions/add-to-project/pull/324 #### New Contributors - [@MasterMedo](https://github.com/MasterMedo) made their first contribution in https://github.com/actions/add-to-project/pull/282 - [@epuertat](https://github.com/epuertat) made their first contribution in https://github.com/actions/add-to-project/pull/323 **Full Changelog**: https://github.com/actions/add-to-project/compare/v0.4.0...v0.4.1 </details> <details> <summary>actions/checkout</summary> ### [`v4`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v412) [Compare Source](https://github.com/actions/checkout/compare/v3...v4) - Fix: Disable sparse checkout whenever `sparse-checkout` option is not present [@dscho](https://github.com/dscho) in https://github.com/actions/checkout/pull/1598 </details> <details> <summary>actions/setup-go</summary> ### [`v5`](https://github.com/actions/setup-go/compare/v4...v5) [Compare Source](https://github.com/actions/setup-go/compare/v4...v5) ### [`v4`](https://github.com/actions/setup-go/compare/v3...v4) [Compare Source](https://github.com/actions/setup-go/compare/v3...v4) </details> <details> <summary>actions/stale</summary> ### [`v9`](https://github.com/actions/stale/compare/v8...v9) [Compare Source](https://github.com/actions/stale/compare/v8...v9) ### [`v8`](https://github.com/actions/stale/compare/v7...v8) [Compare Source](https://github.com/actions/stale/compare/v7...v8) </details> <details> <summary>actions/upload-artifact</summary> ### [`v4`](https://github.com/actions/upload-artifact/compare/v3...v4) [Compare Source](https://github.com/actions/upload-artifact/compare/v3...v4) </details> <details> <summary>amplitude/amplitude-javascript</summary> ### [`v8.21.9`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8219-httpsgithubcomamplitudeamplitude-javascriptcomparev8218v8219-2023-04-27) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.8...v8.21.9) ##### Bug Fixes - do not overwrite flushIntervalMillis=0 with default value (10 seconds) ([#589](https://github.com/amplitude/amplitude-javascript/issues/589)) ([9c96890](https://github.com/amplitude/amplitude-javascript/commit/9c96890ecccadfba9ca81822ba9e5723645b9948)) ### [`v8.21.8`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8218-httpsgithubcomamplitudeamplitude-javascriptcomparev8217v8218-2023-04-04) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.7...v8.21.8) ##### Bug Fixes - upgrade to [@amplitude/ua-parser-js](https://github.com/amplitude/ua-parser-js)[@0](https://github.com/0).7.33 ([#588](https://github.com/amplitude/amplitude-javascript/issues/588)) ([d2dec38](https://github.com/amplitude/amplitude-javascript/commit/d2dec387d0af1dcaf6f0c97f71e35ca2a91fd5e4)) ### [`v8.21.7`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8217-httpsgithubcomamplitudeamplitude-javascriptcomparev8216v8217-2023-03-23) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.6...v8.21.7) ##### Bug Fixes - reset referring_domain ([eaa7446](https://github.com/amplitude/amplitude-javascript/commit/eaa74461bd5e88e02c5c78f563ad3f0b9ade417c)) ### [`v8.21.6`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8216-httpsgithubcomamplitudeamplitude-javascriptcomparev8215v8216-2023-03-07) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.5...v8.21.6) ##### Bug Fixes - skip top domain when cookie is disabled ([#580](https://github.com/amplitude/amplitude-javascript/issues/580)) ([a9ff324](https://github.com/amplitude/amplitude-javascript/commit/a9ff3247829bba9fccb60dcf83337809e83f1c04)) ### [`v8.21.5`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8215-httpsgithubcomamplitudeamplitude-javascriptcomparev8214v8215-2023-02-16) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.4...v8.21.5) ##### Bug Fixes - wait to create cookie storage based on user options in init() ([#579](https://github.com/amplitude/amplitude-javascript/issues/579)) ([a682c5b](https://github.com/amplitude/amplitude-javascript/commit/a682c5bb3511b1a65e063cc665ac4cfd9446a6c8)) ### [`v8.21.4`](https://github.com/amplitude/amplitude-javascript/blob/HEAD/CHANGELOG.md#8214-httpsgithubcomamplitudeamplitude-javascriptcomparev8213v8214-2023-01-18) [Compare Source](https://github.com/amplitude/amplitude-javascript/compare/v8.21.3...v8.21.4) ##### Bug Fixes - remove events when 200, no need to check response ([#572](https://github.com/amplitude/amplitude-javascript/issues/572)) ([5b52d16](https://github.com/amplitude/amplitude-javascript/commit/5b52d166a077ff1ba27395d749f42bfc3097625d)) - upgrade dependencies to resolve dependabot vulnerability alerts ([#567](https://github.com/amplitude/amplitude-javascript/issues/567)) ([9207b46](https://github.com/amplitude/amplitude-javascript/commit/9207b466b4998a6cc48a587a59530eaf5f896d7f)) </details> <details> <summary>bats-core/bats-core</summary> ### [`v1.11.0`](https://github.com/bats-core/bats-core/releases/tag/v1.11.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.10.0...v1.11.0) #### Added: - hardened CI scripts by using hashes instead of versions for actions and restricting permissions ([#754](https://github.com/bats-core/bats-core/issues/754), [#770](https://github.com/bats-core/bats-core/issues/770)) - add security.md ([#762](https://github.com/bats-core/bats-core/issues/762)) - add codespell CI checks ([#720](https://github.com/bats-core/bats-core/issues/720)) - dynamic test registration via `bats_test_function` ([#349](https://github.com/bats-core/bats-core/issues/349)) - add check that Bats is executed with Bash >= 3.2 ([#873](https://github.com/bats-core/bats-core/issues/873)) #### Fixed: - `install.sh` now works for deviating `lib/` dirs (like `lib32`,`lib64`) ([#487](https://github.com/bats-core/bats-core/issues/487)) - catch unset `BATS_TEST_SOURCE` in `lib/bats-core/tracing.bash` so `set -u`/`set -o nounset` works as expected ([#827](https://github.com/bats-core/bats-core/issues/827)) - fix `--gather-test-outputs-in` fails on tests with multiple `/` ([#789](https://github.com/bats-core/bats-core/issues/789)) - install does not create unused `/usr/share/bats` anymore ([#857](https://github.com/bats-core/bats-core/issues/857)) - ensure IFS is unchanged in `{setup,teardown}{_suite,_file,}`, `@test` and free code ([#879](https://github.com/bats-core/bats-core/issues/879)) - junit formatter: remove ANSI Codes to avoid invalid XML character ([#886](https://github.com/bats-core/bats-core/issues/886)) #### Changed: - update Docker image with the latest `bats-file` version 0.4.0 ([#780](https://github.com/bats-core/bats-core/issues/780)) - update Docker image with the latest `bats-detik` version 1.3.0 ([#876](https://github.com/bats-core/bats-core/issues/876)) #### Documentation - clarify docker usage ([#741](https://github.com/bats-core/bats-core/issues/741)) - update Arch Linux package URL in installation.rst ([#821](https://github.com/bats-core/bats-core/issues/821)) - rename bash-bats to bats for Arch Linux in installation.rst ([#836](https://github.com/bats-core/bats-core/issues/836)) - fix FAQ entry about setup-/teardown_suite, as they are available now ([#861](https://github.com/bats-core/bats-core/issues/861)) - added logo ([#881](https://github.com/bats-core/bats-core/issues/881)) ### [`v1.10.0`](https://github.com/bats-core/bats-core/releases/tag/v1.10.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.9.0...v1.10.0) #### Added: - add `${BATS_TEST_TAGS[@]}` for querying the tags during a test ([#705](https://github.com/bats-core/bats-core/issues/705)) - print tags on failing tests ([#705](https://github.com/bats-core/bats-core/issues/705)) - test for negative arguments to `--jobs` ([#693](https://github.com/bats-core/bats-core/issues/693)) - add tests for `--formatter cat` ([#710](https://github.com/bats-core/bats-core/issues/710)) - test coverage in CI ([#718](https://github.com/bats-core/bats-core/issues/718)) - Support for [rush](https://github.com/shenwei356/rush) as alternative to GNU parallel ([#729](https://github.com/bats-core/bats-core/issues/729)) - add `bats_pipe` helper function for `run` that executes `\|` as pipes ([#663](https://github.com/bats-core/bats-core/issues/663)) - publish docker images to ghcr.io (additionally to Dockerhub) ([#740](https://github.com/bats-core/bats-core/issues/740)) ##### Documentation: - clarify use cases of `--formatter cat` ([#710](https://github.com/bats-core/bats-core/issues/710)) #### Fixed: - fix `run` with options overwriting the value of `i` ([#726](https://github.com/bats-core/bats-core/issues/726), [#727](https://github.com/bats-core/bats-core/issues/727)) - fix `${BATS_TEST_NAMES[@]}` containing only `--tags` instead of test name since Bats v1.8.0 ([#705](https://github.com/bats-core/bats-core/issues/705)) - fix `run --keep-empty-lines` counting trailing `\n` as (empty) new line ([#711](https://github.com/bats-core/bats-core/issues/711)) - fix short flag unpacker creating bogus command lines with valued flags ([#732](https://github.com/bats-core/bats-core/issues/732)) - fix formatter becoming confused with retries ([#734](https://github.com/bats-core/bats-core/issues/734)) - fix `--gather-test-outputs-in` fails on tests with `/` ([#735](https://github.com/bats-core/bats-core/issues/735)) - fix overriding `date` breaks `--timing` ([#736](https://github.com/bats-core/bats-core/issues/736)) ##### Documentation - typos, minor edits ([#704](https://github.com/bats-core/bats-core/issues/704)) - simplified contributing.md ([#718](https://github.com/bats-core/bats-core/issues/718)) ### [`v1.9.0`](https://github.com/bats-core/bats-core/releases/tag/v1.9.0) [Compare Source](https://github.com/bats-core/bats-core/compare/v1.8.2...v1.9.0) #### Added: - add installation instructions for Debian, Fedora, Gentoo, and OpenSUSE ([#659](https://github.com/bats-core/bats-core/issues/659)) - add `--line-reference-format` to switch file/line references in stack traces ([#665](https://github.com/bats-core/bats-core/issues/665)) - `comma_line` (default): `file.bats, line 1` - `colon`: `file.bats:1` - `uri`: `file:///path/to/file.bats:1` - `custom`: define your own formatter in `bats_format_file_line_reference_custom` - add `bats:focus` tag to run only focused tests ([#679](https://github.com/bats-core/bats-core/issues/679)) - add bats-support, bats-assert, bats-file and bats-detik to Dockerfile ([#674](https://github.com/bats-core/bats-core/issues/674)) ##### Documentation: - add `--help` text and `man` page content for `--filter-tags` ([#679](https://github.com/bats-core/bats-core/issues/679)) #### Fixed: - explicitly check for GNU parallel ([#691](https://github.com/bats-core/bats-core/issues/691)) - wait for report-formatter to finish before ending `bats`' execution, to fix empty files with `--report-fomatter junit` under Docker ([#692](https://github.com/bats-core/bats-core/issues/692)) ##### Documentation - improved clarity of section about output in free code ([#671](https://github.com/bats-core/bats-core/issues/671)) - fixed typos ([#673](https://github.com/bats-core/bats-core/issues/673)) - clarify use cases of `run` ([#366](https://github.com/bats-core/bats-core/issues/366)) </details> <details> <summary>lukeed/clsx</summary> ### [`v2.1.0`](https://github.com/lukeed/clsx/releases/tag/v2.1.0) [Compare Source](https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0) #### Features - Add new `clsx/lite` submodule for `string`-only usage: [`1a49142`](https://github.com/lukeed/clsx/commit/1a49142) *This is a **140b** version of `clsx` that is ideal for Tailwind and/or React contexts, which typically follow this `clsx` usage pattern:* ```js clsx('foo bar', props.maybe && 'conditional classes', props.className); ``` > **Important:** This `clsx/lite` module **ignores all non-string arguments** and is therefore not a 1:1 replacement for `clsx` itself! ```js import { clsx } from 'clsx'; import { clsx as lite } from 'clsx/lite'; // strings-only usage is identical clsx('foo', null, 'bar', true && 'baz'); //=> "foo bar baz" lite('foo', null, 'bar', true && 'baz'); //=> "foo bar baz" // clsx/lite ignores all non-strings clsx('foo', { a: true, b: false, c: true }); //=> "foo a c" lite('foo', { a: true, b: false, c: true }); //=> "foo" ``` *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v2.0.1...v2.1.0 ### [`v2.0.1`](https://github.com/lukeed/clsx/releases/tag/v2.0.1) [Compare Source](https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1) #### Patches - (perf) Cache `arguments.length` & `array.length` for 6% performance gain ([#26](https://github.com/lukeed/clsx/issues/26)): [`deff09b`](https://github.com/lukeed/clsx/commit/deff09b) *Adds 5 bytes (+2%) for ~3% avg performance gain* *Thank you [@jalalazimi](https://github.com/jalalazimi)* #### Chores - Update module size: [`bf64e71`](https://github.com/lukeed/clsx/commit/bf64e71) - Update benchmark results: [`855eec2`](https://github.com/lukeed/clsx/commit/855eec2), [`6e3b2b9`](https://github.com/lukeed/clsx/commit/6e3b2b9), - Replace `nyc` with `c8` in CI: [`6e2468e`](https://github.com/lukeed/clsx/commit/6e2468e) - Update Node CI matrix: [`308a238`](https://github.com/lukeed/clsx/commit/308a238) - Fix readme typos ([#76](https://github.com/lukeed/clsx/issues/76), [#82](https://github.com/lukeed/clsx/issues/82)): [`42354d3`](https://github.com/lukeed/clsx/commit/42354d3), [`4c9a55d`](https://github.com/lukeed/clsx/commit/4c9a55d) *Thank you [@andipaetzold](https://github.com/andipaetzold) and [@acusti](https://github.com/acusti)* *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v2.0.0...v2.0.1 ### [`v2.0.0`](https://github.com/lukeed/clsx/releases/tag/v2.0.0) [Compare Source](https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0) #### Breaking - Add `"exports"` map for native ESM support ([#57](https://github.com/lukeed/clsx/issues/57)): [`3ec8e9f`](https://github.com/lukeed/clsx/commit/3ec8e9f), [`0949868`](https://github.com/lukeed/clsx/commit/0949868) *Also supports TypeScript's `node16`/`nodenext` module resolution* *Maintains CommonJS support (with fixed TS definitions)* *Thank you [@remcohaszing](https://github.com/remcohaszing)~!* #### Chores - Add [Tailwind Support](https://github.com/lukeed/clsx#tailwind-support) section to README ([#65](https://github.com/lukeed/clsx/issues/65), [#68](https://github.com/lukeed/clsx/issues/68)): [`496db1d`](https://github.com/lukeed/clsx/commit/496db1d), [`4a4eadd`](https://github.com/lukeed/clsx/commit/4a4eadd) *Thank you [@kevinlowe0x3F7](https://github.com/kevinlowe0x3F7) & [@kevinlowe0x3F7](https://github.com/kevinlowe0x3F7)* - Add tests for numbers & variadic number arguments: [`c520353`](https://github.com/lukeed/clsx/commit/c520353) - Update package module size: [`03e1cf9`](https://github.com/lukeed/clsx/commit/03e1cf9) *** > **Full Changelog**: https://github.com/lukeed/clsx/compare/v1.2.1...v2.0.0 </details> <details> <summary>open-cli-tools/concurrently</summary> ### [`v8.2.2`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.2) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2) #### What's Changed - fix(suggestion): prefixColors API type to embrace string type by [@SeiwonPark](https://github.com/SeiwonPark) in https://github.com/open-cli-tools/concurrently/pull/439 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/441 - Test against Node.js v20 instead of v19 by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/442 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/449 #### New Contributors - [@SeiwonPark](https://github.com/SeiwonPark) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/439 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.2.1...v8.2.2 ### [`v8.2.1`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.1) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1) #### What's Changed - Delay summary timings output until finished by [@kayahr](https://github.com/kayahr) in https://github.com/open-cli-tools/concurrently/pull/431 - Replace deprecated RxJS code by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/343 #### New Contributors - [@kayahr](https://github.com/kayahr) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/431 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.2.0...v8.2.1 ### [`v8.2.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.2.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0) #### What's Changed - Support REPL languages that use colons by [@wyattades](https://github.com/wyattades) in https://github.com/open-cli-tools/concurrently/pull/393 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/427 #### New Contributors - [@wyattades](https://github.com/wyattades) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/393 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.1.0...v8.2.0 ### [`v8.1.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.1.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0) #### What's Changed - fix: move `types` condition to the front by [@Andarist](https://github.com/Andarist) in https://github.com/open-cli-tools/concurrently/pull/422 - Allow setting `raw` per command when using the API by [@chbiel](https://github.com/chbiel) in https://github.com/open-cli-tools/concurrently/pull/411 #### New Contributors - [@Andarist](https://github.com/Andarist) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/422 - [@chbiel](https://github.com/chbiel) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/411 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.0.1...v8.1.0 ### [`v8.0.1`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.0.1) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1) #### What's Changed - Fix release workflow by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/408 - Update dependencies by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/409 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v8.0.0...v8.0.1 ### [`v8.0.0`](https://github.com/open-cli-tools/concurrently/releases/tag/v8.0.0) [Compare Source](https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0) #### What's Changed - **Breaking change:** Drop support for Node.js v12 & add support for Node.js v18 by [@paescuj](https://github.com/paescuj) in https://github.com/open-cli-tools/concurrently/pull/342 - Add support for Bun by [@jakeboone02](https://github.com/jakeboone02) in https://github.com/open-cli-tools/concurrently/pull/406 - Add `--kill-signal` option by [@paulsmithkc](https://github.com/paulsmithkc) in https://github.com/open-cli-tools/concurrently/pull/402 - Fixed broken link in the readme by [@abstractpoint](https://github.com/abstractpoint) in https://github.com/open-cli-tools/concurrently/pull/390 #### New Contributors - [@abstractpoint](https://github.com/abstractpoint) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/390 - [@jakeboone02](https://github.com/jakeboone02) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/406 - [@paulsmithkc](https://github.com/paulsmithkc) made their first contribution in https://github.com/open-cli-tools/concurrently/pull/402 **Full Changelog**: https://github.com/open-cli-tools/concurrently/compare/v7.6.0...v8.0.0 </details> <details> <summary>crazy-max/ghaction-github-runtime</summary> ### [`v3`](https://github.com/crazy-max/ghaction-github-runtime/compare/v2...v3) [Compare Source](https://github.com/crazy-max/ghaction-github-runtime/compare/v2...v3) </details> <details> <summary>cue-lang/cue</summary> ### [`v0.8.1`](https://github.com/cue-lang/cue/releases/tag/v0.8.1) [Compare Source](https://github.com/cue-lang/cue/compare/v0.8.0...v0.8.1) This release includes a number of fixes detailed below: [CL 1186144](https://cuelang.org/cl/1186144) fixes a number of evaluator panics which could be triggered by calling the `cue.Value.Expr` method, which also happened when using the OpenAPI encoder. [CL 1173100](https://cuelang.org/cl/1173100) fixes `cue get go` panics which might occur when any Go packages are vendored or use imported alias declarations. [CL 1185281](https://cuelang.org/cl/1185281) fixes a regression introduced in `v0.8.0` which led to some incorrect failures in `tools/flow` and `cue cmd`. <details> <summary>Full list of changes since v0.8.0</summary> - internal/cueversion: bump for v0.8.1 by [@mvdan](https://github.com/mvdan) in [`95bed3d`](https://github.com/cue-lang/cue/commit/95bed3d42cda04c2e5a43c408195781adddce51e) - cue: adjust Environment for comprehensions by [@mpvl](https://github.com/mpvl) in [`4cdb317`](https://github.com/cue-lang/cue/commit/4cdb3175b889b0ce9d198b26e0699d313d4156ab) - Revert "tools/flow: check and return errors from task values" by [@rogpeppe](https://github.com/rogpeppe) in [`0630a37`](https://github.com/cue-lang/cue/commit/0630a37c42b56133b247d31c100cb145a5244699) - cmd/cue: find packages by canonical path in get go by [@uhthomas](https://github.com/uhthomas) in [`773ab2d`](https://github.com/cue-lang/cue/commit/773ab2d76c513381d6c732397c866d16e4219776) </details> ### [`v0.8.0`](https://github.com/cue-lang/cue/releases/tag/v0.8.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.7.1...v0.8.0) This release includes experimental support for CUE Modules (more details below), as well as a number of improvements and fixes. More CLs and refactors have also landed for the core evaluator's performance work. These aren't enabled yet as the work isn't complete; subscribe to [the performance umbrella issue](https://github.com/cue-lang/cue/issues/2850) to read regular updates. As a reminder: users can register their projects with [Unity](https://cuelabs.dev/unity/), our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. It continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. #### Modules This release includes experimental support for CUE modules in `cmd/cue`, as outlined in the updated [Modules and package management proposal v3](https://github.com/cue-lang/cue/discussions/2939). Alongside this release, we have published [a tutorial on the new website](https://alpha.cuelang.org/docs/tutorial/working-with-a-custom-module-registry/) which shows how to publish and fetch modules with a custom module registry. We have also published the first version of the [Modules reference documentation](https://alpha.cuelang.org/docs/reference/modules/), the canonical documentation page describing how CUE modules work in detail. Note that support for CUE modules is still experimental and subject to change, and needs to be explicitly enabled via `CUE_EXPERIMENT=modules`. See `cue help environment` for more information on the environment variables used below. CUE maps modules to registries via `$CUE_REGISTRY`, which supports a simple string configuration format as well as a more detailed CUE configuration format which can be read from disk. See `cue help registryconfig` for more details. The new `cue mod tidy` command rewrites `cue.mod/module.cue` in its canonical format, adds any missing module dependency requirements, and removes unused ones. The new `cue mod publish` command publishes the current module to a module registry. The new `cue mod get` command can add a new module dependency, update an existing one, or downgrade an existing one as long as it does not cause any conflict. When running commands like `cue export` with `CUE_EXPERIMENT=modules`, dependencies are automatically fetched from module registries following `$CUE_REGISTRY` and cached on disk inside `$CUE_CACHE_DIR`. #### CUE Language Server Protocol Implementation This release includes the first early version of an experimental [Language Server Protocol (LSP)](https://microsoft.github.io/language-server-protocol/) implementation for CUE. Whilst it remains experimental, the `cmd/cuepls` binary is separate from `cmd/cue`. However at a later date it will most likely to become a subcommand of `cmd/cue` like `cue lsp serve`. We are working on updating the [VSCode](https://github.com/cue-sh/vscode-cue) plugin to use `cmd/cuepls`, as well as supporting an initial version of a plugin for Neovim. For [JetBrains](https://www.jetbrains.com/) users, we are working with the author of the [CUE](https://plugins.jetbrains.com/plugin/16126-cue) plugin to understand how best to integrate `cmd/cuepls` with JetBrains. We will share announcements once the editor integrations are ready for use, and once more LSP features beyond formatting files are available. Subscribe to the [LSP announce discussion](https://github.com/cue-lang/cue/discussions/2842), or join us in `#cuepls` on [CUE Slack](https://join.slack.com/t/cuelang/shared_invite/enQtNzQwODc3NzYzNTA0LTAxNWQwZGU2YWFiOWFiOWQ4MjVjNGQ2ZTNlMmIxODc4MDVjMDg5YmIyOTMyMjQ2MTkzMTU5ZjA1OGE0OGE1NmE). #### Go API Note that this version of CUE requires Go 1.21 or later, following [our policy](https://github.com/cue-lang/cue?tab=readme-ov-file#go-release-support-policy) to support the latest two stable Go releases just like upstream. The [`cue/load` package](https://pkg.go.dev/cuelang.org/go/cue/load@v0.8.0) supports the CUE Modules experiment out of the box with the environment variable `CUE_EXPERIMENT=modules`. Alternatively, a custom registry and authorizer can be configured with the `Config.Registry` field via the [`modconfig.NewRegistry`](https://pkg.go.dev/cuelang.org/go/mod/modconfig@v0.8.0) API. `cue/load` also has a new `Config.Env` struct field to provide the environment variables used to load CUE modules from registries. It defaults to using `os.Environ`. We have also added new Go examples to the `cue/load` package, including an [example demonstrating the use of a CUE modules registry](https://pkg.go.dev/cuelang.org/go/cue/load@v0.8.0#example-package-ExternalModules). [CL 1173271](https://cuelang.org/cl/1173271) drops support for legacy `pkg` directories, which have been deprecated since the transition to a `cue.mod` directory in 2019. [CL 1174069](https://cuelang.org/cl/1174069) replaces a few more uses of the deprecated `cue.Instance` type with `cue.InstanceOrValue`. [CL 1175779](https://cuelang.org/cl/1175779) deprecates the `FileOffset` and `File.Base` APIs in `cue/token`, which were inherited from `go/token` but never had any effect. #### Language There are no changes to the language in this version. #### Spec [CL 1173197](https://cuelang.org/cl/1173197) makes the use of the term "builtin function" consistent across the document. #### Core Evaluator [CL 1173262](https://cuelang.org/cl/1173262) fixes a regression introduced by v0.7.0's upgrade to `github.com/cockroachdb/apd/v3` where some arithmetic operations would result in an extra `0` digit. #### Encoders [CL 1173689](https://cuelang.org/cl/1173689) fixes the YAML encoder so that strings looking like hexadecimal numbers are properly quoted. #### Builtins [CL 1173735](https://cuelang.org/cl/1173735) replaces the uses of Go's `net` package with `net/netip` when dealing with IP addresses, which makes them immutable, comparable, and take less memory. [CL 1173926](https://cuelang.org/cl/1173926) adds an `IPv6` API to `net` to check that a value is a valid IPv6 address, mirroring `IPv4` and taking advantage of the switch to the Go `net/netip` package. [CL 1174339](https://cuelang.org/cl/1174339) fixes `tool/exec` so that it correctly applies `env` defaults in CUE values. [CL 1174623](https://cuelang.org/cl/1174623) fixes `tool/exec` so that it accepts `env` list values as documented. #### `cmd/cue` [CL 1176194](https://cuelang.org/cl/1176194) adds a `language.version` field to `cue.mod/module.cue` to track what CUE language version a module was written for. This will become necessary to make future language changes as smooth as possible for CUE users. For example, running `cue mod init` or `cue mod tidy` with the v0.8.0 release should add `language: version: "v0.8.0"` when the field isn't present. [CL 1173892](https://cuelang.org/cl/1173892) adds a `cue help environment` section to document the environment variables used by the CLI, such as `CUE_EXPERIMENT` and `CUE_REGISTRY`. [CL 1176665](https://cuelang.org/cl/1176665) fixes `cue cmd` so that legacy commands always get the corresponding CUE schema unified. [CL 1177330](https://cuelang.org/cl/1177330) fixes a bug where some evaluation errors in `tools/flow` and `cue cmd` were omitted, causing unintended results. [CL 1177546](https://cuelang.org/cl/1177546) tweaks `cmd/cue` so that it obeys the `--package` flag when the output format is CUE. <details> <summary>Full list of changes since v0.7.1</summary> - internal/cueversion: bump fallbackVersion for v0.8.0 by [@mvdan](https://github.com/mvdan) in [`7d75741`](https://github.com/cue-lang/cue/commit/7d757419377e66b0aa7bc7a6d68b6b6801214bd3) - cue/load: make packages specified as args work correctly by [@rogpeppe](https://github.com/rogpeppe) in [`c399d88`](https://github.com/cue-lang/cue/commit/c399d8870386f214d197d1a336e1b3f1afefeb4a) - internal/mod/modresolve: do not use regular field in registry config schema by [@rogpeppe](https://github.com/rogpeppe) in [`d272140`](https://github.com/cue-lang/cue/commit/d272140c53ceadd15552b60f7bd87b7d6518b961) - update cuelabs.dev/oci/ociregistry to pull in fix for [#2934](https://github.com/cue-lang/cue/issues/2934) by [@mvdan](https://github.com/mvdan) in [`0e33883`](https://github.com/cue-lang/cue/commit/0e33883dd5d29129c857d9684d93b860a1ea0803) - cmd/cue: mod init should only add `@v0` with the experiment by [@mvdan](https://github.com/mvdan) in [`24f93c9`](https://github.com/cue-lang/cue/commit/24f93c9b616a3870c753ecb916037928d97fdd31) - cmd/cue: repurpose modinit test for language.version by [@mvdan](https://github.com/mvdan) in [`77741ff`](https://github.com/cue-lang/cue/commit/77741ffd34907b166eab8a9d4ee78a5d04c0fe78) - cmd/cue: mention CUE_DEBUG in cue help environment by [@rogpeppe](https://github.com/rogpeppe) in [`d5ecd6c`](https://github.com/cue-lang/cue/commit/d5ecd6c77beff73ff6cd59dee2afa2c10c652f1a) - internal/mod/modresolve: fix stripPrefix for exact match by [@rogpeppe](https://github.com/rogpeppe) in [`fa65317`](https://github.com/cue-lang/cue/commit/fa65317cb72164b37d2e94433705432a3e4f3ad9) - internal/\_e2e: remove cleanup.go and tools.go by [@mvdan](https://github.com/mvdan) in [`ec6cc09`](https://github.com/cue-lang/cue/commit/ec6cc098f192f6869f0f53b6de8744f4d0c81516) - internal/e2e: join into the root Go module by [@mvdan](https://github.com/mvdan) in [`31e47e2`](https://github.com/cue-lang/cue/commit/31e47e2882339b541ad2ab375f6f1eb05e1686dd) - internal/e2e: test that we can't replace published versions by [@mvdan](https://github.com/mvdan) in [`d1104bd`](https://github.com/cue-lang/cue/commit/d1104bd5b55d58e84e30b8995d1c4eab75b09f96) - internal/e2e: stop creating GitHub repositories by [@mvdan](https://github.com/mvdan) in [`ba698de`](https://github.com/cue-lang/cue/commit/ba698deda3ff8259bf80679183d3bed23e0f2b5e) - all: prevent tests from using the host's docker/config.json by [@mvdan](https://github.com/mvdan) in [`d48dcbe`](https://github.com/cue-lang/cue/commit/d48dcbecbc82edacd50c26ce5f88ab02b3df8e27) - internal/cueversion: bump fallbackVersion for v0.8.0-rc.1 by [@mvdan](https://github.com/mvdan) in [`ccb64b1`](https://github.com/cue-lang/cue/commit/ccb64b11acd64bc40d9568d0b6f0a6417821600e) - doc/tutorial: skip module.cue as a golden file to avoid churn by [@mvdan](https://github.com/mvdan) in [`d97e914`](https://github.com/cue-lang/cue/commit/d97e914bc6f2e45df2ae8b8adb715b0e9ffb8ad3) - cmd/cue: use CUE_VERSION_OVERRIDE in script tests to avoid churn by [@mvdan](https://github.com/mvdan) in [`e529ce6`](https://github.com/cue-lang/cue/commit/e529ce6479f027418a54b35eaa1dce1b9bbcd7e5) - cmd/cue: fix "login" on a clean environment, and add tests by [@mvdan](https://github.com/mvdan) in [`f6238e5`](https://github.com/cue-lang/cue/commit/f6238e57d448aa220f8d446d85c9a0126932ebe4) - internal/cueversion: convert spaces to underscore in Go version by [@rogpeppe](https://github.com/rogpeppe) in [`0b7c434`](https://github.com/cue-lang/cue/commit/0b7c434edb81a66a0449315e519e9da1ae95dde6) - cmd/cue,mod/modconfig: send User-Agent header by [@rogpeppe](https://github.com/rogpeppe) in [`6db0b7f`](https://github.com/cue-lang/cue/commit/6db0b7f8141f25f662da40da06b69ed9259cc7cf) - internal/cueversion: new package by [@rogpeppe](https://github.com/rogpeppe) in [`5dbbbcb`](https://github.com/cue-lang/cue/commit/5dbbbcbaf46f9927ff6117d417f6a98ec305bef6) - cmd/cue: enable HTTP logging for cue login by [@rogpeppe](https://github.com/rogpeppe) in [`9f556fe`](https://github.com/cue-lang/cue/commit/9f556fe85ce258d6204809e3a04982fd1cc36570) - cmd/cue: implement cue mod tidy --check by [@rogpeppe](https://github.com/rogpeppe) in [`9789ee6`](https://github.com/cue-lang/cue/commit/9789ee62bf6618f39489d2888db2e3b851a30102) - internal/modload: implement tidiness checker by [@rogpeppe](https://github.com/rogpeppe) in [`405511d`](https://github.com/cue-lang/cue/commit/405511d5d4df12abe3994684dd3258955eeb82c2) - mod/modfile: check canonical language version by [@rogpeppe](https://github.com/rogpeppe) in [`2e503e0`](https://github.com/cue-lang/cue/commit/2e503e0b7af4bc6aea47670996ec0141cdd479b9) - internal/mod/modload: split Tidy from UpdateVersions by [@rogpeppe](https://github.com/rogpeppe) in [`0a23647`](https://github.com/cue-lang/cue/commit/0a23647110db3df07651d95351b67989edb4b9b8) - bump ociregistry dependency to pull in a panic fix by [@mvdan](https://github.com/mvdan) in [`382ea51`](https://github.com/cue-lang/cue/commit/382ea513311208ad656c0ae1a86001d201e8b0ae) - cmd/cue: implement support for HTTP logging by [@rogpeppe](https://github.com/rogpeppe) in [`9c8b09a`](https://github.com/cue-lang/cue/commit/9c8b09a7d8fb2b8f6cc62d2ccb59d706abff1e1b) - internal/httplog: new package by [@rogpeppe](https://github.com/rogpeppe) in [`893798b`](https://github.com/cue-lang/cue/commit/893798b85aad167f4a099bd0e933672be2e959fd) - Revert "internal/e2e: partially revert using `cue mod init modpath@version`" by [@mvdan](https://github.com/mvdan) in [`b1e40ae`](https://github.com/cue-lang/cue/commit/b1e40aefdbf240a3fc1d2cbe293dc78c37ded1f0) - cmd/cue: use fallbackVersion when built via a directory replace by [@mvdan](https://github.com/mvdan) in [`e54fb85`](https://github.com/cue-lang/cue/commit/e54fb85dd7ae59d14ef09def000a7de6184ac843) - cmd/cue: hard-code a fallback CUE semver version by [@mvdan](https://github.com/mvdan) in [`fc7038a`](https://github.com/cue-lang/cue/commit/fc7038a26617c256ed99aa4317de03e2e1dd2ef5) - update golang.org/x/... dependencies for v0.8.0 by [@mvdan](https://github.com/mvdan) in [`6afa3ef`](https://github.com/cue-lang/cue/commit/6afa3ef593a30ae7a7cf17dd003d6eb62056b674) - internal/ci: update the pinned Go version for v0.8 by [@mvdan](https://github.com/mvdan) in [`a1e8429`](https://github.com/cue-lang/cue/commit/a1e842986d5a2c6abde4fcf3c010bce36130590c) - internal/cuedebug: new package by [@rogpeppe](https://github.com/rogpeppe) in [`6ad495d`](https://github.com/cue-lang/cue/commit/6ad495d46b07b415a28862bd1cd52dbf166f144f) - cue/load: fix race in testing by [@rogpeppe](https://github.com/rogpeppe) in [`ee26ee2`](https://github.com/cue-lang/cue/commit/ee26ee2fb1f27805af7b1fa34b7f679f5c8e592d) - mod/modconfig: make http transport configurable by [@rogpeppe](https://github.com/rogpeppe) in [`0ef11fc`](https://github.com/cue-lang/cue/commit/0ef11fc4fae1ca6f198c8880c8d7b62872aa758c) - internal/core/adt: set nonRooted by [@mpvl](https://github.com/mpvl) in [`28ae97d`](https://github.com/cue-lang/cue/commit/28ae97d3e86338e2280e6f02f75ea14bb6286247) - internal/core/debug: more state in formation by [@mpvl](https://github.com/mpvl) in [`2273c7d`](https://github.com/cue-lang/cue/commit/2273c7d675f2ad56dd684be6cbdf61b057a77179) - internal/core/adt: make runner a struct instead of func by [@mpvl](https://github.com/mpvl) in [`0651453`](https://github.com/cue-lang/cue/commit/065145343ec9c954e217a3eb8b1e7503ea80d2c7) - internal/core/adt: fix conjunct index by [@mpvl](https://github.com/mpvl) in [`2554094`](https://github.com/cue-lang/cue/commit/2554094088320049aac8c929440cf17f4c20800c) - internal/core/adt: implement new evaluator by [@mpvl](https://github.com/mpvl) in [`5f55954`](https://github.com/cue-lang/cue/commit/5f55954410f495e6b6c421bd4ac107fc55c54cb7) - internal/core/adt: only error if inspected node missed counters by [@mpvl](https://github.com/mpvl) in [`c547590`](https://github.com/cue-lang/cue/commit/c547590757f0831e040285102aa3b2457d9e37c9) - internal/core/adt: closedness improvements by [@mpvl](https://github.com/mpvl) in [`b7f76be`](https://github.com/cue-lang/cue/commit/b7f76bedb8b16f968c6fd0543b23fdfe1ceddb65) - internal/core/adt: add lifetime check for closedness by [@mpvl](https://github.com/mpvl) in [`cdcb6fa`](https://github.com/cue-lang/cue/commit/cdcb6fa19bf332283500711ce5381df1cc1935e7) - internal/core/adt: mark functions only used in old evaluator by [@mpvl](https://github.com/mpvl) in [`f55405b`](https://github.com/cue-lang/cue/commit/f55405b243f0f00640659d2f25e974d6b0387f53) - internal/core/adt: exclude tests with disjunctions by [@mpvl](https://github.com/mpvl) in [`145b436`](https://github.com/cue-lang/cue/commit/145b436a7a5107fa3a7a895cae522433cb48c1b9) - internal/core/adt: propagate closedness up by [@mpvl](https://github.com/mpvl) in [`9d951f6`](https://github.com/cue-lang/cue/commit/9d951f6e1c6abba77643d4e2ec15fef18e19b262) - internal/core/adt: introduce visual CUE debugger by [@mpvl](https://github.com/mpvl) in [`37c0260`](https://github.com/cue-lang/cue/commit/37c0260969b2562e6936414ffdea86bc41beec9e) - mod/...: API tweaks by [@rogpeppe](https://github.com/rogpeppe) in [`7d4d90d`](https://github.com/cue-lang/cue/commit/7d4d90de3798a00807f50373466322771bd0a10a) - cmd/cue: implement cue mod get by [@rogpeppe](https://github.com/rogpeppe) in [`93643a3`](https://github.com/cue-lang/cue/commit/93643a322842d51b3b440c0b7c28e7893d4fed72) - cue/load: implement UpdateRequirements by [@rogpeppe](https://github.com/rogpeppe) in [`2dc8879`](https://github.com/cue-lang/cue/commit/2dc8879458856a3216525faac03ef72e60f80f0b) - cue/load,mod/modconfig: support custom environment variables by [@rogpeppe](https://github.com/rogpeppe) in [`bab5d3a`](https://github.com/cue-lang/cue/commit/bab5d3a8d1ae6ec55b51e3cee7c96f27d6cbb478) - bump ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`50c2472`](https://github.com/cue-lang/cue/commit/50c247284d27d902f2e8fb7392f1f16a21626284) - mod/...: remove three somewhat unnecessary APIs by [@mvdan](https://github.com/mvdan) in [`6cba4c0`](https://github.com/cue-lang/cue/commit/6cba4c0b2dee8009f3c2578980312506f805af73) - mod/module: assume Go 1.21 or later by [@mvdan](https://github.com/mvdan) in [`aa60650`](https://github.com/cue-lang/cue/commit/aa60650be9e40a18f335684f468086d1d2994c9e) - cue/load: delete unexported funcs only used in tests by [@mvdan](https://github.com/mvdan) in [`812bd85`](https://github.com/cue-lang/cue/commit/812bd8525b01c7ee0b8f99d40334c667a0fd4b13) - internal/str: remove as it only had one trivial use by [@mvdan](https://github.com/mvdan) in [`77d5973`](https://github.com/cue-lang/cue/commit/77d5973584dfe47c0ec64885326d1a7d5c76dcae) - cue/load: remove unused code from the modules refactors by [@mvdan](https://github.com/mvdan) in [`c5e67f2`](https://github.com/cue-lang/cue/commit/c5e67f2f6ffe723473600cf67bd7028d979b8335) - cmd/cue: fix bad variable reference by [@rogpeppe](https://github.com/rogpeppe) in [`77936ec`](https://github.com/cue-lang/cue/commit/77936ec16926012597aeb9ba99e7844c7910a883) - cmd/cue: add registryconfig help by [@rogpeppe](https://github.com/rogpeppe) in [`91c72d9`](https://github.com/cue-lang/cue/commit/91c72d9efc103376ab465ac2bc6d9a1c8ac2dcc6) - internal/e2e: partially revert using `cue mod init modpath@version` by [@mvdan](https://github.com/mvdan) in [`94a444f`](https://github.com/cue-lang/cue/commit/94a444fe9ce568e4e7e90f6aca142de605874b16) - cmd/cue: support --package flag when output is CUE by [@myitcv](https://github.com/myitcv) in [`93acaa3`](https://github.com/cue-lang/cue/commit/93acaa356a707751467b9422c8288c9759a25560) - cue/load: add runnable example for external modules by [@rogpeppe](https://github.com/rogpeppe) in [`cc98a77`](https://github.com/cue-lang/cue/commit/cc98a77ca5b0fb974618fef4845b794cc217282d) - mod/modconfig: factor out from cmd/cue by [@rogpeppe](https://github.com/rogpeppe) in [`59e6fd0`](https://github.com/cue-lang/cue/commit/59e6fd0202ecbdb7ff85232c76414bd7c61eeca9) - mod/...: mark as experimental by [@rogpeppe](https://github.com/rogpeppe) in [`3210353`](https://github.com/cue-lang/cue/commit/3210353d52e1ca536794114c4d6cf948d85203c0) - mod/modcache: move from internal/mod/modcache by [@rogpeppe](https://github.com/rogpeppe) in [`4232562`](https://github.com/cue-lang/cue/commit/4232562fe17621baad4df734d9ec828b106f6d7c) - internal/par: move from internal/mod/internal/par by [@rogpeppe](https://github.com/rogpeppe) in [`d1fba4f`](https://github.com/cue-lang/cue/commit/d1fba4f552c64e20e89a9bd3afcc60818a433ad4) - mod/modregistry: move from internal/mod/modregistry by [@rogpeppe](https://github.com/rogpeppe) in [`aabff10`](https://github.com/cue-lang/cue/commit/aabff1016ba8f58fad0d597973a259d55026452e) - mod/modfile: move from internal/mod/modfile by [@rogpeppe](https://github.com/rogpeppe) in [`8533c7d`](https://github.com/cue-lang/cue/commit/8533c7d6e82ea78c4517eb03ed41f4d581614a36) - mod/module: move from internal/mod/module by [@rogpeppe](https://github.com/rogpeppe) in [`2727766`](https://github.com/cue-lang/cue/commit/272776663738b3175c3a7eb8b901bf15d0f10ba5) - cue: fix typos in the Hid function documentation by [@kharf](https://github.com/kharf) in [`723438a`](https://github.com/cue-lang/cue/commit/723438a577540bceaf726efe8f0131ab172f5561) - cue/load: add a runnable package example by [@mvdan](https://github.com/mvdan) in [`5b4a581`](https://github.com/cue-lang/cue/commit/5b4a5819b55593357486cba3c7fc0d0a1853f031) - internal/ci: fix reference to tool/file.RemoveAll by [@mvdan](https://github.com/mvdan) in [`d42ab3d`](https://github.com/cue-lang/cue/commit/d42ab3da7fe4cdddc3d9499f29cf55f4682be25c) - tools/flow: check and return errors from task values by [@nickfiggins](https://github.com/nickfiggins) in [`9ef35eb`](https://github.com/cue-lang/cue/commit/9ef35ebfda957348260b4461b27cd8e935951e39) - cmd/cue: stop trying to set $HOME in script_test.go by [@mvdan](https://github.com/mvdan) in [`ff8d497`](https://github.com/cue-lang/cue/commit/ff8d4977198e327f2fdb7eca49df70fc78af8f32) - cmd/cue: skip the logins.json authorizer if no file is found by [@mvdan](https://github.com/mvdan) in [`32a72ae`](https://github.com/cue-lang/cue/commit/32a72aed296141b0789cb866144d75a39e8cc524) - bump ociregistry module version by [@rogpeppe](https://github.com/rogpeppe) in [`30cae5b`](https://github.com/cue-lang/cue/commit/30cae5b304e31bce18ef9ca603d865da5bb1ee51) - internal/ci: fix goreleaser when using gomod.proxy by [@mvdan](https://github.com/mvdan) in [`d779310`](https://github.com/cue-lang/cue/commit/d779310a04c941d486cbdce2fbe35e2d61278ab5) - internal/ci: print goreleaser config yaml before using it by [@mvdan](https://github.com/mvdan) in [`3b9da48`](https://github.com/cue-lang/cue/commit/3b9da48890f8fad88779cb040ce61147009465fe) - bump ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`44fbc2a`](https://github.com/cue-lang/cue/commit/44fbc2ac431c185ad81b7a5e0310c834cbfee1b8) - cmd/cue: improve error message when modules experiment not enabled by [@rogpeppe](https://github.com/rogpeppe) in [`d1f1793`](https://github.com/cue-lang/cue/commit/d1f179363fb81f96943985a96d3b19a7ae099bba) - hide testdata cue files to allow `cue mod tidy` to pass by [@mvdan](https://github.com/mvdan) in [`bd96660`](https://github.com/cue-lang/cue/commit/bd966600bfc1a9fed729ee9bd2520a6bffe09047) - cmd/cue: clarify prefix matching semantics by [@rogpeppe](https://github.com/rogpeppe) in [`7a9e47c`](https://github.com/cue-lang/cue/commit/7a9e47cf455049a678dc6634486ad85687d083d1) - cue.mod: add language.version to the root module by [@mvdan](https://github.com/mvdan) in [`ac53f42`](https://github.com/cue-lang/cue/commit/ac53f42961213a301aa7ea84e89d94782c1f40c4) - cmd/cue: add language version in "mod init" by [@rogpeppe](https://github.com/rogpeppe) in [`eb5dc6a`](https://github.com/cue-lang/cue/commit/eb5dc6a201a71faa1498fad787473e56f6d6d9d4) - all: replace uses of deprecated ioutil APIs by [@mvdan](https://github.com/mvdan) in [`d6ecc3d`](https://github.com/cue-lang/cue/commit/d6ecc3d0e1161ea7125e5de1140ee421645adf10) - bump golang.org/x dependencies for v0.8 by [@mvdan](https://github.com/mvdan) in [`88431ee`](https://github.com/cue-lang/cue/commit/88431eef55bf4ced3e0d629dae2e009b4fe470c1) - cmd/cue: use CUE_CACHE_DIR instead of CUE_MODCACHE by [@mvdan](https://github.com/mvdan) in [`8bc8b1e`](https://github.com/cue-lang/cue/commit/8bc8b1e6883a9094cf8b5bc1674f902a190de7df) - cmd/cue: support registry file configuration by [@rogpeppe](https://github.com/rogpeppe) in [`c1e1a52`](https://github.com/cue-lang/cue/commit/c1e1a524f3ee902030e68b5bf8c9edc0b5b94e7b) - internal/mod/modresolve: use same registry representation as CUE_REGISTRY by [@rogpeppe](https://github.com/rogpeppe) in [`cbf84aa`](https://github.com/cue-lang/cue/commit/cbf84aab89ed63c57d0785407df290fa5c069dcc) - cmd/cue: update mod docs by [@rogpeppe](https://github.com/rogpeppe) in [`fa30d88`](https://github.com/cue-lang/cue/commit/fa30d88efc583208a5ea8a8cdb69ffd9b6ddd1a6) - all: replace mpvl/unique with slices.Compact by [@mvdan](https://github.com/mvdan) in [`057c324`](https://github.com/cue-lang/cue/commit/057c3249cfe387cec6cfb4bea0985d1eccb23185) - cmd/cue: use single implementation of CUE_REGISTRY logic by [@rogpeppe](https://github.com/rogpeppe) in [`59b92a4`](https://github.com/cue-lang/cue/commit/59b92a4038f82d93aed023cfff3602d57ae0589c) - cmd/cue: fix other commands to work with modules by [@rogpeppe](https://github.com/rogpeppe) in [`3d9e272`](https://github.com/cue-lang/cue/commit/3d9e272b51470df37172dea29738c8876e290c28) - internal/mod/modresolve: add config file functionality by [@rogpeppe](https://github.com/rogpeppe) in [`be5d706`](https://github.com/cue-lang/cue/commit/be5d706df3b1ddd072398ba9f579413a86046b62) - doc/tutorial: fix broken install.md link by [@TheCoreMan](https://github.com/TheCoreMan) in [`6691137`](https://github.com/cue-lang/cue/commit/66911379540bdec5a33f0f41a7de7e378816d41f) - all: start taking advantage of Go 1.21+ by [@mvdan](https://github.com/mvdan) in [`40d5162`](https://github.com/cue-lang/cue/commit/40d5162b106fdf2540bb18453f7c166d20c643d0) - cmd/cue: use immutable tags in cue mod registry by [@rogpeppe](https://github.com/rogpeppe) in [`e0c253b`](https://github.com/cue-lang/cue/commit/e0c253b56e924e7206500144c57aff41fb67ece3) - internal/ci: add cuepls to goreleaser config by [@myitcv](https://github.com/myitcv) in [`c36b959`](https://github.com/cue-lang/cue/commit/c36b95905c2eb8dec280fb2bfd8925b317a697b5) - cuepls: support formatting of CUE files by [@myitcv](https://github.com/myitcv) in [`d185263`](https://github.com/cue-lang/cue/commit/d185263b261eeb54e7dc035142ecb88ed003cb35) - cuepls: support .cue filetype by [@myitcv](https://github.com/myitcv) in [`55f965d`](https://github.com/cue-lang/cue/commit/55f965d42c7d34c8849d9c689929a4fa72b9d375) - cuepls: remove more server implementation by [@myitcv](https://github.com/myitcv) in [`1ae88a6`](https://github.com/cue-lang/cue/commit/1ae88a6458ebc1465e2e933bdafe6f75a9832d7a) - cuepls: first integration test by [@myitcv](https://github.com/myitcv) in [`181a537`](https://github.com/cue-lang/cue/commit/181a537aa0f04f1c62f85a27c4775b2d07d6c92e) - cuepls: renaming gopls -> cuepls by [@myitcv](https://github.com/myitcv) in [`0b6bc2f`](https://github.com/cue-lang/cue/commit/0b6bc2f441fa8dcbcc8931a285f92bde2bd07339) - cuepls: initial version of cmd/cuepls by [@myitcv](https://github.com/myitcv) in [`6a435cf`](https://github.com/cue-lang/cue/commit/6a435cfdc9a9820bb0897d431ca9f7f4ba9ea642) - cuepls: slim down to single format command by [@myitcv](https://github.com/myitcv) in [`3e7e903`](https://github.com/cue-lang/cue/commit/3e7e90332e753ad86f9cd48d6c56363abed909c0) - cuepls: remove any mention of vulnerability analysis by [@myitcv](https://github.com/myitcv) in [`821973b`](https://github.com/cue-lang/cue/commit/821973bb28771a9dc7bae8932b8c3521823427b4) - cuepls: minimal changes to telemetry by [@myitcv](https://github.com/myitcv) in [`ae69f66`](https://github.com/cue-lang/cue/commit/ae69f66ce483b42183f8514f3019e69022556661) - cuepls: remove gopls hooks by [@myitcv](https://github.com/myitcv) in [`09f11f9`](https://github.com/cue-lang/cue/commit/09f11f970d7bc70e84973df6627bfb596ebcbdbf) - cuepls: run internal/golangorgx/revendorToolsInternal.sh by [@myitcv](https://github.com/myitcv) in [`6229d62`](https://github.com/cue-lang/cue/commit/6229d62c04d8f0fc442da6685a73fde001c41047) - cuepls: initial version of "vendor" script by [@myitcv](https://github.com/myitcv) in [`c207a2d`](https://github.com/cue-lang/cue/commit/c207a2d2f71fe7a61a8df829b00d01d8d35283fd) - README: briefly document that we support two Go versions by [@mvdan](https://github.com/mvdan) in [`e69d893`](https://github.com/cue-lang/cue/commit/e69d89310e52a25ed6b1d33758e2649bf0937f93) - cue/interpreter/wasm: rework the way we test Wasm by [@4ad](https://github.com/4ad) in [`41b9e66`](https://github.com/cue-lang/cue/commit/41b9e665e602719edc10ee6ddf7d75b105635ae9) - cue/interpreter/wasm: remove Wazero global state by [@4ad](https://github.com/4ad) in [`6d68b3a`](https://github.com/cue-lang/cue/commit/6d68b3a9bc90f72b0593a5c16b6e9a1019af5249) - cue/interpreter/wasm: add support for Wasm functions that take and return structs by [@4ad](https://github.com/4ad) in [`2ce1036`](https://github.com/cue-lang/cue/commit/2ce103610b31f0994ee264e5c8321fb428f4ff70) - cue/interpreter/wasm: add support for arbitrary types in extern attributes by [@4ad](https://github.com/4ad) in [`c896078`](https://github.com/cue-lang/cue/commit/c8960780c43d787ba0331a27f00d7fe9368ad3cd) - internal/core/runtime: expand runtime.Compile signature to accomodate non-builtins by [@4ad](https://github.com/4ad) in [`063b8c1`](https://github.com/cue-lang/cue/commit/063b8c170c3f3000f347ebaa0e19a6b748e4ec74) - cmd/cue,pkg/tool/exec: rely on cue schema for exec.Run defaults by [@nickfiggins](https://github.com/nickfiggins) in [`b460e71`](https://github.com/cue-lang/cue/commit/b460e71a6f24bf659e45bce2a9791cc4bf7c3597) - cmd/cue: unhide mod tidy and mod publish by [@myitcv](https://github.com/myitcv) in [`d37ea66`](https://github.com/cue-lang/cue/commit/d37ea66b1e0297142e7447c3eafd87e008ac038e) - internal/ci: run the end-to-end tests with -race by [@mvdan](https://github.com/mvdan) in [`a948eb5`](https://github.com/cue-lang/cue/commit/a948eb5397f4b42eb99b5f4cddeec0e6e462a095) - cmd/cue: add testscript for registry auth via logins.json by [@mvdan](https://github.com/mvdan) in [`64c5656`](https://github.com/cue-lang/cue/commit/64c56566c5b706111181d50ff8eb938007965077) - cmd/cue: fix registry client race by [@rogpeppe](https://github.com/rogpeppe) in [`3d1c0cb`](https://github.com/cue-lang/cue/commit/3d1c0cb3f5e0abef4e6638d6775c2672968d2863) - cmd/cue: add mod registry server command by [@rogpeppe](https://github.com/rogpeppe) in [`649c7f6`](https://github.com/cue-lang/cue/commit/649c7f6b554b9197e4622789de6a4aa94c9baf6f) - clarify that we require Go 1.21 or later now by [@mvdan](https://github.com/mvdan) in [`bef7c4e`](https://github.com/cue-lang/cue/commit/bef7c4e3c81f73cca11f8537e570b7f0de848059) - internal/ci: upgrade Go matrix include go1.22.0 by [@myitcv](https://github.com/myitcv) in [`63dbc2d`](https://github.com/cue-lang/cue/commit/63dbc2d8ec3a49f5648fee20fb5077e7b492d787) - internal/ci: use node.js 20-compatible action versions by [@myitcv](https://github.com/myitcv) in [`15a4b3e`](https://github.com/cue-lang/cue/commit/15a4b3e6248c15562d8b9cff362ae022cba62c61) - README: simplify "install from source" instructions by [@mvdan](https://github.com/mvdan) in [`5037afc`](https://github.com/cue-lang/cue/commit/5037afcea7ca1ae083a2468c6582ffca5aec04e2) - README: add Docker badge and instructions by [@mvdan](https://github.com/mvdan) in [`b6a6f67`](https://github.com/cue-lang/cue/commit/b6a6f67151dda4eb398ddb1037fd9621dfe64cd2) - bump cuelabs.dev/go/oci/ociregistry dependency by [@mvdan](https://github.com/mvdan) in [`0eb0106`](https://github.com/cue-lang/cue/commit/0eb0106420d787df23f4727c44556e62d50e4ccb) - cmd/cue: simplify exec trimming in TestX by [@nnnkkk7](https://github.com/nnnkkk7) in [`eafeb11`](https://github.com/cue-lang/cue/commit/eafeb11b1bf827f1d3005bb91f177838d7788ae5) - pkg/path: fix package comment by [@jpluscplusm](https://github.com/jpluscplusm) in [`4818cf7`](https://github.com/cue-lang/cue/commit/4818cf71b897680a320909d383af0b78885afe1c) - cue/load: allow conversion of module-local paths to OS paths by [@rogpeppe](https://github.com/rogpeppe) in [`20451a6`](https://github.com/cue-lang/cue/commit/20451a6f7a268ea1616b2ebcf2ec2f1836ab6509) - cmd/cue: add test for self import in modules mode by [@rogpeppe](https://github.com/rogpeppe) in [`707c6d7`](https://github.com/cue-lang/cue/commit/707c6d799cde3961f111f6424e17144df351d9a2) - internal/e2e: switch all tests to `cue mod publish` by [@mvdan](https://github.com/mvdan) in [`2930a8e`](https://github.com/cue-lang/cue/commit/2930a8ea50835be296fadcf12493552f03cb38cb) - README: remove obsolete mention of Google by [@jpluscplusm](https://github.com/jpluscplusm) in [`64a117c`](https://github.com/cue-lang/cue/commit/64a117c07a084f82970596f3ac67023087952f4f) - cue/load: make the tests less noisy by [@mvdan](https://github.com/mvdan) in [`079532c`](https://github.com/cue-lang/cue/commit/079532c83d213922a0ba241044b7f8b36b0c32f4) - cue/load: use fewer absolute paths in tests by [@mvdan](https://github.com/mvdan) in [`a25c24b`](https://github.com/cue-lang/cue/commit/a25c24b5c74e99c76dcc53f2d9be7e1bbcf64bae) - cue/parser: make the example self-contained by [@mvdan](https://github.com/mvdan) in [`fc77363`](https://github.com/cue-lang/cue/commit/fc77363e23b405e8e5b12c374b4491ff61bceba9) - internal/mod/modload: fix panic on error in tidy by [@rogpeppe](https://github.com/rogpeppe) in [`3146f22`](https://github.com/cue-lang/cue/commit/3146f220ab798b357723789ee47d44c1310dc150) - internal/mod: fix tidy in the presence of local code by [@rogpeppe](https://github.com/rogpeppe) in [`2a56875`](https://github.com/cue-lang/cue/commit/2a56875bdecf2309fee328bb9646c28466a6ddef) - cmd/cue: make the config directory configurable by [@mvdan](https://github.com/mvdan) in [`22b1ca3`](https://github.com/cue-lang/cue/commit/22b1ca360e09209ad16dc346d41f0133f6ef3830) - internal/e2e: start using `cue mod tidy` by [@mvdan](https://github.com/mvdan) in [`34db9eb`](https://github.com/cue-lang/cue/commit/34db9eb3f3109337b860f497f5d48374f5aac807) - cmd/cue: add version to module.cue file by [@rogpeppe](https://github.com/rogpeppe) in [`9ceec10`](https://github.com/cue-lang/cue/commit/9ceec10fe2f786e4bfca3d030b97dea76bffca2b) - cue/load: fix crash when there is no module file by [@rogpeppe](https://github.com/rogpeppe) in [`ec7ca0a`](https://github.com/cue-lang/cue/commit/ec7ca0af55c7842590259fee2d08f4303ab53123) - internal/e2e: start using `cue mod init modpath@version` by [@mvdan](https://github.com/mvdan) in [`7855e15`](https://github.com/cue-lang/cue/commit/7855e15cb70165ba9b09d6c654fb90aa2a12a082) - cue/token: deprecate base offset by [@rogpeppe](https://github.com/rogpeppe) in [`b0358a6`](https://github.com/cue-lang/cue/commit/b0358a63d2d9bd35c82d160a788c063f340b11fe) - cmd/cue/cmd: support major versions in module path by [@rogpeppe](https://github.com/rogpeppe) in [`e8efa7e`](https://github.com/cue-lang/cue/commit/e8efa7eb57c13949453c360ec62c65bd2ce5098a) - internal/mod/modload: support adding language version by [@rogpeppe](https://github.com/rogpeppe) in [`2120803`](https://github.com/cue-lang/cue/commit/2120803d2c4c2040a2f74958ab321f0365b82911) - internal/mod/modpkgload: support gen directories by [@rogpeppe](https://github.com/rogpeppe) in [`c6e4adf`](https://github.com/cue-lang/cue/commit/c6e4adf242070a9ded2500e73e27a26a590616f6) - internal/e2e: tweak expected error string after the cue/load changes by [@mvdan](https://github.com/mvdan) in [`b67300b`](https://github.com/cue-lang/cue/commit/b67300b01debf44b972b32ec0726b9431445de99) - cue/load: use modpkgload to resolve dependencies by [@rogpeppe](https://github.com/rogpeppe) in [`fa12218`](https://github.com/cue-lang/cue/commit/fa12218c36d14e682317066a87dc3d39cb2d22f9) - cmd/cue/cmd: add (failing) submodule test by [@rogpeppe](https://github.com/rogpeppe) in [`8889d6a`](https://github.com/cue-lang/cue/commit/8889d6a8ab3d8791c5647dbeac200510dc79b23d) - cue/load: implement io/fs.FS for overlay filesystem by [@rogpeppe](https://github.com/rogpeppe) in [`83a70c6`](https://github.com/cue-lang/cue/commit/83a70c64d59752e42d1570a765c1026fb65a34d0) - cue/load: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`2be5931`](https://github.com/cue-lang/cue/commit/2be5931b62377c34fc2b50642b31eb3757d6a399) - cmd/cue: use tokens from "cue login" before docker's config.json by [@mvdan](https://github.com/mvdan) in [`0e4ec67`](https://github.com/cue-lang/cue/commit/0e4ec6768633be8c88459c9999f8eeb592866638) - cmd/cue: store tokens once "cue login" succeeds by [@mvdan](https://github.com/mvdan) in [`786095f`](https://github.com/cue-lang/cue/commit/786095f4ebdf4a32b929fb9ecb8fc8522bb1666a) - internal/mod: track dependencies at package level by [@rogpeppe](https://github.com/rogpeppe) in [`af405f0`](https://github.com/cue-lang/cue/commit/af405f0b529b82d88625080fa222e3893255b109) - cue/load: use module.ParseImportPath by [@rogpeppe](https://github.com/rogpeppe) in [`36a4ce4`](https://github.com/cue-lang/cue/commit/36a4ce4c00d008e68044d3965dd4cc98d6acdce6) - internal/mod/module: add ParseImportPath by [@rogpeppe](https://github.com/rogpeppe) in [`22cf402`](https://github.com/cue-lang/cue/commit/22cf40243f28f59c053f1fabf3b1df02d1d72de9) - cmd/cmd: add environment help by [@rogpeppe](https://github.com/rogpeppe) in [`ed4fcdc`](https://github.com/cue-lang/cue/commit/ed4fcdcc4b2476c657c66a26b6c6b7e0b86f68b4) - internal/mod/modpkgload: add test for package-level dependencies by [@rogpeppe](https://github.com/rogpeppe) in [`b6032be`](https://github.com/cue-lang/cue/commit/b6032bee7815efbd731bd2190be54174bdad076f) - pkg/tool/exec: update env spec to support lists by [@nickfiggins](https://github.com/nickfiggins) in [`92d99d0`](https://github.com/cue-lang/cue/commit/92d99d0c7528d208ef336df671032c497d9d18f8) - internal/core/adt: use ConjunctGroup in fields by [@mpvl](https://github.com/mpvl) in [`a849212`](https://github.com/cue-lang/cue/commit/a8492120a236a7d3918f228fa62199f1fe631fb2) - internal/mod/modresolve: allow other forms of IPv6 localhost by [@rogpeppe](https://github.com/rogpeppe) in [`522eb97`](https://github.com/cue-lang/cue/commit/522eb97c67248c82bd8e7661a2cd9a2740b5f608) - cue/errors: remove unused field by [@rogpeppe](https://github.com/rogpeppe) in [`693cc0e`](https://github.com/cue-lang/cue/commit/693cc0e10c995b97cfaf91608265b725f7f47744) - internal/mod: remove TODOs that have been done by [@rogpeppe](https://github.com/rogpeppe) in [`1fff098`](https://github.com/cue-lang/cue/commit/1fff0989e9315e3f72467a270177c3e11bace1b6) - internal/core/adt: remove disallowedField by [@mpvl](https://github.com/mpvl) in [`657ae6b`](https://github.com/cue-lang/cue/commit/657ae6b960e5edc647dd20b62360ae703dd3d657) - internal/core/adt: use OpContext instead of nodeContext for decDependant by [@mpvl](https://github.com/mpvl) in [`1df027b`](https://github.com/cue-lang/cue/commit/1df027bfd0e743c560333ef4721342d0e463681b) - pkg: fix CUE source escaping TODO by [@mvdan](https://github.com/mvdan) in [`1dda25a`](https://github.com/cue-lang/cue/commit/1dda25abd14f6f5d5382f1274445f42bff245e07) - internal/e2e: write the rest of an inline comment by [@mvdan](https://github.com/mvdan) in [`97826df`](https://github.com/cue-lang/cue/commit/97826dfb43b68fc66015cf0709b4914c1a23e2d5) - tools/flow: use atomic.Bool by [@mvdan](https://github.com/mvdan) in [`fefadfc`](https://github.com/cue-lang/cue/commit/fefadfcfeb0782b79ac9f02132d184cfa67bff7c) - internal/ci: add a TODO about "goreleaser test" by [@mvdan](https://github.com/mvdan) in [`21086d0`](https://github.com/cue-lang/cue/commit/21086d088e262a113a1fbb747ca3ae5c868ce4d5) - cue: replace Instance.value with Instance.Value by [@mvdan](https://github.com/mvdan) in [`20a4505`](https://github.com/cue-lang/cue/commit/20a45056af9bbccb9cf34ca3e08f9560fe3702df) - encoding/gocode: replace cue.Instance with InstanceOrValue by [@mvdan](https://github.com/mvdan) in [`dbf2b75`](https://github.com/cue-lang/cue/commit/dbf2b756cf4551346386e0bbaf6200d4e6144b1e) - internal/ci: support co-authors in the signed-off-by check by [@mvdan](https://github.com/mvdan) in [`87a2e5c`](https://github.com/cue-lang/cue/commit/87a2e5c47cce8edd47435b3b38b2a136f3ffc064) - pkg/tool/exec: support defaults in env values by [@nickfiggins](https://github.com/nickfiggins) in [`e7c2ede`](https://github.com/cue-lang/cue/commit/e7c2ede2f89a98339234d0bce446c5a120ac506b) - internal/core/adt: implement checks for closedness counters by [@mpvl](https://github.com/mpvl) in [`928ff3e`](https://github.com/cue-lang/cue/commit/928ff3e3cab3654df1daa22e8e2a3340a58f0420) - internal/core/adt: reorganize for field checks by [@mpvl](https://github.com/mpvl) in [`2b483d7`](https://github.com/cue-lang/cue/commit/2b483d779b547654c8c98b3b0b0d13752b839553) - internal/core/adt: move rootCloseContext to Vertex by [@mpvl](https://github.com/mpvl) in [`596adda`](https://github.com/cue-lang/cue/commit/596adda2d34ce15b2d188ff5db174f4a1d67cd99) - internal/core/adt: copy node method for comprehensions by [@mpvl](https://github.com/mpvl) in [`122b11f`](https://github.com/cue-lang/cue/commit/122b11fe029662e34393100823589263b5db0f32) - internal/core/adt: only show stats for old evaluator by [@mpvl](https://github.com/mpvl) in [`ce798a7`](https://github.com/cue-lang/cue/commit/ce798a78c86c42e0fafe569277a0b25bcbcebfb7) - internal/core/adt: pass flags needed for new evaluator by [@mpvl](https://github.com/mpvl) in [`7fcc936`](https://github.com/cue-lang/cue/commit/7fcc9368fb6f94cad6795b66eb176a4cf6d9232c) - internal/core/adt: fix typo in insertion.txtar by [@mpvl](https://github.com/mpvl) in [`409ab1e`](https://github.com/cue-lang/cue/commit/409ab1e0c70c68046a37f8d8671523eea20baa41) - internal/core/adt: add positions of ConjunctGroup by [@mpvl](https://github.com/mpvl) in [`d06d126`](https://github.com/cue-lang/cue/commit/d06d126bb766df43e94a6c3e317c885f0ca017c2) - internal/core/adt: handle comprehension cycle errors by [@mpvl](https://github.com/mpvl) in [`0b90ccc`](https://github.com/cue-lang/cue/commit/0b90cccf0af6187683469e4053d14ac59e216b14) - internal/core/adt: add tests to pass for new evaluator by [@mpvl](https://github.com/mpvl) in [`7453a50`](https://github.com/cue-lang/cue/commit/7453a50604b5be86a78c2f342e08ff428474e2da) - internal/code/adt: hoist position to different line by [@mpvl](https://github.com/mpvl) in [`106ce1a`](https://github.com/cue-lang/cue/commit/106ce1a50adf1e4bf655251e2e50e17aa8fdec8d) - internal/core/adt: bail out early from resolve upon error by [@mpvl](https://github.com/mpvl) in [`6ead06a`](https://github.com/cue-lang/cue/commit/6ead06af21289e4e15e16ffd08d526a82b1942cf) - internal/core/adt: hoist hasConjuncts by [@mpvl](https://github.com/mpvl) in [`cbcabcf`](https://github.com/cue-lang/cue/commit/cbcabcff38b103bcfdea0831d0b62e950d0a66d3) - internal/core/adt: don't match patters for non-regular fields by [@mpvl](https://github.com/mpvl) in [`ca725a8`](https://github.com/cue-lang/cue/commit/ca725a8d6b7fd0a7aee7628aca267088b3c81c43) - internal/core/runtime: move EvaluatorVersion to Runtime by [@mpvl](https://github.com/mpvl) in [`53ed0f6`](https://github.com/cue-lang/cue/commit/53ed0f66d1830563c5341666c59253a20d3c756f) - internal/core/adt: move OpContext out of nodeContext by [@mpvl](https://github.com/mpvl) in [`200c994`](https://github.com/cue-lang/cue/commit/200c994524482143cbb1b7b20d5671edc5e5649b) - internal/core/adt: add scheduler implementation by [@mpvl](https://github.com/mpvl) in [`9728b7d`](https://github.com/cue-lang/cue/commit/9728b7d1a680803585af811117eaf6e7f4b72634) - all: update Wazero to 1.6.0 by [@4ad](https://github.com/4ad) in [`5c5d291`](https://github.com/cue-lang/cue/commit/5c5d291aa13b364cec9cd7a2c55db634a83de20c) - internal/cli: improve error message on parse issue by [@cedricgc](https://github.com/cedricgc) in [`b55e471`](https://github.com/cue-lang/cue/commit/b55e471aacdab1a4fd0a0943fca22695562fb799) - internal/core/adt: hoist getNonCyclicCount by [@mpvl](https://github.com/mpvl) in [`4cc7bc7`](https://github.com/cue-lang/cue/commit/4cc7bc77900d90d9d548faf568128bd86f791c85) - internal/cuetxtar: use go-internal diff by [@mpvl](https://github.com/mpvl) in [`54e1699`](https://github.com/cue-lang/cue/commit/54e1699086143d00bc8ffbd517de7d4b5a5cdff9) - internal/core/adt: include ConjunctGroup in addPositions by [@mpvl](https://github.com/mpvl) in [`d5431b2`](https://github.com/cue-lang/cue/commit/d5431b207f60b3367d1bb77ac23de2cbf72a155c) - internal/core/adt: modify some tests by [@mpvl](https://github.com/mpvl) in [`82e4cef`](https://github.com/cue-lang/cue/commit/82e4cefb47e8bd60f70ea754d90a3a8b0298f2f8) - internal/core/adt: prep for new evaluator by [@mpvl](https://github.com/mpvl) in [`8146191`](https://github.com/cue-lang/cue/commit/81461912d7b5fcf157b2c0996b3f11919d956acb) - internal/core/adt: introduce ConjunctGroup by [@mpvl](https://github.com/mpvl) in [`afed6ae`](https://github.com/cue-lang/cue/commit/afed6aec0c23b3101643098e1d9fe9cc71558d36) - internal/core/adt: unroll Evaluate in OpContext.concrete by [@mpvl](https://github.com/mpvl) in [`8933b8c`](https://github.com/cue-lang/cue/commit/8933b8c4413aacaba86c9467fe07ffc8d7567a72) - internal/core/adt: add String implementation for ArcType by [@mpvl](https://github.com/mpvl) in [`cc76012`](https://github.com/cue-lang/cue/commit/cc7601209abfd815e2e18e65f6f6d03424e2eddd) - pkg/net: add IPv6 check by [@martingreber](https://github.com/martingreber) in [`bc91ca7`](https://github.com/cue-lang/cue/commit/bc91ca757471c0bfa0a12c099ce2172d8aa89912) - internal/core: remove unused argument by [@mpvl](https://github.com/mpvl) in [`da0eab4`](https://github.com/cue-lang/cue/commit/da0eab4373cc81ccf8fa902c77751a711558b555) - internal/e2e: use cue mod publish by [@rogpeppe](https://github.com/rogpeppe) in [`3d09a4a`](https://github.com/cue-lang/cue/commit/3d09a4aafb64d459fdc60348dc2da4665759a4b2) - cmd/cue: add hidden login command by [@mvdan](https://github.com/mvdan) in [`0a5e225`](https://github.com/cue-lang/cue/commit/0a5e225f75684b8085947389e5e4b8e8b12d102a) - cmd/cue/cmd: amend the default for CUE_REGISTRY by [@mvdan](https://github.com/mvdan) in [`b01d129`](https://github.com/cue-lang/cue/commit/b01d1296f3be48517273ab0bf404513ac30bf421) - cmd/cue: rename mod upload to mod publish by [@rogpeppe](https://github.com/rogpeppe) in [`cc1eaf0`](https://github.com/cue-lang/cue/commit/cc1eaf06e2f90bcb6ba03d1d274e5d3c64f583cb) - cmd/cue: allow cue mod tidy in non-module root by [@rogpeppe](https://github.com/rogpeppe) in [`f260855`](https://github.com/cue-lang/cue/commit/f26085535bcd247376ddcb525e6d944ad94ee3da) - internal/registrytest: upload deterministically by [@rogpeppe](https://github.com/rogpeppe) in [`c4c064d`](https://github.com/cue-lang/cue/commit/c4c064dbc34bea9be85c0ec61d173420a656a292) - internal/mod/modfile: avoid unnecessary braces by [@rogpeppe](https://github.com/rogpeppe) in [`7bcfd0b`](https://github.com/cue-lang/cue/commit/7bcfd0bf2ad44e7b340cedbf01b939ee528d72c3) - internal/mod/modregistry: add Module.Version method by [@rogpeppe](https://github.com/rogpeppe) in [`72766c2`](https://github.com/cue-lang/cue/commit/72766c22bb627c355b1ac90751f4bf3fc6b313c2) - internal/registrytest: add Upload function by [@rogpeppe](https://github.com/rogpeppe) in [`414695f`](https://github.com/cue-lang/cue/commit/414695f8296c30e065df3179abbd16565387de36) - internal/mod/modregistry: add GetModuleWithManifest method by [@rogpeppe](https://github.com/rogpeppe) in [`76298d4`](https://github.com/cue-lang/cue/commit/76298d4fbcfe6f40d4ecc57c3f262dfe6f25a746) - pkg/net: replace net with net/netip by [@martingreber](https://github.com/martingreber) in [`87a3b17`](https://github.com/cue-lang/cue/commit/87a3b178363111616d67de3cb944e9f073ec9d3d) - internal/cmd: add cue-ast-print to visualize syntax trees by [@mvdan](https://github.com/mvdan) in [`bf94b66`](https://github.com/cue-lang/cue/commit/bf94b6623fc5c631f6a9be7f337baacc5adc833d) - deps: upgrade to latest cuelabs.dev/go/oci/ociregistry by [@myitcv](https://github.com/myitcv) in [`c84175b`](https://github.com/cue-lang/cue/commit/c84175b633d517fd53dcba425e5e30fdf2189223) - go.mod: bump non-user-facing dependencies by [@mvdan](https://github.com/mvdan) in [`3594d13`](https://github.com/cue-lang/cue/commit/3594d137a6d32bccc87a9fb71cb8abd1fda6c28e) - internal/encoding/yaml: quote hexadecimal-looking strings by [@vikstrous](https://github.com/vikstrous) in [`0b3455c`](https://github.com/cue-lang/cue/commit/0b3455c57086b3d0bd3368351800ed9e1ed10d06) - internal/e2e: set CUE_MODCACHE in TestScript's Setup by [@mvdan](https://github.com/mvdan) in [`db98219`](https://github.com/cue-lang/cue/commit/db9821976166f1bd91797bece93766ed6d4a1fb7) - cue/load: use cached registry by [@rogpeppe](https://github.com/rogpeppe) in [`7dc80ff`](https://github.com/cue-lang/cue/commit/7dc80ffe46228731b4299174e25761989819a85e) - cmd/cue: use cached registry for cue mod tidy by [@rogpeppe](https://github.com/rogpeppe) in [`400f829`](https://github.com/cue-lang/cue/commit/400f8297ef6f1d92563afba784dc43f12ad248fa) - internal/mod/modfile: guard against cue.Value race by [@rogpeppe](https://github.com/rogpeppe) in [`53d036a`](https://github.com/cue-lang/cue/commit/53d036a14d907f1a1e5093b72b55279b3de1ae7f) - internal/mod/modcache: use robustio by [@rogpeppe](https://github.com/rogpeppe) in [`c5e1342`](https://github.com/cue-lang/cue/commit/c5e13428d42d0dbad48db2dba9540074e94a75a5) - internal/mod/modcache: new package by [@rogpeppe](https://github.com/rogpeppe) in [`c3ec30c`](https://github.com/cue-lang/cue/commit/c3ec30c762363e84c6c10e8e194789fe013c50f9) - cmd/cue: remove a stale TODO on marshaler types by [@mvdan](https://github.com/mvdan) in [`a567677`](https://github.com/cue-lang/cue/commit/a567677828a8e15c6856036bd6a39eeb0ec3d277) - internal/mod/modregistry: avoid round trip by [@rogpeppe](https://github.com/rogpeppe) in [`e090abf`](https://github.com/cue-lang/cue/commit/e090abf7ffd9257c2d55169ed62fced318708fcb) - internal/mod/module: add support for escaping by [@rogpeppe](https://github.com/rogpeppe) in [`576c564`](https://github.com/cue-lang/cue/commit/576c56499311dd3e56452399739556e89c8385f6) - internal/mod/modregistry: add ManifestDigest by [@rogpeppe](https://github.com/rogpeppe) in [`3c187c5`](https://github.com/cue-lang/cue/commit/3c187c53fe132e45360dab181ed0c4e2249b0c5b) - doc/ref: use builtin instead of built-in by [@jpluscplusm](https://github.com/jpluscplusm) in [`7ed1bca`](https://github.com/cue-lang/cue/commit/7ed1bcaa253fc9111fd61ee3713da11b1f2e464a) - internal/mod/modload: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`ac248f4`](https://github.com/cue-lang/cue/commit/ac248f4461117fd51810de39d33adc8694297fd3) - internal/maps: new package by [@rogpeppe](https://github.com/rogpeppe) in [`1958c32`](https://github.com/cue-lang/cue/commit/1958c325d22e646d0314951fc8503f3c32d64d43) - internal/mod/modpkgload: support packages without major versions by [@rogpeppe](https://github.com/rogpeppe) in [`3cfb6e2`](https://github.com/cue-lang/cue/commit/3cfb6e2688c827cafb0a582b01df2e9fcd5350ee) - internal/mod/modrequirements: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`7afd472`](https://github.com/cue-lang/cue/commit/7afd472d78b089ec87a1c2b5ef1cba8136fb287d) - internal/mod/modregistry: support cross-major-version queries by [@rogpeppe](https://github.com/rogpeppe) in [`4773bf6`](https://github.com/cue-lang/cue/commit/4773bf6371f2e86f934d5722ca8a67b9daef2221) - modfile: support major version defaults by [@rogpeppe](https://github.com/rogpeppe) in [`faf7cd5`](https://github.com/cue-lang/cue/commit/faf7cd59fd6df8ab7132a4637f575712bd10f406) - cmd/cue: prevent failures if /tmp/cue.mod exists by [@mvdan](https://github.com/mvdan) in [`c8073f4`](https://github.com/cue-lang/cue/commit/c8073f406c3d4820a3befadfa9f6c7ee649ed725) - cue/load: drop support for legacy pkg directories by [@mvdan](https://github.com/mvdan) in [`e81d181`](https://github.com/cue-lang/cue/commit/e81d18160728bbc047dd8cb1f3488d44faede883) - cmd/cue: cue mod tidy command by [@rogpeppe](https://github.com/rogpeppe) in [`2635119`](https://github.com/cue-lang/cue/commit/26351196e988c652b8fcef574a3100b5a34c2d7b) - internal/mod/modload: new package by [@rogpeppe](https://github.com/rogpeppe) in [`6bd89dc`](https://github.com/cue-lang/cue/commit/6bd89dc2cb7f229678a373d7e7de79eb5d6e16b3) - internal/mod/modpkgload: new package by [@rogpeppe](https://github.com/rogpeppe) in [`3632c1f`](https://github.com/cue-lang/cue/commit/3632c1f880a27de8115c00fb0ba06628cc58bdd8) - internal/core: use precise apd.Decimal by [@myitcv](https://github.com/myitcv) in [`8271724`](https://github.com/cue-lang/cue/commit/8271724853575990db888a7e7e5dc43221bed454) - internal/mod/modrequirements: add GraphIsLoaded and RootModules by [@rogpeppe](https://github.com/rogpeppe) in [`74d7664`](https://github.com/cue-lang/cue/commit/74d7664b248348a01a84fd447a950353760afd50) - internal/mod/module: add Version.IsValid by [@rogpeppe](https://github.com/rogpeppe) in [`71ab88a`](https://github.com/cue-lang/cue/commit/71ab88aa581eeabbf1ae374f45e5c4113d0fe29d) - internal/mod/modregistry: return no tags for non-existent repo by [@rogpeppe](https://github.com/rogpeppe) in [`0c2c730`](https://github.com/cue-lang/cue/commit/0c2c730ce6dd9d636c32511ed68a11de665df0d8) - internal/mod/modfile: add Format by [@rogpeppe](https://github.com/rogpeppe) in [`7d588b9`](https://github.com/cue-lang/cue/commit/7d588b99f1121dba16f9c5b513eb8c947fa00dfc) - internal/mod/modimports: discard package qualifier in import paths by [@rogpeppe](https://github.com/rogpeppe) in [`4edbf9d`](https://github.com/cue-lang/cue/commit/4edbf9d7ec8da021a89f3148bec84fa3c3dae658) - README: drop golangci badge by [@mvdan](https://github.com/mvdan) in [`967c9c6`](https://github.com/cue-lang/cue/commit/967c9c68c7cd8b1042b3def3b7227b20be6dfc90) - update ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`e07c4b8`](https://github.com/cue-lang/cue/commit/e07c4b8becf619ee619b63a34e5873c67da85d6a) - internal/slices: add Equal by [@rogpeppe](https://github.com/rogpeppe) in [`4f4f718`](https://github.com/cue-lang/cue/commit/4f4f718258c5108134d89fdfc9657b83074c6e69) - internal/mod/modimports: support scanning single directory by [@rogpeppe](https://github.com/rogpeppe) in [`413d0d5`](https://github.com/cue-lang/cue/commit/413d0d5a6ce1ae9242ea90c725ff593a03efb0dd) - internal/mod/modrequirements: new package by [@rogpeppe](https://github.com/rogpeppe) in [`0e0d638`](https://github.com/cue-lang/cue/commit/0e0d6380d1ae24cd400fed81c2ec49d62550d0e5) - internal/ci: limit goreleaser to doing release drafts by [@mvdan](https://github.com/mvdan) in [`f3411b4`](https://github.com/cue-lang/cue/commit/f3411b4c38deb3cb606468053331aea3dc7dd04a) </details> ### [`v0.7.1`](https://github.com/cue-lang/cue/releases/tag/v0.7.1) [Compare Source](https://github.com/cue-lang/cue/compare/v0.7.0...v0.7.1) This release is a re-build of CUE v0.7.0 with Go 1.22.0 to prevent `cue get go` panics; see https://github.com/cue-lang/cue/issues/2802. ### [`v0.7.0`](https://github.com/cue-lang/cue/releases/tag/v0.7.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.6.0...v0.7.0) This release comprises a number of bug fixes and small improvements, as well as more ground work for Modules, WebAssembly, and the core evaluator's performance refactors. Note that v0.7 was [originally planned](https://github.com/cue-lang/cue/discussions/2335) to center around the core evaluator's performance improvements. Since those refactors are not ready, and we have other fixes and improvements we want to release, we have slightly altered the release plan accordingly. We will share more details on our [next community call](https://github.com/cue-lang/cue/discussions/2724). As a reminder: users can register their projects with Unity, our regression and performance testing setup. Unity is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. Unity continues to catch multiple issues with each release. Adding your project to Unity not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. Thank you to [@SteVwonder](https://github.com/SteVwonder), [@bozaro](https://github.com/bozaro), [@cedricgc](https://github.com/cedricgc), [@howardjohn](https://github.com/howardjohn), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@nickfiggins](https://github.com/nickfiggins), [@rogpeppe](https://github.com/rogpeppe), [@rudifa](https://github.com/rudifa), and [@uhthomas](https://github.com/uhthomas) for contributing to this release! And a special thanks to all who joined the recent contributor office hours calls on our [community calendar](https://cuelang.org/s/community-calendar), as well as our [#contributing channel](https://cuelang.slack.com/archives/CMY132JKY) on Slack! Thanks to their involvement, more issues can be investigated and fixed each release. #### Go API Note that this version of CUE requires Go 1.20 or later, per our policy to support the latest two stable Go releases just like upstream. [CL 1172105](https://cuelang.org/cl/1172105) fixes a regression introduced in v0.6.0 where calling `Iterator.Selector.Index` while iterating over a list would incorrectly panic. [CL 1167597](https://cuelang.org/cl/1167597) fixes `cue/load` so it now errors on package import cycles, following the spec. [CL 1167647](https://cuelang.org/cl/557322) adjusts `cue.Value.Decode` to decode empty CUE lists into a Go `interface{}` as a non-nil empty slice. [CL 547369](https://cuelang.org/cl/547369) teaches `cue.Value.Decode` how to decode values which aren't entirely concrete into a Go type by using `cue.Value` as part of the destination type. #### Language There are no changes to the language in this version. #### Spec [CL 1171216](https://cuelang.org/cl/1171216) fixes two errors in a dynamic fields example. #### Core Evaluator [CL 1172014](https://cuelang.org/cl/1172014) disallows the direct use of unary operators with basic types, since they would result in confusing bounds which seemed incorrect. [CL 1172013](https://cuelang.org/cl/1172013) fixes a closedness bug where `close` did not properly apply when used inside definitions. [CL 1172874](https://cuelang.org/cl/1172874) fixes a panic in `cue export` introduced by v0.6.0. #### Encoders [CL 1172314](https://cuelang.org/cl/1172314) teaches `encoding/protobuf` to follow the `field_behavior` annotation marking a field as either optional or required when decoding. #### Builtins [CL 1172991](https://cuelang.org/cl/1172991) adds a `mustSucceed` boolean parameter to `tool/exec.Run`, which can be set to `false` to allow a command to fail and set its own field `success` to `false`. [CL 557322](https://cuelang.org/cl/557322) fixes the values of `math`'s `Log2E` and `Log10E` constants, which were being incorrectly truncated. #### `cmd/cue` CLs [1170966](https://cuelang.org/cl/1170966) and [1171302](https://cuelang.org/cl/1171302) fix a number of issues in `cue fmt` (and by extension the `cue/format` package), resulting in better and more consistent formatting of CUE files. CLs [1171292](https://cuelang.org/cl/1171292), [1171015](https://cuelang.org/cl/1171015), [1170115](https://cuelang.org/cl/1170115), and [1171971](https://cuelang.org/cl/1171971) implement a variety of improvements and bug fixes for `cue get go`. [CL 1172017](https://cuelang.org/cl/1172017) fixes a number of issues with the line and column positions reported by our YAML decoder, which could result in weird CUE formatting when using `cue import` or misleading positions being shown to the user. [CL 1169709](https://cuelang.org/cl/1169709) increases the robustness of `cue export -o`, which in some situations could ignore file errors or incorrectly replace an existing file without the `-f` flag. [CL 1173072](https://cuelang.org/cl/1173072) fixes a panic when using `cue import --list` with empty YAML input. [CL 1168436](https://cuelang.org/cl/1168436) updates the `cue export` documentation to add the missing `cue` and `binary` supported export formats. #### Modules A number of changes are included to support an experimental implementation of the [proposed modules and package management support](https://github.com/cue-lang/cue/discussions/2330). These aren't enabled by default, and will be announced soon. <details> <summary>Full list of changes since v0.6.0</summary> - internal/ci: bump to Go 1.21.5 for the upcoming release by [@mvdan](https://github.com/mvdan) in [`ce1ad81`](https://github.com/cue-lang/cue/commit/ce1ad81f0aee1f88ef12dbf463551f694e8dd906) - cmd/cue: fix panic when importing empty files as a list by [@uhthomas](https://github.com/uhthomas) in [`b36b477`](https://github.com/cue-lang/cue/commit/b36b4775e6a890899c460f62f8e59b4182d63c2a) - internal/core/adt: change semantics of unary_op(basictype) by [@mpvl](https://github.com/mpvl) in [`e1ceed4`](https://github.com/cue-lang/cue/commit/e1ceed434f211be0c6bdd3d8fea767765b1b0b92) - internal/core/adt: fix closedness bug by [@mpvl](https://github.com/mpvl) in [`886eefd`](https://github.com/cue-lang/cue/commit/886eefd407ed1566dc32f9735a04e990e6c1df84) - internal/core/adt: add test to prepare for fix by [@mpvl](https://github.com/mpvl) in [`145764d`](https://github.com/cue-lang/cue/commit/145764d8f94e9fd19e96f74cc220b415a234ffb8) - CONTRIBUTING: mention the Slack channel and office hours calls by [@mvdan](https://github.com/mvdan) in [`16a0cda`](https://github.com/cue-lang/cue/commit/16a0cdaa5912852e91b9e75d9e4b533fed87f720) - pkg/tool/exec: add a Run.mustSucceed parameter by [@nickfiggins](https://github.com/nickfiggins) in [`10c4796`](https://github.com/cue-lang/cue/commit/10c47964349a308d3e05f52c99aa996ad06d4315) - cue: explicitly document values are not safe for concurrent use by [@mvdan](https://github.com/mvdan) in [`d805c22`](https://github.com/cue-lang/cue/commit/d805c22e75cd4007a029f17a735e5992c741da16) - internal/ci: bump Go and GoReleaser for v0.7.0-rc.1 by [@mvdan](https://github.com/mvdan) in [`8f88dcb`](https://github.com/cue-lang/cue/commit/8f88dcb3b3ef0c4dc120e70b9303c60a1e085d8d) - internal/slices: move from internal/mod/mvs/internal/slices by [@rogpeppe](https://github.com/rogpeppe) in [`0e51dbb`](https://github.com/cue-lang/cue/commit/0e51dbb4ea0014f8526bd61ac418df38316d67fd) - internal/mod/internal/par: move from internal/mod/mvs/internal/par by [@rogpeppe](https://github.com/rogpeppe) in [`fe0e04a`](https://github.com/cue-lang/cue/commit/fe0e04a55865b1181efeb2a3f9e238892a51bb4e) - internal/registrytest: do not check that dependencies exist by [@rogpeppe](https://github.com/rogpeppe) in [`99bdbad`](https://github.com/cue-lang/cue/commit/99bdbadb556e31df01aff775dff5cac49861120f) - internal/mod/modimports: new package by [@rogpeppe](https://github.com/rogpeppe) in [`79033c2`](https://github.com/cue-lang/cue/commit/79033c20d13a321eb4975b3b9848f16f0e06a2ba) - internal/core/export: fix a recent nil pointer regression by [@rudifa](https://github.com/rudifa) in [`141925a`](https://github.com/cue-lang/cue/commit/141925a62c4b579ff6e7399f5948da4935fddb94) - internal/core/adt: use state directly by [@mpvl](https://github.com/mpvl) in [`bba2263`](https://github.com/cue-lang/cue/commit/bba22633a71f82f653dc63fb71e9c8d79ce55104) - internal/core/adt: expand on permutations for test by [@mpvl](https://github.com/mpvl) in [`596fdc9`](https://github.com/cue-lang/cue/commit/596fdc957640dc545b9787b0f6140aa03b0b964d) - internal/cuetxtar: include diff between test and fallback test by [@mpvl](https://github.com/mpvl) in [`6774d0d`](https://github.com/cue-lang/cue/commit/6774d0df6229412fb683fbc3ba7d1a9502229267) - internal/txtarfs: factor out from registrytest by [@rogpeppe](https://github.com/rogpeppe) in [`265a7a0`](https://github.com/cue-lang/cue/commit/265a7a0fb42980582f6033615ff82dfe4e1a110b) - internal/cueimports: export API and fix for CUE syntax by [@rogpeppe](https://github.com/rogpeppe) in [`47d6dce`](https://github.com/cue-lang/cue/commit/47d6dcedde5c8c8623758044eb247c172ba4e4bf) - internal/cueimports: copy code from cue/load by [@rogpeppe](https://github.com/rogpeppe) in [`9e55783`](https://github.com/cue-lang/cue/commit/9e5578368fabaae51df0fbaa3bf5d38d3f88ff89) - cue/load: remove unused functionality by [@rogpeppe](https://github.com/rogpeppe) in [`b727189`](https://github.com/cue-lang/cue/commit/b727189d3a09026e16023b6ac239e27adb7e0bae) - all: replace html/template by text/template by [@mvdan](https://github.com/mvdan) in [`361ae4f`](https://github.com/cue-lang/cue/commit/361ae4f49aefbeb99a99c683bb7ba34cfbd7457a) - encoding/protobuf: support field_behavior "required" option by [@howardjohn](https://github.com/howardjohn) in [`80b0eee`](https://github.com/cue-lang/cue/commit/80b0eee3ff373caa279e9758c79489a7a967397e) - cmd/cue: fix incorrect position in yaml import by [@uhthomas](https://github.com/uhthomas) in [`d97b0c3`](https://github.com/cue-lang/cue/commit/d97b0c3bc6e57a7e0409c0fdf5f4508a6ed6ce1e) - all: adopt .gitignore for new delve binary naming by [@mpvl](https://github.com/mpvl) in [`68e9d5d`](https://github.com/cue-lang/cue/commit/68e9d5d75f9241a449fb69856d421566d0d533d7) - internal/core/adt: make ListMarker Src an expression by [@mpvl](https://github.com/mpvl) in [`f59894c`](https://github.com/cue-lang/cue/commit/f59894c3dd9857b5bdacce838ce4d64ef544ac38) - internal/core/adt: changes needed for new evaluator by [@mpvl](https://github.com/mpvl) in [`fb88beb`](https://github.com/cue-lang/cue/commit/fb88bebcae967c3fdc14df9d5b35cbbb30ca0399) - cue: don't panic on Iterator.Selector.Index with lists by [@mvdan](https://github.com/mvdan) in [`9dd0f82`](https://github.com/cue-lang/cue/commit/9dd0f82df8e8608920b4044c40d977115a5cc95b) - cue: allow top level JSON marshalers in EncodeType by [@rogpeppe](https://github.com/rogpeppe) in [`8f796bf`](https://github.com/cue-lang/cue/commit/8f796bf3b001867fa1fbd9b33de218c27452e6d1) - cue: support decoding into cue.Value fields by [@rogpeppe](https://github.com/rogpeppe) in [`b25fc05`](https://github.com/cue-lang/cue/commit/b25fc05e59e6c04614617b59ce082091219a301a) - internal/mod/mvs: discard copied par tests by [@mvdan](https://github.com/mvdan) in [`4e30101`](https://github.com/cue-lang/cue/commit/4e301018fa52dde2ec1c2c9cadb7470297e27ef9) - CONTRIBUTING: fix repo reference rendering by [@cedricgc](https://github.com/cedricgc) in [`7a4ea86`](https://github.com/cue-lang/cue/commit/7a4ea8668a03d0cb2458ee264e5f582a2d5107e5) - internal/e2e: make unique module names more robust by [@mvdan](https://github.com/mvdan) in [`a404c89`](https://github.com/cue-lang/cue/commit/a404c897f3615a77178e2ddbe0b07261622385a3) - cmd/cue: support optional comments in get go by [@uhthomas](https://github.com/uhthomas) in [`67ea9cf`](https://github.com/cue-lang/cue/commit/67ea9cf9c39a6cc55da357541019886b1ed0beaa) - cmd/cue: ignore complex types in get go by [@uhthomas](https://github.com/uhthomas) in [`112b0b2`](https://github.com/cue-lang/cue/commit/112b0b28a888e2a74016adc1704e0aef7b362870) - pkg/internal/builtintest: don't print superfluous newlines by [@uhthomas](https://github.com/uhthomas) in [`8b32c49`](https://github.com/cue-lang/cue/commit/8b32c491294c895394d38eeb67c8f7ab366c4a78) - internal/tdtest: document how the name field is used by [@rogpeppe](https://github.com/rogpeppe) in [`deab307`](https://github.com/cue-lang/cue/commit/deab3074bb95bb399075ad07e60b59cbef61a908) - internal/e2e: add a test for a private github repo by [@mvdan](https://github.com/mvdan) in [`4d2ba88`](https://github.com/cue-lang/cue/commit/4d2ba88849b660e30df921aa1d6f44d4c75ed8d8) - internal/ci: add gcloud auth to the e2e tests by [@mvdan](https://github.com/mvdan) in [`95a88a5`](https://github.com/cue-lang/cue/commit/95a88a547314e9c1f6351ece97ddf841ac7d4a67) - CONTRIBUTING: clarify two sections by [@cedricgc](https://github.com/cedricgc) in [`d947a69`](https://github.com/cue-lang/cue/commit/d947a69cab19477d99355a1cefb9d2291197ace5) - internal/e2e: add a "cue mod upload" end-to-end test with gcloud by [@mvdan](https://github.com/mvdan) in [`a060f85`](https://github.com/cue-lang/cue/commit/a060f85ddb5d9a9b020c2cf1f7dfc4daa24f7f98) - internal/e2e: rename existing testscript and add a summary by [@mvdan](https://github.com/mvdan) in [`4dba8dd`](https://github.com/cue-lang/cue/commit/4dba8ddfd715d57902ff050a340968237f0107f6) - internal/e2e: tweak how we use secret env vars by [@mvdan](https://github.com/mvdan) in [`d3efde7`](https://github.com/cue-lang/cue/commit/d3efde7804e30570f0e6ba27562aa778934bc30e) - internal/mod/modfile: add copyright message by [@rogpeppe](https://github.com/rogpeppe) in [`f9c8d98`](https://github.com/cue-lang/cue/commit/f9c8d98d1c31cbf34e376eb3eb78984b24476136) - cmd/cue: cue mod upload command by [@rogpeppe](https://github.com/rogpeppe) in [`ca20656`](https://github.com/cue-lang/cue/commit/ca2065618e2e277d3dfe22d6e0993f336203e481) - internal/ci: enforce vet and mod tidy on all modules by [@mvdan](https://github.com/mvdan) in [`2ae1a9e`](https://github.com/cue-lang/cue/commit/2ae1a9e8c909852e881f6992c38885d0b450c998) - internal/e2e: run go mod tidy by [@mvdan](https://github.com/mvdan) in [`8b95971`](https://github.com/cue-lang/cue/commit/8b9597173bb25c9274fb75f307adb5963db5bd94) - cue/load: do not format registry as a string by [@rogpeppe](https://github.com/rogpeppe) in [`4fd631d`](https://github.com/cue-lang/cue/commit/4fd631d10349ca4dda92b360dc4d7399b9c493e2) - internal/mod/modzip: rename from internal/mod/zip by [@rogpeppe](https://github.com/rogpeppe) in [`5365838`](https://github.com/cue-lang/cue/commit/5365838c091eb3effba5cc320612bb19a48b027b) - cmd/cue: wire up OCI authorization by [@rogpeppe](https://github.com/rogpeppe) in [`b2ac3f7`](https://github.com/cue-lang/cue/commit/b2ac3f7660e2706fdcfa4300f32c781ea6c1dbd0) - internal/registrytest: remove \_registry remnants by [@rogpeppe](https://github.com/rogpeppe) in [`273602f`](https://github.com/cue-lang/cue/commit/273602f2266fd12b2aa6f42a6f3119c1294b7fb9) - internal/ci: only run e2e tests in source repo by [@myitcv](https://github.com/myitcv) in [`b15fcb0`](https://github.com/cue-lang/cue/commit/b15fcb039af15018e423f4700a4de576f7e4607b) - internal/ci: test internal/e2e on protected branches by [@mvdan](https://github.com/mvdan) in [`d72997f`](https://github.com/cue-lang/cue/commit/d72997f50005d553ae24398271767153469bdc9a) - cmd/format: be consistent with whitespace in lists by [@uhthomas](https://github.com/uhthomas) in [`d70007c`](https://github.com/cue-lang/cue/commit/d70007c116281516ed051982a9897013119df417) - internal/e2e: first version of the end-to-end module tests by [@mvdan](https://github.com/mvdan) in [`8c826bc`](https://github.com/cue-lang/cue/commit/8c826bcf6c20ec01d1af32cfb9785ca4f8f87905) - cmd/cue: support type parameters in get go by [@uhthomas](https://github.com/uhthomas) in [`3b4e03d`](https://github.com/cue-lang/cue/commit/3b4e03d597532c90c34cee5c3c17b5e109999d35) - cue: add more godoc links by [@mvdan](https://github.com/mvdan) in [`286dfcb`](https://github.com/cue-lang/cue/commit/286dfcb833fc924aa0582f18efeb1e95618bc73c) - cmd/cue: support unsafe pointer in get go by [@uhthomas](https://github.com/uhthomas) in [`05ceba6`](https://github.com/cue-lang/cue/commit/05ceba661e39f78c91a35977abd54418c75a2148) - spec: fix two errors in the dynamic fields example by [@SteVwonder](https://github.com/SteVwonder) in [`200a8ec`](https://github.com/cue-lang/cue/commit/200a8ecac56180f662bed17a9d4d510f9f243f2d) - README: add a direct mention of the community calendar by [@mvdan](https://github.com/mvdan) in [`8a98ac0`](https://github.com/cue-lang/cue/commit/8a98ac0854cc7df6dd8173bdebe3bb27964f11cc) - cmd/cue/cmd: wire up modmux by [@rogpeppe](https://github.com/rogpeppe) in [`ac1b433`](https://github.com/cue-lang/cue/commit/ac1b4339f0f214548fbce582af257fdad6891426) - internal/mod/modmux: new package by [@rogpeppe](https://github.com/rogpeppe) in [`8e24597`](https://github.com/cue-lang/cue/commit/8e24597e6eacfb5785207093c0d311c43a403a3f) - cue/format: indent list elements correctly by [@uhthomas](https://github.com/uhthomas) in [`eddccfc`](https://github.com/cue-lang/cue/commit/eddccfc72316a648971d9684ac5dcd003ee26385) - internal/registrytest: do not assume subdirectory by [@rogpeppe](https://github.com/rogpeppe) in [`f892345`](https://github.com/cue-lang/cue/commit/f89234510378b557e4c488a5bacc9729e5ce10dc) - internal/mod/modregistry: remove error return from New by [@rogpeppe](https://github.com/rogpeppe) in [`1e26aa2`](https://github.com/cue-lang/cue/commit/1e26aa2a80a24425ad97e8c454eb178487b0fd1f) - internal/mod/modresolve: new package by [@rogpeppe](https://github.com/rogpeppe) in [`2a7d1d6`](https://github.com/cue-lang/cue/commit/2a7d1d6653e525ada6bb25c200dd94c6f81283db) - internal/mod/module: add CheckPathWithoutVersion by [@rogpeppe](https://github.com/rogpeppe) in [`c6da768`](https://github.com/cue-lang/cue/commit/c6da76812209649c4734cb6a4da842170b6b884a) - cue: make use of some godoc links by [@mvdan](https://github.com/mvdan) in [`63307bd`](https://github.com/cue-lang/cue/commit/63307bd17387651f410e857863af7d8be58bc109) - internal/registrytest: support prefix by [@rogpeppe](https://github.com/rogpeppe) in [`6c71b2c`](https://github.com/cue-lang/cue/commit/6c71b2c90d63846f2983deb07102253298a568c0) - cmd/cue/cmd: support CUE_REGISTRY by [@rogpeppe](https://github.com/rogpeppe) in [`d5c0745`](https://github.com/cue-lang/cue/commit/d5c0745eb65196ff1739d1ab5bf5af455c7d2422) - update ociregistry dependency by [@rogpeppe](https://github.com/rogpeppe) in [`a43792c`](https://github.com/cue-lang/cue/commit/a43792cc30bd3d9bff2b2f4c73469b8faa2f8c48) - internal/mod: kick off WIP doc to track FAQs, points to document by [@myitcv](https://github.com/myitcv) in [`b664f0c`](https://github.com/cue-lang/cue/commit/b664f0cd3918390b665a16090734a358272a35a3) - pkg/path: use a subtest helper to test for each OS value by [@mvdan](https://github.com/mvdan) in [`1227a83`](https://github.com/cue-lang/cue/commit/1227a83010506ae4532ecca051a035c982650830) - internal/core/adt: avoid chatty tests by [@mvdan](https://github.com/mvdan) in [`55c6db6`](https://github.com/cue-lang/cue/commit/55c6db6f8301bdd3b273b5d4f2f4fa350c9301ea) - internal/mod/zip: skip SizeLimit tests with -race by [@mvdan](https://github.com/mvdan) in [`91d9766`](https://github.com/cue-lang/cue/commit/91d976682fb9575a8fb750b7475844aaa8f6067e) - internal/mod/zip: silence "err value not used" warnings by [@mvdan](https://github.com/mvdan) in [`665d19a`](https://github.com/cue-lang/cue/commit/665d19a74cdd71b1cb435812592f99561eda3fc8) - internal/mod/zip: use testing.T.TempDir by [@mvdan](https://github.com/mvdan) in [`fd8d5f9`](https://github.com/cue-lang/cue/commit/fd8d5f905414cf31c30e2d5bc7c988e7b0a5a9dd) - internal/mod/zip: make all tests parallel by [@mvdan](https://github.com/mvdan) in [`b004dd6`](https://github.com/cue-lang/cue/commit/b004dd619d6116f44504d9e70d7825b5950860e4) - internal/mod/zip: remove duplicate test case by [@mvdan](https://github.com/mvdan) in [`6c51cf0`](https://github.com/cue-lang/cue/commit/6c51cf031ddc78dd1e7a03803c960714fbe0125a) - cue/load: make Config.Registry an ociregistry.Interface by [@mvdan](https://github.com/mvdan) in [`fefeb36`](https://github.com/cue-lang/cue/commit/fefeb36c61ab48713b1f0e6a3fce2a51ea525cc0) - internal/registrytest: rewrite in terms of io/fs by [@mvdan](https://github.com/mvdan) in [`5f19042`](https://github.com/cue-lang/cue/commit/5f1904248b197468f29247c9f1b4c1476f87c3c2) - internal/registrytest: move from cue/load/internal by [@mvdan](https://github.com/mvdan) in [`633874c`](https://github.com/cue-lang/cue/commit/633874c5b3f790df51cb1837b9ae89ede1b57300) - internal/semver: copy from golang.org/x/mod by [@rogpeppe](https://github.com/rogpeppe) in [`a9a6965`](https://github.com/cue-lang/cue/commit/a9a6965188f751fca54251b803dfe4883c1f42bc) - internal/cueexperiment: parse CUE_EXPERIMENT by [@rogpeppe](https://github.com/rogpeppe) in [`b4583de`](https://github.com/cue-lang/cue/commit/b4583dee4fdeae5ed23050769fa61f7fba0fb465) - cue/load: update for OCI modules by [@rogpeppe](https://github.com/rogpeppe) in [`b951b07`](https://github.com/cue-lang/cue/commit/b951b070be0ce9c926120882cdc0bdf8f72a9d06) - internal/mod/modregistry: new package by [@rogpeppe](https://github.com/rogpeppe) in [`3c368d3`](https://github.com/cue-lang/cue/commit/3c368d38b348fc25afb40f415f4efe9e98749c1f) - update testscript so that it propagates GORACE by [@mvdan](https://github.com/mvdan) in [`e3d42af`](https://github.com/cue-lang/cue/commit/e3d42af5bd23a03d4e72e04d48f2581eb3eff772) - cmd/cue: do not ignore Encoder.Close errors on export by [@mvdan](https://github.com/mvdan) in [`f3a515e`](https://github.com/cue-lang/cue/commit/f3a515e7b4a59bc636a00f07f5648168de503df0) - cmd/cue: add more test case for exporting to a filename by [@mvdan](https://github.com/mvdan) in [`388f9a1`](https://github.com/cue-lang/cue/commit/388f9a1caad3ee4585cfb9f5f87f584e97885a66) - internal/ci: set GORACE=atexit_sleep_ms=10 for `go test -race` by [@mvdan](https://github.com/mvdan) in [`cbdd996`](https://github.com/cue-lang/cue/commit/cbdd996110a9c9068cde7187ddd09744efeb138a) - internal/core/export: fix a few staticcheck warnings by [@mvdan](https://github.com/mvdan) in [`6923617`](https://github.com/cue-lang/cue/commit/692361740f70eec5195b2756b21fe8e04c5bbc13) - cmd/cue/cmd: remove a few unused parameters by [@mvdan](https://github.com/mvdan) in [`2f6b27b`](https://github.com/cue-lang/cue/commit/2f6b27b2472975f3de10634e7d3e0544c66b37fc) - go.mod: update a few dependencies by [@mvdan](https://github.com/mvdan) in [`c08344a`](https://github.com/cue-lang/cue/commit/c08344aa68c39de95b639bfd31ff79e29dc01573) - cue: simplify the reflect checks in Value.Decode by [@mvdan](https://github.com/mvdan) in [`8709d8a`](https://github.com/cue-lang/cue/commit/8709d8aa900927e4eacd464e17e63b6fc0661937) - cue/ast/astutil: use generics to remove some reflect by [@mvdan](https://github.com/mvdan) in [`b8cb9a4`](https://github.com/cue-lang/cue/commit/b8cb9a46f7f268ef6ec36bfaaf965ed9f51e559c) - cue/load: use tdtest for TestLoad by [@rogpeppe](https://github.com/rogpeppe) in [`7389fe9`](https://github.com/cue-lang/cue/commit/7389fe97edb59b21716a85afd2ac255236a7d6a1) - internal/tdtest: clean filenames before comparison by [@rogpeppe](https://github.com/rogpeppe) in [`28f34a2`](https://github.com/cue-lang/cue/commit/28f34a272fc369740d5b053075457ad0345790d0) - internal/cuetxtar: report full result for cuetxtar test failures by [@rogpeppe](https://github.com/rogpeppe) in [`bfa250d`](https://github.com/cue-lang/cue/commit/bfa250d1086f07fa8a4baa63dd03ea38e038e1a6) - internal/mod/modfile: new package by [@rogpeppe](https://github.com/rogpeppe) in [`551fe68`](https://github.com/cue-lang/cue/commit/551fe6886c4fa607524a403291de287ce82e0d89) - internal/mod/module: improve error message by [@rogpeppe](https://github.com/rogpeppe) in [`0e95843`](https://github.com/cue-lang/cue/commit/0e9584387f3fa0fa6b0a5c509d75c0088481df96) - internal/mod/zip: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`3142030`](https://github.com/cue-lang/cue/commit/3142030a06aef0adcc3341c593b80e97ca2cb5d9) - internal/mod/mvs: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`4eca0c7`](https://github.com/cue-lang/cue/commit/4eca0c73eca109a4fde85fca7b5eac8954c7dfca) - internal/mod/mvs/internal/...: remove ignore build tags by [@rogpeppe](https://github.com/rogpeppe) in [`a102419`](https://github.com/cue-lang/cue/commit/a1024191e06c585b69b28f6b2b2ae0af32397ab8) - internal/mod/module: adapt to CUE semantics by [@rogpeppe](https://github.com/rogpeppe) in [`38cf584`](https://github.com/cue-lang/cue/commit/38cf584ceb46969d12abfa747f7346182f610a61) - internal/mod/mvs: copy from cue/load/internal/mvs by [@rogpeppe](https://github.com/rogpeppe) in [`204665c`](https://github.com/cue-lang/cue/commit/204665cebd9623467e6f53cada8e563829ecfeb6) - internal/mod/module: split module.go by [@rogpeppe](https://github.com/rogpeppe) in [`c6e91b1`](https://github.com/cue-lang/cue/commit/c6e91b174573d2232eb8e992831e8f0cfcdc6a4e) - internal/mod: copy files from golang.org/x/mod by [@rogpeppe](https://github.com/rogpeppe) in [`6f5b370`](https://github.com/cue-lang/cue/commit/6f5b370749617c1fa4658db5a1349b03c5fc43fa) - cmd/cue: update the list of output formats by [@mvdan](https://github.com/mvdan) in [`42ae8e4`](https://github.com/cue-lang/cue/commit/42ae8e4594a203000488dbaa1d143574fb8588c6) - cue: minor drive-by cleanups by [@mvdan](https://github.com/mvdan) in [`a44c805`](https://github.com/cue-lang/cue/commit/a44c805cc6f93e9fb32ef6ea81c2b1442c5b39ad) - all: fix two minor printf bugs spotted by staticcheck by [@mvdan](https://github.com/mvdan) in [`7b49758`](https://github.com/cue-lang/cue/commit/7b49758cb5b305cf842602d40d37997164d28dee) - all: fix issues spotted by nilness by [@mvdan](https://github.com/mvdan) in [`382449b`](https://github.com/cue-lang/cue/commit/382449b1e3b51c7b0c5e14b86bbac8283272dde4) - pkg/math: reuse Ln2 and Ln10 in Log2E and Log10E by [@mvdan](https://github.com/mvdan) in [`fe2f216`](https://github.com/cue-lang/cue/commit/fe2f216d70841f3348917c42f5cb4dac4709cb70) - pkg: teach gen.go about go/types by [@mvdan](https://github.com/mvdan) in [`2091170`](https://github.com/cue-lang/cue/commit/209117092490050ccd13493aad9de90b4905cc61) - pkg: swap go/build for go/packages in gen.go by [@mvdan](https://github.com/mvdan) in [`e9a412d`](https://github.com/cue-lang/cue/commit/e9a412d85fa18ab76fce03608c431ddee6472a78) - bump golang.org/x dependencies by [@mvdan](https://github.com/mvdan) in [`bf3ac20`](https://github.com/cue-lang/cue/commit/bf3ac2030ee9bd0f0b8154c66064562896629689) - all: clean up some TODOs for old Go versions by [@mvdan](https://github.com/mvdan) in [`106fc3a`](https://github.com/cue-lang/cue/commit/106fc3ad9c256f97830d87c116ce0b415e52651c) - cue: make use of Go 1.20+ APIs by [@mvdan](https://github.com/mvdan) in [`fae9c82`](https://github.com/cue-lang/cue/commit/fae9c820255e1fe81c29916d7c0d725fe4eee076) - internal/core/adt: change slice type of notify by [@mpvl](https://github.com/mpvl) in [`3165a5e`](https://github.com/cue-lang/cue/commit/3165a5e1aaecd3a76fa44ec0a3dac53801355101) - internal/core/adt: rename node to vertex by [@mpvl](https://github.com/mpvl) in [`0b96e3b`](https://github.com/cue-lang/cue/commit/0b96e3b951d054d3e5e4c84216f0c92f1457bdab) - internal/cuetxtar: allow using a fallback golden set by [@mpvl](https://github.com/mpvl) in [`826f28c`](https://github.com/cue-lang/cue/commit/826f28c9a0d421ec6ff60522927e8829678676b9) - internal/core/adt: hoist the test body of TestEval by [@mpvl](https://github.com/mpvl) in [`ca254d6`](https://github.com/cue-lang/cue/commit/ca254d6a1346cb6e29ee2c16a6db9f126a9cfde2) - internal/core/adt: add new closedness implementation by [@mpvl](https://github.com/mpvl) in [`5062118`](https://github.com/cue-lang/cue/commit/5062118be0f0f3f39839fadd7e41cced4f64b4db) - internal/tdtest: make function detection more robust by [@mpvl](https://github.com/mpvl) in [`49728f7`](https://github.com/cue-lang/cue/commit/49728f709d7a171479c352a8fffe9828e70a896c) - internal/tdtest: mimic replacement of testing.Run in Select by [@mpvl](https://github.com/mpvl) in [`1763cea`](https://github.com/cue-lang/cue/commit/1763cea8d6b4575cd1dc33b4b13528ef7345496a) - cue/load: add package import cycle error by [@bozaro](https://github.com/bozaro) in [`220b44e`](https://github.com/cue-lang/cue/commit/220b44e973eff9d41f2067499f20a12b6a0a6f29) - cue: decode empty list as empty slice instead of slice-typed nil by [@bozaro](https://github.com/bozaro) in [`66ebe0f`](https://github.com/cue-lang/cue/commit/66ebe0ff3031096da45b79a2d18c5c66af22b16e) - internal/core/adt: fix nil pointer dereference by [@bozaro](https://github.com/bozaro) in [`3286ead`](https://github.com/cue-lang/cue/commit/3286ead90d0823e5011da249e40672d65664863f) - pkg/math: fix Log2E and Log10E constant expressions by [@mvdan](https://github.com/mvdan) in [`a1038f7`](https://github.com/cue-lang/cue/commit/a1038f7c2f79327da4f0b57f24d87fde2007560d) - pkg/math: add tests which show the API constants by [@mvdan](https://github.com/mvdan) in [`63a4256`](https://github.com/cue-lang/cue/commit/63a425690f351c3bdd1a0f470f4ff783f4372c09) - all: add Go 1.21, drop Go 1.19 by [@mvdan](https://github.com/mvdan) in [`3a101ba`](https://github.com/cue-lang/cue/commit/3a101baedd640341274ef711d1cf71b097c7e2c4) - all: minor wins with strings.Cut and utf8.AppendRune by [@mvdan](https://github.com/mvdan) in [`72ba066`](https://github.com/cue-lang/cue/commit/72ba0660acbeff99881dd1f705ae4557c56e308a) - cmd/cue: fix up fmt_multi comparison by [@mvdan](https://github.com/mvdan) in [`d4d109e`](https://github.com/cue-lang/cue/commit/d4d109e5cd976a8279a6338cdee1cec3b9981e12) - encoding/gocode: don't require output to be stable by [@mvdan](https://github.com/mvdan) in [`3bf3dbd`](https://github.com/cue-lang/cue/commit/3bf3dbd655284d3628399a83a703f4849b5f9374) </details> ### [`v0.6.0`](https://github.com/cue-lang/cue/releases/tag/v0.6.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.5.0...v0.6.0) The main focus of this release is the introduction of [required fields](https://github.com/cue-lang/proposal/blob/HEAD/designs/1951-required-fields-v2.md), as well as fixing a number of issues and regressions introduced in the v0.5.0 release. As a reminder: users can register their projects with `unity`, our regression and performance testing setup. `unity` is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. `unity` continues to catch multiple issues with each release. Adding your project to `unity` not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. [Follow this link](https://cuelabs.dev/unity/) to learn more about Unity, install it, or get in touch with any questions. Thank you to [@4ad](https://github.com/4ad), [@Abirdcfly](https://github.com/Abirdcfly), [@alexandear](https://github.com/alexandear), [@chee-zaram](https://github.com/chee-zaram), [@eraserhd](https://github.com/eraserhd), [@ghostwheel42](https://github.com/ghostwheel42), [@joanlopez](https://github.com/joanlopez), [@jpluscplusm](https://github.com/jpluscplusm), [@kcburge](https://github.com/kcburge), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@rogpeppe](https://github.com/rogpeppe), [@toshi0607](https://github.com/toshi0607), and [@zeithaste](https://github.com/zeithaste) for contributing to this release! #### API [CL 543335](https://cuelang.org/cl/543335) adds `arch` to set of injectable system variables understood by `cue/load`. The text at `cue help injection` explains how this in more detail. [CL 552142](https://cuelang.org/cl/552142) adds support for zero values in `cue.Value.Float64`, which has the effect of fixing the error when attempting to use `strconv.FormatFloat` with a zero value. [CL 548783](https://cuelang.org/cl/548783) fixes a long-standing bug to make HTML escaping in JSON an opt-in. This means that `cue export` now respects the `--escape` flag when set, and `encoding/json` only escapes HTML when `HTMLEscape` is used. #### Language ##### Required fields The main focus of the v0.6.0 release is the introduction of required fields. CUE already supports the “optional field constraint”, denoted `foo?: value`. Required fields add a “required field constraint”, denoted `foo!: value`, which is like `foo?: value`, but requires a regular field be provided for `foo` (a field `foo:` without `!:` or `?:`). We refer to optional field constraints and required field constraints collectively as “field constraints”. As a general rule, all data and data templating should be defined with regular fields, whereas schemas would be defined in terms of field constraints. Of course, CUE being CUE, mixing these two fields is allowed: this rule is not a restriction but suggested as a matter of style and proper usage. Here are some examples of how exclamation marks can be used to express things that were previously not possible. #Def: { kind!: "def" intList!: [...int] } Using required fields can also result in better error messages. Consider this schema: #Person: { name: string age?: int } Note that this is non-idiomatic, because our new guidelines suggest schemas should only be defined in terms of field constraints, but we will use this for illustration purposes. Now consider this usage of `#Person`: jack: #Person & {age: 3} In data mode, the error message here is currently `jack.name: incomplete value string`, which does not provide much actionable information to the user to help them fix the problem. Now consider how `#Person` looks with required fields, idiomatically only using field constraints: #Person: { name!: string age?: int } jack: #Person & {age: 3} Now the error message reads: jack.name: field is required but not present which more closely reflects the underlying problem.. This error could be resolved by adding `jack: name: "Jack"`. For more details and background on the change, please see [the original required fields proposal](https://github.com/cue-lang/proposal/blob/HEAD/designs/1951-required-fields-v2.md). ##### Other changes Whilst it should not be a breaking change from a CUE perspective, we have upgraded to use [`github.com/cockroachdb/apd/v3`](https://pkg.go.dev/github.com/cockroachdb/apd/v3). We have also increased `apd.Context` precision from 24 to 34. [CL 551207](https://cuelang.org/cl/551207) adds support for making dynamic fields optional or required. For example, the following is now possible: x: "y" (x): "foo" (x)?: "foo" (x)!: "foo" and yields: x: "y" y: "foo" [CL 546886](https://cuelang.org/cl/546886) removes support for old-style `::` definitions. This also includes deprecation support. In a similar vein, [CL 547011](https://cuelang.org/cl/547011) removes the last vestiges of `<foo>: T`. This was once the notation for pattern constraints. #### Spec Various bug fixes, with special thanks to [@nicuveo](https://github.com/nicuveo) for raising many of these. #### Builtins The following four functions have been added to the [`net`](https://pkg.go.dev/cuelang.org/go@v0.6.0-alpha.2/pkg/net) package: - `PathEscape` - `PathUnescape` - `QueryEscape` - `QueryUnescape` Thanks to [@eraserhd](https://github.com/eraserhd) for this change. [CL 549087](https://cuelang.org/cl/549087) reimplements `pkg/list.Sort`. The resulting reduction in the number of allocations and other work gives rise to a ~80% reduction in running time against CUE benchmarks. #### `cmd/cue` [CL 547212](https://cuelang.org/cl/547212) improves the documentation for the `-l` flag passed to `cue import`. This addresses a frequent point of confusion in questions to GitHub Discussions and on Slack. [CL 550616](https://cuelang.org/cl/550616) fixes `cue get go` to respect the `--exclude` flag for constants. This makes it possible to (for example) exclude all unexported identifiers from a `cue get go` run. [CL 555576](https://cuelang.org/cl/555576) fixed an important bug where `cmd/cue vet` was not properly consuming all input data. [CL 556526](https://cuelang.org/cl/556526) fixed a bug where CUE files beginning with an underscore were not being loaded when explicitly given as filename arguments. #### WebAssembly (Wasm) We have added preliminary support for Wasm. Users can compile code from any language and toolchain that supports Wasm into plugins that are dynamically loaded by CUE. Users can then call and use functions from these Wasm modules, just like they can use standard library functions. See the documentation at [cuelang.org/go/cue/interpreter/wasm](https://pkg.go.dev/cuelang.org/go/cue/interpreter/wasm) to learn more about Wasm and its current limitations. #### Changelog <details> <summary>Expand for the full changelog</summary> - internal/core/dep: always introduce Environment for Comprehension Value to fix panic by [@mpvl](https://github.com/mpvl) in [`99e8578`](https://github.com/cue-lang/cue/commit/99e8578ac45e5e7e6ebf25794303bc916744c0d3) - internal/core/dep: adapt Recurse to mimic dep.Visit by [@mvdan](https://github.com/mvdan) in [`97d7109`](https://github.com/cue-lang/cue/commit/97d7109df4d03e7ecc77daa12dbc8b6a247e4d37) - internal/ci: use cue-lang/cuelang.org workflow_dispatch for tip by [@myitcv](https://github.com/myitcv) in [`33b7393`](https://github.com/cue-lang/cue/commit/33b73930b8fc8a719a88978be0b7e019ba34e247) - cmd/cue: fix regression when injecting vars with cue cmd by [@mvdan](https://github.com/mvdan) in [`da3ee7d`](https://github.com/cue-lang/cue/commit/da3ee7dc7b27de85bbfb0a4104dfb22bcb18ef68) - internal/core/adt: lets of comprehensions are multi lets by [@mpvl](https://github.com/mpvl) in [`43b4674`](https://github.com/cue-lang/cue/commit/43b4674898df7e2e8758ccb6154041a98e321e40) - internal/core/adt: always mark let in comprehension as "complete" by [@mpvl](https://github.com/mpvl) in [`5123737`](https://github.com/cue-lang/cue/commit/5123737983654d143151b47c1b5c67ed2a7bcf6c) - cue/ast: clarify what is a valid identifier by [@mvdan](https://github.com/mvdan) in [`c4ced5e`](https://github.com/cue-lang/cue/commit/c4ced5ef6bc322a12fbeaceb9c79a8cda15a0c50) - internal/core/adt: find late-stage conflict errors by [@mpvl](https://github.com/mpvl) in [`0c48837`](https://github.com/cue-lang/cue/commit/0c48837de759df5b78a02696e2401267cceb6117) - internal/core/adt: add tests to fix 2481 by [@mpvl](https://github.com/mpvl) in [`d3444e3`](https://github.com/cue-lang/cue/commit/d3444e38a7582138aee3f25188fc3595acc61a49) - internal/core/adt: fix stack overflow with comprehensions by [@mpvl](https://github.com/mpvl) in [`33071c0`](https://github.com/cue-lang/cue/commit/33071c0cb767cc1d37a5da6b164dc16d564ca24b) - deps: upgrade to go1.20.6 for release builds by [@myitcv](https://github.com/myitcv) in [`538eb9c`](https://github.com/cue-lang/cue/commit/538eb9ca7f52f73cfa17c69a44eaad368ecd94c5) - internal/core/compile: reject "\_" as an alias name by [@mvdan](https://github.com/mvdan) in [`bcbe967`](https://github.com/cue-lang/cue/commit/bcbe967fdd1d26bc138092d9d6a36e28c55940d7) - all: remove a few more unused bits of code by [@mvdan](https://github.com/mvdan) in [`c8e51a5`](https://github.com/cue-lang/cue/commit/c8e51a5cb6fc504db363a9163baea0f76406e8a4) - internal/core/dep: prevent passing "empty" vertices to tools/flow by [@mvdan](https://github.com/mvdan) in [`c3eda1d`](https://github.com/cue-lang/cue/commit/c3eda1d599df106ca6562041384b3f6a9bd2dc36) - internal/core/adt: do not delay processing of fields by [@mpvl](https://github.com/mpvl) in [`e7cfb50`](https://github.com/cue-lang/cue/commit/e7cfb50772304833aaf8ac4471aa99638fe1a5a6) - internal/core/adt: add tests for upcoming issues by [@mpvl](https://github.com/mpvl) in [`cabc1db`](https://github.com/cue-lang/cue/commit/cabc1dbb9f31f9b1845987bfdfd5b59f02fc5d7c) - CONTRIBUTING: fix references to the old Unity repo by [@mvdan](https://github.com/mvdan) in [`23e265d`](https://github.com/cue-lang/cue/commit/23e265deab3833cf1aa5ddb8a5c2662da6071fb5) - cmd/cue: print returned error by [@mpvl](https://github.com/mpvl) in [`450ff90`](https://github.com/cue-lang/cue/commit/450ff90e9a1e2e656e6e854de9c7e6e5658d9791) - deduplicate content between README and CONTRIBUTING by [@mvdan](https://github.com/mvdan) in [`4c48cee`](https://github.com/cue-lang/cue/commit/4c48ceec607f9e5f5b73caa9828c58ad62f2b344) - move doc/contribute.md to CONTRIBUTING.md by [@mvdan](https://github.com/mvdan) in [`db28ec6`](https://github.com/cue-lang/cue/commit/db28ec6e85290adbb04e5115bd13923fde6a7446) - readme: warn new contributors not to use SSH auth by [@jpluscplusm](https://github.com/jpluscplusm) in [`f4c5639`](https://github.com/cue-lang/cue/commit/f4c563924512cf3f4f4e2af61042b4fcf948c17e) - internal/core/adt: pass state to addList by [@mpvl](https://github.com/mpvl) in [`b38aece`](https://github.com/cue-lang/cue/commit/b38aecec7f654e53ebd9864c4a21d4244d89ad48) - internal/core/adt: set scalar more proactively by [@mpvl](https://github.com/mpvl) in [`ab15bb8`](https://github.com/cue-lang/cue/commit/ab15bb818b04de45c9aeacb09238ff7ec89790c4) - internal/core/adt: better error message for cycles by [@mpvl](https://github.com/mpvl) in [`5e84a6d`](https://github.com/cue-lang/cue/commit/5e84a6d2b82143d124ff95965df206047f80ce88) - internal/ci: count number of Signed-off-by lines by [@myitcv](https://github.com/myitcv) in [`4ba1b15`](https://github.com/cue-lang/cue/commit/4ba1b15d0c93ab0fd7c1a6d400ff5d7e4f0ae203) - internal: remove a few unused APIs by [@mvdan](https://github.com/mvdan) in [`1c1a7b3`](https://github.com/cue-lang/cue/commit/1c1a7b3aff0fa09cd6bc8dbe482f0d4d82f1731a) - cue/load: fix Instances race by [@rogpeppe](https://github.com/rogpeppe) in [`c10d7cb`](https://github.com/cue-lang/cue/commit/c10d7cbc34a84f42b50881a66f8b7c7c8d162cdd) - cue/load: allow \_\*.cue files when explicitly listed by [@myitcv](https://github.com/myitcv) in [`b16f6ce`](https://github.com/cue-lang/cue/commit/b16f6ceecac7433917ebfee1188e35846520530e) - internal/core/dep: fix recursive let processing by [@mpvl](https://github.com/mpvl) in [`ca1f812`](https://github.com/cue-lang/cue/commit/ca1f8127635bce3844e59b49226cc48bf6b426ec) - internal/core/dep: add Dependency.Recurse by [@mpvl](https://github.com/mpvl) in [`f6e49bd`](https://github.com/cue-lang/cue/commit/f6e49bdebce2873078d8ea43a05b6c1ec0d290af) - internal/core/dep: prepare for public APi by [@mpvl](https://github.com/mpvl) in [`0554d4e`](https://github.com/cue-lang/cue/commit/0554d4e559e12914b9f5802a416c55a307517e06) - internal/core/adt: mark comprehension key as dynamic by [@mpvl](https://github.com/mpvl) in [`d4fd104`](https://github.com/cue-lang/cue/commit/d4fd1048f317c0a4223ad6ff1a2bbc12b63c9b8b) - internal/core/dep: further improve dependency analysis by [@mpvl](https://github.com/mpvl) in [`f513654`](https://github.com/cue-lang/cue/commit/f51365488e8a346fe7f321ef62b75b3ab7be1559) - internal/core/dep: add more tests ahead of changes by [@mpvl](https://github.com/mpvl) in [`202eb3e`](https://github.com/cue-lang/cue/commit/202eb3e4e2fbce7b2aceefd79e7e5f93a8e7515f) - cue: fix some low hanging fruit from staticcheck by [@mvdan](https://github.com/mvdan) in [`41b38fe`](https://github.com/cue-lang/cue/commit/41b38fe201f40e13f0c23787a615e25f295ac609) - all: replace godebug/diff with go-cmp/cmp by [@mvdan](https://github.com/mvdan) in [`fa6e229`](https://github.com/cue-lang/cue/commit/fa6e229ee207332781f8fe24ef85bc741583d546) - encoding/gocode/gocodec: use different generic type signature by [@rogpeppe](https://github.com/rogpeppe) in [`1a98ee1`](https://github.com/cue-lang/cue/commit/1a98ee1ea6815d75755a5dac31c9f70545e775b4) - internal/core/dep: add references and line in test output by [@mpvl](https://github.com/mpvl) in [`518bafa`](https://github.com/cue-lang/cue/commit/518bafa5689303c24983b0b9a956b22844ee2f93) - internal: use Scanner API to parse attributes by [@rogpeppe](https://github.com/rogpeppe) in [`3400e74`](https://github.com/cue-lang/cue/commit/3400e742833b074b5d5cc270953d89ace4282b70) - internal/core/dep: require importPath argument by [@mpvl](https://github.com/mpvl) in [`4fcf29c`](https://github.com/cue-lang/cue/commit/4fcf29cf0441993efe663cee541b111e634ab317) - internal/core/dep: handle inline composite literals by [@mpvl](https://github.com/mpvl) in [`07ae1be`](https://github.com/cue-lang/cue/commit/07ae1be79e90e9b9ccb8c5ef56ed946370878fa8) - cue: report useful error for uninitalized Context by [@mpvl](https://github.com/mpvl) in [`b8e2bf0`](https://github.com/cue-lang/cue/commit/b8e2bf065d429850361118af699686ff485d1719) - cue: add extra TestAttributeString test by [@rogpeppe](https://github.com/rogpeppe) in [`876af7a`](https://github.com/cue-lang/cue/commit/876af7abdcb89ded03e757daa910fac88753edd2) - internal/core/export: avoid \_#def if unnecessary by [@mpvl](https://github.com/mpvl) in [`d112f64`](https://github.com/cue-lang/cue/commit/d112f640a325f8c55cdce7e98bab4c64e85ece57) - cmd/cue/cmd: add test for issue 2251 by [@mpvl](https://github.com/mpvl) in [`19af1e9`](https://github.com/cue-lang/cue/commit/19af1e97c8b10884c81626089b7974aa5cd1a4a0) - cue/scanner: add Offset method and export DontInsertCommas by [@rogpeppe](https://github.com/rogpeppe) in [`de9e760`](https://github.com/cue-lang/cue/commit/de9e76091eaed8733d3562ba5079c68f637ad0c0) - cue: add more attribute tests by [@rogpeppe](https://github.com/rogpeppe) in [`d8a0e26`](https://github.com/cue-lang/cue/commit/d8a0e26c63255eb2d198a55cf4f37a8457a845b3) - internal: change attribute tests to be less implementation-specific by [@rogpeppe](https://github.com/rogpeppe) in [`7741d21`](https://github.com/cue-lang/cue/commit/7741d21b42f6961443d7ee0b0db4de723ad995fc) - encoding/gocode/gocodec: allow cue.Context by [@rogpeppe](https://github.com/rogpeppe) in [`1e76095`](https://github.com/cue-lang/cue/commit/1e760956c098e7d116a78f8aa5b7d709309fedb5) - internal/core/dep: add and modify some tests for issue 2247 by [@mpvl](https://github.com/mpvl) in [`24e8d56`](https://github.com/cue-lang/cue/commit/24e8d560af649c79b8a032f2da9f45c2a2b80a97) - internal/core/export: fix panic converting int label to identifier by [@mpvl](https://github.com/mpvl) in [`24f3fb3`](https://github.com/cue-lang/cue/commit/24f3fb310302afea643e19087876e7836afd2e5c) - encoding/json: check that required fields are present by [@mpvl](https://github.com/mpvl) in [`adbe80e`](https://github.com/cue-lang/cue/commit/adbe80e41254ff45dfb3194f930db9898e1a7a47) - pkg/encoding/json: add tests that needs to be fixed by [@mpvl](https://github.com/mpvl) in [`8df1034`](https://github.com/cue-lang/cue/commit/8df10344407d10b897a39e2278e3a9c7ea7bfe80) - pkg/encoding/json: add more structure to tests by [@mpvl](https://github.com/mpvl) in [`6922e14`](https://github.com/cue-lang/cue/commit/6922e1455188fa1d8beaa06e670f43d0ed801afe) - cue: document UnifyAccept by [@mpvl](https://github.com/mpvl) in [`c054274`](https://github.com/cue-lang/cue/commit/c0542747082c57cd87f75be60cdc07abd6367e61) - internal/core/export: preserve original field aliases by [@mpvl](https://github.com/mpvl) in [`7be6224`](https://github.com/cue-lang/cue/commit/7be6224cbc4f99e9caee308a9218f11654dbb621) - internal/core/compile: fix offset error in pattern alias by [@mpvl](https://github.com/mpvl) in [`914d64d`](https://github.com/cue-lang/cue/commit/914d64d5e0269439a92e7572acd77128b4156e44) - internal/ci: consistently trigger Unity as porcuepine by [@mvdan](https://github.com/mvdan) in [`a0510ac`](https://github.com/cue-lang/cue/commit/a0510ac0d3518df4f0bd31cb214f0f8eedfc1deb) - internal/ci: bump Go and GoReleaser prior to alpha.2 by [@mvdan](https://github.com/mvdan) in [`b6a32da`](https://github.com/cue-lang/cue/commit/b6a32da097fce5f9c960ad0a02da51efb18de2fd) - correct misleading phrases in documentation by [@chee-zaram](https://github.com/chee-zaram) in [`0755dc8`](https://github.com/cue-lang/cue/commit/0755dc86181966d7ab75af5c408765bcd3aaa5b6) - internal/core/export: avoid panics on computed comprehensions by [@mvdan](https://github.com/mvdan) in [`6db2253`](https://github.com/cue-lang/cue/commit/6db2253ab586721682e96e86bfe1fb281fe8c46d) - internal/core/adt: return from Accept earlier for hidden fields by [@mpvl](https://github.com/mpvl) in [`c724eef`](https://github.com/cue-lang/cue/commit/c724eef0ca75447ba2dd99bfea849f1cea1b680b) - cue/ast: fix staticcheck warnings by [@mvdan](https://github.com/mvdan) in [`cc6b544`](https://github.com/cue-lang/cue/commit/cc6b5449a737ef9ef9762713ce248fcff2671594) - internal/core/adt: add missed error by [@mpvl](https://github.com/mpvl) in [`19749aa`](https://github.com/cue-lang/cue/commit/19749aaa866a3660833a108fb4fddda9446fc2a2) - internal/core/adt: fail on missing required field in comprehension by [@mpvl](https://github.com/mpvl) in [`a991bd6`](https://github.com/cue-lang/cue/commit/a991bd624f86a3b018164c51e806884e9968a56c) - cue: allow iterating hidden fields and definitions of embedded scalars by [@mpvl](https://github.com/mpvl) in [`de44cab`](https://github.com/cue-lang/cue/commit/de44cab16e6b66e65e816a1c3627c9f891e6b747) - internal/core/adt: add position for required field error by [@mpvl](https://github.com/mpvl) in [`452e143`](https://github.com/cue-lang/cue/commit/452e1434fd2b6d3b06e3f45c1681da0085fed70b) - internal/core/validate: allow required fields in definitions by [@mpvl](https://github.com/mpvl) in [`317f88d`](https://github.com/cue-lang/cue/commit/317f88d34ea1fdf4526fadabd68163e2d52ae870) - cue/ast: support specifying required fields in NewStruct by [@mpvl](https://github.com/mpvl) in [`1432683`](https://github.com/cue-lang/cue/commit/143268314d3247237ba67518a6d0958d1ec246aa) - tools/flow: check cycle marker by [@mpvl](https://github.com/mpvl) in [`9a566ed`](https://github.com/cue-lang/cue/commit/9a566ed5aecdd44f10941fcb41e949cde6367de8) - spec: add definition for dynamic fields by [@mpvl](https://github.com/mpvl) in [`3a635fc`](https://github.com/cue-lang/cue/commit/3a635fc7a746cef0abd6250de13f07092eee5518) - spec: various fixes by [@mpvl](https://github.com/mpvl) in [`e46324e`](https://github.com/cue-lang/cue/commit/e46324ef052b90aaf605aebea608fa147b2bf8dd) - cmd/cue: properly consume all data input in vet by [@mvdan](https://github.com/mvdan) in [`b22ec6a`](https://github.com/cue-lang/cue/commit/b22ec6a02e7c92fb125af262b1be4aa89790ad17) - cmd/cue: add AllocBytes and AllocObjects to stats by [@mvdan](https://github.com/mvdan) in [`03d85b8`](https://github.com/cue-lang/cue/commit/03d85b869149a1656ebd56a23adcc9941c70f294) - increase apd.Context precision from 24 to 34 by [@mvdan](https://github.com/mvdan) in [`7bcbcd6`](https://github.com/cue-lang/cue/commit/7bcbcd663ca0a7db50113b8f6a5a78150eeaa34b) - update to cockroachdb/apd v3 by [@mvdan](https://github.com/mvdan) in [`4728223`](https://github.com/cue-lang/cue/commit/47282232b4368f36621f6e4a3b0445bcc42afb9a) - cue: add a "decimal" benchmark by [@mvdan](https://github.com/mvdan) in [`f3be10a`](https://github.com/cue-lang/cue/commit/f3be10a2114c5a97bdde29266cea8dc88e0daf0e) - deps: switch to use quicktest instead of testify by [@myitcv](https://github.com/myitcv) in [`12908b3`](https://github.com/cue-lang/cue/commit/12908b32a9a74c40ee14cf69ab7221a94bbdafd3) - cue/testdata: add regression test for [#2244](https://github.com/cue-lang/cue/issues/2244) by [@mvdan](https://github.com/mvdan) in [`442c023`](https://github.com/cue-lang/cue/commit/442c023478e67a6dce28040b22a75d14f007edf8) - internal/cuetest: remove support for CUE_LONG by [@mvdan](https://github.com/mvdan) in [`cb461fd`](https://github.com/cue-lang/cue/commit/cb461fd4741dcd9e621e0a53f1d2fe7b72c276bf) - all: sed-replace all trivial uses of ioutil by [@mvdan](https://github.com/mvdan) in [`f56ccf0`](https://github.com/cue-lang/cue/commit/f56ccf025c2e079c1b38a4acc801de0cf354dc34) - pkg/path: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`ab48c0f`](https://github.com/cue-lang/cue/commit/ab48c0fd86c0cf5cd23f862fd180e284951034d1) - encoding/protobuf/jsonpb: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`b2476bd`](https://github.com/cue-lang/cue/commit/b2476bd08a39851483e8dfdb27808f1b4cd60d9b) - encoding/protobuf: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`b41f26f`](https://github.com/cue-lang/cue/commit/b41f26f767d0a740c0df04fa78096d8b05ab7473) - tools/fix: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`1f888b5`](https://github.com/cue-lang/cue/commit/1f888b50dcfe0d78fcd7438c22df72e4fbd328d4) - all: use strings.Builder in a few more places by [@mvdan](https://github.com/mvdan) in [`97cba0b`](https://github.com/cue-lang/cue/commit/97cba0bd6973d31e6005b3bd98ac579b1f1816aa) - internal/encoding: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`251790e`](https://github.com/cue-lang/cue/commit/251790edc0f6b73fe1dcd4fb41d408b0d962c179) - encoding/openapi: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`36645d1`](https://github.com/cue-lang/cue/commit/36645d1bff99dd9fe9c5f8f2991623fe169523e8) - all: go fix to remove old build tags by [@mvdan](https://github.com/mvdan) in [`8868ae6`](https://github.com/cue-lang/cue/commit/8868ae6fdf931de36973640b4bbc5fca5fc2722e) - internal/ci: trigger Unity on master as porcuepine by [@mvdan](https://github.com/mvdan) in [`2148aed`](https://github.com/cue-lang/cue/commit/2148aed34464229e762289cbb8a7610f35e1ed81) - internal/ci: remove cue-unity/unity from codereview.cfg by [@mvdan](https://github.com/mvdan) in [`c341427`](https://github.com/cue-lang/cue/commit/c341427c7ca4046d8b7cd364f397e699115d311a) - internal/core/conver: make use of reflect.Value.IsZero by [@mvdan](https://github.com/mvdan) in [`5318af1`](https://github.com/cue-lang/cue/commit/5318af119014318463573df00609748837c2388a) - internal/ci: further tidy up by [@myitcv](https://github.com/myitcv) in [`82f96c5`](https://github.com/cue-lang/cue/commit/82f96c5e4073ea856efd29cb4153809ac2fb5c1d) - cue/interpreter/wasm: add user-level docs by [@4ad](https://github.com/4ad) in [`40fb30d`](https://github.com/cue-lang/cue/commit/40fb30dfb67c0620b3af5a80ebd6d59a0335f990) - cue/interpreter/wasm: add Wasm support for abi=c by [@4ad](https://github.com/4ad) in [`0520a3f`](https://github.com/cue-lang/cue/commit/0520a3f9e73e63d77e43c9b3a73c75982c15ee6d) - internal/pkg: move pkg/internal to internal/pkg by [@4ad](https://github.com/4ad) in [`88922d1`](https://github.com/cue-lang/cue/commit/88922d17d7d085de4397203bf34b889cd59077b4) - codereview.cfg: add cue-unity-new by [@mvdan](https://github.com/mvdan) in [`a670427`](https://github.com/cue-lang/cue/commit/a670427406af7451da77cf477c0786d6f1b129c8) - doc/tutorial: fix typo by [@toshi0607](https://github.com/toshi0607) in [`2304cb5`](https://github.com/cue-lang/cue/commit/2304cb51d2aca3ab38f1e6db00cac8661dc16e46) - cue/load: replace go-internal/semver with x/mod by [@mvdan](https://github.com/mvdan) in [`6c92698`](https://github.com/cue-lang/cue/commit/6c926983a43ebd32c5d8b582a3db2ffafb301cff) - internal/cuetxtar: print error details by [@rogpeppe](https://github.com/rogpeppe) in [`80d6ea0`](https://github.com/cue-lang/cue/commit/80d6ea032057b40e405eefab6015e92bbc5cc2a5) - tools/flow: support tasks inside slices by [@rogpeppe](https://github.com/rogpeppe) in [`6e0366f`](https://github.com/cue-lang/cue/commit/6e0366f6541ab3b7a5882130fcac2e0a2b3566f6) - internal/core/convert: split the cue tag commas after the last quote by [@ghostwheel42](https://github.com/ghostwheel42) in [`49a64f4`](https://github.com/cue-lang/cue/commit/49a64f4c69a3fe3310a78126feb1600f6d46ed36) - pkg/net: add Path{E,Une}sape and Query{E,Une}scape by [@eraserhd](https://github.com/eraserhd) in [`9082446`](https://github.com/cue-lang/cue/commit/9082446a50e982816bbe49a83b49fe1c92aeca7e) - cmd/cue: refactor our use of cobra by [@mvdan](https://github.com/mvdan) in [`59080b6`](https://github.com/cue-lang/cue/commit/59080b65a5ba539bb3f3cb45d3346f39df67cf01) - cmd/cue: do not defer closing files in fmt's loop by [@mvdan](https://github.com/mvdan) in [`7f79469`](https://github.com/cue-lang/cue/commit/7f79469d264a4be3a88dfef4036d8d6504de401c) - cmd/cue: check all file I/O errors in fmt by [@mvdan](https://github.com/mvdan) in [`8c6d9ba`](https://github.com/cue-lang/cue/commit/8c6d9ba359831b857958bd6b796d75d7b9ff2779) - docs/tutorial: revert to using cue eval -i by [@myitcv](https://github.com/myitcv) in [`5e66c83`](https://github.com/cue-lang/cue/commit/5e66c831d177d7fc98892dc95c82cf150a3c2fd0) - all: move pkg/gen and internal/cmd/qgo to build-ignored files by [@mvdan](https://github.com/mvdan) in [`bad36b2`](https://github.com/cue-lang/cue/commit/bad36b2d8a19dd566a27e304407038abbe617968) - internal/ci: use go1.20.3 for releases by [@myitcv](https://github.com/myitcv) in [`9db1b95`](https://github.com/cue-lang/cue/commit/9db1b95606c3d393aafebe3eb159855e3790011c) - internal/tdtest: use field name in default error message by [@mpvl](https://github.com/mpvl) in [`401cab2`](https://github.com/cue-lang/cue/commit/401cab2dcdb3e7ffeec482433bbeaf88fa3130b9) - internal/core/adt: fix Definition closedness bug in API by [@mpvl](https://github.com/mpvl) in [`c3c8eb7`](https://github.com/cue-lang/cue/commit/c3c8eb70ab718f932bcbabbd4d4c6340681dbd5e) - update txtpbfmt to drop indirect dependency on glog by [@mvdan](https://github.com/mvdan) in [`410eea1`](https://github.com/cue-lang/cue/commit/410eea11f49eb9c88ef0b07af16bad55b24ba7bb) - internal/core/adt: fix NotEqualOp for lists with differing lengths by [@mvdan](https://github.com/mvdan) in [`6e185bb`](https://github.com/cue-lang/cue/commit/6e185bb62a3ae3972b2aba33a650bc6722891483) - cmd/cue: remove skipped test scripts for fixing old definitions by [@mvdan](https://github.com/mvdan) in [`9505e90`](https://github.com/cue-lang/cue/commit/9505e90092df6907cb584702a56521c26e8ddc47) - all: make HTML escaping in JSON an opt-in by [@mvdan](https://github.com/mvdan) in [`48207fb`](https://github.com/cue-lang/cue/commit/48207fb5fbfd85784c0560ea32c559183b49f475) - all: add tests to cover HTML escaping via encoding/json by [@mvdan](https://github.com/mvdan) in [`1aefd09`](https://github.com/cue-lang/cue/commit/1aefd09c7951e4759299bf63e0be2b70432ea741) - cue/build: remove context.Context field by [@rogpeppe](https://github.com/rogpeppe) in [`1932295`](https://github.com/cue-lang/cue/commit/1932295afe5dc1753a99bf8cf616c2afc12eb653) - cue/ast: fix IsValidIdent for \_0 by [@rogpeppe](https://github.com/rogpeppe) in [`9422314`](https://github.com/cue-lang/cue/commit/94223148d697b3beeaa1ec3ca5dc68a73cb9efcd) - internal/diff: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`9e22283`](https://github.com/cue-lang/cue/commit/9e222837e651d5e52360bd44d09a745faa3eca7e) - cmd/cue/cmd: remove unused code by [@rogpeppe](https://github.com/rogpeppe) in [`aa8c66f`](https://github.com/cue-lang/cue/commit/aa8c66f40728bef5b42558d696ab9b94737543f7) - internal/core/adt: fix let closedness issue with API use by [@mpvl](https://github.com/mpvl) in [`731ddd9`](https://github.com/cue-lang/cue/commit/731ddd9d79e7a714fff8dcb1f79112580921ce8b) - internal/core/export: avoid introducing shadowing by [@mpvl](https://github.com/mpvl) in [`1c9a3b2`](https://github.com/cue-lang/cue/commit/1c9a3b26939456a729de38c7e31a20f4f5693bb7) - internal/tdtest: new table-driven test package by [@mpvl](https://github.com/mpvl) in [`102150d`](https://github.com/cue-lang/cue/commit/102150dedd937090ffee149b1675ff1b0bef89cc) - cue: more support for required fields for selectors by [@mpvl](https://github.com/mpvl) in [`0e16084`](https://github.com/cue-lang/cue/commit/0e1608456fd9df41b27d05bba7f97d25881bce63) - internal/core: fail on missing required only when concrete by [@mpvl](https://github.com/mpvl) in [`f85172a`](https://github.com/cue-lang/cue/commit/f85172a7916b26eb78123da685286b0a2e111384) - cue: fail on required field in various cases by [@mpvl](https://github.com/mpvl) in [`e7d7c6a`](https://github.com/cue-lang/cue/commit/e7d7c6a7aa9ba8e2024a874431558c8e5ec4e8d5) - internal/core/adt: add wrapper for inline Vertex by [@mpvl](https://github.com/mpvl) in [`071c4ab`](https://github.com/cue-lang/cue/commit/071c4ab6df8df3731271b655b1bdc0b0733758d8) - internal/core/export: always export required fields by [@mpvl](https://github.com/mpvl) in [`d5dd9ec`](https://github.com/cue-lang/cue/commit/d5dd9ec2fd17c3584806cc71c9b2633cd1276226) - cue: remove field type by [@mpvl](https://github.com/mpvl) in [`d05d9c1`](https://github.com/cue-lang/cue/commit/d05d9c1ec2a6fa505a6a4538180ddd71c0cf787b) - cmd/cue: avoid loading the current package in `cue help` by [@mvdan](https://github.com/mvdan) in [`143b102`](https://github.com/cue-lang/cue/commit/143b102b4fbcf3331c6f21f4222d59b06d41b270) - all: remove duplicate words in comments by [@Abirdcfly](https://github.com/Abirdcfly) in [`d8c71fa`](https://github.com/cue-lang/cue/commit/d8c71fa18d885f4d4aa13e7dcd51d5de980687fc) - internal/ci: fix cache eviction by [@myitcv](https://github.com/myitcv) in [`53d3bc7`](https://github.com/cue-lang/cue/commit/53d3bc715329847fc20b3d7a14ed13606649f0a0) - internal/ci: address review feedback from CL 551352 by [@myitcv](https://github.com/myitcv) in [`06397b5`](https://github.com/cue-lang/cue/commit/06397b54764ab3de4788e0afb5e7898d81305e3c) - cue: add support for zero values in Value.Float64 by [@kcburge](https://github.com/kcburge) in [`8d31dad`](https://github.com/cue-lang/cue/commit/8d31dad6f551bedda23f1c9fdf1966bc86dec986) - cue/load/tags: add `arch` to set of injectable system variables by [@jpluscplusm](https://github.com/jpluscplusm) in [`752b8e4`](https://github.com/cue-lang/cue/commit/752b8e4a3f019d36440bb85445df69fbec209b09) - internal/ci: allow trybot workflows to be workflow_dispatch-ed by [@myitcv](https://github.com/myitcv) in [`09221a3`](https://github.com/cue-lang/cue/commit/09221a3ebc1dadbe75ffadf8263bdfca7a7fe293) - internal/core/adt: required fields checked for closedness by [@mpvl](https://github.com/mpvl) in [`42580d5`](https://github.com/cue-lang/cue/commit/42580d5b27b9b66fe1d5cfed5e3ad4a3532c3c36) - doc/ref/spec.md: fix uint16 and uint32 values range by [@joanlopez](https://github.com/joanlopez) in [`c67fe60`](https://github.com/cue-lang/cue/commit/c67fe60c23f5e14b2a8dac6e72db7ef6abac9460) - all: correct typos and duplicate words in comments by [@alexandear](https://github.com/alexandear) in [`2e28b01`](https://github.com/cue-lang/cue/commit/2e28b01ce53cf3566af4da5ab365d0d57528ed9a) - cue/errors: remove redundant Sort call in list.sanitize by [@zeithaste](https://github.com/zeithaste) in [`f106acf`](https://github.com/cue-lang/cue/commit/f106acff45bcd2ba263135f24fd338320f699e90) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`d71a76c`](https://github.com/cue-lang/cue/commit/d71a76cfae1c57f203eae14b04605fe9d07be6e6) - internal/ci: remove hard-codings in base package by [@myitcv](https://github.com/myitcv) in [`f881884`](https://github.com/cue-lang/cue/commit/f881884a4e0c7c7ead6e7ed340f2ce723136836f) - internal/core/adt: change addList signature by [@mpvl](https://github.com/mpvl) in [`0c840f6`](https://github.com/cue-lang/cue/commit/0c840f6652709b9d142f2023fac744773b375bd9) - internal/core/adt: introduce ArcNotPresent by [@mpvl](https://github.com/mpvl) in [`e3a7fcf`](https://github.com/cue-lang/cue/commit/e3a7fcf66b0277d3012f4cb9168e751a6732add2) - internal/core/adt: use value array for Disjunction by [@mpvl](https://github.com/mpvl) in [`166ac88`](https://github.com/cue-lang/cue/commit/166ac88b15c358d6cf0560aacaf1099e7cfc06e1) - internal/core/adt: specialize injectComprehension by [@mpvl](https://github.com/mpvl) in [`fa4f2d3`](https://github.com/cue-lang/cue/commit/fa4f2d3050c2c7f71cbdc7f27106496b692d873f) - internal/core/adt: hoist comprehension loop body by [@mpvl](https://github.com/mpvl) in [`e0f5681`](https://github.com/cue-lang/cue/commit/e0f5681dbf354fc4062fdd49a3082ee0ea98ec94) - internal/ci: move evict_caches to base by [@myitcv](https://github.com/myitcv) in [`cef63a3`](https://github.com/cue-lang/cue/commit/cef63a357de717255da826c376d3824773d7ed53) - internal/ci: remove mention of matrix and runner from base by [@myitcv](https://github.com/myitcv) in [`3ed9f92`](https://github.com/cue-lang/cue/commit/3ed9f9220667b9c929460eee371644b7c9e2fb5f) - internal/ci: remove trybot from push branches by [@myitcv](https://github.com/myitcv) in [`5cd427a`](https://github.com/cue-lang/cue/commit/5cd427aa1aef86364768fcc587c49399600c6be0) - internal/ci: refactor base caching pattern by [@myitcv](https://github.com/myitcv) in [`92b28c4`](https://github.com/cue-lang/cue/commit/92b28c409321397e8e14276f3d669c11f22ae0d5) - internal/ci: drop pullThroughProxy step by [@myitcv](https://github.com/myitcv) in [`79aceb7`](https://github.com/cue-lang/cue/commit/79aceb75b056d96bb24b9e393744e9c704033d42) - cue/errors: better vetting of error formats by [@rogpeppe](https://github.com/rogpeppe) in [`c630554`](https://github.com/cue-lang/cue/commit/c630554826376595d7c3617035f4f994aad6d11c) - internal/ci: improve push_tip_to_trybot defaults by [@myitcv](https://github.com/myitcv) in [`be0601b`](https://github.com/cue-lang/cue/commit/be0601bf379c496a57312afeb5ed56566ef624ee) - internal/ci/github: rename repo -> \_repo by [@myitcv](https://github.com/myitcv) in [`646e965`](https://github.com/cue-lang/cue/commit/646e9658ce7b6e3bca4ce16c3e140e102ef8cf2d) - internal/ci: import repo package once in github package by [@myitcv](https://github.com/myitcv) in [`7aec30c`](https://github.com/cue-lang/cue/commit/7aec30c7cd97ac01ff394ec8ea70e3c0e461f8ca) - internal/ci: drop parameter from trybotDispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`6318def`](https://github.com/cue-lang/cue/commit/6318def84d9c84e2151e6c3bce50293944608bd3) - cue/load: minimal module fetching implementation by [@rogpeppe](https://github.com/rogpeppe) in [`cb9d6ed`](https://github.com/cue-lang/cue/commit/cb9d6edf56ffe54d3d882eb32c3cd1d740fd3543) - bump golang.org/x and go-internal deps by [@mvdan](https://github.com/mvdan) in [`3f51337`](https://github.com/cue-lang/cue/commit/3f5133771e3fa114fa952fd4524ed0befc5bb69b) - internal/ci: bump GoReleaser to v1.16.2 ahead of v0.5.0 release by [@myitcv](https://github.com/myitcv) in [`5ec06d9`](https://github.com/cue-lang/cue/commit/5ec06d97bee84f434f7bc96c5426337a396c6c70) - internal/ci: rename core -> repo by [@myitcv](https://github.com/myitcv) in [`6d6ffb4`](https://github.com/cue-lang/cue/commit/6d6ffb48601483695470f36879eeb4032ceb973e) - start using Go 1.20, drop Go 1.18 by [@mvdan](https://github.com/mvdan) in [`d1a6da8`](https://github.com/cue-lang/cue/commit/d1a6da8a68bc5045ab7943526495894f7b48cbfa) - internal/ci: switch to actions/setup-go@v4 by [@mvdan](https://github.com/mvdan) in [`d9c354b`](https://github.com/cue-lang/cue/commit/d9c354b5d4876e47cead9fa1a0948d189c6064f1) - internal/ci: always force push to trybot repo by [@myitcv](https://github.com/myitcv) in [`ed2a9c7`](https://github.com/cue-lang/cue/commit/ed2a9c724fde351580f3ff839a9e7df72abbbb71) - cue/load: avoid using ioutil.ReadDir to list directories by [@mvdan](https://github.com/mvdan) in [`d077202`](https://github.com/cue-lang/cue/commit/d07720266afe96dd0d37aa7698f24d7fb43d3926) - pkg/tool: small fixes to CUE docs by [@mvdan](https://github.com/mvdan) in [`3d08fb2`](https://github.com/cue-lang/cue/commit/3d08fb21240ae0ee61a54595db25a3162e7c4409) - internal/ci: use unity and cuelang.org config from core by [@myitcv](https://github.com/myitcv) in [`4cbb563`](https://github.com/cue-lang/cue/commit/4cbb5632880f05a49cd9140c4eb82e6930a71aec) - internal/ci: DRY up core based on new base defaults by [@myitcv](https://github.com/myitcv) in [`1195b3d`](https://github.com/cue-lang/cue/commit/1195b3d82b64fb5dd7b564f4e2cf333e32a31c47) - internal/ci: establish better defaults in base by [@myitcv](https://github.com/myitcv) in [`af02a2c`](https://github.com/cue-lang/cue/commit/af02a2c461b89b5e179759a213e98e1a49d4787e) - internal/ci: move away from using defs in github by [@myitcv](https://github.com/myitcv) in [`7a7ca81`](https://github.com/cue-lang/cue/commit/7a7ca81d7d53d79cd30ae4963b981a383d1e5969) - internal/ci: move away from using definitions in base by [@myitcv](https://github.com/myitcv) in [`d7a1740`](https://github.com/cue-lang/cue/commit/d7a1740685c7b81940260fdd085e39e52c7d6280) - internal/ci: use core directly instead of \_base alias by [@myitcv](https://github.com/myitcv) in [`f446b87`](https://github.com/cue-lang/cue/commit/f446b8773365e61aece3f8227617672fd0373c44) - internal/ci: move away from using defs as params in base by [@myitcv](https://github.com/myitcv) in [`305dc1d`](https://github.com/cue-lang/cue/commit/305dc1d4cc594b076a747b46753685342beec91e) - internal/ci: collapse gerrithub package into base by [@myitcv](https://github.com/myitcv) in [`9729270`](https://github.com/cue-lang/cue/commit/9729270e2c606563104342cfde3dc732fd010d03) - internal/ci: tweak gerrithub package "params" ahead of move to base by [@myitcv](https://github.com/myitcv) in [`1980621`](https://github.com/cue-lang/cue/commit/1980621b497b1a772273a47191ef1630bf04f6ba) - internal/ci: split base into separate files by [@myitcv](https://github.com/myitcv) in [`3a52c19`](https://github.com/cue-lang/cue/commit/3a52c194868fef00dcf00bf1ceb01a232ab294ba) - internal/ci: rename base parameter field name by [@myitcv](https://github.com/myitcv) in [`cdd5730`](https://github.com/cue-lang/cue/commit/cdd573066a9ea37a5951ceefeb759729af0d9f6e) - internal/ci: move pushTipToTryBot workflow to gerrithub package by [@myitcv](https://github.com/myitcv) in [`0290e04`](https://github.com/cue-lang/cue/commit/0290e04b36a94c3cf4df84e010240b22dbde8f20) - internal/ci: rename gerrithub #dispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`0cfd8c5`](https://github.com/cue-lang/cue/commit/0cfd8c50e728d587a9f6aaf63f0035feb1f8e418) - internal/ci: remove hard-codings in gerrithub package by [@myitcv](https://github.com/myitcv) in [`f5277b9`](https://github.com/cue-lang/cue/commit/f5277b924d3658135f37d211024b8bcac6767330) - internal/ci: move configuration from workflows.cue to core by [@myitcv](https://github.com/myitcv) in [`1bb7e10`](https://github.com/cue-lang/cue/commit/1bb7e10f4c2d07b5bf18d630c252d45f210e7df4) - internal/ci: remove workflow files pre generate by [@myitcv](https://github.com/myitcv) in [`b418955`](https://github.com/cue-lang/cue/commit/b4189550d9578ed76da679abd5f832aca64080f0) - Revert "internal/ci: move pushTipToTryBot workflow to gerrithub package" by [@myitcv](https://github.com/myitcv) in [`87db1a5`](https://github.com/cue-lang/cue/commit/87db1a559d80daf683b5f7196f7878ea0d881744) - Revert "internal/ci: rename base parameter field name" by [@myitcv](https://github.com/myitcv) in [`2461c51`](https://github.com/cue-lang/cue/commit/2461c5114848e172a6d59ead3ebd4cac7af1a88a) - Revert "internal/ci: move configuration from workflows.cue to core" by [@myitcv](https://github.com/myitcv) in [`26ff449`](https://github.com/cue-lang/cue/commit/26ff4493db4e2c66b263184de65f47cb357a9b43) - Revert "internal/ci: rename gerrithub #dispatchWorkflow" by [@myitcv](https://github.com/myitcv) in [`38156f2`](https://github.com/cue-lang/cue/commit/38156f213cb3fea9ca3aa5e4e32456fefce76308) - Revert "internal/ci: remove workflow files pre generate" by [@myitcv](https://github.com/myitcv) in [`0d89b9b`](https://github.com/cue-lang/cue/commit/0d89b9b0fae6c14a29964fd48d5f7c3b15b502e2) - Revert "internal/ci: split base into separate files" by [@myitcv](https://github.com/myitcv) in [`ee7509f`](https://github.com/cue-lang/cue/commit/ee7509f0637651888274f6b71c7da25880a5fd2e) - internal/ci: split base into separate files by [@myitcv](https://github.com/myitcv) in [`d638a35`](https://github.com/cue-lang/cue/commit/d638a3508bf2321e78b07f6239bd218488d2bd28) - internal/ci: remove workflow files pre generate by [@myitcv](https://github.com/myitcv) in [`f723eb7`](https://github.com/cue-lang/cue/commit/f723eb7b81cddb31551cf734d42c6bfb32301bd5) - internal/ci: rename gerrithub #dispatchWorkflow by [@myitcv](https://github.com/myitcv) in [`d276f58`](https://github.com/cue-lang/cue/commit/d276f58e68f4315ad08585a244a93f3b9e0bd0a6) - internal/ci: move configuration from workflows.cue to core by [@myitcv](https://github.com/myitcv) in [`5a0922e`](https://github.com/cue-lang/cue/commit/5a0922ea0a9b00eda05d3696b4aac936c8f45449) - internal/ci: rename base parameter field name by [@myitcv](https://github.com/myitcv) in [`584f3f0`](https://github.com/cue-lang/cue/commit/584f3f07fcaa02d038195999fad0f3097a84a919) - internal/ci: move pushTipToTryBot workflow to gerrithub package by [@myitcv](https://github.com/myitcv) in [`e440409`](https://github.com/cue-lang/cue/commit/e44040932eb10e9d530a625ceb0fb4e068802d9b) - internal/ci: hoist dispatch keys to base by [@myitcv](https://github.com/myitcv) in [`e3ed297`](https://github.com/cue-lang/cue/commit/e3ed29782876648870dd6049776472606093aff9) - internal/ci: move workflows.cue defs to better places by [@myitcv](https://github.com/myitcv) in [`0250807`](https://github.com/cue-lang/cue/commit/02508075358db42172a55c2a0ab6031136d04185) - internal/ci: hoist cache steps to base package by [@myitcv](https://github.com/myitcv) in [`019f6dd`](https://github.com/cue-lang/cue/commit/019f6dd019d38624126913ba31f1c6872cb3fd77) - internal/ci: improve base package docs by [@myitcv](https://github.com/myitcv) in [`57066d4`](https://github.com/cue-lang/cue/commit/57066d4aa0ac81e89700abd3f5ec83c6e0de4939) - internal/ci: make our checkout step configurable by [@myitcv](https://github.com/myitcv) in [`ee093e2`](https://github.com/cue-lang/cue/commit/ee093e2ff70fa867273116747da189d02324a9b9) - internal/ci: specify githubRepositoryPath directly by [@myitcv](https://github.com/myitcv) in [`9c075ca`](https://github.com/cue-lang/cue/commit/9c075cab8595cfe2c2febcd8b3ddcc68c36b7399) - internal/ci: move core.\_#URLPath to base by [@myitcv](https://github.com/myitcv) in [`dd965ad`](https://github.com/cue-lang/cue/commit/dd965ad80e0f507e1c6dca3bb7acd355df4509a2) - internal/ci: move core.#codeReview to base by [@myitcv](https://github.com/myitcv) in [`8b14836`](https://github.com/cue-lang/cue/commit/8b1483607d002a3833bdd961b4371d4bc35be189) - internal/ci: move core package away from definitions by [@myitcv](https://github.com/myitcv) in [`5475370`](https://github.com/cue-lang/cue/commit/547537013305d90b3271c8da19dbfdfa1b1fec44) - internal/ci: improve core package docs by [@myitcv](https://github.com/myitcv) in [`e1a8bee`](https://github.com/cue-lang/cue/commit/e1a8bee0643fc0e2f0c766b4b32bda69f926008b) - internal/ci: refactor the way we declare workflows by [@myitcv](https://github.com/myitcv) in [`09b06ff`](https://github.com/cue-lang/cue/commit/09b06ff8e33ef1f08bd323587248f52a2a42479d) - internal/core/adt: hoist value validation by [@mpvl](https://github.com/mpvl) in [`eea60b9`](https://github.com/cue-lang/cue/commit/eea60b9cd229e1b364166a2d179f0d6e3b043a14) - internal/core/adt: hoist comprehension code by [@mpvl](https://github.com/mpvl) in [`47f0025`](https://github.com/cue-lang/cue/commit/47f0025465ae39917315481e1e29675cd817460c) - internal/core/adt: reorganize nodeContext fields by [@mpvl](https://github.com/mpvl) in [`f807ee8`](https://github.com/cue-lang/cue/commit/f807ee8fafc070b2fa1ec8623cd4eb26a72616cc) - internal/core/adt: unexport more methods by [@mpvl](https://github.com/mpvl) in [`ce65141`](https://github.com/cue-lang/cue/commit/ce65141fd4b18ca00aa6cb2a60952a26fd2cc690) - internal/core/adt: unexport VertexStatus by [@mpvl](https://github.com/mpvl) in [`185eed7`](https://github.com/cue-lang/cue/commit/185eed7706c111cef93657eeaf5244f1476a7a5f) - internal/core/adt: remove state arg from Err, SetValue, and UpdateValue by [@mpvl](https://github.com/mpvl) in [`97904e3`](https://github.com/cue-lang/cue/commit/97904e3f68e7d6a13b28c7ca28da6d38937c4971) - internal/core/adt: unexport Unify by [@mpvl](https://github.com/mpvl) in [`7851142`](https://github.com/cue-lang/cue/commit/785114246b26e673a375c40094ea5d01932978bd) - internal/core/adt: clone arcMap by [@mpvl](https://github.com/mpvl) in [`dbf7bb8`](https://github.com/cue-lang/cue/commit/dbf7bb8a6f124f3e55e2390a76011336161f7f68) - internal/ci: remove the cachePost steps by [@myitcv](https://github.com/myitcv) in [`6843415`](https://github.com/cue-lang/cue/commit/68434159334bf0be33f1910c943bb537a1499b5f) - internal/ci: bump default of cue version to v0.5.0-beta.5 by [@myitcv](https://github.com/myitcv) in [`3121a27`](https://github.com/cue-lang/cue/commit/3121a278e5536110e2e0cd16dcbb17706738b1ed) - internal/ci: update base early git checks from alpha.cuelang.org by [@myitcv](https://github.com/myitcv) in [`4509e7f`](https://github.com/cue-lang/cue/commit/4509e7f9ca7d12be4f66ae8669e86dd2c49eec17) - internal/core/adt: allow required dynamic fields by [@mpvl](https://github.com/mpvl) in [`c3138e3`](https://github.com/cue-lang/cue/commit/c3138e362ec88061b8a83368ccc66511581a7263) - internal/ci: skip test cache on protected branches by [@myitcv](https://github.com/myitcv) in [`21f494d`](https://github.com/cue-lang/cue/commit/21f494db70180cb062558eb05f499b763add74ad) - internal/core/adt: implement required fields. by [@mpvl](https://github.com/mpvl) in [`0b681f5`](https://github.com/cue-lang/cue/commit/0b681f5d193a55893fdec8386f4a72a6effcebb1) - cue/ast: prepare for required fields by [@mpvl](https://github.com/mpvl) in [`1da0fd9`](https://github.com/cue-lang/cue/commit/1da0fd912d1af8ced98df15279e7a6d225ccae78) - internal/core/adt: merge OptionalField and Field types by [@mpvl](https://github.com/mpvl) in [`1822d52`](https://github.com/cue-lang/cue/commit/1822d5247c0b9ba677e53054f46fd5475e4038a6) - internal/ci: bump pinned version of Go for releases by [@mvdan](https://github.com/mvdan) in [`e5cd9ac`](https://github.com/cue-lang/cue/commit/e5cd9ac6c2f9729cab3847ec879317a386bcbf2a) - internal/ci: use a group of cue commands for go:generate by [@mvdan](https://github.com/mvdan) in [`d16b575`](https://github.com/cue-lang/cue/commit/d16b5758c12d752c439a78f51baabace69268af7) - cmd/cue: remove fallback version code for Go 1.17 by [@mvdan](https://github.com/mvdan) in [`e806bba`](https://github.com/cue-lang/cue/commit/e806bba7f48a8290307b9a2f1ea9a1566d0b0432) - internal/ci: rerun trybot workflows post eviction by [@myitcv](https://github.com/myitcv) in [`a632d16`](https://github.com/cue-lang/cue/commit/a632d16ec443659bec96e6a0f0409a510867dd49) - internal/ci: tidy up use of curl for GitHub API calls by [@myitcv](https://github.com/myitcv) in [`f4d0802`](https://github.com/cue-lang/cue/commit/f4d0802da1fdec3b7b228c71e0c60baf903a87f8) - internal/ci: do not evict caches on push to ci/test by [@myitcv](https://github.com/myitcv) in [`254f0f1`](https://github.com/cue-lang/cue/commit/254f0f1f33a7cbbd2d07f7f850bef02bf03751cb) - internal/ci: evict workflow caches on a daily basis by [@myitcv](https://github.com/myitcv) in [`ee81e77`](https://github.com/cue-lang/cue/commit/ee81e77aa558d8f9219bd620eadbc3ecbb261310) - internal/ci: bump to use ubuntu-22.04 as our linux machine by [@myitcv](https://github.com/myitcv) in [`4686700`](https://github.com/cue-lang/cue/commit/4686700dc71484162ce563fa0f443b43117b2484) - internal/ci: use actions/cache/restore for non-protected branch by [@myitcv](https://github.com/myitcv) in [`38ee1c2`](https://github.com/cue-lang/cue/commit/38ee1c2d69354408527e76a41aa303bbbb198549) - cue/load: don't read parent directories in tests by [@mvdan](https://github.com/mvdan) in [`9e014c3`](https://github.com/cue-lang/cue/commit/9e014c3916e5ba4e040a1fcac0c86de9c6cea0ea) - internal/ci: reset git directory timestamps faster by [@mvdan](https://github.com/mvdan) in [`c7fd893`](https://github.com/cue-lang/cue/commit/c7fd893a1eb45533f35e6c4cbbd339af5d658e63) - internal/ci: fix up modified times for all directories by [@mvdan](https://github.com/mvdan) in [`e31b8f7`](https://github.com/cue-lang/cue/commit/e31b8f753d467ab21d6d8a5caa6e5227db30242b) - internal/ci: run long tests on linux when testing CLs by [@mvdan](https://github.com/mvdan) in [`daa4022`](https://github.com/cue-lang/cue/commit/daa4022e260892e93de540b88bfa05480850edfd) - cmd/cue: remove `go install` long tests by [@mvdan](https://github.com/mvdan) in [`fa1f369`](https://github.com/cue-lang/cue/commit/fa1f369cd616d9da12f110ee08f986b36e104730) - internal/ci: restore git modified times after cloning by [@mvdan](https://github.com/mvdan) in [`829bd64`](https://github.com/cue-lang/cue/commit/829bd64d64c0004f96ddbb8d63cf24f4cd75bbce) - doc/tutorial/kubernetes: fix build breakage by [@mpvl](https://github.com/mpvl) in [`b05585b`](https://github.com/cue-lang/cue/commit/b05585b1668c2df7c947c53a24a489ac4b3a3f8b) - internal/core/adt: use ? in debug output by [@mpvl](https://github.com/mpvl) in [`5fe040a`](https://github.com/cue-lang/cue/commit/5fe040ad0c460367d8bf27fe5a8606821e3a8a46) - internal/core/adt: optional field rewrite by [@mpvl](https://github.com/mpvl) in [`19bfdb9`](https://github.com/cue-lang/cue/commit/19bfdb9fa5df54033bbfbf042bd433517758c5c7) - internal/ci/gerrithub: update comment to be clearer by [@mvdan](https://github.com/mvdan) in [`4fed730`](https://github.com/cue-lang/cue/commit/4fed730f4d2fcaa2d2873a36fc58e7a2795545dc) - internal/core/adt: finalize earlier for arcs by [@mpvl](https://github.com/mpvl) in [`c80a690`](https://github.com/cue-lang/cue/commit/c80a69088def981d2816176958912fbf4826a849) - internal/core/adt: pass member type to insertField by [@mpvl](https://github.com/mpvl) in [`27b096c`](https://github.com/cue-lang/cue/commit/27b096cc9213cc4d4e7b122bcd3620ebe0def467) - internal/core/adt: remove duplicate statement by [@mpvl](https://github.com/mpvl) in [`383ff3e`](https://github.com/cue-lang/cue/commit/383ff3e29246ccc6167a03280e88c4357c680f88) - internal/core/adt: export arcType and friends by [@mpvl](https://github.com/mpvl) in [`4f32fb4`](https://github.com/cue-lang/cue/commit/4f32fb452eef26254bb3a7c4c8a7b494d42a6216) - internal/core/adt: revert fix for 2209 by [@mpvl](https://github.com/mpvl) in [`c8e580e`](https://github.com/cue-lang/cue/commit/c8e580e91c01a4242e81f84116a36b8f7ec42001) - cue/ast, cue/parser: parse function types by [@4ad](https://github.com/4ad) in [`8f0fe77`](https://github.com/cue-lang/cue/commit/8f0fe77dddf4941d12930bb63581a9ce0c176c34) - cmd/cue: add CUE_DEBUG_PARSER_TRACE environment variable by [@4ad](https://github.com/4ad) in [`34a27bb`](https://github.com/cue-lang/cue/commit/34a27bb4835622233513517b8073d1f9eb74ac25) - internal/core/adt: fix possible infinte loop for API usage by [@mpvl](https://github.com/mpvl) in [`782cae0`](https://github.com/cue-lang/cue/commit/782cae0d69e07a62522a3fe5ac161c7fc49ced09) - internal/core/adt: fix regression in comparing to bottom by [@mpvl](https://github.com/mpvl) in [`9954cc2`](https://github.com/cue-lang/cue/commit/9954cc2108a4c3918fca995b6a3c9c64c15667ec) - internal/core/adt: remove unnecessary check by [@mpvl](https://github.com/mpvl) in [`1a0a81b`](https://github.com/cue-lang/cue/commit/1a0a81ba95bc02078db097e5c6f44dc4b08d0428) - internal/core/adt: detect closed lists as fatal errors by [@mpvl](https://github.com/mpvl) in [`06fbefe`](https://github.com/cue-lang/cue/commit/06fbefe5f6c864294e945b8f7190ab643852f4aa) - internal/core/adt: sharpen condition for scalar setting by [@mpvl](https://github.com/mpvl) in [`9b1f222`](https://github.com/cue-lang/cue/commit/9b1f2227cfe9d90dfa1f064e11e8bdcc772eb96e) - cmd/cue: respect --exclude for constants by [@rogpeppe](https://github.com/rogpeppe) in [`b44e16d`](https://github.com/cue-lang/cue/commit/b44e16d7ef2f37cb43be7b6552b6a4c52564550a) - cmd/cue: add test case for --exclude by [@rogpeppe](https://github.com/rogpeppe) in [`2fa4ee6`](https://github.com/cue-lang/cue/commit/2fa4ee6e56c671ba8669669aac602343d0dadfd6) - cue/context: support internal interpreters by [@mpvl](https://github.com/mpvl) in [`7617de2`](https://github.com/cue-lang/cue/commit/7617de2b03a76b3fb1e2d635443853993f6b80b5) - internal/cuetxtar: configurable load.Config by [@rogpeppe](https://github.com/rogpeppe) in [`7485f58`](https://github.com/cue-lang/cue/commit/7485f58caa1a30ee97daad23561b7ba9fa2c5c20) - cue/load/internal/...: copy pkgs from Go source by [@rogpeppe](https://github.com/rogpeppe) in [`5723470`](https://github.com/cue-lang/cue/commit/57234703b095a088af961e9aa1b3e9da8565df70) - cue/load: refactor loader by [@rogpeppe](https://github.com/rogpeppe) in [`c28d75a`](https://github.com/cue-lang/cue/commit/c28d75aac789735144d231b694afda4bc8507de0) - cue/load: move code before refactoring by [@rogpeppe](https://github.com/rogpeppe) in [`87b91c9`](https://github.com/cue-lang/cue/commit/87b91c95c7e6b665beedeb9f08987f432a6a5195) - internal/ci: use simpler "go get" to pull a version through the proxy by [@mvdan](https://github.com/mvdan) in [`eff0108`](https://github.com/cue-lang/cue/commit/eff01087f42d12b501fe4341228db5d413afae59) - cue/stats: use int64 for stats counters by [@mvdan](https://github.com/mvdan) in [`7073554`](https://github.com/cue-lang/cue/commit/7073554f7d59d0af8217b8cb71a2c7c1f68b6982) - cmd/cue: remove use of stderr directive by [@mpvl](https://github.com/mpvl) in [`7d89acd`](https://github.com/cue-lang/cue/commit/7d89acd5c44bca0c756f76089436ee9913818b03) - doc/ref/spec.md: add required fields by [@mpvl](https://github.com/mpvl) in [`9a7c8fb`](https://github.com/cue-lang/cue/commit/9a7c8fb04e74bc29a6b93507bbfd56be682431d7) - pkg/list: simply template for Ascending by [@mpvl](https://github.com/mpvl) in [`9dbb373`](https://github.com/cue-lang/cue/commit/9dbb373d9cb6aeddcd73981d0f79b637067ca517) - cue/testdata/benchmarks: add benchmark for sort by [@mpvl](https://github.com/mpvl) in [`9f538a6`](https://github.com/cue-lang/cue/commit/9f538a6cae5ed9d41b0d9e472a0a9112cdd316d0) - cue/load: add initial module.cue schema by [@rogpeppe](https://github.com/rogpeppe) in [`b2087b9`](https://github.com/cue-lang/cue/commit/b2087b94cf408e69c969380042ad099ee8e7cb81) - internal/ci: only run release workflow on main repo by [@myitcv](https://github.com/myitcv) in [`ce37b63`](https://github.com/cue-lang/cue/commit/ce37b63f1eae7cb41a00240c02602b564ac7902b) - cue/load: use cue package to interpret module.cue file by [@rogpeppe](https://github.com/rogpeppe) in [`1b6fb4e`](https://github.com/cue-lang/cue/commit/1b6fb4e7e45ea4387e6f029a7f2b93e1bb399485) - cue/load: minor tweaks by [@rogpeppe](https://github.com/rogpeppe) in [`d78f1a2`](https://github.com/cue-lang/cue/commit/d78f1a234a3ff851322f9d64389b6355d02ea7be) - .github: clarify what we mean by "latest release" by [@mvdan](https://github.com/mvdan) in [`03e8f29`](https://github.com/cue-lang/cue/commit/03e8f294fcbeb11e8c4e04f05a6d391535565354) - internal/ci: do not release "zero" releases in release workflow by [@myitcv](https://github.com/myitcv) in [`02e19c8`](https://github.com/cue-lang/cue/commit/02e19c85e4d9244bdf721584d626c8ebff287456) - internal/ci: fix goreleaser in non-snapshot mode again by [@mvdan](https://github.com/mvdan) in [`ae0d7ca`](https://github.com/cue-lang/cue/commit/ae0d7ca4c00144933f9c8c166de5948615a0d73d) - cmd/cue: include Go in the version command by [@mvdan](https://github.com/mvdan) in [`879f902`](https://github.com/cue-lang/cue/commit/879f902a707cae00955bafbdbdd41c0cec745d89) - internal/ci: fix and test the release workflow on branches by [@mvdan](https://github.com/mvdan) in [`266bb32`](https://github.com/cue-lang/cue/commit/266bb320962361daebc7792ea1363489f053b5bf) - cmd/cue: mention doc location for -l flag by [@rogpeppe](https://github.com/rogpeppe) in [`56caeaf`](https://github.com/cue-lang/cue/commit/56caeaf8c7a8be0c2935131844d101e75a189e70) - internal/core/adt: fix 2235 by [@mpvl](https://github.com/mpvl) in [`3c8f0ad`](https://github.com/cue-lang/cue/commit/3c8f0adf5ee863a6a2d562147df11a936c6531c8) - pkg/list: reimplement sort by [@mpvl](https://github.com/mpvl) in [`2e70ac7`](https://github.com/cue-lang/cue/commit/2e70ac781e3ea46158ce2dfb0a745e2cc80ab5b1) - cue/scanner: remove block comment scanning by [@mpvl](https://github.com/mpvl) in [`5d0a6f2`](https://github.com/cue-lang/cue/commit/5d0a6f2719550c727a2083e3485b3f998fdd5a1f) - internal/core/adt: add tests for 2235 by [@mpvl](https://github.com/mpvl) in [`125e40b`](https://github.com/cue-lang/cue/commit/125e40bed047f8d256a827e54f16b7a7a9613597) - cue/parser: remove last vestiges of <foo>: T by [@mpvl](https://github.com/mpvl) in [`fd170da`](https://github.com/cue-lang/cue/commit/fd170da2b3f1e2b928e79281fbf33228b6484c2a) - all: remove support for :: by [@mpvl](https://github.com/mpvl) in [`a6055ea`](https://github.com/cue-lang/cue/commit/a6055ea788f75987f9b1b2dc0c4235fd1acf9de1) - internal/encoding/{json|yaml}: disallow non-regular fields by [@mpvl](https://github.com/mpvl) in [`76e0be4`](https://github.com/cue-lang/cue/commit/76e0be4fb6f65aa64be14829f5aacf642984998d) - cmd/cue: add tests for issue 1926 by [@mpvl](https://github.com/mpvl) in [`9b573be`](https://github.com/cue-lang/cue/commit/9b573be1e697ed330c581d3f3a654b33ba8e1080) </details> ### [`v0.5.0`](https://github.com/cue-lang/cue/releases/tag/v0.5.0) [Compare Source](https://github.com/cue-lang/cue/compare/v0.4.3...v0.5.0) This release focuses on changes to the implementation of comprehensions, the algorithm for detecting cycles in CUE, and the reimplementation of `let` comprehensions as fields. Also included are a number of bug fixes and changes to help the [KubeVela project](https://kubevela.io/) upgrade off CUE v0.2.2 to the latest release. v0.5.0 is the first release since v0.4.3 back in April 2022. It has been a long time in the making, and is comprised of 277 commits. It is worth noting that we do not plan nor wish for such long gaps between releases. For more details on upcoming releases and steps we are taking to increase release cadence as well as our confidence in each release, please see [this discussion](https://cuelang.org/issue/2335). As a reminder: users can register their projects with `unity`, our regression and performance testing setup. `unity` is used to ensure that a project's CUE evaluations do not unexpectedly stop working, or regress in terms of performance. `unity` continues to catch multiple issues with each release. Adding your project to `unity` not only guarantees that we will not break your tests (if we do, we will work with you to fix your CUE code), but it also helps to improve the quality of each CUE release. We are currently in the process of releasing Unity as a GitHub App on the public Marketplace. [Sign up](https://forms.gle/cqsdoNZQnQ1efGJy5) to receive updates; we will be in touch as soon as the GitHub App is ready. Thank you to [@djosephsen](https://github.com/djosephsen), [@joaopapereira](https://github.com/joaopapereira), [@mpvl](https://github.com/mpvl), [@mvdan](https://github.com/mvdan), [@myitcv](https://github.com/myitcv), [@qequ](https://github.com/qequ), [@rogpeppe](https://github.com/rogpeppe), [@rytswd](https://github.com/rytswd), [@satotake](https://github.com/satotake), [@spachava753](https://github.com/spachava753), and [@tmm1](https://github.com/tmm1) for contributing to this release! #### Project-level changes Various CI-related changes have been made to simplify and streamline the GerritHub-based CI setup across the various CUE repositories. A common `base` package is vendored into each repository and used as a template for GitHub workflows and other configuration. For those interested in studying the setup, please see the files beneath [`internal/ci`](https://github.com/cue-lang/cue/tree/a1d9054ffa5b292763538a3fa6cf057a062a145d/internal/ci). This release drops support for `go1.16.x` , `go1.17.x` and `go1.18.x`, is tested against `go1.19.x` and `go1.20.x`, and is built using `go1.20.2`. Our dependency on `github.com/rogpeppe/go-internal` is upgraded to `v1.9.0` and various `testscript`-related improvements have been made to CUE's tests. [GoReleaser](https://goreleaser.com/) has been upgrade to v1.16.2 as part of the release workflow. In a related change, [CL 546920](https://cuelang.org/cl/546920) moves us to a CUE-based source configuration for GoReleaser. This allows us to define the concept of 'latest', state which indicates whether we should perform the homebrew release and the Docker manifest latest steps. This fixes a long-standing bug whereby homebrew taps and Docker images were created for the latest release, regardless of whether that was a pre-release, or indeed a patch version of a non-current minor version. As of [CL 547507](https://cuelang.org/cl/547507), CUE build artefacts published on GitHub are entirely reproducible, thanks to Go's [support for reproducible, verifiable and verified builds](https://research.swtch.com/vgo-repro). #### Encoders When `cue import`-ing YAML, the `-R` recursive flag now only recursively interprets text as YAML if it contains a newline [CL 536902](https://cuelang.org/cl/536902). #### API Various APIs have been transitioned to drop use of the deprecated `cue.Runtime` type, as well as migrating away from `cue.Instance` via `cue.InstanceOrValue`. Some use of these deprecated types remains: [#1035](https://cuelang.org/issue/1035), [#1735](https://cuelang.org/issue/1735), [#1806](https://cuelang.org/issue/1806). These will be tidied up in later releases as the API surface matures towards v1.0.0. The `cue` package now supports `InlineImports` for `Value.Syntax` [CL 541561](https://cuelang.org/cl/541561). This leverages new support within the internal exporter to creating self-contained CUE. This change also deprecates `Value.ResolveReferences()`. Package `cue` adds `Selector.Type` to make it easier to pull out selector-specific information from a selector (for example, it makes it possible and cheap to retrieve the unquoted string label from a regular field selector) [CL 542738](https://cuelang.org/cl/542738). Package `cue` adds `Value.BuildInstance()`. If a `cue.Value` exactly represents a package, `BuildInstance()` returns the build instance corresponding to the value [CL 542769](https://cuelang.org/cl/542769). `cue/stats` is introduced as a new package for getting CUE operation statistics. The functionality is hoisted from `internal/core/adt`, but the package should for all practical purposes be seen as a new implementation. The stats have been aggregated as experimental functionality to the `tools/flow` package. [CL 546763](https://cuelang.org/cl/546763) disallowed deprecated language features in the Go API. These features had long been deprecated in `cmd/cue`. This means that API operations will now fail on deprecated features whereas before they were handled in compatibility mode. The `parser.FromVersion` feature can be used to reenable these deprecated features. #### Language This release does not introduce any language changes. [CL 537264](https://cuelang.org/cl/537264) made some minor adjustments to the language specification to improve readability. [CL 541457](https://cuelang.org/cl/541457) removes support for re-writing of old-style `let` declarations. This had already been deprecated for a long time and this change was made to enable support for aliases of embeddings. #### Core evaluator ##### Per-field comprehensions One of the major changes introduced in this release is how comprehensions are handled. [CL 529524](https://cuelang.org/cl/529524) move the evaluator to a model of per-field comprehensions. Comprehensions are expanded `for`, `if`, and `let` clauses that yield zero or more structs to be embedded in the enclosing list or struct. CUE does not allow cyclic dependencies between comprehensions if they result in an ambiguous set of fields. It does allow cascading insertions as in: a?: int b?: int if a != _|_ { b: 2 } if b != _|_ { c: 3 d: 4 } The way this works is that for fields with a fixed prefix path in a comprehension value, the comprehension is assigned to these respective fields. More concretely, the above example is rewritten to: a?: int b: if a != _|_ { 2 } c: if b != _|_ { 3 } d: if b != _|_ { 4 } where the fields with if clause are only inserted if their condition resolves to true. Note that this is not valid CUE; it may be in the future. With this rewrite, dependencies in comprehension expressions are handled analogously to other expressions. Note that a single comprehension may be distributed across multiple fields. The evaluator will ensure, however, that a comprehension is only evaluated once. Analogous to reference cycles, as of [CL 544129](https://cuelang.org/cl/544129) we allow comprehensions to use the struct in which they are defined as source, as long as they do not introduce new fields, which would alter the source on which they iterate. ##### Reimplementation of cycle detection The new algorithm is inspired by the cycle detection used by Tomabechi's [^Tomabechi] and Van Lohuizen's [^VanLohuizen] graph unification algorithms. Unlike with traditional graph unification, however, CUE uses references, which, unlike node equivalence, are unidirectional. This means that the technique to track equivalence through dereference, as common in graph unification algorithms like Tomabechi's, does not work unaltered. The unidirectional nature of references imply that each reference equates an exact copy of the value it points to. This renders the original approach of node-pointer equivalence useless. The new algorithm, a variant of Tomabechi's and Van Lohuizen's algorithm, looks at references equality on conjuncts, instead of node equality. This simplifies the accounting and allows for far simpler and precise accounting when using references instead of the traditional node equivalence. ##### More background info on cycles We have to define when a cycle is detected. CUE implementations MUST report an error upon a structural cycle, and SHOULD report cycles at the shortest possible paths at which they occur, but MAY report these at deeper paths. For instance, the following CUE has a structural cycle: f: g: f The shortest path at which the cycle can be reported is `f.g`, but as all failed configurations are logically equal, it is fine for implementations to report them at `f.g.g`, for instance. It is not, however, correct to assume that a reference to a parent is always a cycle. Consider this case: a: [string]: b: a Even though reference `a` refers to a parent node, the cycle needs to be fed by a concrete field in struct `a` to persist, meaning it cannot result in a cycle as defined in the spec as it is defined here. Note however, that a specialization of this configuration *can* result in a cycle. Consider a: [string]: b: a a: c: _ Here reference `a` is guaranteed to result in a structural cycle, as field `c` will match the pattern constraint unconditionally. In other words, it is not possible to exclude tracking references across pattern constraints from cycle checking. It is tempting to try to find a complete set of these edge cases with the aim to statically determine cases in which this occurs. But as Carpenter \[^Carpenter] demonstrates, it is possible for cycles to be created as a result of unifying two graphs that are themselves acyclic. The following example is a translation of Carpenters example to CUE: y: { f: h: g g: _ } x: { f: _ g: f } Even though the above contains no cycles, the result of `x & y` is cyclic: f: h: g g: f This means that, in practice, cycle detection has at least partially a dynamic component to it. The [language specification](https://cuelang.org/docs/references/spec/) contains a higher-level and more complete overview of structural cycles. [^Tomabechi]: https://aclanthology.org/C92-2068 Hideto Tomabechi. 1992. Quasi-Destructive Graph Unification with Structure-Sharing. In COLING 1992 Volume 2: The 14th International Conference on Computational Linguistics. [^VanLohuizen]: https://aclanthology.org/P00-1045/ Marcel P. van Lohuizen. 2000. "Memory-Efficient and Thread-Safe Quasi-Destructive Graph Unification". In Proceedings of the 38th Annual Meeting of the Association for Computational Linguistics, pages 352–359, Hong Kong. Association for Computational Linguistics. \[^Carpenter]: Bob Carpenter, "The logic of typed feature structures." Cambridge University Press, ISBN:0-521-41932-8 ##### Reimplementation of `let` comprehensions [CL 543362](https://cuelang.org/cl/543362) made a change to `internal/core` to reimplement `let` comprehensions as fields. This makes it easier to track context as `let` comprehensions then follow the same paradigm as fields. It also allows debug information to be shown as to where lets are added in the tree. This change was accompanied by number of others that refined the approach. ##### Self-contained export `internal/core/export` now implements an algorithm for generating self-contained CUE on export, an option that can further be refined by asking the exporter to inline imports. These internal changes manifest in changes to `cue def` and `cuelang.org/go/cue` that are described elsewhere. ##### Other changes [CL 545897](https://cuelang.org/cl/545897) started tracking stats within the core CUE tests. This book keeping helps to spot likely regressions in performance early by collocating the stats with the CUE that is being evaluated. #### Builtins In the `strconv` package, `strconv.FormatInt` and `strconv.FormatUint` now support arbitary-precision format; see [CL 538512](https://cuelang.org/cl/538512). [CL 545898](https://cuelang.org/cl/545898) improved the error messages for `pkg` builtins, by including the path in error in many cases, and passing a wrapped message for `encoding/yaml`. [CL 546237](https://cuelang.org/cl/546237) allows incomplete `list.MinItems` constraints. Before it either returned `false` or `true`, ignoring that making a configuration more specific might still satisfy `MinItems` later on. [CL 546238](https://cuelang.org/cl/546238) made a similar change for `struct.MinFields`. #### Tooling layer Standard input is now parsed correctly in `cue cmd`-declared command tasks; see [CL 541898](https://cuelang.org/cl/541898). #### `cmd/cue` Version control system (VCS) information is included in `cue version` as of [CL 540297](https://cuelang.org/cl/540297). The Go version used to build `cmd/cue` is included as of [CL 549302](https://cuelang.org/cl/549302). `cue def` now supports an `--inline-imports` flag which resolves imports to print a self-contained version of the command input. For example, given the `txtar` input: -- cue.mod/module.cue -- module: "example.com/a" -- in.cue -- package a import "example.com/a/pkg" import "list" v: pkg.v -- pkg/pkg.cue -- package pkg v: { x: 3, y: x } The running `cue def --inline-imports in.cue` will give: package a import "list" v: { x: 3 y: x } [CL 546243](https://cuelang.org/cl/546243) fixed a long-standing bug whereby the `--ignore` errors flag was not observed by `cue eval`. #### Changelog - \[release-branch.v0.5] internal/ci: use go1.19.8 for the release of v0.5.0 by [@myitcv](https://github.com/myitcv) in [`d780488`](https://github.com/cue-lang/cue/commit/d780488159bd082f9f9d027ab42dd4d9b5d95d5e) - internal/ci: fix cache eviction by [@myitcv](https://github.com/myitcv) in [`a1d9054`](https://github.com/cue-lang/cue/commit/a1d9054ffa5b292763538a3fa6cf057a062a145d) - internal/ci: address review feedback from CL 551352 by [@myitcv](https://github.com/myitcv) in [`af01db1`](https://github.com/cue-lang/cue/commit/af01db1892e650a55d62d7423fe96732d6fb911d) - internal/ci: allow trybot workflows to be workflow_dispatch-ed by [@myitcv](https://github.com/myitcv) in [`22156ef`](https://github.com/cue-lang/cue/commit/22156efdb892e80b7e92b4a2785ceb831470abc1) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`a4403eb`](https://github.com/cue-lang/cue/commit/a4403eb12b04c6cb9ca19ac03561199912fc66e5) - internal/ci: remove hard-codings in base package by [@myitcv](https://github.com/myitcv) in [`0eaee71`](https://github.com/cue-lang/cue/commit/0eaee7137e10cf1ca23ab263d872dcaf0fa97aeb) - internal/ci: move evict_caches to base by [@myitcv](https://github.com/myitcv) in [`584b21e`](https://github.com/cue-lang/cue/commit/584b21e968ba7941ff4a03d5784fd37dcd9cca06) - internal/ci: remove mention of matrix and runner from base by [@myitcv](https://github.com/myitcv) in [`7c07680`](https://github.com/cue-lang/cue/commit/7c07680633f8644441d9ae80f150ac5a471abd8a) - internal/ci: remove trybot from push branches by [@myitcv](https://github.com/myitcv) in [`9f3af8f`](https://github.com/cue-lang/cue/commit/9f3af8f084f97838999f6cd5bba545054fba85f1) - internal/ci: refactor base caching pattern by [@myitcv](https://github.com/myitcv) in [`390bca5`](https://github.com/cue-lang/cue/commit/390bca5ce528e3a6408171b79961508f00e56f12) - internal/ci: drop pullThroughProxy step by [@myitcv](https://github.com/myitcv) in [`a14fbf4`](https://github.com/cue-lang/cue/commit/a14fbf49856399c7a6737e1495f7d8dde994be88) - \[release-branch.v0.5] internal/ci: bring inline with [`be0601b`](https://github.com/cue-lang/cue/commit/be0601bf) by [@myitcv](https://github.com/myitcv) in [`f4d04a7`](https://github.com/cue-lang/cue/commit/f4d04a7e5dc569836900c77b6aa4c26f20fcc9d1) - internal/ci: bump pinned version of Go for releases by [@mvdan](https://github.com/mvdan) in [`374a2cc`](https://github.com/cue-lang/cue/commit/374a2cc382856da74e5634341e3fbb2fd9fa84d1) - internal/core/adt: revert fix for 2209 by [@mpvl](https://github.com/mpvl) in [`c0421b4`](https://github.com/cue-lang/cue/commit/c0421b44e58cedad9200162a6fb6fae065da2d2b) - internal/core/adt: fix possible infinte loop for API usage by [@mpvl](https://github.com/mpvl) in [`1ce9120`](https://github.com/cue-lang/cue/commit/1ce91202faf3d4de930e1c75c491c332c7b9d11a) - internal/core/adt: fix regression in comparing to bottom by [@mpvl](https://github.com/mpvl) in [`87c79ef`](https://github.com/cue-lang/cue/commit/87c79efa8f37e1441b8ea67cff0bf5027bf1daaf) - internal/core/adt: remove unnecessary check by [@mpvl](https://github.com/mpvl) in [`28321f6`](https://github.com/cue-lang/cue/commit/28321f6b49947b993823fb445835f560f0464b69) - internal/core/adt: detect closed lists as fatal errors by [@mpvl](https://github.com/mpvl) in [`5d42c6c`](https://github.com/cue-lang/cue/commit/5d42c6cee285c44bb4af1cda5b31227f65364c99) - internal/core/adt: sharpen condition for scalar setting by [@mpvl](https://github.com/mpvl) in [`3ba76ba`](https://github.com/cue-lang/cue/commit/3ba76baf9b432e15f110c49be701a5d0600c2412) - internal/ci: fix goreleaser in non-snapshot mode again by [@mvdan](https://github.com/mvdan) in [`576d0e4`](https://github.com/cue-lang/cue/commit/576d0e461a990ddcdab9da7a10375a1c6d87a865) - internal/core/adt: fix 2235 by [@mpvl](https://github.com/mpvl) in [`ca411de`](https://github.com/cue-lang/cue/commit/ca411dedecdf08f2d0b99931c61a6d37ea93c985) - internal/core/adt: add tests for 2235 by [@mpvl](https://github.com/mpvl) in [`89693e1`](https://github.com/cue-lang/cue/commit/89693e1ff31881d90500db4d34b05c7685575d76) - cmd/cue: include Go in the version command by [@mvdan](https://github.com/mvdan) in [`9b1f248`](https://github.com/cue-lang/cue/commit/9b1f248845fabfda2ed70cc3c1c823baef5da69f) - internal/ci: fix and test the release workflow on branches by [@mvdan](https://github.com/mvdan) in [`63749fe`](https://github.com/cue-lang/cue/commit/63749fe7d1fc40011564d54da9826050fd5a6239) - cmd/cue: add evaluator stats support by [@mpvl](https://github.com/mpvl) in [`d573e0c`](https://github.com/cue-lang/cue/commit/d573e0c2f0419f3a32e9d7bc1f3000cc365a240d) - cmd/cue: add tests for issue 345 by [@mpvl](https://github.com/mpvl) in [`352a736`](https://github.com/cue-lang/cue/commit/352a7363b1b22ed4490d328bbc9275bf4dd2b779) - internal/core/adt: filter more disjunctions by [@mpvl](https://github.com/mpvl) in [`5a6bd19`](https://github.com/cue-lang/cue/commit/5a6bd1910821112123897c2b553b848c15f6eae2) - internal/core/adt: add tests for 2209 by [@mpvl](https://github.com/mpvl) in [`6b45d7e`](https://github.com/cue-lang/cue/commit/6b45d7e520a8e1b0f9ba287967fdb8b059e49fdc) - internal/core/adt: improve mechanism for conjunct insertion by [@mpvl](https://github.com/mpvl) in [`887f564`](https://github.com/cue-lang/cue/commit/887f56497cbc2178e9cb1e9be78d8abae78ea0cd) - internal/core/adt: add tests for conjunct insertion by [@mpvl](https://github.com/mpvl) in [`81e4cba`](https://github.com/cue-lang/cue/commit/81e4cba186c65ada5018d71c80bf63ce00bf08e7) - internal/core/adt: only set scalar if not already defined by [@mpvl](https://github.com/mpvl) in [`f23e3d5`](https://github.com/cue-lang/cue/commit/f23e3d565c499c1a220b94edcbc18f83c1438836) - github: bring the bug report template up to date by [@mvdan](https://github.com/mvdan) in [`b75fdc8`](https://github.com/cue-lang/cue/commit/b75fdc8bf307185c20b9107082ce0d8c205c36f5) - internal/ci: make github CLI shell invocations safer by [@mvdan](https://github.com/mvdan) in [`94765d6`](https://github.com/cue-lang/cue/commit/94765d6a9756fc83be553779fef8e1faaba226b5) - internal/core: clone let upon use of for var references by [@mpvl](https://github.com/mpvl) in [`3a79e96`](https://github.com/cue-lang/cue/commit/3a79e96aa6bb406475e7d121d65caa87ae463ce4) - internal/core/debug: change notation for "multi" lets by [@mpvl](https://github.com/mpvl) in [`fd05908`](https://github.com/cue-lang/cue/commit/fd05908d444bd4132b2137cd3aa84918c4366227) - internal/core/adt: don't add errors to "void" arcs by [@mpvl](https://github.com/mpvl) in [`0b41dbb`](https://github.com/cue-lang/cue/commit/0b41dbb875537a04fce46a4a56f7b625fa2cc6f1) - cue/testdata/benchmarks: add benchmark for let key by [@mpvl](https://github.com/mpvl) in [`a8d7c59`](https://github.com/cue-lang/cue/commit/a8d7c59f176a28936cc6d8231050630ec5498f19) - internal/core/adt: evaluate expressions directly by [@mpvl](https://github.com/mpvl) in [`8fb13d4`](https://github.com/cue-lang/cue/commit/8fb13d4c31d145b54c203ebbd1a69e84db2db35a) - internal/core/eval: node should not finalize itself mid flight by [@mpvl](https://github.com/mpvl) in [`9d27e0d`](https://github.com/cue-lang/cue/commit/9d27e0d992ae50da72244c2210252cb4248a8048) - cmd/cue: don't panic in vet if a schema has incomplete errors by [@mvdan](https://github.com/mvdan) in [`f6841d1`](https://github.com/cue-lang/cue/commit/f6841d1f026cefd964c1f5b2e0e331ff8e8ce9db) - internal/ci: deploy [tip.cuelang.org](http://tip.cuelang.org/) via repository_dispatch by [@myitcv](https://github.com/myitcv) in [`632cc62`](https://github.com/cue-lang/cue/commit/632cc622744b2a17db22932c8c7319a3e6b5e4fb) - internal/ci: enable push_to_tip_trybot by [@myitcv](https://github.com/myitcv) in [`fe692c5`](https://github.com/cue-lang/cue/commit/fe692c55eccb1efcd6b5ea181430d38479c4f4e7) - internal/ci: apply various CI-related changes from [cuelang.org](http://cuelang.org/) repo by [@myitcv](https://github.com/myitcv) in [`4eaa946`](https://github.com/cue-lang/cue/commit/4eaa9465d0287a7cf9de0ca73189d6084449ba1e) - internal/ci/goreleaser: actually make builds reproducible by [@myitcv](https://github.com/myitcv) in [`45aa5c0`](https://github.com/cue-lang/cue/commit/45aa5c093e71660b341fa15a8a41d77eb64a0121) - internal/ci/goreleaser: make builds reproducible by [@myitcv](https://github.com/myitcv) in [`16edb00`](https://github.com/cue-lang/cue/commit/16edb00a2504c92b09e43721f96a166109b1c2a4) - cue/export/extract: fix comments with comprehensions by [@mpvl](https://github.com/mpvl) in [`959dc46`](https://github.com/cue-lang/cue/commit/959dc46d5ac976bd2fc9b6f4bf0cd596c00fd0c5) - internal/core/adt: don't evaluate inlined structs prematurely by [@mpvl](https://github.com/mpvl) in [`45ff282`](https://github.com/cue-lang/cue/commit/45ff2823f7d071b803a8b55d96ad4bcf7c1647ef) - internal/core/adt: add tests for issue [#2163](https://github.com/cue-lang/cue/issues/2163) by [@mpvl](https://github.com/mpvl) in [`a9f4fc3`](https://github.com/cue-lang/cue/commit/a9f4fc3ec3b9e7f0f91df16a86b2295a3a66e546) - internal/ci: review follow-up changes to goreleaser_tool.cue by [@mvdan](https://github.com/mvdan) in [`7ea44a3`](https://github.com/cue-lang/cue/commit/7ea44a3f045decf221f86fbd91c9abd566fa6680) - internal/ci: switch to CUE based definition for goreleaser by [@myitcv](https://github.com/myitcv) in [`79a476b`](https://github.com/cue-lang/cue/commit/79a476b8c16c8900ff84811de1f2c8e769e8ebab) - internal/ci: import for current goreleaser configuration by [@myitcv](https://github.com/myitcv) in [`e69c517`](https://github.com/cue-lang/cue/commit/e69c5174ae19e8842bc34af1553189dd7a48e4b2) - internal/ci: upgrade to later GitHub workflow schema by [@myitcv](https://github.com/myitcv) in [`f036b34`](https://github.com/cue-lang/cue/commit/f036b34ca756c2afd061ef9a1a763f670092b048) - internal/ci: upgrade to latest GoReleaser version by [@myitcv](https://github.com/myitcv) in [`248f2b3`](https://github.com/cue-lang/cue/commit/248f2b30c8702c9b5ed012e6ac0961c109d69cb3) - goreleaser: formatting changes in Yaml file by [@myitcv](https://github.com/myitcv) in [`e93b5ed`](https://github.com/cue-lang/cue/commit/e93b5ed61fc6998ad8b9b1bf5f50ab94b57e5e26) - internal/ci: use newer versions of the docker github actions by [@mvdan](https://github.com/mvdan) in [`f56600d`](https://github.com/cue-lang/cue/commit/f56600dcb932fb5bef421a43ac32c8cd260f4fc0) - internal/core/adt: base error mode on requested state by [@mpvl](https://github.com/mpvl) in [`214e112`](https://github.com/cue-lang/cue/commit/214e11278cbe09e8ae1cbeff83bb7e61cfe1894c) - internal/core/adt: only set validation result when safe by [@mpvl](https://github.com/mpvl) in [`88857e0`](https://github.com/cue-lang/cue/commit/88857e0058cf744dcf0506da39d75eb946af1976) - internal/core/adt: pass desired state to more functions by [@mpvl](https://github.com/mpvl) in [`55cdb74`](https://github.com/cue-lang/cue/commit/55cdb7420b791aeb2b63413aeabe1bcd3dae57ba) - internal/core/adt: pass more state around by [@mpvl](https://github.com/mpvl) in [`3dfeb41`](https://github.com/cue-lang/cue/commit/3dfeb4112ffcd9d3267c2dc8e0950e3f095bb210) - internal/core/adt: pass state to validation by [@mpvl](https://github.com/mpvl) in [`0954c6f`](https://github.com/cue-lang/cue/commit/0954c6f8888daf741e7d40860db2f165af05b6d4) - internal/core/adt: pass state to evaluate by [@mpvl](https://github.com/mpvl) in [`7d50228`](https://github.com/cue-lang/cue/commit/7d5022852075821ea04d21854b372ee3bb73a42b) - internal/core/adt: avoid duplicate insertion of conjuncts by [@mpvl](https://github.com/mpvl) in [`d341814`](https://github.com/cue-lang/cue/commit/d341814a6e0fe9eef963c26956527c0b75e85286) - internal/core/adt: tighten uniqueness of conjuncts by [@mpvl](https://github.com/mpvl) in [`a68c6ce`](https://github.com/cue-lang/cue/commit/a68c6ce64f3b69ef09fe91aca7c4c067101bda73) - cue/parser: disallow deprecated language features in API by [@mpvl](https://github.com/mpvl) in [`67ace83`](https://github.com/cue-lang/cue/commit/67ace837da2b061c05be7f1189abb0e96107a2f2) - internal/core/adt: remove nested comprehension special casing by [@mpvl](https://github.com/mpvl) in [`3c0b2ec`](https://github.com/cue-lang/cue/commit/3c0b2ecd089da711f3fb1a9b9f3109a36ccdce1c) - README: fix the stale GitHub Actions badge by [@mvdan](https://github.com/mvdan) in [`4fee020`](https://github.com/cue-lang/cue/commit/4fee020034c66d74c2a0d68d56c72f7728bd8ea3) - internal/core/adt: disambiguate let cache by [@mpvl](https://github.com/mpvl) in [`43fc681`](https://github.com/cue-lang/cue/commit/43fc68115618c5070357dd482530a42ba208e4b1) - internal/core/adt: update stats to fix build breakage by [@mpvl](https://github.com/mpvl) in [`a800e6f`](https://github.com/cue-lang/cue/commit/a800e6fadcfd2a30bda3f1ef330574c11c292499) - internal/core/adt: merge Conjunct and Partial processing by [@mpvl](https://github.com/mpvl) in [`121894c`](https://github.com/cue-lang/cue/commit/121894c5c4616bc972b60e484989cab321b75800) - internal/core/adt: remove assertion by [@mpvl](https://github.com/mpvl) in [`129c343`](https://github.com/cue-lang/cue/commit/129c3439c62fd3ee3165bd2c1e3e64198fe066b1) - internal/core/adt: add test cases for issue 2119 by [@mpvl](https://github.com/mpvl) in [`2499719`](https://github.com/cue-lang/cue/commit/2499719dc992d8182f5669c829735623e3826d8e) - internal/core/adt: add tests related to Issue [#2113](https://github.com/cue-lang/cue/issues/2113) by [@mpvl](https://github.com/mpvl) in [`525648d`](https://github.com/cue-lang/cue/commit/525648d853bb7dbb9187bff2649c03db8d865be8) - internal/core/adt: evaluate let fields earlier in comprehensions by [@mpvl](https://github.com/mpvl) in [`e5fb5af`](https://github.com/cue-lang/cue/commit/e5fb5afcd1a935f8d2ce662a9267d9660f4771cd) - internal/core/adt: detect cycles in patterns by [@mpvl](https://github.com/mpvl) in [`c048135`](https://github.com/cue-lang/cue/commit/c04813590f244fab54ce69a08df1ddf7f95b0993) - cue: update Value.Source doc comment by [@rogpeppe](https://github.com/rogpeppe) in [`45ce7a3`](https://github.com/cue-lang/cue/commit/45ce7a3652a39c81593b069ad56cbe4589f00c01) - tools/flow: add debug support via CUE_DEBUG_TOOLS_FLOW by [@myitcv](https://github.com/myitcv) in [`d85f950`](https://github.com/cue-lang/cue/commit/d85f950102eef401adfad76f56d01d776e3537b9) - internal/core/adt: fix comprehension cycle regression by [@mpvl](https://github.com/mpvl) in [`32bfffd`](https://github.com/cue-lang/cue/commit/32bfffd0aa538d63757efeef393bc37a06c8c9a4) - internal/core/adt: add tests to address regressions by [@mpvl](https://github.com/mpvl) in [`82bf036`](https://github.com/cue-lang/cue/commit/82bf03685cf19981bbd2641fdc2e4c71924359c4) - internal/core/adt: split some tests into files by [@mpvl](https://github.com/mpvl) in [`69ee994`](https://github.com/cue-lang/cue/commit/69ee994fd01d14e97d42f15a1056e0d0aba452ec) - infra: upgrade goreleaser by [@myitcv](https://github.com/myitcv) in [`7bdeb14`](https://github.com/cue-lang/cue/commit/7bdeb14af88c7bb78cae4cb000341b679ac11849) - doc: simple whitespace change to track down GerritHub replication issue by [@myitcv](https://github.com/myitcv) in [`1bb7fed`](https://github.com/cue-lang/cue/commit/1bb7fed608fd273b3d9c581074908e022cf76231) - cmd/cue: fix --ignore errors flag by [@mpvl](https://github.com/mpvl) in [`ab14c86`](https://github.com/cue-lang/cue/commit/ab14c8681d666b9ecc2092546e94946d488e8ad0) - pkg/list: make error of MaxItems consistent with MinItems by [@mpvl](https://github.com/mpvl) in [`c5fbbab`](https://github.com/cue-lang/cue/commit/c5fbbabd6bde15901a845e3d9d69b0d134f0b4d9) - pkg/struct: fix MinFields analogously to MinItems by [@mpvl](https://github.com/mpvl) in [`849371d`](https://github.com/cue-lang/cue/commit/849371d983e827cbe7c58bcf02f83ad65b935542) - all: remove mistakenly added file by [@mpvl](https://github.com/mpvl) in [`68445d8`](https://github.com/cue-lang/cue/commit/68445d839bf0d62aa807388d4ec94007ef7c6820) - internal/core/adt: fix panic using builtin validators by [@mpvl](https://github.com/mpvl) in [`9bbc14b`](https://github.com/cue-lang/cue/commit/9bbc14bc7bce485af1bb3c1b79b87a01c03e3d30) - internal/core/adt: don't bump state by [@mpvl](https://github.com/mpvl) in [`b18d00f`](https://github.com/cue-lang/cue/commit/b18d00f5369c6e42f500ec46218dedf9ef7a2100) - internal/core/adt: prevent early error assignment by [@mpvl](https://github.com/mpvl) in [`27b6e87`](https://github.com/cue-lang/cue/commit/27b6e87efbde0d14b31eeb59943ff79b90fb92ec) - internal/core/adt: relax cycle tracking by [@mpvl](https://github.com/mpvl) in [`9c761dd`](https://github.com/cue-lang/cue/commit/9c761dd5571d3f34bde4a9992e733f1415f0c071) - pkg/internal: allow incomplete list.MinItems by [@mpvl](https://github.com/mpvl) in [`354f4e6`](https://github.com/cue-lang/cue/commit/354f4e6fee32792386d7187079a3c0222248afbc) - internal/core/adt: add tests for [#2052](https://github.com/cue-lang/cue/issues/2052) by [@mpvl](https://github.com/mpvl) in [`6162b95`](https://github.com/cue-lang/cue/commit/6162b95f494dad6eedb336a38e8b96129c6fd903) - internal/core/adt: fix redundant errors in calls by [@mpvl](https://github.com/mpvl) in [`959605e`](https://github.com/cue-lang/cue/commit/959605e053076884efb689583c572ebe4f074728) - drop support for Go 1.17.x ahead of the v0.5 release by [@mvdan](https://github.com/mvdan) in [`0292e7f`](https://github.com/cue-lang/cue/commit/0292e7f4c3eeabd9e9cf4971d96157ac00519c2b) - internal/core/adt: improved reporting disjunction errors by [@mpvl](https://github.com/mpvl) in [`a8d68ad`](https://github.com/cue-lang/cue/commit/a8d68ad05ab615bafacc07d0ccaf12ba0d9f669a) - internal/core/adt: avoid uninformative cyclic error by [@mpvl](https://github.com/mpvl) in [`1d8d8ff`](https://github.com/cue-lang/cue/commit/1d8d8ffea6b95e2b0d555bd6999004268eb14d16) - internal/core/adt: remove over-aggressive deduplication by [@mpvl](https://github.com/mpvl) in [`74b4288`](https://github.com/cue-lang/cue/commit/74b4288a36ae47acbd1b09a24ca86cda7f0f85ef) - internal/core/adt: fix error checking bug by [@mpvl](https://github.com/mpvl) in [`28088ac`](https://github.com/cue-lang/cue/commit/28088ac8e83ee123e329663a533b0b22f47c4c95) - internal/core/adt: add cycle detection for alt evaluation path by [@mpvl](https://github.com/mpvl) in [`4eb2280`](https://github.com/cue-lang/cue/commit/4eb2280f2dca883b2db7a7cde2937fed8cd1caa6) - internal/core/adt: errors in let expressions are okay by [@mpvl](https://github.com/mpvl) in [`30b2007`](https://github.com/cue-lang/cue/commit/30b2007b58507c3e4c3b6f21d88f9e3a2df1d78e) - pkg: improve error messages by [@mpvl](https://github.com/mpvl) in [`fa36be4`](https://github.com/cue-lang/cue/commit/fa36be403849715004c2d143afb3e77a29ac6238) - internal/core/adt: add stats by [@mpvl](https://github.com/mpvl) in [`e2a0ef6`](https://github.com/cue-lang/cue/commit/e2a0ef60402692f9f08690fb55fa24aa53367062) - internal/core/dep: handle recursive lets by [@mpvl](https://github.com/mpvl) in [`1d8663e`](https://github.com/cue-lang/cue/commit/1d8663e67324a7c9623b8c1562936db9a0598172) - internal/core/adt: fix comprehension bug by [@mpvl](https://github.com/mpvl) in [`87347d2`](https://github.com/cue-lang/cue/commit/87347d212f153094980e507fe1c78185d3b8382c) - internal/core/adt: remove redundant state change by [@mpvl](https://github.com/mpvl) in [`24576a0`](https://github.com/cue-lang/cue/commit/24576a0ff2af6929d43394df9deb7e2e9f3dfee2) - cue/ast: fix StructLit.End by [@rogpeppe](https://github.com/rogpeppe) in [`b23ece3`](https://github.com/cue-lang/cue/commit/b23ece37510a9043871c8d5dac035ddd2032a206) - internal/third_party/yaml: fix float parsing by [@rogpeppe](https://github.com/rogpeppe) in [`a4941ed`](https://github.com/cue-lang/cue/commit/a4941ed62de064238bb7dd3cb343ab9e4e87f008) - internal/third_party/yaml: slim down API by [@rogpeppe](https://github.com/rogpeppe) in [`794d078`](https://github.com/cue-lang/cue/commit/794d078602d62d2496c9783554a6bb815ae75ef5) - doc/ref/spec.md: binary literals support `_` separators as well by [@spachava753](https://github.com/spachava753) in [`712d8c6`](https://github.com/cue-lang/cue/commit/712d8c62644dfdab62c01d68314c65eb12300be7) - internal/core/adt: recursively pre-expand comprehensions by [@mpvl](https://github.com/mpvl) in [`102b034`](https://github.com/cue-lang/cue/commit/102b0341dae9420a6cd125678c96b3cd8c32ed2f) - internal/core/adt: represent comprehension clauses as list by [@mpvl](https://github.com/mpvl) in [`b3bcc7a`](https://github.com/cue-lang/cue/commit/b3bcc7aaf3d0e6074a4cad6e725113cf2aa36640) - internal/core/dep: remove useless code by [@mpvl](https://github.com/mpvl) in [`309b965`](https://github.com/cue-lang/cue/commit/309b9655d60fea3cfde50004650d8742c37e696e) - internal/core/adt: fix cycle detection bug for lets by [@mpvl](https://github.com/mpvl) in [`f2b9479`](https://github.com/cue-lang/cue/commit/f2b94794ad54347b92a97a8c69ae3f931efd975e) - internal/core/adt: allow self-referential comprehensions by [@mpvl](https://github.com/mpvl) in [`f1daf4b`](https://github.com/cue-lang/cue/commit/f1daf4b823aa7fedc668add92686dbcbf0141909) - internal/core/adt: update state constants and docs by [@mpvl](https://github.com/mpvl) in [`e4f4900`](https://github.com/cue-lang/cue/commit/e4f4900c5728d22815a71ca1fdcbbe86d8e91d83) - internal/core/adt: add conjuncts to dynamic list as well by [@mpvl](https://github.com/mpvl) in [`637a325`](https://github.com/cue-lang/cue/commit/637a3258c48923c7120cf4ec4d88fb7611879763) - internal/core/adt: report cycle error in comprehension source by [@mpvl](https://github.com/mpvl) in [`6668dc8`](https://github.com/cue-lang/cue/commit/6668dc8e1f94477ec6378f309ba8b8f498f17de5) - internal/core/adt: rename test by [@mpvl](https://github.com/mpvl) in [`f30a8e7`](https://github.com/cue-lang/cue/commit/f30a8e71e6dfc4014ed717edb9b78b0cf73f3cba) - internal/core/adt: add IsDefined to filter out void arcs by [@mpvl](https://github.com/mpvl) in [`2ae37df`](https://github.com/cue-lang/cue/commit/2ae37df09d57c432f865338e1ec4e86de2070ba9) - internal/core/adt: fix closedness regression by [@mpvl](https://github.com/mpvl) in [`ed4f885`](https://github.com/cue-lang/cue/commit/ed4f8850d35a6ca4012c16db0cbf42b6e2d52af0) - internal/core/dep: fix comprehension environment binding by [@mpvl](https://github.com/mpvl) in [`6824f7d`](https://github.com/cue-lang/cue/commit/6824f7d3cb3c4e4fa5e58359c051c207aeada9a2) - deps: bump [golang.org/x/text](http://golang.org/x/text) dependency by [@joaopapereira](https://github.com/joaopapereira) in [`dd1169c`](https://github.com/cue-lang/cue/commit/dd1169c686c9e45358fa87fcdb9530fe3f6a799f) - .gitignore: add .DS_Store by [@mpvl](https://github.com/mpvl) in [`79d80ef`](https://github.com/cue-lang/cue/commit/79d80efc288208410f77d47ae9aedd37e106d84b) - internal/core/adt: fix broken let lookup in embedded scalars by [@mpvl](https://github.com/mpvl) in [`cad3f23`](https://github.com/cue-lang/cue/commit/cad3f2394c591d95747d0d965a7d48638b17bf01) - internal/core/adt: optimize cycle detection for disjunctions by [@mpvl](https://github.com/mpvl) in [`830b138`](https://github.com/cue-lang/cue/commit/830b138ebfb6b81ecc5ec2bbcc14adaf7665d756) - internal/ci: test and release on Go 1.19.x by [@mvdan](https://github.com/mvdan) in [`fe50dff`](https://github.com/cue-lang/cue/commit/fe50dff0dce87c9a8bfa6f15f8df64b9172d2533) - internal/core/adt: remove problematic Ref deletion by [@mpvl](https://github.com/mpvl) in [`7518952`](https://github.com/cue-lang/cue/commit/75189525aabd2bcf2d8738855b187adb4713a393) - cue/testdata/benchmarks: add stats by [@mpvl](https://github.com/mpvl) in [`3bcf4a4`](https://github.com/cue-lang/cue/commit/3bcf4a477733ea2a754837df1b0ba7d1cedce0a2) - encoding/gocode: encode hex consistently like Go 1.19+ by [@mvdan](https://github.com/mvdan) in [`f5c3e4e`](https://github.com/cue-lang/cue/commit/f5c3e4eeb64ad6e4c3a2a33f0152ef00a58773f9) - doc/tutorial/kubernetes: mark both tests as long by [@mvdan](https://github.com/mvdan) in [`06aaef6`](https://github.com/cue-lang/cue/commit/06aaef66df030ff0e63fb633847850008d558fe4) - internal/core/adt: add test for issue 1837 by [@mpvl](https://github.com/mpvl) in [`839e33b`](https://github.com/cue-lang/cue/commit/839e33b3dc64ca2234b54a1fa8451650eb3a18f5) - internal/core/adt: make some errors semi-permanent by [@mpvl](https://github.com/mpvl) in [`4a3a494`](https://github.com/cue-lang/cue/commit/4a3a494e8db538f8689ff9c0d3a882c93cafcc59) - internal/core/adt: reduce size of ErrorCode by [@mpvl](https://github.com/mpvl) in [`53dfffa`](https://github.com/cue-lang/cue/commit/53dfffae81d2e91494e0dbc03a2565debf50a90e) - internal/core/export: fix crash in dynamic fields by [@mpvl](https://github.com/mpvl) in [`ad253ed`](https://github.com/cue-lang/cue/commit/ad253ed099e94ddcffd07e6f73a76735a96cfaf8) - all: apply and follow Go 1.19's gofmt by [@mvdan](https://github.com/mvdan) in [`519d326`](https://github.com/cue-lang/cue/commit/519d326df357904f95bc704d48d594a3f26c2319) - internal/core: implement let as fields by [@mpvl](https://github.com/mpvl) in [`36bd656`](https://github.com/cue-lang/cue/commit/36bd6562f7ba43afbd850abfa565da5576117154) - pkg: reuse pkg/gen to generate package godocs by [@mvdan](https://github.com/mvdan) in [`df148ee`](https://github.com/cue-lang/cue/commit/df148ee6b6133e0466f7964eec027f2e0349cdbe) - internal/core/adt: eliminate disjuncts for incomplete errors by [@mpvl](https://github.com/mpvl) in [`c556a19`](https://github.com/cue-lang/cue/commit/c556a196ad43bcd0ff4fad4f938cabc03ee5e433) - doc/tutorial/kubernetes: only run as a long test by [@mvdan](https://github.com/mvdan) in [`6551ea5`](https://github.com/cue-lang/cue/commit/6551ea5dd7890757afdbf6823443357bc96f4e5f) - internal/core/adt: fix test by [@mpvl](https://github.com/mpvl) in [`d3959eb`](https://github.com/cue-lang/cue/commit/d3959ebce9168f9b922e72e711bac71532e5bd44) - internal/core/adt: add tests for let by [@mpvl](https://github.com/mpvl) in [`7c7056c`](https://github.com/cue-lang/cue/commit/7c7056cd8964d9cb8f4da1c021165630ab091d49) - internal/core/compile: prepare for let change by [@mpvl](https://github.com/mpvl) in [`739713c`](https://github.com/cue-lang/cue/commit/739713c849262af5d5681fbd5dab5aa77787d738) - internal/core/...: fix various attributes printing issues by [@mpvl](https://github.com/mpvl) in [`82933ad`](https://github.com/cue-lang/cue/commit/82933ad1f9ef0dd68aaa8c1a52d8f56a3ad7f4e5) - internal/core/adt: remove StructInfo for unused structs by [@mpvl](https://github.com/mpvl) in [`c89ab8b`](https://github.com/cue-lang/cue/commit/c89ab8b4534144edd9e4313666a7967cb40270d5) - internal/core/compile: add missing import in test by [@mpvl](https://github.com/mpvl) in [`be9cc0d`](https://github.com/cue-lang/cue/commit/be9cc0dfe2efcc9ae76f84f0e21afd83b9bd1349) - internal/cuetxtar: add method for getting a single instance by [@rogpeppe](https://github.com/rogpeppe) in [`e5f21db`](https://github.com/cue-lang/cue/commit/e5f21dbb163c8b864dc1e518dc86e16d8aa0bbf9) - internal/filetypes: not a file extension if the file starts with a dot by [@rogpeppe](https://github.com/rogpeppe) in [`db0897b`](https://github.com/cue-lang/cue/commit/db0897b6b21f16d4dcd3503af51e2f2592b5cc03) - internal/core/adt: defensive use of CloseInfo by [@mpvl](https://github.com/mpvl) in [`9e9786e`](https://github.com/cue-lang/cue/commit/9e9786e93b63af979d9f105a12c8519a6216e56f) - internal/filetypes: fix TestParseFile tests by [@rogpeppe](https://github.com/rogpeppe) in [`3290797`](https://github.com/cue-lang/cue/commit/3290797d2b2b1f41355b6a06d5e9efccf2509a7c) - internal/cuetxtar: improve docs by [@rogpeppe](https://github.com/rogpeppe) in [`d2250b9`](https://github.com/cue-lang/cue/commit/d2250b9bc1870a2488ee3f33b4e8e4fd0561a5f3) - encoding/gocode: be resilient to Go string literal changes by [@rogpeppe](https://github.com/rogpeppe) in [`1cfb57c`](https://github.com/cue-lang/cue/commit/1cfb57cd7485c72d155968cf9a054ac91c6119c7) - doc/tutorial/basics: make test scripts run again by [@mvdan](https://github.com/mvdan) in [`6cb877e`](https://github.com/cue-lang/cue/commit/6cb877ecdd50ec5a4141b4b5a4e0a50b5ac06c60) - encoding/openapi: update API by [@rogpeppe](https://github.com/rogpeppe) in [`74566cf`](https://github.com/cue-lang/cue/commit/74566cff8b973ffa3833ec2f217833f182571c13) - cue/stats: new package for getting operation statistics by [@mpvl](https://github.com/mpvl) in [`535d188`](https://github.com/cue-lang/cue/commit/535d188e024a150de6093a18bee639915e612394) - errors: make Errors and Print respect wrapped errors by [@rogpeppe](https://github.com/rogpeppe) in [`4007775`](https://github.com/cue-lang/cue/commit/4007775eb33da64db9dd38f43da31b39d1bbfc58) - internal/core/path: package for Selector to Feature conversion by [@mpvl](https://github.com/mpvl) in [`4c9d0ac`](https://github.com/cue-lang/cue/commit/4c9d0ac139d02d5ac3208d3268af4ee92916d70f) - cue: tweaks to selector API by [@mpvl](https://github.com/mpvl) in [`cd27b12`](https://github.com/cue-lang/cue/commit/cd27b125bb2e70bc8075d083aebde0a9f8efe940) - cue: add Value.BuildInstance method by [@rogpeppe](https://github.com/rogpeppe) in [`a552c1f`](https://github.com/cue-lang/cue/commit/a552c1fce216865669537591e182add604677252) - encoding/yaml: be clearer about the role of the src argument by [@rogpeppe](https://github.com/rogpeppe) in [`351a9fb`](https://github.com/cue-lang/cue/commit/351a9fbaa8aa7f0482e162f20c4d5a49165b15f9) - internal/core/adt: fix cycles in evaluation by [@mpvl](https://github.com/mpvl) in [`ac11215`](https://github.com/cue-lang/cue/commit/ac1121593d7ab5b3beff5b36f7e77e1cb3fab0c1) - internal/core/adt: tighten structural cycle detection by [@mpvl](https://github.com/mpvl) in [`f8e363e`](https://github.com/cue-lang/cue/commit/f8e363e55bbd91a3ca56b3620edfa41854bc5269) - internal/core/adt: tighten structural cycle detection by [@mpvl](https://github.com/mpvl) in [`68152ec`](https://github.com/cue-lang/cue/commit/68152ec4619731d1d718757571d238eaf94516f8) - internal/core/adt: fix spurious cycle for inline recursion by [@mpvl](https://github.com/mpvl) in [`c997044`](https://github.com/cue-lang/cue/commit/c99704419ffce8b90f9c60c0148152e04d044ec6) - internal/core/adt: fix issue with references cycles by [@mpvl](https://github.com/mpvl) in [`cd4bf2b`](https://github.com/cue-lang/cue/commit/cd4bf2b46c3234ba2e6ba649df8633efd0483eb7) - internal/core/adt: some fixes to structural cycle detection by [@mpvl](https://github.com/mpvl) in [`8133f55`](https://github.com/cue-lang/cue/commit/8133f552636371d32edf9c972e135bc274184c66) - internal/core/compile: fix aliases to dynamic fields by [@mpvl](https://github.com/mpvl) in [`353833c`](https://github.com/cue-lang/cue/commit/353833c0a26a411febdacf8096e378ecbd214e5e) - cue: add Selector.Type API by [@rogpeppe](https://github.com/rogpeppe) in [`8e8f1cf`](https://github.com/cue-lang/cue/commit/8e8f1cfff0aeed7575cd362336da134e2890a311) - cue/load: deterministically sort CUE files when loading by [@mvdan](https://github.com/mvdan) in [`295786e`](https://github.com/cue-lang/cue/commit/295786ef80b0dfd14eacc66f4c0babbbfc832f99) - internal/core/adt: count conjuncts by [@mpvl](https://github.com/mpvl) in [`1a12916`](https://github.com/cue-lang/cue/commit/1a129169283720446cc3cb279f7e8b7adf282bca) - internal/core/adt: finalize arcs that are almost done by [@mpvl](https://github.com/mpvl) in [`8ee1127`](https://github.com/cue-lang/cue/commit/8ee11275c50edf03df202f86cf7b0d0087da0de4) - internal/core/adt: remove redundant line by [@mpvl](https://github.com/mpvl) in [`37ee967`](https://github.com/cue-lang/cue/commit/37ee967c3abff6f18e0a7de3e1558e4af40957f4) - internal/core/adt: clean up some span logic and add a comment by [@mpvl](https://github.com/mpvl) in [`ce30e67`](https://github.com/cue-lang/cue/commit/ce30e6728aa80c9e21e04863107b4cc19263672e) - internal/core/adt: move Label for better bin packing by [@mpvl](https://github.com/mpvl) in [`e398e10`](https://github.com/cue-lang/cue/commit/e398e10f2359b35b88f532113468578fe21035ab) - internal/core/adt: clean up some closedness code by [@mpvl](https://github.com/mpvl) in [`9e15ca1`](https://github.com/cue-lang/cue/commit/9e15ca15750c6efe53c36c6b64684cafcea1e220) - internal/core/adt: fix spurious child error by [@mpvl](https://github.com/mpvl) in [`830847b`](https://github.com/cue-lang/cue/commit/830847bf692effdc626929a7d59913ae9e90aaf9) - all: start using testscript.Params.RequireExplicitExec by [@mvdan](https://github.com/mvdan) in [`37a2a07`](https://github.com/cue-lang/cue/commit/37a2a07006fd18e751be160c2065facb9f286b54) - internal/core/adt: pick defaults for label evaluation by [@mpvl](https://github.com/mpvl) in [`83d37e7`](https://github.com/cue-lang/cue/commit/83d37e79367ee589d797787b7328ab17a14d39e6) - cmd/cue/cmd: testscript moved its gopath location by [@mvdan](https://github.com/mvdan) in [`4a73630`](https://github.com/cue-lang/cue/commit/4a73630583dbb4c4708502de9d275b59fae13d20) - internal/core/adt: SpawnRef loop optimization by [@rogpeppe](https://github.com/rogpeppe) in [`7292034`](https://github.com/cue-lang/cue/commit/7292034f3ba2c7ea0fb3df4d2c40b5c643c46ac4) - all: use txtar filename extensions consistently by [@mvdan](https://github.com/mvdan) in [`c1689bb`](https://github.com/cue-lang/cue/commit/c1689bb0513916bb39709ba7eac6c889949c07a9) - mod: drop x/xerrors from the module graph by [@mvdan](https://github.com/mvdan) in [`0460b47`](https://github.com/cue-lang/cue/commit/0460b47b66065f415a76c96672c55b4d32ae1f49) - mod: drop apd v1 from the module graph by [@mvdan](https://github.com/mvdan) in [`d663a8c`](https://github.com/cue-lang/cue/commit/d663a8c62f8540abd656f32745a3875f499f565d) - all: apply Go 1.19's gofmt by [@mvdan](https://github.com/mvdan) in [`3f3f181`](https://github.com/cue-lang/cue/commit/3f3f18168373298c1580006de52303e06135fcc8) - internal/core/adt: fix spurious cycle by [@mpvl](https://github.com/mpvl) in [`e187f9f`](https://github.com/cue-lang/cue/commit/e187f9fe5d456f14073645670a98803d3048849e) - internal/core/adt: reimplementation of cycle algorithm by [@mpvl](https://github.com/mpvl) in [`6b3fd65`](https://github.com/cue-lang/cue/commit/6b3fd657900412db28bc4270aa0bd31d12fa3c48) - internal/core/adt: hoist cycle logic by [@mpvl](https://github.com/mpvl) in [`eab8c8e`](https://github.com/cue-lang/cue/commit/eab8c8ea5c60ce284b4297ca707fa91cbce11b59) - internal/core/adt: pass Conjunct instead of Environment to Resolve by [@mpvl](https://github.com/mpvl) in [`428d395`](https://github.com/cue-lang/cue/commit/428d3955064ca586fd855d4505ab4fe2cf7163f7) - internal/core/adt: don't spawn duplicate locations by [@mpvl](https://github.com/mpvl) in [`3bedf8e`](https://github.com/cue-lang/cue/commit/3bedf8ea89bed806257bb62f56cced9dbb993c30) - internal/core/adt: fix env linking for comprehensions by [@mpvl](https://github.com/mpvl) in [`b00f5d6`](https://github.com/cue-lang/cue/commit/b00f5d6beac35769cc101e3e4e60894c88a0e2f1) - cmd/cue: remove all stdin buffering by [@mvdan](https://github.com/mvdan) in [`b4d1b16`](https://github.com/cue-lang/cue/commit/b4d1b16ccf8944599eec6870da400d2b56da979b) - all: use the .test TLD for module paths in tests by [@mvdan](https://github.com/mvdan) in [`5a08d2f`](https://github.com/cue-lang/cue/commit/5a08d2f7a9a7595def05c5486cbb5276e66391cb) - CI: only pull master commits through a proxy on Linux by [@mvdan](https://github.com/mvdan) in [`395df20`](https://github.com/cue-lang/cue/commit/395df20f0fe6983b18ca30f03f1c5caa6d144ca3) - CI: try "pull through proxy" go get up to five times by [@mvdan](https://github.com/mvdan) in [`4f15036`](https://github.com/cue-lang/cue/commit/4f150368159fdb18df5d5fc3306b6598b8ca9ac9) - all: fix migration to x/tools/txtar by [@myitcv](https://github.com/myitcv) in [`0a46a16`](https://github.com/cue-lang/cue/commit/0a46a1624353da7327d356040a5612251e01659f) - cmd/cue/cmd: add --inline-imports flag by [@mpvl](https://github.com/mpvl) in [`974a09b`](https://github.com/cue-lang/cue/commit/974a09bb69aaf6b4d22f3a6e6a6929d7e306c605) - cue: support InlineImports for Syntax by [@mpvl](https://github.com/mpvl) in [`ae56267`](https://github.com/cue-lang/cue/commit/ae56267956abf38f79b66fc9809d61abab0a50d1) - internal/core/export: don't inline for errors by [@mpvl](https://github.com/mpvl) in [`e87bc25`](https://github.com/cue-lang/cue/commit/e87bc251364ca2ac93055befed518207771bc660) - internal/core/export: enhancements for import inlining by [@mpvl](https://github.com/mpvl) in [`62fedc3`](https://github.com/cue-lang/cue/commit/62fedc345677e3205bbbe23e8f2a99223ab5fa21) - internal/core/export: implement self-contained algo for export by [@mpvl](https://github.com/mpvl) in [`c71f674`](https://github.com/cue-lang/cue/commit/c71f6745235d5d2dc48ad044d93efc50485fdd7a) - all: fix common pattern of calling cuextxtar.Load by [@myitcv](https://github.com/myitcv) in [`bdaadc9`](https://github.com/cue-lang/cue/commit/bdaadc9c872bd204940e41e15ec1dc5fb2378f13) - pkg/tool/cli: rework Stdin and make Ask read an entire line by [@mvdan](https://github.com/mvdan) in [`4432aa6`](https://github.com/cue-lang/cue/commit/4432aa66244b1c704143327709741edfc803cc82) - all: swap rogpeppe/go-internal/txtar for x/tools/txtar by [@mvdan](https://github.com/mvdan) in [`9f3d9d2`](https://github.com/cue-lang/cue/commit/9f3d9d204ffe2e26ff4a104406b585df0d42023c) - internal/ci: use consistent name for CUELANGORGTIPREBUILDHOOK by [@myitcv](https://github.com/myitcv) in [`a9f8bd2`](https://github.com/cue-lang/cue/commit/a9f8bd2e84e4b76f8bff33d05856c19269f2d314) - cmd/cue/cmd: remove bits of unused code by [@mvdan](https://github.com/mvdan) in [`4d7edeb`](https://github.com/cue-lang/cue/commit/4d7edeb14282847c88d36ce02e1a2852279352c2) - internal/diff: two different errors are equal by [@mpvl](https://github.com/mpvl) in [`6e95220`](https://github.com/cue-lang/cue/commit/6e95220b64bffd37f1a4aee40054aa0d010fa2c1) - interal/diff: skip hidden fields by default by [@mpvl](https://github.com/mpvl) in [`5151417`](https://github.com/cue-lang/cue/commit/5151417cdd411a470585149041d6bcb72793b841) - .gitignore: ignore some binaries by [@mpvl](https://github.com/mpvl) in [`2d10d0f`](https://github.com/cue-lang/cue/commit/2d10d0f19cff3eff21f5bc20d9203610ff775b5d) - internal/core/export: cleanup of initialization and finalize by [@mpvl](https://github.com/mpvl) in [`8a7ebf9`](https://github.com/cue-lang/cue/commit/8a7ebf930b080ab9d14d8d23755d2ec39d1194b1) - internal/core/export: simplify dynamic labels by [@mpvl](https://github.com/mpvl) in [`8edd739`](https://github.com/cue-lang/cue/commit/8edd739a9501e2198e5b171158786ebb34ed6477) - internal/core/export: refactor uniqueFeature by [@mpvl](https://github.com/mpvl) in [`9777511`](https://github.com/cue-lang/cue/commit/9777511749aef21ffdc2addf79ad9f7738b0baab) - internal/core/export: fix bug exporting dynamic references by [@mpvl](https://github.com/mpvl) in [`360ef5f`](https://github.com/cue-lang/cue/commit/360ef5f88bfd0caa06b4db3d4e21e88b9d264032) - internal/core/adt: clarify examples for references by [@mpvl](https://github.com/mpvl) in [`5cb52c8`](https://github.com/cue-lang/cue/commit/5cb52c862ffacc20e4d56c2d14dfa4e112be204c) - internal/core/export: hoist FieldReference logic by [@mpvl](https://github.com/mpvl) in [`82a2513`](https://github.com/cue-lang/cue/commit/82a25134453d2ae49dde27edb49ebe37b50491d6) - internal/core/export: pass Environment by [@mpvl](https://github.com/mpvl) in [`254d0de`](https://github.com/cue-lang/cue/commit/254d0ded1cdcd614304a53082bc5296fe1ac1daa) - internal/core/export: move tests to subdir by [@mpvl](https://github.com/mpvl) in [`08c0689`](https://github.com/cue-lang/cue/commit/08c06896d5d3c5f4378f5ab5c357b03d041a1d3b) - tools/fix: remove rewriting support for old-style let by [@mpvl](https://github.com/mpvl) in [`9a66c51`](https://github.com/cue-lang/cue/commit/9a66c51a1bd05277605e15690881f08793d50212) - internal/core/export: hoist reference logic by [@mpvl](https://github.com/mpvl) in [`580edf4`](https://github.com/cue-lang/cue/commit/580edf46b0f30089e8b4f4594a49a16354237d89) - cue/format: fix `StructLit` trailing comma bug by [@satotake](https://github.com/satotake) in [`d16c799`](https://github.com/cue-lang/cue/commit/d16c7998541098bb304910add474bfb76308db96) - internal/ci/github: skip non-race tests when running race tests by [@myitcv](https://github.com/myitcv) in [`4113ec3`](https://github.com/cue-lang/cue/commit/4113ec34607a913703694b8a4c4996ffb4552d92) - internal/ci: refactor CI workflows by [@myitcv](https://github.com/myitcv) in [`236a565`](https://github.com/cue-lang/cue/commit/236a565379907bc92997645e4113ca1ed6c499b6) - internal/ci: split github workflows into separate files by [@myitcv](https://github.com/myitcv) in [`9d366cd`](https://github.com/cue-lang/cue/commit/9d366cd68db61d461d752db8d649734ba08bd7fa) - internal/ci: write netrc file for triggering trybots by [@myitcv](https://github.com/myitcv) in [`62ccbc0`](https://github.com/cue-lang/cue/commit/62ccbc0f983c3e6abdd786a6f2342b4f7b46d6c4) - internal/ci: move to using gerritstatusupdater by [@myitcv](https://github.com/myitcv) in [`f28ad41`](https://github.com/cue-lang/cue/commit/f28ad41e9ed5918933123c17bab0dd62614c7399) - internal/ci: rename test and repository_dispatch workflows by [@myitcv](https://github.com/myitcv) in [`d4526fe`](https://github.com/cue-lang/cue/commit/d4526fe916326dc69e216864d936e26ce7aef2bb) - cuego: fix example in docs by [@rogpeppe](https://github.com/rogpeppe) in [`2fea90a`](https://github.com/cue-lang/cue/commit/2fea90a631b14946ca0ffac025e64da2d09d3e27) - internal/ci: move workflow declarations to their own package by [@myitcv](https://github.com/myitcv) in [`2795dcc`](https://github.com/cue-lang/cue/commit/2795dcc4db87bb3355de0a49d6596c87f9c2e3d4) - cue/load: actually apply the latest doc wording per the reviews by [@mvdan](https://github.com/mvdan) in [`f32ea8e`](https://github.com/cue-lang/cue/commit/f32ea8e85e21e7472b0ca6ca1f6aa526a3650d65) - cue/load: remove old reference to a "query tool" by [@mvdan](https://github.com/mvdan) in [`03ed417`](https://github.com/cue-lang/cue/commit/03ed417512087bc72e9af50ab14a1a5e336a91b9) - internal/ci: stop using txtar tests for GitHub actions workflows by [@myitcv](https://github.com/myitcv) in [`1876276`](https://github.com/cue-lang/cue/commit/18762768e25c6b8ad1da50af250cebe640e82c92) - cmd/cue: support buildinfo in version sub-command by [@djosephsen](https://github.com/djosephsen) in [`b8703c8`](https://github.com/cue-lang/cue/commit/b8703c81a42138361e24e76ea989e7c8b7c03d18) - doc/spec: minor adjustments after a careful read by [@mvdan](https://github.com/mvdan) in [`cf3ba23`](https://github.com/cue-lang/cue/commit/cf3ba23211d397d7232e531090d7074146d4bbbd) - pkg/gen: remove unreachable code by [@rogpeppe](https://github.com/rogpeppe) in [`2f05fc9`](https://github.com/cue-lang/cue/commit/2f05fc92404e0c47dd62c8f769c8881f87ae9bec) - pkg/gen: generate (almost) all pkg.go files in one call by [@rogpeppe](https://github.com/rogpeppe) in [`23dc354`](https://github.com/cue-lang/cue/commit/23dc354ff7ad0ed477a733f6d04866d12f5f9330) - all: use go-cmp.Diff more consistently by [@mvdan](https://github.com/mvdan) in [`b30eb99`](https://github.com/cue-lang/cue/commit/b30eb998836590adaa22abdd5f628aaddb0fb0cb) - cmd/cue: use `cue` in test scripts rather than `exec cue` by [@mvdan](https://github.com/mvdan) in [`621f437`](https://github.com/cue-lang/cue/commit/621f437aef4f344582476f4b6731c906d6160de5) - internal/core/adt: remove stutter in error by [@mpvl](https://github.com/mpvl) in [`41ceff3`](https://github.com/cue-lang/cue/commit/41ceff3c78eb0ed13e60c673a6a4b002366d473d) - internal/core/adt: keep arc on comprehension error by [@mpvl](https://github.com/mpvl) in [`309f8e7`](https://github.com/cue-lang/cue/commit/309f8e7b1ac5bed017b6b4b8f6dc8e1e512b8614) - internal/core/adt: use per-field comprehensions by [@mpvl](https://github.com/mpvl) in [`748a685`](https://github.com/cue-lang/cue/commit/748a68589747fed6273d6338eb7e275a4fb116c6) - cmd/cue/cmd: remove usage of cue.Runtime by [@mpvl](https://github.com/mpvl) in [`0b0f1d3`](https://github.com/cue-lang/cue/commit/0b0f1d30c967172b69df59f869156f3d154d9cc3) - tools/flow: get rid of deprecated cue.Runtime by [@mpvl](https://github.com/mpvl) in [`3ac85dc`](https://github.com/cue-lang/cue/commit/3ac85dc3ca89ff621150aad1b50fb736ea0b5f9f) - internal/core/adt: move closedness check by [@mpvl](https://github.com/mpvl) in [`abd2ba3`](https://github.com/cue-lang/cue/commit/abd2ba347d8d706c7ae371c7d0c19ba7f102ff33) - internal/core/adt: prepare for comprehension change by [@mpvl](https://github.com/mpvl) in [`38b5fe2`](https://github.com/cue-lang/cue/commit/38b5fe26c487becef1e2cab6267e4f05b85175ec) - internal/core/adt: remove redundant indirection by [@mpvl](https://github.com/mpvl) in [`5201fde`](https://github.com/cue-lang/cue/commit/5201fde5ac039dd9c87290cd8382796d5aa3189e) - internal/core/adt: add convenience logging method by [@mpvl](https://github.com/mpvl) in [`ee36170`](https://github.com/cue-lang/cue/commit/ee36170a79613b52933fe8122e6531918950aba5) - internal/encoding: always validate when exporting by [@qequ](https://github.com/qequ) in [`5b8860a`](https://github.com/cue-lang/cue/commit/5b8860ae5306b51bf38e7ea4b6e536a7477cff29) - cue/pkg/strconv: support arbitary-precision format by [@satotake](https://github.com/satotake) in [`9bda220`](https://github.com/cue-lang/cue/commit/9bda22051dd8d9dbe1539e6b2f7205512e64f303) - pkg/internal: make it clearer that const is exclusive to func by [@rogpeppe](https://github.com/rogpeppe) in [`e77a879`](https://github.com/cue-lang/cue/commit/e77a8790de2b2e7e9bed632594de0e0cf14521fa) - cue/format: escape tabs when printing comments, literals, and attributes by [@mvdan](https://github.com/mvdan) in [`dac4917`](https://github.com/cue-lang/cue/commit/dac491717c1e21e40b0fbd5030ac2435507353d7) - all: replace filepath.Walk with WalkDir by [@mvdan](https://github.com/mvdan) in [`79b324d`](https://github.com/cue-lang/cue/commit/79b324d14be06b57bcd0a4644fb28155bd8267c7) - cmd/cue: initialize toTop and toString without go/packages by [@mvdan](https://github.com/mvdan) in [`0f66c58`](https://github.com/cue-lang/cue/commit/0f66c58a0ae826040fa35461ae8567aba6f5c327) - doc/contribute.md: simplify code backticks by [@rytswd](https://github.com/rytswd) in [`193e320`](https://github.com/cue-lang/cue/commit/193e320762afa09334d4514883f3a95a15ced2fa) - internal/ci: avoid merge commits when testing GitHub PRs by [@mvdan](https://github.com/mvdan) in [`6de1c17`](https://github.com/cue-lang/cue/commit/6de1c17620c78a19bf78d64498bc248b79ce82cc) - internal/encoding/yaml: update dependencies by [@myitcv](https://github.com/myitcv) in [`ef1b8aa`](https://github.com/cue-lang/cue/commit/ef1b8aaa282a263b8634d7333bdb01868ff4e7f0) - encoding/protobuf: update dependencies by [@mvdan](https://github.com/mvdan) in [`31be9e3`](https://github.com/cue-lang/cue/commit/31be9e32f88c1442cfe0e5f2cdb546ad89ee2415) - Revert "all: avoid using too many packages.Need bits" by [@mvdan](https://github.com/mvdan) in [`87408d7`](https://github.com/cue-lang/cue/commit/87408d7d0c61bf6ff2711fd202727639aac97290) - all: avoid using too many packages.Need bits by [@mvdan](https://github.com/mvdan) in [`aa9b1bd`](https://github.com/cue-lang/cue/commit/aa9b1bd076a6b54fcdcef92838f73c982a356d67) - all: fix a few more staticcheck nits by [@mvdan](https://github.com/mvdan) in [`92b9a06`](https://github.com/cue-lang/cue/commit/92b9a06a99a7e27eaf91345545c75054c6279342) - cmd/cue: remove the need for embedpkg by [@mvdan](https://github.com/mvdan) in [`89c6cdc`](https://github.com/cue-lang/cue/commit/89c6cdc1973da4edd97918bca19d959970f616a8) - all: make use of t.TempDir and t.Setenv by [@mvdan](https://github.com/mvdan) in [`6634a00`](https://github.com/cue-lang/cue/commit/6634a00a80472ff0204427592b5d24f94fd55fc9) - pkg/strconv: Revert "pkg/strconv: allow string argument for format" by [@rogpeppe](https://github.com/rogpeppe) in [`1ed6195`](https://github.com/cue-lang/cue/commit/1ed6195cd8d0051bb2a59c68be8d6a9234ea7138) - pkg/strconv: allow string argument for format by [@rogpeppe](https://github.com/rogpeppe) in [`053c4ac`](https://github.com/cue-lang/cue/commit/053c4acc845c1726aca9e7974112d9bf296892c7) - internal/core: comment improvements by [@rogpeppe](https://github.com/rogpeppe) in [`34782fe`](https://github.com/cue-lang/cue/commit/34782fe0bb8cb65b5dda49c377d24089cb131987) - cue/literal: allow escaped newlines in multiline strings by [@rogpeppe](https://github.com/rogpeppe) in [`618e530`](https://github.com/cue-lang/cue/commit/618e5301ec0a5875d1b95d06800a4962c150d857) - all: drop support for Go 1.16.x by [@mvdan](https://github.com/mvdan) in [`bd9ae53`](https://github.com/cue-lang/cue/commit/bd9ae5371cc23c54cb3cb90c0bd5a1fa4d82bc92) - all: make vet happy by [@mvdan](https://github.com/mvdan) in [`a58ac53`](https://github.com/cue-lang/cue/commit/a58ac536005e7347332a26c911d2c3fa43453fc9) - doc/ref: mention that newlines can be escaped in multiline strings by [@rogpeppe](https://github.com/rogpeppe) in [`13918dd`](https://github.com/cue-lang/cue/commit/13918ddeb0b0bb58ebbe92f91fd87e5d364a5844) - all: check the filepath.Walk error parameter by [@mvdan](https://github.com/mvdan) in [`2caf6e0`](https://github.com/cue-lang/cue/commit/2caf6e0f648d40b9072beb875b4ac74017ce415f) - bump x/tools and x/net dependencies by [@mvdan](https://github.com/mvdan) in [`79a3fa7`](https://github.com/cue-lang/cue/commit/79a3fa7e3eab9c18cab54f376cfa24600489e319) - all: fix a few minor typos spotted by gospel by [@mvdan](https://github.com/mvdan) in [`7881588`](https://github.com/cue-lang/cue/commit/78815882e5f3234873f4ca4774e2919f27b594c0) - cue/scanner: allow leading double-quote in #-quoted string by [@rogpeppe](https://github.com/rogpeppe) in [`db398ad`](https://github.com/cue-lang/cue/commit/db398ad39a34334a3431c66d504a0f9929faf55a) - internal/ci: remove gorelease check step by [@mvdan](https://github.com/mvdan) in [`c942d0a`](https://github.com/cue-lang/cue/commit/c942d0afb0e7d38468328fad387a524403cd9799) - internal/ci: enforce Signed-off-by temporarily by [@mvdan](https://github.com/mvdan) in [`7dd325d`](https://github.com/cue-lang/cue/commit/7dd325d2690f84331c5ff8d5636f1bf4d520236e) - all: remove redundant interface type assertions by [@mvdan](https://github.com/mvdan) in [`74d55b7`](https://github.com/cue-lang/cue/commit/74d55b75af75f803103e9e24408f2521b936b41d) - pkg/list/sort: fix syntax in docs by [@tmm1](https://github.com/tmm1) in [`00c5ddf`](https://github.com/cue-lang/cue/commit/00c5ddf5e4ed1781cbf07b9b941a1c7c36a62d87) - internal/ci: bump GitHub Actions OS versions by [@mvdan](https://github.com/mvdan) in [`db3e6ac`](https://github.com/cue-lang/cue/commit/db3e6ace8c735f5bb05b1e13a7acfd7d8b72726b) - cmd/cue: remove duplicate files from get_go_types.txt by [@mvdan](https://github.com/mvdan) in [`eb0a4ff`](https://github.com/cue-lang/cue/commit/eb0a4ff1aee987da38e528240533ba89af738c8a) - internal/cuetest: drive long tests via an env var by [@mvdan](https://github.com/mvdan) in [`33b18be`](https://github.com/cue-lang/cue/commit/33b18be9eddd72ea356a913117bb1327a04242fd) - cmd/cue: import -R: don't treat text with no newlines as YAML by [@rogpeppe](https://github.com/rogpeppe) in [`f207b0b`](https://github.com/cue-lang/cue/commit/f207b0b9285ad043221ff9f3c2207d04e8c32cc0) - cmd/cue: better test for import --recursive by [@rogpeppe](https://github.com/rogpeppe) in [`7f3c0a2`](https://github.com/cue-lang/cue/commit/7f3c0a2b435d8597a4378fb56a07e5afe2847b35) </details> <details> <summary>cypress-io/cypress</summary> ### [`v13.7.2`](https://github.com/cypress-io/cypress/releases/tag/v13.7.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.1...v13.7.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-7-2 ### [`v13.7.1`](https://github.com/cypress-io/cypress/releases/tag/v13.7.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.7.0...v13.7.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-7-1 ### [`v13.7.0`](https://github.com/cypress-io/cypress/releases/tag/v13.7.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.6...v13.7.0) Changelog: <https://docs.cypress.io/guides/references/changelog#13-7-0> ### [`v13.6.6`](https://github.com/cypress-io/cypress/releases/tag/v13.6.6) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.5...v13.6.6) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-6 ### [`v13.6.5`](https://github.com/cypress-io/cypress/releases/tag/v13.6.5) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.4...v13.6.5) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-5 ### [`v13.6.4`](https://github.com/cypress-io/cypress/releases/tag/v13.6.4) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.3...v13.6.4) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-4 ### [`v13.6.3`](https://github.com/cypress-io/cypress/releases/tag/v13.6.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.2...v13.6.3) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-3 ### [`v13.6.2`](https://github.com/cypress-io/cypress/releases/tag/v13.6.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.1...v13.6.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-2 ### [`v13.6.1`](https://github.com/cypress-io/cypress/releases/tag/v13.6.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.6.0...v13.6.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-1 ### [`v13.6.0`](https://github.com/cypress-io/cypress/releases/tag/v13.6.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.1...v13.6.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-6-0 ### [`v13.5.1`](https://github.com/cypress-io/cypress/releases/tag/v13.5.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.5.0...v13.5.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-5-1 ### [`v13.5.0`](https://github.com/cypress-io/cypress/releases/tag/v13.5.0): v.13.5.0 [Compare Source](https://github.com/cypress-io/cypress/compare/v13.4.0...v13.5.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-5-0 ### [`v13.4.0`](https://github.com/cypress-io/cypress/releases/tag/v13.4.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.3...v13.4.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-4-0 ### [`v13.3.3`](https://github.com/cypress-io/cypress/releases/tag/v13.3.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.2...v13.3.3) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-3 ### [`v13.3.2`](https://github.com/cypress-io/cypress/releases/tag/v13.3.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.1...v13.3.2) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-2 ### [`v13.3.1`](https://github.com/cypress-io/cypress/releases/tag/v13.3.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.3.0...v13.3.1) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-1 ### [`v13.3.0`](https://github.com/cypress-io/cypress/releases/tag/v13.3.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.2.0...v13.3.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-3-0 ### [`v13.2.0`](https://github.com/cypress-io/cypress/releases/tag/v13.2.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.1.0...v13.2.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-2-0 ### [`v13.1.0`](https://github.com/cypress-io/cypress/releases/tag/v13.1.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v13.0.0...v13.1.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-1-0 ### [`v13.0.0`](https://github.com/cypress-io/cypress/releases/tag/v13.0.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.4...v13.0.0) Changelog: https://docs.cypress.io/guides/references/changelog#13-0-0 ### [`v12.17.4`](https://github.com/cypress-io/cypress/releases/tag/v12.17.4) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.3...v12.17.4) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-4 ### [`v12.17.3`](https://github.com/cypress-io/cypress/releases/tag/v12.17.3) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.2...v12.17.3) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-3 ### [`v12.17.2`](https://github.com/cypress-io/cypress/releases/tag/v12.17.2) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.1...v12.17.2) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-2 ### [`v12.17.1`](https://github.com/cypress-io/cypress/releases/tag/v12.17.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.17.0...v12.17.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-1 ### [`v12.17.0`](https://github.com/cypress-io/cypress/releases/tag/v12.17.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.16.0...v12.17.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-17-0 ### [`v12.16.0`](https://github.com/cypress-io/cypress/releases/tag/v12.16.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.15.0...v12.16.0) Changelog: <https://docs.cypress.io/guides/references/changelog#12-16-0> ### [`v12.15.0`](https://github.com/cypress-io/cypress/releases/tag/v12.15.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.14.0...v12.15.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-15-0 ### [`v12.14.0`](https://github.com/cypress-io/cypress/releases/tag/v12.14.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.13.0...v12.14.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-14-0 ### [`v12.13.0`](https://github.com/cypress-io/cypress/releases/tag/v12.13.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.12.0...v12.13.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-13-0 ### [`v12.12.0`](https://github.com/cypress-io/cypress/releases/tag/v12.12.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.11.0...v12.12.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-12-0 ### [`v12.11.0`](https://github.com/cypress-io/cypress/releases/tag/v12.11.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.10.0...v12.11.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-11-0 ### [`v12.10.0`](https://github.com/cypress-io/cypress/releases/tag/v12.10.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.9.0...v12.10.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-10-0 ### [`v12.9.0`](https://github.com/cypress-io/cypress/releases/tag/v12.9.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.1...v12.9.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-9-0 ### [`v12.8.1`](https://github.com/cypress-io/cypress/releases/tag/v12.8.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.8.0...v12.8.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-8-1 ### [`v12.8.0`](https://github.com/cypress-io/cypress/releases/tag/v12.8.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.7.0...v12.8.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.8.0 ### [`v12.7.0`](https://github.com/cypress-io/cypress/releases/tag/v12.7.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.6.0...v12.7.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.7.0 ### [`v12.6.0`](https://github.com/cypress-io/cypress/releases/tag/v12.6.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.1...v12.6.0) Changelog: https://docs.cypress.io/guides/references/changelog#12.6.0 ### [`v12.5.1`](https://github.com/cypress-io/cypress/releases/tag/v12.5.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.5.0...v12.5.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-5-1 ### [`v12.5.0`](https://github.com/cypress-io/cypress/releases/tag/v12.5.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.1...v12.5.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-5-0 ### [`v12.4.1`](https://github.com/cypress-io/cypress/releases/tag/v12.4.1) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.4.0...v12.4.1) Changelog: https://docs.cypress.io/guides/references/changelog#12-4-1 ### [`v12.4.0`](https://github.com/cypress-io/cypress/releases/tag/v12.4.0) [Compare Source](https://github.com/cypress-io/cypress/compare/v12.3.0...v12.4.0) Changelog: https://docs.cypress.io/guides/references/changelog#12-4-0 </details> <details> <summary>javierbrea/cypress-localstorage-commands</summary> ### [`v2.2.5`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#225---2023-11-15) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.4...v2.2.5) ##### Changed - chore(deps): Update devDependencies ### [`v2.2.4`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#224---2023-08-14) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.3...v2.2.4) ##### Changed - chore(deps): Update devDependencies ### [`v2.2.3`](https://github.com/javierbrea/cypress-localstorage-commands/blob/HEAD/CHANGELOG.md#223---2023-04-03) [Compare Source](https://github.com/javierbrea/cypress-localstorage-commands/compare/v2.2.2...v2.2.3) ##### Changed - chore(deps): Update devDependencies </details> <details> <summary>dagger/dagger-for-github</summary> ### [`v5`](https://github.com/dagger/dagger-for-github/compare/v4...v5) [Compare Source](https://github.com/dagger/dagger-for-github/compare/v4...v5) ### [`v4`](https://github.com/dagger/dagger-for-github/compare/v3...v4) [Compare Source](https://github.com/dagger/dagger-for-github/compare/v3...v4) </details> <details> <summary>rlamana/docusaurus-plugin-sass</summary> ### [`v0.2.5`](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5) [Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.4...v0.2.5) ### [`v0.2.4`](https://github.com/rlamana/docusaurus-plugin-sass/releases/tag/v0.2.4) [Compare Source](https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4) #### What's Changed - fix: resolve sass-loader to avoid phantom dependencies by [@ChrisCindy](https://github.com/ChrisCindy) in https://github.com/rlamana/docusaurus-plugin-sass/pull/25 - Bump semver from 7.3.5 to 7.5.3 by [@dependabot](https://github.com/dependabot) in https://github.com/rlamana/docusaurus-plugin-sass/pull/31 #### New Contributors - [@ChrisCindy](https://github.com/ChrisCindy) made their first contribution in https://github.com/rlamana/docusaurus-plugin-sass/pull/25 **Full Changelog**: https://github.com/rlamana/docusaurus-plugin-sass/compare/v0.2.3...v0.2.4 </details> <details> <summary>Microsoft/go-winio</summary> ### [`v0.6.1`](https://github.com/microsoft/go-winio/releases/tag/v0.6.1) [Compare Source](https://github.com/Microsoft/go-winio/compare/v0.6.0...v0.6.1) #### What's Changed - Soften linter by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/264 - Bump linter, remove structcheck, ignore unhandled_errors by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/265 - pkg/etw/sample: remove dependency on github.com/sirupsen/logrus by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/microsoft/go-winio/pull/267 - Update go.mod dependencies by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/277 - Add some basic bind filter functions by [@gabriel-samfira](https://github.com/gabriel-samfira) in https://github.com/microsoft/go-winio/pull/274 - Apply two upstream CL to mkwinsyscall by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/278 - Unable to create named pipe on certain WS2012, Win 10 Pro machines by [@rcarman-r7](https://github.com/rcarman-r7) in https://github.com/microsoft/go-winio/pull/280 - Add `fs.ResolvePath` to resolve symbolic links by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/275 - update linter and fix lint errors by [@helsaawy](https://github.com/helsaawy) in https://github.com/microsoft/go-winio/pull/284 #### New Contributors - [@gabriel-samfira](https://github.com/gabriel-samfira) made their first contribution in https://github.com/microsoft/go-winio/pull/274 - [@rcarman-r7](https://github.com/rcarman-r7) made their first contribution in https://github.com/microsoft/go-winio/pull/280 **Full Changelog**: https://github.com/microsoft/go-winio/compare/v0.6.0...v0.6.1 </details> <details> <summary>containerd/console</summary> ### [`v1.0.4`](https://github.com/containerd/console/releases/tag/v1.0.4) [Compare Source](https://github.com/containerd/console/compare/v1.0.3...v1.0.4) #### What's Changed - gha: update to go 1.17, update golangci-lint to v1.44, and gofmt by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/61 - remove solaris implementation by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/62 - zos: share implementation with unix (less DRY) by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/containerd/console/pull/63 - Update GitHub actions CI workflow by [@austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/68 - Add containerd project checks to CI by [@austinvazquez](https://github.com/austinvazquez) in https://github.com/containerd/console/pull/69 - fix: don't abort on first encountered error when resetting Windows console by [@muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/67 - Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/containerd/console/pull/72 - fix: don't print to stdout when initializing console fails on Windows by [@muesli](https://github.com/muesli) in https://github.com/containerd/console/pull/66 - \[Doc]update links to main by [@fangn2](https://github.com/fangn2) in https://github.com/containerd/console/pull/74 - fix: add shim for js by [@paralin](https://github.com/paralin) in https://github.com/containerd/console/pull/60 - docs: fix typo in the comment of Console.Reset by [@davidhsingyuchen](https://github.com/davidhsingyuchen) in https://github.com/containerd/console/pull/73 - tc_unix.go: Make cfmakeraw compatible to Linux by [@ktock](https://github.com/ktock) in https://github.com/containerd/console/pull/77 #### New Contributors - [@austinvazquez](https://github.com/austinvazquez) made their first contribution in https://github.com/containerd/console/pull/68 - [@muesli](https://github.com/muesli) made their first contribution in https://github.com/containerd/console/pull/67 - [@dependabot](https://github.com/dependabot) made their first contribution in https://github.com/containerd/console/pull/72 - [@fangn2](https://github.com/fangn2) made their first contribution in https://github.com/containerd/console/pull/74 - [@paralin](https://github.com/paralin) made their first contribution in https://github.com/containerd/console/pull/60 - [@davidhsingyuchen](https://github.com/davidhsingyuchen) made their first contribution in https://github.com/containerd/console/pull/73 - [@ktock](https://github.com/ktock) made their first contribution in https://github.com/containerd/console/pull/77 **Full Changelog**: https://github.com/containerd/console/compare/v1.0.3...v1.0.4 </details> <details> <summary>containerd/containerd</summary> ### [`v1.7.15`](https://github.com/containerd/containerd/releases/tag/v1.7.15): containerd 1.7.15 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.14...v1.7.15) Welcome to the v1.7.15 release of containerd! The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled. ##### Highlights - Adds mediatype to OCI index record on export ([#9990](https://github.com/containerd/containerd/pull/9990)) ##### Runtime - Fix runc shim to only defer init process exits ([#10037](https://github.com/containerd/containerd/pull/10037)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Phil Estes - Austin Vazquez - Laura Brehm - Sebastiaan van Stijn - Talon ##### Changes <details><summary>12 commits</summary> - Prepare for v1.7.15 release ([#10039](https://github.com/containerd/containerd/pull/10039)) - [`4d4759b54`](https://github.com/containerd/containerd/commit/4d4759b54df2a2ce5abb2aaa117ebc1857406380) Prep v1.7.15 release - Fix runc shim to only defer init process exits ([#10037](https://github.com/containerd/containerd/pull/10037)) - [`21df46766`](https://github.com/containerd/containerd/commit/21df4676621559e46b46810de3c900d105f10210) runc-shim: only defer init process exits - Fix compile from version control system (source) use case ([#10012](https://github.com/containerd/containerd/pull/10012)) - [`2a054213e`](https://github.com/containerd/containerd/commit/2a054213e7d167d697a27bbe8409872c67e8df46) Fix compile from version control system (source) use case - Adds mediatype to OCI index record on export ([#9990](https://github.com/containerd/containerd/pull/9990)) - [`6605c47a4`](https://github.com/containerd/containerd/commit/6605c47a4156171580458fa035133f2739046822) adds mediatype to oci index record - vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#9975](https://github.com/containerd/containerd/pull/9975)) - [`e6d91d843`](https://github.com/containerd/containerd/commit/e6d91d843fcc26c04e0d33144211aef965f79295) vendor: github.com/golang/protobuf v1.5.4 - [`2d136c5f5`](https://github.com/containerd/containerd/commit/2d136c5f5eb7092b458a07e14c53ccb7e5f429f0) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 - [`a1a7af7a3`](https://github.com/containerd/containerd/commit/a1a7af7a39da32ea0e38bb8ddd5b219c9cf6848e) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 </details> ##### Dependency Changes - **github.com/golang/protobuf** v1.5.3 -> v1.5.4 - **google.golang.org/protobuf** v1.31.0 -> v1.33.0 Previous release can be found at [v1.7.14](https://github.com/containerd/containerd/releases/tag/v1.7.14) ### [`v1.7.14`](https://github.com/containerd/containerd/releases/tag/v1.7.14): containerd 1.7.14 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.13...v1.7.14) Welcome to the v1.7.14 release of containerd! The fourteenth patch release for containerd 1.7 contains various fixes and updates. ##### Highlights - Update builds to use go 1.21.8 ([#9933](https://github.com/containerd/containerd/pull/9933)) - Fix various timing issues with docker pusher ([#9921](https://github.com/containerd/containerd/pull/9921)) - Register imagePullThroughput and count with MiB ([#9855](https://github.com/containerd/containerd/pull/9855)) - Move high volume event logs to Trace level ([#9823](https://github.com/containerd/containerd/pull/9823)) ##### Container Runtime Interface (CRI) - Handle pod transition states gracefully while listing pod stats ([#9905](https://github.com/containerd/containerd/pull/9905)) ##### Runtime - Update runc-shim to process exec exits before init ([#9928](https://github.com/containerd/containerd/pull/9928)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Derek McGowan - Maksym Pavlenko - Krisztian Litkey - Akihiro Suda - Justin Chadwell - Sebastiaan van Stijn - Phil Estes - Kirtana Ashok - Akhil Mohan - Austin Vazquez - Etienne Champetier - Jordan Liggitt - Kohei Tokunaga - Mike Brown - Samuel Karp - Davanum Srinivas - Edgar Lee - Henry Wang - James Sturtevant - Laura Brehm - Nashwan Azhari - Robbie Buxton - Robert-André Mauchin - Shukui Yang ##### Changes <details><summary>70 commits</summary> - Prepare release notes for v1.7.14 ([#9953](https://github.com/containerd/containerd/pull/9953)) - [`1babe6b58`](https://github.com/containerd/containerd/commit/1babe6b582911fe90b93fc01491f2f4b130b7a3a) Prepare release notes for v1.7.14 - Backport use Go toolchain in CI matrix to build binaries ([#9951](https://github.com/containerd/containerd/pull/9951)) - [`a9bbbefcf`](https://github.com/containerd/containerd/commit/a9bbbefcf2feba3eaf1da39b70ed28032a7d8a65) Use the Go toolchain in CI matrix to build binaries - Update builds to use go 1.21.8 ([#9933](https://github.com/containerd/containerd/pull/9933)) - [`1ca9a643a`](https://github.com/containerd/containerd/commit/1ca9a643a1ad206f074300e235c959213854fff1) update to go 1.21.8, 1.22.1 - Move inline PS scripts into files ([#9938](https://github.com/containerd/containerd/pull/9938)) - [`39caf532e`](https://github.com/containerd/containerd/commit/39caf532e7f60ff21050221fda627bab02de2ce8) Move inline PS scripts into files - Disable OOM set score unpriv test temporarily ([#9944](https://github.com/containerd/containerd/pull/9944)) - [`630226bb4`](https://github.com/containerd/containerd/commit/630226bb431ec98dbfca279c3416abf5047d9858) Disable OOM set score unpriv test temporarily - Update runc-shim to process exec exits before init ([#9928](https://github.com/containerd/containerd/pull/9928)) - [`de7b6bae9`](https://github.com/containerd/containerd/commit/de7b6bae9e2e44676ae63a13ab130812a6db56b6) runc-shim: process exec exits before init - update to go 1.21.6, test 1.22.0 ([#9860](https://github.com/containerd/containerd/pull/9860)) - [`3b3e537ea`](https://github.com/containerd/containerd/commit/3b3e537eab7f81e32f34c95833caa2af9bc8753f) Uninstall mingw before attempting upgrade - [`9e24388b2`](https://github.com/containerd/containerd/commit/9e24388b209e519d7cc3805b3266b9a4a82e59cc) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. - [`5b23a4127`](https://github.com/containerd/containerd/commit/5b23a412759f27465906f86196c686cd0925be15) seccomp, apparmor: add go:noinline - [`753422ac1`](https://github.com/containerd/containerd/commit/753422ac11e3485b14a62bfdfcc75a0001f3dd70) Drop go 1.20 and build against 1.22 - [`a2d64218c`](https://github.com/containerd/containerd/commit/a2d64218c5a5abc676556925d63b222dbd606469) Fix windows integration tests - [`6379dd6f4`](https://github.com/containerd/containerd/commit/6379dd6f428fc3f55cb4625d7741b84751d42278) Update workflow files to install Go via composite action - [`a5c0d061c`](https://github.com/containerd/containerd/commit/a5c0d061cd3a4154f31fd5a5c8a4f77da5da1dcd) Extract a composite action to install Go - Fix various timing issues with docker pusher ([#9921](https://github.com/containerd/containerd/pull/9921)) - [`52a1402df`](https://github.com/containerd/containerd/commit/52a1402df64ca286b5084b1b150c4219343ad6d7) copy: prevent potential deadlock if close before fully written - [`872746386`](https://github.com/containerd/containerd/commit/872746386237b1076f8449a7f7d3d5a07ed30a42) copy: setError should imply Close - [`a8004007a`](https://github.com/containerd/containerd/commit/a8004007a2ababa6ac7dbf508edf1c49faf06110) copy: remove max number of ErrResets - [`0465472ed`](https://github.com/containerd/containerd/commit/0465472ed3807b6dcf785d160783019e3fed5cf6) pushWriter: refactor reset pipe logic into separate function - [`2577207cc`](https://github.com/containerd/containerd/commit/2577207cc0611f36e582111f88f16fd5ae777068) copy: improve error detection from closed pipes - [`d081da86b`](https://github.com/containerd/containerd/commit/d081da86bfc3b1b65efacdefba0e48aadaac4d91) copy: check if writer was closed before setting a pipe - [`2a25c085b`](https://github.com/containerd/containerd/commit/2a25c085b21e074667bf6ded0dbb6ebf892a889c) copy: remove wrapping io.NopCloser from push writer pipe - Register imagePullThroughput and count with MiB ([#9855](https://github.com/containerd/containerd/pull/9855)) - [`711cebd48`](https://github.com/containerd/containerd/commit/711cebd484d44da363ca451cdaaad0c6ec9810d2) Register imagePullThroughput and count with MiB - Update golangci-lint to v1.56.1 ([#9900](https://github.com/containerd/containerd/pull/9900)) - [`926ceb036`](https://github.com/containerd/containerd/commit/926ceb036223d8ac05cd918c7a4c0825bb9c0640) fix golangci-lint errors - [`4030ae235`](https://github.com/containerd/containerd/commit/4030ae2350fee10557fe52a5b8f86761afb01a1d) Update golangci-lint to v1.56.1 - [`6620d6bfd`](https://github.com/containerd/containerd/commit/6620d6bfd7c5e6e8ffc0c6047c3602ac0ab05a16) ci: bump up golangci-lint to v1.55.2 - [`b16ca72b2`](https://github.com/containerd/containerd/commit/b16ca72b2e1e105e475537a450f0c6509e95ca32) Bump up golangci-lint to v1.54.2 - Handle pod transition states gracefully while listing pod stats ([#9905](https://github.com/containerd/containerd/pull/9905)) - [`39db3f18b`](https://github.com/containerd/containerd/commit/39db3f18b29ab9efb671404a1030628af560c614) adjust test cases to run for windows - [`579d8b463`](https://github.com/containerd/containerd/commit/579d8b463bd9cdcdc4425ac7279033056c1d0433) \[cri] Handle Windows pod transitions gracefully - Backport GitHub actions package updates ([#9876](https://github.com/containerd/containerd/pull/9876)) - [`8d6f0f2ae`](https://github.com/containerd/containerd/commit/8d6f0f2aecd6962163fbaac6f6d2bbb6e12e9c85) build(deps): bump golangci/golangci-lint-action from 3 to 4 - [`7929592b9`](https://github.com/containerd/containerd/commit/7929592b96e2e4e2e0150a890048f612b623fb7d) build(deps): bump actions/upload-artifact from 3 to 4 - [`e11de777d`](https://github.com/containerd/containerd/commit/e11de777dcfdf5914b102830d66e6fbed6ceea7d) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 - [`2b40a4074`](https://github.com/containerd/containerd/commit/2b40a40741dfa865683f25d76ac4e03457449ecc) build(deps): bump actions/checkout from 3 to 4 - [`22feefa57`](https://github.com/containerd/containerd/commit/22feefa570111de80812a493685fb767c3a6c6b4) build(deps): bump actions/setup-go from 3 to 5 - [`b96aa4012`](https://github.com/containerd/containerd/commit/b96aa4012d4a491869f26f570f9dfbbf1835eb70) build(deps): bump actions/upload-artifact from 1 to 3 - [`97763f91d`](https://github.com/containerd/containerd/commit/97763f91d6e8013d5c1e2c5ad7214cd956808742) build(deps): bump docker/setup-buildx-action from 2 to 3 - [`6875bb14f`](https://github.com/containerd/containerd/commit/6875bb14f1841de6d89c689a2e393697c1e6c89c) build(deps): bump github/codeql-action from 2 to 3 - [`87f9adb6b`](https://github.com/containerd/containerd/commit/87f9adb6b9ed2bd9a0b72879c5a9bc5eb1b51586) build(deps): bump actions/download-artifact from 3 to 4 - .github: windows should use fix critool version ([#9874](https://github.com/containerd/containerd/pull/9874)) - [`d9c099a9a`](https://github.com/containerd/containerd/commit/d9c099a9ac39956aee0a720be8b3b6af8861351b) .github: windows should use fix critool version - ci: update crun version to 1.14.3 ([#9850](https://github.com/containerd/containerd/pull/9850)) - [`dc594b01d`](https://github.com/containerd/containerd/commit/dc594b01d28d3a6a896b66274fb75b1f54aecaa3) ci: update crun version to 1.14.3 - Add WithMetaStore to overlay snapshotter and missing unpacker.Wait for image import ([#9837](https://github.com/containerd/containerd/pull/9837)) - [`8fe0b26f1`](https://github.com/containerd/containerd/commit/8fe0b26f198163fb88a6bd194382c502d5756fb1) Add missing unpacker.Wait for image import - [`31ea2d7d9`](https://github.com/containerd/containerd/commit/31ea2d7d9114fee156f37dc9e6f38538aca58447) Add WithMetaStore to overlay snapshotter to allow bringing your own - Move high volume event logs to Trace level ([#9823](https://github.com/containerd/containerd/pull/9823)) - [`982e0cffb`](https://github.com/containerd/containerd/commit/982e0cffbeb31768655ba1ed89620e27551fc49f) Move high volume event logs to Trace level - cri: propagate deprecation list to runtime status ([#9818](https://github.com/containerd/containerd/pull/9818)) - [`c79ffa277`](https://github.com/containerd/containerd/commit/c79ffa2773d29e81f7a905fc1242301c5ee7e556) cri: propagate deprecation list to runtime status - ctr: print deprecation warnings on every invocation ([#9820](https://github.com/containerd/containerd/pull/9820)) - [`eaebe23de`](https://github.com/containerd/containerd/commit/eaebe23de407600ff81b9466165294eacc3575f5) ctr: print deprecation warnings on every invocation - bug fix: make sure cri image is pinned when it is pulled outside cri ([#9784](https://github.com/containerd/containerd/pull/9784)) - [`26c057423`](https://github.com/containerd/containerd/commit/26c057423c614deb0c510ceea84ed22bbe4f7f1d) bug fix: make sure cri image is pinned when it is pulled outside cri - go.{mod,sum}: update NRI dependency, fixing a potential fd double close error. ([#9783](https://github.com/containerd/containerd/pull/9783)) - [`d3e997556`](https://github.com/containerd/containerd/commit/d3e9975563f4dd2182526188f6c2331a192a07d5) go.{mod,sum}: update NRI dependency, re-vendor. - Add option to perform syncfs after pull ([#9769](https://github.com/containerd/containerd/pull/9769)) - [`ea0a92ec3`](https://github.com/containerd/containerd/commit/ea0a92ec30c9e61bd45b777a27ee4849b1716522) \*: introduce image_pull_with_sync_fs in CRI - [`4caf44032`](https://github.com/containerd/containerd/commit/4caf44032b61ecef0c2e38eb38395a3969377296) api: introduce sync_fs to diff.ApplyRequest - Move certain debug logs to trace logs ([#9761](https://github.com/containerd/containerd/pull/9761)) - [`3f75af7bf`](https://github.com/containerd/containerd/commit/3f75af7bf20fc6d1456e282e31c51d32d086b9ec) Move certain debug logs to trace logs </details> ##### Changes from containerd/nri <details><summary>23 commits</summary> - socketpair_windows: remove implementation for now ([containerd/nri#69](https://github.com/containerd/nri/pull/69)) - [`e47f09b`](https://github.com/containerd/nri/commit/e47f09b2abe155cf5c0caaf7d0df7651447d2660) socketpair_windows: remove implementation for now - adaptation, stub: allow extra ttrpc client and server options. ([containerd/nri#67](https://github.com/containerd/nri/pull/67)) - [`45b9e3f`](https://github.com/containerd/nri/commit/45b9e3f1437fff2bb9bc26d89da34ee1b298cc86) plugins: update dependencies. - [`f600cf6`](https://github.com/containerd/nri/commit/f600cf681e94c8f8b65dead5e57fe0981571bea9) go.{mod,sum}: update dependencies. - [`13ee978`](https://github.com/containerd/nri/commit/13ee97879885d8fe4c0dbbf5c0a04716a8654247) pkg/stub: add support for extra ttrpc options. - [`c4e2f81`](https://github.com/containerd/nri/commit/c4e2f81f94b35bee5b9d35c80f28490b6f3ebb76) pkg/adaptation: add support for extra ttrpc options. - socketpair_unix: avoid double close(), set FD_CLOEXEC ([containerd/nri#66](https://github.com/containerd/nri/pull/66)) - [`5d0b52b`](https://github.com/containerd/nri/commit/5d0b52bc45c998c5fcb1a60a7289f86d9c92f836) sockerpair_unix: avoid double close(), set FD_CLOEXEC - Task: fix typo in godoc ([containerd/nri#61](https://github.com/containerd/nri/pull/61)) - [`ae7840b`](https://github.com/containerd/nri/commit/ae7840bf9910649194e1a556b8cc7a66bc19d817) Task: fix typo in godoc - Take pkg/hooks from github.com/containers/common (carry 46) ([containerd/nri#55](https://github.com/containerd/nri/pull/55)) - [`b4ac58c`](https://github.com/containerd/nri/commit/b4ac58c1a5b0cffa51448ed060095dd5dc6f4b54) Take pkg/hooks from github.com/containers/common - gha: remove GOPATH and workingdir, update actions/setup-go@v4, actions/checkout@v4 ([containerd/nri#53](https://github.com/containerd/nri/pull/53)) - [`ee96969`](https://github.com/containerd/nri/commit/ee969691b8e4bdc2b7c3e384b22c203fcf948ab7) gha: update actions/checkout@v4 - [`7b33fbf`](https://github.com/containerd/nri/commit/7b33fbf7685a7c0d27d186f89f6027373e54e3f0) gha: update actions/setup-go@v4 - [`e33ac3e`](https://github.com/containerd/nri/commit/e33ac3e43394ead24dbb4a407dd76c00c5780737) gha: remove working-dir and GOPATH - remove containerd as dependency ([containerd/nri#51](https://github.com/containerd/nri/pull/51)) - [`da8a7e5`](https://github.com/containerd/nri/commit/da8a7e53614c60c106f824caf3d120ea582a0cbe) remove containerd as dependency - make plugins/ulimit-adjuster a separate module ([containerd/nri#54](https://github.com/containerd/nri/pull/54)) - [`934815e`](https://github.com/containerd/nri/commit/934815e56ede6d603d1b17cbce86ad98a973eaf1) make plugins/ulimit-adjuster a separate module - scripts: fix protobuf URL on arm64 ([containerd/nri#52](https://github.com/containerd/nri/pull/52)) - [`9b43daa`](https://github.com/containerd/nri/commit/9b43daaeceae6750053c5693a15edc59819886b9) scripts: fix protobuf URL on arm64 </details> ##### Changes from containerd/ttrpc <details><summary>21 commits</summary> - Fix streaming with empty payloads ([containerd/ttrpc#157](https://github.com/containerd/ttrpc/pull/157)) - [`44ca009`](https://github.com/containerd/ttrpc/commit/44ca0096e1b2b638ead24b4898cc34aa3b603926) Add comment - [`6615f15`](https://github.com/containerd/ttrpc/commit/6615f159bad5b522b7322408fcf5ae8bb58b0843) Fix linter - [`dea99e9`](https://github.com/containerd/ttrpc/commit/dea99e9d052d7b86500e6e3f9e6a214d2111d1a9) Fix handling of empty payloads - [`336fc1b`](https://github.com/containerd/ttrpc/commit/336fc1b6b472ea8df89cd109b7e8dfb99fe8828e) Add integration test to reproduce issue with empty payloads - Bump google.golang.org/grpc from 1.57.0 to 1.57.1 ([containerd/ttrpc#156](https://github.com/containerd/ttrpc/pull/156)) - [`1e51c46`](https://github.com/containerd/ttrpc/commit/1e51c4681df2ab54ad15226a125228ac7639d2e0) Bump google.golang.org/grpc from 1.57.0 to 1.57.1 - Bump golang.org/x/net from 0.10.0 to 0.17.0 ([containerd/ttrpc#155](https://github.com/containerd/ttrpc/pull/155)) - [`bea960d`](https://github.com/containerd/ttrpc/commit/bea960d9fea8eb25d11ff5e024c734e46a9a6c3e) Bump golang.org/x/net from 0.10.0 to 0.17.0 - Implement support for unary interceptor chaining. ([containerd/ttrpc#152](https://github.com/containerd/ttrpc/pull/152)) - [`40f227d`](https://github.com/containerd/ttrpc/commit/40f227ddbb9e05bf4d04179991f809df0546c6f6) server: implement UnaryServerInterceptor chaining. - [`f984c9b`](https://github.com/containerd/ttrpc/commit/f984c9b178e595292d4a6934ce229c9854c2fe77) client: implement UnaryClientInterceptor chaining. - Fix grammar in comment for UserOnCloseWait. ([containerd/ttrpc#153](https://github.com/containerd/ttrpc/pull/153)) - [`8ca4110`](https://github.com/containerd/ttrpc/commit/8ca4110ebc91819c5b0e2f17c9ded818b2462c50) Fix comment for UserOnCloseWait. - Bump genproto dependency ([containerd/ttrpc#154](https://github.com/containerd/ttrpc/pull/154)) - [`a2fbc14`](https://github.com/containerd/ttrpc/commit/a2fbc14815b5a707579072aa0edaa59bdaf762f9) go.mod: google.golang.org/genproto/googleapis/rpc v0.0.0-20230731190214-cbb8c96f2d6d - [`cf2b85d`](https://github.com/containerd/ttrpc/commit/cf2b85de12df0368cf0c6a24446b25c079caf0f5) go.mod: bump to supported go version - server_test: wait for OnClose in TestClientEOF. ([containerd/ttrpc#150](https://github.com/containerd/ttrpc/pull/150)) - [`e0cd801`](https://github.com/containerd/ttrpc/commit/e0cd8011167557f2ddb1b976e604cfd94d8b393d) server_test: wait for OnClose in TestClientEOF. - .github: give more slack for build+tests. ([containerd/ttrpc#151](https://github.com/containerd/ttrpc/pull/151)) - [`8d47846`](https://github.com/containerd/ttrpc/commit/8d4784675e72e1880aa5bb9c817875891e670d41) .github: give more slack for build+tests. </details> ##### Dependency Changes - **github.com/containerd/nri** v0.4.0 -> v0.6.0 - **github.com/containerd/ttrpc** v1.2.2 -> v1.2.3 - **google.golang.org/genproto/googleapis/rpc** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) -> [`cbb8c96`](https://github.com/containerd/containerd/commit/cbb8c96f2d6d) Previous release can be found at [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) ### [`v1.7.13`](https://github.com/containerd/containerd/releases/tag/v1.7.13): containerd 1.7.13 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.12...v1.7.13) Welcome to the v1.7.13 release of containerd! The thirteenth patch release for containerd 1.7 updates the runc binary in the release builds to address CVE-2024-21626 ##### Notable Updates - **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)) - **Update seccomp profile for new syscalls added since Linux 5.16** ([#9693](https://github.com/containerd/containerd/pull/9693)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Akihiro Suda - Evan Lezar - Paweł Gronowski - Phil Estes - Wei Fu ##### Changes <details><summary>9 commits</summary> - Prepare v1.7.13 and update runc to v1.1.12 ([#9724](https://github.com/containerd/containerd/pull/9724)) - [`b97e611b9`](https://github.com/containerd/containerd/commit/b97e611b9b931225f2385d5fcc31873577464edd) Prepare release notes for v1.7.13 - [`2e7fa14db`](https://github.com/containerd/containerd/commit/2e7fa14db7f4448751280520fef2c628ed07b0eb) Update runc binary to v1.1.12 - \[release/1.7] seccomp: kernel 6.7 ([#9693](https://github.com/containerd/containerd/pull/9693)) - [`1bed37871`](https://github.com/containerd/containerd/commit/1bed3787162521aeb179895c29f7cc6a6bcd8013) seccomp: kernel 6.7 - \[release/1.7] Update container-device-interface to v0.6.2 ([#9685](https://github.com/containerd/containerd/pull/9685)) - [`14628d4aa`](https://github.com/containerd/containerd/commit/14628d4aaa1138f2fd10f23d26f3810ba5d65ab2) Update container-device-interface to v0.6.2 - \[release/1.7] content: Add InfoReaderProvider ([#9658](https://github.com/containerd/containerd/pull/9658)) - [`836477930`](https://github.com/containerd/containerd/commit/836477930ed9e6a81980b5bd2150f638cb39adf6) content: Add InfoReaderProvider </details> ##### Dependency Changes - **tags.cncf.io/container-device-interface** v0.6.2 ***new*** - **tags.cncf.io/container-device-interface/specs-go** v0.6.0 ***new*** Previous release can be found at [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) ### [`v1.7.12`](https://github.com/containerd/containerd/releases/tag/v1.7.12): containerd 1.7.12 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.11...v1.7.12) Welcome to the v1.7.12 release of containerd! The twelfth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix on dialer function for Windows** ([#9501](https://github.com/containerd/containerd/pull/9501)) - **Improve `/etc/group` handling when appending groups** ([#9544](https://github.com/containerd/containerd/pull/9544)) - **Update shim pidfile permissions to 0644** ([#9548](https://github.com/containerd/containerd/pull/9548)) - **Update runc binary to v1.1.11** ([#9596](https://github.com/containerd/containerd/pull/9596)) - **Allow import and export to reference missing content** ([#9600](https://github.com/containerd/containerd/pull/9600)) - **Remove runc import** ([#9605](https://github.com/containerd/containerd/pull/9605)) - **Update Go version to 1.20.13** ([#9624](https://github.com/containerd/containerd/pull/9624)) ##### Deprecation Warnings - **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#9567](https://github.com/containerd/containerd/pull/9567)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Sebastiaan van Stijn - Wei Fu - Derek McGowan - Paweł Gronowski - Jaroslav Jindrak - Maksym Pavlenko - Samuel Karp - Anthony Nandaa - Bjorn Neergaard - Djordje Lukic - Kay Yan ##### Changes <details><summary>34 commits</summary> - \[release/1.7] Prepare release notes for v1.7.12 ([#9632](https://github.com/containerd/containerd/pull/9632)) - [`775d544fe`](https://github.com/containerd/containerd/commit/775d544fe51cb3bb9ed735fdf3e56ec45a84d78a) Prepare release notes for v1.7.12 - \[release/1.7] update to go1.20.13, test go1.21.6 ([#9624](https://github.com/containerd/containerd/pull/9624)) - [`a5dc5b894`](https://github.com/containerd/containerd/commit/a5dc5b894d2bd9bc8bff7c95bdde7564747b138f) update to go1.20.13, test go1.21.6 - \[release/1.7] shim: Create pid-file and address with 0644 permissions ([#9548](https://github.com/containerd/containerd/pull/9548)) - [`8d82242eb`](https://github.com/containerd/containerd/commit/8d82242eb525f87b91bbc2c2499559855dd363cf) shim: Create address file with 0644 permissions - [`260963a35`](https://github.com/containerd/containerd/commit/260963a354d972201ffe9a6ce882f1c0e9b319d9) shim: Create pid-file with 0644 permissions - \[release/1.7 backport] switch back from golang.org/x/sys/execabs to os/exec (go1.19) ([#9602](https://github.com/containerd/containerd/pull/9602)) - [`872af82f5`](https://github.com/containerd/containerd/commit/872af82f572a2f2ff17107dd714c61b0eee2081a) remove remaining uses of golang.org/x/sys/execabs - [`2ad2a2e83`](https://github.com/containerd/containerd/commit/2ad2a2e835f27417749c1a0adc47f58e9cae8aa7) switch back from golang.org/x/sys/execabs to os/exec (go1.19) - \[release/1.7] update to CDI v0.6.1, and remove github.com/opencontainers/runc dependency ([#9605](https://github.com/containerd/containerd/pull/9605)) - [`9251072f7`](https://github.com/containerd/containerd/commit/9251072f784dccd9016109c0864ff11c836c9af7) remove github.com/opencontainers/runc dependency - [`4e67213d4`](https://github.com/containerd/containerd/commit/4e67213d4fa02a64b7bb9ed689d68cfc0c4d104a) vendor: github.com/cncf-tags/container-device-interface v0.6.1 - [`e0ee0be0d`](https://github.com/containerd/containerd/commit/e0ee0be0df3d3e3a951e24f616f2afc92e665c23) go.mod: github.com/opencontainers/runtime-spec v1.1.0 - [`02be2236a`](https://github.com/containerd/containerd/commit/02be2236a26ac6d72a0d5375e61ddd648fa1261c) go.mod: github.com/.../container-device-interface v0.6.0 - [`91f953bb4`](https://github.com/containerd/containerd/commit/91f953bb476936d13881781a83b491216d21e3e1) go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2 - \[release/1.7 backport] import/export: Support references to missing content ([#9600](https://github.com/containerd/containerd/pull/9600)) - [`6089b05d9`](https://github.com/containerd/containerd/commit/6089b05d9300c231b2f15cfd50426b97e1f77050) images/Export: Revert signature change - [`6b4b760c3`](https://github.com/containerd/containerd/commit/6b4b760c39b3b63755138357d72e0acedb3bee4e) integration/import-export: Add WithSkipMissing tests - [`abb3c5ef9`](https://github.com/containerd/containerd/commit/abb3c5ef943148198998a94c44d74cd01e00ad5e) export: Copy distribution source labels to manifest annotations - [`9609f04f6`](https://github.com/containerd/containerd/commit/9609f04f6bb9fd203b3955d561d976f34b0d4f4f) import/export: Support references to missing content - [`42b60d865`](https://github.com/containerd/containerd/commit/42b60d865296ef1bda5c0f981ef06844e1f58c5d) images/archive: use mediatype helpers - \[release/1.7 backport] update runc binary to v1.1.11 ([#9596](https://github.com/containerd/containerd/pull/9596)) - [`23516a99c`](https://github.com/containerd/containerd/commit/23516a99c6fc64812a3719ea54004e1a92e9e61d) update runc binary to v1.1.11 - \[release/1.7 backport] go.mod: dario.cat/mergo v1.0.0 ([#9569](https://github.com/containerd/containerd/pull/9569)) - [`428714e32`](https://github.com/containerd/containerd/commit/428714e320b12dd1474c836fa15e79f824edfe2a) go.mod: dario.cat/mergo v1.0.0 - \[release/1.7] restart: containerd.io/restart.logpath warning ([#9567](https://github.com/containerd/containerd/pull/9567)) - [`03fed557e`](https://github.com/containerd/containerd/commit/03fed557e38f3cfeca0652607100c40c86806288) restart: containerd.io/restart.logpath warning - \[release 1.7] backport: fix on dialer function for windows ([#9501](https://github.com/containerd/containerd/pull/9501)) - [`68d237392`](https://github.com/containerd/containerd/commit/68d2373926bc0a9dcc2fb6cdf49dd2188a327b9f) fix(pkg/dialer): minor fix on dialer function for windows - \[release/1.7] \*: enable ARM64 runner ([#9502](https://github.com/containerd/containerd/pull/9502)) - [`c63165123`](https://github.com/containerd/containerd/commit/c63165123374eaba96616b6ecdd2bb34aaae8e36) \*: enable ARM64 runner - \[release/1.7 backport] WithAppendAdditionalGroups: better /etc/group handling ([#9544](https://github.com/containerd/containerd/pull/9544)) - [`55e570844`](https://github.com/containerd/containerd/commit/55e570844473d689572d68cff7f7bcc5bdcba2ce) WithAppendAdditionalGroups: better /etc/group handling </details> ##### Dependency Changes - **dario.cat/mergo** v1.0.0 ***new*** - **github.com/container-orchestrated-devices/container-device-interface** v0.5.4 -> v0.6.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/opencontainers/runtime-spec** v1.1.0-rc.1 -> v1.1.0 Previous release can be found at [v1.7.11](https://github.com/containerd/containerd/releases/tag/v1.7.11) ### [`v1.7.11`](https://github.com/containerd/containerd/releases/tag/v1.7.11): containerd 1.7.11 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.10...v1.7.11) Welcome to the v1.7.11 release of containerd! The eleventh patch release for containerd 1.7 contains various fixes and updates including one security issue. ##### Notable Updates - **Fix Windows default path overwrite issue** ([#9440](https://github.com/containerd/containerd/pull/9440)) - **Update push to always inherit distribution sources from parent** ([#9452](https://github.com/containerd/containerd/pull/9452)) - **Update shim to use net dial for gRPC shim sockets** ([#9458](https://github.com/containerd/containerd/pull/9458)) - **Fix otel version incompatibility** ([#9483](https://github.com/containerd/containerd/pull/9483)) - **Fix Windows snapshotter blocking snapshot GC on remove failure** ([#9482](https://github.com/containerd/containerd/pull/9482)) - **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)) ##### Deprecation Warnings - **Emit deprecation warning for AUFS snapshotter** ([#9436](https://github.com/containerd/containerd/pull/9436)) - **Emit deprecation warning for v1 runtime** ([#9450](https://github.com/containerd/containerd/pull/9450)) - **Emit deprecation warning for deprecated CRI configs** ([#9469](https://github.com/containerd/containerd/pull/9469)) - **Emit deprecation warning for CRI v1alpha1 usage** ([#9479](https://github.com/containerd/containerd/pull/9479)) - **Emit deprecation warning for CRIU config in CRI** ([#9481](https://github.com/containerd/containerd/pull/9481)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Phil Estes - Bjorn Neergaard - Danny Canter - Sebastiaan van Stijn - ruiwen-zhao - Akihiro Suda - Amit Barve - Charity Kathure - Maksym Pavlenko - Milas Bowman - Paweł Gronowski - Wei Fu ##### Changes <details><summary>39 commits</summary> - \[release/1.7] Prepare release notes for v1.7.11 ([#9491](https://github.com/containerd/containerd/pull/9491)) - [`dfae68bc3`](https://github.com/containerd/containerd/commit/dfae68bc3e614a091d0a468c9026da370e3de0d9) Prepare release notes for v1.7.11 - \[release/1.7] update to go1.20.12, test go1.21.5 ([#9352](https://github.com/containerd/containerd/pull/9352)) - [`0d314401d`](https://github.com/containerd/containerd/commit/0d314401d9b9ad470153dc3d09f6d9cd7d527697) update to go1.20.12, test go1.21.5 - [`1ec1ae2c6`](https://github.com/containerd/containerd/commit/1ec1ae2c6b6458b5d000af1ec6263b4ee337cd58) update to go1.20.11, test go1.21.4 - Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c) - [`cb804da21`](https://github.com/containerd/containerd/commit/cb804da2101074c769a2a327597c9595b38bb4f0) contrib/apparmor: deny /sys/devices/virtual/powercap - [`40162a576`](https://github.com/containerd/containerd/commit/40162a576232b7d95325f85334590ea295d2ed2e) oci/spec: deny /sys/devices/virtual/powercap - \[release/1.7] Don't block snapshot garbage collection on Remove failures ([#9482](https://github.com/containerd/containerd/pull/9482)) - [`ed7c6895b`](https://github.com/containerd/containerd/commit/ed7c6895bd3b33ccc7cfbc8cbd43f6a31333328a) Don't block snapshot garbage collection on Remove failures - \[release/1.7] Add warning for CRIU config usage ([#9481](https://github.com/containerd/containerd/pull/9481)) - [`1fdefdd22`](https://github.com/containerd/containerd/commit/1fdefdd2242fcf704a11f1d6b5149e056ce98ed3) Add warning for CRIU config usage - \[release/1.7] Fix otel version incompatibility ([#9483](https://github.com/containerd/containerd/pull/9483)) - [`f8f659e66`](https://github.com/containerd/containerd/commit/f8f659e66c6ec56fef092dced085d129c0e67176) Add HTTP client update function to tracing library - [`807ddd658`](https://github.com/containerd/containerd/commit/807ddd658b4cd6c0325204e7a19a4561a10906d2) fix(tracing): use latest version of semconv - \[release/1.7] Add cri-api v1alpha2 usage warning to all api calls ([#9479](https://github.com/containerd/containerd/pull/9479)) - [`dc45bc838`](https://github.com/containerd/containerd/commit/dc45bc8381fa2cd903e871c81ce7b4c08e82ca3b) Add cri-api v1alpha2 usage warning to all api calls - \[release/1.7] cri: add deprecation warnings for deprecated CRI configs ([#9469](https://github.com/containerd/containerd/pull/9469)) - [`9d1bad62e`](https://github.com/containerd/containerd/commit/9d1bad62e16f31e0b06c75e1007a623879529a6d) deprecation: fix missing spaces in warnings - [`51a604c07`](https://github.com/containerd/containerd/commit/51a604c0733437f4b7a20aa5ec1e6d4b4f0ab96e) cri: add deprecation warning for runtime_root - [`8040e74bf`](https://github.com/containerd/containerd/commit/8040e74bf8e6c25c02bb461b82f482cff24ce611) cri: add deprecation warning for rutnime_engine - [`99adc40eb`](https://github.com/containerd/containerd/commit/99adc40eb28db7cb93c378ff8bceb8e77559ae09) cri: add deprecation warning for default_runtime - [`afef7ec64`](https://github.com/containerd/containerd/commit/afef7ec646910ce1db3e824bfe17848428f3b47b) cri: add warning for untrusted_workload_runtime - [`6220dc190`](https://github.com/containerd/containerd/commit/6220dc1909883119a960bc96c496ae2361b94749) cri: add warning for old form of systemd_cgroup - \[release/1.7] runtime/v2: net.Dial gRPC shim sockets before trying grpc ([#9458](https://github.com/containerd/containerd/pull/9458)) - [`80f96cd18`](https://github.com/containerd/containerd/commit/80f96cd188949bd9fa16256a8ff0b858ef692f20) runtime/v2: net.Dial gRPC shim sockets before trying grpc - \[release/1.7] tasks: emit warning for v1 runtime and runc v1 runtime ([#9450](https://github.com/containerd/containerd/pull/9450)) - [`f471bb2b8`](https://github.com/containerd/containerd/commit/f471bb2b8e5a902ad8901c7c0db85ecead8c1730) tasks: emit warning for runc v1 runtime - [`329e1d487`](https://github.com/containerd/containerd/commit/329e1d487e7cc5c2773a2472df56b6eb75ae9194) tasks: emit warning for v1 runtime - \[release/1.7] push: always inherit distribution sources from parent ([#9452](https://github.com/containerd/containerd/pull/9452)) - [`4464fde12`](https://github.com/containerd/containerd/commit/4464fde12985d98a9edbf124c54afa1156415572) push: always inherit distribution sources from parent - \[release/1.7] Update tar tests to run on Darwin ([#9451](https://github.com/containerd/containerd/pull/9451)) - [`7e069ee25`](https://github.com/containerd/containerd/commit/7e069ee25868e5c8a67610720f8280c3451a3103) Update tar tests to run on Darwin - \[release/1.7] ctr: Add sandbox flag to ctr run ([#9449](https://github.com/containerd/containerd/pull/9449)) - [`5fc0e4e61`](https://github.com/containerd/containerd/commit/5fc0e4e6151dafa4d5ca8837f3d99b6a8e816866) ctr: Add sandbox flag to ctr run - \[release/1.7] Windows default path overwrite fix ([#9440](https://github.com/containerd/containerd/pull/9440)) - [`31fe03764`](https://github.com/containerd/containerd/commit/31fe03764c436677a1db9be24c25f7c11780eceb) Fix windows default path overwrite issue - \[release/1.7] snapshots: emit deprecation warning for aufs ([#9436](https://github.com/containerd/containerd/pull/9436)) - [`625b35e4b`](https://github.com/containerd/containerd/commit/625b35e4bb26ee021713f2692143bf37f9a98bdd) snapshots: emit deprecation warning for aufs </details> ##### Dependency Changes - **github.com/felixge/httpsnoop** v1.0.3 ***new*** - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.45.0 ***new*** Previous release can be found at [v1.7.10](https://github.com/containerd/containerd/releases/tag/v1.7.10) ### [`v1.7.10`](https://github.com/containerd/containerd/releases/tag/v1.7.10): containerd 1.7.10 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.9...v1.7.10) Welcome to the v1.7.10 release of containerd! The tenth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Enhance container image unpack client logs** ([#9379](https://github.com/containerd/containerd/pull/9379)) - **cri: fix using the pinned label to pin image** ([#9381](https://github.com/containerd/containerd/pull/9381)) - **fix: ImagePull should close http connection if there is no available data to read.** ([#9409](https://github.com/containerd/containerd/pull/9409)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Iceber Gu - Austin Vazquez - Derek McGowan - Phil Estes - Samuel Karp - ruiwen-zhao ##### Changes <details><summary>11 commits</summary> - Add release notes for v1.7.10 ([#9426](https://github.com/containerd/containerd/pull/9426)) - [`a995fe3a8`](https://github.com/containerd/containerd/commit/a995fe3a81a933c984ba13dc8bef0271d1aca171) Add release notes for v1.7.10 - \[release/1.7] fix: ImagePull should close http connection if there is no available data to read. ([#9409](https://github.com/containerd/containerd/pull/9409)) - [`206806128`](https://github.com/containerd/containerd/commit/206806128917276994f0949dc599e4c8b8ad8f14) remotes/docker: close connection if no more data - [`328493962`](https://github.com/containerd/containerd/commit/32849396263f9c68f7c4f43a2abc1319488546de) integration: reproduce [#9347](https://github.com/containerd/containerd/issues/9347) - [`d1aab27cb`](https://github.com/containerd/containerd/commit/d1aab27cbd8ae75d90ad962a256d6af092dcf451) fix: deflake TestCRIImagePullTimeout/HoldingContentOpenWriter - \[release/1.7] cri: fix using the pinned label to pin image ([#9381](https://github.com/containerd/containerd/pull/9381)) - [`a2b16d7f9`](https://github.com/containerd/containerd/commit/a2b16d7f9cd44f81ebdcffe92dee107b2ebdca8a) cri: fix update of pinned label for images - [`8dc861844`](https://github.com/containerd/containerd/commit/8dc8618442ad99a254de79200c89eb12284dac6e) cri: fix using the pinned label to pin image - \[release/1.7] Enhance container image unpack client logs ([#9379](https://github.com/containerd/containerd/pull/9379)) - [`5930a3750`](https://github.com/containerd/containerd/commit/5930a3750c5db69abf7668e4df003aae8f0beace) Enhance container image unpack client logs </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.7.9](https://github.com/containerd/containerd/releases/tag/v1.7.9) ### [`v1.7.9`](https://github.com/containerd/containerd/releases/tag/v1.7.9): containerd 1.7.9 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.8...v1.7.9) Welcome to the v1.7.9 release of containerd! The ninth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **update runc binary to v1.1.10::** ([#9359](https://github.com/containerd/containerd/pull/9359)) - **vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0** ([#9301](https://github.com/containerd/containerd/pull/9301)) - **Expose usage of cri-api v1alpha2** ([#9336](https://github.com/containerd/containerd/pull/9336)) - **integration: deflake TestIssue9103** ([#9354](https://github.com/containerd/containerd/pull/9354)) - **fix: shimv1 leak issue** ([#9344](https://github.com/containerd/containerd/pull/9344)) - **cri: add deprecation warnings for mirrors, auths, and configs** ([#9327](https://github.com/containerd/containerd/pull/9327)) - **Update hcsshim tag to v0.11.4** ([#9326](https://github.com/containerd/containerd/pull/9326)) - **Expose usage of deprecated features** ([#9315](https://github.com/containerd/containerd/pull/9315)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Kazuyoshi Kato - Wei Fu - Kirtana Ashok - Derek McGowan - Milas Bowman - Sebastiaan van Stijn - ruiwen-zhao ##### Changes <details><summary>28 commits</summary> - \[release/1.7] Add release notes for v1.7.9 ([#9333](https://github.com/containerd/containerd/pull/9333)) - [`4b912af52`](https://github.com/containerd/containerd/commit/4b912af5246060ddfe3a49065f50ebe2cccc1bb3) Add release notes for v1.7.9 - \[release/1.7 backport] update runc binary to v1.1.10 ([#9359](https://github.com/containerd/containerd/pull/9359)) - [`eff291713`](https://github.com/containerd/containerd/commit/eff29171398e411ab054367f6d9f1892b9d70f67) update runc binary to v1.1.10 - \[release/1.7] vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 ([#9301](https://github.com/containerd/containerd/pull/9301)) - [`bd9428ff7`](https://github.com/containerd/containerd/commit/bd9428ff711bda05efecddafe8ca07f568cd994e) vendor: upgrade OpenTelemetry to v1.19.0 / v0.45.0 - \[release/1.7] Expose usage of cri-api v1alpha2 ([#9336](https://github.com/containerd/containerd/pull/9336)) - [`d62cba40c`](https://github.com/containerd/containerd/commit/d62cba40c833f0dacb58084749105fd6cd61283a) Expose usage of cri-api v1alpha2 - \[release/1.7] integration: deflake TestIssue9103 ([#9354](https://github.com/containerd/containerd/pull/9354)) - [`5dbc258a8`](https://github.com/containerd/containerd/commit/5dbc258a81c236040b7ff27382f812c7179d6cd3) integration: deflake TestIssue9103 - \[release/1.7] fix: shimv1 leak issue ([#9344](https://github.com/containerd/containerd/pull/9344)) - [`449912857`](https://github.com/containerd/containerd/commit/449912857d8191c986537af00325d9999922fce3) fix: shimv1 leak issue - \[release/1.7] cri: add deprecation warnings for mirrors, auths, and configs ([#9327](https://github.com/containerd/containerd/pull/9327)) - [`152c57e91`](https://github.com/containerd/containerd/commit/152c57e918a8374ce2fa20d4eb6ba5896a314529) cri: add deprecation warning for configs - [`689a1036d`](https://github.com/containerd/containerd/commit/689a1036dda32e79643b151f632c8da5bac2f149) cri: add deprecation warning for auths - [`8c38975bf`](https://github.com/containerd/containerd/commit/8c38975bf22f138f00ddf0fafd4803bbade098a3) cri: add deprecation warning for mirrors - [`1fbce40c4`](https://github.com/containerd/containerd/commit/1fbce40c4a7dfad845770580eb146ea2fc64cc46) cri: add ability to emit deprecation warnings - \[release/1.7] Update hcsshim tag to v0.11.4 ([#9326](https://github.com/containerd/containerd/pull/9326)) - [`73f15bdb6`](https://github.com/containerd/containerd/commit/73f15bdb63e25a13bf99f192f39984e22bc7dbc9) Update hcsshim tag to v0.11.4 - \[release/1.7] Expose usage of deprecated features ([#9315](https://github.com/containerd/containerd/pull/9315)) - [`60d48ffea`](https://github.com/containerd/containerd/commit/60d48ffea657d7d7059dcf497c75d3347e1fd1ab) ctr: new deprecations command - [`74a06671a`](https://github.com/containerd/containerd/commit/74a06671ab9396ee94cfee2a588c5d0e170fb698) plugin: record deprecation for dynamic plugins - [`fa5f3c91a`](https://github.com/containerd/containerd/commit/fa5f3c91a946795de0173e10a5a3eba4c18aa4c3) server: add ability to record config deprecations - [`f7880e7f0`](https://github.com/containerd/containerd/commit/f7880e7f0873024d5307a16d4db8c7a2f360ad49) pull: record deprecation warning for schema 1 - [`1dd2f2c02`](https://github.com/containerd/containerd/commit/1dd2f2c028bc0bf9b9301a142e09488815c2fb95) introspection: add support for deprecations - [`aaf000c18`](https://github.com/containerd/containerd/commit/aaf000c18c047895a891a5dfc7127dc87c034fc9) api/introspection: deprecation warnings in server - [`9b7ceee54`](https://github.com/containerd/containerd/commit/9b7ceee540206e6ff6f690676566a73f4f8d443f) warning: new service for deprecations - [`b708f8bfa`](https://github.com/containerd/containerd/commit/b708f8bfadcbf95e2acba22ffdeb7d8f8a974151) deprecation: new package for deprecations </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.1 -> v0.11.4 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/go-logr/logr** v1.2.3 -> v1.2.4 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.7.0 -> v2.16.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.45.0 - **go.opentelemetry.io/otel** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.19.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.19.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 Previous release can be found at [v1.7.8](https://github.com/containerd/containerd/releases/tag/v1.7.8) ### [`v1.7.8`](https://github.com/containerd/containerd/releases/tag/v1.7.8): containerd 1.7.8 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.7...v1.7.8) Welcome to the v1.7.8 release of containerd! The eighth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix ambiguous TLS fallback** ([#9299](https://github.com/containerd/containerd/pull/9299)) - **Update Go to 1.20.10** ([#9265](https://github.com/containerd/containerd/pull/9265)) - **Add a new image label on converted schema 1 images** ([#9252](https://github.com/containerd/containerd/pull/9252)) - **Fix handling for missing basic auth credentials** ([#9235](https://github.com/containerd/containerd/pull/9235)) - **Fix potential deadlock in create handler for containerd-shim-runc-v2** ([#9209](https://github.com/containerd/containerd/pull/9209)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Phil Estes - Chen Yiyang - Wei Fu - Akihiro Suda - Maksym Pavlenko - Marat Radchenko - Milas Bowman - Qiutong Song - Samuel Karp ##### Changes <details><summary>27 commits</summary> - \[release/1.7] Prepare release notes for v1.7.8 ([#9278](https://github.com/containerd/containerd/pull/9278)) - [`48dbdf871`](https://github.com/containerd/containerd/commit/48dbdf871b43ca94f243779bd641fcda49c94f66) Prepare release notes for v1.7.8 - \[release/1.7] Fix ambiguous tls fallback ([#9299](https://github.com/containerd/containerd/pull/9299)) - [`68abc543b`](https://github.com/containerd/containerd/commit/68abc543b1eb4a8196842de6c83115ba4e5698b0) Check scheme and host of request on push redirect - [`35c7634e3`](https://github.com/containerd/containerd/commit/35c7634e33651053a934bbcb831c90ddc65ede2e) Avoid TLS fallback when protocol is not ambiguous - \[release/1.7] vendor: google.golang.org/grpc v1.58.3 ([#9281](https://github.com/containerd/containerd/pull/9281)) - [`f36948cad`](https://github.com/containerd/containerd/commit/f36948cad712b9f813518ceaa5ac5441b6e10347) vendor: gRPC v1.58.3 - \[release/1.7 backport] vendor: golang.org/x/net v0.17.0 ([#9276](https://github.com/containerd/containerd/pull/9276)) - [`c67a53190`](https://github.com/containerd/containerd/commit/c67a5319050614a947c9e5c133e44164e487a223) vendor: golang.org/x/net v0.17.0 - [`71f4b36ca`](https://github.com/containerd/containerd/commit/71f4b36ca7a420d53a9f6c1b3f846a4a94b739de) vendor: golang.org/x/text v0.13.0 - [`a7b3b7090`](https://github.com/containerd/containerd/commit/a7b3b70909a99f47845b74a3dbe58032c17bd1e0) vendor: golang.org/x/sys v0.13.0 - \[release/1.7] vendor: google.golang.org/grpc v1.56.3 ([#9248](https://github.com/containerd/containerd/pull/9248)) - [`26736d6e1`](https://github.com/containerd/containerd/commit/26736d6e1af5f45386ae9382a6a951aee33c9ca7) vendor: google.golang.org/grpc v1.56.3 - [`54a69a6e4`](https://github.com/containerd/containerd/commit/54a69a6e448d61fe88ad90bd476f8f65cf21277f) vendor: golang.org/x/oauth2 v0.7.0 - [`ac15a7f5b`](https://github.com/containerd/containerd/commit/ac15a7f5b9da1b45ffc66bb8ccdcaed2f571c73a) vendor: google.golang.org/protobuf v1.30.0 - \[release/1.7] update to go1.20.10, test go1.21.3 ([#9265](https://github.com/containerd/containerd/pull/9265)) - [`2479c3321`](https://github.com/containerd/containerd/commit/2479c332173014f3086d9b016214c536a7c03f39) \[release/1.7] update to go1.20.10, test go1.21.3 - [`11f40e9d8`](https://github.com/containerd/containerd/commit/11f40e9d80409b8dfa9dcb3eb81934e08384dd8e) \[release/1.7] update to go1.20.9, test go1.21.2 - \[release/1.7] Add a new image label if it is docker schema 1 ([#9252](https://github.com/containerd/containerd/pull/9252)) - [`cac1bab79`](https://github.com/containerd/containerd/commit/cac1bab797ed8d1245bff49aa90e6c80d8714899) Add a new image label if it is docker schema 1 - \[release/1.7] remotes: add handling for missing basic auth credentials ([#9235](https://github.com/containerd/containerd/pull/9235)) - [`6cd2cc4a8`](https://github.com/containerd/containerd/commit/6cd2cc4a8f035162e06d5ffbf868c540e7eb40eb) remotes: add handling for missing basic auth credentials - \[release/1.7 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#9209](https://github.com/containerd/containerd/pull/9209)) - [`d0a1fedb5`](https://github.com/containerd/containerd/commit/d0a1fedb5a4828daddff330a345780d0222e47e8) \*: add runc-fp as runc wrapper to inject failpoint - [`04491240a`](https://github.com/containerd/containerd/commit/04491240af1766337e0fbb5145405f74a39f5ad5) containerd-shim-runc-v2: avoid potential deadlock in create handler - [`6982a0df5`](https://github.com/containerd/containerd/commit/6982a0df5bc0d31ae82f0810518550006bf90931) containerd-shim-runc-v2: remove unnecessary `s.getContainer()` - [`0e2320398`](https://github.com/containerd/containerd/commit/0e2320398f0fb9974232ef68ea70625645f42661) Uncopypaste parsing of OCI Bundle spec file </details> ##### Dependency Changes - **golang.org/x/crypto** v0.11.0 -> v0.14.0 - **golang.org/x/mod** v0.9.0 -> v0.11.0 - **golang.org/x/net** v0.13.0 -> v0.17.0 - **golang.org/x/oauth2** v0.4.0 -> v0.10.0 - **golang.org/x/sync** v0.1.0 -> v0.3.0 - **golang.org/x/sys** v0.10.0 -> v0.13.0 - **golang.org/x/term** v0.10.0 -> v0.13.0 - **golang.org/x/text** v0.11.0 -> v0.13.0 - **golang.org/x/tools** v0.7.0 -> v0.10.0 - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4) -> [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) - **google.golang.org/genproto/googleapis/api** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`782d3b1`](https://github.com/containerd/containerd/commit/782d3b101e98) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.58.3 - **google.golang.org/protobuf** v1.29.1 -> v1.31.0 Previous release can be found at [v1.7.7](https://github.com/containerd/containerd/releases/tag/v1.7.7) ### [`v1.7.7`](https://github.com/containerd/containerd/releases/tag/v1.7.7): containerd 1.7.7 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.6...v1.7.7) Welcome to the v1.7.7 release of containerd! The seventh patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Require plugins to succeed after registering readiness** ([#9165](https://github.com/containerd/containerd/pull/9165)) - **Handle unexpected shim kill events** ([#9132](https://github.com/containerd/containerd/pull/9132)) - **Build binaries with Go 1.21.1** ([#9167](https://github.com/containerd/containerd/pull/9167)) - **cri: Stop recommending disable_cgroup** ([#9168](https://github.com/containerd/containerd/pull/9168)) - **remotes/docker: Fix MountedFrom prefixed with target repository** ([#9193](https://github.com/containerd/containerd/pull/9193)) - **remotes: always try to establish tls connection when tls configured** ([#9188](https://github.com/containerd/containerd/pull/9188)) - **NRI: Add support for rlimits** ([#48](https://github.com/containerd/nri/pull/48)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Samuel Karp - Krisztian Litkey - Wei Fu - Phil Estes - Sebastiaan van Stijn - Iceber Gu - Mike Brown - Akihiro Suda - Paweł Gronowski - Steve Griffith - Aditya Ramani - Austin Vazquez - Danny Canter - James Sturtevant - Kern Walster - ZP-AlwaysWin ##### Changes <details><summary>31 commits</summary> - \[release/1.7] Prepare release notes for v1.7.7 ([#9194](https://github.com/containerd/containerd/pull/9194)) - [`a34fa5681`](https://github.com/containerd/containerd/commit/a34fa5681a8cf8a250cdb638e29f54be44b7554f) Prepare release notes for v1.7.7 - \[release/1.7] Allow for images with artifacts to pull ([#9149](https://github.com/containerd/containerd/pull/9149)) - [`6ca0aebf0`](https://github.com/containerd/containerd/commit/6ca0aebf0c40c3a2ea59c0ede440f9b6be5d1ded) Allow for images with artifacts to pull - \[release 1.7] remotes/docker: Fix MountedFrom prefixed with target repository ([#9193](https://github.com/containerd/containerd/pull/9193)) - [`7df492a95`](https://github.com/containerd/containerd/commit/7df492a95c7283a3f402b5a0e96030e42724d9d0) remotes/docker: Fix MountedFrom prefixed with target repository - \[release/1.7] Update x/net to 0.13 ([#9134](https://github.com/containerd/containerd/pull/9134)) - [`b3db314a5`](https://github.com/containerd/containerd/commit/b3db314a58311b3e754906baf356ec83d05015d6) Bump x/net to 0.13 - \[release/1.7] remotes: always try to establish tls connection when tls configured ([#9188](https://github.com/containerd/containerd/pull/9188)) - [`7779ce64e`](https://github.com/containerd/containerd/commit/7779ce64e563f366199e7b22972ca18ec060b944) remotes: always try to establish tls connection when tls configured - \[release/1.7] cri: stop recommending disable_cgroup ([#9168](https://github.com/containerd/containerd/pull/9168)) - [`6013b5e03`](https://github.com/containerd/containerd/commit/6013b5e03ebadfc70eb711118a05e24891f8e2dc) cri: stop recommending disable_cgroup - \[release/1.7] Require plugins to succeed after registering readiness ([#9165](https://github.com/containerd/containerd/pull/9165)) - [`a83c66813`](https://github.com/containerd/containerd/commit/a83c66813f908c861ad3d908755d4c4b0a86778c) Require plugins to succeed after registering readiness - [`171d76849`](https://github.com/containerd/containerd/commit/171d76849393a3efa3b244f84c7dceff8c7d5026) cri: call RegisterReadiness after NewCRIService - \[release/1.7] Handle unexpected shim kill events ([#9132](https://github.com/containerd/containerd/pull/9132)) - [`3d27bc738`](https://github.com/containerd/containerd/commit/3d27bc738a6e6762a9c240f420491632e3eaae3d) Handle unexpected shim kill events - \[release/1.7] Build binaries with 1.21.1 ([#9167](https://github.com/containerd/containerd/pull/9167)) - [`4ffa3ed29`](https://github.com/containerd/containerd/commit/4ffa3ed2940b122cf5191746edeb30e177ea9820) Build binaries with 1.21.1 - \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 ([#9127](https://github.com/containerd/containerd/pull/9127)) - [`5756f6064`](https://github.com/containerd/containerd/commit/5756f6064b89c4c403439b49353d5dd035ba8c4f) \[release/1.7] vendor: github.com/Microsoft/hcsshim v0.11.1 - \[release/1.7 backport] alias log package to github.com/containerd/log v0.1.0 ([#9106](https://github.com/containerd/containerd/pull/9106)) - [`09633b539`](https://github.com/containerd/containerd/commit/09633b539fad441c730569050e66a87d713a14a9) deprecate logs package, but disable linter (for transitioning) - [`cb201519f`](https://github.com/containerd/containerd/commit/cb201519f8757f4272d88f3a785a4cb56215095c) alias log package to github.com/containerd/log v0.1.0 - [`a5024e6dd`](https://github.com/containerd/containerd/commit/a5024e6dd9f797051a465516066b248294c434e1) vendor: github.com/stretchr/testify v1.8.4 - [`7bd976af3`](https://github.com/containerd/containerd/commit/7bd976af3fe068a79fec23d9fc05a69e26aa18c3) vendor: github.com/sirupsen/logrus v1.9.3 - \[release/1.7] remotes/docker: Add MountedFrom and Exists push status ([#9097](https://github.com/containerd/containerd/pull/9097)) - [`8cd2d33c2`](https://github.com/containerd/containerd/commit/8cd2d33c2aaa730717be1b75a4d2f3629e493c55) \[release/1.7] remotes/docker: Add MountedFrom and Exists push status - \[release/1.7] vendor: update github.com/containerd/nri@v0.4.0 ([#9099](https://github.com/containerd/containerd/pull/9099)) - [`3ca015e55`](https://github.com/containerd/containerd/commit/3ca015e55672c128d9f021d14f49ef96c247cd5b) nri: update mock plugin handlers - [`4cd208c1f`](https://github.com/containerd/containerd/commit/4cd208c1f2d80d863776c1947881d5283f3b25fc) vendor: update github.com/containerd/nri@v0.4.0 </details> ##### Changes from containerd/log <details><summary>9 commits</summary> - Update golangci to 1.49 ([#1](https://github.com/containerd/log/pull/1)) - [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49 - [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README - [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details - [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow - [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module - [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest - [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README - [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file </details> ##### Changes from containerd/nri <details><summary>35 commits</summary> - releases: update note about 0.4.0 ([#50](https://github.com/containerd/nri/pull/50)) - [`5f13915`](https://github.com/containerd/nri/commit/5f139156d546cb68a8495c9c36cfc6a574ba3a55) releases: update note about 0.4.0 - Add support for rlimits ([#48](https://github.com/containerd/nri/pull/48)) - [`5ecea04`](https://github.com/containerd/nri/commit/5ecea042d15be1ba5e0b988a40a4c90fb2210a7f) ulimit-adjuster: add validation for hard limits - [`db3de10`](https://github.com/containerd/nri/commit/db3de101ccaba370f9238188da0d8e05039efdee) test: exclude ulimit-adjuster from ginkgo - [`f0deb59`](https://github.com/containerd/nri/commit/f0deb59b4fbf7bcc62597a1299f4544638daa81a) ulimit-adjuster: new sample plugin - [`d2dd708`](https://github.com/containerd/nri/commit/d2dd708de134cfe0617821142557b3e55b0bdf64) Add support for rlimits - [`efaf36e`](https://github.com/containerd/nri/commit/efaf36e49f30c4ca0bfb0bba2c412e87241674c1) api: add POSIXRlimit type - .github: add test build to CI workflow. ([#47](https://github.com/containerd/nri/pull/47)) - [`3f092c2`](https://github.com/containerd/nri/commit/3f092c29cf62a77c9eadaa9d7ff9ac28ece3d180) .github: add test build to CI workflow. - stub: pass context to plugins, pass updated resources to UpdateContainers. ([#40](https://github.com/containerd/nri/pull/40)) - [`01d5f14`](https://github.com/containerd/nri/commit/01d5f14d96708830f232b2744742fc14763816b1) Add a note about NRI API stability and release notes. - [`ea9976d`](https://github.com/containerd/nri/commit/ea9976d8dae3a6e630da76a26dbef44b5c8a3de3) adaptation: add UpdateContainer tests. - [`d042d24`](https://github.com/containerd/nri/commit/d042d24bc4a96fa5fcf1aa0d2195ff75833d7d4e) stub: fix plugin UpdateContainerInterface. - [`f5d0f51`](https://github.com/containerd/nri/commit/f5d0f513608b2afc3fcc5e6bdf76b10b3004c14c) plugins: update plugins for stub changes. - [`b4bd301`](https://github.com/containerd/nri/commit/b4bd301a1ead4d277af088e321c05e76102c8769) adaptation: update tests with stub changes. - [`9d86150`](https://github.com/containerd/nri/commit/9d86150fce4318491481e354d0f34c6b76e8806e) stub: pass context to plugin event handlers. - Updated the OCI Hook Injector README to resovle broken links to the p… ([#34](https://github.com/containerd/nri/pull/34)) - [`5eee915`](https://github.com/containerd/nri/commit/5eee9158f7fab6294bdbc5c76b2793f2dbe9faec) removed link - [`c783fc7`](https://github.com/containerd/nri/commit/c783fc76a80b315253d407f1e74ff9263cf5ce21) Resolves broken podman links and adds details to help better guide people in testing. - Fix ParseEventMask to produce proper masks for 'pod' and 'container' shorthand event notations. ([#39](https://github.com/containerd/nri/pull/39)) - [`da291a6`](https://github.com/containerd/nri/commit/da291a66180b6989a6dcc6bcffcc3257c185f8f8) Fix ParseEventMask to produce proper masks - fix the `NRI_PLUGIN_NAME` env value when launching a pre-installed plugin ([#42](https://github.com/containerd/nri/pull/42)) - [`4a4cea6`](https://github.com/containerd/nri/commit/4a4cea6142a5a34301b796a36355e3b38bb98522) fix the NRI_PLUGIN_NAME env value when launching a pre-installed plugin - [`a67478e`](https://github.com/containerd/nri/commit/a67478ed7c0b38454f3ef4e86f36d870c365c0d5) stub: update setIdentify to ensureIdentify - update module name of the logger plugin ([#41](https://github.com/containerd/nri/pull/41)) - [`841f5ed`](https://github.com/containerd/nri/commit/841f5ed96067b8d737e39e9df16c55231c350d1d) update module name of the logger plugin - Add gitignore for build artifacts ([#32](https://github.com/containerd/nri/pull/32)) - [`8d9c64d`](https://github.com/containerd/nri/commit/8d9c64def7f2ba89a065990e89c2bf39f8046bac) Add gitignore for build artifacts - Makefile: fix 'install-\*' targets. ([#38](https://github.com/containerd/nri/pull/38)) - [`c03d1be`](https://github.com/containerd/nri/commit/c03d1bee1efca43e4b59395622510844b36cd26c) Makefile: fix 'install-\*' targets. - docs: add a chapter about security considerations. ([#36](https://github.com/containerd/nri/pull/36)) - [`ab28e71`](https://github.com/containerd/nri/commit/ab28e7136bbf3c41c7344b0430087c1aed47b05a) docs: add a chapter about security considerations. - api: initialize OCI LinuxMemory resources to empty. ([#37](https://github.com/containerd/nri/pull/37)) - [`2862d98`](https://github.com/containerd/nri/commit/2862d98443ccdb1162963ee979639fd973ddc37b) api: initialize OCI LinuxMemory resources to empty. </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.0 -> v0.11.1 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nri** v0.3.0 -> v0.4.0 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/stretchr/testify** v1.8.2 -> v1.8.4 - **golang.org/x/crypto** v0.1.0 -> v0.11.0 - **golang.org/x/net** v0.8.0 -> v0.13.0 - **golang.org/x/sys** v0.7.0 -> v0.10.0 - **golang.org/x/term** v0.6.0 -> v0.10.0 - **golang.org/x/text** v0.8.0 -> v0.11.0 Previous release can be found at [v1.7.6](https://github.com/containerd/containerd/releases/tag/v1.7.6) ##### Which file should I download? - `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04). - `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent. - `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) - `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases) and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. ### [`v1.7.6`](https://github.com/containerd/containerd/releases/tag/v1.7.6): containerd 1.7.6 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.5...v1.7.6) Welcome to the v1.7.6 release of containerd! The sixth patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **Fix log package for clients overwriting the global logger** ([#9032](https://github.com/containerd/containerd/pull/9032)) - **Fix blockfile snapshotter copy on Darwin** ([#9047](https://github.com/containerd/containerd/pull/9047)) - **Add support for Linux usernames on non-Linux platforms** ([#9015](https://github.com/containerd/containerd/pull/9015)) - **Update Windows platform matcher to invoke stable ABI compability function** ([#9069](https://github.com/containerd/containerd/pull/9069)) - **Update Golang to 1.20.8** ([#9074](https://github.com/containerd/containerd/pull/9074)) - **Update push to inherit distribution sources from parent** ([#9084](https://github.com/containerd/containerd/pull/9084)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Kirtana Ashok - Phil Estes - Akihiro Suda - Danny Canter - Sebastiaan van Stijn - Akhil Mohan - Maksym Pavlenko - Samuel Karp - Wei Fu ##### Changes <details><summary>20 commits</summary> - \[release/1.7] Prepare release notes for 1.7.6 ([#9085](https://github.com/containerd/containerd/pull/9085)) - [`3e09c65b2`](https://github.com/containerd/containerd/commit/3e09c65b21bdda743f5f5de9fb392a25f6a342be) Prepare release notes for v1.7.6 - \[release/1.7] Invoke Stable ABI compatibility function in windows platform matcher ([#9069](https://github.com/containerd/containerd/pull/9069)) - [`c7a35ccdc`](https://github.com/containerd/containerd/commit/c7a35ccdcc674e42c2364f062890b1e40507f543) Fix transfer service dependencies: - [`38d4e506d`](https://github.com/containerd/containerd/commit/38d4e506dd261b48bffbdd04e775d2b687290e2f) Invoke Stable ABI compatibility function in windows platform matcher - \[release/1.7] push: inherit distribution sources from parent ([#9084](https://github.com/containerd/containerd/pull/9084)) - [`5ebf05d97`](https://github.com/containerd/containerd/commit/5ebf05d97e2ef1b09d427118911a89c55059b0fe) push: inherit distribution sources from parent - [`d206896dd`](https://github.com/containerd/containerd/commit/d206896ddd965ab72605aca4337293c056fdd21b) content: add InfoProvider interface - \[release/1.7] update to go1.20.8 ([#9074](https://github.com/containerd/containerd/pull/9074)) - [`423693d7b`](https://github.com/containerd/containerd/commit/423693d7b481e4bd8adb7b0ed76cec0b2cb96724) \[release/1.7] update to go1.20.8 - \[release/1.7] Update hcsshim tag to v0.11.0 ([#9063](https://github.com/containerd/containerd/pull/9063)) - [`ddffc7c9a`](https://github.com/containerd/containerd/commit/ddffc7c9a1e5b6d73953a7f5f8a04170dc45c62a) Update hcsshim tag to v0.11.0 - \[release/1.7] CRI: Support Linux usernames for !linux platforms ([#9015](https://github.com/containerd/containerd/pull/9015)) - [`b449440a4`](https://github.com/containerd/containerd/commit/b449440a40896d5c8f78460354eb2f5506432180) CRI: Support Linux usernames for !linux platforms - \[release/1.7] Blockfile: Enlighten blockfile copy on Darwin ([#9047](https://github.com/containerd/containerd/pull/9047)) - [`ed4bac11e`](https://github.com/containerd/containerd/commit/ed4bac11e5a60aaa3283f998313522d19d54c7f8) Blockfile: Enlighten blockfile copy on Darwin - \[release/1.7 backport] Revert "log: define G() as a function instead of a variable" ([#9032](https://github.com/containerd/containerd/pull/9032)) - [`4d1cfbbdd`](https://github.com/containerd/containerd/commit/4d1cfbbddb57ec10a3e55f71ae5a590091b6e3ab) Revert "log: define G() as a function instead of a variable" - \[release/1.7 backport] make repositories of install dependencies configurable ([#9025](https://github.com/containerd/containerd/pull/9025)) - [`a34e93241`](https://github.com/containerd/containerd/commit/a34e93241254112f8bab49a27f5aeee1f2317d9f) make repositories of install dependencies configurable </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.10.0-rc.8 -> v0.11.0 Previous release can be found at [v1.7.5](https://github.com/containerd/containerd/releases/tag/v1.7.5) ### [`v1.7.5`](https://github.com/containerd/containerd/releases/tag/v1.7.5): containerd 1.7.5 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.4...v1.7.5) Welcome to the v1.7.5 release of containerd! The fifth patch release for containerd 1.7 fixes a versioning issue from the previous release and includes some internal logging API changes. See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Akihiro Suda - Antonio Huete Jimenez - Phil Estes - Samuel Karp ##### Changes <details><summary>18 commits</summary> - \[release/1.7] Prepare release notes for 1.7.5 ([#9010](https://github.com/containerd/containerd/pull/9010)) - [`93b23eb10`](https://github.com/containerd/containerd/commit/93b23eb106f416179ea2fa9c0db621a9fa19c8e9) Prepare release notes for v1.7.5 - [`fb1292c8d`](https://github.com/containerd/containerd/commit/fb1292c8de8b4ca8b273f9c500ef5da0f541c4fa) Bump version to v1.7.4 - \[release/1.7 backport] go.mod: github.com/containerd/continuity v0.4.2 ([#9012](https://github.com/containerd/containerd/pull/9012)) - [`503ab21bf`](https://github.com/containerd/containerd/commit/503ab21bfc4c5be65cba0b6b58aa2968a44bbe65) go.mod: github.com/containerd/continuity v0.4.2 - \[release/1.7 backport] log: cleanups and improvements to decouple more from logrus ([#9001](https://github.com/containerd/containerd/pull/9001)) - [`2a9ae3c51`](https://github.com/containerd/containerd/commit/2a9ae3c51132080940d40343175e0d3eb2a111fc) log: swap logrus functions with their equivalent on default logger - [`01445bb73`](https://github.com/containerd/containerd/commit/01445bb7386b98271b383b76e3d9007dabee03e8) log: add package documentation and summary of package's purpose - [`932795f45`](https://github.com/containerd/containerd/commit/932795f4526ad4dd5d76e2d9b4c1daeaeab19172) log: make Fields type a generic map\[string]any - [`707ca94d8`](https://github.com/containerd/containerd/commit/707ca94d890dbea1be767312483522a98f6c5969) log: add log.Entry type - [`0a79e67e4`](https://github.com/containerd/containerd/commit/0a79e67e4f7bff1128c81ee14a8b2a74a8c55c51) log: define OutputFormat type - [`dbbe28b7d`](https://github.com/containerd/containerd/commit/dbbe28b7d1cc6137ed9fff1bcd8ed5e3ec442059) log: define G() as a function instead of a variable - [`93b6cb784`](https://github.com/containerd/containerd/commit/93b6cb78456b642a5470b24e9ec1fca17ec12e49) log: add all log-levels that are accepted - [`e8e086e02`](https://github.com/containerd/containerd/commit/e8e086e02bbcb078297302bc77a126647606c898) log: group "enum" consts and touch-up docs - [`7aa4f8fdc`](https://github.com/containerd/containerd/commit/7aa4f8fdccea58b2816fe7fe818653100cadfb98) log: WithLogger: remove redundant intermediate var - [`bfdce4ce4`](https://github.com/containerd/containerd/commit/bfdce4ce4bc922ab4990a71f4a5f31a8e2c0224d) log: SetFormat: include returns in switch - [`6621e0888`](https://github.com/containerd/containerd/commit/6621e08887d94b90d3c9b3756acff02573cdc147) log: remove testify dependency - [`df76aaede`](https://github.com/containerd/containerd/commit/df76aaede4b741e9436ced76dea71946d8f29684) removes/docker: remove unnecessary conversion (unconvert) </details> ##### Changes from containerd/continuity <details><summary>2 commits</summary> - Add initial DragonFly BSD support ([#230](https://github.com/containerd/continuity/pull/230)) - [`bcc6e25`](https://github.com/containerd/continuity/commit/bcc6e254708e0ace144a3d590a631db61da0a659) dragonfly: Initial porting work </details> ##### Dependency Changes - **github.com/containerd/continuity** [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381) -> v0.4.2 Previous release can be found at [v1.7.4](https://github.com/containerd/containerd/releases/tag/v1.7.4) ### [`v1.7.4`](https://github.com/containerd/containerd/releases/tag/v1.7.4): containerd 1.7.4 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.3...v1.7.4) Welcome to the v1.7.4 release of containerd! The fourth patch release for containerd 1.7 contains remote differ plugin support, a new block file based snapshotter, and various fixes and updates. ##### Notable Updates - **Add blockfile snapshotter** ([#8986](https://github.com/containerd/containerd/pull/8986)) - **Add remote/proxy differ** ([#8985](https://github.com/containerd/containerd/pull/8985)) - **Update runc binary to v1.1.9** ([#8965](https://github.com/containerd/containerd/pull/8965)) - **Cri: Don't use rel path for image volumes** ([#8926](https://github.com/containerd/containerd/pull/8926)) - **Allow attaching to any combination of stdin/out/err** ([#8910](https://github.com/containerd/containerd/pull/8910)) - **Fix ro mount option being passed** ([#8887](https://github.com/containerd/containerd/pull/8887)) - **Fix leaked shim caused by high IO pressure** ([#9003](https://github.com/containerd/containerd/pull/9003)) - **Add configurable mount options to overlay snapshotter** ([#9005](https://github.com/containerd/containerd/pull/9005)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Wei Fu - Derek McGowan - Akihiro Suda - Kazuyoshi Kato - Cardy.Tang - Phil Estes - Ben Foster - Danny Canter - Hsing-Yu (David) Chen - James Jenkins - James Sturtevant - Maksym Pavlenko - Rodrigo Campos - Sebastiaan van Stijn - rongfu.leng ##### Changes <details><summary>43 commits</summary> - \[release/1.7] Prepare release notes for v1.7.4 ([#9000](https://github.com/containerd/containerd/pull/9000)) - [`7a0cae3ca`](https://github.com/containerd/containerd/commit/7a0cae3ca1acf9a5ab4df4f77ee1b7cc6c3306ce) \[release/1.7] Prepare release notes for v1.7.4 - \[releases/1.7] \*: fix leaked shim caused by high IO pressure ([#9003](https://github.com/containerd/containerd/pull/9003)) - [`537d7526e`](https://github.com/containerd/containerd/commit/537d7526e44bcefe509614abc04930345fbdb941) integration: issue7496 case should work for runc.v2 only - [`5add172be`](https://github.com/containerd/containerd/commit/5add172be5d27d1f98b430a6775da0256afc1e82) Vagrantfile: add strace tool - [`207e28f36`](https://github.com/containerd/containerd/commit/207e28f36dd9daa7ef412c0c2b7b32af3356a2da) integration: add ShouldRetryShutdown case based on [#7496](https://github.com/containerd/containerd/issues/7496) - [`b4f480fb3`](https://github.com/containerd/containerd/commit/b4f480fb30f71ec15055cab0421aa16258ac4b58) pkg/cri/sbserver: fix leaked shim issue for podsandbox mode - [`88ff575c5`](https://github.com/containerd/containerd/commit/88ff575c5cecf81ea7ef78079941521123b451de) pkg/cri/server: fix leaked shim issue - [`9f61dfb7c`](https://github.com/containerd/containerd/commit/9f61dfb7c50dea7bdf4326cf7b04a2ec088b81a5) integration: add case to reproduce [#7496](https://github.com/containerd/containerd/issues/7496) - \[release/1.7] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#9005](https://github.com/containerd/containerd/pull/9005)) - [`0f4885c16`](https://github.com/containerd/containerd/commit/0f4885c1660d2b1a855e79751daf5367fc679079) Add configurable mount options to overlay - [`8804a27d7`](https://github.com/containerd/containerd/commit/8804a27d72275497e4a590b92832d4f1076b43dc) feat: make overlay sync removal configurable - \[release/1.7] Remove temporary replace ([#8997](https://github.com/containerd/containerd/pull/8997)) - [`1c2dd5198`](https://github.com/containerd/containerd/commit/1c2dd5198e5d3d6d111d37a68ad67ae37adf6101) Remove temporary replace - \[release/1.7] Add blockfile snapshotter ([#8986](https://github.com/containerd/containerd/pull/8986)) - [`2bf6bd143`](https://github.com/containerd/containerd/commit/2bf6bd1431512c59f91318e817ee83c4adfcd282) vendor: update github.com/containerd/continuity - [`30a163086`](https://github.com/containerd/containerd/commit/30a163086959b89459b8193884f669561bb56f9e) snapshots|pkg: umount without DETACH and nosync after umount - [`c9eebe3d1`](https://github.com/containerd/containerd/commit/c9eebe3d1151ba3e523c2f0473e61132edf95a72) mount: support direct-io for loopback device - [`1c2977db0`](https://github.com/containerd/containerd/commit/1c2977db01efdd4a5aaff79d72d7e21b19d0f59a) Modify loopback size - [`cf9c78d2d`](https://github.com/containerd/containerd/commit/cf9c78d2d9eb7c3d66d1a94768d63b4f8482c4b2) snapshots/blockfile: fix lint issue - [`b823b4f54`](https://github.com/containerd/containerd/commit/b823b4f546cec4a9d92f9a8ed5b606cbffa287f9) snapshots/blockfile: deflaky the testsuite - [`6daeceb11`](https://github.com/containerd/containerd/commit/6daeceb1168303548ddc0d1af420813ad8475ceb) snapshots/blockfile: use passed in dst in scratchGenerator - [`99b61aee3`](https://github.com/containerd/containerd/commit/99b61aee341fa89370524e49b42212cea79d9fbc) snapshots/blockfile: use loop if options is empty - [`fd39769ac`](https://github.com/containerd/containerd/commit/fd39769ac70a382a0b4459080cb2f10c40842182) Add mount options to blockfile snapshotter - [`8d732c6c2`](https://github.com/containerd/containerd/commit/8d732c6c22d6e723f65be957427b16d48e1d488d) Add sync before unmount on snapshotter layer test - [`8472a407e`](https://github.com/containerd/containerd/commit/8472a407e0eb91f4e10d9e446bdfd439d11cfd55) Add blockfile snapshotter to snapshotters doc - [`6740d77ca`](https://github.com/containerd/containerd/commit/6740d77cae44522820e7575eb9d105e6c5b8d56b) Add blockfile as a builtin - [`07cc24b32`](https://github.com/containerd/containerd/commit/07cc24b32a319fb72622453f40ee8c338062df95) Add blockfile snapshotter - \[release/1.7] Backport remote/proxy differ ([#8985](https://github.com/containerd/containerd/pull/8985)) - [`32e3b76ee`](https://github.com/containerd/containerd/commit/32e3b76ee70fea42234b95ef01f78a13ac7c5c1d) Add diffservice to contrib - [`661e505c8`](https://github.com/containerd/containerd/commit/661e505c8239e97710bac220edf735f06027dbda) Add proxy differ - \[release/1.7 backport] update runc binary to v1.1.9 ([#8965](https://github.com/containerd/containerd/pull/8965)) - [`af79c07fd`](https://github.com/containerd/containerd/commit/af79c07fd69cd20b97b37a903ee6c6957e4628ec) update runc binary to v1.1.9 - \[release/1.7] Port fix for Linux Integration test failure ([#8950](https://github.com/containerd/containerd/pull/8950)) - [`c0b1c8f74`](https://github.com/containerd/containerd/commit/c0b1c8f74aa5616c5e27845d18d4dca5ab30f9fd) fix ci Linux Integration test fail - \[release/1.7] cri: Don't use rel path for image volumes ([#8926](https://github.com/containerd/containerd/pull/8926)) - [`4e97a115f`](https://github.com/containerd/containerd/commit/4e97a115f702bd7de43ee17442a96f3537007a07) cri: Don't use rel path for image volumes - \[release/1.7] fix: allow attaching to any combination of stdin/stdout/stderr ([#8910](https://github.com/containerd/containerd/pull/8910)) - [`34a5d0330`](https://github.com/containerd/containerd/commit/34a5d033007eaae0530a89470407fbe920eec033) fix: allow attaching to any combination of stdin/stdout/stderr - \[release/1.7 backport] update to go1.20.7, go1.19.12 ([#8906](https://github.com/containerd/containerd/pull/8906)) - [`c5e7b84c0`](https://github.com/containerd/containerd/commit/c5e7b84c08b507f93b2df6d393eede3ff75f4e2f) update to go1.20.7, go1.19.12 - \[release/1.7] cherry-pick: Fix ro mount option being passed ([#8887](https://github.com/containerd/containerd/pull/8887)) - [`2eaeb3205`](https://github.com/containerd/containerd/commit/2eaeb3205a1bd61b385a259d43f29ccc09993e18) Fix ro mount option being passed </details> ##### Changes from containerd/continuity <details><summary>4 commits</summary> - fs: use io.Copy because go supports CopyFileRange ([#227](https://github.com/containerd/continuity/pull/227)) - [`4b8bec5`](https://github.com/containerd/continuity/commit/4b8bec5682b6d50a6fba026303fb42a6369851a6) fs: use io.Copy because go supports CopyFileRange - fs/fstest: CreateFile should use sync ([#228](https://github.com/containerd/continuity/pull/228)) - [`3fa7d7a`](https://github.com/containerd/continuity/commit/3fa7d7a5ec66805f9f099001d3fe83f11fb80c0c) fs/fstest: CreateFile should use sync </details> ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf) -> [`ced1acd`](https://github.com/containerd/containerd/commit/ced1acdcaa24) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) -> [`8075edf`](https://github.com/containerd/containerd/commit/8075edf89bb0) - **github.com/containerd/continuity** v0.4.1 -> [`1e0d26e`](https://github.com/containerd/containerd/commit/1e0d26eb2381) Previous release can be found at [v1.7.3](https://github.com/containerd/containerd/releases/tag/v1.7.3) ### [`v1.7.3`](https://github.com/containerd/containerd/releases/tag/v1.7.3): containerd 1.7.3 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.2...v1.7.3) Welcome to the v1.7.3 release of containerd! The third patch release for containerd 1.7 contains various fixes and updates. ##### Notable Updates - **RunC: Update runc binary to v1.1.8** ([#8843](https://github.com/containerd/containerd/pull/8843)) - **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8824](https://github.com/containerd/containerd/pull/8824)) - **CRI: write generated CNI config atomically** ([#8825](https://github.com/containerd/containerd/pull/8825)) - **Port-Forward: Correctly handle known errors** ([#8806](https://github.com/containerd/containerd/pull/8806)) - **Resolve docker.NewResolver race condition** ([#8799](https://github.com/containerd/containerd/pull/8799)) - **Fix net.ipv4.ping_group_range with userns** ([#8786](https://github.com/containerd/containerd/pull/8786)) - **Runtime/V2/RunC: handle early exits w/o big locks** ([#8712](https://github.com/containerd/containerd/pull/8712)) - **SecComp: always allow name_to_handle_at** ([#8753](https://github.com/containerd/containerd/pull/8753)) - **CRI: Windows Pod Stats: Add a check to skip stats for containers that are not running** ([#8654](https://github.com/containerd/containerd/pull/8654)) - **Task: don't `close()` io before `cancel()`** ([#8658](https://github.com/containerd/containerd/pull/8658)) - **Remove CNI conf_template deprecation** ([#8638](https://github.com/containerd/containerd/pull/8638)) - **Fix issue for HPC pod metrics** ([#8634](https://github.com/containerd/containerd/pull/8634)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Phil Estes - Sebastiaan van Stijn - Wei Fu - Derek McGowan - Kazuyoshi Kato - Austin Vazquez - Samuel Karp - Shingo Omura - Jin Dong - Maksym Pavlenko - Aditi Sharma - Danny Canter - James Sturtevant - Laura Brehm - Rodrigo Campos - Akhil Mohan - Andrey Epifanov - Bjorn Neergaard - Cory Snider - Madhav Jivrajani - Mahamed Ali - Priyanka Saggu - Qasim Sarfraz - wangxiang - zounengren ##### Changes <details><summary>63 commits</summary> - \[release/1.7] Prepare release notes for v1.7.3 ([#8871](https://github.com/containerd/containerd/pull/8871)) - [`4cb2f1515`](https://github.com/containerd/containerd/commit/4cb2f1515a39a8a6b704b74e58b96f8a1ef9840c) \[release/1.7] Add release notes for v1.7.3 - \[release/1.7] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8869](https://github.com/containerd/containerd/pull/8869)) - [`b461ecacf`](https://github.com/containerd/containerd/commit/b461ecacfa155befd259877e04b9835bdd04e0d9) cri: memory.memsw.limit_in_bytes: no such file or directory - \[release/1.7] migrate to community owned bucket for node e2e tests ([#8875](https://github.com/containerd/containerd/pull/8875)) - [`14328ae03`](https://github.com/containerd/containerd/commit/14328ae03b51ade0512496e3a4b0c2bf33ca5ffd) migrate to community owned bucket - \[release/1.7 backport] update runc binary to v1.1.8 ([#8843](https://github.com/containerd/containerd/pull/8843)) - [`b985f7ef1`](https://github.com/containerd/containerd/commit/b985f7ef15b6dbb6d5ea302584dcfe491b99d70c) update runc binary to v1.1.8 - \[release/1.7 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8824](https://github.com/containerd/containerd/pull/8824)) - [`083f57160`](https://github.com/containerd/containerd/commit/083f571609a83be94785b77a822aa7c332eeabfd) capture desc variable in range variable just in case that it run in parallel mode - [`a9440ce6b`](https://github.com/containerd/containerd/commit/a9440ce6b5a150be998c70549984b508231a6dbe) Use t.TempDir instead of os.MkdirTemp - [`eea3440d8`](https://github.com/containerd/containerd/commit/eea3440d899f6ce74fca5257dcc53e6cecc4fce4) use strings.Cut instead of strings.Split for parsing imageConfig.User - [`eace67180`](https://github.com/containerd/containerd/commit/eace671808e39d351c54e917fed86a58b92fe43b) fix userstr for dditionalGids on Linux - \[release/1.7 backport] cri: write generated CNI config atomically ([#8825](https://github.com/containerd/containerd/pull/8825)) - [`7353c0286`](https://github.com/containerd/containerd/commit/7353c02869507eb28e571125db05c7597bf92f27) ctr: update WritePidFile to use atomicfile - [`ae7021300`](https://github.com/containerd/containerd/commit/ae70213003a84301ff7dc171569e8ab3adffca35) shim: WritePidFile & WriteAddress use atomicfile - [`186eb64b7`](https://github.com/containerd/containerd/commit/186eb64b7c7a0fbef9c1b11837056ecb2e130d38) cri: write generated CNI config atomically on Unix - [`64c3dcd8e`](https://github.com/containerd/containerd/commit/64c3dcd8e25ae02f6803d4131cb3e40c0c2849c7) atomicfile: new package for atomic file writes - \[release/1.7 backport] Move logrus setup code to log package ([#8831](https://github.com/containerd/containerd/pull/8831)) - [`f7a20e17c`](https://github.com/containerd/containerd/commit/f7a20e17c3e96324cdf83388be289c4c2db1ba55) Move logrus setup code to log package - \[release/1.7 backport] Cirrus CI: configure apt-get to wait for locks ([#8814](https://github.com/containerd/containerd/pull/8814)) - [`60a6db9c2`](https://github.com/containerd/containerd/commit/60a6db9c2627018aef6484d6ca5898a09aa9888e) Cirrus CI: configure apt-get to wait for locks - \[release/1.7 backport] Update Go to 1.20.6,1.19.11 ([#8815](https://github.com/containerd/containerd/pull/8815)) - [`973778193`](https://github.com/containerd/containerd/commit/973778193b54a73b6975388efbdfcbbd33ca3212) Update Go to 1.20.6,1.19.11 - \[release/1.7 backport] update go to go1.20.5, go1.19.10 ([#8716](https://github.com/containerd/containerd/pull/8716)) - [`403033e52`](https://github.com/containerd/containerd/commit/403033e52782716aa444d8d43a5c7e25efdfd4e5) update go to go1.20.5, go1.19.10 - \[release/1.7 backport] bugfix(port-forward): Correctly handle known errors ([#8806](https://github.com/containerd/containerd/pull/8806)) - [`6b6b0c828`](https://github.com/containerd/containerd/commit/6b6b0c828051ecafc0653e271cda8cab2cbd59bd) bugfix(port-forward): Correctly handle known errors - \[release/1.7] Resolve docker.NewResolver race condition ([#8799](https://github.com/containerd/containerd/pull/8799)) - [`898eca21e`](https://github.com/containerd/containerd/commit/898eca21e3c7d12351c26891b1813dd51a423e82) Change http.Header copy to builtin Clone - [`fa2efc406`](https://github.com/containerd/containerd/commit/fa2efc406f09950b466ff3f5d00a5b0a924ef738) Resolve docker.NewResolver race condition - \[release/1.7] Fix net.ipv4.ping_group_range with userns ([#8786](https://github.com/containerd/containerd/pull/8786)) - [`241514815`](https://github.com/containerd/containerd/commit/241514815d278865199a701f23b83a20efe169be) pkg/cri/server: Test net.ipv4.ping_group_range works with userns - [`801e8c806`](https://github.com/containerd/containerd/commit/801e8c8069c4613de305c756c0f497f271ef3648) pkg/cri/server: Fix net.ipv4.ping_group_range with userns - \[release/1.7 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8782](https://github.com/containerd/containerd/pull/8782)) - [`d5639a5a8`](https://github.com/containerd/containerd/commit/d5639a5a867c45a0c6c5b4f2e65e7ebda0aa02ff) vendor: github.com/containerd/zfs v1.1.0 - \[release/1.7 backport] ci: remove libseccomp-dev installation for nightly ([#8772](https://github.com/containerd/containerd/pull/8772)) - [`15d65709e`](https://github.com/containerd/containerd/commit/15d65709ee8f239de6b908026a51481eaeab6066) ci: remove libseccomp-dev installation for nightly - \[release/1.7] go.mod: Update cgroups to 3.0.2 ([#8769](https://github.com/containerd/containerd/pull/8769)) - [`a08ae718c`](https://github.com/containerd/containerd/commit/a08ae718c47ed2069ab077fc99b4951776fc41ff) \[release/1.7] go.mod: Update cgroups to 3.0.2 - \[release/1.7 backport] runtime/v2/runc: handle early exits w/o big locks ([#8712](https://github.com/containerd/containerd/pull/8712)) - [`18c6503d9`](https://github.com/containerd/containerd/commit/18c6503d98f4de37ebbd39443bde958d8b6dc367) runtime/v2/runc: handle early exits w/o big locks - \[release/1.7 backport] integration/client: add timeout to `TestShimOOMScore` ([#8750](https://github.com/containerd/containerd/pull/8750)) - [`3bf3996d9`](https://github.com/containerd/containerd/commit/3bf3996d921c7466ad194ef5ac26bbddb3a89a33) integration/client: add timeout to `TestShimOOMScore` - \[release/1.7 backport] Update ginkgo to match cri-tools' version ([#8760](https://github.com/containerd/containerd/pull/8760)) - [`c2c54af9d`](https://github.com/containerd/containerd/commit/c2c54af9ddff6f26cc5ebefb2634ed5ca4cf15c3) Update ginkgo to match cri-tools' version - \[release/1.7 backport] seccomp: always allow name_to_handle_at ([#8753](https://github.com/containerd/containerd/pull/8753)) - [`6281d46df`](https://github.com/containerd/containerd/commit/6281d46df9cc1df891ef1ca68b3e1a2b11dd96cd) seccomp: always allow name_to_handle_at - \[release/1.7] Pinned image support ([#8718](https://github.com/containerd/containerd/pull/8718)) - [`699d6701a`](https://github.com/containerd/containerd/commit/699d6701ae17bd3c12a7f86f5d9470cedf210169) Pinned image support - \[release/1.7] cherry-pick: No more nondistributable layers in MS registry ([#8690](https://github.com/containerd/containerd/pull/8690)) - [`dafbeb5b1`](https://github.com/containerd/containerd/commit/dafbeb5b1ffdaa6c227fddeacf2b39816e61660f) No more nondistributable layers in MS registry - \[release/1.7] \[cri] Windows Pod Stats: Add a check to skip stats for containers that are not running ([#8654](https://github.com/containerd/containerd/pull/8654)) - [`58b6b99cd`](https://github.com/containerd/containerd/commit/58b6b99cd6fde4f173df25c09b20682e29acebf5) Add a check to skip stats for containers that are not running - \[release/1.7 backport] task: don't `close()` io before `cancel()` ([#8658](https://github.com/containerd/containerd/pull/8658)) - [`e5b2a0131`](https://github.com/containerd/containerd/commit/e5b2a0131ba26b4366957bea07c67c171a11f52a) task: don't `close()` io before `cancel()` - \[release/1.7 backport] move to CRI-TOOLS v1.27.0 ([#8656](https://github.com/containerd/containerd/pull/8656)) - [`a6a15afe3`](https://github.com/containerd/containerd/commit/a6a15afe3e9dd2de89ddf0c1bdde73b42ae9720d) move to CRI-TOOLS v1.27.0 - \[release/1.7] Remove cni conf_template deprecation ([#8638](https://github.com/containerd/containerd/pull/8638)) - [`0b2b96479`](https://github.com/containerd/containerd/commit/0b2b9647992dc4238e2a7d98c721dacb6cf753bf) RELEASES.md: de-deprecation of CNI conf_template will be v1.7.3 - [`a24267b28`](https://github.com/containerd/containerd/commit/a24267b28973821c3056b43270362bec5b8471ec) Remove cni conf_template deprecation - \[release/1.7] Fix issue for HPC pod metrics ([#8634](https://github.com/containerd/containerd/pull/8634)) - [`89415fe36`](https://github.com/containerd/containerd/commit/89415fe36162576fb88b0fd7c117238834f2c967) Fix issue for HPC pod metrics </details> ##### Changes from containerd/zfs <details><summary>49 commits</summary> - gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75)) - [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir() - [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges - [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73)) - [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 - gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74)) - [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin - [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2 - Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72)) - [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 - Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69)) - [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 - Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67)) - [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow - Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66)) - [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow - Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68)) - [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies - [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19 - Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65)) - [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package - Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62)) - [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version - [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest - go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59)) - [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0 - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58)) - [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 - Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57)) - [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55)) - [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 - Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54)) - [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 - [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53)) - [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf - replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52)) - [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors - Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51)) - [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 - Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50)) - [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2 - Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49)) - [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main - sync up with containerd 1.5 GA ([#47](https://github.com/containerd/zfs/pull/47)) - [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga - README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46)) - [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge </details> ##### Dependency Changes - **github.com/containerd/cgroups/v3** v3.0.1 -> v3.0.2 - **github.com/containerd/zfs** v1.0.0 -> v1.1.0 - **github.com/mistifyio/go-zfs/v3** v3.0.1 ***new*** Previous release can be found at [v1.7.2](https://github.com/containerd/containerd/releases/tag/v1.7.2) ### [`v1.7.2`](https://github.com/containerd/containerd/releases/tag/v1.7.2): containerd 1.7.2 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.1...v1.7.2) Welcome to the v1.7.2 release of containerd! The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode, Windows snapshot mounting support, and CRI and container IO bug fixes. ##### CRI/Sandbox Updates - **Publish sandbox events** ([#8613](https://github.com/containerd/containerd/pull/8613)) - **Make stats respect sandbox's platform** ([#8604](https://github.com/containerd/containerd/pull/8604)) ##### Other Notable Updates - **Mount snapshots on Windows** ([#8616](https://github.com/containerd/containerd/pull/8616)) - **Notify readiness when registered plugins are ready** ([#8584](https://github.com/containerd/containerd/pull/8584)) - **Fix cio.Cancel() should close pipes** ([#8624](https://github.com/containerd/containerd/pull/8624)) - **CDI: Use CRI Config.CDIDevices field for CDI injection** ([#8519](https://github.com/containerd/containerd/pull/8519)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Gabriel Adrian Samfira - Derek McGowan - Paul "TBBle" Hampson - Maksym Pavlenko - Phil Estes - Austin Vazquez - Akihiro Suda - Kazuyoshi Kato - Danny Canter - Samuel Karp - Sebastiaan van Stijn - Ed Bartosh - Henry Wang - Hsing-Yu (David) Chen - Jan Dubois - Mike Brown - Wei Fu - helen ##### Changes <details><summary>59 commits</summary> - \[release/1.7] Prepare release notes for v1.7.2 ([#8629](https://github.com/containerd/containerd/pull/8629)) - [`0e41daaea`](https://github.com/containerd/containerd/commit/0e41daaeabefcf7c61034024b4507ceee139761b) \[release/1.7] Prepare release notes for v1.7.2 - \[1.7 backport] Fix panic when remote differ returns empty result ([#8631](https://github.com/containerd/containerd/pull/8631)) - [`e134b6393`](https://github.com/containerd/containerd/commit/e134b639396ab07513fecfa221fc4ad8634b2154) Fix panic when remote differ returns empty result - \[release/1.7 backport] Mount snapshots on Windows ([#8616](https://github.com/containerd/containerd/pull/8616)) - [`313c226b8`](https://github.com/containerd/containerd/commit/313c226b8b9c30995b90d9a6535b2972707afbd4) Update continuity to a tagged version - [`8dd16285a`](https://github.com/containerd/containerd/commit/8dd16285a0558c56255f7d88a509d0e8d930efe3) UnmountAll is a no-op for missing mount points - [`acff3eefa`](https://github.com/containerd/containerd/commit/acff3eefa69b6d0238062396fb91df5cfb699603) Improve error messages and remove check - [`b4dd3bf4e`](https://github.com/containerd/containerd/commit/b4dd3bf4e291b6be928de1be272740c6a9f2dd3e) Make ReadOnly() available on all platforms - [`08d8baf3f`](https://github.com/containerd/containerd/commit/08d8baf3f4d82d5917e8acc94e50d25b4d7d6500) Increase integration test tmieout to 20m - [`1f0dbd011`](https://github.com/containerd/containerd/commit/1f0dbd011ae5b635039646f29bba2e0b288d95ca) Remove bind code path in mount() - [`8f37b1c63`](https://github.com/containerd/containerd/commit/8f37b1c63712aefeef8e3c357e85ebde8f670ba8) Remove "bind" code path from diff - [`9139208b3`](https://github.com/containerd/containerd/commit/9139208b319828e0cafe8110743fa455dc3b75f1) Properly mount base layers - [`e61e7b312`](https://github.com/containerd/containerd/commit/e61e7b31263ca717d2ff00b37abdc83ff0f5346f) Skip parent layer options on bind mounts - [`e4307926f`](https://github.com/containerd/containerd/commit/e4307926f327e35cc5fcd012ac4854cf85cbee07) Add ReadOnly() function - [`0277b9b01`](https://github.com/containerd/containerd/commit/0277b9b01a4992ba315f379ca599bf080dd6495b) Remove escalated privileges - [`d5c18dfb7`](https://github.com/containerd/containerd/commit/d5c18dfb7ed449e0232ccafcc6f4cb9a2473221d) Use DefaultSnapshotter - [`853179366`](https://github.com/containerd/containerd/commit/853179366b2aa7bebd17903faa0ada9dcf9297cc) use t.Fatal if we cannot enable process privileges - [`5b3ee413f`](https://github.com/containerd/containerd/commit/5b3ee413f49fac47017cfacf09176e9701052096) Update continuity - [`375172604`](https://github.com/containerd/containerd/commit/375172604df61e312810efbb7fc0080df5a0ab2c) Fix go.mod, simplify boolean logic, add logging - [`600abd137`](https://github.com/containerd/containerd/commit/600abd13791fcc6b3dd23c7f78f8c8c796340e33) Ignore ERROR_NOT_FOUND error when removing mount - [`df7295dcd`](https://github.com/containerd/containerd/commit/df7295dcdf00839423109ac65b1dc9429f632e00) Update continuity, go-winio and hcsshim - [`0db78c482`](https://github.com/containerd/containerd/commit/0db78c48269f54b9335183b2b0d7b6138253e9e5) Remove unused function - [`219058766`](https://github.com/containerd/containerd/commit/2190587661ded992f2b0a55a08e3201b93e0b5a2) Grant needed privileges for snapshotter tests - [`96fbe5bc8`](https://github.com/containerd/containerd/commit/96fbe5bc882658780ca36499a0e0a79d095b83e8) Fix layer comparison and enable read-only checks - [`279e0d3c9`](https://github.com/containerd/containerd/commit/279e0d3c9ab199458387b670c19301a94dac8032) Use bind filer for mounts - [`93e94da40`](https://github.com/containerd/containerd/commit/93e94da4084f3fbe2d89f3145a8e56c8c24dc458) Enable TestSnapshotterClient on Windows - [`3a3da693a`](https://github.com/containerd/containerd/commit/3a3da693aee68afdc84ca42c0191cee88ee9c21f) Run Windows snapshotter through the test suite - [`e7b62322f`](https://github.com/containerd/containerd/commit/e7b62322f9218387e6f715442b2235c9feec2e01) Fix misspelling of 'Native' as 'Naive' - [`e1f999a18`](https://github.com/containerd/containerd/commit/e1f999a1827242a31fa85cbb4a44ee31eeebfb30) Add paired 'mount' log for 'unmount' - [`5788d6e52`](https://github.com/containerd/containerd/commit/5788d6e520cef08aaf2d15ceaf5c4c6b1ce735e6) Don't use all-upper-case filenames in snapshot tests - [`3cdcb2f10`](https://github.com/containerd/containerd/commit/3cdcb2f1088eab8d18075b0549ae59688bf15792) Skip tests that do not apply to WCOW on Windows - [`b0968b8bb`](https://github.com/containerd/containerd/commit/b0968b8bb920c99d341cb212bde9a4d15c050dfc) Ensure mounts are unmounted before leaving the test - [`b57424851`](https://github.com/containerd/containerd/commit/b57424851cc56745d677ee41e0d5a02dde29bc41) Unify testutil.Unmount on Windows and Unix - [`b9a8aad45`](https://github.com/containerd/containerd/commit/b9a8aad45149c40c8b5c327657a5320de29231c5) Implement Windows mounting for bind and windows-layer mounts - [`1a64ee183`](https://github.com/containerd/containerd/commit/1a64ee1835544d37903f667415c821526200ed8b) Implement WCOW parentless active snapshots and view snapshots - \[release/1.7] fix: cio.Cancel() should close the pipes ([#8624](https://github.com/containerd/containerd/pull/8624)) - [`99582fb1a`](https://github.com/containerd/containerd/commit/99582fb1a32e9d051585219d11146afb07805abf) fix: cio.Cancel() should close the pipes - \[release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8621](https://github.com/containerd/containerd/pull/8621)) - [`eeda70fb0`](https://github.com/containerd/containerd/commit/eeda70fb04814f240c7e5d0f59a6369b1fdae69e) remotes/docker: ResolverOptions: fix deprecation comments - \[release/1.7] Publish sandbox events ([#8613](https://github.com/containerd/containerd/pull/8613)) - [`e21c8beee`](https://github.com/containerd/containerd/commit/e21c8beee6c07fd289af2cf0011e0aa8156882e4) Post cherry-pick fixes - [`246240f71`](https://github.com/containerd/containerd/commit/246240f71ce2adcfc5b161343f21a72fa32c1273) Move PLEG event back to CRI - [`16f3726dd`](https://github.com/containerd/containerd/commit/16f3726dd61ba8fa71d04957681b53a14cc5b055) Generate sandbox exit events from CRI - [`0c8cfb1a7`](https://github.com/containerd/containerd/commit/0c8cfb1a7c0f852842016ad0805bf8a121ede970) Move pod sandbox recovery to podsandbox/ package - [`91d9f5c64`](https://github.com/containerd/containerd/commit/91d9f5c643c4bc6d44964c161a56eb04201fc885) Publish sandbox events - [`4b77683b4`](https://github.com/containerd/containerd/commit/4b77683b46182fcdf756509767660389d2eb7169) Add sandbox events protos - \[release/1.7] notify readiness when registered plugins are ready ([#8584](https://github.com/containerd/containerd/pull/8584)) - [`2c38cad77`](https://github.com/containerd/containerd/commit/2c38cad77cdb2644ebf8f56a2e3f094344ef0f41) notify readiness when registered plugins are ready - \[release/1.7] Backport CRI sandbox server stats changes ([#8604](https://github.com/containerd/containerd/pull/8604)) - [`7851b0a9f`](https://github.com/containerd/containerd/commit/7851b0a9f27c6a2223538abe05bf23edbd790fca) CRI: Make stats respect sandbox's platform - [`8d7c340ca`](https://github.com/containerd/containerd/commit/8d7c340ca8cb83fda1f02e443a1fdebd04df4bd5) \[sbserver] handle missing cpu stats - [`d08b2a088`](https://github.com/containerd/containerd/commit/d08b2a088c4446ee9bb3af6b431f7969d6a8c07e) \[sbserver] Refactor usageNanoCores be to used for all OSes - \[release/1.7] Cherry-pick: Update volume-ownership image with latest hashes ([#8574](https://github.com/containerd/containerd/pull/8574)) - [`08de6e7b8`](https://github.com/containerd/containerd/commit/08de6e7b8c80e8815002eecc778c422764e87e13) Update volume-ownership image with latest hashes - \[release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection ([#8519](https://github.com/containerd/containerd/pull/8519)) - [`6a5e54c15`](https://github.com/containerd/containerd/commit/6a5e54c15a38b90fbfa2c6a8ce9ef1fb26037c7c) Get CDI devices from CRI Config.CDIDevices field - \[release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility ([#8510](https://github.com/containerd/containerd/pull/8510)) - [`9e60300ea`](https://github.com/containerd/containerd/commit/9e60300ea0b1635d8d7798fc99c824cab82926f3) snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility </details> ##### Changes from containerd/continuity <details><summary>31 commits</summary> - Fall back to Copyfile when Clonefile detects a cross-device request ([#225](https://github.com/containerd/continuity/pull/225)) - [`7df79f5`](https://github.com/containerd/continuity/commit/7df79f562b5757ce7953302d8b80017a60dfaedf) Fall back to Copyfile when Clonefile detects a cross-device request - Support darwin clonefile ([#223](https://github.com/containerd/continuity/pull/223)) - [`30cf84d`](https://github.com/containerd/continuity/commit/30cf84dfb5e0d30120e388e2e2481adad18ea27a) Add support for Darwin clonefile - [`ebdd069`](https://github.com/containerd/continuity/commit/ebdd069b5520106abe138eee143fb310df314afd) Add copy benchmark - Update golang.org/x/sys to v0.1.0 ([#222](https://github.com/containerd/continuity/pull/222)) - [`2db84b9`](https://github.com/containerd/continuity/commit/2db84b9393154fccd9c968665b00255c688a7d00) Update golang.org/x/sys to v0.1.0 - Enable tests for all platforms ([#220](https://github.com/containerd/continuity/pull/220)) - [`b449cd0`](https://github.com/containerd/continuity/commit/b449cd0f764c0dc97ed496c2d3b5f8d673c6b7a6) Fix tests on Windows - [`eb05879`](https://github.com/containerd/continuity/commit/eb058795cb5ebba43e2a0a33f540bbc2c37945c4) Fix Darwin tests - [`9cd17be`](https://github.com/containerd/continuity/commit/9cd17bee62e96e79fd579ef64d86b86ec6ac6cc8) Enable tests for all platforms - Add more Windows metadata files ([#219](https://github.com/containerd/continuity/pull/219)) - [`cdfbe61`](https://github.com/containerd/continuity/commit/cdfbe61803aad33055dce1b557b2bdf323860244) Add more Windows metadata files - atomicWriteFile: file defer close ([#213](https://github.com/containerd/continuity/pull/213)) - [`9eb2a49`](https://github.com/containerd/continuity/commit/9eb2a492babfeb69786473a95a5de4bbc249c71d) atomicWriteFile: file defer close - Update GitHub Actions runner images ([#216](https://github.com/containerd/continuity/pull/216)) - [`ad9c903`](https://github.com/containerd/continuity/commit/ad9c9033bc0d70f0c8ec837cd7cc5a237aa53503) Update GitHub Actions runner images - Add CodeQL security scan workflow ([#215](https://github.com/containerd/continuity/pull/215)) - [`c8de034`](https://github.com/containerd/continuity/commit/c8de034f336e5434007cf541f850a2289463dae9) Add CodeQL security scan workflow - Add Go 1.20 support to CI ([#214](https://github.com/containerd/continuity/pull/214)) - [`be62cc1`](https://github.com/containerd/continuity/commit/be62cc19f81856e329418bf36084ba7dade19af6) Add Go 1.20 support to CI - Add paths to windows metadataFiles ([#212](https://github.com/containerd/continuity/pull/212)) - [`68f7b34`](https://github.com/containerd/continuity/commit/68f7b34f5e115fe81b09971f79bf59897805e99c) Add paths to windows metadataFiles - Remove references to io/ioutil package ([#211](https://github.com/containerd/continuity/pull/211)) - [`e22f001`](https://github.com/containerd/continuity/commit/e22f0013e31f7d7acfdfdfe03c3fc216cd7814c7) Remove references to io/ioutil package - Update GitHub actions CI workflow ([#210](https://github.com/containerd/continuity/pull/210)) - [`1c3fa33`](https://github.com/containerd/continuity/commit/1c3fa33439810d944467f2cf3a4b61be3b048296) Update GitHub actions CI workflow - format code with gofumpt ([#209](https://github.com/containerd/continuity/pull/209)) - [`f5d245e`](https://github.com/containerd/continuity/commit/f5d245e404beb0f7e0403288f4bf0bff7b1c26b4) format code with gofumpt - Correctly ignore error wrapping `ErrNotSupported` ([#207](https://github.com/containerd/continuity/pull/207)) - [`1ee38b5`](https://github.com/containerd/continuity/commit/1ee38b500a97d2b2eaac33a002dabf7b25886c22) Correctly ignore error wrapping ErrNotSupported </details> ##### Dependency Changes - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 Previous release can be found at [v1.7.1](https://github.com/containerd/containerd/releases/tag/v1.7.1) ### [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1): containerd 1.7.1 [Compare Source](https://github.com/containerd/containerd/compare/v1.7.0...v1.7.1) Welcome to the v1.7.1 release of containerd! The first patch release for containerd 1.7 includes many fixes to CRI sandbox mode, various other fixes, runc update, and important fixes in core dependencies such as ttrpc and typeurl. ##### CRI/Sandbox Updates - **Throw not supported error when UID or GID mappings provided** ([#8211](https://github.com/containerd/containerd/pull/8211)) - **Cleanup shim on start failure** ([#8282](https://github.com/containerd/containerd/pull/8282)) - **Fix premature close of CRI service when there are no CNI configuration monitors** ([#8282](https://github.com/containerd/containerd/pull/8282)) - **Avoid UID lookup from mount on Darwin** ([#8314](https://github.com/containerd/containerd/pull/8314)) - **Keep Linux mounts for Linux sandboxes on non-Linux hosts** ([#8331](https://github.com/containerd/containerd/pull/8331)) - **Add `noexec`,`nodev`,`nosuid` to `/etc/resolv.conf` bind mount** ([#8336](https://github.com/containerd/containerd/pull/8336)) - **Remove entry for container from container store on error** ([#8457](https://github.com/containerd/containerd/pull/8457)) - **Fix unmarshal in container metrics** ([#8472](https://github.com/containerd/containerd/pull/8472)) ##### Other Notable Updates - **Use readonly for temporary mounts** ([#8300](https://github.com/containerd/containerd/pull/8300) [#8358](https://github.com/containerd/containerd/pull/8358)) - **Fix skip docker manifest option on image exporter** ([#8344](https://github.com/containerd/containerd/pull/8344)) - **Update runc binary to v1.1.7** ([#8451](https://github.com/containerd/containerd/pull/8451)) - **Fix runtime path task option** ([#8453](https://github.com/containerd/containerd/pull/8453)) - **Fix panic from nil checkpoint options** ([#8475](https://github.com/containerd/containerd/pull/8475)) - **Fix transfer service configuration options** ([#8491](https://github.com/containerd/containerd/pull/8491)) - **Fix server-side goroutine leak on receive message error** ([ttrpc#141](https://github.com/containerd/ttrpc/pull/141)) - **Fix panic caused by race to close send channel** ([ttrpc#140](https://github.com/containerd/ttrpc/pull/140)) - **Fix unmarshal to return non-nil object when nil value** ([ttrpc#140](https://github.com/containerd/typeurl/pull/41)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Sebastiaan van Stijn - Akihiro Suda - Iceber Gu - Phil Estes - Maksym Pavlenko - Wei Fu - Danny Canter - Kirtana Ashok - Rodrigo Campos - Samuel Karp - Vinayak Goyal - Austin Vazquez - Justin Chadwell - Kazuyoshi Kato - Brad Davidson - Djordje Lukic - Ethan Lowman - Laura Brehm - Michael Crosby ##### Changes <details><summary>68 commits</summary> - \[release/1.7] Prepare release notes for v1.7.1 ([#8501](https://github.com/containerd/containerd/pull/8501)) - [`27a0d957b`](https://github.com/containerd/containerd/commit/27a0d957be722eaaf34cdcc9c9a5b47d843b7a9c) Prepare release notes for v1.7.1 - \[release/1.7] Update ttrpc v1.2.2 ([#8499](https://github.com/containerd/containerd/pull/8499)) - [`7b288e2d7`](https://github.com/containerd/containerd/commit/7b288e2d77d323cf07a210a9ed02f62235e6f41e) Update ttrpc to v1.2.2 - \[release/1.7] runtime/shim: fix the nil checkpoint options ([#8475](https://github.com/containerd/containerd/pull/8475)) - [`3ef5b689a`](https://github.com/containerd/containerd/commit/3ef5b689a7b7f6bb670ad59345c290114e5e29ef) runtime/shim: fix the nil checkpoint options - \[release/1.7] bump typeurl to v2.1.1 ([#8495](https://github.com/containerd/containerd/pull/8495)) - [`0e0532eb2`](https://github.com/containerd/containerd/commit/0e0532eb28eb8a1f5d34e89f6ba94eba684c8be1) bump typeurl to v2.1.1 - \[release/1.7] Transfer service backports ([#8491](https://github.com/containerd/containerd/pull/8491)) - [`35e86f96c`](https://github.com/containerd/containerd/commit/35e86f96c24da795b3977f181b16a493a7400fdb) \[transfer] avoid setting limiters when max is 0 - [`f7233811f`](https://github.com/containerd/containerd/commit/f7233811f6fb2d521e65ecf5b156f82a1aba2f91) Update transfer configuration - [`4510eac00`](https://github.com/containerd/containerd/commit/4510eac009eb066501761a1dae05d4e126ef88e0) Fix image pulling with Transfer service - \[release/1.7]Update hcsshim tag to v0.10.0-rc.8 ([#8480](https://github.com/containerd/containerd/pull/8480)) - [`aaa65e8c1`](https://github.com/containerd/containerd/commit/aaa65e8c1461ae7187357ea6b7f2807667eada6e) Update hcsshim tag to v0.10.0-rc.8 - \[release/1.7] cri: Fix umarshal metrics ([#8472](https://github.com/containerd/containerd/pull/8472)) - [`95ef67e19`](https://github.com/containerd/containerd/commit/95ef67e19552aaec3618cdfa06d6d3ffb57d085b) Fix umarshal metrics for CRI server - \[release/1.7 backport] update go to go1.20.4, go1.19.9 ([#8471](https://github.com/containerd/containerd/pull/8471)) - [`021bba28b`](https://github.com/containerd/containerd/commit/021bba28b50e445c4a0a8e79b458db7116dc50e7) update go to go1.20.4, go1.19.9 - \[release/1.7] fix the task setting the runtime path ([#8453](https://github.com/containerd/containerd/pull/8453)) - [`c0e128624`](https://github.com/containerd/containerd/commit/c0e128624a8d6a02bb7d2ab3d29369f54791b68e) skip TestContainerStartWithAbsRuntimePath if the runtime is v1 - [`aa3c63c15`](https://github.com/containerd/containerd/commit/aa3c63c15f379eec906cb89f7e1204a42a5d1317) integration: add container start test using abs runtime path - [`d2d9eedb1`](https://github.com/containerd/containerd/commit/d2d9eedb1d1b2d047fbdd847ce7c67724f27bde4) WithRuntimePath uses the TaskInfo.RuntimePath field - \[release/1.7] Remove entry for container from container store on error ([#8457](https://github.com/containerd/containerd/pull/8457)) - [`6b3ae0129`](https://github.com/containerd/containerd/commit/6b3ae01297d2cb39c8018fc783751baba513b390) Remove entry for container from container store on error - \[release/1.7 backport] update runc binary to v1.1.7 ([#8451](https://github.com/containerd/containerd/pull/8451)) - [`fae4b6223`](https://github.com/containerd/containerd/commit/fae4b6223a597cf456b63c4272ed85f625eef9f0) update runc binary to v1.1.7 - \[release/1.7] cri: Vendor v0.27.1 ([#8444](https://github.com/containerd/containerd/pull/8444)) - [`571715a9d`](https://github.com/containerd/containerd/commit/571715a9df043d0f75d16dcc17fd0c2c41999290) cri: Vendor v0.27.1 - \[release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8404](https://github.com/containerd/containerd/pull/8404)) - [`1bbf98e53`](https://github.com/containerd/containerd/commit/1bbf98e53ec77bad5dabc2a762f4407e99f527c9) oci: partially restore comment on read-only mounts for uid/gid uses - \[release/1.7] Fix argsEscaped tests ([#8405](https://github.com/containerd/containerd/pull/8405)) - [`a6d336c1f`](https://github.com/containerd/containerd/commit/a6d336c1f6674c2b342d65ca78fba7fac955eaf1) Fix argsEscaped tests - \[release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings ([#8211](https://github.com/containerd/containerd/pull/8211)) - [`7de8629be`](https://github.com/containerd/containerd/commit/7de8629be0e62c4d8164cd873baf14b64bcbb90b) cri: Throw an error if idmap mounts is requested - [`75ac7e0d8`](https://github.com/containerd/containerd/commit/75ac7e0d8200539ff444b952bc060ffa23582a87) cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings - \[release/1.7] go.mod: remove redundant replace, and some cleaning-up ([#8396](https://github.com/containerd/containerd/pull/8396)) - [`8f6e86fec`](https://github.com/containerd/containerd/commit/8f6e86fecad5c11871df20e516ae181d7abf4a7c) go.mod: add comment explaining go-fuzz-headers replace rule - [`1ece0cb50`](https://github.com/containerd/containerd/commit/1ece0cb50f7f2f6fc9c59a76ae49227a84a92f1e) go.mod: remove replace for github.com/opencontainers/runtime-tools - [`e9f962187`](https://github.com/containerd/containerd/commit/e9f96218795ef6a527fc8cac550ae90b9b09fe5c) go.mod: integration: use non-pre-release of containerd - [`84393b005`](https://github.com/containerd/containerd/commit/84393b005f76c085ad62c62dff980dc13d13b131) go.mod: integration: move indirect dependencies to the right group - \[release/1.7 backport] update runc binary to v1.1.6 ([#8386](https://github.com/containerd/containerd/pull/8386)) - [`dec2595af`](https://github.com/containerd/containerd/commit/dec2595afe92800fbf8e4e506398b00ff532332f) update runc binary to v1.1.6 - \[release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8358](https://github.com/containerd/containerd/pull/8358)) - [`54d12b872`](https://github.com/containerd/containerd/commit/54d12b872132d56feca792051abdce87a2077988) oci: Use WithReadonlyTempMount when adding users/groups - \[release/1.7 backport] update go to go1.20.3, go1.19.8 ([#8354](https://github.com/containerd/containerd/pull/8354)) - [`624327651`](https://github.com/containerd/containerd/commit/6243276515454617f58eafaa85352b6e6fcac96e) update go to go1.20.3, go1.19.8 - \[release/1.7] archive: consistently respect value of WithSkipDockerManifest ([#8344](https://github.com/containerd/containerd/pull/8344)) - [`1d6641b7c`](https://github.com/containerd/containerd/commit/1d6641b7c92d8854548c7a07bdaa07979ad0eb68) export: add test for WithSkipDockerManifest - [`0e0d84f6b`](https://github.com/containerd/containerd/commit/0e0d84f6bb7a0226480dd5ead7c894175d2edcc8) archive: consistently respect value of WithSkipDockerManifest - \[release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. ([#8336](https://github.com/containerd/containerd/pull/8336)) - [`9b4935d86`](https://github.com/containerd/containerd/commit/9b4935d86436419670febe9695787a3aaf5ceeb7) Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind. - [`5e953cfa6`](https://github.com/containerd/containerd/commit/5e953cfa62abb90b2c4dc775907cbb276637bfe8) Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount. - [`0aad93f08`](https://github.com/containerd/containerd/commit/0aad93f08ca4da8f33ad709dbe49593f6ff5c59c) Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. - \[release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 ([#8335](https://github.com/containerd/containerd/pull/8335)) - [`1a64f1b43`](https://github.com/containerd/containerd/commit/1a64f1b4341ebda4b8f8cf67cac543394a10a4c3) ctr/tasks: fix unmarshal the task metrics for cgroups v1 - \[release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin ([#8331](https://github.com/containerd/containerd/pull/8331)) - [`17c52a26d`](https://github.com/containerd/containerd/commit/17c52a26d63d6105e9918fb2d90ff346e4e4c463) Keep linux mounts for linux sandboxes on Windows/Darwin - \[release/1.7] update runc binary to v1.1.5 ([#8325](https://github.com/containerd/containerd/pull/8325)) - [`d81fc15af`](https://github.com/containerd/containerd/commit/d81fc15affe09dbb621be16bda805801a98cab4b) update runc binary to v1.1.5 - [`755efbe64`](https://github.com/containerd/containerd/commit/755efbe6402acdaf5832e36b7c6f4e15cc2a406d) go.mod: github.com/opencontainers/runc v1.1.5 - \[backport 1.7] Defer uid lookups on Darwin ([#8314](https://github.com/containerd/containerd/pull/8314)) - [`90591db47`](https://github.com/containerd/containerd/commit/90591db47c70db29386b8d9e58ffa1005b560dc0) Defer uid lookups on Darwin - \[release/1.7 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8300](https://github.com/containerd/containerd/pull/8300)) - [`b7d87b190`](https://github.com/containerd/containerd/commit/b7d87b190d013929377bb85df8301fade73b0298) Add `WithReadonlyTempMount` to create readonly temporary mounts - \[release/1.7] Backport Sandbox/CRI fixes ([#8282](https://github.com/containerd/containerd/pull/8282)) - [`1c1b6bcb2`](https://github.com/containerd/containerd/commit/1c1b6bcb2b4a47053855bd7adaed5d9bfdf2a5f5) CRI: Don't always close netConfMonitor channel - [`cf2e454bf`](https://github.com/containerd/containerd/commit/cf2e454bf052bee63c0582552566c96357bd2250) Sandbox: Correct/add some fields to Status() - [`ce68e8e0d`](https://github.com/containerd/containerd/commit/ce68e8e0db47174580fc74ecdeb66c26695ecd0b) Sandbox: Cleanup shim on Start failure </details> ##### Changes from containerd/ttrpc <details><summary>8 commits</summary> - First process the pending messages in recv channel ([#144](https://github.com/containerd/ttrpc/pull/144)) - [`c51165f`](https://github.com/containerd/ttrpc/commit/c51165f20d52c5b19c76cd8a1d16ead701146e89) First process the pending messages in recv channel - Add recvClose channel to stream ([#140](https://github.com/containerd/ttrpc/pull/140)) - [`471297e`](https://github.com/containerd/ttrpc/commit/471297eed95365134cb1a15defdf42334fd4c85a) Add recvClose channel to stream - Unwrap IO errors in server connection error handling ([#141](https://github.com/containerd/ttrpc/pull/141)) - [`9599fad`](https://github.com/containerd/ttrpc/commit/9599fadcd66ef7b6a3aec840be59a3a38203bc2c) Unwrap io errors in server connection receive error handling - Update GitHub actions CI workflow ([#124](https://github.com/containerd/ttrpc/pull/124)) - [`c7b5a32`](https://github.com/containerd/ttrpc/commit/c7b5a322eda63419e2dafa8dd215b08739ebe9f5) Update GitHub actions CI workflow </details> ##### Dependency Changes - **github.com/Microsoft/go-winio** v0.6.0 -> v0.6.1 - **github.com/Microsoft/hcsshim** v0.10.0-rc.7 -> v0.10.0-rc.8 - **github.com/containerd/ttrpc** v1.2.1 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.0 -> v2.1.1 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/opencontainers/runc** v1.1.4 -> v1.1.5 - **github.com/opencontainers/runtime-tools** [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) -> [`2e043c6`](https://github.com/containerd/containerd/commit/2e043c6bd626) - **golang.org/x/mod** v0.7.0 -> v0.9.0 - **golang.org/x/net** v0.7.0 -> v0.8.0 - **golang.org/x/sys** v0.6.0 -> v0.7.0 - **golang.org/x/term** v0.5.0 -> v0.6.0 - **golang.org/x/text** v0.7.0 -> v0.8.0 - **golang.org/x/tools** v0.5.0 -> v0.7.0 - **google.golang.org/protobuf** v1.28.1 -> v1.29.1 - **k8s.io/cri-api** v0.26.2 -> v0.27.1 Previous release can be found at [v1.7.0](https://github.com/containerd/containerd/releases/tag/v1.7.0) ### [`v1.7.0`](https://github.com/containerd/containerd/releases/tag/v1.7.0): containerd 1.7.0 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.31...v1.7.0) Welcome to the v1.7.0 release of containerd! The eighth major release of containerd includes new functionality alongside many improvements. This release is the last major release of containerd 1.x before 2.0. Some functionality in this release may be considered experimental or unstable, but will become stable or default in 2.0. This release still adheres to our backwards compatibility guarantees and users who do not use or enable new functionality should use this release with the same stability expectations. The previous 1.6 release has also become a long term stable release for users who prefer releases with mostly stability improvements and wish to wait a few releases for new functionality. ##### Highlights ##### Sandbox API *(experimental)* The sandbox API provides a new way of managing containerd's shim, providing more flexibility and functionality for multi-container environments such as Pods and VMs. This API makes it easier to manage these groups of containers at a higher level and offers new extension points for shim implementations and clients. - **Sandbox API** ([#6703](https://github.com/containerd/containerd/pull/6703)) - **CRI Sandbox API Implementation** ([#7228](https://github.com/containerd/containerd/pull/7228)) ##### Transfer Service *(experimental)* - **Transfer Service** ([#7320](https://github.com/containerd/containerd/pull/7320)) The transfer service provides a simple interface to transfer artifact objects between any source and destination. This allows for pull and push operations to be done in containerd whether requested from clients or plugins. It is experimental in this release to allow for further plugin development and integration into existing plugins. See the [Transfer Docs](https://github.com/containerd/containerd/blob/main/docs/transfer.md) ##### NRI *(experimental)* - **Extend NRI scope** ([nri#16](https://github.com/containerd/nri/pull/16)) - **Support for updated NRI** ([#6019](https://github.com/containerd/containerd/pull/6019)) The Node Resource Interface is a common framework for plugging extensions into OCI-compatible container runtimes. It provides basic mechanisms for plugins to track the state of containers and to make limited changes to their configuration. This release introduces NRI v0.3.0 with an updated plugin interface to cover a wide range of use cases. See the [NRI Docs](https://github.com/containerd/containerd/blob/main/docs/NRI.md) ##### Platform Support - **Linux containers on FreeBSD** ([#7000](https://github.com/containerd/containerd/pull/7000)) ##### Runtime Features - **Add support for CDI device injection** ([#6654](https://github.com/containerd/containerd/pull/6654)) - **Support for cgroups blockio** ([#5490](https://github.com/containerd/containerd/pull/5490)) - **Add restart policy for enhanced restart manager** ([#6744](https://github.com/containerd/containerd/pull/6744)) ##### gRPC Shim Support *(experimental)* - **Initial gRPC shim support** ([#8052](https://github.com/containerd/containerd/pull/8052)) Adds support for shims to use gRPC in addition to ttrpc. Existing ttrpc shim support is not going away and will continue to be recommended for the best performance and lowest shim memory overhead. The gRPC support allows implementation of a wider range of shim implementations which may not have access to a stable ttrpc library in the implementation language. The shim protocol is also updated to allow the shims to specify the protocol which is supported. ##### Road to 2.0 ##### Refactoring There are multiple places in the code today which are being targeted for refactoring to make long term support easier and to provide more extension points. The CRI plugin is the most complex containerd plugin with a wide range of functionality. A major effort in this release and before 2.0 involves moving functionality out of the single CRI plugin into smaller-scoped containerd plugins, such that they can be used and tested independently. The new sandbox and distribution interfaces provide one example of this, but it also being done for image and network management. The version of ttrpc has been updated this release to support streaming, allowing existing grpc services to use ttrpc. Services are being refactored to allow ttrpc implementations, which can be served via shim and accessed using the new sandbox management capability. - **Remove gogoproto.customtype** ([#6699](https://github.com/containerd/containerd/pull/6699)) - **Remove enumvalue_customname, goproto_enum_prefix and enum_customname** ([#6708](https://github.com/containerd/containerd/pull/6708)) - **Remove all gogoproto extensions** ([#6829](https://github.com/containerd/containerd/pull/6829)) - **Migrate off from github.com/gogo/protobuf** ([#6841](https://github.com/containerd/containerd/pull/6841)) - **ttrpc streaming** ([ttrpc#107](https://github.com/containerd/ttrpc/pull/107)) - **Add unpack interface for client** ([#6749](https://github.com/containerd/containerd/pull/6749)) - **Add collectible resources to metadata gc** ([#6804](https://github.com/containerd/containerd/pull/6804)) - **Add version to shim protocol** ([#8177](https://github.com/containerd/containerd/pull/8177)) ##### Configuration Existing CRI configurations will be supported until 2.0. Any functionality split out of CRI will have their configuration migrated to new plugins. Deprecated configuration versions and configurations for deprecated features will be removed in 2.0. ##### Deprecation The 2.0 release will remove any feature deprecated in 1.x. Features deprecated in this release include. - **Docker Schema 1 Image Deprecation** ([#6884](https://github.com/containerd/containerd/pull/6884)) ##### CRI Updates - **Fix CRI plugin to setup pod network after creating the sandbox container** ([#5904](https://github.com/containerd/containerd/pull/5904)) - **Support image pull progress timeout** ([#6150](https://github.com/containerd/containerd/pull/6150)) - **Add experimental support for runtime specific snapshotters** ([#6899](https://github.com/containerd/containerd/pull/6899)) - **Pass all TOML runtime configuration options from CRI to the runtime** ([#7764](https://github.com/containerd/containerd/pull/7764)) - **Support for user namespaces in stateless pods ([KEP-127](https://github.com/kubernetes/enhancements/tree/master/keps/sig-node/127-user-namespaces)) *(experimental)*** ([#7679](https://github.com/containerd/containerd/pull/7679)) - **Add timeout option for drain exec io** ([#7832](https://github.com/containerd/containerd/pull/7832)) - **Add network plugin metrics** ([#7858](https://github.com/containerd/containerd/pull/7858)) - **CRI v1alpha2 is deprecated and will be removed from containerd in containerd v2.0; if you are using the CRI API please move up to CRI v1; Kubernetes supports CRI v1 since Kubernetes 1.23** ([#7863](https://github.com/containerd/containerd/pull/7863)) ##### Other - **Support shallow content copy by adding reader option to local content reader at** ([#7414](https://github.com/containerd/containerd/pull/7414)) - **Add NoSameOwner option when unpacking tars** ([#7386](https://github.com/containerd/containerd/pull/7386)) - **Add `FetcherByDigest` for fetching blobs without fetching a manifest** ([#7460](https://github.com/containerd/containerd/pull/7460)) - **Update default seccomp profile to block socket calls to AF_VSOCK** ([#7510](https://github.com/containerd/containerd/pull/7510)) - **Replace fork on mount logic with CLONE_FS** ([#7513](https://github.com/containerd/containerd/pull/7513)) - **Add support for default registry host configuration** ([#7607](https://github.com/containerd/containerd/pull/7607)) - **Use github.com/minio/sha256-simd for more efficient sha256 calculation** ([#7732](https://github.com/containerd/containerd/pull/7732)) - **Make OCI options cross-platform** ([#7928](https://github.com/containerd/containerd/pull/7928)) - **Update release builds to build from Ubuntu 20.04 with glibc 2.31** ([#8021](https://github.com/containerd/containerd/pull/8021)) - **Use data field from OCI descriptor when provided for fetch** ([#8076](https://github.com/containerd/containerd/pull/8076)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Kazuyoshi Kato - Maksym Pavlenko - Wei Fu - Phil Estes - Akihiro Suda - Sebastiaan van Stijn - Samuel Karp - Krisztian Litkey - Mike Brown - Stefan Berger - Danny Canter - Austin Vazquez - Daniel Canter - yanggang - Iceber Gu - Ye Sijun - Ed Bartosh - Luca Comellini - Adam Korcz - Nashwan Azhari - Tony Fang - ruiwen-zhao - xin.li - Brian Goff - Gabriel Adrian Samfira - Paul "TBBle" Hampson - Henry Wang - Kevin Parsons - Rodrigo Campos - zounengren - Justin Terry - Paco Xu - Shengjing Zhu - Swagat Bora - wanglei - Gavin Inglis - Akhil Mohan - Hsing-Yu (David) Chen - Zechun Chen - guodong - lengrongfu - James Jenkins - James Sturtevant - Kirtana Ashok - Michael Crosby - Qiutong Song - Shiming Zhang - Vincent Batts - Antonio Ojea - Cameron Sparr - Casey Callendrello - Changwei Ge - Jian Zeng - Josh Seba - Junyu Liu - Kohei Tokunaga - Michael Zappa - Qasim Sarfraz - Tobias Klauser - Zhang Tianyang - pigletfly - yaoyinnan - Abirdcfly - Aditi Sharma - Amit Barve - Bennett-White - Bjorn Neergaard - Cory Snider - Craig Ingram - Eng Zer Jun - Eric Lin - Ethan Lowman - Fabian Hoffmann - Jess - Jiongchi Yu - Jonny Stoten - Juan Hoyos - Kang.Zhang - Kay Yan - Markus Lehtonen - Mikko Ylinen - Mohit Sharma - Paul Cacheux - Paul S. Schweigert - Qian Zhang - Tõnis Tiigi - Yasin Turan - bin liu - helen - yulng - Aman Sharma - Anastassios Nanos - Andrew G. Morgan - Andrey Klimentyev - Aniruddha Basak - Anthony Nandaa - Antti Kervinen - Aviral Takkar - Baoshuo - Benjamin Elder - Benjamin Wang - Brandon Lum - Chao Dai - Chuanying Du - Claudiu Belu - Daniel Lenar - Danielle Lancashire - Dat Nguyen - Davanum Srinivas - Dave - David Leadbeater - David Porter - Dmitry Shurupov - Edgar Lee - Eric Ernst - Fahed Dorgaa - Gabriela Cervantes - Gijs Peskens - Hamza El-Saawy - Ikko Ashimine - Jeff Widman - Jeff Zvier - Jeremi Piotrowski - Jimmy Hsiao - Jin Dong - Jordan Karaze - Joseph Sheng - Joyce Brum - Jukka Rissanen - Justin Chadwell - Kate - Kathryn Baldauf - Kyle L Frisbie - LongtaoZhang - Manuel Alejandro de Brito Fontes - Marc Schwind - Mark Rossetti - Mark Zhang - Marvin Giessing - Mathis Michel - Merlin Ran - Nabeel Rana - Nathan - Nguyen Phan Huy - Nikita Rybak - Nobel Barakat - Oleg Atamanenko - Oleg Zhurakivskyy - Oliver Radwell - Paweł Gronowski - Quan Tian - Roy Yang - Samuel Ortiz - Serge Logvinov - Shane Jennings - Shaun Lawrie - Shinichi Morimoto - SilverSoldier - Sophie Liu - Su Fei - Taeho Nam - Takumasa Sakao - Tiger Kaovilai - Tom Godkin - Tomoya.Fujita - Xinlin Ma - Yakul Garg - Zhongming Chang - Zhuchen Wang - austinvazquez - cardy.tang - chaunceyjiang - dabaooline - guiyong.ou - huoqifeng - jianfei.zhang - liyuxuan.darfux - ningmingxiao - panguicai008 - shi yixue - shuaichang - songjiang han - wen chen - wusong - xiaoyang zhu - yanghesong - yaozhenxiu - zhang he ##### Changes <details><summary>1753 commits</summary> - Prepare release notes for v1.7.0 ([#8242](https://github.com/containerd/containerd/pull/8242)) - RELEASES.md: describe the deprecated config properties ([#8241](https://github.com/containerd/containerd/pull/8241)) - Flag usage uses uppercase letters ([#8232](https://github.com/containerd/containerd/pull/8232)) - docs: link docs/managed-opt.md to client.Install ([#8240](https://github.com/containerd/containerd/pull/8240)) - Prepare release notes for v1.7.0-rc.3 ([#8233](https://github.com/containerd/containerd/pull/8233)) - Go 1.20.2 ([#8237](https://github.com/containerd/containerd/pull/8237)) - Update ttrpc to v1.2.1 ([#8236](https://github.com/containerd/containerd/pull/8236)) - sandbox: create sandbox with network namespace path ([#8149](https://github.com/containerd/containerd/pull/8149)) - labels: Add LabelDistributionSource ([#8224](https://github.com/containerd/containerd/pull/8224)) - archive: disable looking up usernames and groupnames on the host ([#8220](https://github.com/containerd/containerd/pull/8220)) - go.mod: go.opentelemetry.io/otel/\* v1.14.0 ([#8222](https://github.com/containerd/containerd/pull/8222)) - metadata: add comments about `Image.CreatedAt` ([#8225](https://github.com/containerd/containerd/pull/8225)) - Add release notes for v1.7.0-rc.2 ([#8216](https://github.com/containerd/containerd/pull/8216)) - go.mod: {hcsshim, containerd/*, go-restful/v3, mergo, klauspost/compress, opencontainers/*} latest ([#8221](https://github.com/containerd/containerd/pull/8221)) - Bump k8s.io deps ([#8131](https://github.com/containerd/containerd/pull/8131)) - Update imgcrypt to v1.1.7 ([#8217](https://github.com/containerd/containerd/pull/8217)) - Add ArgsEscaped support for CRI ([#8198](https://github.com/containerd/containerd/pull/8198)) - Sandbox: Delete shim+shutdown sandbox on create failure ([#8204](https://github.com/containerd/containerd/pull/8204)) - \[Feature] Transfer tag image ([#8205](https://github.com/containerd/containerd/pull/8205)) - docs: fix typo of shim.RunManager's function comment ([#8214](https://github.com/containerd/containerd/pull/8214)) - \[cri] Implement CRI Pod and Container stats for Windows ([#7099](https://github.com/containerd/containerd/pull/7099)) - Sandbox: Fix/enhance error messages for Create ([#8203](https://github.com/containerd/containerd/pull/8203)) - epoch: fix unit test when SOURCE_DATE_EPOCH is set ([#8202](https://github.com/containerd/containerd/pull/8202)) - pkg/cri: add timeout to drain exec io ([#7832](https://github.com/containerd/containerd/pull/7832)) - Prepare release notes for v1.7.0-rc.1 ([#8192](https://github.com/containerd/containerd/pull/8192)) - Transfer export image ([#8191](https://github.com/containerd/containerd/pull/8191)) - Create config struct to take user input ([#8193](https://github.com/containerd/containerd/pull/8193)) - ctr/tasks: support remapped UID/GID ([#7864](https://github.com/containerd/containerd/pull/7864)) - Add experimental section to RELEASES.md ([#8119](https://github.com/containerd/containerd/pull/8119)) - Fix streaming manager deadlock on collection ([#8188](https://github.com/containerd/containerd/pull/8188)) - Update CRI guide link ([#8190](https://github.com/containerd/containerd/pull/8190)) - Add max shim version environment variable ([#8189](https://github.com/containerd/containerd/pull/8189)) - Update README with location of security audits ([#8187](https://github.com/containerd/containerd/pull/8187)) - docs: fix typos in historical/design/data-flow.md ([#8181](https://github.com/containerd/containerd/pull/8181)) - Increase CI workflow timeout on Windows. ([#8183](https://github.com/containerd/containerd/pull/8183)) - releases: mark 1.5 as EOL ([#8178](https://github.com/containerd/containerd/pull/8178)) - Add version to shim protocol ([#8177](https://github.com/containerd/containerd/pull/8177)) - Rework install-protobuf script and add new targets ([#8164](https://github.com/containerd/containerd/pull/8164)) - bump go-cni to v1.1.9 ([#8173](https://github.com/containerd/containerd/pull/8173)) - Treat sandboxes as root gc resources and scan referenced objects ([#8172](https://github.com/containerd/containerd/pull/8172)) - update CDI version to v0.5.4 ([#8152](https://github.com/containerd/containerd/pull/8152)) - Prepare release notes for v1.7.0-rc.0 ([#8162](https://github.com/containerd/containerd/pull/8162)) - pkg/nri: pull in latest NRI, update NRI configuration. ([#8140](https://github.com/containerd/containerd/pull/8140)) - \[transfer]Config options followup ([#8165](https://github.com/containerd/containerd/pull/8165)) - Add configuration options to local transfer service ([#8062](https://github.com/containerd/containerd/pull/8062)) - docs: Show how to select GRPC for shims ([#8134](https://github.com/containerd/containerd/pull/8134)) - CRI: remove duplicated snapshotters code ([#8154](https://github.com/containerd/containerd/pull/8154)) - docs: add more comment to logging.LoggerFunc ([#8142](https://github.com/containerd/containerd/pull/8142)) - contrib/apparmor: remove code related to apparmor_parser version ([#8069](https://github.com/containerd/containerd/pull/8069)) - runtime/v2: Call onCloseWithShimLog for grpc shims ([#8120](https://github.com/containerd/containerd/pull/8120)) - Add Fields type alias to log package ([#8143](https://github.com/containerd/containerd/pull/8143)) - Migrate from k8s.gcr.io to registry.k8s.io ([#8125](https://github.com/containerd/containerd/pull/8125)) - sandbox: start sandbox with options ([#8129](https://github.com/containerd/containerd/pull/8129)) - Add macOS build note ([#8115](https://github.com/containerd/containerd/pull/8115)) - Fix concurrent writes for UpdateContainerStats ([#8130](https://github.com/containerd/containerd/pull/8130)) - dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8128](https://github.com/containerd/containerd/pull/8128)) - runtime/v2: Log BootstrapParams ([#8124](https://github.com/containerd/containerd/pull/8124)) - Prepare release notes for v1.7.0 beta.4 ([#8110](https://github.com/containerd/containerd/pull/8110)) - Go 1.20.1 ([#8103](https://github.com/containerd/containerd/pull/8103)) - ctr version: add args check ([#8096](https://github.com/containerd/containerd/pull/8096)) - pkg/cri/config: fix Mirrors deprecation comment ([#8041](https://github.com/containerd/containerd/pull/8041)) - docs: fix function names in fuzzing test documentation ([#8044](https://github.com/containerd/containerd/pull/8044)) - fix: 'go routine' should be 'goroutine' ([#8051](https://github.com/containerd/containerd/pull/8051)) - Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p) - Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2) - pkg/cri/sbserver: experimental NRI integration for CRI. ([#7954](https://github.com/containerd/containerd/pull/7954)) - Clean up error strings that start with uppercase ([#8114](https://github.com/containerd/containerd/pull/8114)) - Clean up repeated package import ([#8113](https://github.com/containerd/containerd/pull/8113)) - Go 1.19.6 ([#8109](https://github.com/containerd/containerd/pull/8109)) - Initial GRPC shims support ([#8052](https://github.com/containerd/containerd/pull/8052)) - CRI: Pass sandbox annotations to \_other platforms ([#8060](https://github.com/containerd/containerd/pull/8060)) - cmd/ctr/commands/images: support usage subcommand ([#8105](https://github.com/containerd/containerd/pull/8105)) - cni: pass in the cgroupPath capability argument ([#8067](https://github.com/containerd/containerd/pull/8067)) - Add fallback for windows platforms without osversion ([#8101](https://github.com/containerd/containerd/pull/8101)) - release: xx v1.2.1 ([#8104](https://github.com/containerd/containerd/pull/8104)) - \[transfer] update imagestore interface to support multiple references ([#7964](https://github.com/containerd/containerd/pull/7964)) - \[sandbox] Use options to pass PodSandboxConfig to shims ([#8100](https://github.com/containerd/containerd/pull/8100)) - Send container events with nil PodSandboxStatus ([#8047](https://github.com/containerd/containerd/pull/8047)) - test: add hostNetwork tests for both windows and linux ([#7984](https://github.com/containerd/containerd/pull/7984)) - loadConfig pre-inspection in advance ([#8097](https://github.com/containerd/containerd/pull/8097)) - contrib/apparmor: remove version-dependent rules ([#8068](https://github.com/containerd/containerd/pull/8068)) - \*: introduce wrapper pkgs for blockio and rdt ([#8066](https://github.com/containerd/containerd/pull/8066)) - Extract CRI instrument into separate package ([#8093](https://github.com/containerd/containerd/pull/8093)) - CRI: Mirror generic toml runtime config under server ([#8091](https://github.com/containerd/containerd/pull/8091)) - go.mod: github.com/containerd/typeurl/v2 v2.1.0 ([#8092](https://github.com/containerd/containerd/pull/8092)) - Revert `apparmor_parser` regression ([#8086](https://github.com/containerd/containerd/pull/8086)) - \[sandbox] refactor controller interface ([#7981](https://github.com/containerd/containerd/pull/7981)) - btrfs: depend on kernel UAPI instead of libbtrfs ([#7933](https://github.com/containerd/containerd/pull/7933)) - CI: skip some jobs when `repo != containerd/containerd` ([#8082](https://github.com/containerd/containerd/pull/8082)) - chore: clean up repeated package import ([#8078](https://github.com/containerd/containerd/pull/8078)) - fetch: Use data from descriptor when available. ([#8076](https://github.com/containerd/containerd/pull/8076)) - chore: use http constants instead of string ([#8077](https://github.com/containerd/containerd/pull/8077)) - Fix retry logic within devmapper device deactivation ([#8075](https://github.com/containerd/containerd/pull/8075)) - Clean CI yaml ([#8071](https://github.com/containerd/containerd/pull/8071)) - Add critest.exe in $PATH ([#8074](https://github.com/containerd/containerd/pull/8074)) - keep the uppercase letter for flag info ([#7976](https://github.com/containerd/containerd/pull/7976)) - go.mod: Bump hcsshim to v0.10.0-rc.5 ([#8049](https://github.com/containerd/containerd/pull/8049)) - Fix sandbox exit monitor ([#8045](https://github.com/containerd/containerd/pull/8045)) - Generate GRPC contracts for runtime APIs ([#7979](https://github.com/containerd/containerd/pull/7979)) - Make argument validation of `mount.UnmountRecursive` compatible to `mount.UnmountAll` ([#8035](https://github.com/containerd/containerd/pull/8035)) - Export remote snapshotter label handler ([#8036](https://github.com/containerd/containerd/pull/8036)) - Adding support to run install hcsshim from local clone ([#7989](https://github.com/containerd/containerd/pull/7989)) - go.mod: github.com/urfave/cli v1.22.12 ([#8040](https://github.com/containerd/containerd/pull/8040)) - cmd/ctr/commands: clean up the func IntToInt32Array in utils.go ([#8039](https://github.com/containerd/containerd/pull/8039)) - pkg/epoch: drop timezone ([#8037](https://github.com/containerd/containerd/pull/8037)) - go.mod: update github.com/containerd/nri. ([#8034](https://github.com/containerd/containerd/pull/8034)) - fix(docs): minor fix on the windows installation steps ([#8013](https://github.com/containerd/containerd/pull/8013)) - Add integration test to opentelemetry tracing on image pull ([#7847](https://github.com/containerd/containerd/pull/7847)) - Use mount.Target to specify subdirectory of rootfs mount ([#7840](https://github.com/containerd/containerd/pull/7840)) - cri: mkdir /etc/cni with 0755, not 0700 ([#8020](https://github.com/containerd/containerd/pull/8020)) - log/logtest: add `testcase` as debug field ([#8025](https://github.com/containerd/containerd/pull/8025)) - go.mod: github.com/containerd/cgroups/v3 v3.0.0 ([#8027](https://github.com/containerd/containerd/pull/8027)) - Update CNI plugins to 1.2.0 ([#7977](https://github.com/containerd/containerd/pull/7977)) - go.mod: go.opentelemetry.io/otel v1.12.0 ([#8026](https://github.com/containerd/containerd/pull/8026)) - Move PLEG events for pause container under podsandbox package ([#8007](https://github.com/containerd/containerd/pull/8007)) - runtime docs: Clarify delete cwd behavior ([#8012](https://github.com/containerd/containerd/pull/8012)) - release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#8019](https://github.com/containerd/containerd/pull/8019)) - RELEASES.md: update release status ([#8022](https://github.com/containerd/containerd/pull/8022)) - deflake: TestContainerPids ([#8023](https://github.com/containerd/containerd/pull/8023)) - release: Ubuntu 18.04 -> 20.04 (glibc 2.27 -> 2.31) ([#8021](https://github.com/containerd/containerd/pull/8021)) - Update the EOL date for 1.5 release ([#8015](https://github.com/containerd/containerd/pull/8015)) - Prepare release notes for v1.7.0-beta.3 ([#8014](https://github.com/containerd/containerd/pull/8014)) - Fix Memory Limit test ([#7959](https://github.com/containerd/containerd/pull/7959)) - Reused package errdefs for not supported error ([#8005](https://github.com/containerd/containerd/pull/8005)) - pkg/cri: optimize slice initialization ([#7994](https://github.com/containerd/containerd/pull/7994)) - go.mod: update goresctrl to v0.3.0 ([#7987](https://github.com/containerd/containerd/pull/7987)) - pushWriter: correctly propagate errors ([#7985](https://github.com/containerd/containerd/pull/7985)) - CI: test release.yml on every PR ([#7968](https://github.com/containerd/containerd/pull/7968)) - fix incorrect namespace of event when create/update namespace ([#7129](https://github.com/containerd/containerd/pull/7129)) - Backport changes to sandboxed CRI ([#7973](https://github.com/containerd/containerd/pull/7973)) - Fix syntax errors in the document ([#7970](https://github.com/containerd/containerd/pull/7970)) - release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7969](https://github.com/containerd/containerd/pull/7969)) - use local variable for rt when iterating collectors ([#7963](https://github.com/containerd/containerd/pull/7963)) - Add basic spec and mounts for Darwin ([#7960](https://github.com/containerd/containerd/pull/7960)) - go.mod: Bump hcsshim to v0.10.0-rc.4 ([#7810](https://github.com/containerd/containerd/pull/7810)) - Use specs Platform instead of generated API ([#7958](https://github.com/containerd/containerd/pull/7958)) - Make OCI options cross-platform ([#7928](https://github.com/containerd/containerd/pull/7928)) - update to go1.19.5, go1.18.10 ([#7948](https://github.com/containerd/containerd/pull/7948)) - fuzzing: improve archive fuzzer ([#7957](https://github.com/containerd/containerd/pull/7957)) - shim: enable debug logging for delete ([#7943](https://github.com/containerd/containerd/pull/7943)) - cri: Fix TestUpdateOCILinuxResource for host w/o swap controller ([#7946](https://github.com/containerd/containerd/pull/7946)) - ctr/run: flags --detach and --rm cannot be specified together ([#7929](https://github.com/containerd/containerd/pull/7929)) - Fix Flaky Windows CRI Integration test on TestContainerConsumedStats ([#7935](https://github.com/containerd/containerd/pull/7935)) - Refactor snapshotters metastore transaction ([#7917](https://github.com/containerd/containerd/pull/7917)) - mod: update github.com/pelletier/go-toml@v1.9.5 ([#7932](https://github.com/containerd/containerd/pull/7932)) - archive: improve TestSourceDateEpoch ([#7927](https://github.com/containerd/containerd/pull/7927)) - Add tracing plugin test ([#7883](https://github.com/containerd/containerd/pull/7883)) - docs/content-flow: update the description of the content labels ([#7925](https://github.com/containerd/containerd/pull/7925)) - Add cleanup package for context management during cleanup ([#7861](https://github.com/containerd/containerd/pull/7861)) - Fix race between stream registration and use ([#7886](https://github.com/containerd/containerd/pull/7886)) - Prepare release notes for v1.7.0-beta.2 ([#7903](https://github.com/containerd/containerd/pull/7903)) - Cirrus CI (Fedora 37, Rocky 8): enable cri-integration ([#7892](https://github.com/containerd/containerd/pull/7892)) - contrib/Dockerfile.test: add "integration", "cri-integration", "critest" stages ([#7891](https://github.com/containerd/containerd/pull/7891)) - docs: fix a typo in tracing documentation ([#7914](https://github.com/containerd/containerd/pull/7914)) - CI: Pass GITHUB_TOKEN to containerd/project-checks ([#7913](https://github.com/containerd/containerd/pull/7913)) - Enable dupword linter ([#7911](https://github.com/containerd/containerd/pull/7911)) - ctr: Add platform flag to 'oci spec' command ([#7905](https://github.com/containerd/containerd/pull/7905)) - Vagrantfile: fix disk resize error with VirtualBox ([#7907](https://github.com/containerd/containerd/pull/7907)) - Vagrantfile: fix comments about SELinux ([#7908](https://github.com/containerd/containerd/pull/7908)) - Use the const labels.LabelUncompressed ([#7906](https://github.com/containerd/containerd/pull/7906)) - \[sandbox] Add sandbox store plugin type ([#7850](https://github.com/containerd/containerd/pull/7850)) - Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts ([#7893](https://github.com/containerd/containerd/pull/7893)) - CRI: Comment cleanup/misc fixes ([#7904](https://github.com/containerd/containerd/pull/7904)) - Move snapshot event publishing into metadata store ([#5674](https://github.com/containerd/containerd/pull/5674)) - Vagrantfile: install-rootless-podman: remove `setenforce 0` ([#7887](https://github.com/containerd/containerd/pull/7887)) - reused package errdefs for error ([#7894](https://github.com/containerd/containerd/pull/7894)) - integration/images: switch away from Docker Hub to avoid rate limit ([#7888](https://github.com/containerd/containerd/pull/7888)) - Validate userns container config is consistent with sandbox userns config ([#7882](https://github.com/containerd/containerd/pull/7882)) - `ctr contents ls` sorts the labels of the content ([#7881](https://github.com/containerd/containerd/pull/7881)) - chore: use `go fix` to cleanup old +build buildtag ([#7879](https://github.com/containerd/containerd/pull/7879)) - cri: Shadow variables to avoid t.Parallel() issues ([#7880](https://github.com/containerd/containerd/pull/7880)) - Add support for user namespaces in stateless pods (KEP-127) ([#7679](https://github.com/containerd/containerd/pull/7679)) - Refactor metastore transaction ([#7529](https://github.com/containerd/containerd/pull/7529)) - oci: appendOSMounts(): remove unused error, and move ([#7874](https://github.com/containerd/containerd/pull/7874)) - add kube v1.26: remove v1alph2 cri support ([#7863](https://github.com/containerd/containerd/pull/7863)) - make runc 1.1 for oss_fuzz_build.sh ([#7875](https://github.com/containerd/containerd/pull/7875)) - CRI sbserver: Prevent server reuse after Shutdown ([#7872](https://github.com/containerd/containerd/pull/7872)) - Fix incorrect defer usage and refactor judgement ([#7521](https://github.com/containerd/containerd/pull/7521)) - oci: Add WithDomainname ([#7869](https://github.com/containerd/containerd/pull/7869)) - Reused errdefs define error ([#7871](https://github.com/containerd/containerd/pull/7871)) - fix `ctr tasks kill` does not remove cni network under windows ([#7866](https://github.com/containerd/containerd/pull/7866)) - add network plugin metrics ([#7858](https://github.com/containerd/containerd/pull/7858)) - Avoid using canceled context in unpacker cleanup ([#7859](https://github.com/containerd/containerd/pull/7859)) - image/label: print more characters of label keys ([#7618](https://github.com/containerd/containerd/pull/7618)) - prevent Server reuse after a Shutdown ([#7165](https://github.com/containerd/containerd/pull/7165)) - Check containerd's readiness before calling critest ([#7851](https://github.com/containerd/containerd/pull/7851)) - Fix grammatical errors in Readme ([#7837](https://github.com/containerd/containerd/pull/7837)) - Fix cpu architecture detection issue on linux/arm ([#7636](https://github.com/containerd/containerd/pull/7636)) - CRI: Fix no CNI info for pod sandbox on restart ([#7845](https://github.com/containerd/containerd/pull/7845)) - Enable checkRename test ([#7081](https://github.com/containerd/containerd/pull/7081)) - metastore: Add WithTransaction convenience method ([#7781](https://github.com/containerd/containerd/pull/7781)) - Prevent a race condition in testHook ([#7831](https://github.com/containerd/containerd/pull/7831)) - cri: fix `memory.memsw.limit_in_bytes: no such file or directory` ([#7836](https://github.com/containerd/containerd/pull/7836)) - go.mod: update fuzz-headers and fuzz-build ([#7824](https://github.com/containerd/containerd/pull/7824)) - Remove github.com/gogo/protobuf again ([#7825](https://github.com/containerd/containerd/pull/7825)) - CRI: Add host networking helper ([#7814](https://github.com/containerd/containerd/pull/7814)) - Support sandbox shutdown in shim runtimes ([#7792](https://github.com/containerd/containerd/pull/7792)) - move up to CRI-TOOLS v1.26.0 ([#7818](https://github.com/containerd/containerd/pull/7818)) - Minor fix when querying pod sandbox status ([#7812](https://github.com/containerd/containerd/pull/7812)) - nil check to avoid panic on upgrade ([#7809](https://github.com/containerd/containerd/pull/7809)) - Bump grpc to v1.51.0 ([#7709](https://github.com/containerd/containerd/pull/7709)) - fatal error: concurrent map iteration and map write ([#7805](https://github.com/containerd/containerd/pull/7805)) - Bump golangci-lint to v1.50.1 ([#7804](https://github.com/containerd/containerd/pull/7804)) - cri: make swapping disabled with memory limit ([#7783](https://github.com/containerd/containerd/pull/7783)) - add metrics for image pulling: error; in progress count; thoughput ([#7313](https://github.com/containerd/containerd/pull/7313)) - Prepare release notes for v1.7.0-beta.1 ([#7793](https://github.com/containerd/containerd/pull/7793)) - support fetching containerd from non public GCS buckets ([#7771](https://github.com/containerd/containerd/pull/7771)) - images: support specifying SourceDateEpoch via ctx ([#7651](https://github.com/containerd/containerd/pull/7651)) - fuzzing: improve archive fuzzer ([#7718](https://github.com/containerd/containerd/pull/7718)) - fix sdNotify func when debug level ([#7798](https://github.com/containerd/containerd/pull/7798)) - Upgrade GitHub actions packages in release workflow ([#7794](https://github.com/containerd/containerd/pull/7794)) - Enable GitHub Actions local Linux CI runs ([#7796](https://github.com/containerd/containerd/pull/7796)) - integration: increase timeout in container_event_test.go ([#7791](https://github.com/containerd/containerd/pull/7791)) - digest: use github.com/minio/sha256-simd ([#7732](https://github.com/containerd/containerd/pull/7732)) - allow client to remove created tasks with PID 0 ([#7787](https://github.com/containerd/containerd/pull/7787)) - Add container event support to containerd ([#7073](https://github.com/containerd/containerd/pull/7073)) - docs: Authorizer.Authorize could return ErrUnexpectedStatus ([#7786](https://github.com/containerd/containerd/pull/7786)) - fix: check for tmpfs when evaluating if userxattr is needed ([#7772](https://github.com/containerd/containerd/pull/7772)) - Pass TOML configuration options for runtimes CRI is not aware of ([#7764](https://github.com/containerd/containerd/pull/7764)) - Cleanup build constraints ([#7776](https://github.com/containerd/containerd/pull/7776)) - There is no way to disable debug endpoint on Darwin ([#7775](https://github.com/containerd/containerd/pull/7775)) - CI: Vagrant: pin rockylinux/8 to v5.0.0 ([#7777](https://github.com/containerd/containerd/pull/7777)) - vendor: golang.org/x/net v0.4.0 ([#7774](https://github.com/containerd/containerd/pull/7774)) - Fix context when waiting sandbox ([#7773](https://github.com/containerd/containerd/pull/7773)) - Github Security Advisory [GHSA-2qjp-425j-52j9](https://github.com/containerd/containerd/security/advisories/GHSA-2qjp-425j-52j9) - update to go1.19.4, go1.18.9 ([#7765](https://github.com/containerd/containerd/pull/7765)) - Change PushContent to require only Provider ([#7763](https://github.com/containerd/containerd/pull/7763)) - sbserver bug fixing ([#7768](https://github.com/containerd/containerd/pull/7768)) - Add unit test to Opentelemetry tracing ([#7671](https://github.com/containerd/containerd/pull/7671)) - remove some (aliases for) deprecated functions ([#7525](https://github.com/containerd/containerd/pull/7525)) - Refactor ctr restore to allow for tty allocation ([#7673](https://github.com/containerd/containerd/pull/7673)) - fix panic when containerd-stress density --count 0 ([#7748](https://github.com/containerd/containerd/pull/7748)) - Unwrap proto errors in streaming client ([#7753](https://github.com/containerd/containerd/pull/7753)) - Fix process_vm_\* syscall names in seccomp ([#7755](https://github.com/containerd/containerd/pull/7755)) - upgrade the ops.md output for current 1.7 version . ([#7747](https://github.com/containerd/containerd/pull/7747)) - docs: Add extra security instructions ([#7743](https://github.com/containerd/containerd/pull/7743)) - go.mod: re-vendor NRI from the official repo. ([#7744](https://github.com/containerd/containerd/pull/7744)) - \[Sandbox API] CRI status cleanup ([#7731](https://github.com/containerd/containerd/pull/7731)) - Transfer service ([#7320](https://github.com/containerd/containerd/pull/7320)) - NRI: add support for NRI with extended scope. ([#6019](https://github.com/containerd/containerd/pull/6019)) - archive: set WithModTimeUpperBound when WithSourceDateEpoch is set ([#7710](https://github.com/containerd/containerd/pull/7710)) - Fix order of operations when setting lease labels ([#7702](https://github.com/containerd/containerd/pull/7702)) - Add ctr image prune command ([#7730](https://github.com/containerd/containerd/pull/7730)) - Check for nullptr before dereferencing ([#7708](https://github.com/containerd/containerd/pull/7708)) - use MaxConcurrentDownloads instead of MaxConcurrentUploadedLayers ([#7736](https://github.com/containerd/containerd/pull/7736)) - introspection: expose the daemon's PID and PIDNS ([#7694](https://github.com/containerd/containerd/pull/7694)) - reference/docker: synchronize fork with upstream distribution/distribution ([#7635](https://github.com/containerd/containerd/pull/7635)) - go.mod: golang_protobuf_extensions v1.0.4 - prevent incompatible versions ([#7721](https://github.com/containerd/containerd/pull/7721)) - Add ptrace readby and tracedby to default AppArmor profile ([#7714](https://github.com/containerd/containerd/pull/7714)) - Fix sandbox API when calling sandboxed shims ([#7684](https://github.com/containerd/containerd/pull/7684)) - make status more readable and update easy. ([#7669](https://github.com/containerd/containerd/pull/7669)) - integration/client: fix go.mod grouping, containerd to v1.7.0-beta.0, cgroups back to v1.0.4 ([#7720](https://github.com/containerd/containerd/pull/7720)) - Resolve warnings in Windows GitHub Actions periodic workflows ([#7706](https://github.com/containerd/containerd/pull/7706)) - Sandbox API: implement Controller.Status for SandboxAPI ([#7470](https://github.com/containerd/containerd/pull/7470)) - \[port [#5904](https://github.com/containerd/containerd/issues/5904) to sbserver] Setup pod network after creating the sandbox container ([#7426](https://github.com/containerd/containerd/pull/7426)) - fix for OSS-Fuzz infra changes ([#7677](https://github.com/containerd/containerd/pull/7677)) - runtime/v2/shim: clean up the use of containerdBinary ([#7499](https://github.com/containerd/containerd/pull/7499)) - Add process_vm read and write calls to default seccomp profile ([#7693](https://github.com/containerd/containerd/pull/7693)) - Resolve Scorecards GitHub Actions workflow warnings ([#7707](https://github.com/containerd/containerd/pull/7707)) - cri: add pod uid annotation ([#7697](https://github.com/containerd/containerd/pull/7697)) - Missed out `platform interface` when reused the conn for Client. ([#7699](https://github.com/containerd/containerd/pull/7699)) - overlayfs: remove duplicated tx rollback ([#7700](https://github.com/containerd/containerd/pull/7700)) - go.mod: update some dependencies ([#7704](https://github.com/containerd/containerd/pull/7704)) - update github.com/cpuguy83/go-md2man/v2 to v2.0.2 ([#7705](https://github.com/containerd/containerd/pull/7705)) - Fsnotify bump and change code ([#7703](https://github.com/containerd/containerd/pull/7703)) - fix build containerd in centos9 ([#7683](https://github.com/containerd/containerd/pull/7683)) - Bump urfave-cli to v1.22.10 ([#7701](https://github.com/containerd/containerd/pull/7701)) - can set up the network serially by CNI plugins ([#7685](https://github.com/containerd/containerd/pull/7685)) - Update cri-api dependency to v0.26.0-beta.0 ([#7656](https://github.com/containerd/containerd/pull/7656)) - overlay: Remove unused method param ([#7696](https://github.com/containerd/containerd/pull/7696)) - CI: update Fedora to 37 ([#7691](https://github.com/containerd/containerd/pull/7691)) - tx rollback when GetInfo return error ([#7678](https://github.com/containerd/containerd/pull/7678)) - Upgrade github.com/containerd/cgroups from v1 to v3 ([#7601](https://github.com/containerd/containerd/pull/7601)) - Remove OpenTelementry imports from remotes/docker package ([#7675](https://github.com/containerd/containerd/pull/7675)) - Expose Done and Err in Shutdown service ([#7686](https://github.com/containerd/containerd/pull/7686)) - gotestsum match go version 1.19 ([#7688](https://github.com/containerd/containerd/pull/7688)) - complement sub-command note for containerd-main ([#7670](https://github.com/containerd/containerd/pull/7670)) - keep the lower case letter for flag info ([#7668](https://github.com/containerd/containerd/pull/7668)) - bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a) ([#7666](https://github.com/containerd/containerd/pull/7666)) - Fix broken link for CRI plugin in docs ([#7667](https://github.com/containerd/containerd/pull/7667)) - add option to resolve symlinks in WithLinuxDevice ([#7523](https://github.com/containerd/containerd/pull/7523)) - Bump k8s.io deps to v0.25.4 ([#7663](https://github.com/containerd/containerd/pull/7663)) - Release: add static binaries ([#7659](https://github.com/containerd/containerd/pull/7659)) - Bump OpenTelemetry contrib to v0.36.4 ([#7662](https://github.com/containerd/containerd/pull/7662)) - Fix slice append error (`spec.Linux.Resources.HugepageLimits`) ([#7661](https://github.com/containerd/containerd/pull/7661)) - Bump OpenTelemetry to v1.11.1 ([#7660](https://github.com/containerd/containerd/pull/7660)) - feature: add gc scheduler metrics collection count ([#5263](https://github.com/containerd/containerd/pull/5263)) - Add `--debug` args to all subcommands of `ctr pprof` ([#7629](https://github.com/containerd/containerd/pull/7629)) - Add a thin wrapper around otel Span object ([#7655](https://github.com/containerd/containerd/pull/7655)) - Bump grpc to v1.50.1 ([#7643](https://github.com/containerd/containerd/pull/7643)) - replace strings.Split(N) for strings.Cut() or alternatives ([#7631](https://github.com/containerd/containerd/pull/7631)) - add oci.WithCPURT ([#7642](https://github.com/containerd/containerd/pull/7642)) - Sandbox API: Add a new mode config for sandbox controller impls ([#7590](https://github.com/containerd/containerd/pull/7590)) - fuzzing: bump go-fuzz-headers ([#7625](https://github.com/containerd/containerd/pull/7625)) - Bump k8s.io deps to v0.25.3 ([#7637](https://github.com/containerd/containerd/pull/7637)) - Remove uses of deprecated go-digest.NewDigestFromHex, go-digest.Digest.Hex ([#7641](https://github.com/containerd/containerd/pull/7641)) - Extra documentation for content interfaces ([#7640](https://github.com/containerd/containerd/pull/7640)) - Fix shim socket permissions on Darwin ([#7638](https://github.com/containerd/containerd/pull/7638)) - s390x: build and package s390x bin in release assets ([#7614](https://github.com/containerd/containerd/pull/7614)) - Replace mount fork hack with CLONE_FS ([#7513](https://github.com/containerd/containerd/pull/7513)) - remotes: add `FetcherByDigest` for fetching blobs without foreknown descriptors (useful for general-purpose CAS) ([#7460](https://github.com/containerd/containerd/pull/7460)) - Fix "getCPUInfo for OS freebsd: not implemented" on FreeBSD/arm64 ([#7403](https://github.com/containerd/containerd/pull/7403)) - Support default hosts.toml configuration ([#7607](https://github.com/containerd/containerd/pull/7607)) - Add tracing spans in CRI image service and pull.go ([#7453](https://github.com/containerd/containerd/pull/7453)) - Fix missing closed fifo ([#7604](https://github.com/containerd/containerd/pull/7604)) - fix comments ([#7624](https://github.com/containerd/containerd/pull/7624)) - docs: add additional info in backport process ([#7626](https://github.com/containerd/containerd/pull/7626)) - go.mod: golang.org/x/\*: use tagged versions ([#7621](https://github.com/containerd/containerd/pull/7621)) - Bump go version to 1.19.3 ([#7620](https://github.com/containerd/containerd/pull/7620)) - ctr export strictly matching ([#7615](https://github.com/containerd/containerd/pull/7615)) - Fix ctr crash when pulling with --http-dump and --http-trace simultaneously ([#7617](https://github.com/containerd/containerd/pull/7617)) - Harden GITHUB_TOKEN permissions for OSSF Scorecard ([#7599](https://github.com/containerd/containerd/pull/7599)) - overlayutils: Add fastpath for userxattr check ([#7611](https://github.com/containerd/containerd/pull/7611)) - Add sequence diagram for shim runtime v2 ([#7606](https://github.com/containerd/containerd/pull/7606)) - Sandbox API: Move remote impls to /sandbox/proxy ([#7600](https://github.com/containerd/containerd/pull/7600)) - fuzzing: improve archive fuzzer ([#7588](https://github.com/containerd/containerd/pull/7588)) - Retry client connection in waitForStart ([#7537](https://github.com/containerd/containerd/pull/7537)) - Add Workflow for running critest with Hyper-V Containers on Windows. ([#7025](https://github.com/containerd/containerd/pull/7025)) - Add release notes for v1.7.0-beta.0 ([#7575](https://github.com/containerd/containerd/pull/7575)) - Cleanup sandbox interfaces ([#7576](https://github.com/containerd/containerd/pull/7576)) - Update GitHub actions release workflow set output ([#7581](https://github.com/containerd/containerd/pull/7581)) - Fix LogURI generation-related tests on Windows. ([#7569](https://github.com/containerd/containerd/pull/7569)) - maintenance: Remove WithWindowsNetworkNamespace from pkg/cri ([#7577](https://github.com/containerd/containerd/pull/7577)) - CRI: implement Controller.Delete for SandboxAPI ([#7457](https://github.com/containerd/containerd/pull/7457)) - Configure CDI registry only on start ([#7419](https://github.com/containerd/containerd/pull/7419)) - update codeql-action to v2 ([#7568](https://github.com/containerd/containerd/pull/7568)) - Add logging related metrics to Containerd CRI plugin ([#7546](https://github.com/containerd/containerd/pull/7546)) - sys: optimize and refactor MkdirAllWithACL() ([#7531](https://github.com/containerd/containerd/pull/7531)) - fix install cni script ([#7484](https://github.com/containerd/containerd/pull/7484)) - Update 1.5 release support timeframe ([#7560](https://github.com/containerd/containerd/pull/7560)) - bump go-fuzz-headers ([#7503](https://github.com/containerd/containerd/pull/7503)) - Add long term stable release branches ([#7454](https://github.com/containerd/containerd/pull/7454)) - fix pusher concurrent close channel ([#7473](https://github.com/containerd/containerd/pull/7473)) - Make tests on GitHub less noisy ([#7530](https://github.com/containerd/containerd/pull/7530)) - containerd should not print error log that failed to init a tracing processor while the tracing plugin is not loaded ([#7541](https://github.com/containerd/containerd/pull/7541)) - Update required Go version in BUILDING.md ([#7544](https://github.com/containerd/containerd/pull/7544)) - go.mod: matttproud/golang_protobuf_extensions v1.0.2 (use tag) ([#7522](https://github.com/containerd/containerd/pull/7522)) - Use `go env` to determine GOPATH in Makefile. ([#7542](https://github.com/containerd/containerd/pull/7542)) - clean-up "nolint" comments, remove unused ones, update golangci-lint ([#7349](https://github.com/containerd/containerd/pull/7349)) - Don't unmount on Darwin when deleting bundle ([#7534](https://github.com/containerd/containerd/pull/7534)) - Add timeouts to all CI jobs ([#7538](https://github.com/containerd/containerd/pull/7538)) - Vagrantfile: explicitly specify rsync as the shared folder driver ([#7539](https://github.com/containerd/containerd/pull/7539)) - sys: remove unused IsAbs() (windows) ([#7527](https://github.com/containerd/containerd/pull/7527)) - cri: PodSandboxStatus should tolerate missing task ([#7535](https://github.com/containerd/containerd/pull/7535)) - CI: update GHA instances from Ubuntu 18.04 to 20.04 ([#7489](https://github.com/containerd/containerd/pull/7489)) - fix the --no-pivot flag being ignored by `ctr tasks start` ([#7519](https://github.com/containerd/containerd/pull/7519)) - Update the default seccomp to block socket calls to AF_VSOCK ([#7510](https://github.com/containerd/containerd/pull/7510)) - cmd/containerd: use golang.org/x/sys/windows.SetStdHandle() ([#7511](https://github.com/containerd/containerd/pull/7511)) - Stats() shouldn't assume s.container is non-nil ([#7517](https://github.com/containerd/containerd/pull/7517)) - Move up actions versions to prep for NodeJS 12 deprecation ([#7516](https://github.com/containerd/containerd/pull/7516)) - cmd/containerd: use golang.org/x/sys Service.SetRecoveryActions() ([#7512](https://github.com/containerd/containerd/pull/7512)) - Updates oci image config to support upstream ArgsEscaped ([#7483](https://github.com/containerd/containerd/pull/7483)) - cmd/containerd: replace deprecated windows.IsAnInteractiveSession() ([#7497](https://github.com/containerd/containerd/pull/7497)) - Update container with sandbox metadata after NetNS is created ([#7481](https://github.com/containerd/containerd/pull/7481)) - archive: add WithSourceDateEpoch() for whiteouts ([#7478](https://github.com/containerd/containerd/pull/7478)) - TestTaskResize must use a terminal ([#7492](https://github.com/containerd/containerd/pull/7492)) - diff/apply.readCounter: check negative size ([#7494](https://github.com/containerd/containerd/pull/7494)) - Add new ctr option for discarding unpacked layers ([#7425](https://github.com/containerd/containerd/pull/7425)) - archive: windows: chtimes(): remove redundant conversion ([#7491](https://github.com/containerd/containerd/pull/7491)) - archive: validate digests before use ([#7488](https://github.com/containerd/containerd/pull/7488)) - vendor: github.com/opencontainers/selinux v1.10.2 ([#7482](https://github.com/containerd/containerd/pull/7482)) - fuzzing: create structured tar bytes in archive fuzzer ([#7477](https://github.com/containerd/containerd/pull/7477)) - Update to go 1.19.2 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 ([#7474](https://github.com/containerd/containerd/pull/7474)) - use raw link to containerd.service config ([#7463](https://github.com/containerd/containerd/pull/7463)) - cri doc: Update kata containers reference ([#7466](https://github.com/containerd/containerd/pull/7466)) - Setup pod network after creating the sandbox container ([#5904](https://github.com/containerd/containerd/pull/5904)) - Swap to net.ErrClosed checks for services ([#7446](https://github.com/containerd/containerd/pull/7446)) - go.mod: Bump go-winio to v0.6.0 ([#7443](https://github.com/containerd/containerd/pull/7443)) - fix retry when writer is reset on push ([#6995](https://github.com/containerd/containerd/pull/6995)) - CI: Output a summary using GITHUB_SUMMARY ([#7192](https://github.com/containerd/containerd/pull/7192)) - Fix missing close ([#7430](https://github.com/containerd/containerd/pull/7430)) - Add test flag for skipping shim cgroup test ([#7424](https://github.com/containerd/containerd/pull/7424)) - Refactor CRI fuzzers ([#7405](https://github.com/containerd/containerd/pull/7405)) - Fix LogURIGenerator on Windows ([#7351](https://github.com/containerd/containerd/pull/7351)) - Set grpc code for unimplemented cri-api methods ([#7417](https://github.com/containerd/containerd/pull/7417)) - Add reader option to local content reader at ([#7414](https://github.com/containerd/containerd/pull/7414)) - Sandbox API: implement Controller.Wait and Controller.Stop ([#7401](https://github.com/containerd/containerd/pull/7401)) - remove stray .zuul.yaml ([#7416](https://github.com/containerd/containerd/pull/7416)) - reference CDI configuration details ([#7408](https://github.com/containerd/containerd/pull/7408)) - cri-integration: propagate ENABLE_CRI_SANDBOXES ([#7413](https://github.com/containerd/containerd/pull/7413)) - Enable OpenSSF Scorecard Github Action ([#7404](https://github.com/containerd/containerd/pull/7404)) - Add ext2 fs support to devmapper snapshotter ([#7402](https://github.com/containerd/containerd/pull/7402)) - Fuzzing: Instrument with new sanitizers ([#7396](https://github.com/containerd/containerd/pull/7396)) - Upgrade fuzzing-related packages to reduce dependencies ([#7397](https://github.com/containerd/containerd/pull/7397)) - remotes/docker/config: Skipping TLS verification for localhost ([#7393](https://github.com/containerd/containerd/pull/7393)) - Replace github.com/emicklei/go-restful package, versions <2.16.0 ([#7395](https://github.com/containerd/containerd/pull/7395)) - Add NoSameOwner option when unpacking tars ([#7386](https://github.com/containerd/containerd/pull/7386)) - ctr: add privileged-without-host-devices for run command ([#7328](https://github.com/containerd/containerd/pull/7328)) - chore: matching the casing of other flags for ctr's pull command ([#7341](https://github.com/containerd/containerd/pull/7341)) - windows: Add runhcs-wcow-hypervisor runtimeclass to the default config ([#6901](https://github.com/containerd/containerd/pull/6901)) - Fix missing close ([#7370](https://github.com/containerd/containerd/pull/7370)) - CRI: update cdi version to v0.5.1 ([#7374](https://github.com/containerd/containerd/pull/7374)) - Update to go 1.19.1, 1.18.6 to address CVE-2022-27664, CVE-2022-32190 ([#7372](https://github.com/containerd/containerd/pull/7372)) - vendor: golang.org/x/net v0.0.0-20220906165146-f3363e06e74c ([#7373](https://github.com/containerd/containerd/pull/7373)) - Remove unused variable from images action ([#7371](https://github.com/containerd/containerd/pull/7371)) - feature: use client default namespace ([#7291](https://github.com/containerd/containerd/pull/7291)) - integration: TestUpdateContainerResources_MemoryLimit: remove TODO comment ([#7367](https://github.com/containerd/containerd/pull/7367)) - feature: upgrade registry.k8s.io/pause version ([#7359](https://github.com/containerd/containerd/pull/7359)) - metrics/cgroups/v1: Remove unused event parameter ([#7361](https://github.com/containerd/containerd/pull/7361)) - .zuul: remove the zuul because it is offline ([#7369](https://github.com/containerd/containerd/pull/7369)) - Update golangci-lint timeout to match config ([#7356](https://github.com/containerd/containerd/pull/7356)) - delete redundent import alias and and type conversion ([#7345](https://github.com/containerd/containerd/pull/7345)) - Make checkContainerTimestamps less strict on Windows ([#7350](https://github.com/containerd/containerd/pull/7350)) - Make oss-fuzz mandatory ([#7346](https://github.com/containerd/containerd/pull/7346)) - Add kubernetes v1.25 supported version as v1.24 ([#7326](https://github.com/containerd/containerd/pull/7326)) - sys: move ForceRemoveAll to integration/client ([#7335](https://github.com/containerd/containerd/pull/7335)) - chore: remove duplicate word in comments ([#7338](https://github.com/containerd/containerd/pull/7338)) - Use ioctl helpers from x/sys/unix ([#7342](https://github.com/containerd/containerd/pull/7342)) - archive: replace tarName() with filepath.ToSlash() ([#7344](https://github.com/containerd/containerd/pull/7344)) - mount: remove unused ErrNotImplementOnWindows ([#7339](https://github.com/containerd/containerd/pull/7339)) - replace sys Sequential funcs with moby/sys/sequential ([#7334](https://github.com/containerd/containerd/pull/7334)) - Clarify containerd 1.5.0+ for k8s 1.20,1.21 ([#7324](https://github.com/containerd/containerd/pull/7324)) - update runc binary to v1.1.4 ([#7315](https://github.com/containerd/containerd/pull/7315)) - Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 ([#7325](https://github.com/containerd/containerd/pull/7325)) - Update k8s.io/cri-api to v0.25.0 ([#7287](https://github.com/containerd/containerd/pull/7287)) - script/setup: handle cnidir with SUDO ([#7322](https://github.com/containerd/containerd/pull/7322)) - ContainerStatus to return container resources ([#6517](https://github.com/containerd/containerd/pull/6517)) - migrate from k8s.gcr.io to registry.k8s.io ([#7038](https://github.com/containerd/containerd/pull/7038)) - Do not rename test files on-the-fly to share functions ([#7309](https://github.com/containerd/containerd/pull/7309)) - ctr import: strictly match platform ([#6906](https://github.com/containerd/containerd/pull/6906)) - Revert "Downgrade MinGW to version 10.2.0" ([#7308](https://github.com/containerd/containerd/pull/7308)) - Follow up [#7254](https://github.com/containerd/containerd/issues/7254) (Switch to Go 1.19) ([#7286](https://github.com/containerd/containerd/pull/7286)) - Upgrade containerd/cgroups to remove github.com/cilium/ebpf's fuzzer ([#7304](https://github.com/containerd/containerd/pull/7304)) - Adding support of CAP_BPF and CAP_PERFMON ([#7301](https://github.com/containerd/containerd/pull/7301)) - go.mod: Bump hcsshim to v0.10.0-rc.1 ([#7284](https://github.com/containerd/containerd/pull/7284)) - Don't fail test when GOOGLE_APPLICATION_CREDENTIALS is unset ([#7306](https://github.com/containerd/containerd/pull/7306)) - ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 ([#7293](https://github.com/containerd/containerd/pull/7293)) - Runtime cleanup (Shim manager and task service) ([#7280](https://github.com/containerd/containerd/pull/7280)) - containerd-stress: add support for running through CRI ([#6931](https://github.com/containerd/containerd/pull/6931)) - Switch to Go 1.19 ([#7254](https://github.com/containerd/containerd/pull/7254)) - Vagrantfile: dump containerd log after critest ([#7265](https://github.com/containerd/containerd/pull/7265)) - oci: skip checking group id for WithAppendAdditionalGroups ([#7257](https://github.com/containerd/containerd/pull/7257)) - release workflow: increase timeout to 30 minutes & remove Go setup action ([#7259](https://github.com/containerd/containerd/pull/7259)) - release: rollback Ubuntu to 18.04 (except for riscv64) ([#7258](https://github.com/containerd/containerd/pull/7258)) - Initial sandbox API CRI integration (implement Controller.Start) ([#7228](https://github.com/containerd/containerd/pull/7228)) - Use environment variable to specify Go version on CI ([#7251](https://github.com/containerd/containerd/pull/7251)) - Update golang to 1.18.5, 1.17.13 ([#7243](https://github.com/containerd/containerd/pull/7243)) - Change os.Stderr reassign for Windows service ([#7023](https://github.com/containerd/containerd/pull/7023)) - script/setup: fix protobuf for aarch64 ([#7237](https://github.com/containerd/containerd/pull/7237)) - Fix cleanup in critest ([#7232](https://github.com/containerd/containerd/pull/7232)) - fix: support simultaneous create diff for same parent snapshot ([#7204](https://github.com/containerd/containerd/pull/7204)) - Windows HostProcess container CRI stats test ([#7223](https://github.com/containerd/containerd/pull/7223)) - Regenerate protos with updated protoc-gen-go ([#7226](https://github.com/containerd/containerd/pull/7226)) - test: error strings should not be capitalized ([#7195](https://github.com/containerd/containerd/pull/7195)) - Add extra context to error when push unauthorized ([#7220](https://github.com/containerd/containerd/pull/7220)) - replace with selinux label ([#7207](https://github.com/containerd/containerd/pull/7207)) - Use `httputil.DumpRequestOut` for dumping client req ([#7221](https://github.com/containerd/containerd/pull/7221)) - Fix CRI image pull timeout test for ppc64le ([#7215](https://github.com/containerd/containerd/pull/7215)) - test: introduce failpoint control to runc-shimv2 and cni ([#7069](https://github.com/containerd/containerd/pull/7069)) - chore: bump macos runner version ([#7206](https://github.com/containerd/containerd/pull/7206)) - Use image lists form integration/client tests ([#7210](https://github.com/containerd/containerd/pull/7210)) - go.mod: Bump hcsshim to v0.9.4 ([#7212](https://github.com/containerd/containerd/pull/7212)) - Drop deprecated `ioutil` ([#7203](https://github.com/containerd/containerd/pull/7203)) - Make getServicesOpts a helper ([#7201](https://github.com/containerd/containerd/pull/7201)) - adds an env var commented out for sandboxed mode ([#7183](https://github.com/containerd/containerd/pull/7183)) - cri_stats: handle missing cpu stats ([#7198](https://github.com/containerd/containerd/pull/7198)) - using ContextDialer instead ([#7189](https://github.com/containerd/containerd/pull/7189)) - test: Add ability to switch between cgroupv1 or cgroupv2 for node e2e ([#7173](https://github.com/containerd/containerd/pull/7173)) - code cleanup ([#7182](https://github.com/containerd/containerd/pull/7182)) - Update k8s.io/cri-api to v0.25.0-alpha2 ([#7114](https://github.com/containerd/containerd/pull/7114)) - Refactor usageNanoCores be to used for all OSes ([#7186](https://github.com/containerd/containerd/pull/7186)) - adds support for using env file for systemd boot ([#7191](https://github.com/containerd/containerd/pull/7191)) - go.mod: github.com/stretchr/testify v1.8.0 ([#7185](https://github.com/containerd/containerd/pull/7185)) - ctr: support --user for run/create ([#7145](https://github.com/containerd/containerd/pull/7145)) - docs: Fix sample config.toml syntax ([#7174](https://github.com/containerd/containerd/pull/7174)) - seccomp: seccomp: add syscalls related to PKU in default policy ([#7163](https://github.com/containerd/containerd/pull/7163)) - Update and align golangci-lint version ([#7168](https://github.com/containerd/containerd/pull/7168)) - adds a comment explaining how to disable experimental sbserver ([#7169](https://github.com/containerd/containerd/pull/7169)) - ci: workaround Cirrus CI's INVALID_ARGUMENT ([#7177](https://github.com/containerd/containerd/pull/7177)) - Update install-protobuf script to install protobuf on Darwin ([#7153](https://github.com/containerd/containerd/pull/7153)) - Fork CRI server for Sandbox API integration work ([#7164](https://github.com/containerd/containerd/pull/7164)) - seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE ([#7167](https://github.com/containerd/containerd/pull/7167)) - cri doc: fix formatting for CDI options ([#7158](https://github.com/containerd/containerd/pull/7158)) - update golang to 1.18.4, 1.17.12 ([#7159](https://github.com/containerd/containerd/pull/7159)) - Fix out of date comments for CRI store packages ([#7152](https://github.com/containerd/containerd/pull/7152)) - update some devmapper docs ([#7124](https://github.com/containerd/containerd/pull/7124)) - seccomp: allow clock_settime64 when CAP_SYS_TIME is added ([#7149](https://github.com/containerd/containerd/pull/7149)) - Copy fuzzers from github.com/cncf/cncf-fuzzing ([#7123](https://github.com/containerd/containerd/pull/7123)) - fix can't edit object by using ctr content edit command ([#6847](https://github.com/containerd/containerd/pull/6847)) - integration/client: fix typo in export_test.go ([#7130](https://github.com/containerd/containerd/pull/7130)) - Fix WWW-Authenticate parsing ([#7126](https://github.com/containerd/containerd/pull/7126)) - LCOW differ return ErrNotImplemented for wrong mount type ([#7112](https://github.com/containerd/containerd/pull/7112)) - Update go-restful/v3 to latest release ([#7117](https://github.com/containerd/containerd/pull/7117)) - pkg/cri: use marshal wrapper for version convertor ([#7108](https://github.com/containerd/containerd/pull/7108)) - Remove hacks around contrib/fuzz ([#7087](https://github.com/containerd/containerd/pull/7087)) - Fix missing closed HTTP Body ([#7107](https://github.com/containerd/containerd/pull/7107)) - Cleanup metadata tests ([#7105](https://github.com/containerd/containerd/pull/7105)) - Downgrade MinGW to version 10.2.0 ([#7106](https://github.com/containerd/containerd/pull/7106)) - ctr: Fix `ctr c create` fails to parse arguments ([#7098](https://github.com/containerd/containerd/pull/7098)) - Fix Documentation Issue ([#7103](https://github.com/containerd/containerd/pull/7103)) - refactor: reduce duplicate code ([#7100](https://github.com/containerd/containerd/pull/7100)) - make xattr EPERM non-fatal in createTarFile ([#7094](https://github.com/containerd/containerd/pull/7094)) - Move metadata plugin registration to seperate package ([#7096](https://github.com/containerd/containerd/pull/7096)) - fix: missing sudo for devmapper doc ([#7092](https://github.com/containerd/containerd/pull/7092)) - Ensure Windows Periodic workflow errors out while still uploading results. ([#7085](https://github.com/containerd/containerd/pull/7085)) - Add snapshotter key to snapshot events ([#7084](https://github.com/containerd/containerd/pull/7084)) - add WithAdditionalGIDs test ([#7072](https://github.com/containerd/containerd/pull/7072)) - Forward ctr snapshotter flags on Windows ([#7086](https://github.com/containerd/containerd/pull/7086)) - add WithAppendAdditionalGroups helper ([#7070](https://github.com/containerd/containerd/pull/7070)) - Make CI Fuzz less noisy ([#7065](https://github.com/containerd/containerd/pull/7065)) - ctr: add --hostname flag to create, run ([#7082](https://github.com/containerd/containerd/pull/7082)) - improve content-flow ([#7077](https://github.com/containerd/containerd/pull/7077)) - Make CI Fuzz optional ([#7067](https://github.com/containerd/containerd/pull/7067)) - Use Go 1.18's testing.F on simple fuzzers ([#7056](https://github.com/containerd/containerd/pull/7056)) - Downgrade MinGW in Windows setup scripts. ([#7062](https://github.com/containerd/containerd/pull/7062)) - Make test path a constant ([#7057](https://github.com/containerd/containerd/pull/7057)) - Run fuzzers in CI ([#7052](https://github.com/containerd/containerd/pull/7052)) - CRI: Improve the /dev/shm mount options in Sandbox. ([#6913](https://github.com/containerd/containerd/pull/6913)) - fix:userattr-unmount unexpected timeout ([#7008](https://github.com/containerd/containerd/pull/7008)) - Port (some) unit tests to FreeBSD ([#7042](https://github.com/containerd/containerd/pull/7042)) - Bump Golang and MinGW versions in Windows setup script. ([#6888](https://github.com/containerd/containerd/pull/6888)) - Windows snapshotter touch ups and new functionality ([#6918](https://github.com/containerd/containerd/pull/6918)) - Improve naming consistencies in comments in snapshotter.go ([#7032](https://github.com/containerd/containerd/pull/7032)) - Make building static binaries simpler ([#7022](https://github.com/containerd/containerd/pull/7022)) - Allow CRI on Darwin ([#7033](https://github.com/containerd/containerd/pull/7033)) - update runc binary to v1.1.3 ([#7034](https://github.com/containerd/containerd/pull/7034)) - Linux containers on FreeBSD ([#7000](https://github.com/containerd/containerd/pull/7000)) - go.mod: github.com/moby/sys/mountinfo v0.6.2 ([#7026](https://github.com/containerd/containerd/pull/7026)) - fix minor spelling mistake: lablel -> label ([#7031](https://github.com/containerd/containerd/pull/7031)) - go.mod: github.com/containerd/cgroups v1.0.4 ([#7027](https://github.com/containerd/containerd/pull/7027)) - go.mod: github.com/containerd/continuity v0.3.0 ([#7028](https://github.com/containerd/containerd/pull/7028)) - Correct spelling mistake ("sanbdox" to "sandbox") ([#7029](https://github.com/containerd/containerd/pull/7029)) - Github Security Advisory [GHSA-5ffw-gxpp-mxpf](https://github.com/containerd/containerd/security/advisories/GHSA-5ffw-gxpp-mxpf) - Bump grpc to v1.47.0 ([#7018](https://github.com/containerd/containerd/pull/7018)) - Bump k8s.io deps to v0.24.1 ([#7017](https://github.com/containerd/containerd/pull/7017)) - Support runtime level snapshotter for issue 6657 ([#6899](https://github.com/containerd/containerd/pull/6899)) - update golang to 1.18.3, 1.17.11 ([#7012](https://github.com/containerd/containerd/pull/7012)) - Fix containerd-stress duration flag ([#7004](https://github.com/containerd/containerd/pull/7004)) - update go-cni/for cni update fixing plugins that don't respond with version ([#7009](https://github.com/containerd/containerd/pull/7009)) - Add validations for Windows HostProcess CRI configs ([#6996](https://github.com/containerd/containerd/pull/6996)) - Move docker reference logic to reference/docker package ([#7007](https://github.com/containerd/containerd/pull/7007)) - promote pause image to 3.7 (sync with kube v1.24) ([#7003](https://github.com/containerd/containerd/pull/7003)) - Makefile: use urfave_cli_no_docs for binaries that don't need it ([#6998](https://github.com/containerd/containerd/pull/6998)) - CRI: cleanup cri/store package ([#6993](https://github.com/containerd/containerd/pull/6993)) - Use t.Run for /pkg/cri tests ([#7001](https://github.com/containerd/containerd/pull/7001)) - vendor: github.com/urfave/cli v1.22.9 and fix "verify-vendor" script ([#6997](https://github.com/containerd/containerd/pull/6997)) - sandbox: replace github.com/pkg/errors with native errors ([#6937](https://github.com/containerd/containerd/pull/6937)) - build: Fix references to check-protos target in Makefile ([#6983](https://github.com/containerd/containerd/pull/6983)) - ctr: fix label args used in NewContainer ([#6954](https://github.com/containerd/containerd/pull/6954)) - ctr sandbox: handle sandbox config ([#6959](https://github.com/containerd/containerd/pull/6959)) - Fix broken oss-fuzz build ([#6975](https://github.com/containerd/containerd/pull/6975)) - archive: add human-readable hint to Lchown error ([#6982](https://github.com/containerd/containerd/pull/6982)) - Fix tx closed error when upperdirlabel specified ([#6978](https://github.com/containerd/containerd/pull/6978)) - config: improve config v1 deprecation message ([#6972](https://github.com/containerd/containerd/pull/6972)) - Fix Windows install powershell script ([#6969](https://github.com/containerd/containerd/pull/6969)) - fix comments on metadata schema and update namespace doc ([#6955](https://github.com/containerd/containerd/pull/6955)) - adjust format in comment ([#6956](https://github.com/containerd/containerd/pull/6956)) - Restore decompression benchmarks ([#6957](https://github.com/containerd/containerd/pull/6957)) - cmd/ctr/commands/content: fix typo in fetch command usage ([#6960](https://github.com/containerd/containerd/pull/6960)) - fix some confusing typos ([#6950](https://github.com/containerd/containerd/pull/6950)) - update doc url about k8s ([#6952](https://github.com/containerd/containerd/pull/6952)) - Separate windows-2019 and windows-2022 test results ([#6946](https://github.com/containerd/containerd/pull/6946)) - shim: fix debug flag not working ([#6910](https://github.com/containerd/containerd/pull/6910)) - Reverts removal of parallel run from critest ([#6938](https://github.com/containerd/containerd/pull/6938)) - Bump OpenTelemetry dependencies ([#6932](https://github.com/containerd/containerd/pull/6932)) - update runc binary and vendor to v1.1.2 ([#6934](https://github.com/containerd/containerd/pull/6934)) - oci: WithDefaultUnixDevices(): remove tun/tap from the default devices ([#6923](https://github.com/containerd/containerd/pull/6923)) - update golang to 1.18.2, 1.17.10 ([#6926](https://github.com/containerd/containerd/pull/6926)) - CI: update Fedora to 36 ([#6925](https://github.com/containerd/containerd/pull/6925)) - Add `Wait` to `binaryProcessor` ([#6916](https://github.com/containerd/containerd/pull/6916)) - go.mod: Bump k8s deps to v0.24.0 ([#6905](https://github.com/containerd/containerd/pull/6905)) - (Vagrant CI) Enable git commands due to git CVE fix ([#6915](https://github.com/containerd/containerd/pull/6915)) - Pass explicit JUnit outfile to critest.exe in Windows workflow. ([#6912](https://github.com/containerd/containerd/pull/6912)) - Update critools to v1.24 ([#6894](https://github.com/containerd/containerd/pull/6894)) - devmapper docs: small fixes ([#6904](https://github.com/containerd/containerd/pull/6904)) - move report dir option to end of line for vagrant cri tests ([#6900](https://github.com/containerd/containerd/pull/6900)) - Update Kubernetes version matrix in release docs ([#6892](https://github.com/containerd/containerd/pull/6892)) - Share container images between TestRestartMonitor and TestRestartMonitorWithOnFailurePolicy ([#6889](https://github.com/containerd/containerd/pull/6889)) - containerd 1.6.4 k8s 1.24 readme announce ([#6890](https://github.com/containerd/containerd/pull/6890)) - Cleanup leaked shim process ([#6866](https://github.com/containerd/containerd/pull/6866)) - Add collectible resources to metadata gc ([#6804](https://github.com/containerd/containerd/pull/6804)) - Update k8 docurl in file ([#6881](https://github.com/containerd/containerd/pull/6881)) - Support RISC-V 64 ([#6882](https://github.com/containerd/containerd/pull/6882)) - docs: minor fixes in snapshots.Snapshotter comments ([#6885](https://github.com/containerd/containerd/pull/6885)) - Officially deprecate Schema 1 ([#6884](https://github.com/containerd/containerd/pull/6884)) - Make Cirrus CI tests more stable ([#6880](https://github.com/containerd/containerd/pull/6880)) - docs: Adding windows installation steps to getting-started.md ([#6875](https://github.com/containerd/containerd/pull/6875)) - Add ctr support for CPUMax and CPUShares ([#6809](https://github.com/containerd/containerd/pull/6809)) - Support for cgroups blockio ([#5490](https://github.com/containerd/containerd/pull/5490)) - Fix comment for metadata/db.go ([#6871](https://github.com/containerd/containerd/pull/6871)) - Remove github.com/gogo/protobuf and github.com/golang/protobuf from containerd's direct dependencies ([#6867](https://github.com/containerd/containerd/pull/6867)) - Update go-cni to v1.1.5 ([#6868](https://github.com/containerd/containerd/pull/6868)) - Bump opencontainers/selinux from 1.10.0 to 1.10.1 ([#6865](https://github.com/containerd/containerd/pull/6865)) - Upgrade google.golang.org/grpc and google.golang.org/protobuf ([#6864](https://github.com/containerd/containerd/pull/6864)) - Don't use "uname -a" as Cirrus CI's cache key ([#6863](https://github.com/containerd/containerd/pull/6863)) - remove duplicate ([#6856](https://github.com/containerd/containerd/pull/6856)) - Create ppc64le release ([#6858](https://github.com/containerd/containerd/pull/6858)) - Move Vagrant-based tests from GitHub Actions to Cirrus CI ([#6854](https://github.com/containerd/containerd/pull/6854)) - feature: support image pull progress timeout ([#6150](https://github.com/containerd/containerd/pull/6150)) - Add unpack interface to be used by client ([#6749](https://github.com/containerd/containerd/pull/6749)) - Fix undefined error in use of errors package ([#6855](https://github.com/containerd/containerd/pull/6855)) - Migrate off from github.com/gogo/protobuf ([#6841](https://github.com/containerd/containerd/pull/6841)) - images/image.go: typo ([#6851](https://github.com/containerd/containerd/pull/6851)) - Add flag to allow oci.WithAllDevicesAllowed on PrivilegedWithoutHostDevices ([#5686](https://github.com/containerd/containerd/pull/5686)) - integration: Adds Windows equivalent for TestSandboxRemoveWithoutIPLeakage ([#6180](https://github.com/containerd/containerd/pull/6180)) - fix incorrect syntax in comments ([#6845](https://github.com/containerd/containerd/pull/6845)) - cri: close fifos when container is deleted ([#6842](https://github.com/containerd/containerd/pull/6842)) - diff: hide types.Any from clients ([#6832](https://github.com/containerd/containerd/pull/6832)) - Add Container-Optimized OS into Adopters ([#6838](https://github.com/containerd/containerd/pull/6838)) - Prepare for google.golang.org/protobuf ([#6835](https://github.com/containerd/containerd/pull/6835)) - fix the restart desired to running when task not found ([#6833](https://github.com/containerd/containerd/pull/6833)) - Remove all gogoproto extensions ([#6829](https://github.com/containerd/containerd/pull/6829)) - fix nil pointer panic for monitor ([#6830](https://github.com/containerd/containerd/pull/6830)) - remotes/docker: log registry URLs as info instead of debug ([#5681](https://github.com/containerd/containerd/pull/5681)) - Rename runtime/v2/task to api/runtime ([#6827](https://github.com/containerd/containerd/pull/6827)) - Fix protoc-gen-go-fieldpath ([#6828](https://github.com/containerd/containerd/pull/6828)) - Consolidate gogo/protobuf dependencies under our own protobuf package ([#6826](https://github.com/containerd/containerd/pull/6826)) - Add restart policy for enhanced restart manager ([#6744](https://github.com/containerd/containerd/pull/6744)) - Remove gogoproto.stdtime ([#6821](https://github.com/containerd/containerd/pull/6821)) - Set timeout when collecting metrics from shim's Stat ([#6781](https://github.com/containerd/containerd/pull/6781)) - Fuzz filter package with Go 1.18's fuzzer ([#6819](https://github.com/containerd/containerd/pull/6819)) - allow ptrace(2) by default for kernel >= 4.8 ([#6810](https://github.com/containerd/containerd/pull/6810)) - Build bin/gen-manpages instead of using "go run" ([#6820](https://github.com/containerd/containerd/pull/6820)) - update golang to 1.18.1, 1.17.9 ([#6822](https://github.com/containerd/containerd/pull/6822)) - Sandbox API ([#6703](https://github.com/containerd/containerd/pull/6703)) - Move lease manager plugin to separate package ([#6811](https://github.com/containerd/containerd/pull/6811)) - fix pool_device_test ([#6807](https://github.com/containerd/containerd/pull/6807)) - check for duplicate nspath possibilities ([#6806](https://github.com/containerd/containerd/pull/6806)) - Do not append \[]string{""} to command to preserve Docker compatibility ([#6805](https://github.com/containerd/containerd/pull/6805)) - tracing: fix panic on startup when configured ([#6789](https://github.com/containerd/containerd/pull/6789)) - Optimize loading performance for cri recover ([#6680](https://github.com/containerd/containerd/pull/6680)) - Change architecture path in README.md ([#6798](https://github.com/containerd/containerd/pull/6798)) - make consistent for checkpoint path ([#6792](https://github.com/containerd/containerd/pull/6792)) - metrics/cgroups: fix deadlock issue in Add during Collect ([#6788](https://github.com/containerd/containerd/pull/6788)) - ADOPTERS: Update AKS Info ([#6794](https://github.com/containerd/containerd/pull/6794)) - Pin upload-cloud-storage action to 0.8.0 in Windows workflow. ([#6790](https://github.com/containerd/containerd/pull/6790)) - docs: add Deckhouse to the list of adopters ([#6785](https://github.com/containerd/containerd/pull/6785)) - Add `docs/snapshotters`; simplify `docs/cri` ([#6778](https://github.com/containerd/containerd/pull/6778)) - Turn paths from cmdline into absolute paths ([#6672](https://github.com/containerd/containerd/pull/6672)) - CRI: add support for CDI device injection ([#6654](https://github.com/containerd/containerd/pull/6654)) - Disable writing freelist to make the file robust against data corruptions ([#6761](https://github.com/containerd/containerd/pull/6761)) - mv design docs/historical/design ([#6777](https://github.com/containerd/containerd/pull/6777)) - CRI: improve image pulling performance ([#6702](https://github.com/containerd/containerd/pull/6702)) - docs: remove runtime v1; migrate config v1 to v2 ([#6776](https://github.com/containerd/containerd/pull/6776)) - Skip flaky test on Windows ([#6779](https://github.com/containerd/containerd/pull/6779)) - docs/getting-started.md: typo ([#6775](https://github.com/containerd/containerd/pull/6775)) - Add no_tracing tag ([#6750](https://github.com/containerd/containerd/pull/6750)) - Move historical docs to `docs/historical` ([#6754](https://github.com/containerd/containerd/pull/6754)) - Run go mod tidy in integration tests ([#6768](https://github.com/containerd/containerd/pull/6768)) - go.mod: move indirects, and update integration go.mod to 1.18 ([#6765](https://github.com/containerd/containerd/pull/6765)) - Drop gotest.tools ([#6762](https://github.com/containerd/containerd/pull/6762)) - Use t.Setenv instead of os.Setenv ([#6760](https://github.com/containerd/containerd/pull/6760)) - Upgrade to Go 1.18 ([#6709](https://github.com/containerd/containerd/pull/6709)) - Adding multi-arch support for the configure.sh script ([#6751](https://github.com/containerd/containerd/pull/6751)) - docs/getting-started.md: massive update ([#6758](https://github.com/containerd/containerd/pull/6758)) - Remove unmaintained contrib/linuxkit ([#6755](https://github.com/containerd/containerd/pull/6755)) - \[Windows CI] Address some timeout issues ([#6757](https://github.com/containerd/containerd/pull/6757)) - BUILDING.md: update supported Go versions ([#6756](https://github.com/containerd/containerd/pull/6756)) - update runc to 1.1.1 ([#6753](https://github.com/containerd/containerd/pull/6753)) - CI: add Rocky Linux 8 ([#6747](https://github.com/containerd/containerd/pull/6747)) - CI: bump up crun to 1.4.4 ([#6748](https://github.com/containerd/containerd/pull/6748)) - added make help for cri integration ([#6743](https://github.com/containerd/containerd/pull/6743)) - Update README.md cncf landscape url ([#6740](https://github.com/containerd/containerd/pull/6740)) - Fix error message in TestNewBinaryIO ([#6738](https://github.com/containerd/containerd/pull/6738)) - Use typeurl.Any instead of github.com/gogo/protobuf/types.Any ([#6706](https://github.com/containerd/containerd/pull/6706)) - Use cgroups.AddProc() for cgroups v1 ([#5738](https://github.com/containerd/containerd/pull/5738)) - fix: ctr images mount with snapshotter option can't get snapshotter ([#6713](https://github.com/containerd/containerd/pull/6713)) - cgroup2: monitor OOMKill instead of OOM to prevent missing container events ([#6323](https://github.com/containerd/containerd/pull/6323)) - moving up to go-cni v1.1.4 ([#6721](https://github.com/containerd/containerd/pull/6721)) - native: fix deadlock from leaving transactions open ([#6722](https://github.com/containerd/containerd/pull/6722)) - go.mod: remove replace, and update github.com/gogo/googleapis v1.4.1 ([#5390](https://github.com/containerd/containerd/pull/5390)) - Github Security Advisory [GHSA-c9cp-9c75-9v8c](https://github.com/containerd/containerd/security/advisories/GHSA-c9cp-9c75-9v8c) - runtime: deprecate runc --criu / -criu-path option ([#6496](https://github.com/containerd/containerd/pull/6496)) - Bug fix for mount path handling ([#6651](https://github.com/containerd/containerd/pull/6651)) - Upgrade containerd/imgcrypt and opencontainers/image-spec ([#6711](https://github.com/containerd/containerd/pull/6711)) - Remove enumvalue_customname, goproto_enum_prefix and enum_customname ([#6708](https://github.com/containerd/containerd/pull/6708)) - Remove gogoproto.customtype ([#6699](https://github.com/containerd/containerd/pull/6699)) - Skip tty critest testcase on Windows Server 2022 ([#6698](https://github.com/containerd/containerd/pull/6698)) - Build with Go 1.18 ([#6605](https://github.com/containerd/containerd/pull/6605)) - Update prometheus client vendor ([#6690](https://github.com/containerd/containerd/pull/6690)) - vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd ([#6687](https://github.com/containerd/containerd/pull/6687)) - Make the temp mount as ready only in container WithVolumes ([#6593](https://github.com/containerd/containerd/pull/6593)) - fix: `ctr run --cni` get failed ([#6670](https://github.com/containerd/containerd/pull/6670)) - test: use `T.TempDir` to create temporary test directory ([#6681](https://github.com/containerd/containerd/pull/6681)) - Make OpenLab's CI jobs blocking ([#6679](https://github.com/containerd/containerd/pull/6679)) - document log level and format ([#6683](https://github.com/containerd/containerd/pull/6683)) - Add shared content label to namespaces ([#6660](https://github.com/containerd/containerd/pull/6660)) - Add protoc-gen-go-fieldpath ([#6562](https://github.com/containerd/containerd/pull/6562)) - Enable gosec linter for golangci-lint ([#6669](https://github.com/containerd/containerd/pull/6669)) - Make mkfs.xfs available on OpenLab's CI environment ([#6668](https://github.com/containerd/containerd/pull/6668)) - ctr: improve error relative shim path error msg ([#6519](https://github.com/containerd/containerd/pull/6519)) - typo fixes under cmd. ([#6674](https://github.com/containerd/containerd/pull/6674)) - Handle CRI Device.HostPath on Windows ([#6618](https://github.com/containerd/containerd/pull/6618)) - Upgrade golangci-lint and its GitHub Action ([#6666](https://github.com/containerd/containerd/pull/6666)) - Don't build a second copy of containerd-shim-runhcs-v1.exe ([#6661](https://github.com/containerd/containerd/pull/6661)) - Update TestNormalize to only test Windows platform ([#6569](https://github.com/containerd/containerd/pull/6569)) - Fix link in getting-started.md ([#6663](https://github.com/containerd/containerd/pull/6663)) - Fuzzing: refactor metadata fuzzers ([#6423](https://github.com/containerd/containerd/pull/6423)) - Two xfs file systems with same UUID can not be mounted on the same sy… ([#6650](https://github.com/containerd/containerd/pull/6650)) - \[Windows] Fix deadline exceeded in daemon restart ([#6635](https://github.com/containerd/containerd/pull/6635)) - Use temp file for export/import test ([#6658](https://github.com/containerd/containerd/pull/6658)) - strip path-info from `-v` (version) output, and implement -v flag for containerd-shim ([#6495](https://github.com/containerd/containerd/pull/6495)) - Improve unexpected response error handling in resolver ([#6617](https://github.com/containerd/containerd/pull/6617)) - Use the latest tag for azure images ([#6601](https://github.com/containerd/containerd/pull/6601)) - Run CRI integration tests in GitHub Actions (Windows) ([#6626](https://github.com/containerd/containerd/pull/6626)) - cri: fix integration test on cgroupsv2 system ([#6595](https://github.com/containerd/containerd/pull/6595)) - Use version 2 configuration format in docs/PLUGINS.md ([#6613](https://github.com/containerd/containerd/pull/6613)) - update to go 1.16.15, 1.17.8 to address CVE-2022-24921 ([#6619](https://github.com/containerd/containerd/pull/6619)) - Update status of 1.4 release ([#6614](https://github.com/containerd/containerd/pull/6614)) - Update TestContainerSymlinkVolumes to use windows path ([#6568](https://github.com/containerd/containerd/pull/6568)) - Add --user support for ctr run Windows ([#6603](https://github.com/containerd/containerd/pull/6603)) - Update releases ([#6608](https://github.com/containerd/containerd/pull/6608)) - Github Security Advisory [GHSA-crp2-qrr5-8pq7](https://github.com/containerd/containerd/security/advisories/GHSA-crp2-qrr5-8pq7) - Adds support for Windows ArgsEscaped images ([#6479](https://github.com/containerd/containerd/pull/6479)) - Do not use weak import ([#6558](https://github.com/containerd/containerd/pull/6558)) - cri: relax test for system without hugetlb ([#6596](https://github.com/containerd/containerd/pull/6596)) - Use containerd/protobuild instead of stevvooe/protobuild ([#6578](https://github.com/containerd/containerd/pull/6578)) - integration: remove duplicated util pkg ([#6597](https://github.com/containerd/containerd/pull/6597)) - go.mod: update to github.com/tchap/go-patricia/v2 v2.3.1 ([#6591](https://github.com/containerd/containerd/pull/6591)) - Update Go version recommendation in getting started ([#6585](https://github.com/containerd/containerd/pull/6585)) - go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 ([#6337](https://github.com/containerd/containerd/pull/6337)) - fix Implicit memory aliasing in for loop ([#6331](https://github.com/containerd/containerd/pull/6331)) - Fix build with gccgo ([#6579](https://github.com/containerd/containerd/pull/6579)) - Replace golang.org/x/net/context with std library ([#6580](https://github.com/containerd/containerd/pull/6580)) - containerd-shim-runc-v1: return init pid when clean dead shim ([#6571](https://github.com/containerd/containerd/pull/6571)) - Use Windows matcher when on Windows platform in all code paths ([#6491](https://github.com/containerd/containerd/pull/6491)) - containerd-shim-runc-v2: return init pid when clean dead shim ([#6452](https://github.com/containerd/containerd/pull/6452)) - \[Windows]\[Integration] Enable TestRestartMonitor ([#6515](https://github.com/containerd/containerd/pull/6515)) - go.mod: fsnotify v1.5.1, moby/sys/mountinfo v0.6.0, moby/sys/signal v0.7.0 ([#6554](https://github.com/containerd/containerd/pull/6554)) </details> ##### Changes from containerd/cgroups <details><summary>49 commits</summary> - Upgrade GitHub actions CI workflow ([#249](https://github.com/containerd/cgroups/pull/249)) - Upgrade Go compiler to 1.19 ([#248](https://github.com/containerd/cgroups/pull/248)) - Don't use ioutil ([#246](https://github.com/containerd/cgroups/pull/246)) - Check that cgroup is empty before deleting ([#228](https://github.com/containerd/cgroups/pull/228)) - Support cgroup.AddThread in cgroupv2 manager ([#243](https://github.com/containerd/cgroups/pull/243)) - Support to handle more than 4 fields in cpuacct.stat ([#231](https://github.com/containerd/cgroups/pull/231)) - typo shoulld -> should ([#236](https://github.com/containerd/cgroups/pull/236)) - Upgrade github.com/cilium/ebpf from v0.4.0 to v0.9.1 ([#241](https://github.com/containerd/cgroups/pull/241)) - go.mod: github.com/stretchr/testify v1.8.0 ([#240](https://github.com/containerd/cgroups/pull/240)) - .github: use ubuntu-22.04 to test cgroupv2 ([#237](https://github.com/containerd/cgroups/pull/237)) - feat(v2): Support cgroup.MoveTo in cgroupv2 manager ([#235](https://github.com/containerd/cgroups/pull/235)) - Update README to include usage examples of v2 client ([#233](https://github.com/containerd/cgroups/pull/233)) - ParseCgroupFile: fix wrong comment about unified hierarchy ; add ParseCgroupFileUnified to get the unified path ([#232](https://github.com/containerd/cgroups/pull/232)) - Bump go version to 1.17 in go.mod ([#230](https://github.com/containerd/cgroups/pull/230)) - make cmd/ a separate module (as it's only for testing) ([#226](https://github.com/containerd/cgroups/pull/226)) - feat(v2): add Update method for v2.Manager ([#225](https://github.com/containerd/cgroups/pull/225)) - feat: add memory.min param ([#211](https://github.com/containerd/cgroups/pull/211)) - modified the dereference null pointer value. ([#218](https://github.com/containerd/cgroups/pull/218)) - update readme for cpu cgroup demo ([#217](https://github.com/containerd/cgroups/pull/217)) - Fix systemd full path ([#221](https://github.com/containerd/cgroups/pull/221)) - Update Go version and fedora base ([#223](https://github.com/containerd/cgroups/pull/223)) - Fix panic in NewSystemd on nil values ([#219](https://github.com/containerd/cgroups/pull/219)) </details> ##### Changes from containerd/continuity <details><summary>28 commits</summary> - go.mod: update dependencies (take 2) ([#204](https://github.com/containerd/continuity/pull/204)) - Revert "go.mod: update dependencies" ([#205](https://github.com/containerd/continuity/pull/205)) - Various small fix-ups ([#202](https://github.com/containerd/continuity/pull/202)) - update authors and mailmap ([#201](https://github.com/containerd/continuity/pull/201)) - move cmd/continuity to its own go module ([#200](https://github.com/containerd/continuity/pull/200)) - CI: resolve Go path before sudoing ; Remove deprecated io/ioutil (except ioutil.ReadDir) ([#198](https://github.com/containerd/continuity/pull/198)) - fs.CopyDir: support sockets and pipes ([#197](https://github.com/containerd/continuity/pull/197)) - Fix wrapping errors ([#196](https://github.com/containerd/continuity/pull/196)) </details> ##### Changes from containerd/fifo <details><summary>26 commits</summary> - Update Go vers, x/sys vendor ([#51](https://github.com/containerd/fifo/pull/51)) - chore: cleanup old buildtags by `go fix` ([#49](https://github.com/containerd/fifo/pull/49)) - Return nil when openFifo returns nil ([#47](https://github.com/containerd/fifo/pull/47)) - Resolve golangci-lint-action package warnings ([#48](https://github.com/containerd/fifo/pull/48)) - Remove references to io/ioutil package ([#45](https://github.com/containerd/fifo/pull/45)) - Update GitHub actions CI workflow ([#46](https://github.com/containerd/fifo/pull/46)) - go.mod: github.com/stretchr/testify v1.8.0, golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8, go 1.18 ([#44](https://github.com/containerd/fifo/pull/44)) - fifo_test: Add 2 tests for closing after reading ([#42](https://github.com/containerd/fifo/pull/42)) - replace pkg/errors ([#41](https://github.com/containerd/fifo/pull/41)) - fifo.Close(): prevent possible panic if fifo is nil ([#32](https://github.com/containerd/fifo/pull/32)) - Update branch name in GitHub Actions ([#40](https://github.com/containerd/fifo/pull/40)) </details> ##### Changes from containerd/go-cni <details><summary>38 commits</summary> - Add Go 1.20 support ([#111](https://github.com/containerd/go-cni/pull/111)) - opts: add cgroupPath capability ([#110](https://github.com/containerd/go-cni/pull/110)) - go.mod: github.com/containernetworking/cni v1.1.2 ([#109](https://github.com/containerd/go-cni/pull/109)) - Remove references to io/ioutil package ([#106](https://github.com/containerd/go-cni/pull/106)) - Update golangci/golangci-lint package ([#108](https://github.com/containerd/go-cni/pull/108)) - Update GitHub actions CI workflow ([#107](https://github.com/containerd/go-cni/pull/107)) - Add support for Windows default conf paths ([#103](https://github.com/containerd/go-cni/pull/103)) - go.mod: github.com/stretchr/testify v1.8.0 ([#104](https://github.com/containerd/go-cni/pull/104)) - go.mod: update libcni to v1.1.1 ([#101](https://github.com/containerd/go-cni/pull/101)) - add in some serial setup tests; a little make cleanup ([#100](https://github.com/containerd/go-cni/pull/100)) - Re-introduce serial network setup ([#99](https://github.com/containerd/go-cni/pull/99)) - bump github.com/containernetworking/cni v1.1.0 ([#98](https://github.com/containerd/go-cni/pull/98)) - Revert "Update loopback version to support check" ([#96](https://github.com/containerd/go-cni/pull/96)) - Use revive instead of golint ([#92](https://github.com/containerd/go-cni/pull/92)) - Bump go verion to 1.17 ([#91](https://github.com/containerd/go-cni/pull/91)) - moving up to latest CNI plugin release ([#90](https://github.com/containerd/go-cni/pull/90)) - Fix Loopback Version ([#88](https://github.com/containerd/go-cni/pull/88)) - Update comment for capabilities ([#89](https://github.com/containerd/go-cni/pull/89)) - Add integration test for linux and update go version from 1.16 to 1.17 ([#84](https://github.com/containerd/go-cni/pull/84)) </details> ##### Changes from containerd/imgcrypt <details><summary>49 commits</summary> - CHANGES: Updated CHANGES document for 1.1.7 release ([#97](https://github.com/containerd/imgcrypt/pull/97)) - Update to ocicrypt 1.1.6 and add support for zstd type of compressed layers ([#96](https://github.com/containerd/imgcrypt/pull/96)) - build(deps): Update to containerd 1.6.8 ([#92](https://github.com/containerd/imgcrypt/pull/92)) - tests: Add -traditional to OpenSSL command line when OSSL v3 is used ([#90](https://github.com/containerd/imgcrypt/pull/90)) - chore: fix readme typo ([#87](https://github.com/containerd/imgcrypt/pull/87)) - Update to min golang 1.18 ([#88](https://github.com/containerd/imgcrypt/pull/88)) - CHANGES: Updated CHANGES document for 1.1.6 release ([#85](https://github.com/containerd/imgcrypt/pull/85)) - build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.6 ([#83](https://github.com/containerd/imgcrypt/pull/83)) - CI: Upgrade to golangci-lint v1.46.2 ([#84](https://github.com/containerd/imgcrypt/pull/84)) - CICD: Rename master branch to main ([#79](https://github.com/containerd/imgcrypt/pull/79)) - Rename any to pbAny ([#78](https://github.com/containerd/imgcrypt/pull/78)) - Use reflect to support diff.ApplyConfig with/without gogo's types.Any ([#75](https://github.com/containerd/imgcrypt/pull/75)) - Upgrade golangci-lint-action and golangci-lint ([#76](https://github.com/containerd/imgcrypt/pull/76)) - CHANGES: Updated CHANGES document for 1.1.4 release ([#74](https://github.com/containerd/imgcrypt/pull/74)) - Bump github.com/containerd/containerd from 1.5.10 to 1.6.1 ([#73](https://github.com/containerd/imgcrypt/pull/73)) - images: prepare for typeurl.Any ([#72](https://github.com/containerd/imgcrypt/pull/72)) - Bump ocicrypt to 1.1.3 ([#71](https://github.com/containerd/imgcrypt/pull/71)) - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#67](https://github.com/containerd/imgcrypt/pull/67)) </details> ##### Changes from containerd/nri <details><summary>56 commits</summary> - Add Go 1.20 support to CI ([#30](https://github.com/containerd/nri/pull/30)) - Add CodeQL Security scan workflow ([#31](https://github.com/containerd/nri/pull/31)) - fixes: sort final adjusted mount slice. ([#29](https://github.com/containerd/nri/pull/29)) - fixes: fix resource adjustment to properly ignore unset/unadjusted fields. ([#28](https://github.com/containerd/nri/pull/28)) - adaptation: fix mount and device adjustment. ([#27](https://github.com/containerd/nri/pull/27)) - Make plugin timeouts configurable, adjust default socket path. ([#26](https://github.com/containerd/nri/pull/26)) - pkg/adaptation: eliminate configuration file. ([#24](https://github.com/containerd/nri/pull/24)) - stub: fix a potential plugin crash. ([#25](https://github.com/containerd/nri/pull/25)) - adaptation: fix a panic for unsolicited updates. ([#23](https://github.com/containerd/nri/pull/23)) - pkg/adaptaton: log errors with %v not %w. ([#22](https://github.com/containerd/nri/pull/22)) - chore: cleanup old buildtags by `go fix` ([#21](https://github.com/containerd/nri/pull/21)) - add back project info ([#20](https://github.com/containerd/nri/pull/20)) - Extend scope to enable common pluggable runtime extensions. ([#16](https://github.com/containerd/nri/pull/16)) - Update GitHub actions CI workflow ([#19](https://github.com/containerd/nri/pull/19)) - replace pkg/errors ([#17](https://github.com/containerd/nri/pull/17)) - Update the examples in README.md ([#15](https://github.com/containerd/nri/pull/15)) - Rename branch from master to main ([#12](https://github.com/containerd/nri/pull/12)) - Update to containerd 1.5.1 ([#11](https://github.com/containerd/nri/pull/11)) </details> ##### Changes from containerd/ttrpc <details><summary>62 commits</summary> - Rework deadline assertion logging to be more clear ([#132](https://github.com/containerd/ttrpc/pull/132)) - Fix server shutdown logic ([#130](https://github.com/containerd/ttrpc/pull/130)) - Bump golang.org/x/sys from 0.0.0-20210124154548-22da62e12c0c to 0.1.0 ([#133](https://github.com/containerd/ttrpc/pull/133)) - Make checkServerShutdown verbose ([#128](https://github.com/containerd/ttrpc/pull/128)) - server: Fix connection issues when receiving ECONNRESET ([#123](https://github.com/containerd/ttrpc/pull/123)) - README: protobuild is in containerd org now ([#125](https://github.com/containerd/ttrpc/pull/125)) - stream: fix the map of streams leak ([#120](https://github.com/containerd/ttrpc/pull/120)) - Regenerated pb.go files to fix mismatches ([#122](https://github.com/containerd/ttrpc/pull/122)) - build: Fix references to check-protos target in Makefile ([#118](https://github.com/containerd/ttrpc/pull/118)) - Add service prefix option to generator ([#116](https://github.com/containerd/ttrpc/pull/116)) - doc: ttrpc supports stream ([#121](https://github.com/containerd/ttrpc/pull/121)) - \*: remove codecov ([#114](https://github.com/containerd/ttrpc/pull/114)) - Only generate a Go file if the file has some services ([#112](https://github.com/containerd/ttrpc/pull/112)) - \*.go: organize errors to one spot ([#113](https://github.com/containerd/ttrpc/pull/113)) - PROTOCOL: slight markdown touchup ([#111](https://github.com/containerd/ttrpc/pull/111)) - Introduce streaming ([#107](https://github.com/containerd/ttrpc/pull/107)) - Update checkout and lint actions ([#109](https://github.com/containerd/ttrpc/pull/109)) - Add Makefile and update protobuf ([#106](https://github.com/containerd/ttrpc/pull/106)) - Add ttrpc protocol definition ([#102](https://github.com/containerd/ttrpc/pull/102)) - Enable Codecov again ([#105](https://github.com/containerd/ttrpc/pull/105)) - Use CR+LF instead of LF regardless of OS ([#103](https://github.com/containerd/ttrpc/pull/103)) - Log the error's underyling errno if there is ([#104](https://github.com/containerd/ttrpc/pull/104)) - Use google.golang.org/protobuf instead of github.com/gogo/protobuf ([#99](https://github.com/containerd/ttrpc/pull/99)) - Wrap correct error on unix.GetsockoptUcred failure ([#100](https://github.com/containerd/ttrpc/pull/100)) - Update CI project checks to use containerd project action ([#101](https://github.com/containerd/ttrpc/pull/101)) </details> ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`6c3934b`](https://github.com/containerd/containerd/commit/6c3934b029d8) -> [`1f10f66`](https://github.com/containerd/containerd/commit/1f10f66a31bf) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/containerd/containerd/commit/5330a85ea652) ***new*** - **github.com/Microsoft/go-winio** v0.5.1 -> v0.6.0 - **github.com/Microsoft/hcsshim** v0.9.2 -> v0.10.0-rc.7 - **github.com/blang/semver/v4** v4.0.0 ***new*** - **github.com/cenkalti/backoff/v4** v4.1.2 -> v4.2.0 - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/cilium/ebpf** v0.7.0 -> v0.9.1 - **github.com/container-orchestrated-devices/container-device-interface** v0.5.4 ***new*** - **github.com/containerd/btrfs/v2** v2.0.0 ***new*** - **github.com/containerd/cgroups** v1.0.3 -> v1.1.0 - **github.com/containerd/cgroups/v3** v3.0.1 ***new*** - **github.com/containerd/continuity** v0.2.2 -> v0.3.0 - **github.com/containerd/fifo** v1.0.0 -> v1.1.0 - **github.com/containerd/go-cni** v1.1.3 -> v1.1.9 - **github.com/containerd/imgcrypt** v1.1.3 -> v1.1.7 - **github.com/containerd/nri** v0.1.0 -> v0.3.0 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.1 - **github.com/containerd/typeurl/v2** v2.1.0 ***new*** - **github.com/containernetworking/cni** v1.0.1 -> v1.1.2 - **github.com/containernetworking/plugins** v1.0.1 -> v1.2.0 - **github.com/containers/ocicrypt** v1.1.2 -> v1.1.6 - **github.com/coreos/go-systemd/v22** v22.3.2 -> v22.5.0 - **github.com/cpuguy83/go-md2man/v2** v2.0.0 -> v2.0.2 - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/docker/go-units** v0.4.0 -> v0.5.0 - **github.com/emicklei/go-restful/v3** v3.10.1 ***new*** - **github.com/fsnotify/fsnotify** v1.4.9 -> v1.6.0 - **github.com/go-logr/logr** v1.2.2 -> v1.2.3 - **github.com/godbus/dbus/v5** v5.0.6 -> v5.1.0 - **github.com/google/go-cmp** v0.5.6 -> v0.5.9 - **github.com/google/uuid** v1.2.0 -> v1.3.0 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.7.0 ***new*** - **github.com/imdario/mergo** v0.3.12 -> v0.3.13 - **github.com/intel/goresctrl** v0.2.0 -> v0.3.0 - **github.com/klauspost/compress** v1.11.13 -> v1.16.0 - **github.com/klauspost/cpuid/v2** v2.0.4 ***new*** - **github.com/miekg/pkcs11** v1.0.3 -> v1.1.1 - **github.com/minio/sha256-simd** v1.0.0 ***new*** - **github.com/moby/sys/mountinfo** v0.5.0 -> v0.6.2 - **github.com/moby/sys/sequential** v0.5.0 ***new*** - **github.com/moby/sys/signal** v0.6.0 -> v0.7.0 - **github.com/opencontainers/image-spec** [`693428a`](https://github.com/containerd/containerd/commit/693428a734f5) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b) - **github.com/opencontainers/runc** v1.1.0 -> v1.1.4 - **github.com/opencontainers/runtime-spec** [`1c3f411`](https://github.com/containerd/containerd/commit/1c3f411f0417) -> v1.1.0-rc.1 - **github.com/opencontainers/runtime-tools** [`946c877`](https://github.com/containerd/containerd/commit/946c877fa809) ***new*** - **github.com/opencontainers/selinux** v1.10.0 -> v1.11.0 - **github.com/pelletier/go-toml** v1.9.3 -> v1.9.5 - **github.com/prometheus/client_golang** v1.11.0 -> v1.14.0 - **github.com/prometheus/client_model** v0.2.0 -> v0.3.0 - **github.com/prometheus/common** v0.30.0 -> v0.37.0 - **github.com/prometheus/procfs** v0.7.3 -> v0.8.0 - **github.com/russross/blackfriday/v2** v2.0.1 -> v2.1.0 - **github.com/sirupsen/logrus** v1.8.1 -> v1.9.0 - **github.com/stretchr/testify** v1.7.0 -> v1.8.2 - **github.com/syndtr/gocapability** [`42c35b4`](https://github.com/containerd/containerd/commit/42c35b437635) ***new*** - **github.com/tchap/go-patricia/v2** v2.3.1 ***new*** - **github.com/urfave/cli** v1.22.1 -> v1.22.12 - **github.com/vishvananda/netlink** [`f5de759`](https://github.com/containerd/containerd/commit/f5de75959ad5) -> v1.2.1-beta.2 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.37.0 ***new*** - **go.opentelemetry.io/otel/sdk** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.3.0 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.11.0 -> v0.19.0 - **golang.org/x/crypto** [`32db794`](https://github.com/containerd/containerd/commit/32db794688a5) -> v0.1.0 - **golang.org/x/mod** v0.7.0 ***new*** - **golang.org/x/net** [`fe4d628`](https://github.com/containerd/containerd/commit/fe4d6282115f) -> v0.7.0 - **golang.org/x/oauth2** [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.4.0 - **golang.org/x/sync** [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0 - **golang.org/x/sys** [`1d35b9e`](https://github.com/containerd/containerd/commit/1d35b9e2eb4e) -> v0.6.0 - **golang.org/x/term** [`6886f2d`](https://github.com/containerd/containerd/commit/6886f2dfbf5b) -> v0.5.0 - **golang.org/x/text** v0.3.7 -> v0.7.0 - **golang.org/x/time** [`1f47c86`](https://github.com/containerd/containerd/commit/1f47c861a9ac) -> [`90d013b`](https://github.com/containerd/containerd/commit/90d013bbcef8) - **golang.org/x/tools** v0.5.0 ***new*** - **google.golang.org/genproto** [`e50cd97`](https://github.com/containerd/containerd/commit/e50cd9704f63) -> [`7f2fa6f`](https://github.com/containerd/containerd/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.43.0 -> v1.53.0 - **google.golang.org/protobuf** v1.27.1 -> v1.28.1 - **gopkg.in/yaml.v3** [`496545a`](https://github.com/containerd/containerd/commit/496545a6307b) -> v3.0.1 - **k8s.io/api** v0.22.5 -> v0.26.2 - **k8s.io/apimachinery** v0.22.5 -> v0.26.2 - **k8s.io/apiserver** v0.22.5 -> v0.26.2 - **k8s.io/client-go** v0.22.5 -> v0.26.2 - **k8s.io/component-base** v0.22.5 -> v0.26.2 - **k8s.io/cri-api** v0.23.1 -> v0.26.2 - **k8s.io/klog/v2** v2.30.0 -> v2.90.1 - **k8s.io/utils** [`cb0fa31`](https://github.com/containerd/containerd/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/containerd/containerd/commit/a5ecb0141aa5) - **sigs.k8s.io/json** [`f223a00`](https://github.com/containerd/containerd/commit/f223a00ba0e2) ***new*** - **sigs.k8s.io/structured-merge-diff/v4** v4.1.2 -> v4.2.3 - **sigs.k8s.io/yaml** v1.2.0 -> v1.3.0 Previous release can be found at [v1.6.0](https://github.com/containerd/containerd/releases/tag/v1.6.0) ##### Which file should I download? - `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04). - `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent. - `cri-containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) - `cri-containerd-cni-<VERSION>-<OS>-<ARCH>.tar.gz`: (Deprecated) In addition to containerd, typically you will have to install [runc](https://github.com/opencontainers/runc/releases) and [CNI plugins](https://github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. ### [`v1.6.31`](https://github.com/containerd/containerd/releases/tag/v1.6.31): containerd 1.6.31 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.30...v1.6.31) Welcome to the v1.6.31 release of containerd! The thirty-first patch release for containerd 1.6 contains a few fixes, one for a regression that was introduced in v1.6.30 in the way process exits were handled. ##### Highlights - Adds mediatype to OCI index record on export ([#9991](https://github.com/containerd/containerd/pull/9991)) ##### Runtime - Fix runc shim to only defer init process exits ([#10038](https://github.com/containerd/containerd/pull/10038)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Phil Estes - Akihiro Suda - Austin Vazquez - Laura Brehm - Maksym Pavlenko - Sebastiaan van Stijn - Talon ##### Changes <details><summary>14 commits</summary> - Prepare for v1.6.31 release ([#10040](https://github.com/containerd/containerd/pull/10040)) - [`7f7012bad`](https://github.com/containerd/containerd/commit/7f7012bad7af5275d84ba63b6ba93a4882cd94cd) Prepare for v1.6.31 release - Fix runc shim to only defer init process exits ([#10038](https://github.com/containerd/containerd/pull/10038)) - [`5e53da4a1`](https://github.com/containerd/containerd/commit/5e53da4a1403e80339e3d2897dd41cce3842b335) runc-shim: only defer init process exits - Fix compile from version control system (source) use case ([#10011](https://github.com/containerd/containerd/pull/10011)) - [`7592f87f0`](https://github.com/containerd/containerd/commit/7592f87f040128b44e1aafef33b0b33c65334209) Fix compile from version control system (source) use case - Adds mediatype to OCI index record on export ([#9991](https://github.com/containerd/containerd/pull/9991)) - [`8d415fd0e`](https://github.com/containerd/containerd/commit/8d415fd0ee2d88ae4c53d75acf0707ec9151ea0f) adds mediatype to oci index record - vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 ([#9974](https://github.com/containerd/containerd/pull/9974)) - [`2dbb59b5a`](https://github.com/containerd/containerd/commit/2dbb59b5af8b373085c2dcb272a78d586eeb6bfc) vendor: github.com/golang/protobuf v1.5.4 - [`069bb78c9`](https://github.com/containerd/containerd/commit/069bb78c9ecc7ac7cab650a3029e745471e2a899) build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 - [`68d395cad`](https://github.com/containerd/containerd/commit/68d395cad899fcba32d9c5dcc20b2afe375c7682) build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 - Backport test release on PR ([#9955](https://github.com/containerd/containerd/pull/9955)) - [`b3713136d`](https://github.com/containerd/containerd/commit/b3713136d1fccacd55dbcd507739f2b788b29554) CI: test release.yml on every PR </details> ##### Dependency Changes - **github.com/golang/protobuf** v1.5.3 -> v1.5.4 - **google.golang.org/protobuf** v1.31.0 -> v1.33.0 Previous release can be found at [v1.6.30](https://github.com/containerd/containerd/releases/tag/v1.6.30) ### [`v1.6.30`](https://github.com/containerd/containerd/releases/tag/v1.6.30): containerd 1.6.30 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.29...v1.6.30) Welcome to the v1.6.30 release of containerd! The thirtieth patch release for containerd 1.6 contains various fixes and updates as well as a build fix which prevented the v1.6.29 tag from being released. ##### Highlights - Update builds to go 1.21.8 ([#9945](https://github.com/containerd/containerd/pull/9945)) - Fix config import relative path glob ([#9835](https://github.com/containerd/containerd/pull/9835)) - Move high volume event logs to Trace level ([#9824](https://github.com/containerd/containerd/pull/9824)) - Move certain debug logs to trace logs ([#9762](https://github.com/containerd/containerd/pull/9762)) ##### Container Runtime Interface (CRI) - Add timeout to drain exec io ([#9768](https://github.com/containerd/containerd/pull/9768)) - Propagate deprecation list to runtime status ([#9819](https://github.com/containerd/containerd/pull/9819)) - Fix image pinning when image is not pulled through cri ([#9785](https://github.com/containerd/containerd/pull/9785)) ##### Runtime - Update runc-shim to process exec exits before init ([#9927](https://github.com/containerd/containerd/pull/9927)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Wei Fu - Maksym Pavlenko - Phil Estes - Kirtana Ashok - Mike Brown - Akhil Mohan - Angelos Kolaitis - Austin Vazquez - Henry Wang - Laura Brehm - Nashwan Azhari - Sebastiaan van Stijn - Tony Fang ##### Changes <details><summary>59 commits</summary> - Prepare v1.6.30 ([#9952](https://github.com/containerd/containerd/pull/9952)) - [`8268fc6e9`](https://github.com/containerd/containerd/commit/8268fc6e90f2305410609abf34559ec2f5966c78) Prepare release notes for v1.6.30 - [`614ca2e12`](https://github.com/containerd/containerd/commit/614ca2e12193ae80afc11beb5a55fc2ae05c8915) Revert go version environment removal - Prepare release notes for v1.6.29 ([#9950](https://github.com/containerd/containerd/pull/9950)) - [`9ef6d9d03`](https://github.com/containerd/containerd/commit/9ef6d9d03d8d4124d4e8e28399fef28c137fcc2e) Add release notes for v1.6.29.toml - use a composite action to install Go ([#9949](https://github.com/containerd/containerd/pull/9949)) - [`cfbbb510c`](https://github.com/containerd/containerd/commit/cfbbb510c23672daf7711a9afd548801dd741c4a) Use the Go toolchain in CI matrix to build binaries - [`f015dbc5a`](https://github.com/containerd/containerd/commit/f015dbc5a3d1f5a6eaefc561130ee5bb05e0d6c5) use composite action in ci workflow - Update builds to go 1.21.8 ([#9945](https://github.com/containerd/containerd/pull/9945)) - [`ccf3eb6a2`](https://github.com/containerd/containerd/commit/ccf3eb6a2de426c9cfbb9409c330df79d3dbba0c) update to go 1.21.8, 1.22.1 - Backport easy go install and update go ([#9890](https://github.com/containerd/containerd/pull/9890)) - [`f6475ea59`](https://github.com/containerd/containerd/commit/f6475ea597b713a27e0b31e5723f3cd315b39eeb) Drop go 1.20 and build against 1.22 - [`7c45ad092`](https://github.com/containerd/containerd/commit/7c45ad0923f0ea267cb9b66a65dea6fff4e0ff0b) Extract a composite action to install Go - [`4f7305414`](https://github.com/containerd/containerd/commit/4f73054149a36ba97263af8ee72e302c7a226906) update to go1.21.6, go1.20.13 - [`da5a36c37`](https://github.com/containerd/containerd/commit/da5a36c3700ac1142c2451137a362d4c92d1897d) Use testify - [`afe6efee3`](https://github.com/containerd/containerd/commit/afe6efee30df36c16dae3f1afe87a8e324a9b031) Revert container_stats_test.go change which caused Windows CRI integration test failure - [`370ef115f`](https://github.com/containerd/containerd/commit/370ef115f0e1875bce98326cce4aafd2a953c30b) container_stats_test.go: avoid checking snapshot size - [`935720b8c`](https://github.com/containerd/containerd/commit/935720b8c065bddd2dc4372a76225ab0290b449c) Move inline PS scripts into files - [`74bae5af8`](https://github.com/containerd/containerd/commit/74bae5af8c853f52b65666682db7d31e9e8d2f02) Uninstall mingw before attempting upgrade - [`9b9500bb0`](https://github.com/containerd/containerd/commit/9b9500bb0d45ac1e669a3319039acf7c8359e885) CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners. - [`4814f9e48`](https://github.com/containerd/containerd/commit/4814f9e483fc2a0f897cf553ac67b882bc133fbe) seccomp, apparmor: add go:noinline - Disable OOM set score unpriv test temporarily ([#9943](https://github.com/containerd/containerd/pull/9943)) - [`c7c8ce6bc`](https://github.com/containerd/containerd/commit/c7c8ce6bcf73cc608b6987f0729f40f93ce443c4) Disable OOM set score unpriv test temporarily - Update runc-shim to process exec exits before init ([#9927](https://github.com/containerd/containerd/pull/9927)) - [`65915f0a2`](https://github.com/containerd/containerd/commit/65915f0a2c0b4d1cb590f39c6cc3b78e7bb75fcb) runc-shim: process exec exits before init - Backport GitHub actions package updates ([#9877](https://github.com/containerd/containerd/pull/9877)) - [`e552c8898`](https://github.com/containerd/containerd/commit/e552c889875ecb7fe2e8f5dadac77765f2988932) build(deps): bump golangci/golangci-lint-action from 3 to 4 - [`888ae152c`](https://github.com/containerd/containerd/commit/888ae152c6eb25eee5b4b533c5fd2f8c3448b609) build(deps): bump actions/cache from 3 to 4 - [`dd913a0de`](https://github.com/containerd/containerd/commit/dd913a0defb4aa139fe2ab719cf37850ad5c7898) build(deps): bump actions/upload-artifact from 3 to 4 - [`a250c101a`](https://github.com/containerd/containerd/commit/a250c101afdebcaa7016e50df7670d25e3427700) build(deps): bump actions/download-artifact from 3 to 4 - [`7c8fd2255`](https://github.com/containerd/containerd/commit/7c8fd2255deaee02ab957a2b05914d01498a7870) build(deps): bump github/codeql-action from 2 to 3 - [`f325e559e`](https://github.com/containerd/containerd/commit/f325e559e0d93a7990ef1302533d20484d59a50b) build(deps): bump docker/setup-buildx-action from 2 to 3 - [`1bae160de`](https://github.com/containerd/containerd/commit/1bae160de37a9b37cd8d995e1ffa54247c14f21c) build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3 - [`3c81dc13b`](https://github.com/containerd/containerd/commit/3c81dc13b45d917e802223b5f80c4559a3b7d969) build(deps): bump actions/upload-artifact from 1 to 3 - [`9b3b80eea`](https://github.com/containerd/containerd/commit/9b3b80eea1f68de6db0dde7578395995314520e5) build(deps): bump actions/setup-go from 3 to 5 - [`6b74818d8`](https://github.com/containerd/containerd/commit/6b74818d8908a66ba7ab668f486f1de9c84b1239) build(deps): bump actions/checkout from 3 to 4 - Fix config import relative path glob ([#9835](https://github.com/containerd/containerd/pull/9835)) - [`0f2068a70`](https://github.com/containerd/containerd/commit/0f2068a70e0824ef7fb13c3e21763428bc58ad40) Fix config import relative path glob - ci: update crun version to 1.14.3 ([#9851](https://github.com/containerd/containerd/pull/9851)) - [`89d00db95`](https://github.com/containerd/containerd/commit/89d00db952fbfa9a1425be30895e9615a9d3215f) ci: update crun version to 1.14.3 - Add timeout to drain exec io ([#9768](https://github.com/containerd/containerd/pull/9768)) - [`aac488730`](https://github.com/containerd/containerd/commit/aac488730fb6b4fec37cdc98d2b834e7033b60ca) \*: fix code style issue - [`2a38c7e2e`](https://github.com/containerd/containerd/commit/2a38c7e2ebc9e5f1dcca25cb70535e0886e8c620) cri: add config ut for invalid drain io timeout value - [`ce213431f`](https://github.com/containerd/containerd/commit/ce213431fd3d413861d705b3d2d28fa83b281e39) integration: add testcase to drain exec IO in time - [`b5d52efca`](https://github.com/containerd/containerd/commit/b5d52efca8c1c5494c8ab72c615a4d6ed190b159) cri: disable drain-exec-IO if it is empty timeout - [`85bed5863`](https://github.com/containerd/containerd/commit/85bed5863f5313bedd5e6c2319d677124b44cdf5) \*: update drainExecSyncIO docs and validate the timeout - [`0438e477c`](https://github.com/containerd/containerd/commit/0438e477c35faad18e6b7f3a6b7d8a8f787f5efc) \*: add DrainExecSyncIOTimeout config and disable as by default - [`fb262317c`](https://github.com/containerd/containerd/commit/fb262317cd66e9f9c2ce12389b658ce042e410cc) \*: fix typo and skip exec-io-drain-testcase in win - [`f50c9922b`](https://github.com/containerd/containerd/commit/f50c9922b1cc96e8829936509b2bf49ceaa4e5c1) pkg/cri/server: add timeout to drain exec io - Move high volume event logs to Trace level ([#9824](https://github.com/containerd/containerd/pull/9824)) - [`99fa35e70`](https://github.com/containerd/containerd/commit/99fa35e7015d487c210d82862b4c807a913d50f2) Move high volume event logs to Trace level - Propagate deprecation list to runtime status ([#9819](https://github.com/containerd/containerd/pull/9819)) - [`3785deac4`](https://github.com/containerd/containerd/commit/3785deac4fab3aa30be9a55812dc78b2e1841e29) cri: propagate deprecation list to runtime status - ctr: print deprecation warnings on every invocation ([#9821](https://github.com/containerd/containerd/pull/9821)) - [`b7a0b1b8e`](https://github.com/containerd/containerd/commit/b7a0b1b8ed895d1737c7a558cff4dae7f9f7e7df) ctr: print deprecation warnings on every invocation - Fix image pinning when image is not pulled through cri ([#9785](https://github.com/containerd/containerd/pull/9785)) - [`2d43994fb`](https://github.com/containerd/containerd/commit/2d43994fb921722002a5043724c6624bfb9d87f0) bug fix: make sure cri image is pinned when it is pulled outside cri - Move certain debug logs to trace logs ([#9762](https://github.com/containerd/containerd/pull/9762)) - [`195ef7691`](https://github.com/containerd/containerd/commit/195ef7691ea85cfbcb54693017a6195beddb55dc) Move certain debug logs to trace logs </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28) ### [`v1.6.29`](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29) [Compare Source](https://github.com/containerd/containerd/compare/v1.6.28...v1.6.29) ### [`v1.6.28`](https://github.com/containerd/containerd/releases/tag/v1.6.28): containerd 1.6.28 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.27...v1.6.28) Welcome to the v1.6.28 release of containerd! The twenty-eighth patch release for containerd 1.6 updates the runc binary in the release builds to address CVE-2024-21626 ##### Notable Updates - **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)) - **Update seccomp profile for new syscalls added since Linux 5.16** ([#9694](https://github.com/containerd/containerd/pull/9694)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Andrey Epifanov - Derek McGowan - Akihiro Suda - Maksym Pavlenko - Phil Estes - Shengjing Zhu - Wei Fu ##### Changes <details><summary>13 commits</summary> - Prepare v1.6.28 and update runc to v1.1.12 ([#9723](https://github.com/containerd/containerd/pull/9723)) - [`570c7c637`](https://github.com/containerd/containerd/commit/570c7c637745c9a5d41309c51193107a25768200) Prepare release notes for v1.6.28 - [`b20b9f86b`](https://github.com/containerd/containerd/commit/b20b9f86b583b11a7fac34e6c682bc7633c74237) Update runc binary to v1.1.12 - \[release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. ([#9707](https://github.com/containerd/containerd/pull/9707)) - [`19500722a`](https://github.com/containerd/containerd/commit/19500722aec045da29536401fa4c76dfc5ef0cbe) \[release/1.6] vendor: golang.org/x/crypto v0.18.0 - [`919928f6b`](https://github.com/containerd/containerd/commit/919928f6b006e563d1a1c57af36e29b570dd726a) \[release/1.6] vendor: golang.org/x/term v0.16.0 - [`7d6a4d23b`](https://github.com/containerd/containerd/commit/7d6a4d23b182e419c0cfa732c369d7f4c90c7a02) \[release/1.6] vendor: golang.org/x/sys v0.16.0 - [`16ac018ae`](https://github.com/containerd/containerd/commit/16ac018ae3efaa0389678a47d0135c739a93cbae) \[release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0 - \[release/1.6] seccomp: kernel 6.7 ([#9694](https://github.com/containerd/containerd/pull/9694)) - [`f44628305`](https://github.com/containerd/containerd/commit/f44628305d7cdccfd1f7b8996b39846db5c4f035) seccomp: kernel 6.7 - \[release/1.6] carry [#9557](https://github.com/containerd/containerd/issues/9557) - enable ARM CI ([#9636](https://github.com/containerd/containerd/pull/9636)) - [`65e1656f2`](https://github.com/containerd/containerd/commit/65e1656f2755727770f2adc90df8b972e7a513f2) cri: fix integration test on cgroupsv2 system - [`9cf1e1a39`](https://github.com/containerd/containerd/commit/9cf1e1a39ca17328c973a7d2ed2969e4f98993cc) \*: enable ARM64 runner </details> ##### Dependency Changes - **github.com/go-logr/logr** v1.2.2 -> v1.3.0 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/uuid** v1.3.0 -> v1.3.1 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 -> v0.46.0 - **go.opentelemetry.io/otel** v1.3.0 -> v1.21.0 - **go.opentelemetry.io/otel/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/sdk** v1.3.0 -> v1.21.0 - **go.opentelemetry.io/otel/trace** v1.3.0 -> v1.21.0 - **golang.org/x/crypto** v0.14.0 -> v0.18.0 - **golang.org/x/net** v0.17.0 -> v0.18.0 - **golang.org/x/oauth2** v0.10.0 -> v0.11.0 - **golang.org/x/sys** v0.13.0 -> v0.16.0 - **golang.org/x/term** v0.13.0 -> v0.16.0 - **golang.org/x/text** v0.13.0 -> v0.14.0 - **google.golang.org/grpc** v1.58.3 -> v1.59.0 Previous release can be found at [v1.6.27](https://github.com/containerd/containerd/releases/tag/v1.6.27) ### [`v1.6.27`](https://github.com/containerd/containerd/releases/tag/v1.6.27): containerd 1.6.27 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.26...v1.6.27) Welcome to the v1.6.27 release of containerd! The twenty-seventh patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Improve `/etc/group` handling when appending groups** ([#9543](https://github.com/containerd/containerd/pull/9543)) - **Update runc binary to v1.1.11** ([#9597](https://github.com/containerd/containerd/pull/9597)) - **Remove runc import** ([#9606](https://github.com/containerd/containerd/pull/9606)) - **Update shim pidfile permissions to 0644** ([#9613](https://github.com/containerd/containerd/pull/9613)) - **Update Go version to 1.20.13** ([#9625](https://github.com/containerd/containerd/pull/9625)) ##### Deprecation Warnings - **Emit deprecation warning for CRIU config usage** ([#9448](https://github.com/containerd/containerd/pull/9448)) - **Emit deprecation warning for some CRI configs** ([#9447](https://github.com/containerd/containerd/pull/9447)) - **Emit deprecation warning for `containerd.io/restart.logpath` label usage** ([#9572](https://github.com/containerd/containerd/pull/9572)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Akihiro Suda - Derek McGowan - Sebastiaan van Stijn - Djordje Lukic - Jaroslav Jindrak - Kay Yan - Maksym Pavlenko - Phil Estes - Wei Fu - ruiwen-zhao ##### Changes <details><summary>26 commits</summary> - \[release/1.6] Prepare release notes for v1.6.27 ([#9631](https://github.com/containerd/containerd/pull/9631)) - [`d0edecf28`](https://github.com/containerd/containerd/commit/d0edecf28b51b35cfb549e3d18467bd2087fb0e7) Prepare release notes for v1.6.27 - \[release/1.6] update to go1.20.13, test go1.21.6 ([#9625](https://github.com/containerd/containerd/pull/9625)) - [`32a515211`](https://github.com/containerd/containerd/commit/32a515211d03771e3a35bf7bcb4b114bf1131ada) update to go1.20.13, test go1.21.6 - \[release/1.6 backport] shim: Create pid-file with 0644 permissions ([#9613](https://github.com/containerd/containerd/pull/9613)) - [`37de14d95`](https://github.com/containerd/containerd/commit/37de14d9562db48f9b66f37b10fa3e704455ae25) shim: Create pid-file with 0644 permissions - \[release/1.6 backport] remove github.com/opencontainers/runc dependency ([#9606](https://github.com/containerd/containerd/pull/9606)) - [`3938d63de`](https://github.com/containerd/containerd/commit/3938d63de4737668ccec1f5eaf552c58a5d32057) remove github.com/opencontainers/runc dependency - \[release/1.6 backport] update runc binary to v1.1.11 ([#9597](https://github.com/containerd/containerd/pull/9597)) - [`9a9b11f73`](https://github.com/containerd/containerd/commit/9a9b11f733f778ce6171396d0c95e2b68cca5e21) update runc binary to v1.1.11 - \[release/1.6 backport] go.mod: dario.cat/mergo v1.0.0 ([#9570](https://github.com/containerd/containerd/pull/9570)) - [`6cd8e17ab`](https://github.com/containerd/containerd/commit/6cd8e17aba91d9f46f9e1a27b6381744e6cafe48) go.mod: dario.cat/mergo v1.0.0 - [`4f8ff5154`](https://github.com/containerd/containerd/commit/4f8ff5154abd2127d148fb11ca54feb6f0fb47af) go.mod: github.com/imdario/mergo v0.3.13 - \[release/1.6] restart: containerd.io/restart.logpath warning ([#9572](https://github.com/containerd/containerd/pull/9572)) - [`d24d263a4`](https://github.com/containerd/containerd/commit/d24d263a42f51dca398070be1f8268fd53fe6cc9) restart: containerd.io/restart.logpath warning - \[release/1.6 backport] WithAppendAdditionalGroups: better /etc/group handling ([#9543](https://github.com/containerd/containerd/pull/9543)) - [`9489c0eb0`](https://github.com/containerd/containerd/commit/9489c0eb0e7e51d90a0c2b5b4f5cbe23936d95ca) WithAppendAdditionalGroups: better /etc/group handling - \[release/1.6] cri: add deprecation warnings for deprecated CRI configs ([#9547](https://github.com/containerd/containerd/pull/9547)) - [`713065793`](https://github.com/containerd/containerd/commit/713065793592c0f877c81712a6f310f3d730bf07) deprecation: fix missing spaces in warnings - [`de0cc92a7`](https://github.com/containerd/containerd/commit/de0cc92a793b84118356715503243a2b9664dfa5) cri: add deprecation warning for runtime_root - [`833b94149`](https://github.com/containerd/containerd/commit/833b94149b6fd4faa6d4719ef7926257f5b2b098) cri: add deprecation warning for rutnime_engine - [`47de3d63d`](https://github.com/containerd/containerd/commit/47de3d63df0e5ffa522dfc2b6cb5b2d472879f28) cri: add deprecation warning for default_runtime - [`d421b8fda`](https://github.com/containerd/containerd/commit/d421b8fda9d0d303e1b90a13f378e6fffe7d9187) cri: add warning for untrusted_workload_runtime - [`802cb64b0`](https://github.com/containerd/containerd/commit/802cb64b00aab14d0f2edb45c9b89eef0016dc1c) cri: add warning for old form of systemd_cgroup - \[release/1.6] Add warning for CRIU config usage ([#9546](https://github.com/containerd/containerd/pull/9546)) - [`f8447466c`](https://github.com/containerd/containerd/commit/f8447466ccd8277083fefeb6db91194c4559ed0b) Add warning for CRIU config usage </details> ##### Dependency Changes - **dario.cat/mergo** v1.0.0 ***new*** - **github.com/moby/sys/user** v0.1.0 ***new*** Previous release can be found at [v1.6.26](https://github.com/containerd/containerd/releases/tag/v1.6.26) ### [`v1.6.26`](https://github.com/containerd/containerd/releases/tag/v1.6.26): containerd 1.6.26 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.25...v1.6.26) Welcome to the v1.6.26 release of containerd! The twenty-sixth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Fix windows default path overwrite issue** ([#9441](https://github.com/containerd/containerd/pull/9441)) - **Update push to inherit distribution sources from parent** ([#9453](https://github.com/containerd/containerd/pull/9453)) - **Mask `/sys/devices/virtual/powercap` path in runtime spec and deny in default apparmor profile** ([GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c)) ##### Deprecation Warnings - **Emit deprecation warning for AUFS snapshotter usage** ([#9448](https://github.com/containerd/containerd/pull/9448)) - **Emit deprecation warning for v1 runtime usage** ([#9468](https://github.com/containerd/containerd/pull/9468)) - **Emit deprecation warning for CRI v1alpha1 usage** ([#9468](https://github.com/containerd/containerd/pull/9468)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Kohei Tokunaga - Phil Estes - Bjorn Neergaard - Sebastiaan van Stijn - Brian Goff - Charity Kathure - Kazuyoshi Kato - Milas Bowman - Wei Fu - ruiwen-zhao ##### Changes <details><summary>30 commits</summary> - \[release/1.6] Prepare release notes for v1.6.26 ([#9490](https://github.com/containerd/containerd/pull/9490)) - [`ac5c5d3e0`](https://github.com/containerd/containerd/commit/ac5c5d3e03ab3c5b8103a1c0bd9931389f7a8fcf) Prepare release notes for v1.6.26 - Github Security Advisory [GHSA-7ww5-4wqc-m92c](https://github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c) - [`02f07fe19`](https://github.com/containerd/containerd/commit/02f07fe1994a3ddda3626c1ede2e32bc82b8e426) contrib/apparmor: deny /sys/devices/virtual/powercap - [`c94577e78`](https://github.com/containerd/containerd/commit/c94577e78d2924ddeb90d1601e31b50ee3acac48) oci/spec: deny /sys/devices/virtual/powercap - \[release/1.6] update to go1.20.12, test go1.21.5 ([#9472](https://github.com/containerd/containerd/pull/9472)) - [`7cbdfc92e`](https://github.com/containerd/containerd/commit/7cbdfc92ef38f789f1a2773fa6fac405d361a6cc) update to go1.20.12, test go1.21.5 - [`024b1cce6`](https://github.com/containerd/containerd/commit/024b1cce6b27f10e00bb9bde33a5fe9563545f8d) update to go1.20.11, test go1.21.4 - \[release/1.6] Add cri-api v1alpha2 usage warning to all api calls ([#9484](https://github.com/containerd/containerd/pull/9484)) - [`64e56bfde`](https://github.com/containerd/containerd/commit/64e56bfde95828660971673d20952f275cc2c0ba) Add cri-api v1alpha2 usage warning to all api calls - \[release/1.6] tasks: emit warning for v1 runtime and runc v1 runtime ([#9468](https://github.com/containerd/containerd/pull/9468)) - [`efefd3bf3`](https://github.com/containerd/containerd/commit/efefd3bf334b5df0e97bff0be61ba906a9b3b528) tasks: emit warning for runc v1 runtime - [`7825689b4`](https://github.com/containerd/containerd/commit/7825689b4c4d68cc1cc3c6dd072c2c2ec7b2d88e) tasks: emit warning for v1 runtime - \[release/1.6] snapshots: emit deprecation warning for aufs ([#9448](https://github.com/containerd/containerd/pull/9448)) - [`7cfe7052f`](https://github.com/containerd/containerd/commit/7cfe7052f4a2ad97e4e8032469aef588d2f0858c) snapshots: emit deprecation warning for aufs - \[release/1.6] cherry-pick/backport: Update golangci lint ([#9455](https://github.com/containerd/containerd/pull/9455)) - [`a1ae572a2`](https://github.com/containerd/containerd/commit/a1ae572a2778bf599e93929f5145f707b667f508) Fix linter error with updated linter - [`b638791d6`](https://github.com/containerd/containerd/commit/b638791d66b2e34f044f04736632995446b79314) ci: bump up golangci-lint to v1.55.0 - [`2370a2842`](https://github.com/containerd/containerd/commit/2370a2842318833b16a8274835374d0811c2ed28) Fix linter issues for golangci-lint 1.54.2 - [`8a65e2e31`](https://github.com/containerd/containerd/commit/8a65e2e31b6710f94be64c7fada727bd2569d16f) Bump up golangci-lint to v1.54.2 - [`969f8feb2`](https://github.com/containerd/containerd/commit/969f8feb2e0932a9f9c69f1696e552fcdcd2b31b) Bump up golangci-lint to v1.52.2 - \[release/1.6] push: inherit distribution sources from parent ([#9453](https://github.com/containerd/containerd/pull/9453)) - [`66959fdf5`](https://github.com/containerd/containerd/commit/66959fdf50d16520a84fb14c9467c0d87b7f0274) push: inherit distribution sources from parent - [`b4dcffcfb`](https://github.com/containerd/containerd/commit/b4dcffcfbff2694796a04243728700b37dc78d8e) content: add InfoProvider interface - [`bef4145c1`](https://github.com/containerd/containerd/commit/bef4145c141ad2c37e7797b4dc53b8e429b368ae) Change PushContent to require only Provider - \[release/1.6] Bump google.golang.org/grpc to v1.58.3 ([#9408](https://github.com/containerd/containerd/pull/9408)) - [`a5fc21060`](https://github.com/containerd/containerd/commit/a5fc21060b5254be9ca28e63c1c5a7364b551ca5) vendor: google.golang.org/grpc v1.58.3 - [`4fa05b3d8`](https://github.com/containerd/containerd/commit/4fa05b3d83488e4bc81241db1a65ca00fedec45d) Upgrade github.com/klauspost/compress from v1.11.13 to v1.15.9 - \[release/1.6] Windows default path overwrite fix ([#9441](https://github.com/containerd/containerd/pull/9441)) - [`ede0ad5e1`](https://github.com/containerd/containerd/commit/ede0ad5e12826d574623a79b71bb1fbc49e75172) Fix windows default path overwrite issue </details> ##### Dependency Changes - **cloud.google.com/go/compute/metadata** v0.2.3 ***new*** - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/klauspost/compress** v1.11.13 -> v1.15.9 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **golang.org/x/oauth2** [`2bc19b1`](https://github.com/containerd/containerd/commit/2bc19b11175f) -> v0.10.0 - **golang.org/x/sync** v0.1.0 -> v0.3.0 - **google.golang.org/grpc** v1.50.1 -> v1.58.3 - **google.golang.org/protobuf** v1.28.1 -> v1.31.0 Previous release can be found at [v1.6.25](https://github.com/containerd/containerd/releases/tag/v1.6.25) ### [`v1.6.25`](https://github.com/containerd/containerd/releases/tag/v1.6.25): containerd 1.6.25 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.24...v1.6.25) Welcome to the v1.6.25 release of containerd! The twenty-fifth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Check whether content did not needs to be pushed to remote registry and cross-repo mounted or already existed** ([#9111](https://github.com/containerd/containerd/pull/9111)) - **Soft deprecate log package** ([#9105](https://github.com/containerd/containerd/pull/9105)) - **Always try to establish tls connection when tls configured** ([#9189](https://github.com/containerd/containerd/pull/9189)) - **CRI: stop recommending disable_cgroup** ([#9169](https://github.com/containerd/containerd/pull/9169)) - **Allow for images with artifacts layers to pull** ([#9150](https://github.com/containerd/containerd/pull/9150)) - **Require plugins to succeed after registering readiness** ([#9166](https://github.com/containerd/containerd/pull/9166)) - **Avoid potential deadlock in create handler in containerd-shim-runc-v2** ([#9210](https://github.com/containerd/containerd/pull/9210)) - **Add handling for missing basic auth credentials** ([#9236](https://github.com/containerd/containerd/pull/9236)) - **Add a new image label if it is docker schema 1** ([#9267](https://github.com/containerd/containerd/pull/9267)) - **Fix ambiguous tls fallback** ([#9300](https://github.com/containerd/containerd/pull/9300)) - **Expose usage of deprecated features** ([#9329](https://github.com/containerd/containerd/pull/9329)) - **Fix shimv1 leak issue** ([#9345](https://github.com/containerd/containerd/pull/9345)) - **Go version update to 1.20.10**([#9264](https://github.com/containerd/containerd/pull/9264)) - **Update runc to v1.1.10** ([#9360](https://github.com/containerd/containerd/pull/9360)) - **CRI: fix using the pinned label to pin image** ([#9382](https://github.com/containerd/containerd/pull/9382)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Samuel Karp - Derek McGowan - Sebastiaan van Stijn - Phil Estes - Wei Fu - Kazuyoshi Kato - Akhil Mohan - Akihiro Suda - Chen Yiyang - Fabian Hoffmann - Iceber Gu - Mike Brown - Paweł Gronowski - Austin Vazquez - Fahed Dorgaa - James Sturtevant - Kern Walster - Marat Radchenko - Qiutong Song - Tony Fouchard - ruiwen-zhao ##### Changes <details><summary>82 commits</summary> - \[release/1.6] Prepare release notes for v1.6.25 ([#9394](https://github.com/containerd/containerd/pull/9394)) - [`723d26ab2`](https://github.com/containerd/containerd/commit/723d26ab2efbaa81ce5e617a7fc3729c40f7f98d) Prepare release notes for v1.6.25 - [`1f865eba1`](https://github.com/containerd/containerd/commit/1f865eba1f424b0bd53087819d7697f0c6639bca) update mailmap - \[release/1.6] cri: fix using the pinned label to pin image ([#9382](https://github.com/containerd/containerd/pull/9382)) - [`b49815300`](https://github.com/containerd/containerd/commit/b4981530050c4b8efb8cab8d41b28d81eb21462d) cri: fix update of pinned label for images - [`751b0c186`](https://github.com/containerd/containerd/commit/751b0c1867b2fd52dccae7bafe5f453c99c65076) cri: fix using the pinned label to pin image - \[Release/1.6] vendor: golang.org/x/net v0.17.0 ([#9387](https://github.com/containerd/containerd/pull/9387)) - [`fb5568608`](https://github.com/containerd/containerd/commit/fb5568608079ed772381c52297e474c9f951d285) vendor: golang.org/x/net v0.17.0 - [`61ad86f6f`](https://github.com/containerd/containerd/commit/61ad86f6f9ce78c67a4ece671e1b91be080dcf61) vendor: golang.org/x/text v0.13.0 - [`4b431c844`](https://github.com/containerd/containerd/commit/4b431c8441f38049d266a69da7e2a7045af5f2dc) vendor: golang.org/x/sys v0.13.0 - \[Release/1.6] CVE-2022-1996 fix for go-restful ([#9385](https://github.com/containerd/containerd/pull/9385)) - [`62d402275`](https://github.com/containerd/containerd/commit/62d402275cdee9748c08690156f9ccb724d7c061) Remove CVE-2022-1996 from containerd binary upgrading go-restful to 2.16.0 - \[release/1.6] Enhance container image unpack client logs ([#9380](https://github.com/containerd/containerd/pull/9380)) - [`3e68bf65a`](https://github.com/containerd/containerd/commit/3e68bf65af4405c517b4292a24781dc4e1419ac8) Enhance container image unpack client logs - \[release/1.6] update github.com/containerd/nri v0.1.1 ([#9107](https://github.com/containerd/containerd/pull/9107)) - [`0dd65c826`](https://github.com/containerd/containerd/commit/0dd65c826ebcaf2376c4d38d3bbe99345bf64b86) \[release/1.6] update github.com/containerd/nri v0.1.1 - \[release/1.6 backport] update runc binary to v1.1.10 ([#9360](https://github.com/containerd/containerd/pull/9360)) - [`c73be2446`](https://github.com/containerd/containerd/commit/c73be2446e4414c701e7fce7b8f391c3dd113e8b) update runc binary to v1.1.10 - \[release/1.6] Expose usage of cri-api v1alpha2 ([#9357](https://github.com/containerd/containerd/pull/9357)) - [`746bcf2eb`](https://github.com/containerd/containerd/commit/746bcf2ebb7950dafe89a0dcf8db48b428fdd2d1) Expose usage of cri-api v1alpha2 - \[release/1.6] fix: shimv1 leak issue ([#9345](https://github.com/containerd/containerd/pull/9345)) - [`8b51a95fb`](https://github.com/containerd/containerd/commit/8b51a95fb2b05dd3a2c00f16606656300cc8a1cf) fix: shimv1 leak issue - \[release/1.6] update to go1.20.10, test go1.21.3 ([#9264](https://github.com/containerd/containerd/pull/9264)) - [`6741f819b`](https://github.com/containerd/containerd/commit/6741f819bfe4e8da485af2d0e1c7b134b40543b2) \[release/1.6] update to go1.20.10, test go1.21.3 - [`49615a0e9`](https://github.com/containerd/containerd/commit/49615a0e9e6f10fc0c13d509d2fc86f3bed63adc) \[release/1.6] update to go1.20.9, test go1.21.2 - \[release/1.6] cri: add deprecation warnings for mirrors, auths, and configs ([#9355](https://github.com/containerd/containerd/pull/9355)) - [`b68204e53`](https://github.com/containerd/containerd/commit/b68204e53b39cb705e85283a8f4f2f6082ac484c) cri: add deprecation warning for configs - [`ae8c58319`](https://github.com/containerd/containerd/commit/ae8c58319d8144e583f7f3796a074b9090ae16e8) cri: add deprecation warning for auths - [`455edcad2`](https://github.com/containerd/containerd/commit/455edcad2cb5f414ef67001f0bdae9f9440cfad8) cri: add deprecation warning for mirrors - [`878823f4d`](https://github.com/containerd/containerd/commit/878823f4d26c4b1c823e6d194521b3e9d1309add) cri: add ability to emit deprecation warnings - \[release/1.6] deprecation: new package for deprecations ([#9329](https://github.com/containerd/containerd/pull/9329)) - [`477b7d6a1`](https://github.com/containerd/containerd/commit/477b7d6a1a8a4c8731605316e7f67b6bdb742bd8) ctr: new deprecations command - [`24068b813`](https://github.com/containerd/containerd/commit/24068b813360602d59bc31b766fe79c5d3e82fb6) dynamic: record deprecation for dynamic plugins - [`218c7a1df`](https://github.com/containerd/containerd/commit/218c7a1df9ba3d2b28bbde72b772ccb3c3c061ed) server: add ability to record config deprecations - [`dfb9e1deb`](https://github.com/containerd/containerd/commit/dfb9e1deb9e749380518fdc6c732c55e5e2230a4) pull: record deprecation warning for schema 1 - [`90b42da6f`](https://github.com/containerd/containerd/commit/90b42da6f4496d2be76d462a5300cac92f0a07ef) introspection: add support for deprecations - [`0b6766b37`](https://github.com/containerd/containerd/commit/0b6766b3741274e0a2c73eb96378d9cb8381b97d) api/introspection: deprecation warnings in server - [`de3cb4c18`](https://github.com/containerd/containerd/commit/de3cb4c18660abcb3d2e4b1d8dec0085e3d51077) warning: new service for deprecations - [`da1b4419b`](https://github.com/containerd/containerd/commit/da1b4419b25f35315ca297d2b058d2655f9d25fd) deprecation: new package for deprecations - \[release/1.6] integration: deflake TestIssue9103 ([#9353](https://github.com/containerd/containerd/pull/9353)) - [`bca8a3f65`](https://github.com/containerd/containerd/commit/bca8a3f653d234e5356ab445eca9f6da0316ab77) integration: deflake TestIssue9103 - \[release/1.6] ci: Use Vagrant on ubuntu-latest-4-cores ([#9332](https://github.com/containerd/containerd/pull/9332)) - [`0985f7a43`](https://github.com/containerd/containerd/commit/0985f7a43db3e69a0c6d67d39b9397e5af71deca) ci: Use Vagrant on ubuntu-latest-4-cores - \[release/1.6] Fix ambiguous tls fallback ([#9300](https://github.com/containerd/containerd/pull/9300)) - [`5dd64301c`](https://github.com/containerd/containerd/commit/5dd64301c89ad1e428a746f0e90d9d72b45fe1b8) Check scheme and host of request on push redirect - [`51df21d09`](https://github.com/containerd/containerd/commit/51df21d09ebfac3e3470529fe1372ca22496e606) Avoid TLS fallback when protocol is not ambiguous - \[release/1.6] Add a new image label if it is docker schema 1 ([#9267](https://github.com/containerd/containerd/pull/9267)) - [`8108f0d03`](https://github.com/containerd/containerd/commit/8108f0d036be2c36f7fc69dd85286d299ee0bf7b) Add a new image label if it is docker schema 1 - \[release/1.6 backport] fix protobuf aarch64 ([#9284](https://github.com/containerd/containerd/pull/9284)) - [`5376afb3d`](https://github.com/containerd/containerd/commit/5376afb3dbec05541b018e361f1343f20dec3ada) fix protobuf aarch64 - \[release/1.6] remotes: add handling for missing basic auth credentials ([#9236](https://github.com/containerd/containerd/pull/9236)) - [`e529741d3`](https://github.com/containerd/containerd/commit/e529741d3f102c7b558255d0e8b053c4e0858bc1) remotes: add handling for missing basic auth credentials - [`ca45b92f4`](https://github.com/containerd/containerd/commit/ca45b92f4388ec7d0aa023f305891ec527b64484) Add ErrUnexpectedStatus to resolver - [`77c0175b4`](https://github.com/containerd/containerd/commit/77c0175b4269da0b409e1434576c1f86bf9a869c) Improve ErrUnexpectedStatus default string - \[release/1.6] Update x/net to 0.13 ([#9130](https://github.com/containerd/containerd/pull/9130)) - [`275fc594d`](https://github.com/containerd/containerd/commit/275fc594d8cf462d647b7c2f4dbfd2c8812d87ed) Bump x/net to 0.13 - \[release/1.6] Require plugins to succeed after registering readiness ([#9166](https://github.com/containerd/containerd/pull/9166)) - [`5223bf39a`](https://github.com/containerd/containerd/commit/5223bf39a636be1d347f9d73be2131e102922695) Require plugins to succeed after registering readiness - [`8f5eba314`](https://github.com/containerd/containerd/commit/8f5eba3148d91023df4277c705debb199fa85c57) cri: call RegisterReadiness after NewCRIService - \[release/1.6 backport] containerd-shim-runc-v2: avoid potential deadlock in create handler ([#9210](https://github.com/containerd/containerd/pull/9210)) - [`7b61862e7`](https://github.com/containerd/containerd/commit/7b61862e7c3e3410318bb723671954b101acec33) \*: add runc-fp as runc wrapper to inject failpoint - [`5238a6470`](https://github.com/containerd/containerd/commit/5238a6470ca921fe7e47f25b022ea815a1d6f9b4) containerd-shim-runc-v2: avoid potential deadlock in create handler - [`65e908ee1`](https://github.com/containerd/containerd/commit/65e908ee1370432a09c81d8f7bc7568ff3d7e784) containerd-shim-runc-v2: remove unnecessary `s.getContainer()` - [`1dd9acecb`](https://github.com/containerd/containerd/commit/1dd9acecb85860e374b750d908b33c44e4f75564) Uncopypaste parsing of OCI Bundle spec file - [`71c89ddf2`](https://github.com/containerd/containerd/commit/71c89ddf24b05743d9be6b12907dc22719ef769d) \[release/1.6]: Vagrantfile: install failpoint binaries - \[release/1.6] cri: stop recommending disable_cgroup ([#9169](https://github.com/containerd/containerd/pull/9169)) - [`7a0c8b6b7`](https://github.com/containerd/containerd/commit/7a0c8b6b750cbd2bf2377f1d4961609ea1ec6667) cri: stop recommending disable_cgroup - \[release/1.6] Allow for images with artifacts to pull ([#9150](https://github.com/containerd/containerd/pull/9150)) - [`8066dd81c`](https://github.com/containerd/containerd/commit/8066dd81ca673fcf4c8887069769592ba9fd694d) Allow for images with artifacts to pull - \[release 1.6] remotes/docker: Fix MountedFrom prefixed with target repository ([#9192](https://github.com/containerd/containerd/pull/9192)) - [`2fffc344a`](https://github.com/containerd/containerd/commit/2fffc344ad661b37a3dae6102b47f887c946f105) remotes/docker: Fix MountedFrom prefixed with target repository - \[release/1.6] remotes: always try to establish tls connection when tls configured ([#9189](https://github.com/containerd/containerd/pull/9189)) - [`6b5912220`](https://github.com/containerd/containerd/commit/6b591222096f12902ca8269668b36093edcc1899) remotes: always try to establish tls connection when tls configured - \[release/1.6] Build binaries with 1.21.1 ([#9180](https://github.com/containerd/containerd/pull/9180)) - [`37c758de1`](https://github.com/containerd/containerd/commit/37c758de159bce9544e65fefc81019af9fb0be69) Build binaries with 1.21.1 - \[release/1.6 backport] alias log package to github.com/containerd/log v0.1.0 ([#9105](https://github.com/containerd/containerd/pull/9105)) - [`f1591cc9b`](https://github.com/containerd/containerd/commit/f1591cc9b9d7f1b73f1c50cdca0ca577959eed48) alias log package to github.com/containerd/log v0.1.0 - [`f68d2d93b`](https://github.com/containerd/containerd/commit/f68d2d93b8c815b8687b85c932a8de2960ad2db7) vendor: golang.org/x/sys v0.7.0 - [`f305fb233`](https://github.com/containerd/containerd/commit/f305fb233db9764fcd9e83e9078fee213202c3ff) vendor: github.com/stretchr/testify v1.8.4 - [`4e24a30af`](https://github.com/containerd/containerd/commit/4e24a30af397b0d4dd6a417467eede3386381516) vendor: github.com/sirupsen/logrus v1.9.3 - \[release/1.6] remotes/docker: Add MountedFrom and Exists push status ([#9111](https://github.com/containerd/containerd/pull/9111)) - [`b66c818ba`](https://github.com/containerd/containerd/commit/b66c818ba6bd9e4fe139a6f9d988b3724c7a54ec) remotes/docker: Add MountedFrom and Exists push status </details> ##### Changes from containerd/log <details><summary>9 commits</summary> - Update golangci to 1.49 ([#1](https://github.com/containerd/log/pull/1)) - [`89c9a54`](https://github.com/containerd/log/commit/89c9a54561e8736fddc519cf033d936de65ebe67) Update golangci to 1.49 - [`cf26711`](https://github.com/containerd/log/commit/cf267115d825238992448dbe1cd6cd440c934d8a) Update description in README - [`f9f250c`](https://github.com/containerd/log/commit/f9f250cc3a5d033c759b715aa09ff7cdbfc19500) Add project details - [`fb7fe3d`](https://github.com/containerd/log/commit/fb7fe3d663dee55b38f2ab094d9ac794dcacba40) Add github CI flow - [`7e13034`](https://github.com/containerd/log/commit/7e13034365475c99956f31770c43e296fc6d1a98) Add go module - [`16a3c76`](https://github.com/containerd/log/commit/16a3c768269b03fe62fff34d3a76528335a35064) Rename log import from logtest - [`698c398`](https://github.com/containerd/log/commit/698c39829fd9372465cb2537db16a7346afb9f31) Add README - [`87c83c4`](https://github.com/containerd/log/commit/87c83c42bbd22c5f1d3725fc5006b35217b4629a) Add license file </details> ##### Changes from containerd/nri <details><summary>3 commits</summary> - \[release/0.1 backport] remove containerd as dependency ([#58](https://github.com/containerd/nri/pull/58)) - [`4275101`](https://github.com/containerd/nri/commit/42751010c8e875a07117c74bfe57c011ae491594) Task: fix typo in godoc - [`f6acbf1`](https://github.com/containerd/nri/commit/f6acbf1dc5b357d216af8ffca9d26dd0db3e4ef1) remove containerd as dependency </details> ##### Dependency Changes - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nri** v0.1.0 -> v0.1.1 - **github.com/emicklei/go-restful** v2.9.5 -> v2.16.0 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/stretchr/testify** v1.8.1 -> v1.8.4 - **golang.org/x/crypto** [`3147a52`](https://github.com/containerd/containerd/commit/3147a52a75dd) -> v0.14.0 - **golang.org/x/net** v0.8.0 -> v0.17.0 - **golang.org/x/sys** v0.6.0 -> v0.13.0 - **golang.org/x/term** v0.6.0 -> v0.13.0 - **golang.org/x/text** v0.8.0 -> v0.13.0 Previous release can be found at [v1.6.24](https://github.com/containerd/containerd/releases/tag/v1.6.24) ### [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24): containerd 1.6.24 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.23...v1.6.24) Welcome to the v1.6.24 release of containerd! The twenty-fourth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **CRI: fix leaked shim caused by high IO pressure** ([#9004](https://github.com/containerd/containerd/pull/9004)) - **Update to go1.20.8** ([#9073](https://github.com/containerd/containerd/pull/9073)) - **Update runc to v1.1.9** ([#8966](https://github.com/containerd/containerd/pull/8966)) - **Backport: add configurable mount options to overlay snapshotter** ([#8961](https://github.com/containerd/containerd/pull/8961)) - **log: cleanups and improvements to decouple more from logrus** ([#9002](https://github.com/containerd/containerd/pull/9002)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Akihiro Suda - Wei Fu - Derek McGowan - Akhil Mohan - Cardy.Tang - Danny Canter - Kazuyoshi Kato - Mike Brown - Phil Estes - Samuel Karp ##### Changes <details><summary>45 commits</summary> - \[release/1.6] Prepare release notes for v1.6.24 ([#9087](https://github.com/containerd/containerd/pull/9087)) - [`cdd59290d`](https://github.com/containerd/containerd/commit/cdd59290d051ffd8b5e730f96930c42cad65beac) Prepare release notes for v1.6.24 - \[release/1.6 backport] log: cleanups and improvements to decouple more from logrus ([#9002](https://github.com/containerd/containerd/pull/9002)) - [`33c2d88e7`](https://github.com/containerd/containerd/commit/33c2d88e7809eb42b0e9711c29a35c25a12dc18c) Revert "log: define G() as a function instead of a variable" - [`0a7f2975e`](https://github.com/containerd/containerd/commit/0a7f2975efbad7baddb31c36fb142db2a793534c) log: swap logrus functions with their equivalent on default logger - [`9d175a19b`](https://github.com/containerd/containerd/commit/9d175a19b7cbe165cb6285c891b384d518e2686b) log: add package documentation and summary of package's purpose - [`96fb65529`](https://github.com/containerd/containerd/commit/96fb655290f286eb818bf70f08555cd64ba8e780) log: make Fields type a generic map\[string]any - [`bace17e2e`](https://github.com/containerd/containerd/commit/bace17e2ead161c06fdd670be532f0c042071bd7) log: add log.Entry type - [`dd127885f`](https://github.com/containerd/containerd/commit/dd127885feacdeefc554d7042c49e01002809864) log: define OutputFormat type - [`5b4cf2329`](https://github.com/containerd/containerd/commit/5b4cf23295581c70b92db1dc7c30114bc1a8f3c8) log: define G() as a function instead of a variable - [`ee1b4a1e2`](https://github.com/containerd/containerd/commit/ee1b4a1e2f844a45c0ba784273501bc490e77aa2) log: add all log-levels that are accepted - [`d563a411f`](https://github.com/containerd/containerd/commit/d563a411facc32c8287136d53ca0a744f991f3b4) log: group "enum" consts and touch-up docs - [`6e8f4555b`](https://github.com/containerd/containerd/commit/6e8f4555b3f3f155ee9ffe5f3e7cf8e8c2ee10a6) log: WithLogger: remove redundant intermediate var - [`c19325559`](https://github.com/containerd/containerd/commit/c193255597662b8a7f16479dd454ba3dd728a3c4) log: SetFormat: include returns in switch - [`c3c22f8cb`](https://github.com/containerd/containerd/commit/c3c22f8cbc5b3687bdee79266602bff51e61c84a) log: remove gotest.tools dependency - \[release/1.6] update to go1.20.8 ([#9073](https://github.com/containerd/containerd/pull/9073)) - [`a2c294800`](https://github.com/containerd/containerd/commit/a2c294800ec11447b497bf7452bbbfba06c0168d) \[release/1.6] update to go1.20.8 - \[release/1.6 backport] make repositories of install dependencies configurable ([#9024](https://github.com/containerd/containerd/pull/9024)) - [`0da8dcaa7`](https://github.com/containerd/containerd/commit/0da8dcaa7c93c0b708c375a32328a7b85fd668d8) make repositories of install dependencies configurable - \[release/1.6 backport] update Golang to go1.20.7, minimum version go1.19 ([#9020](https://github.com/containerd/containerd/pull/9020)) - [`8e6a9de5b`](https://github.com/containerd/containerd/commit/8e6a9de5b5291b97684e948be096317611b37930) update to go1.20.7, go1.19.12 - [`8b2eb371f`](https://github.com/containerd/containerd/commit/8b2eb371f958f1bfc5bcab5ee70bcad18b2e5efc) Update Go to 1.20.6,1.19.11 - [`cff669c7a`](https://github.com/containerd/containerd/commit/cff669c7aab055d6b46bbb27fd044aba5e1453d8) update go to go1.20.5, go1.19.10 - [`f34a22de9`](https://github.com/containerd/containerd/commit/f34a22de99b57e30cd33d3769e3765950475ba07) update go to go1.20.4, go1.19.9 - [`e8e73065e`](https://github.com/containerd/containerd/commit/e8e73065ec668097067d37381399a80c8107fae1) update go to go1.20.3, go1.19.8 - [`9b3f950d6`](https://github.com/containerd/containerd/commit/9b3f950d607c3a6c2a3c1b8740c87338a986e203) Go 1.20.2 - [`17d03ac68`](https://github.com/containerd/containerd/commit/17d03ac681f61cd83c2bc7239956504c25ceb2f4) Go 1.20.1 - [`861f65447`](https://github.com/containerd/containerd/commit/861f65447c4cc59b2b91e441b24f1c80a730ce2b) go.mod: go 1.19 - [`81fa93784`](https://github.com/containerd/containerd/commit/81fa937842ac2501f777e23cddab8c7a573bd318) Stop using math/rand.Read and rand.Seed (deprecated in Go 1.20) - [`70dc11a6c`](https://github.com/containerd/containerd/commit/70dc11a6c1258891aa281815bb94d4bdc1194fe7) lint: remove `//nolint:dupword` that are no longer needed - [`fec784a06`](https://github.com/containerd/containerd/commit/fec784a06ad4276574dfb16ff631f9839f3b676c) lint: silence "SA1019: tar.TypeRegA has been deprecated... (staticheck)" - [`6648df1ad`](https://github.com/containerd/containerd/commit/6648df1ada2575df6adcaf295b611d966d3308d7) lint: silence "type `HostFileConfig` is unused (unused)" - [`e6b268bc7`](https://github.com/containerd/containerd/commit/e6b268bc703b5903de719533a8fbe0307767342c) golangci-lint v1.51.1 - [`c552ccf67`](https://github.com/containerd/containerd/commit/c552ccf6769245e1531212505fa75e89f6f6ff1c) go.mod: golang.org/x/sync v0.1.0 - \[releases/1.6] \*: fix leaked shim caused by high IO pressure ([#9004](https://github.com/containerd/containerd/pull/9004)) - [`d00af5c3e`](https://github.com/containerd/containerd/commit/d00af5c3ea1a290112b3a56bee31023ef1d2019d) integration: issue7496 case should work for runc.v2 only - [`583696e4e`](https://github.com/containerd/containerd/commit/583696e4e0b055b8a0f860b9ed7f31f0f3127ff4) Vagrantfile: add strace tool - [`ab21d60d2`](https://github.com/containerd/containerd/commit/ab21d60d27d1d7c87423e9b4ecb076358762e89b) pkg/cri/server: add criService as argument when handle exit event - [`a229883cb`](https://github.com/containerd/containerd/commit/a229883cb1bffecbd8bd4d41ab19c99110bbd189) pkg/cri/server: fix leaked shim issue - [`d8f824200`](https://github.com/containerd/containerd/commit/d8f824200cdc39410bf9a4d110073186d6864f64) integration: add case to reproduce [#7496](https://github.com/containerd/containerd/issues/7496) - \[release/1.6] Cherry-pick: \[overlay] add configurable mount options to overlay snapshotter ([#8961](https://github.com/containerd/containerd/pull/8961)) - [`8cd40e1d0`](https://github.com/containerd/containerd/commit/8cd40e1d0f13e5ddfef13833b265f6dfa298ec69) Add configurable mount options to overlay - [`453fa397a`](https://github.com/containerd/containerd/commit/453fa397a1f0f00871ff1ca4314b65e898e33661) feat: make overlay sync removal configurable - \[release/1.6 backport] update runc binary to v1.1.9 ([#8966](https://github.com/containerd/containerd/pull/8966)) - [`4cb7764df`](https://github.com/containerd/containerd/commit/4cb7764df8025d0a6edb34f6b69daf6c2abe6ad0) update runc binary to v1.1.9 </details> ##### Dependency Changes - **golang.org/x/sync** [`036812b`](https://github.com/containerd/containerd/commit/036812b2e83c) -> v0.1.0 Previous release can be found at [v1.6.23](https://github.com/containerd/containerd/releases/tag/v1.6.23) ### [`v1.6.23`](https://github.com/containerd/containerd/releases/tag/v1.6.23): containerd 1.6.23 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.22...v1.6.23) Welcome to the v1.6.23 release of containerd! The twenty-third patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - \*\*Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854)) - \*\*cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927)) - \*\*Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908)) - \*\*update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905)) - \*\*backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Kirtana Ashok - Maksym Pavlenko - Austin Vazquez - Ben Foster - Derek McGowan - Mike Brown - Phil Estes - Rodrigo Campos - Sebastiaan van Stijn - Wei Fu ##### Changes <details><summary>13 commits</summary> - \[release/1.6] Add release notes for v1.6.23 ([#8939](https://github.com/containerd/containerd/pull/8939)) - [`e297a668f`](https://github.com/containerd/containerd/commit/e297a668fa432fddcf1ea718be697a452968847f) Add release notes for v1.6.23 - \[release/1.6] Add stable ABI support in windows platform matcher + update hcsshim tag ([#8854](https://github.com/containerd/containerd/pull/8854)) - [`f51bf1960`](https://github.com/containerd/containerd/commit/f51bf19608714bc052a38fc2dc0920b30244aec7) Add support for stable ABI windows versions - [`43a02c0b2`](https://github.com/containerd/containerd/commit/43a02c0b286d77d9455055b2453cbab57c55811b) Update hcsshim tag to v0.9.10 - \[release/1.6] cri: Don't use rel path for image volumes ([#8927](https://github.com/containerd/containerd/pull/8927)) - [`cc5b0a21b`](https://github.com/containerd/containerd/commit/cc5b0a21b438acd750f9779d3b3c4e68879bed50) cri: Don't use rel path for image volumes - \[release/1.6 backport] Upgrade GitHub actions packages in release workflow ([#8908](https://github.com/containerd/containerd/pull/8908)) - [`4238cff1c`](https://github.com/containerd/containerd/commit/4238cff1cfd43711c71f769b7129c6f8832ef507) Upgrade GitHub actions packages in release workflow - \[release/1.6] update to go1.19.12 ([#8905](https://github.com/containerd/containerd/pull/8905)) - [`00d1092b7`](https://github.com/containerd/containerd/commit/00d1092b78c3405daf3cc4ced8075ca5ca2903a8) update to go1.19.12 - \[release/1.6] backport: ro option for userxattr mount check + cherry-pick: Fix ro mount option being passed ([#8888](https://github.com/containerd/containerd/pull/8888)) - [`47d73b2de`](https://github.com/containerd/containerd/commit/47d73b2de65c806d93e19879ae86787b6f3735d6) Fix ro mount option being passed </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.8 -> v0.9.10 Previous release can be found at [v1.6.22](https://github.com/containerd/containerd/releases/tag/v1.6.22) ### [`v1.6.22`](https://github.com/containerd/containerd/releases/tag/v1.6.22): containerd 1.6.22 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.21...v1.6.22) Welcome to the v1.6.22 release of containerd! The twenty-second patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **RunC: Update runc binary to v1.1.8** ([#8842](https://github.com/containerd/containerd/pull/8842)) - **CRI: Fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty** ([#8823](https://github.com/containerd/containerd/pull/8823)) - **CRI: Write generated CNI config atomically** ([#8826](https://github.com/containerd/containerd/pull/8826)) - **Fix concurrent writes for `UpdateContainerStats`** ([#8819](https://github.com/containerd/containerd/pull/8819)) - **Make checkContainerTimestamps less strict on Windows** ([#8827](https://github.com/containerd/containerd/pull/8827)) - **Port-Forward: Correctly handle known errors** ([#8805](https://github.com/containerd/containerd/pull/8805)) - **Resolve docker.NewResolver race condition** ([#8800](https://github.com/containerd/containerd/pull/8800)) - **SecComp: Always allow `name_to_handle_at`** ([#8754](https://github.com/containerd/containerd/pull/8754)) - **Adding support to run hcsshim from local clone** ([#8713](https://github.com/containerd/containerd/pull/8713)) - **Pinned image support** ([#8720](https://github.com/containerd/containerd/pull/8720)) - **Runtime/V2/RunC: Handle early exits w/o big locks** ([#8695](https://github.com/containerd/containerd/pull/8695)) - **CRITool: Move up to CRI-TOOLS v1.27.0** ([#7997](https://github.com/containerd/containerd/pull/7997)) - **Fix cpu architecture detection issue on emulated ARM platform** ([#8533](https://github.com/containerd/containerd/pull/8533)) - **Task: Don't `close()` io before `cancel()`** ([#8659](https://github.com/containerd/containerd/pull/8659)) - **Fix panic when remote differ returns empty result** ([#8640](https://github.com/containerd/containerd/pull/8640)) - **Plugins: Notify readiness when registered plugins are ready** ([#8583](https://github.com/containerd/containerd/pull/8583)) - **Unwrap io errors in server connection receive error handling** ([ttrpc#143](https://github.com/containerd/ttrpc/pull/143)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Phil Estes - Sebastiaan van Stijn - Derek McGowan - Wei Fu - Kazuyoshi Kato - Austin Vazquez - Samuel Karp - dependabot\[bot] - Jin Dong - Maksym Pavlenko - Mike Brown - Shingo Omura - Akhil Mohan - Bjorn Neergaard - Laura Brehm - Tony Fang - Aditi Sharma - Andrey Epifanov - Benjamin Wang - Brian Goff - Cory Snider - Daniel Canter - Daniel Lenar - Henry Wang - Luca Comellini - Madhav Jivrajani - Mahamed Ali - Mohit Sharma - Oliver Radwell - Priyanka Saggu - Qasim Sarfraz - Takumasa Sakao - wangxiang - zounengren ##### Changes <details><summary>95 commits</summary> - \[release/1.6] Prepare release notes for v1.6.22 ([#8863](https://github.com/containerd/containerd/pull/8863)) - [`0770a4601`](https://github.com/containerd/containerd/commit/0770a4601c8d1dfc7699ae35d6be239ecc18025a) \[release/1.6] Add release notes for v1.6.22 - \[release/1.6] migrate to community owned bucket for node e2e tests ([#8876](https://github.com/containerd/containerd/pull/8876)) - [`512a672af`](https://github.com/containerd/containerd/commit/512a672afc8ffe9ec9b3a53289c7c6ffc20d0b7a) migrate to community owned bucket - \[release/1.6] cri: memory.memsw.limit_in_bytes: no such file or directory ([#8870](https://github.com/containerd/containerd/pull/8870)) - [`b585ff155`](https://github.com/containerd/containerd/commit/b585ff155a9dd6254e08b23a09a0bb7e0aac8d3f) cri: memory.memsw.limit_in_bytes: no such file or directory - \[release/1.6] Update go-restful to v3.10.1 ([#8412](https://github.com/containerd/containerd/pull/8412)) - [`a322077bf`](https://github.com/containerd/containerd/commit/a322077bfb97c5946b187ec7859960870e2962cc) go.mod: github.com/emicklei/go-restful/v3 v3.10.1 - \[release/1.6 backport] update runc binary to v1.1.8 ([#8842](https://github.com/containerd/containerd/pull/8842)) - [`b3ac068eb`](https://github.com/containerd/containerd/commit/b3ac068ebc8526589af4a8b09eab597f501f6f0f) update runc binary to v1.1.8 - \[release/1.6 backport] ci: remove libseccomp-dev installation for nightly ([#8773](https://github.com/containerd/containerd/pull/8773)) - [`6e2bcb6dd`](https://github.com/containerd/containerd/commit/6e2bcb6ddb7629f3c7f4ba62d5d74cf7179bb204) ci: remove libseccomp-dev installation for nightly - \[release/1.6 backport] \[CRI] fix additionalGids: it should fallback to imageConfig.User when securityContext.RunAsUser,RunAsUsername are empty ([#8823](https://github.com/containerd/containerd/pull/8823)) - [`cd06f23af`](https://github.com/containerd/containerd/commit/cd06f23af6bcf8c87cda625a0e78168c032a0637) capture desc variable in range variable just in case that it run in parallel mode - [`30f5c6a1f`](https://github.com/containerd/containerd/commit/30f5c6a1f26bf34bbe5eaf21acc7d5b86b14e027) Use t.TempDir instead of os.MkdirTemp - [`59d8363ef`](https://github.com/containerd/containerd/commit/59d8363ef33caa1a8261f472d3081f7f9d39e75e) fix userstr for dditionalGids on Linux - \[release/1.6 backport] cri: write generated CNI config atomically ([#8826](https://github.com/containerd/containerd/pull/8826)) - [`d75bf78c2`](https://github.com/containerd/containerd/commit/d75bf78c2f4af6c773056cdd096d3e3b9536348e) ctr: update WritePidFile to use atomicfile - [`5f70b23c1`](https://github.com/containerd/containerd/commit/5f70b23c11dc0ff5b4602fc202ffcae30013bb41) shim: WritePidFile & WriteAddress use atomicfile - [`505d444b0`](https://github.com/containerd/containerd/commit/505d444b0f339f2daa631ef6ea7f1a9cc22ba6f7) cri: write generated CNI config atomically on Unix - [`b2d2d3829`](https://github.com/containerd/containerd/commit/b2d2d3829912a87be519840e45307e0e74bf7693) atomicfile: new package for atomic file writes - \[release/1.6 backport] Fix concurrent writes for UpdateContainerStats ([#8819](https://github.com/containerd/containerd/pull/8819)) - [`9f650143f`](https://github.com/containerd/containerd/commit/9f650143fafb5927479ea3b5bf2b8e309c2d8265) Fix concurrent writes for UpdateContainerStats - \[release/1.6 backport] Make checkContainerTimestamps less strict on Windows ([#8827](https://github.com/containerd/containerd/pull/8827)) - [`568ce91ca`](https://github.com/containerd/containerd/commit/568ce91ca590bd37346df0550f25e7ef7eef3cff) Make checkContainerTimestamps less strict on Windows - \[release/1.6 backport] dependency: bump go.etcd.io/bbolt to v1.3.7 ([#8817](https://github.com/containerd/containerd/pull/8817)) - [`d2f47192a`](https://github.com/containerd/containerd/commit/d2f47192a54e7b58c037788a0f9b7e4f9047e849) dependency: bump go.etcd.io/bbolt to v1.3.7 - [`fb56dc245`](https://github.com/containerd/containerd/commit/fb56dc24522855a33ec795eaeebbb57bb15e49f0) \[release/1.6] vendor: github.com/stretchr/testify v1.8.1 - \[release/1.6 backport] Move logrus setup code to log package ([#8832](https://github.com/containerd/containerd/pull/8832)) - [`7fbd5dc89`](https://github.com/containerd/containerd/commit/7fbd5dc893007631794984c26c3a72320a34ae92) Move logrus setup code to log package - \[release/1.6 backport] release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles ([#8820](https://github.com/containerd/containerd/pull/8820)) - [`59a143670`](https://github.com/containerd/containerd/commit/59a1436706a23746f45ec111a0ffbcf887fb42de) release: Add "cri-containerd.DEPRECATED.txt" in the deprecated cri-containerd-\* bundles - \[release/1.6 backport] Use version 2 configuration format in docs ([#8821](https://github.com/containerd/containerd/pull/8821)) - [`5b51b79e2`](https://github.com/containerd/containerd/commit/5b51b79e2c7baf8dad53e48dfddadabff08b711d) \[release/1.6] fix remaining "v1 config" plugin IDs - [`b7cf26d8d`](https://github.com/containerd/containerd/commit/b7cf26d8dc72f0f79946c289ac68c0f2a581c6c5) docs: Fix sample config.toml syntax - [`fcdaf0966`](https://github.com/containerd/containerd/commit/fcdaf09664c006abf711ee88e26f18019643ffd9) docs: migrate config v1 to v2 - [`728d5c5f0`](https://github.com/containerd/containerd/commit/728d5c5f0be709e415f72f44c52fe78233ddd97d) Use version 2 config and mention containerd config command - \[release/1.6] update go to go1.19.11 ([#8816](https://github.com/containerd/containerd/pull/8816)) - [`81aa14718`](https://github.com/containerd/containerd/commit/81aa147181ca24987be3036d8487b54125256fc3) \[release/1.6] update go to go1.19.11 - \[release/1.6] update go to go1.19.10 ([#8715](https://github.com/containerd/containerd/pull/8715)) - [`17cd86629`](https://github.com/containerd/containerd/commit/17cd86629acab42dd7708720b386e88cd4be1535) \[release/1.6] update go to go1.19.10 - \[release/1.6 backport] bugfix(port-forward): Correctly handle known errors ([#8805](https://github.com/containerd/containerd/pull/8805)) - [`fdb65f214`](https://github.com/containerd/containerd/commit/fdb65f21488bd7a2d8dfca9beac95e0dfbc4259c) bugfix(port-forward): Correctly handle known errors - \[release/1.6] Resolve docker.NewResolver race condition ([#8800](https://github.com/containerd/containerd/pull/8800)) - [`b5784af66`](https://github.com/containerd/containerd/commit/b5784af662f7fc409eebbd655c42b7b0f462d8ed) Change http.Header copy to builtin Clone - [`31c466f82`](https://github.com/containerd/containerd/commit/31c466f822906dfbbf57be1cfec253179455f429) Resolve docker.NewResolver race condition - \[release/1.6 backport] vendor: github.com/containerd/zfs v1.1.0 ([#8781](https://github.com/containerd/containerd/pull/8781)) - [`be6406ca6`](https://github.com/containerd/containerd/commit/be6406ca67234c0a89320272557bb5ac5b0b60cc) vendor: github.com/containerd/zfs v1.1.0 - [`9f1260074`](https://github.com/containerd/containerd/commit/9f12600747060b5ba68d0d27d1666e7b25e00afb) \[release/1.6] vendor gotest.tools/v3 v3.5.0 - [`526e9e0ce`](https://github.com/containerd/containerd/commit/526e9e0ce4e2338afa0eca0f1c0969f24f9819dd) Bump grpc to v1.50.1 - [`0e7d2d121`](https://github.com/containerd/containerd/commit/0e7d2d1217d6399607cf8c8abb89662cebd9a30a) go.mod: github.com/sirupsen/logrus v1.9.0 - [`5b153c621`](https://github.com/containerd/containerd/commit/5b153c6214a9ae14e75be6a6e15b6bdf9c2b60f0) go.mod: github.com/moby/sys/mountinfo v0.6.2 - [`9dee60960`](https://github.com/containerd/containerd/commit/9dee60960792b9e6d8d80ddc16011191e7a660c6) go.mod: github.com/moby/sys/mountinfo v0.6.0 - \[release/1.6 backport] seccomp: always allow name_to_handle_at ([#8754](https://github.com/containerd/containerd/pull/8754)) - [`07ea7b9e7`](https://github.com/containerd/containerd/commit/07ea7b9e789ec116d9002a3ab0cfb35dc61ef8df) seccomp: always allow name_to_handle_at - \[release/1.6 backport] Update ginkgo to match cri-tools' version ([#8759](https://github.com/containerd/containerd/pull/8759)) - [`1dae51fed`](https://github.com/containerd/containerd/commit/1dae51fed807a56b5e135fb5a3b0455713450e25) Update ginkgo to match cri-tools' version - \[release/1.6 backport] integration/client: add timeout to `TestShimOOMScore` ([#8749](https://github.com/containerd/containerd/pull/8749)) - [`bd76ab978`](https://github.com/containerd/containerd/commit/bd76ab978ba760affd9fe2be2901b4ff76d5a3c0) integration/client: add timeout to `TestShimOOMScore` - \[release/1.6 backport] Adding support to run hcsshim from local clone ([#8713](https://github.com/containerd/containerd/pull/8713)) - [`8e14eccb2`](https://github.com/containerd/containerd/commit/8e14eccb29c6a43f75779e9cdd08dc5f75825166) Adding support to run hcsshim from local clone - \[1.6] Add Fields type alias to log package ([#8739](https://github.com/containerd/containerd/pull/8739)) - [`9f2cdd589`](https://github.com/containerd/containerd/commit/9f2cdd5894ba0010e602a120e0c625ac96585711) Add Fields type alias to log package - \[release/1.6] Pinned image support ([#8720](https://github.com/containerd/containerd/pull/8720)) - [`f4713aad0`](https://github.com/containerd/containerd/commit/f4713aad0e3b9f51d02e288b94e4d2c524373284) Pinned image support - \[release/1.6 backport] runtime/v2/runc: handle early exits w/o big locks ([#8695](https://github.com/containerd/containerd/pull/8695)) - [`dbeec47b4`](https://github.com/containerd/containerd/commit/dbeec47b4663422225ffc517ab9d696777c2c6f1) runtime/v2/runc: handle early exits w/o big locks - \[release/1.6 backport] move up to CRI-TOOLS v1.27.0 ([#7997](https://github.com/containerd/containerd/pull/7997)) - [`a8e01e40a`](https://github.com/containerd/containerd/commit/a8e01e40a0f63aac0249d514de1dc2708d40d7f7) move to CRI-TOOLS v1.27.0 - [`755f80698`](https://github.com/containerd/containerd/commit/755f80698aeb5f1ca856f487cd2d261464c6d705) move up to CRI-TOOLS v1.26.0 - [`b29cc035f`](https://github.com/containerd/containerd/commit/b29cc035fbe6ad06d67e4b42fed2f47b57ef0a48) bump critools into [`ca1571e`](https://github.com/containerd/containerd/commit/ca1571e6edd116b2c95f52e3dfa0b4779b74223a) - [`9138999f5`](https://github.com/containerd/containerd/commit/9138999f5dea770598b4a67da6682cab4c3f5713) Upgrade critools from 1.24.1 to 1.25.0 - \[release/1.6] cherry-pick: No more nondistributable layers in MS registry ([#8691](https://github.com/containerd/containerd/pull/8691)) - [`712ff8eb3`](https://github.com/containerd/containerd/commit/712ff8eb389d49531207e34479e065406effb902) No more nondistributable layers in MS registry - \[release/1.6] Fix cpu architecture detection issue on emulated ARM platform ([#8533](https://github.com/containerd/containerd/pull/8533)) - [`2b16e4bfa`](https://github.com/containerd/containerd/commit/2b16e4bfa135e3242b41ae43cf2bb6f3cd3fe9b1) Add unit test to function GetCPUVariantFromArch - [`106e36ec3`](https://github.com/containerd/containerd/commit/106e36ec3e7c72036b498b4ac73000d5c1a79d9d) Use uname machine field to get CPU variant if fails at /proc/cpuinfo - \[release/1.6] Update lint timeout ([#8679](https://github.com/containerd/containerd/pull/8679)) - [`287fdfea6`](https://github.com/containerd/containerd/commit/287fdfea63fea94952885f0807fc11c2612e5828) Update linter timeout to match main branch - \[release/1.6 backport] task: don't `close()` io before `cancel()` ([#8659](https://github.com/containerd/containerd/pull/8659)) - [`b27f7daa5`](https://github.com/containerd/containerd/commit/b27f7daa582f149f985a56313711c8c4a4353376) task: don't `close()` io before `cancel()` - \[release/1.6] update test box to fedora 37 ([#8660](https://github.com/containerd/containerd/pull/8660)) - [`8b4c69248`](https://github.com/containerd/containerd/commit/8b4c6924856fddaece9ed58700cb8473c6a7bdeb) update test box to fedora 37 - \[release/1.6] Revert "Downgrade MinGW to version 10.2.0" ([#8668](https://github.com/containerd/containerd/pull/8668)) - [`81d6085af`](https://github.com/containerd/containerd/commit/81d6085af5a20fbc728ccffad4b91ee6ef08ef36) Revert "Downgrade MinGW to version 10.2.0" - \[release/1.6 backport] Fix panic when remote differ returns empty result ([#8640](https://github.com/containerd/containerd/pull/8640)) - [`f98122378`](https://github.com/containerd/containerd/commit/f98122378197fb5199bab1d7574288fe276293ee) Fix panic when remote differ returns empty result - \[1.6] Bump x/net to 0.8 ([#8642](https://github.com/containerd/containerd/pull/8642)) - [`aa53f272d`](https://github.com/containerd/containerd/commit/aa53f272dd748ef57bb22a9f9aaa86fb9ad2f4d4) Bump x/net to 0.8 - \[release/1.6 backport] remotes/docker: ResolverOptions: fix deprecation comments ([#8620](https://github.com/containerd/containerd/pull/8620)) - [`56ff20839`](https://github.com/containerd/containerd/commit/56ff2083957e0ca58168f50e89120bb5d0067362) remotes/docker: ResolverOptions: fix deprecation comments - \[release/1.6] notify readiness when registered plugins are ready ([#8583](https://github.com/containerd/containerd/pull/8583)) - [`bccaf68b7`](https://github.com/containerd/containerd/commit/bccaf68b7749b62d821b80c8a845417113f44310) notify readiness when registered plugins are ready - \[release/1.6] Update ttrpc to 1.1.2 ([#8528](https://github.com/containerd/containerd/pull/8528)) - [`1cdbbe76b`](https://github.com/containerd/containerd/commit/1cdbbe76bc6d86d50d9338d3605af7ed8a33559c) Update ttrpc to 1.1.2 </details> ##### Changes from containerd/ttrpc <details><summary>2 commits</summary> - \[release/1.1] Unwrap io errors in server connection receive error handling ([#143](https://github.com/containerd/ttrpc/pull/143)) - [`d5f7eed`](https://github.com/containerd/ttrpc/commit/d5f7eeddb5e09b035c0683a2ffc9d19bda284b59) Unwrap io errors in server connection receive error handling </details> ##### Changes from containerd/zfs <details><summary>49 commits</summary> - gofumpt and update status badges ([#75](https://github.com/containerd/zfs/pull/75)) - [`5e3457b`](https://github.com/containerd/zfs/commit/5e3457b5e3b8e586e7b634da7bb1d05bafa7af97) TestZFSUsage: use t.TempDir() - [`6e9c675`](https://github.com/containerd/zfs/commit/6e9c675d5fb46bfef3450b97dc66705b9b1c1257) README: update badges - [`ff17a79`](https://github.com/containerd/zfs/commit/ff17a79101fc3854e86b150fe1bcb5ef67dbde6c) gofmt code - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 ([#73](https://github.com/containerd/zfs/pull/73)) - [`d3485b9`](https://github.com/containerd/zfs/commit/d3485b960a0f962115d5b27af414ef00afc3f327) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.1 - gha: fix golangci-lint, and upgrade to v1.52.2 ([#74](https://github.com/containerd/zfs/pull/74)) - [`23c831a`](https://github.com/containerd/zfs/commit/23c831a523b5e4a183ab296098fed921392b2b66) remove pre-go1.17 build-tags, and fix missing build-tags in plugin - [`e5acd95`](https://github.com/containerd/zfs/commit/e5acd9583b95971c99a3d1f75c2d45f5d300da00) gha: fix golangci-lint, upgrade to v1.52.2 - Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ([#72](https://github.com/containerd/zfs/pull/72)) - [`00b96c2`](https://github.com/containerd/zfs/commit/00b96c267860d15a5e075f5137d945e3a1e27248) Bump github.com/containerd/containerd from 1.6.12 to 1.6.18 - Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 ([#69](https://github.com/containerd/zfs/pull/69)) - [`a099def`](https://github.com/containerd/zfs/commit/a099def4fa00d26dca5d962e5dcff913803b773d) Bump github.com/containerd/containerd from 1.6.9 to 1.6.12 - Add CodeQL analysis workflow ([#67](https://github.com/containerd/zfs/pull/67)) - [`fee1db7`](https://github.com/containerd/zfs/commit/fee1db7f3d385bcddb3d2f5e3f8ebcd08f161348) Add CodeQL analysis workflow - Update GitHub actions CI workflow ([#66](https://github.com/containerd/zfs/pull/66)) - [`b8b7ab2`](https://github.com/containerd/zfs/commit/b8b7ab2115ea4c674c9183a1bb254006c351759a) Update GitHub actions CI workflow - Upgrade compiler to Go 1.19 and update dependencies ([#68](https://github.com/containerd/zfs/pull/68)) - [`3e729b3`](https://github.com/containerd/zfs/commit/3e729b3f873deef33f7d080e88a15de01ae63ced) Update dependencies - [`3c003f8`](https://github.com/containerd/zfs/commit/3c003f800458ecc9112c9a7f1bcdaaf098d7e317) Upgrade compiler to Go 1.19 - Remove references to io/ioutil package ([#65](https://github.com/containerd/zfs/pull/65)) - [`d700762`](https://github.com/containerd/zfs/commit/d70076257b75ca038a9639e54ef8a83d933ae504) Remove references to io/ioutil package - Update go.mod and move to supported Go version ([#62](https://github.com/containerd/zfs/pull/62)) - [`f52906e`](https://github.com/containerd/zfs/commit/f52906e04f4a33b2671449aec79a57d398e1c9e7) Update Go version to supported version - [`79ca2cb`](https://github.com/containerd/zfs/commit/79ca2cbc2bec7df1b3d1aab4f3b0a4098d65cc5b) Update containerd depedency to latest - go.mod: github.com/mistifyio/go-zfs v3.0.0 ([#59](https://github.com/containerd/zfs/pull/59)) - [`2e3db29`](https://github.com/containerd/zfs/commit/2e3db29964df41b3356359616600ea6be38b49b7) go.mod: github.com/mistifyio/go-zfs v3.0.0 - go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 ([#58](https://github.com/containerd/zfs/pull/58)) - [`d904e63`](https://github.com/containerd/zfs/commit/d904e63fbb8f04816aba652ea37d0d6ad4844ced) go.mod: github.com/mistifyio/go-zfs/v3 v3.0.0-20220217145925-d014733a5309 - Update vendoring to containerd 1.6.x ([#57](https://github.com/containerd/zfs/pull/57)) - [`e021180`](https://github.com/containerd/zfs/commit/e021180c43b6498fe219357bd9af19c77ac04fce) Update vendoring to containerd 1.6.x - Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 ([#55](https://github.com/containerd/zfs/pull/55)) - [`fc0c9a9`](https://github.com/containerd/zfs/commit/fc0c9a9c33db265975afdb845e6bfc596fdc8198) Bump github.com/containerd/containerd from 1.5.8 to 1.5.9 - Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 ([#54](https://github.com/containerd/zfs/pull/54)) - [`5d2f28c`](https://github.com/containerd/zfs/commit/5d2f28cbceb5b0d4246b1c0fc0bf6b41943afb32) Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 - [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf ([#53](https://github.com/containerd/zfs/pull/53)) - [`b3f193d`](https://github.com/containerd/zfs/commit/b3f193d7f00753424184bfd0c584e5c56e7de659) [follow-up-#52](https://github.com/follow-up-/containerd/issues/52): fix the order of cause in fmt.Errorf - replace pkg/errors ([#52](https://github.com/containerd/zfs/pull/52)) - [`d5b0a2f`](https://github.com/containerd/zfs/commit/d5b0a2f2e24dbbd22d20fda55743ec31f7bed0c5) replace pkg/errors - Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 ([#51](https://github.com/containerd/zfs/pull/51)) - [`fd6afa5`](https://github.com/containerd/zfs/commit/fd6afa5738a6331f3fccb6cba742bc18949711e0) Bump github.com/containerd/containerd from 1.5.2 to 1.5.4 - Bump containerd to 1.5.2 ([#50](https://github.com/containerd/zfs/pull/50)) - [`aef875e`](https://github.com/containerd/zfs/commit/aef875e0f05b1ceb7190ab90de813500ee1dfd51) bump containerd to 1.5.2 - Rename branches from master to main ([#49](https://github.com/containerd/zfs/pull/49)) - [`35c6af7`](https://github.com/containerd/zfs/commit/35c6af74680574936a45075886e03070283ef172) Rename branches from master to main - sync up with containerd 1.5 GA ([#47](https://github.com/containerd/zfs/pull/47)) - [`3d5efef`](https://github.com/containerd/zfs/commit/3d5efefdedc5ef3c11da2ec27163bc58652eb1c9) vendor sync up with containerd 1.5 ga - README.md: fix CI badge ([#46](https://github.com/containerd/zfs/pull/46)) - [`0977d81`](https://github.com/containerd/zfs/commit/0977d815b7d76b21cb861b04c0f0414d26af3046) README.md: fix CI badge </details> ##### Dependency Changes - **github.com/containerd/ttrpc** v1.1.1 -> v1.1.2 - **github.com/containerd/zfs** v1.0.0 -> v1.1.0 - **github.com/emicklei/go-restful/v3** v3.7.3 -> v3.10.1 - **github.com/google/go-cmp** v0.5.6 -> v0.5.9 - **github.com/google/uuid** v1.2.0 -> v1.3.0 - **github.com/mistifyio/go-zfs/v3** v3.0.1 ***new*** - **github.com/moby/sys/mountinfo** v0.5.0 -> v0.6.2 - **github.com/sirupsen/logrus** v1.8.1 -> v1.9.0 - **github.com/stretchr/testify** v1.7.0 -> v1.8.1 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **golang.org/x/net** [`a158d28`](https://github.com/containerd/containerd/commit/a158d28d115b) -> v0.8.0 - **golang.org/x/sys** [`8c9f86f`](https://github.com/containerd/containerd/commit/8c9f86f7a55f) -> v0.6.0 - **golang.org/x/term** [`03fcf44`](https://github.com/containerd/containerd/commit/03fcf44c2211) -> v0.6.0 - **golang.org/x/text** v0.3.7 -> v0.8.0 - **google.golang.org/grpc** v1.47.0 -> v1.50.1 - **google.golang.org/protobuf** v1.28.0 -> v1.28.1 - **gotest.tools/v3** v3.0.3 -> v3.5.0 Previous release can be found at [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21) ### [`v1.6.21`](https://github.com/containerd/containerd/releases/tag/v1.6.21): containerd 1.6.21 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.20...v1.6.21) Welcome to the v1.6.21 release of containerd! The twenty-first patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - \*\*update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450)) - \*\*Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456)) - \*\*oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403)) - \*\*windows: Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247)) - \*\*oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357)) - \*\*archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Sebastiaan van Stijn - Iceber Gu - Kirtana Ashok - Justin Chadwell - Phil Estes - Akihiro Suda - Djordje Lukic - Kazuyoshi Kato - Mike Brown - Wei Fu - kiashok ##### Changes <details><summary>26 commits</summary> - \[release/1.6] Prepare release notes for v1.6.21 ([#8463](https://github.com/containerd/containerd/pull/8463)) - [`9226c362a`](https://github.com/containerd/containerd/commit/9226c362a92b9a19860a3facc3eaeb0d2ec22e0c) Add release notes for v1.6.21 - \[release/1.6] update go to go1.19.9 ([#8469](https://github.com/containerd/containerd/pull/8469)) - [`39566aade`](https://github.com/containerd/containerd/commit/39566aadecc45abcfa242e41ad7bf07142f49c8c) \[release/1.6] update go to go1.19.9 - \[release/1.6] fix the task setting the runtime path ([#8454](https://github.com/containerd/containerd/pull/8454)) - [`e8840f688`](https://github.com/containerd/containerd/commit/e8840f688ae402bef461963321d63cf9cf6fbb34) skip TestContainerStartWithAbsRuntimePath if the runtime is v1 - [`75ab094de`](https://github.com/containerd/containerd/commit/75ab094de81b2d6806434e2f9ac94cb409e36314) integration: add container start test using abs runtime path - [`f49254f0b`](https://github.com/containerd/containerd/commit/f49254f0b7e17951c1be6e8a8063eb3f47175cd5) WithRuntimePath uses the TaskInfo.RuntimePath field - \[release/1.6 backport] update runc binary to v1.1.7 ([#8450](https://github.com/containerd/containerd/pull/8450)) - [`ccb51ff26`](https://github.com/containerd/containerd/commit/ccb51ff26971c10f88f8e594aeb8d29159f93e82) update runc binary to v1.1.7 - \[release/1.6] Remove entry for container from container store on error ([#8456](https://github.com/containerd/containerd/pull/8456)) - [`95d31551d`](https://github.com/containerd/containerd/commit/95d31551d0f7b1a842bcb87b2c2916fda52f07a6) Remove entry for container from container store on error - \[release/1.6 backport] oci: partially restore comment on read-only mounts for uid/gid uses ([#8403](https://github.com/containerd/containerd/pull/8403)) - [`c33eb574d`](https://github.com/containerd/containerd/commit/c33eb574dbc064ad8556512fff6b2cd81e510101) oci: partially restore comment on read-only mounts for uid/gid uses - \[release/1.6 ] Add ArgsEscaped support for CRI ([#8247](https://github.com/containerd/containerd/pull/8247)) - [`bc2e01303`](https://github.com/containerd/containerd/commit/bc2e01303b7103d7fe81a97caadc224102db1460) Fix argsEscaped tests - [`8b81d5acc`](https://github.com/containerd/containerd/commit/8b81d5acca2e6f390af99756128392253c5d0a5c) Add ArgsEscaped support for CRI - \[release/1.6 backport] update runc binary to v1.1.6 ([#8385](https://github.com/containerd/containerd/pull/8385)) - [`57d953482`](https://github.com/containerd/containerd/commit/57d953482083cb99c5814f5c414641599aa7c206) update runc binary to v1.1.6 - \[release/1.6 backport] oci: Use WithReadonlyTempMount when adding users/groups ([#8357](https://github.com/containerd/containerd/pull/8357)) - [`fb5e663d0`](https://github.com/containerd/containerd/commit/fb5e663d0d4e7e5091e2dedfa079c1a8f310f0bb) oci: Use WithReadonlyTempMount when adding users/groups - \[release/1.6] update go to go1.19.8 ([#8353](https://github.com/containerd/containerd/pull/8353)) - [`26efb8fd5`](https://github.com/containerd/containerd/commit/26efb8fd53de5bac26b28f4a2b8d8adf284ba7c2) \[release/1.6] update go to go1.19.8 - \[release/1.6] archive: consistently respect value of WithSkipDockerManifest ([#8345](https://github.com/containerd/containerd/pull/8345)) - [`ec13b497e`](https://github.com/containerd/containerd/commit/ec13b497ee7fba96d892637b75bdfd1932e64f12) export: add test for WithSkipDockerManifest - [`d1f3771c4`](https://github.com/containerd/containerd/commit/d1f3771c41470b3460b37edad9e8776b913f02e5) archive: consistently respect value of WithSkipDockerManifest </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20) ### [`v1.6.20`](https://github.com/containerd/containerd/releases/tag/v1.6.20): containerd 1.6.20 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.19...v1.6.20) Welcome to the v1.6.20 release of containerd! The twentieth patch release for containerd 1.6 contains various fixes and updates. ##### Notable Updates - **Disable looking up usernames and groupnames on host** ([#8230](https://github.com/containerd/containerd/pull/8230)) - **Add support for Windows ArgsEscaped images** ([#8273](https://github.com/containerd/containerd/pull/8273)) - **Update hcsshim to v0.9.8** ([#8274](https://github.com/containerd/containerd/pull/8274)) - **Fix debug flag in shim** ([#8288](https://github.com/containerd/containerd/pull/8288)) - **Add `WithReadonlyTempMount` to support readonly temporary mounts** ([#8299](https://github.com/containerd/containerd/pull/8299)) - **Update ttrpc to fix file descriptor leak** ([#8308](https://github.com/containerd/containerd/pull/8308)) - **Update runc binary to v1.1.5** ([#8324](https://github.com/containerd/containerd/pull/8324)) - **Update image config to support ArgsEscaped** ([#8306](https://github.com/containerd/containerd/pull/8306)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Sebastiaan van Stijn - Derek McGowan - Maksym Pavlenko - Akihiro Suda - Phil Estes - Eng Zer Jun - Justin Terry - Kazuyoshi Kato - Wei Fu - Abirdcfly - Gabriel Adrian Samfira - Henry Wang - Kang.Zhang - Kirtana Ashok - Laura Brehm - Luca Comellini - Paul "TBBle" Hampson - liyuxuan.darfux - ningmingxiao - wanglei ##### Changes <details><summary>48 commits</summary> - \[release/1.6] Prepare release notes for v1.6.20 ([#8310](https://github.com/containerd/containerd/pull/8310)) - [`a039a2b9c`](https://github.com/containerd/containerd/commit/a039a2b9c6a5e655b58bdd139af7307563b8efc7) Prepare release notes for v1.6.20 - \[release/1.6]Updates oci image config to support upstream ArgsEscaped ([#8306](https://github.com/containerd/containerd/pull/8306)) - [`5dd94a7e6`](https://github.com/containerd/containerd/commit/5dd94a7e6ccb356d2c7061ad49ba8a843ed9e4df) Updates oci image config to support upstream ArgsEscaped - \[release/1.6] update runc binary to v1.1.5 ([#8324](https://github.com/containerd/containerd/pull/8324)) - [`59fa6b191`](https://github.com/containerd/containerd/commit/59fa6b1914554c07321d79aa2131f370d0ebe27c) update runc binary to v1.1.5 - [`0c0aad93e`](https://github.com/containerd/containerd/commit/0c0aad93ec9a0db6392e41790294679eb9d2e3bc) go.mod: github.com/opencontainers/runc v1.1.5 - \[release/1.6] Update ttrpc to v1.1.1 ([#8308](https://github.com/containerd/containerd/pull/8308)) - [`50a6be0b4`](https://github.com/containerd/containerd/commit/50a6be0b4798eef5486a0f86c59686898ecc20c8) Update ttrpc to v1.1.1 - \[release/1.6 backport] Add `WithReadonlyTempMount` to create readonly temporary mounts ([#8299](https://github.com/containerd/containerd/pull/8299)) - [`8cead6594`](https://github.com/containerd/containerd/commit/8cead659440376c4a821d702f73c392f1c7fb8ce) Add `WithReadonlyTempMount` to create readonly temporary mounts - \[release/1.6] Adds support for Windows ArgsEscaped images ([#8273](https://github.com/containerd/containerd/pull/8273)) - [`f0dc0297d`](https://github.com/containerd/containerd/commit/f0dc0297d02e223d997fc992496b07006c0c4a69) Adds support for Windows ArgsEscaped images - \[release/1.6]go.mod: Bump hcsshim tag to v0.9.8 ([#8274](https://github.com/containerd/containerd/pull/8274)) - [`5981a24e2`](https://github.com/containerd/containerd/commit/5981a24e21a039c84f532c0e1ada85077c4101f1) Update hcsshim tag to v0.9.8 - \[1.6] shim: fix debug flag not working ([#8288](https://github.com/containerd/containerd/pull/8288)) - [`28f1e32e3`](https://github.com/containerd/containerd/commit/28f1e32e3b1b167eeab8890d67ed57817b3da29b) shim: fix debug flag not working - \[release/1.6] cherry-pick: Update go-restful to v3 ([#8271](https://github.com/containerd/containerd/pull/8271)) - [`5a8ea75df`](https://github.com/containerd/containerd/commit/5a8ea75df7d2956cd711e4445eea9b6aac070835) Update go-restful to v3 - [`59bdc1d5a`](https://github.com/containerd/containerd/commit/59bdc1d5a77ec7d5d57c66395de1bd2c1e27a55f) go.mod: update to github.com/emicklei/go-restful/v3 v3.7.3 - \[release/1.6] Go 1.19.7 ([#8238](https://github.com/containerd/containerd/pull/8238)) - [`86e0bd9e3`](https://github.com/containerd/containerd/commit/86e0bd9e3966ae686d7ab0a99a60f0212837028d) Go 1.19.7 - \[release/1.6 backport] archive: disable looking up usernames and groupnames on the host ([#8230](https://github.com/containerd/containerd/pull/8230)) - [`063ad2f19`](https://github.com/containerd/containerd/commit/063ad2f1949168fed35a5609d6a0c01c529da346) archive: disable looking up usernames and groupnames on the host - \[release/1.6 backport] assorted linting, and golang update-related changes ([#8229](https://github.com/containerd/containerd/pull/8229)) - [`9cbea6fe7`](https://github.com/containerd/containerd/commit/9cbea6fe783f6ec6086bd85477ed2df659f10988) Enable dupword linter - [`c73f1abff`](https://github.com/containerd/containerd/commit/c73f1abff73657ea78d8a4762ff1b60324597896) Bump golangci-lint to v1.50.1 - [`f198f7724`](https://github.com/containerd/containerd/commit/f198f7724d6d83261ba83f830d65103169608fc7) update golangci-lint to v1.49.0 - [`e6179af1e`](https://github.com/containerd/containerd/commit/e6179af1ea994e1bdcc2c03f65223fa7256d9024) remove unneeded nolint-comments (nolintlint), disable deprecated linters - [`77160e6b5`](https://github.com/containerd/containerd/commit/77160e6b592ef44e4e800fac7736742dcf521f9c) \[release/1.6] adjust some nolint comments - [`95655f4ce`](https://github.com/containerd/containerd/commit/95655f4ceedc29e44f13bb5b6b702f319c207b43) clean-up "nolint" comments, remove unused ones - [`9f0617ecc`](https://github.com/containerd/containerd/commit/9f0617ecc46ab189b2bd7d4839d89327f75b75ba) pkg/cri/(server|sbserver): criService.getTLSConfig() add TODO to verify nolint - [`e66397d83`](https://github.com/containerd/containerd/commit/e66397d838fa69e2653eba67e5e9ac081c84c69b) golangci-lint: sort linters in config file - [`682a567e9`](https://github.com/containerd/containerd/commit/682a567e9eb86c1a538067ad5bb36b2d6b59d4fc) linting: address gosec G112/G114 - [`627f563e6`](https://github.com/containerd/containerd/commit/627f563e6d61d2ca98f77eef6322babf9f53553c) chore: remove duplicate word in comments - [`efb88a8bb`](https://github.com/containerd/containerd/commit/efb88a8bbcdbefe6b7c820aee5b41257af1fd093) pkg/cri/streaming: increase ReadHeaderTimeout - [`45f055df6`](https://github.com/containerd/containerd/commit/45f055df6617a5c05c494e6870694c8c11c13711) Update protobuf definitions - [`584707524`](https://github.com/containerd/containerd/commit/584707524ac08d5f5284fd76ded25f3845886587) Run gofmt 1.19 - [`f33e38572`](https://github.com/containerd/containerd/commit/f33e38572758e178a7e57344983c139ac87a138e) Switch to Go 1.19 - [`fc10cd23a`](https://github.com/containerd/containerd/commit/fc10cd23adc555c559b42e5c996bfb212cc4b50e) remove duplicate - [`7cbb9e746`](https://github.com/containerd/containerd/commit/7cbb9e746128e4ab87ee28bb6f833df928048fb0) Update linters to use t.Setenv - [`4347a3265`](https://github.com/containerd/containerd/commit/4347a3265a895d9f30602dc7dcb83c00e762892b) Use t.Setenv instead of os.Setenv - [`10357eab5`](https://github.com/containerd/containerd/commit/10357eab5f89aa875ff2fec3500416d86807d1da) Address some timeout issues in the Windows CI - [`977ce8ef5`](https://github.com/containerd/containerd/commit/977ce8ef508d5cdbf4d549458a0cc46cd14f7833) Enable gosec linter for golangci-lint - [`c23945c5f`](https://github.com/containerd/containerd/commit/c23945c5fab20269c98aa17337a247f6e9ec9175) test: remove redundant `mountPoint` - [`588ed91d3`](https://github.com/containerd/containerd/commit/588ed91d3fb93c77118e35ca09e73227ed81d3ff) test: use `T.TempDir` to create temporary test directory - [`c2ed63c86`](https://github.com/containerd/containerd/commit/c2ed63c86cacc0cf5e2e2729d2478c0c0385c039) Remove hardcoded /tmp in tempfile paths - [`7e382c516`](https://github.com/containerd/containerd/commit/7e382c516f80ea71aa9086d2cb9c0e83ec155222) fix Implicit memory aliasing in for loop </details> ##### Changes from containerd/ttrpc <details><summary>2 commits</summary> - \[release/1.1] server: Fix connection leak when receiving ECONNRESET ([#136](https://github.com/containerd/ttrpc/pull/136)) - [`8977f59`](https://github.com/containerd/ttrpc/commit/8977f59dbda8a5a97d0801669e4c0d9f5a7088dd) server: Fix connection leak when receiving ECONNRESET </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.7 -> v0.9.8 - **github.com/containerd/ttrpc** v1.1.0 -> v1.1.1 - **github.com/emicklei/go-restful/v3** v3.7.3 ***new*** - **github.com/opencontainers/image-spec** [`c5a74bc`](https://github.com/containerd/containerd/commit/c5a74bcca799) -> [`3a7f492`](https://github.com/containerd/containerd/commit/3a7f492d3f1b) - **github.com/opencontainers/runc** v1.1.2 -> v1.1.5 Previous release can be found at [v1.6.19](https://github.com/containerd/containerd/releases/tag/v1.6.19) ### [`v1.6.19`](https://github.com/containerd/containerd/releases/tag/v1.6.19): containerd 1.6.19 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.18...v1.6.19) Welcome to the v1.6.19 release of containerd! The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms ##### Notable Updates - **Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers** ([#8153](https://github.com/containerd/containerd/pull/8153)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Kirtana Ashok - Derek McGowan - Wei Fu ##### Changes <details><summary>4 commits</summary> - \[release/1.6] Prepare release notes for v1.6.19 ([#8157](https://github.com/containerd/containerd/pull/8157)) - [`23e94075a`](https://github.com/containerd/containerd/commit/23e94075a5cf42c37c0854d976a5b9c50358f33f) Add release notes for v1.6.19 - \[release/1.6] go.mod: Bump hcsshim to v0.9.7 ([#8153](https://github.com/containerd/containerd/pull/8153)) - [`f488a6241`](https://github.com/containerd/containerd/commit/f488a6241b7fa87746026de1a947c57d311751e8) Update hcsshim tag to v0.9.7 </details> ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.9.6 -> v0.9.7 Previous release can be found at [v1.6.18](https://github.com/containerd/containerd/releases/tag/v1.6.18) ### [`v1.6.18`](https://github.com/containerd/containerd/releases/tag/v1.6.18): containerd 1.6.18 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.17...v1.6.18) Welcome to the v1.6.18 release of containerd! The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173 along with a security update for Go. ##### Notable Updates - **Fix OCI image importer memory exhaustion** ([GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2)) - **Fix supplementary groups not being set up properly** ([GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p)) - **Revert removal of `/sbin/apparmor_parser` check** ([#8087](https://github.com/containerd/containerd/pull/8087)) - **Update Go to 1.19.6** ([#8111](https://github.com/containerd/containerd/pull/8111)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Ye Sijun - Samuel Karp - Bjorn Neergaard - Wei Fu - Brian Goff - Iceber Gu - Kazuyoshi Kato - Phil Estes - Swagat Bora ##### Changes <details><summary>24 commits</summary> - \[release/1.6] Prepare release notes for v1.6.18 ([#8118](https://github.com/containerd/containerd/pull/8118)) - [`44e61d764`](https://github.com/containerd/containerd/commit/44e61d7641f71f44353263306a4967276933173b) Add release notes for v1.6.18 - Github Security Advisory [GHSA-hmfx-3pcx-653p](https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p) - [`286a01f35`](https://github.com/containerd/containerd/commit/286a01f350a2298b4fdd7e2a0b31c04db3937ea8) oci: fix additional GIDs - [`301823453`](https://github.com/containerd/containerd/commit/301823453d788ce409e222e88a27d7faf2c2093d) oci: fix loop iterator aliasing - [`0070ab70f`](https://github.com/containerd/containerd/commit/0070ab70fa58045d25fc6ebab27edcae328e38f1) oci: skip checking gid for WithAppendAdditionalGroups - [`16d52de64`](https://github.com/containerd/containerd/commit/16d52de64d9b0b0e4bf7e11226199281561a3d96) refactor: reduce duplicate code - [`b45e30292`](https://github.com/containerd/containerd/commit/b45e30292ce9b214158fa403a6165aabbf5b23f0) add WithAdditionalGIDs test - [`0a06c284a`](https://github.com/containerd/containerd/commit/0a06c284aec5860a58a803b5da83def3462dc3a0) add WithAppendAdditionalGroups helper - Github Security Advisory [GHSA-259w-8hf6-59c2](https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2) - [`84936fd1f`](https://github.com/containerd/containerd/commit/84936fd1f6a0670ab8c7665cb87fae6b87b0b908) importer: stream oci-layout and manifest.json - \[1.6] Add fallback for windows platforms without osversion ([#8106](https://github.com/containerd/containerd/pull/8106)) - [`b327af6a4`](https://github.com/containerd/containerd/commit/b327af6a4f635611d8b59beec94db0beace48063) Add fallback for windows platforms without osversion - \[release/1.6] Go 1.19.6 ([#8111](https://github.com/containerd/containerd/pull/8111)) - [`54ead5b7b`](https://github.com/containerd/containerd/commit/54ead5b7b71a0f458566e42eac28eb274286af47) Go 1.19.6 - \[release/1.6] ctr/run: flags --detach and --rm cannot be specified together ([#8094](https://github.com/containerd/containerd/pull/8094)) - [`2b4b35ab4`](https://github.com/containerd/containerd/commit/2b4b35ab49b0cea79f76c4f52923c74cfc26ccfb) ctr/run: flags --detach and --rm cannot be specified together - \[release/1.6] Fix retry logic within devmapper device deactivation ([#8088](https://github.com/containerd/containerd/pull/8088)) - [`d5284157b`](https://github.com/containerd/containerd/commit/d5284157b8af78a2d85e78bd3106695a4e4c995b) Fix retry logic within devmapper device deactivation - \[release/1.6 backport] Revert `apparmor_parser` regression ([#8087](https://github.com/containerd/containerd/pull/8087)) - [`624ff636b`](https://github.com/containerd/containerd/commit/624ff636b8b463fc48e6ba3c861f98a0c00dbb71) pkg/apparmor: clarify Godoc - [`3a0a35b36`](https://github.com/containerd/containerd/commit/3a0a35b36297685d1a38bfa823005a2cb77a40dd) Revert "Don't check for apparmor_parser to be present" - \[release/1.6] CI: skip some jobs when `repo != containerd/containerd` ([#8083](https://github.com/containerd/containerd/pull/8083)) - [`664a938a3`](https://github.com/containerd/containerd/commit/664a938a33ccbbc0ab70ca5f9455e452b910e767) CI: skip some jobs when `repo != containerd/containerd` </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.17](https://github.com/containerd/containerd/releases/tag/v1.6.17) ### [`v1.6.17`](https://github.com/containerd/containerd/releases/tag/v1.6.17): containerd 1.6.17 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.16...v1.6.17) Welcome to the v1.6.17 release of containerd! The seventeenth patch release for containerd 1.6 includes various updates. ##### Notable Updates - **Add network plugin metrics** ([#8018](https://github.com/containerd/containerd/pull/8018)) - **Update mkdir permission on /etc/cni to 0755 instead of 0700** ([#8030](https://github.com/containerd/containerd/pull/8030)) - **Export remote snapshotter label handler** ([#8054](https://github.com/containerd/containerd/pull/8054)) - **Add support for default hosts.toml configuration** ([#8065](https://github.com/containerd/containerd/pull/8065)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Akihiro Suda - Jess - Antonio Ojea - Kohei Tokunaga - Phil Estes - Wei Fu ##### Changes <details><summary>11 commits</summary> - \[release/1.6] Prepare release notes for v1.6.17 ([#8080](https://github.com/containerd/containerd/pull/8080)) - [`a1aa9b900`](https://github.com/containerd/containerd/commit/a1aa9b900ce9e276a210a48aa5dc8b8832a44c2e) Prepare release notes for v1.6.17 - \[1.6] Backport default registry hosts config ([#8065](https://github.com/containerd/containerd/pull/8065)) - [`1436641b8`](https://github.com/containerd/containerd/commit/1436641b8dc77f24f4ec57d238344bc6bb857081) Support default hosts.toml configuration - [`87acecd04`](https://github.com/containerd/containerd/commit/87acecd0409103c266c5eda932e809e6717e7859) Update hosts doc - \[release/1.6 backport] Export remote snapshotter label handler ([#8054](https://github.com/containerd/containerd/pull/8054)) - [`a6544ed7d`](https://github.com/containerd/containerd/commit/a6544ed7dc114b7542041eea91abbc7fe9a466a0) Export remote snapshotter label handler - \[release/1.6] cri: mkdir /etc/cni with 0755, not 0700 ([#8030](https://github.com/containerd/containerd/pull/8030)) - [`ae02a24a3`](https://github.com/containerd/containerd/commit/ae02a24a39ddd6764eb7f98de677f11d8bdd1919) cri: mkdir /etc/cni with 0755, not 0700 - \[release/1.6] add network plugin metrics ([#8018](https://github.com/containerd/containerd/pull/8018)) - [`6c6cc5ec1`](https://github.com/containerd/containerd/commit/6c6cc5ec107f10ccf4d4acbfe89d572a52d58a92) add network plugin metrics </details> ##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.6.16](https://github.com/containerd/containerd/releases/tag/v1.6.16) ### [`v1.6.16`](https://github.com/containerd/containerd/releases/tag/v1.6.16): containerd 1.6.16 [Compare Source](https://github.com/containerd/containerd/compare/v1.6.15...v1.6.16) Welcome to the v1.6.16 release of containerd! The sixteenth patch release for containerd 1.6 includes various bug fixes and updates. ##### Notable Updates - **Fix push error propagation** ([#7990](https://github.com/containerd/containerd/pull/7990)) - **Fix slice append error with HugepageLimits for Linux** ([#7995](https://github.com/containerd/containerd/pull/7995)) - **Update default seccomp profile for PKU and CAP_SYS_NICE** ([#8001](https://github.com/containerd/containerd/pull/8001)) - **Fix overlayfs error when upperdirlabel option is set** ([#8002](https://github.com/containerd/containerd/pull/8002)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Akihiro Suda - Derek McGowan - Samuel Karp - Sebastiaan van Stijn - Phil Estes - Craig Ingram - Justin Chadwell - Qasim Sarfraz - Wei Fu - bin liu - cardy.tang - rongfu.leng ##### Changes <details><summary>30 commits</summary> - \[release/1.6] Prepare v1.6.16 ([#8016](https://github.com/containerd/containerd/pull/8016)) - [`d3c595aa3`](https://github.com/containerd/containerd/commit/d3c595aa387e2d7ad3cd08313579ec86c876f738) Prepare release notes for v1.6.16 - \[release/1.6 backport] Fix tx closed error when upperdirlabel specified ([#8002](https://github.com/containerd/containerd/pull/8002)) - [`8c704036a`](https://github.com/containerd/containerd/commit/8c704036a81b13b25ab7073e2715075b6ec39e94) Fix tx closed error when upperdirlabel specified - \[release/1.6 backport] assorted test-fixes ([#8000](https://github.com/containerd/containerd/pull/8000)) - [`91a68edd7`](https://github.com/containerd/containerd/commit/91a68edd775bba554a9eac7e04898b22069db5aa) cri: Fix TestUpdateOCILinuxResource for host w/o swap controller - [`5594f706e`](https://github.com/containerd/containerd/commit/5594f706e67462c4a29f68e6958341ba35d06826) Fix TestUpdateContainerResources_Memory\* on cgroup v2 hosts - \[release/1.6 backport] seccomp updates ([#8001](https://github.com/containerd/containerd/pull/8001)) - [`7037f5313`](https://github.com/containerd/containerd/commit/7037f531304821b7b1943f2c7821d94035b54d76) seccomp: add get_mempolicy, mbind, set_mempolicy, with CAP_SYS_NICE - [`d22919a1c`](https://github.com/containerd/containerd/commit/d22919a1cb8180885a6f38fa7851a487aebd2440) seccomp: seccomp: add syscalls related to PKU in default policy - \[release/1.6 backport] Harden GITHUB_TOKEN permissions ([#7999](https://github.com/containerd/containerd/pull/7999)) - [`8b8a21fe4`](https://github.com/containerd/containerd/commit/8b8a21fe4dbc7b940a802cb8d099a4084dae6ee9) Harden GITHUB_TOKEN permissions - \[release/1.6 backport] assorted updates to Vagrantfile ([#7996](https://github.com/containerd/containerd/pull/7996)) - [`8009948bb`](https://github.com/containerd/containerd/commit/8009948bb2dee8eb2c021d8a467572927ed0657d) Vagrantfile: fix comments about SELinux - [`550424f92`](https://github.com/containerd/containerd/commit/550424f929d7f9ae8fd59bd520719d0d8f00f2b3) Vagrantfile: install-rootless-podman: remove `setenforce 0` - [`2c32f8559`](https://github.com/containerd/containerd/commit/2c32f85599ec121702329ffddd50f99dbe491370) CI: update Fedora to 37 - [`556bb0cc8`](https://github.com/containerd/containerd/commit/556bb0cc8a01ece740d28749bcc6d76360117167) Vagrantfile: explicitly specify rsync as the shared folder driver - [`edfac1834`](https://github.com/containerd/containerd/commit/edfac183479d3a98147d1652b4ee198f522330a5) fix install cni script - [`91d5e53fb`](https://github.com/containerd/containerd/commit/91d5e53fbc3d5acfdd8ca4328cec1a20359b22f8) Vagrantfile: dump containerd log after critest - \[release/1.6 backport] Fix slice append error ([#7995](https://github.com/containerd/containerd/pull/7995)) - [`ab193eb20`](https://github.com/containerd/containerd/commit/ab193eb20bade0c7fff74a33a3b91f2517af05c6) pkg/cri: optimize slice initialization - [`e6cf5ec58`](https://github.com/containerd/containerd/commit/e6cf5ec58d395332985f15084527676d70b21f1c) Fix slice append error - \[release/1.6] update to go1.18.10 ([#7992](https://github.com/containerd/containerd/pull/7992)) - [`6a8a6531f`](https://github.com/containerd/containerd/commit/6a8a6531fd4f778089376749386c934b436484f7) \[release/1.6] update to go1.18.10 - \[release/1.6 backport] release/Dockerfile: set DEBIAN_FRONTEND=noninteractive ([#7991](https://github.com/containerd/containerd/pull/7991)) - [`d0dc7988a`](https://github.com/containerd/containerd/commit/d0dc7988ab9b30be8a05fae1fc064164418e653d) release/Dockerfile: set DEBIAN_FRONTEND=noninteractive - \[release/1.6 backport] pushWriter: correctly propagate errors ([#7990](https://github.com/containerd/containerd/pull/7990)) - [`1584c2581`](https://github.com/containerd/containerd/commit/1584c2581017414e673e4df05f63bc6b67edd424) pushWriter: correctly propagate errors - \[release/1.6] mod: update github.com/pelletier/go-toml@v1.9.5 ([#7942](https://github.com/containerd/containerd/pull/7942)) - [`545f22091`](https://github.com/containerd/containerd/commit/545f220910082c4236a8751854c640e7f7dc3e69) mod: update github.com/pelletier/go-toml@v1.9.5 </details> ##### Dependency Changes - **github.com/pelletier/go-toml** v1.9.3 -> v1.9.5 Previous release can be found at [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15) </details> <details> <summary>docker/buildx</summary> ### [`v0.13.1`](https://github.com/docker/buildx/releases/tag/v0.13.1) [Compare Source](https://github.com/docker/buildx/compare/v0.13.0...v0.13.1) buildx 0.13.1 Welcome to the 0.13.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Notable changes - Fix connecting to `docker-container://` and `kube-pod://` style URLs with remote driver [#2327](https://github.com/docker/buildx/issues/2327) - Fix handling of `--push` with Bake when a target has already defined a non-image output [#2330](https://github.com/docker/buildx/issues/2330) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0) ### [`v0.13.0`](https://github.com/docker/buildx/releases/tag/v0.13.0) [Compare Source](https://github.com/docker/buildx/compare/v0.12.1...v0.13.0) buildx 0.13.0 Welcome to the 0.13.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - CrazyMax - Tõnis Tiigi - Sebastiaan van Stijn - David Karlsson - Jonathan A. Sternberg - Justin Chadwell - Laura Brehm - Akihiro Suda - Ian King'ori - Paweł Gronowski - Brian Goff - Kushagra Mansingh - Laurent Goderre - Nicolas De Loof - Rob Murray - Simon A. Eugster ##### Notable Changes - Builds can now use multiple outputs with a single command (requires BuildKit v0.13+) [#2290](https://github.com/docker/buildx/issues/2290) [#2302](https://github.com/docker/buildx/issues/2302) - Bake command now supports defining `shm-size` and `ulimit` values [#2279](https://github.com/docker/buildx/issues/2279) [#2242](https://github.com/docker/buildx/issues/2242) - Windows container based builder instances can now be created with remote driver and npipe connections [#2287](https://github.com/docker/buildx/issues/2287) - New `dial-stdio` command is available for directly contacting BuildKit daemon of the configured builder instance [#2112](https://github.com/docker/buildx/issues/2112) - Container and Kubernetes builder instances now allow `network.host` entitlement by default (allowing access to the container's network) [#2266](https://github.com/docker/buildx/issues/2266) - `ls` command now supports `--format` options for controlling the output [#1787](https://github.com/docker/buildx/issues/1787) - `--metadata-file` option can now also return build reference that can be used for further build debugging, for example, in Docker Desktop [#2263](https://github.com/docker/buildx/issues/2263) - New experimental OpenTelemetry metrics exporting is available for build duration and transfer sizes [#2235](https://github.com/docker/buildx/issues/2235) [#2258](https://github.com/docker/buildx/issues/2258) [#2225](https://github.com/docker/buildx/issues/2225) [#2224](https://github.com/docker/buildx/issues/2224) [#2155](https://github.com/docker/buildx/issues/2155) - Fix possible cache invalidation when using linked targets in Bake [#2265](https://github.com/docker/buildx/issues/2265) - Container driver now supports driver opt for defining restart policy for BuildKit container [#1271](https://github.com/docker/buildx/issues/1271) - Compose spec support has been updated to `v2.0.0-rc.8` [#2205](https://github.com/docker/buildx/issues/2205) - Bake command has been updated to share the same authentication provider for all targets for improved performance [#2147](https://github.com/docker/buildx/issues/2147) - New cancellation signal handling via UNIX socket is supported with new Docker CLI [#2184](https://github.com/docker/buildx/issues/2184) [#2289](https://github.com/docker/buildx/issues/2289) - Multiple builders can now be removed with a single command [#2140](https://github.com/docker/buildx/issues/2140) - `--add-host` flag now permits `=` separator for IPv6 addresses [#2121](https://github.com/docker/buildx/issues/2121) - VCS attributes exported from Buildx now include the local directory subpaths if they are relative to the current Git repository [#2156](https://github.com/docker/buildx/issues/2156) - `imagetools inspect` command can now show DSSE-signed SBOM and Provenance attestations [#2194](https://github.com/docker/buildx/issues/2194) - Fixes for Git repository path sanitization in WSL [#2167](https://github.com/docker/buildx/issues/2167) - Default Git repository path is now found via configured tracking branch [#2146](https://github.com/docker/buildx/issues/2146) - Certain error messages for attestations have been improved [#2268](https://github.com/docker/buildx/issues/2268) - Better handling of connecting to unhealthy nodes with remote driver [#2130](https://github.com/docker/buildx/issues/2130) - Fix possible panic in `imagetools create` command [#2230](https://github.com/docker/buildx/issues/2230) - Fix additional output when exporting progress in `rawjson` mode [#2252](https://github.com/docker/buildx/issues/2252) - Fix possible inconsistent configuration merge order when using Bake with many configurations [#2237](https://github.com/docker/buildx/issues/2237) - Npipe URL scheme is now supported on Windows [#2250](https://github.com/docker/buildx/issues/2250) - Fix possible console warnings on Windows [#2238](https://github.com/docker/buildx/issues/2238) ##### Dependency Changes - **github.com/Microsoft/hcsshim** v0.11.1 -> v0.11.4 - **github.com/aws/aws-sdk-go-v2** v1.17.6 -> v1.24.1 - **github.com/aws/aws-sdk-go-v2/config** v1.18.16 -> v1.26.6 - **github.com/aws/aws-sdk-go-v2/credentials** v1.13.16 -> v1.16.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.24 -> v1.14.11 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.30 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.24 -> v2.5.10 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.31 -> v1.7.3 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.10.4 ***new*** - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.24 -> v1.10.10 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.12.5 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 -> v1.21.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.18.6 -> v1.26.7 - **github.com/aws/smithy-go** v1.13.5 -> v1.19.0 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/compose-spec/compose-go/v2** v2.0.0-rc.8 ***new*** - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd** v1.7.7 -> v1.7.13 - **github.com/containerd/continuity** v0.4.2 -> v0.4.3 - **github.com/docker/cli** v24.0.5 -> v26.0.0-rc1 - **github.com/docker/cli-docs-tool** v0.6.0 -> v0.7.0 - **github.com/docker/docker** v24.0.5 -> v26.0.0-rc1 - **github.com/docker/docker-credential-helpers** v0.7.0 -> v0.8.0 - **github.com/docker/go-connections** v0.4.0 -> v0.5.0 - **github.com/emicklei/go-restful/v3** v3.10.1 -> v3.11.0 - **github.com/felixge/httpsnoop** v1.0.3 -> v1.0.4 - **github.com/go-logr/logr** v1.2.3 -> v1.3.0 - **github.com/go-openapi/jsonpointer** v0.19.5 -> v0.19.6 - **github.com/go-openapi/jsonreference** v0.20.0 -> v0.20.2 - **github.com/go-openapi/swag** v0.19.14 -> v0.22.3 - **github.com/google/gnostic-models** v0.6.8 ***new*** - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/uuid** v1.3.0 -> v1.6.0 - **github.com/gorilla/websocket** v1.5.0 ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 -> v2.16.0 - **github.com/klauspost/compress** v1.16.3 -> v1.17.4 - **github.com/mailru/easyjson** v0.7.6 -> v0.7.7 - **github.com/mattn/go-runewidth** v0.0.15 ***new*** - **github.com/mitchellh/copystructure** v1.2.0 ***new*** - **github.com/mitchellh/reflectwalk** v1.0.2 ***new*** - **github.com/moby/buildkit** [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042) -> v0.13.0 - **github.com/moby/docker-image-spec** v1.3.1 ***new*** - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/mxk/go-flowrate** [`cca7078`](https://github.com/docker/buildx/commit/cca7078d478f) ***new*** - **github.com/prometheus/client_golang** v1.14.0 -> v1.17.0 - **github.com/prometheus/client_model** v0.3.0 -> v0.5.0 - **github.com/prometheus/common** v0.42.0 -> v0.44.0 - **github.com/prometheus/procfs** v0.9.0 -> v0.12.0 - **github.com/rivo/uniseg** v0.2.0 ***new*** - **github.com/serialx/hashring** [`8b29126`](https://github.com/docker/buildx/commit/8b2912629002) -> [`22c0c7a`](https://github.com/docker/buildx/commit/22c0c7ab6b1b) - **github.com/spf13/cobra** v1.7.0 -> v1.8.0 - **github.com/tonistiigi/fsutil** [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/docker/buildx/commit/7525a1af2bb5) - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/otel** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 ***new*** - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 - **golang.org/x/exp** [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) -> [`db7319d`](https://github.com/docker/buildx/commit/db7319d0e0e3) - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) - **google.golang.org/genproto/googleapis/api** [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`49dd2c1`](https://github.com/docker/buildx/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.59.0 - **k8s.io/api** v0.26.7 -> v0.29.2 - **k8s.io/apimachinery** v0.26.7 -> v0.29.2 - **k8s.io/apiserver** v0.26.7 -> v0.29.2 - **k8s.io/client-go** v0.26.7 -> v0.29.2 - **k8s.io/klog/v2** v2.90.1 -> v2.110.1 - **k8s.io/kube-openapi** [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) -> [`2dd684a`](https://github.com/docker/buildx/commit/2dd684a91f00) - **k8s.io/utils** [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5) -> [`3b25d92`](https://github.com/docker/buildx/commit/3b25d923346b) - **sigs.k8s.io/json** [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) -> [`bc3834c`](https://github.com/docker/buildx/commit/bc3834ca7abd) - **sigs.k8s.io/structured-merge-diff/v4** v4.2.3 -> v4.4.1 Previous release can be found at [v0.12.1](https://github.com/docker/buildx/releases/tag/v0.12.1) ### [`v0.12.1`](https://github.com/docker/buildx/releases/tag/v0.12.1) [Compare Source](https://github.com/docker/buildx/compare/v0.12.0...v0.12.1) Welcome to the v0.12.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Changes - Fix incorrect validation of some driver-opt values that could cause invalid state to be stored [#2176](https://github.com/docker/buildx/issues/2176) Previous release can be found at [v0.12.0](https://github.com/docker/buildx/releases/tag/v0.12.0) ### [`v0.12.0`](https://github.com/docker/buildx/releases/tag/v0.12.0) [Compare Source](https://github.com/docker/buildx/compare/v0.11.2...v0.12.0) Welcome to the 0.12.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - CrazyMax - Justin Chadwell - Tõnis Tiigi - Sebastiaan van Stijn - Kohei Tokunaga - David Karlsson - Jonathan A. Sternberg - Guillaume Lours - Kenyon Ralph - Qasim Sarfraz - Silvin Lubecki - Akihiro Suda - Aleksa Sarai - Cameron Adams - Dmitry Makovey - Jhan S. Álvarez - Jonathan Piché - Kenyon Ralph - Kijima Daigo - Silvin Lubecki - Zero - guoguangwu ##### Notable Changes - OCI Annotations can be added to build results with a new `--annotation` flag for the build command and `annotations` key in the Bake file. Annotations added to OCI manifests, indexes, and descriptors. [#2020](https://github.com/docker/buildx/issues/2020) [#2098](https://github.com/docker/buildx/issues/2098) - New debugging features have been added with a new `debug` command and interactive debugging console. This feature currently requires setting `BUILDX_EXPERIMENTAL=1` [#2006](https://github.com/docker/buildx/issues/2006) [#1896](https://github.com/docker/buildx/issues/1896) [#1970](https://github.com/docker/buildx/issues/1970) [#1914](https://github.com/docker/buildx/issues/1914) [#2026](https://github.com/docker/buildx/issues/2026) [#2086](https://github.com/docker/buildx/issues/2086) [docs](https://github.com/docker/buildx/blob/v0.12.0-rc1/docs/guides/debugging.md) - Special `host-gateway` IP mapping can now be used with the `--add-host` flag during build [#1894](https://github.com/docker/buildx/issues/1894) [#2083](https://github.com/docker/buildx/issues/2083) - Bake command now allows adding local source files when building from remote definition [#1838](https://github.com/docker/buildx/issues/1838) - The status of uploading build results to Docker is now shown interactively on progressbar [#1994](https://github.com/docker/buildx/issues/1994) - Error handling has been improved when bootstrapping multi-node build clusters [#1869](https://github.com/docker/buildx/issues/1869) - Compose support has been updated to 1.20, enabling "include" functionality when using the Bake command [#1971](https://github.com/docker/buildx/issues/1971) [#2065](https://github.com/docker/buildx/issues/2065) [#2094](https://github.com/docker/buildx/issues/2094) - Imagetools create command now allows adding annotation when creating new images in the registry [#1965](https://github.com/docker/buildx/issues/1965) - OpenTelemetry build trace delegation from buildx is now possible with Docker and Remote driver [#2034](https://github.com/docker/buildx/issues/2034) - Bake command now shows all files where the build definition was loaded from on the progressbar [#2076](https://github.com/docker/buildx/issues/2076) - Bake files now allow the same attributes to be defined in multiple definition files. [#1062](https://github.com/docker/buildx/issues/1062) - Using the Bake command with a remote definition now allows this definition to use local Dockerfiles [#2015](https://github.com/docker/buildx/issues/2015) - Docker container driver now explicitly sets BuildKit config path to make sure configurations are loaded from same location for both mainline and rootless images [#2093](https://github.com/docker/buildx/issues/2093) - Improve performance of detecting when BuildKit instance has completed booting [#1934](https://github.com/docker/buildx/issues/1934) - Container driver now accepts many new driver options for defining the resource limits for BuildKit container [#2048](https://github.com/docker/buildx/issues/2048) - Inspection commands formatting has been improved [#2068](https://github.com/docker/buildx/issues/2068) - Error messages about driver capabilities have been improved [#1998](https://github.com/docker/buildx/issues/1998) - Improve errors when invoking Bake command without targets [#2100](https://github.com/docker/buildx/issues/2100) - Allow enabling debug logs with environment variables when running in standalone mode [#1821](https://github.com/docker/buildx/issues/1821) - When using Docker driver the default image resolve mode has been updated to prefer local Docker images for backward compatibility [#1886](https://github.com/docker/buildx/issues/1886) - Kubernetes driver now allows setting custom annotations and labels to the BuildKit deployments and pods [#1938](https://github.com/docker/buildx/issues/1938) - Kubernetes driver now allows setting authentication token with endpoint configuration [#1891](https://github.com/docker/buildx/issues/1891) - Fix possible issue with chained targets in Bake that could result in build failing or local source for a target uploaded multiple times [#2113](https://github.com/docker/buildx/issues/2113) - Fix issue when accessing global target properties when using the matrix feature of the Bake command [#2106](https://github.com/docker/buildx/issues/2106) - Fixes for formatting validation of certain build flags [#2040](https://github.com/docker/buildx/issues/2040) - Fixes to avoid locking certain commands unnecessarily while booting builder nodes. [#2066](https://github.com/docker/buildx/issues/2066) - Fix cases where multiple builds try to bootstrap the same builder instance in parallel [#2000](https://github.com/docker/buildx/issues/2000) - Fix cases where errors on uploading build results to docker could be dropped in some cases [#1927](https://github.com/docker/buildx/issues/1927) - Fix detecting capabilities for missing attestation support based on build output [#1988](https://github.com/docker/buildx/issues/1988) - Fix the build for loading in Bake remote definition to not show up in build history records [#1961](https://github.com/docker/buildx/issues/1961) [#1954](https://github.com/docker/buildx/issues/1954) - Fix errors when building Compose files using the that define profiles with Bake [#1903](https://github.com/docker/buildx/issues/1903) - Fix possible time correction errors on progressbar [#1968](https://github.com/docker/buildx/issues/1968) - Fix passing custom Cgroup parent to builds that used the new controller interface [#1913](https://github.com/docker/buildx/issues/1913) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) -> [`ced1acd`](https://github.com/docker/buildx/commit/ced1acdcaa24) - **github.com/Microsoft/hcsshim** v0.11.1 ***new*** - **github.com/Shopify/logrus-bugsnag** [`577dee2`](https://github.com/docker/buildx/commit/577dee27f20d) ***new*** - **github.com/apparentlymart/go-textseg/v15** v15.0.0 ***new*** - **github.com/compose-spec/compose-go** v1.14.0 -> v1.20.0 - **github.com/containerd/containerd** v1.7.2 -> v1.7.7 - **github.com/containerd/continuity** v0.4.1 -> v0.4.2 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/creack/pty** v1.1.18 ***new*** - **github.com/distribution/reference** v0.5.0 ***new*** - **github.com/docker/cli** v24.0.2 -> v24.0.5 - **github.com/docker/docker** [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc) -> v24.0.5 - **github.com/hashicorp/go-cleanhttp** v0.5.2 ***new*** - **github.com/hashicorp/go-cty-funcs** [`2721b1e`](https://github.com/docker/buildx/commit/2721b1e36840) -> [`a090f58`](https://github.com/docker/buildx/commit/a090f58aa992) - **github.com/hashicorp/hcl/v2** v2.8.2 -> v2.19.1 - **github.com/imdario/mergo** v0.3.15 -> v0.3.16 - **github.com/moby/buildkit** [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353) -> [`d5c1d78`](https://github.com/docker/buildx/commit/d5c1d785b042) - **github.com/moby/patternmatcher** v0.5.0 -> v0.6.0 - **github.com/opencontainers/image-spec** v1.1.0-rc3 -> v1.1.0-rc5 - **github.com/opencontainers/runc** v1.1.7 -> v1.1.9 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/theupdateframework/notary** v0.6.1 -> v0.7.0 - **github.com/zclconf/go-cty** v1.10.0 -> v1.14.1 - **golang.org/x/exp** [`613f0c0`](https://github.com/docker/buildx/commit/613f0c0eb8a1) ***new*** - **k8s.io/api** v0.26.2 -> v0.26.7 - **k8s.io/apimachinery** v0.26.2 -> v0.26.7 - **k8s.io/apiserver** v0.26.2 -> v0.26.7 - **k8s.io/client-go** v0.26.2 -> v0.26.7 Previous release can be found at [v0.11.2](https://github.com/docker/buildx/releases/tag/v0.11.2) ### [`v0.11.2`](https://github.com/docker/buildx/releases/tag/v0.11.2) [Compare Source](https://github.com/docker/buildx/compare/v0.11.1...v0.11.2) Welcome to the v0.11.2 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - [Justin Chadwell](https://github.com/jedevc) - [CrazyMax](https://github.com/crazy-max) - [Sebastiaan van Stijn](https://github.com/thaJeztah) ##### Changes - Fix a regression that caused buildx to not read the `KUBECONFIG` path from the instance store [#1941](https://github.com/docker/buildx/issues/1941) - Fix a regression with result handle builds showing up in the build history incorrectly [#1954](https://github.com/docker/buildx/issues/1954) ##### Dependency Changes - **github.com/docker/docker** v24.0.2 -> [`36e9e79`](https://github.com/docker/buildx/commit/36e9e796c6fc) - **github.com/moby/buildkit** [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a) -> [`faa0cc7`](https://github.com/docker/buildx/commit/faa0cc7da353) - **github.com/tonistiigi/fsutil** [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576) -> [`36ef4d8`](https://github.com/docker/buildx/commit/36ef4d8c0dbb) - **github.com/xeipuuv/gojsonpointer** [`4e3ac27`](https://github.com/docker/buildx/commit/4e3ac2762d5f) -> [`02993c4`](https://github.com/docker/buildx/commit/02993c407bfb) Previous release can be found at [v0.11.1](https://github.com/docker/buildx/releases/tag/v0.11.1) ### [`v0.11.1`](https://github.com/docker/buildx/releases/tag/v0.11.1) [Compare Source](https://github.com/docker/buildx/compare/v0.11.0...v0.11.1) Welcome to the v0.11.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Contributors - [CrazyMax](https://github.com/crazy-max) - [Justin Chadwell](https://github.com/jedevc) - [David Karlsson](https://github.com/dvdksn) - [Jhan S. Álvarez](https://github.com/yastanotheruser) ##### Changes - Fix a regression for bake where services in profiles would not be loaded. [#1903](https://github.com/docker/buildx/issues/1903) - Fix a regression where `--cgroup-parent` option had no effect during build. [#1913](https://github.com/docker/buildx/issues/1913) - Fix a regression where valid docker contexts could fail buildx builder name validation. [#1879](https://github.com/docker/buildx/issues/1879) - Fix an issue where the `host-gateway` special address could not be used as an argument to `--add-host`. [#1894](https://github.com/docker/buildx/issues/1894) (also requires https://github.com/moby/moby/pull/45767) - Fix a possible panic when terminal is resized during the build. [#1929](https://github.com/docker/buildx/issues/1929) ##### Dependency Changes - **github.com/docker/cli-docs-tool** v0.5.1 -> v0.6.0 Previous release can be found at [v0.11.0](https://github.com/docker/buildx/releases/tag/v0.11.0) ### [`v0.11.0`](https://github.com/docker/buildx/releases/tag/v0.11.0) [Compare Source](https://github.com/docker/buildx/compare/v0.10.5...v0.11.0) Welcome to the v0.11.0 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. ##### Notable changes - `--load` now supports loading multi-platform images when used with the [containerd image store](https://docs.docker.com/desktop/containerd/) in moby [#1813](https://github.com/docker/buildx/issues/1813) - Commands now display the current builder name in the build progress output [#1177](https://github.com/docker/buildx/issues/1177) - Bake now supports [matrix builds](https://github.com/docker/buildx/blob/v0.11.0/docs/bake-reference.md#targetmatrix). The new `matrix` field on `target` blocks allows easily creating multiple similar sets of targets to remove duplication in bake files [#1690](https://github.com/docker/buildx/issues/1690) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/bake-reference.md#targetmatrix) - New experimental `--detach` flag for the `build` command to run the build in a detached server, allowing attaching to the build later using `debug-shell` (requires `BUILDX_EXPERIMENTAL=1`) [#1296](https://github.com/docker/buildx/issues/1296) [#1620](https://github.com/docker/buildx/issues/1620) [#1614](https://github.com/docker/buildx/issues/1614) [#1737](https://github.com/docker/buildx/issues/1737) [#1755](https://github.com/docker/buildx/issues/1755) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New monitor mode commands `exec` and `attach` to allow spawning additional processes in a debugging session (requires `BUILDX_EXPERIMENTAL=1`) [#1626](https://github.com/docker/buildx/issues/1626) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New experimental `debug-shell` command to directly start the build debugging monitor without starting a build, allowing connecting to previously `--detach`ed builds (requires `BUILDX_EXPERIMENTAL=1`) [#1640](https://github.com/docker/buildx/issues/1640) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - New experimental `--invoke=on-error` option for the `--invoke` command to start the build debugging monitor at the point at which a build fails (requires `BUILDX_EXPERIMENTAL=1`) [#1640](https://github.com/docker/buildx/issues/1640) [docs](https://github.com/docker/buildx/blob/v0.11.0-rc1/docs/guides/debugging.md) - Bake now supports detecting `compose.yml`/`compose.yaml` files in addition to `docker-compose.yml`/`docker-compose.yaml` [#1752](https://github.com/docker/buildx/issues/1752) - Bake now supports new compose build keys `dockerfile_inline` and `additional_contexts` [#1784](https://github.com/docker/buildx/issues/1784) [docs](https://docs.docker.com/compose/compose-file/build/) - Bake now supports `replace` HCL function [#1720](https://github.com/docker/buildx/issues/1720) - Initial support for CLI command completion, including: builder names, folder names for build commands and bake targets [#1727](https://github.com/docker/buildx/issues/1727) - Builds support the new `EXPERIMENTAL_BUILDKIT_SOURCE_POLICY` environment variable to set the path to a source policy [docs](https://github.com/moby/buildkit/blob/master/docs/build-repro.md#reproducing-the-pinned-dependencies) [#1628](https://github.com/docker/buildx/issues/1628) - BuildKit versions are correctly displayed in `buildx ls` and `buildx inspect` for builders using the Docker driver [#1552](https://github.com/docker/buildx/issues/1552) - Display additional builder node details in `buildx inspect` view [#1440](https://github.com/docker/buildx/issues/1440) [#1854](https://github.com/docker/buildx/issues/1854) - Builders using the remote driver allow using TLS without proving its own key/cert (if BuildKit remote is configured to support it) [#1693](https://github.com/docker/buildx/issues/1693) - Builders using the kubernetes driver allow automatically generating the node name if not provided [#1673](https://github.com/docker/buildx/issues/1673) - Builders using the kubernetes driver support a new `serviceaccount` option, which will set the created pod's `serviceAccountName` [#1597](https://github.com/docker/buildx/issues/1597) - Builders using the kubernetes driver support the `proxy-url` kubeconfig option [docs](https://kubernetes.io/docs/concepts/configuration/organize-cluster-access-kubeconfig/#proxy) [#1780](https://github.com/docker/buildx/issues/1780) - Bake now allows merging multiple similar attestation parameters into a single parameter to allow overriding with a single global value [#1699](https://github.com/docker/buildx/issues/1699) - Fix possible panic when no builders are available [#1732](https://github.com/docker/buildx/issues/1732) - Fix `docker-container` driver hang on container panic [#1772](https://github.com/docker/buildx/issues/1772) - Fix invalid path when writing certificates for `docker-container` driver on Windows [#1831](https://github.com/docker/buildx/issues/1831) - Fix bake failure when remote bake file is accessed using SSH [#1711](https://github.com/docker/buildx/issues/1711) [#1734](https://github.com/docker/buildx/issues/1734) - Fix bake failure when remote bake context is incorrectly resolved [#1783](https://github.com/docker/buildx/issues/1783) - Fix path resolution of `BAKE_CMD_CONTEXT` and `cwd://` paths in bake contexts [#1840](https://github.com/docker/buildx/issues/1840) - Fix mixed OCI and Docker media types when creating images using `imagetools create` [#1797](https://github.com/docker/buildx/issues/1797) - Fix mismatched image id between `--iidfile` and `-q` [#1844](https://github.com/docker/buildx/issues/1844) - Fix opaque error messages on invalid edge-case git urls [#1710](https://github.com/docker/buildx/issues/1710) [#1733](https://github.com/docker/buildx/issues/1733) - Fix previously discarded error messages from logrus [#1853](https://github.com/docker/buildx/issues/1853) - Fix AWS authentication when mixing static creds and IAM profiles [#1816](https://github.com/docker/buildx/issues/1816) - Fix race in printer so that logrus warning messages appear at the end of the build deterministically [#1794](https://github.com/docker/buildx/issues/1794) - Fix connection leak for feature check on default `docker` driver [#1776](https://github.com/docker/buildx/issues/1776) ##### Contributors - [Justin Chadwell](https://github.com/jedevc) - [CrazyMax](https://github.com/crazy-max) - [Tõnis Tiigi](https://github.com/tonistiigi) - [Sebastiaan van Stijn](https://github.com/thaJeztah) - [Kohei Tokunaga](https://github.com/ktock) - [David Karlsson](https://github.com/dvdksn) - [Akihiro Suda](https://github.com/AkihiroSuda) - [Ben Peachey](https://github.com/potherca) - [Brian Goff](https://github.com/cpuguy83) - [Nick Santos](https://github.com/nicks) - [Nick Sieger](https://github.com/nicksieger) - [Batuhan Apaydın](https://github.com/developer-guy) - [Bertrand Paquet](https://github.com/bpaquet) - [David Gageot](https://github.com/dgageot) - [Elran Shefer](https://github.com/IamShobe) - [Milas Bowman](https://github.com/milas) - [Tianon Gravi](https://github.com/tianon) - [Timofey Kirillov](https://github.com/distorhead) - [Robert Lestak](https://github.com/robertlestak) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/docker/buildx/commit/43070de90fa1) ***new*** - **github.com/Masterminds/semver/v3** v3.2.1 ***new*** - **github.com/Microsoft/go-winio** v0.5.2 -> v0.6.1 - **github.com/aws/aws-sdk-go-v2** v1.16.3 -> v1.17.6 - **github.com/aws/aws-sdk-go-v2/config** v1.15.5 -> v1.18.16 - **github.com/aws/aws-sdk-go-v2/credentials** v1.12.0 -> v1.13.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.4 -> v1.12.24 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.10 -> v1.1.30 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.4 -> v2.4.24 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.11 -> v1.3.31 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.4 -> v1.9.24 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.11.4 -> v1.12.5 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 ***new*** - **github.com/aws/aws-sdk-go-v2/service/sts** v1.16.4 -> v1.18.6 - **github.com/aws/smithy-go** v1.11.2 -> v1.13.5 - **github.com/cenkalti/backoff/v4** v4.1.2 -> v4.2.0 - **github.com/cespare/xxhash/v2** v2.1.2 -> v2.2.0 - **github.com/compose-spec/compose-go** v1.6.0 -> v1.14.0 - **github.com/containerd/containerd** [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9) -> v1.7.2 - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.1 ***new*** - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/distribution/distribution/v3** [`4bf3547`](https://github.com/docker/buildx/commit/4bf3547399eb) -> [`36d8c59`](https://github.com/docker/buildx/commit/36d8c594d7aa) - **github.com/docker/cli** v23.0.0-rc.1 -> v24.0.2 - **github.com/docker/distribution** v2.8.1 -> v2.8.2 - **github.com/docker/docker** v23.0.0-rc.1 -> v24.0.2 - **github.com/emicklei/go-restful/v3** v3.10.1 ***new*** - **github.com/felixge/httpsnoop** v1.0.2 -> v1.0.3 - **github.com/go-openapi/jsonpointer** v0.19.5 ***new*** - **github.com/go-openapi/jsonreference** v0.20.0 ***new*** - **github.com/go-openapi/swag** v0.19.14 ***new*** - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/google/certificate-transparency-go** v1.0.21 -> v1.1.4 - **github.com/google/gnostic** v0.5.7-v3refs ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 ***new*** - **github.com/imdario/mergo** v0.3.13 -> v0.3.15 - **github.com/in-toto/in-toto-golang** v0.5.0 ***new*** - **github.com/inconshreveable/mousetrap** v1.0.1 -> v1.1.0 - **github.com/josharian/intern** v1.0.0 ***new*** - **github.com/klauspost/compress** v1.15.12 -> v1.16.3 - **github.com/kr/pretty** v0.3.0 -> v0.2.1 - **github.com/mailru/easyjson** v0.7.6 ***new*** - **github.com/moby/buildkit** v0.11.2 -> [`67a0862`](https://github.com/docker/buildx/commit/67a08623b95a) - **github.com/moby/term** [`abb1982`](https://github.com/docker/buildx/commit/abb19827d345) -> v0.5.0 - **github.com/munnerz/goautoneg** [`a7dc8b6`](https://github.com/docker/buildx/commit/a7dc8b61c822) ***new*** - **github.com/opencontainers/image-spec** [`02efb9a`](https://github.com/docker/buildx/commit/02efb9a75ee1) -> v1.1.0-rc3 - **github.com/opencontainers/runc** v1.1.3 -> v1.1.7 - **github.com/prometheus/common** v0.37.0 -> v0.42.0 - **github.com/prometheus/procfs** v0.8.0 -> v0.9.0 - **github.com/secure-systems-lab/go-securesystemslib** v0.4.0 ***new*** - **github.com/sergi/go-diff** v1.2.0 ***new*** - **github.com/shibumi/go-pathspec** v1.3.0 ***new*** - **github.com/spf13/cobra** v1.6.1 -> v1.7.0 - **github.com/stretchr/testify** v1.8.1 -> v1.8.4 - **github.com/tonistiigi/fsutil** [`fb43384`](https://github.com/docker/buildx/commit/fb433841cbfa) -> [`9e7a6df`](https://github.com/docker/buildx/commit/9e7a6df48576) - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.27.0 -> v0.37.0 - **go.opentelemetry.io/otel/sdk** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.12.0 -> v0.19.0 - **golang.org/x/mod** v0.9.0 ***new*** - **golang.org/x/net** v0.4.0 -> v0.8.0 - **golang.org/x/oauth2** [`6fdb5e3`](https://github.com/docker/buildx/commit/6fdb5e3db783) -> v0.5.0 - **golang.org/x/sync** v0.1.0 -> v0.2.0 - **golang.org/x/sys** v0.3.0 -> v0.7.0 - **golang.org/x/term** v0.3.0 -> v0.6.0 - **golang.org/x/text** v0.5.0 -> v0.8.0 - **golang.org/x/time** v0.1.0 -> v0.3.0 - **golang.org/x/tools** v0.7.0 ***new*** - **google.golang.org/genproto** [`1bc688f`](https://github.com/docker/buildx/commit/1bc688fe9f3e) -> [`7f2fa6f`](https://github.com/docker/buildx/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.50.1 -> v1.53.0 - **google.golang.org/protobuf** v1.28.1 -> v1.30.0 - **k8s.io/api** v0.22.4 -> v0.26.2 - **k8s.io/apimachinery** v0.22.4 -> v0.26.2 - **k8s.io/apiserver** v0.26.2 ***new*** - **k8s.io/client-go** v0.22.4 -> v0.26.2 - **k8s.io/klog/v2** v2.30.0 -> v2.90.1 - **k8s.io/kube-openapi** [`172d655`](https://github.com/docker/buildx/commit/172d655c2280) ***new*** - **k8s.io/utils** [`cb0fa31`](https://github.com/docker/buildx/commit/cb0fa318a74b) -> [`a5ecb01`](https://github.com/docker/buildx/commit/a5ecb0141aa5) - **sigs.k8s.io/json** [`f223a00`](https://github.com/docker/buildx/commit/f223a00ba0e2) ***new*** - **sigs.k8s.io/structured-merge-diff/v4** v4.1.2 -> v4.2.3 - **sigs.k8s.io/yaml** v1.2.0 -> v1.3.0 Previous release can be found at [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4) ### [`v0.10.5`](https://github.com/docker/buildx/releases/tag/v0.10.5) [Compare Source](https://github.com/docker/buildx/compare/v0.10.4...v0.10.5) Welcome to the 0.10.5 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix issue where build progress could pause for a couple of seconds with no new output because of a race condition. This issue was more likely to appear when using Docker driver with Docker Engine v24.0 release [#1815](https://github.com/docker/buildx/issues/1815) - Fix handling `NO_COLOR` with empty value [#1815](https://github.com/docker/buildx/issues/1815) ### [`v0.10.4`](https://github.com/docker/buildx/releases/tag/v0.10.4) [Compare Source](https://github.com/docker/buildx/compare/v0.10.3...v0.10.4) Welcome to the 0.10.4 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Add `BUILDX_NO_DEFAULT_ATTESTATIONS` as alternative to `--provenance false` [#1645](https://github.com/docker/buildx/issues/1645) - Disable dirty Git checkout detection by default for performance. Can be enabled with `BUILDX_GIT_CHECK_DIRTY` opt-in [#1650](https://github.com/docker/buildx/issues/1650) - Strip credentials from VCS hint URL before sending to BuildKit [#1664](https://github.com/docker/buildx/issues/1664) ### [`v0.10.3`](https://github.com/docker/buildx/releases/tag/v0.10.3) [Compare Source](https://github.com/docker/buildx/compare/v0.10.2...v0.10.3) Welcome to the 0.10.3 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix reachable commit and warnings on collecting Git provenance info [#1592](https://github.com/docker/buildx/issues/1592) [#1634](https://github.com/docker/buildx/issues/1634) - Fix a regression where docker context was not being validated [#1596](https://github.com/docker/buildx/issues/1596) - Fix function resolution with JSON bake definition [#1605](https://github.com/docker/buildx/issues/1605) - Fix case where original HCL bake diagnostic is discarded [#1607](https://github.com/docker/buildx/issues/1607) - Fix labels not correctly set with bake and compose file [#1631](https://github.com/docker/buildx/issues/1631) ### [`v0.10.2`](https://github.com/docker/buildx/releases/tag/v0.10.2) [Compare Source](https://github.com/docker/buildx/compare/v0.10.1...v0.10.2) Welcome to the 0.10.2 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix preferred platforms order not taken into account in multi-node builds [#1561](https://github.com/docker/buildx/issues/1561) - Fix possible panic on handling `SOURCE_DATE_EPOCH` environment variable [#1564](https://github.com/docker/buildx/issues/1564) - Fix possible push error on multi-node manifest merge since BuildKit v0.11 on some registries [#1566](https://github.com/docker/buildx/issues/1566) - Improve warnings on collecting Git provenance info [#1568](https://github.com/docker/buildx/issues/1568) ### [`v0.10.1`](https://github.com/docker/buildx/releases/tag/v0.10.1) [Compare Source](https://github.com/docker/buildx/compare/v0.10.0...v0.10.1) Welcome to the 0.10.1 release of buildx! Please try out the release binaries and report any issues at https://github.com/docker/buildx/issues. > **Note** > > Buildx v0.10 enables support for a minimal [SLSA Provenance](https://slsa.dev/provenance/) attestation, which requires support for [OCI-compliant](https://github.com/opencontainers/image-spec) multi-platform images. This may introduce issues with registry and runtime support (e.g. [Google Cloud Run and Lambda](https://github.com/docker/buildx/issues/1533)). You can optionally disable the default provenance attestation functionality using `--provenance=false`. ##### Notable changes - Fix sending the correct origin URL as `vsc:source` metadata [#1548](https://github.com/docker/buildx/issues/1548) - Fix possible panic from data-race [#1504](https://github.com/docker/buildx/issues/1504) - Fix regression with `rm --all-inactive` [#1547](https://github.com/docker/buildx/issues/1547) - Improve attestation access in `imagetools inspect` by lazily loading data [#1546](https://github.com/docker/buildx/issues/1546) - Correctly mark capabilities request as internal [#1538](https://github.com/docker/buildx/issues/1538) - Detect invalid attestation configuration [#1545](https://github.com/docker/buildx/issues/1545) - Update containerd patches to fix possible push regression affecting `imagetools` commands [#1559](https://github.com/docker/buildx/issues/1559) ##### Dependency Changes - **github.com/containerd/containerd** v1.6.14 -> [`1709cfe`](https://github.com/docker/buildx/commit/1709cfe273d9) - **github.com/moby/buildkit** v0.11.0 -> v0.11.2 Previous release can be found at [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0) </details> <details> <summary>docker/distribution</summary> ### [`v2.8.3`](https://github.com/distribution/distribution/releases/tag/v2.8.3) [Compare Source](https://github.com/docker/distribution/compare/v2.8.2...v2.8.3) #### What's Changed - Pass `BUILDTAGS` argument to `go build` by [@marcusirgens](https://github.com/marcusirgens) in https://github.com/distribution/distribution/pull/3926 - Enable Go build tags by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4009 - `reference`: replace deprecated function `SplitHostname` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4032 - Dont parse errors as JSON unless Content-Type is set to JSON by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4054 - update to go 1.20.8 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4056 - Set `Content-Type` header in registry client `ReadFrom` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4053 - deprecate reference package, migrate to github.com/distribution/reference by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4063 - `digestset`: deprecate package in favor of `go-digest/digestset` by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/4064 - Do not close HTTP request body in HTTP handler by [@milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4068 - Add v2.8.3 release notes by [@milosgajdos](https://github.com/milosgajdos) in https://github.com/distribution/distribution/pull/4088 #### New Contributors - [@marcusirgens](https://github.com/marcusirgens) made their first contribution in https://github.com/distribution/distribution/pull/3926 **Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.2...v2.8.3 ### [`v2.8.2`](https://github.com/distribution/distribution/releases/tag/v2.8.2) [Compare Source](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2) #### What's Changed - Revert registry/client: set `Accept: identity` header when getting layers by [@ndeloof](https://github.com/ndeloof) in https://github.com/distribution/distribution/pull/3783 - Parse `http` forbidden as denied by [@vvoland](https://github.com/vvoland) in https://github.com/distribution/distribution/pull/3914 - Fix [CVE-2022-28391](https://www.cve.org/CVERecord?id=CVE-2022-28391) by bumping alpine from 3.14 to 3.16 by [@thaJeztah](https://github.com/thaJeztah) ([#3650](https://github.com/distribution/distribution/pull/3650)) - Fix [CVE-2023-2253](https://www.cve.org/CVERecord?id=CVE-2023-2253) runaway allocation on /v2/\_catalog by [@josegomezr](https://github.com/josegomezr) [`521ea3d9`](https://github.com/distribution/distribution/commit/521ea3d973cb0c7089ebbcdd4ccadc34be941f54) - Fix panic in inmemory driver by [@wy65701436](https://github.com/wy65701436) in https://github.com/distribution/distribution/pull/3815 - bump up golang version (alternative) by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3903 - Dockerfile: update xx to v1.2.1 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3907 - update to go1.19.9 by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3908 - Add code to handle pagination of parts. Fixes max layer size of 10GB bug by [@DavidSpek](https://github.com/DavidSpek) in https://github.com/distribution/distribution/pull/3893 - Dockerfile: fix filenames of artifacts by [@thaJeztah](https://github.com/thaJeztah) in https://github.com/distribution/distribution/pull/3911 **Full Changelog**: https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2 </details> <details> <summary>docker/docker</summary> ### [`v26.0.0`](https://github.com/moby/moby/releases/tag/v26.0.0) [Compare Source](https://github.com/docker/docker/compare/v25.0.5...v26.0.0) ##### 26.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 26.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A26.0.0) - [moby/moby, 26.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A26.0.0) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v26.0.0/docs/api/version-history.md). ##### Security This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers. ##### New - Add `Subpath` field to the `VolumeOptions` making it possible to mount a subpath of a volume. [moby/moby#45687](https://github.com/moby/moby/pull/45687) - Add `volume-subpath` support to the mount flag (`--mount type=volume,...,volume-subpath=<subpath>`). [docker/cli#4331](https://github.com/docker/cli/pull/4331) - Accept `=` separators and `[ipv6]` in compose files for `docker stack deploy`. [docker/cli#4860](https://github.com/docker/cli/pull/4860) - rootless: Add support for enabling host loopback by setting the `DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK` environment variable to `false` (defaults to `true`). This lets containers connect to the host by using IP address `10.0.2.2`. [moby/moby#47352](https://github.com/moby/moby/pull/47352) - containerd image store: `docker image ls` no longer creates duplicates entries for multi-platform images. [moby/moby#45967](https://github.com/moby/moby/pull/45967) - containerd image store: Send Prometheus metrics. [moby/moby#47555](https://github.com/moby/moby/pull/47555) ##### Bug fixes and enhancements - [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#47589](https://github.com/moby/moby/pull/47589) - Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#47233](https://github.com/moby/moby/pull/47233) > \[!WARNING] > > Containers created using Docker Engine 25.0.0 may have duplicate MAC addresses, they must be re-created. > Containers created using version 25.0.0 or 25.0.1 with user-defined MAC addresses will get generated MAC addresses when they are started using 25.0.2. They must also be re-created. - Always attempt to enable IPv6 on a container's loopback interface, and only include IPv6 in `/etc/hosts` if successful. [moby/moby#47062](https://github.com/moby/moby/pull/47062) > \[!NOTE] > > By default, IPv6 will remain enabled on a container's loopback interface when the container is not connected to an IPv6-enabled network. > For example, containers that are only connected to an IPv4-only network now have the `::1` address on their loopback interface. > > To disable IPv6 in a container, > use option `--sysctl net.ipv6.conf.all.disable_ipv6=1` in the `create` or `run` command, > or the equivalent `sysctls` option in the service configuration section of a Compose file. > > If IPv6 is not available in a container because it has been explicitly disabled for the container, > or the host's networking stack does not have IPv6 enabled (or for any other reason) > the container's `/etc/hosts` file will not include IPv6 entries. - Fix `ADD` Dockerfile instruction failing with `lsetxattr <file>: operation not supported` when unpacking archive with xattrs onto a filesystem that doesn't support them. [moby/moby#47175](https://github.com/moby/moby/pull/47175) - Fix `docker container start` failing when used with `--checkpoint`. [moby/moby#47456](https://github.com/moby/moby/pull/47456) - Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#47356](https://github.com/moby/moby/pull/47356) - Do not enforce new validation rules for existing swarm networks. [moby/moby#47361](https://github.com/moby/moby/pull/47361) - Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#47375](https://github.com/moby/moby/pull/47375) - Print hint when invoking `docker image ls` with ambiguous argument. [docker/cli#4849](https://github.com/docker/cli/pull/4849) - Cleanup `@docker_cli_[UUID]` files on OpenBSD. [docker/cli#4862](https://github.com/docker/cli/pull/4862) - Add explicit [deprecation notice](https://github.com/docker/cli/blob/v26.0.0/docs/deprecated.md#unauthenticated-tcp-connections) message when using remote TCP connections without TLS. [docker/cli#4928](https://github.com/docker/cli/pull/4928), [moby/moby#47556](https://github.com/moby/moby/pull/47556) - Use IPv6 nameservers from the host's `resolv.conf` as upstream resolvers for Docker Engine's internal DNS, rather than listing them in the container's `resolv.conf`. [moby/moby#47512](https://github.com/moby/moby/pull/47512) - containerd image store: Isolate images with different containerd namespaces when `--userns-remap` option is used. [moby/moby#46786](https://github.com/moby/moby/pull/46786) - containerd image store: Fix image pull not emitting `Pulling fs layer` status. [moby/moby#47432](https://github.com/moby/moby/pull/47432) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ##### API - To preserve backwards compatibility, read-only mounts are not recursive by default when using older clients (API version < v1.44). [moby/moby#47391](https://github.com/moby/moby/pull/47391) - `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#47451](https://github.com/moby/moby/pull/47451) - Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#47387](https://github.com/moby/moby/pull/47387) - The `is_automated` field in the `POST /images/search` endpoint results is always `false` now. Consequently, searching for `is-automated=true` will yield no results, while `is-automated=false` will be a no-op. [moby/moby#47465](https://github.com/moby/moby/pull/47465) - Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#47430](https://github.com/moby/moby/pull/47430) ##### Packaging updates - Update API to v1.45. [moby#47582](https://github.com/moby/moby/pull/47118) - Update BuildKit to [v0.13.1](https://github.com/moby/buildkit/releases/tag/v0.13.1). [moby/moby#47582](https://github.com/moby/moby/pull/47582) - Update Buildx to [v0.13.1](https://github.com/docker/buildx/releases/tag/v0.13.1). [docker/docker-ce-packaging#1000](https://github.com/docker/docker-ce-packaging/pull/1000) - Update Compose to [v2.25.0](https://github.com/docker/compose/releases/tag/v2.25.0). [docker/docker-ce-packaging#1002](https://github.com/docker/docker-ce-packaging/pull/1002) - Update Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#47502](https://github.com/moby/moby/pull/47502) - Update RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2). [moby/moby#47508](https://github.com/moby/moby/pull/47504) - Update containerd to v1.7.13 (static binaries only) [moby/moby#47278](https://github.com/moby/moby/pull/47278) - Update runc binary to v1.1.12 [moby/moby#47268](https://github.com/moby/moby/pull/47268) - Update OTel to v0.46.1 / v1.21.0 [moby/moby#47245](https://github.com/moby/moby/pull/47245) ##### Removed - Remove `Container` and `ContainerConfig` fields from the `GET /images/{name}/json` response. [moby/moby#47430](https://github.com/moby/moby/pull/47430) - Deprecate the ability to accept remote TCP connections without TLS. [Deprecation notice](https://github.com/docker/cli/tree/v26.0.0/deprecation.md#unauthenticated-tcp-connections) [docker/cli#4928](https://github.com/docker/cli/pull/4928) [moby/moby#47556](https://github.com/moby/moby/pull/47556). - Remove deprecated API versions (API < v1.24) [moby/moby#47155](https://github.com/moby/moby/pull/47155) - Disable pulling of deprecated image formats by default. These image formats are deprecated, and support will be removed in a future version. [moby/moby#47459](https://github.com/moby/moby/pull/47459) - image: remove deprecated IDFromDigest [moby/moby#47198](https://github.com/moby/moby/pull/47198) - Remove the deprecated `github.com/docker/docker/pkg/loopback` package. [moby/moby#47128](https://github.com/moby/moby/pull/47128) - pkg/system: remove deprecated `ErrNotSupportedOperatingSystem`, `IsOSSupported` [moby/moby#47129](https://github.com/moby/moby/pull/47129) - pkg/homedir: remove deprecated Key() and GetShortcutString() [moby/moby#47130](https://github.com/moby/moby/pull/47130) - pkg/containerfs: remove deprecated ResolveScopedPath [moby/moby#47131](https://github.com/moby/moby/pull/47131) - The daemon flag `--oom-score-adjust` was deprecated in v24.0 and is now removed. [moby/moby#46113](https://github.com/moby/moby/pull/46113) - Remove deprecated aliases from the api/types package. These types were deprecated in v25.0.0, which provided temporary aliases. [moby/moby#47148](https://github.com/moby/moby/pull/47148) These aliases are now removed: `types.Info`, `types.Commit`, `types.PluginsInfo`, `types.NetworkAddressPool`, `types.Runtime`, `types.SecurityOpt`, `types.KeyValue`, `types.DecodeSecurityOptions`, `types.CheckpointCreateOptions`, `types.CheckpointListOptions`, `types.CheckpointDeleteOptions`, `types.Checkpoint`, `types.ImageDeleteResponseItem`, `types.ImageSummary`, `types.ImageMetadata`, `types.ServiceUpdateResponse`, `types.ServiceCreateResponse`, `types.ResizeOptions`, `types.ContainerAttachOptions`, `types.ContainerCommitOptions`, `types.ContainerRemoveOptions`, `types.ContainerStartOptions`, `types.ContainerListOptions`, `types.ContainerLogsOptions` - cli/command/container: remove deprecated `NewStartOptions()` [docker/cli#4811](https://github.com/docker/cli/pull/4811) - cli/command: remove deprecated `DockerCliOption`, `InitializeOpt` [docker/cli#4810](https://github.com/docker/cli/pull/4810) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ### [`v25.0.5`](https://github.com/moby/moby/releases/tag/v25.0.5) [Compare Source](https://github.com/docker/docker/compare/v25.0.4...v25.0.5) #### 25.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.5) - [moby/moby, 25.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.5) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.5/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.5/docs/api/version-history.md). ##### Security This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers. ##### Bug fixes and enhancements - [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. [moby/moby#47589](https://github.com/moby/moby/pull/47589) - plugin: fix mounting /etc/hosts when running in UserNS. [moby/moby#47588](https://github.com/moby/moby/pull/47588) - rootless: fix `open /etc/docker/plugins: permission denied`. [moby/moby#47587](https://github.com/moby/moby/pull/47587) - Fix multiple parallel `docker build` runs leaking disk space. [moby/moby#47527](https://github.com/moby/moby/pull/47527) [CVE-2024-29018]: https://github.com/moby/moby/security/advisories/GHSA-mq39-4gv4-mvpx ### [`v25.0.4`](https://github.com/moby/moby/releases/tag/v25.0.4) [Compare Source](https://github.com/docker/docker/compare/v25.0.3...v25.0.4) #### 25.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.4) - [moby/moby, 25.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.4) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.4/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.4/docs/api/version-history.md). ##### Bug fixes and enhancements - Restore DNS names for containers in the default "nat" network on Windows. [moby/moby#47490](https://github.com/moby/moby/pull/47490) - Fix `docker start` failing when used with `--checkpoint` [moby/moby#47466](https://github.com/moby/moby/pull/47466) - Don't enforce new validation rules for existing swarm networks [moby/moby#47482](https://github.com/moby/moby/pull/47482) - Restore IP connectivity between the host and containers on an internal bridge network. [moby/moby#47481](https://github.com/moby/moby/pull/47481) - Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS [moby/moby#47483](https://github.com/moby/moby/pull/47483) - containerd image store: Fix image pull not emitting `Pulling fs layer` status [moby/moby#47484](https://github.com/moby/moby/pull/47484) ##### API - To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). [moby/moby#47393](https://github.com/moby/moby/pull/47393) - `GET /images/{id}/json` omits the `Created` field (previously it was `0001-01-01T00:00:00Z`) if the `Created` field is missing from the image config. [moby/moby#47451](https://github.com/moby/moby/pull/47451) - Populate a missing `Created` field in `GET /images/{id}/json` with `0001-01-01T00:00:00Z` for API version <= 1.43. [moby/moby#47387](https://github.com/moby/moby/pull/47387) - Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. [moby/moby#47470](https://github.com/moby/moby/pull/47470) - Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but `NetworkMode` name-or-id is not the same as the name-or-id used in `NetworkSettings.Networks`. [moby/moby#47510](https://github.com/moby/moby/pull/47510) ##### Packaging updates - Upgrade Go runtime to [1.21.8](https://go.dev/doc/devel/release#go1.21.8). [moby/moby#47503](https://github.com/moby/moby/pull/47503) - Upgrade RootlessKit to [v2.0.2](https://github.com/rootless-containers/rootlesskit/releases/tag/v2.0.2). [moby/moby#47508](https://github.com/moby/moby/pull/47508) - Upgrade Compose to [v2.24.7](https://github.com/docker/compose/releases/tag/v2.24.7). https://github.com/docker/docker-ce-packaging/pull/998 - Upgrade Buildx to [v0.13.0](https://github.com/docker/buildx/releases/tag/v0.13.0). https://github.com/docker/docker-ce-packaging/pull/997 **Full Changelog**: https://github.com/moby/moby/compare/v25.0.3...v25.0.4 ### [`v25.0.3`](https://github.com/moby/moby/releases/tag/v25.0.3) [Compare Source](https://github.com/docker/docker/compare/v25.0.2...v25.0.3) #### 25.0.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.3) - [moby/moby, 25.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.3) ##### Bug fixes and enhancements - containerd image store: Fix a bug where `docker image history` would fail if a manifest wasn't found in the content store. [moby/moby#47348](https://github.com/moby/moby/pull/47348) - Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. [moby/moby#47304](https://github.com/moby/moby/pull/47304) > **Note** > > - Containers created with Docker Engine version 25.0.0 may have duplicate MAC addresses. > They must be re-created. > - Containers with user-defined MAC addresses created with Docker Engine versions 25.0.0 or 25.0.1 > receive new MAC addresses when started using Docker Engine version 25.0.2. > They must also be re-created.  - Fix `docker save <image>@<digest>` producing an OCI archive with index without manifests. [moby/moby#47294](https://github.com/moby/moby/pull/47294) - Fix a bug preventing bridge networks from being created with an MTU higher than 1500 on RHEL and CentOS 7. [moby/moby#47308](https://github.com/moby/moby/issues/47308), [moby/moby#47311](https://github.com/moby/moby/pull/47311) - Fix a bug where containers are unable to communicate over an `internal` network. [moby/moby#47303](https://github.com/moby/moby/pull/47303) - Fix a bug where the value of the `ipv6` daemon option was ignored. [moby/moby#47310](https://github.com/moby/moby/pull/47310) - Fix a bug where trying to install a pulling using a digest revision would cause a panic. [moby/moby#47323](https://github.com/moby/moby/pull/47323) - Fix a potential race condition in the managed containerd supervisor. [moby/moby#47313](https://github.com/moby/moby/pull/47313) - Fix an issue with the `journald` log driver preventing container logs from being followed correctly with systemd version 255. [moby/moby47243](https://github.com/moby/moby/pull/47243) - seccomp: Update the builtin seccomp profile to include syscalls added in kernel v5.17 - v6.7 to align the profile with the profile used by containerd. [moby/moby#47341](https://github.com/moby/moby/pull/47341) - Windows: Fix cache not being used when building images based on Windows versions older than the host's version. [moby/moby#47307](https://github.com/moby/moby/pull/47307), [moby/moby#47337](https://github.com/moby/moby/pull/47337) ##### Packaging updates - Removed support for Ubuntu Lunar (23.04). [docker/ce-packaging#986](https://github.com/docker/docker-ce-packaging/pull/986) ### [`v25.0.2`](https://github.com/moby/moby/releases/tag/v25.0.2) [Compare Source](https://github.com/docker/docker/compare/v25.0.1...v25.0.2) #### 25.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.2) - [moby/moby, 25.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.2) ##### Security This release contains security fixes for the following CVEs affecting Docker Engine and its components. | CVE | Component | Fix version | Severity | | ----------------------------------------------------------- | ------------- | ----------- | ---------------- | | [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc | 1.1.12 | High, CVSS 8.6 | | [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) | BuildKit | 1.12.5 | High, CVSS 8.7 | | [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) | BuildKit | 1.12.5 | High, CVSS 8.7 | | [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) | BuildKit | 1.12.5 | High, CVSS 7.7 | | [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) | BuildKit | 1.12.5 | Medium, CVSS 5.5 | | [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 25.0.2 | Medium, CVSS 6.9 | The potential impacts of the above vulnerabilities include: - Unauthorized access to the host filesystem - Compromising the integrity of the build cache - In the case of CVE-2024-21626, a scenario that could lead to full container escape For more information about the security issues addressed in this release, refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory: - [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-23651](https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv) - [CVE-2024-23652](https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8) - [CVE-2024-23653](https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g) - [CVE-2024-23650](https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ##### Packaging updates - Upgrade containerd to [v1.6.28](https://github.com/containerd/containerd/releases/tag/v1.6.28). - Upgrade containerd to v1.7.13 (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) - Upgrade runc to v1.1.12. [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade Compose to v2.24.5. [docker/docker-ce-packaging#985](https://github.com/docker/docker-ce-packaging/pull/985) - Upgrade BuildKit to v0.12.5. [moby/moby#47273](https://github.com/moby/moby/pull/47273) ### [`v25.0.1`](https://github.com/moby/moby/releases/tag/v25.0.1) [Compare Source](https://github.com/docker/docker/compare/v25.0.0...v25.0.1) #### 25.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.1) - [moby/moby, 25.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.1) ##### Bug fixes and enhancements - API: Fix incorrect HTTP status code for containers with an invalid network configuration created before upgrading to Docker Engine v25.0. [moby/moby#47159](https://github.com/moby/moby/pull/47159) - Ensure that a MAC address based on a container's IP address is re-generated when the container is stopped and restarted, in case the generated IP/MAC addresses have been reused. [moby/moby#47171](https://github.com/moby/moby/pull/47171) - Fix `host-gateway-ip` not working during build when not set through configuration. [moby/moby#47192](https://github.com/moby/moby/pull/47192) - Fix a bug that prevented a container from being renamed twice. [moby/moby#47196](https://github.com/moby/moby/pull/47196) - Fix an issue causing containers to have their short ID added to their network alias when inspecting them. [moby/moby#47182](https://github.com/moby/moby/pull/47182) - Fix an issue in detecting whether a remote build context is a Git repository. [moby/moby#47136](https://github.com/moby/moby/pull/47136) - Fix an issue with layers order in OCI manifests. [moby/moby#47150](https://github.com/moby/moby/issues/47150) - Fix volume mount error when passing an `addr` or `ip` mount option. [moby/moby#47185](https://github.com/moby/moby/pull/47185) - Improve error message related to extended attributes that can't be set due to improperly namespaced attribute names. [moby/moby#47178](https://github.com/moby/moby/pull/47178) - Swarm: Fixed `start_interval` not being passed to the container config. [moby/moby#47163](https://github.com/moby/moby/pull/47163) ##### Packaging updates - Upgrade Compose to `2.24.2`. [docker/docker-ce-packaging#981](https://github.com/docker/docker-ce-packaging/pull/981) ### [`v25.0.0`](https://github.com/moby/moby/releases/tag/v25.0.0) [Compare Source](https://github.com/docker/docker/compare/v24.0.9...v25.0.0) #### 25.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 25.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A25.0.0) - [moby/moby, 25.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A25.0.0) - Deprecated and removed features, see [Deprecated Features](https://github.com/docker/cli/blob/v25.0.0/docs/deprecated.md). - Changes to the Engine API, see [API version history](https://github.com/moby/moby/blob/v25.0.0/docs/api/version-history.md). ##### New - Add OpenTelemetry tracing. [moby/moby#45652](https://github.com/moby/moby/pull/45652), [moby/moby#45579](https://github.com/moby/moby/pull/45579) - Add support for CDI devices under Linux. [moby/moby#45134](https://github.com/moby/moby/pull/45134), [docker/cli#4510](https://github.com/docker/cli/pull/4510), [moby/moby#46004](https://github.com/moby/moby/pull/46004) - Add an additional interval to be used by healthchecks during the container start period. [moby/moby#40894](https://github.com/moby/moby/pull/40894), [docker/cli#4405](https://github.com/docker/cli/pull/4405), [moby/moby#45965](https://github.com/moby/moby/pull/45965) - Add a `--log-format` flag to `dockerd` to control the logging format: text (default) or JSON. [moby/moby#45737](https://github.com/moby/moby/pull/45737) - Add support for recursive read-only mounts. [moby/moby#45278](https://github.com/moby/moby/pull/45278), [moby/moby#46037](https://github.com/moby/moby/pull/46037) - Add support for filtering images based on timestamp with `docker image ls --filter=until=<timestamp>`. [moby/moby#46577](https://github.com/moby/moby/pull/46577) ##### Bug fixes and enhancements - API: Fix error message for invalid policies at `ValidateRestartPolicy`. [moby/moby#46352](https://github.com/moby/moby/pull/46352) - API: Update `/info` endpoint to use singleflight. [moby/moby#45847](https://github.com/moby/moby/pull/45847) - Add an error message for when specifying a Dockerfile filename with `-f`, and also using `stdin`. [docker/cli#4346](https://github.com/docker/cli/pull/4346) - Add support for `mac-address` and `link-local-ip` fields in `--network` long format. [docker/cli#4419](https://github.com/docker/cli/pull/4419) - Add support for specifying multiple `--network` flags with `docker container create` and `docker run`. [moby/moby#45906](https://github.com/moby/moby/pull/45906) - Automatically enable IPv6 on a network when an IPv6 subnet is specified. [moby/moby#46455](https://github.com/moby/moby/pull/46455) - Add support for overlay networks over IPv6 transport. [moby/moby#46790](https://github.com/moby/moby/pull/46790) - Configuration reloading is now more robust: if there's an error during the configuration reload process, no configuration changes are applied. [moby/moby#43980](https://github.com/moby/moby/pull/43980) - Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#46857](https://github.com/moby/moby/pull/46857) - Live restore: containers that are live-restored will now be given another health-check start period when the daemon restarts. [moby/moby#47051](https://github.com/moby/moby/pull/47051) - Container health status is flushed to disk less frequently, reducing wear on flash storage. [moby/moby#47044](https://github.com/moby/moby/pull/47044) - Ensure network names are unique. [moby/moby#46251](https://github.com/moby/moby/pull/46251) - Ensure that overlay2 layer metadata is correct. [moby/moby#46471](https://github.com/moby/moby/pull/46471) - Fix `Downloading` progress message on image pull. [moby/moby#46515](https://github.com/moby/moby/pull/46515) - Fix `NetworkConnect` and `ContainerCreate` with improved data validation, and return all validation errors at once. [moby/moby#46183](https://github.com/moby/moby/pull/46183) - Fix `com.docker.network.host_ipv4` option when IPv6 and ip6tables are enabled. [moby/moby#46446](https://github.com/moby/moby/pull/46446) - Fix daemon's `cleanupContainer` if containerd is stopped. [moby/moby#46213](https://github.com/moby/moby/pull/46213) - Fix returning incorrect HTTP status codes for libnetwork errors. [moby/moby#46146](https://github.com/moby/moby/pull/46146) - Fix various issues with images/json API filters and image list. [moby/moby#46034](https://github.com/moby/moby/pull/46034) - CIFS volumes now resolves FQDN correctly. [moby/moby#46863](https://github.com/moby/moby/pull/46863) - Improve validation of the `userland-proxy-path` daemon configuration option. Validation now happens during daemon startup, instead of producing an error when starting a container with port-mapping. [moby/moby#47000](https://github.com/moby/moby/pull/47000) - Set the MAC address of container's interface when network mode is a short network ID. [moby/moby#46406](https://github.com/moby/moby/pull/46406) - Sort unconsumed build arguments before display in build output. [moby/moby#45917](https://github.com/moby/moby/pull/45917) - The `docker image save` tarball output is now OCI compliant. [moby/moby#44598](https://github.com/moby/moby/pull/44598) - The daemon no longer appends `ACCEPT` rules to the end of the `INPUT` iptables chain for encrypted overlay networks. Depending on firewall configuration, a rule may be needed to permit incoming encrypted overlay network traffic. [moby/moby#45280](https://github.com/moby/moby/pull/45280) - Unpacking layers with extended attributes onto an incompatible filesystem will now fail instead of silently discarding extended attributes. [moby/moby#45464](https://github.com/moby/moby/pull/45464) - Update daemon MTU option to BridgeConfig and display warning on Windows. [moby/moby#45887](https://github.com/moby/moby/pull/45887) - Validate IPAM config when creating a network. Automatically fix networks created prior to this release where `--ip-range` is larger than `--subnet`. [moby/moby#45759](https://github.com/moby/moby/pull/45759) - containerd image store: Add image events for `push`, `pull`, and `save`. [moby/moby#46405](https://github.com/moby/moby/pull/46405) - containerd image store: Add support for pulling legacy schema1 images. [moby/moby#46513](https://github.com/moby/moby/pull/46513) - containerd image store: Add support for pushing all tags. [moby/moby#46485](https://github.com/moby/moby/pull/46485) - containerd image store: Add support for registry token. [moby/moby#46475](https://github.com/moby/moby/pull/46475) - containerd image store: Add support for showing the number of containers that use an image. [moby/moby#46511](https://github.com/moby/moby/pull/46511) - containerd image store: Fix a bug related to the `ONBUILD`, `MAINTAINER`, and `HEALTHCHECK` Dockerfile instructions. [moby/moby#46313](https://github.com/moby/moby/pull/46313) - containerd image store: Fix `Pulling from` progress message. [moby/moby#46494](https://github.com/moby/moby/pull/46494) - containerd image store: Add support for referencing images via the truncated ID with `sha256:` prefix. [moby/moby#46435](https://github.com/moby/moby/pull/46435) - containerd image store: Fix `docker images` showing intermediate layers by default. [moby/moby#46423](https://github.com/moby/moby/pull/46423) - containerd image store: Fix checking if the specified platform exists when getting an image. [moby/moby#46495](https://github.com/moby/moby/pull/46495) - containerd image store: Fix errors when multiple `ADD` or `COPY` instructions were used with the classic builder. [moby/moby#46383](https://github.com/moby/moby/pull/46383) - containerd image store: Fix stack overflow errors when importing an image. [moby/moby#46418](https://github.com/moby/moby/pull/46418) - containerd image store: Improve `docker pull` progress output. [moby/moby#46412](https://github.com/moby/moby/pull/46412) - containerd image store: Print the tag, digest, and size after pushing an image. [moby/moby#46384](https://github.com/moby/moby/pull/46384) - containerd image store: Remove panic from `UpdateConfig`. [moby/moby#46433](https://github.com/moby/moby/pull/46433) - containerd image store: Return an error when an image tag resembles a digest. [moby/moby#46492](https://github.com/moby/moby/pull/46492) - containerd image store: `docker image ls` now shows the correct image creation time and date. [moby/moby#46719](https://github.com/moby/moby/pull/46719) - containerd image store: Fix an issue handling user namespace settings. [moby/moby#46375](https://github.com/moby/moby/pull/46375) - containerd image store: Add support for pulling all tags (`docker pull -a`). [moby/moby#46618](https://github.com/moby/moby/pull/46618) - containerd image store: Use the domain name in the image reference as the default registry authentication domain. [moby/moby#46779](https://github.com/moby/moby/pull/46779) ##### Packaging updates - Upgrade API to v1.44. [moby/moby#45468](https://github.com/moby/moby/pull/45468) - Upgrade Compose to `2.24.1`. [docker/docker-ce-packaging#980](https://github.com/docker/docker-ce-packaging/pull/980) - Upgrade containerd to v1.7.12 (static binaries only). [moby/moby#47070](https://github.com/moby/moby/pull/47070) - Upgrade Go runtime to [1.21.6](https://go.dev/doc/devel/release#go1.21.minor). [moby/moby#47053](https://github.com/moby/moby/pull/47053) - Upgrade runc to v1.1.11. [moby/moby#47007](https://github.com/moby/moby/pull/47007) - Upgrade BuildKit to v0.12.4. [moby/moby#46882](https://github.com/moby/moby/pull/46882) - Upgrade Buildx to v0.12.1. [docker/docker-ce-packaging#979](https://github.com/docker/docker-ce-packaging/pull/979) ##### Removed - API: Remove VirtualSize field for the `GET /images/json` and `GET /images/{id}/json` endpoints. [moby/moby#45469](https://github.com/moby/moby/pull/45469) - Remove deprecated `devicemapper` storage driver. [moby/moby#43637](https://github.com/moby/moby/pull/43637) - Remove deprecated orchestrator options. [docker/cli#4366](https://github.com/docker/cli/pull/4366) - Remove support for Debian Upstart init system. [moby/moby#45548](https://github.com/moby/moby/pull/45548), [moby/moby#45551](https://github.com/moby/moby/pull/45551) - Remove the `--oom-score-adjust` daemon option. [moby/moby#45484](https://github.com/moby/moby/pull/45484) - Remove warning for deprecated `~/.dockercfg` file. [docker/cli#4281](https://github.com/docker/cli/pull/4281) - Remove `logentries` logging driver. [moby/moby#46925](https://github.com/moby/moby/pull/46925) ##### Deprecated - Deprecate API versions older than 1.24. [Deprecation notice](../deprecated.md#deprecate-legacy-api-versions) - Deprecate `IsAutomated` field and `is-automated` filter for `docker search`. [Deprecation notice](../deprecated.md#isautomated-field-and-is-automated-filter-on-docker-search) - API: Deprecate `Container` and `ContainerConfig` properties for `/images/{id}/json` (`docker image inspect`). [moby/moby#46939](https://github.com/moby/moby/pull/46939) ### [`v24.0.9`](https://github.com/moby/moby/releases/tag/v24.0.9) [Compare Source](https://github.com/docker/docker/compare/v24.0.8...v24.0.9) #### 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.9) - [moby/moby, 24.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.9) #### Security This release contains security fixes for the following CVEs affecting Docker Engine and its components. | CVE | Component | Fix version | Severity | | ----------------------------------------------------------- | ------------- | ----------- | ---------------- | | [CVE-2024-21626](https://scout.docker.com/v/CVE-2024-21626) | runc | 1.1.12 | High, CVSS 8.6 | | [CVE-2024-24557](https://scout.docker.com/v/CVE-2024-24557) | Docker Engine | 24.0.9 | Medium, CVSS 6.9 | > **Important** ⚠️ > > Note that this release of Docker Engine doesn't include fixes for the following known vulnerabilities in BuildKit: > > - [CVE-2024-23651](https://scout.docker.com/v/CVE-2024-23651) > - [CVE-2024-23652](https://scout.docker.com/v/CVE-2024-23652) > - [CVE-2024-23653](https://scout.docker.com/v/CVE-2024-23653) > - [CVE-2024-23650](https://scout.docker.com/v/CVE-2024-23650) > > To address these vulnerabilities, upgrade to [Docker Engine v25.0.2](./25.0.md#2502). For more information about the security issues addressed in this release, and the unaddressed vulnerabilities in BuildKit, refer to the [blog post](https://www.docker.com/blog/docker-security-advisory-multiple-vulnerabilities-in-runc-buildkit-and-moby/). For details about each vulnerability, see the relevant security advisory: - [CVE-2024-21626](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv) - [CVE-2024-24557](https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc) ##### Packaging updates - Upgrade runc to [v1.1.12](https://github.com/opencontainers/runc/releases/tag/v1.1.12). [moby/moby#47269](https://github.com/moby/moby/pull/47269) - Upgrade containerd to [v1.7.13](https://github.com/containerd/containerd/releases/tag/v1.7.13) (static binaries only). [moby/moby#47280](https://github.com/moby/moby/pull/47280) ### [`v24.0.8`](https://github.com/moby/moby/releases/tag/v24.0.8) [Compare Source](https://github.com/docker/docker/compare/v24.0.7...v24.0.8) #### 24.0.8 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.8) - [moby/moby, 24.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.8) ##### Bug fixes and enhancements - Live restore: Containers with auto remove (`docker run --rm`) are no longer forcibly removed on engine restart. [moby/moby#46857](https://github.com/moby/moby/pull/46869) ##### Packaging updates - Upgrade Go to `go1.20.13`. [moby/moby#47054](https://github.com/moby/moby/pull/47054), [docker/cli#4826](https://github.com/docker/cli/pull/4826), [docker/docker-ce-packaging#975](https://github.com/docker/docker-ce-packaging/pull/975) - Upgrade containerd (static binaries only) to [v1.7.12](https://github.com/containerd/containerd/releases/tag/v1.7.12) [moby/moby#47096](https://github.com/moby/moby/pull/47096) - Upgrade runc to v1.1.11. [moby/moby#47010](https://github.com/moby/moby/pull/47010) ### [`v24.0.7`](https://github.com/moby/moby/releases/tag/v24.0.7) [Compare Source](https://github.com/docker/docker/compare/v24.0.6...v24.0.7) #### 24.0.7 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.7) - [moby/moby, 24.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.7) ##### Bug fixes and enhancements - Write overlay2 layer metadata atomically. [moby/moby#46703](https://github.com/moby/moby/pull/46703) - Fix "Rootful-in-Rootless" Docker-in-Docker on systemd version 250 and later. [moby/moby#46626](https://github.com/moby/moby/pull/46626) - Fix `dockerd-rootless-setuptools.sh` when username contains a backslash. [moby/moby#46407](https://github.com/moby/moby/pull/46407) - Fix a bug that would prevent network sandboxes to be fully deleted when stopping containers with no network attachments and when `dockerd --bridge=none` is used. [moby/moby#46702](https://github.com/moby/moby/pull/46702) - Fix a bug where cancelling an API request could interrupt container restart. [moby/moby#46697](https://github.com/moby/moby/pull/46697) - Fix an issue where containers would fail to start when providing `--ip-range` with a range larger than the subnet. [docker/for-mac#6870](https://github.com/docker/for-mac/issues/6870) - Fix data corruption with zstd output. [moby/moby#46709](https://github.com/moby/moby/pull/46709) - Fix the conditions under which the container's MAC address is applied. [moby/moby#46478](https://github.com/moby/moby/pull/46478) - Improve the performance of the stats collector. [moby/moby#46448](https://github.com/moby/moby/pull/46448) - Fix an issue with source policy rules ending up in the wrong order. [moby/moby#46441](https://github.com/moby/moby/pull/46441) ##### Packaging updates - Add support for Fedora 39 and Ubuntu 23.10. [docker/docker-ce-packaging#940](https://github.com/docker/docker-ce-packaging/pull/940), [docker/docker-ce-packaging#955](https://github.com/docker/docker-ce-packaging/pull/955) - Fix `docker.socket` not getting disabled when uninstalling the `docker-ce` RPM package. [docker/docker-ce-packaging#852](https://github.com/docker/docker-ce-packaging/pull/852) - Upgrade Go to `go1.20.10`. [docker/docker-ce-packaging#951](https://github.com/docker/docker-ce-packaging/pull/951) - Upgrade containerd to `v1.7.6` (static binaries only). [moby/moby#46103](https://github.com/moby/moby/pull/46103) - Upgrade the `containerd.io` package to [`v1.6.24`](https://github.com/containerd/containerd/releases/tag/v1.6.24). ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/c9ccbfad11a60e703e91b6cca4f48927828c7e35). ### [`v24.0.6`](https://github.com/moby/moby/releases/tag/v24.0.6) [Compare Source](https://github.com/docker/docker/compare/v24.0.5...v24.0.6) #### 24.0.6 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.6) - [moby/moby, 24.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.6) ##### Bug fixes and enhancements - containerd storage backend: Fix `docker ps` failing when a container image is no longer present in the content store. [moby/moby#46095](https://github.com/moby/moby/pull/46095) - containerd storage backend: Fix `docker ps -s -a` and `docker container prune` failing when a container image config is no longer present in the content store. [moby/moby#46097](https://github.com/moby/moby/pull/46097) - containerd storage backend: Fix `docker inspect` failing when a container image config is no longer (or was never) present in the content store. [moby/moby#46244](https://github.com/moby/moby/pull/46244) - containerd storage backend: Fix diff and export with the `overlayfs` snapshotter by using reference-counted rootfs mounts. [moby/moby#46266](https://github.com/moby/moby/pull/46266) - containerd storage backend: Fix a misleading error message when the image platforms available locally do not match the desired platform. [moby/moby#46300](https://github.com/moby/moby/pull/46300) - containerd storage backend: Fix the `FROM scratch` Dockerfile instruction with the classic builder. [moby/moby#46302](https://github.com/moby/moby/pull/46302) - containerd storage backend: Fix `mismatched image rootfs and manifest layers` errors with the classic builder. [moby/moby#46310](https://github.com/moby/moby/pull/46310) - Warn when pulling Docker Image Format v1, and Docker Image manifest version 2, schema 1 images from all registries. [moby/moby#46290](https://github.com/moby/moby/pull/46290) - Fix live-restore of volumes with custom volume options. [moby/moby#46366](https://github.com/moby/moby/pull/46366) - Fix incorrectly dropping capabilities bits when running a container as a non-root user (note: this change was already effectively present due to a regression). [moby/moby#46221](https://github.com/moby/moby/pull/46221) - Fix network isolation iptables rules preventing IPv6 Neighbor Solicitation packets from being exchanged between containers. [moby/moby#46214](https://github.com/moby/moby/pull/46214) - Fix `dockerd.exe --register-service` not working when the binary is in the current directory on Windows. [moby/moby#46215](https://github.com/moby/moby/pull/46215) - Add a hint suggesting the use of a PAT to `docker login` against Docker Hub. [docker/cli#4500](https://github.com/docker/cli/pull/4500) - Improve shell startup time for users of Bash completion for the CLI. [docker/cli#4517](https://github.com/docker/cli/pull/4517) - Improve the speed of some commands by skipping `GET /_ping` when possible. [docker/cli#4508](https://github.com/docker/cli/pull/4508) - Fix credential scopes when using a PAT to `docker manifest inspect` an image on Docker Hub. [docker/cli#4512](https://github.com/docker/cli/pull/4512) - Fix `docker events` not supporting `--format=json`. [docker/cli#4544](https://github.com/docker/cli/pull/4544) ##### Packaging updates - Upgrade Go to `go1.20.7`. [moby/moby#46140](https://github.com/moby/moby/pull/46140), [docker/cli#4476](https://github.com/docker/cli/pull/4476), [docker/docker-ce-packaging#932](https://github.com/docker/docker-ce-packaging/pull/932) - Upgrade containerd to `v1.7.3` (static binaries only). [moby/moby#46103](https://github.com/moby/moby/pull/46103) - Upgrade Compose to `v2.21.0`. [docker/docker-ce-packaging#936](https://github.com/docker/docker-ce-packaging/pull/936) ### [`v24.0.5`](https://github.com/moby/moby/releases/tag/v24.0.5) [Compare Source](https://github.com/docker/docker/compare/v24.0.4...v24.0.5) #### 24.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.5 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.5) - [moby/moby, 24.0.5 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.5) ##### Bug fixes and enhancements - The Go client now avoids using UNIX socket paths in the HTTP `Host:` header, in order to be compatible with changes introduced in `go1.20.6`. [moby/moby#45962](https://github.com/moby/moby/pull/45962), [moby/moby#45990](https://github.com/moby/moby/pull/45990) - containerd storage backend: Fix `Variant` not being included in `docker image inspect` and `GET /images/{name}/json`. [moby/moby#46025](https://github.com/moby/moby/pull/46025) - containerd storage backend: Prevent potential garbage collection of content during image export. [moby/moby#46021](https://github.com/moby/moby/pull/46021) - containerd storage backend: Prevent duplicate digest entries in `RepoDigests`. [moby/moby#46014](https://github.com/moby/moby/pull/46014) - containerd storage backend: Fix operations taking place against the incorrect tag when working with an image referenced by tag and digest. [moby/moby#46013](https://github.com/moby/moby/pull/46013) - containerd storage backend: Fix a panic caused by `EXPOSE` when building containers with the legacy builder. [moby/moby#45921](https://github.com/moby/moby/pull/45921) - Fix a regression causing unintuitive errors to be returned when attempting to create an `overlay` network on a non-Swarm node. [moby/moby#45974](https://github.com/moby/moby/pull/45974) - Properly report errors parsing volume specifications from the command line. [docker/cli#4423](https://github.com/docker/cli/pull/4423) - Fix a panic caused when `auths: null` is found in the CLI config file. [docker/cli#4450](https://github.com/docker/cli/pull/4450) ##### Packaging updates - Use init scripts as provided by moby/moby `contrib/init`. [docker/docker-ce-packaging#914](https://github.com/docker/docker-ce-packaging/pull/914), [docker/docker-ce-packaging#926](https://github.com/docker/docker-ce-packaging/pull/926) - Drop Upstart from `contrib/init`. [moby/moby#46044](https://github.com/moby/moby/pull/46044) - Upgrade Go to `go1.20.6`. [docker/cli#4428](https://github.com/docker/cli/pull/4428), [moby/moby#45970](https://github.com/moby/moby/pull/45970), [docker/docker-ce-packaging#921](https://github.com/docker/docker-ce-packaging/pull/921) - Upgrade Compose to `v2.20.2`. [docker/docker-ce-packaging#924](https://github.com/docker/docker-ce-packaging/pull/924) - Upgrade buildx to `v0.11.2`. [docker/docker-ce-packaging#922](https://github.com/docker/docker-ce-packaging/pull/922) ### [`v24.0.4`](https://github.com/moby/moby/releases/tag/v24.0.4) [Compare Source](https://github.com/docker/docker/compare/v24.0.3...v24.0.4) #### 24.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.4 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.4) - [moby/moby, 24.0.4 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.4) ##### Bug fixes and enhancements - Fix a regression introduced during 24.0.3 that causes a panic during live-restore of containers with bind mounts. [moby/moby#45903](https://github.com/moby/moby/pull/45903) ### [`v24.0.3`](https://github.com/moby/moby/releases/tag/v24.0.3) [Compare Source](https://github.com/docker/docker/compare/v24.0.2...v24.0.3) #### 24.0.3 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.3 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.3) - [moby/moby, 24.0.3 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.3) ##### Bug fixes and enhancements - containerd image store: Fix an issue where multi-platform images that did not include a manifest for the default platform could not be interacted with. [moby/moby#45849](https://github.com/moby/moby/pull/45849) - containerd image store: Fix specious attempts to cache `FROM scratch` in container builds. [moby/moby#45822](https://github.com/moby/moby/pull/45822) - containerd image store: Fix `docker cp` with snapshotters that cannot mount the same content multiple times. [moby/moby#45780](https://github.com/moby/moby/pull/45780), [moby/moby#45786](https://github.com/moby/moby/pull/45786) - containerd image store: Fix builds with `type=image` not being correctly unpacked/stored. [moby/moby#45692](https://github.com/moby/moby/pull/45692) - containerd image store: Fix incorrectly attempting to unpack pseudo-images (including attestations) in `docker load`. [moby/moby#45688](https://github.com/moby/moby/pull/45688) - containerd image store: Correctly set the user agent, and include additional information like the snapshotter when interacting with registries. [moby/moby#45671](https://github.com/moby/moby/pull/45671), [moby/moby#45684](https://github.com/moby/moby/pull/45684) - containerd image store: Fix a failure to unpack already-pulled content after switching between snapshotters. [moby/moby#45678](https://github.com/moby/moby/pull/45678) - containerd image store: Fix images that have been re-tagged or with all tags removed being pruned while still in use. [moby/moby#45857](https://github.com/moby/moby/pull/45857) - Fix a Swarm CSI issue where the Topology field was not propagated into NodeCSIInfo. [moby/moby#45810](https://github.com/moby/moby/pull/45810) - Fix failures to add new Swarm managers caused by a very large raft log. [moby/moby#45703](https://github.com/moby/moby/pull/45703), [moby/swarmkit#3122](https://github.com/moby/swarmkit/pull/3122), [moby/swarmkit#3128](https://github.com/moby/swarmkit/pull/3128) - `name_to_handle_at(2)` is now always allowed in the default seccomp profile. [moby/moby#45833](https://github.com/moby/moby/pull/45833) - Fix an issue that prevented encrypted Swarm overlay networks from working on ports other than the default (4789). [moby/moby#45637](https://github.com/moby/moby/pull/45637) - Fix a failure to restore mount reference-counts during live-restore. [moby/moby#45824](https://github.com/moby/moby/pull/45824) - Fix various networking-related failures during live-restore. [moby/moby#45658](https://github.com/moby/moby/pull/45658), [moby/moby#45659](https://github.com/moby/moby/pull/45659) - Fix running containers restoring with a zero (successful) exit status when the daemon is unexpectedly terminated. [moby/moby#45801](https://github.com/moby/moby/pull/45801) - Fix a potential panic while executing healthcheck probes. [moby/moby#45798](https://github.com/moby/moby/pull/45798) - Fix a panic caused by a race condition in container exec start. [moby/moby#45794](https://github.com/moby/moby/pull/45794) - Fix an exception caused by attaching a terminal to an exec with a non-existant command. [moby/moby#45643](https://github.com/moby/moby/pull/45643) - Fix `host-gateway` with BuildKit by passing the IP as a label (also requires [docker/buildx#1894](https://github.com/docker/buildx/pull/1894)). [moby/moby#45790](https://github.com/moby/moby/pull/45790) - Fix an issue where `POST /containers/{id}/stop` would forcefully terminate the container when the request was canceled, instead of waiting until the specified timeout for a 'graceful' stop. [moby/moby#45774](https://github.com/moby/moby/pull/45774) - Fix an issue where `docker cp -a` from the root (`/`) directory would fail. [moby/moby#45748](https://github.com/moby/moby/pull/45748) - Improve compatibility with non-runc container runtimes by more correctly setting resource constraint parameters in the OCI config. [moby/moby#45746](https://github.com/moby/moby/pull/45746) - Fix an issue caused by overlapping subuid/subgid ranges in certain configurations (e.g. LDAP) in rootless mode. [moby/moby#45747](https://github.com/moby/moby/pull/45747), [rootless-containers/rootlesskit#369](https://github.com/rootless-containers/rootlesskit/pull/369) - Greatly reduce CPU and memory usage while populating the Debug section of `GET /info`. [moby/moby#45856](https://github.com/moby/moby/pull/45856) - Fix an issue where debug information was not correctly printed during `docker info` when only the client is in debug mode. [docker/cli#4393](https://github.com/docker/cli/pull/4393) - Fix issues related to hung connections when connecting to hosts over a SSH connection. [docker/cli#4395](https://github.com/docker/cli/pull/4395) ##### Packaging updates - Upgrade Go to `go1.20.5`. [moby/moby#45745](https://github.com/moby/moby/pull/45745), [docker/cli#4351](https://github.com/docker/cli/pull/4351), [docker/docker-ce-packaging#904](https://github.com/docker/docker-ce-packaging/pull/904) - Upgrade Compose to `v2.19.1`. [docker/docker-ce-packaging#916](https://github.com/docker/docker-ce-packaging/pull/916) - Upgrade buildx to `v0.11.1`. [docker/docker-ce-packaging#918](https://github.com/docker/docker-ce-packaging/pull/918) ### [`v24.0.2`](https://github.com/moby/moby/releases/tag/v24.0.2) [Compare Source](https://github.com/docker/docker/compare/v24.0.1...v24.0.2) #### 24.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.2 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.2) - [moby/moby, 24.0.2 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.2) ##### Bug fixes and enhancements - Fix a panic during build when referencing locally tagged images. [moby/buildkit#3899](https://github.com/moby/buildkit/pull/3899), [moby/moby#45582](https://github.com/moby/moby/pull/45582) - Fix builds potentially failing with `exit code: 4294967295` when performing many concurrent build stages. [moby/moby#45620](https://github.com/moby/moby/pull/45620) - Fix DNS resolution on Windows ignoring `etc/hosts` (`%WINDIR%\System32\Drivers\etc\hosts`), including resolution of `localhost`. [moby/moby#45562](https://github.com/moby/moby/pull/45562) - Apply a workaround for a containerd bug that causes concurrent `docker exec` commands to take significantly longer than expected. [moby/moby#45625](https://github.com/moby/moby/pull/45625) - containerd image store: Fix an issue where the image `Created` field would contain an incorrect value. [moby/moby#45623](https://github.com/moby/moby/pull/45623) - containerd image store: Adjust the output of image pull progress so that the output has the same format regardless of whether the containerd image store is enabled. [moby/moby#45602](https://github.com/moby/moby/pull/45602) - containerd image store: Switching between the default and containerd image store now requires a daemon restart. [moby/moby#45616](https://github.com/moby/moby/pull/45616) ### [`v24.0.1`](https://github.com/moby/moby/releases/tag/v24.0.1) [Compare Source](https://github.com/docker/docker/compare/v24.0.0...v24.0.1) #### 24.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.1 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.1) - [moby/moby, 24.0.1 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.1) ##### Removed - Remove CLI completions for storage drivers removed in the 24.0 major release. [docker/cli#4302](https://github.com/docker/cli/pull/4302) ##### Bug fixes and enhancements - Fix an issue where DNS query NXDOMAIN replies from external servers were forwarded to the client as SERVFAIL. [moby/moby#45573](https://github.com/moby/moby/pull/45573) - Fix an issue where `docker pull --platform` would report `No such image` regarding another tag pointing to the same image. [moby/moby#45562](https://github.com/moby/moby/pull/45562) - Fix an issue where insecure registry configuration would be forgotten during config reload. [moby/moby#45571](https://github.com/moby/moby/pull/45571) - containerd image store: Fix an issue where images which have no layers would not be listed in `docker images -a` [moby/moby#45588](https://github.com/moby/moby/pull/45588) - API: Fix an issue where `GET /images/{id}/json` would return `null` instead of empty `RepoTags` and `RepoDigests`. [moby/moby#45564](https://github.com/moby/moby/pull/45564) - API: Fix an issue where `POST /commit` did not accept an empty request body. [moby/moby#45568](https://github.com/moby/moby/pull/45568) ##### Packaging updates - Upgrade Compose to `v2.18.1`. [docker/docker-ce-packaging#896](hhttps://github.com/docker/docker-ce-packaging/pull/896) ### [`v24.0.0`](https://github.com/moby/moby/releases/tag/v24.0.0) [Compare Source](https://github.com/docker/docker/compare/v23.0.10...v24.0.0) #### 24.0.0 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 24.0.0 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A24.0.0) - [moby/moby, 24.0.0 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A24.0.0) ##### New - Introduce experimental support for containerd as the content store (replacing the existing storage drivers). [moby/moby#43735](https://github.com/moby/moby/pull/43735), [other moby/moby pull requests](https://github.com/moby/moby/pulls?q=is%3Apr+is%3Amerged+milestone%3A24.0.0+-label%3Aprocess%2Fcherry-picked+label%3Acontainerd-integration+) - The `--host` CLI flag now supports a path component in a `ssh://` host address, allowing use of an alternate socket path without configuration on the remote host. [docker/cli#4073](https://github.com/docker/cli/pull/4073) - The `docker info` CLI command now reports a version and platform field. [docker/cli#4180](https://github.com/docker/cli/pull/4180) - Introduce the daemon flag `--default-network-opt` to configure options for newly created networks. [moby/moby#43197](https://github.com/moby/moby/pull/43197) - Restrict access to `AF_VSOCK` in the `socket(2)` family of syscalls in the default seccomp profile. [moby/moby#44562](https://github.com/moby/moby/pull/44562) - Introduce support for setting OCI runtime annotations on containers. [docker/cli#45025](https://github.com/docker/cli/pull/4156), [moby/moby#45025](https://github.com/moby/moby/pull/45025) - Alternative runtimes can now be configured in `daemon.json`, enabling runtime names to be aliased and options to be passed. [moby/moby#45032](https://github.com/moby/moby/pull/45032) - The `docker-init` binary will now be discovered in FHS-compliant libexec directories, in addition to the `PATH`. [moby/moby#45198](https://github.com/moby/moby/pull/45198) - API: Surface the daemon-level `--no-new-privileges` in `GET /info`. [moby/moby#45320](https://github.com/moby/moby/pull/45320) ##### Removed - `docker info` no longer reports `IndexServiceAddress`. [docker/cli#4204](https://github.com/docker/cli/pull/4204) - libnetwork: Remove fallback code for obsolete kernel versions. [moby/moby#44684](https://github.com/moby/moby/pull/44684), [moby/moby#44802](https://github.com/moby/moby/pull/44802) - libnetwork: Remove unused code related to classic Swarm. [moby/moby#44965](https://github.com/moby/moby/pull/44965) - libnetwork: Remove usage of the `xt_u32` kernel module from encrypted Swarm overlay networks. [moby/moby#45281](https://github.com/moby/moby/pull/45281) - Remove support for buildkit's deprecated `buildinfo` in favor of standard provenance attestations. [moby/moby#45097](https://github.com/moby/moby/pull/45097) - Remove the deprecated AUFS and legacy `overlay` storage drivers. [moby/moby#45342](https://github.com/moby/moby/pull/45342), [moby/moby#45359](https://github.com/moby/moby/pull/45359) - Remove the deprecated `overlay2.override_kernel_check` storage driver option. [moby/moby#45368](https://github.com/moby/moby/pull/45368) - Remove workarounds for obsolete versions of `apparmor_parser` from the AppArmor profiles. [moby/moby#45500](https://github.com/moby/moby/pull/45500) - API: `GET /images/json` no longer represents empty RepoTags and RepoDigests as`<none>:<none>`/`<none>@<none>`. Empty arrays are be returned instead on API >= 1.43. [moby/moby#45068](https://github.com/moby/moby/pull/45068) ##### Deprecated - Deprecate the `--oom-score-adjust` daemon option. [moby/moby#45315](https://github.com/moby/moby/pull/45315) - API: Deprecate the `VirtualSize` field in `GET /images/json` and `GET /images/{id}/json`. [moby/moby#45346](https://github.com/moby/moby/pull/45346) ##### Bug fixes and enhancements - The `docker stack` command no longer validates the `build` section of Compose files. [docker/cli#4214](https://github.com/docker/cli/pull/4214) - Fix lingering healthcheck processes after timeout is reached. [moby/moby#43739](https://github.com/moby/moby/pull/43739) - Reduce the overhead of container startup when using the `overlay2` storage driver. [moby/moby#44285](https://github.com/moby/moby/pull/44285) - API: Handle multiple `before=` and `since=` filters in `GET /images`. [moby/moby#44503](https://github.com/moby/moby/pull/44503) - Fix numerous bugs in the embedded DNS resolver implementation used by user-defined networks. [moby/moby#44664](https://github.com/moby/moby/pull/44664) - Add `execDuration` field to the map of event attributes. [moby/moby#45494](https://github.com/moby/moby/pull/45494) - Swarm-level networks can now be created with the Windows `internal`, `l2bridge`, and `nat` drivers. [moby/swarmkit#3121](https://github.com/moby/swarmkit/pull/3121), [moby/moby#45291](https://github.com/moby/moby/pull/45291) ##### Packaging updates - Update Go to `1.20.4`. [docker/cli#4253](https://github.com/docker/cli/pull/4253), [moby/moby#45456](https://github.com/moby/moby/pull/45456) - Update `containerd` to [`v1.7.1`](https://github.com/containerd/containerd/releases/tag/v1.7.1). [moby/moby#45537](https://github.com/moby/moby/pull/45537) - Update `buildkit` to [`v0.11.6`](https://github.com/moby/buildkit/releases/v0.11.6). [moby/moby#45367](https://github.com/moby/moby/pull/45367) ### [`v23.0.10`](https://github.com/moby/moby/releases/tag/v23.0.10) [Compare Source](https://github.com/docker/docker/compare/v23.0.9...v23.0.10) #### 23.0.10 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.10 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.10) - [moby/moby, 23.0.10 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.10) ### [`v23.0.9`](https://github.com/moby/moby/releases/tag/v23.0.9) [Compare Source](https://github.com/docker/docker/compare/v23.0.8...v23.0.9) #### 23.0.9 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.9 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.9) - [moby/moby, 23.0.9 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.9) ### [`v23.0.8`](https://github.com/moby/moby/releases/tag/v23.0.8) [Compare Source](https://github.com/docker/docker/compare/v23.0.7...v23.0.8) #### 23.0.8 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.8 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.8) - [moby/moby, 23.0.8 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.8) ##### Bug Fixes and Enhancements - Make one-shot stats faster. https://github.com/moby/moby/pull/46617 - Fix "Rootful-in-Rootless" Docker-in-Docker on systemd >= 250. https://github.com/moby/moby/pull/46627 - Add `IP_NF_MANGLE` to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46675 - Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46704 - Update github.com/klauspost/compress to v1.17.2 to fix data corruption with zstd output in "best". https://github.com/moby/moby/pull/46710 ##### Packaging Updates - Update Go to 1.20.10. https://github.com/moby/moby/pull/46625 - Update golang.org/x/net to v0.17.0. https://github.com/moby/moby/pull/46691 ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/48ebe353e49a9def5e6679f6e386b0efb1c95f0e). ### [`v23.0.7`](https://github.com/moby/moby/releases/tag/v23.0.7) [Compare Source](https://github.com/docker/docker/compare/v23.0.6...v23.0.7) #### 23.0.7 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.7 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.7) - [moby/moby, 23.0.7 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.7) ##### Bug Fixes and Enhancements - Fix reloading the `insecure-registries` daemon configuration. https://github.com/moby/moby/pull/45572 - Allow empty body for `POST /commit` again. https://github.com/moby/moby/pull/45569 - Fix an issue which prevented encrypted overlay networks from functioning when the Swarm data path port is not set to 4789. https://github.com/moby/moby/pull/45638 - Fix an issue with graceful container shutdown. https://github.com/moby/moby/pull/45775 - Fix host-gateway support in `docker build`. https://github.com/moby/moby/pull/45791 - Fix missing Topology in Swarm cluster volume `NodeCSIInfo`. https://github.com/moby/moby/pull/45809 - seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45834 - Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45825 - client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45971 - Fix an issue which prevented process capabilities from being retained when starting a container as a non-root user with `--security-opt=no-new-privileges`. https://github.com/moby/moby/pull/46222 - Fixed a bug which caused named volumes that set custom `device` or `type` volume option to be unmounted when restarting the daemon and not live-restoring it properly. https://github.com/moby/moby/pull/46367 - windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46216 - Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46408 ##### Packaging Updates - Update Go to 1.20.7. https://github.com/moby/moby/pull/46141 - Update containerd to v1.6.22. https://github.com/moby/moby/pull/46104 - Update runc to v1.1.9. https://github.com/moby/moby/pull/46229 - Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46046 ### [`v23.0.6`](https://github.com/moby/moby/releases/tag/v23.0.6) [Compare Source](https://github.com/docker/docker/compare/v23.0.5...v23.0.6) #### 23.0.6 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.6 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A23.0.6) - [moby/moby, 23.0.6 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A23.0.6) ##### Bug fixes and enhancements - Fix vfs storage driver not working on NFS. [moby/moby#45465](https://github.com/moby/moby/pull/45465) ##### Packaging Updates - Upgrade Go to `1.19.9`. [docker/docker-ce-packaging#889](https://github.com/docker/docker-ce-packaging/pull/889), [docker/cli#4254](https://github.com/docker/cli/pull/4254), [moby/moby#45455](https://github.com/moby/moby/pull/45455) - Upgrade `containerd` to [v1.6.21](https://github.com/containerd/containerd/releases/tag/v1.6.21) - Upgrade `runc` to [v1.1.7](https://github.com/opencontainers/runc/releases/tag/v1.1.7) ### [`v23.0.5`](https://github.com/moby/moby/releases/tag/v23.0.5) [Compare Source](https://github.com/docker/docker/compare/v23.0.4...v23.0.5) #### 23.0.5 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.5 milestone](https://github.com/docker/cli/milestone/79?closed=1) - [moby/moby, 23.0.5 milestone](https://github.com/moby/moby/milestone/118?closed=1) ##### Bug fixes and enhancements - Add the `--all` / `-a` option when pruning volumes. [docker/cli#4229](https://github.com/docker/cli/pull/4229) - Add `--format=json` for `docker info`. [docker/cli#4320](https://github.com/docker/cli/pull/4230) - Fix log loss with the AWSLogs log driver. [moby/moby#45350](https://github.com/moby/moby/pull/45350) - Fix a regression introduced in v23.0.4 where dockerd would refuse to start if the fixed-cidr config parameter is provided but not bip. [moby/moby#45403](https://github.com/moby/moby/pull/45403) - Fix a panic in libnetwork during daemon start [moby/moby#45376](https://github.com/moby/moby/pull/45376) - Fix "tag" event not being sent when an image is built with `buildx`. [moby/moby#45410](https://github.com/moby/moby/pull/45410) ##### Packaging Updates - Upgrade Compose to `2.17.3`. [docker/docker-ce-packaging#883](https://github.com/docker/docker-ce-packaging/pull/883) ### [`v23.0.4`](https://github.com/moby/moby/releases/tag/v23.0.4) [Compare Source](https://github.com/docker/docker/compare/v23.0.3...v23.0.4) #### 23.0.4 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.4 milestone](https://github.com/docker/cli/milestone/77?closed=1) - [moby/moby, 23.0.4 milestone](https://github.com/moby/moby/milestone/117?closed=1) ##### Bug fixes and enhancements - Fix a performance regression in Docker CLI 23.0.0 [docker/cli#4141](https://github.com/docker/cli/pull/4141). - Fix progress indicator on `docker cp` not functioning as intended [docker/cli#4157](https://github.com/docker/cli/pull/4157). - Fix shell completion for `docker compose --file` [docker/cli#4177](https://github.com/docker/cli/pull/4177). - Fix an error caused by incorrect handling of "default-address-pools" in `daemon.json` [moby/moby#45246](https://github.com/moby/moby/pull/45246). ##### Packaging Updates - Fix missing packages for CentOS 9 Stream. - Upgrade Go to `1.19.8`. [docker/docker-ce-packaging#878](https://github.com/docker/docker-ce-packaging/pull/878), [docker/cli#4164](https://github.com/docker/cli/pull/4164), [moby/moby#45277](https://github.com/moby/moby/pull/45277), which contains fixes for [CVE-2023-24537](https://github.com/advisories/GHSA-fp86-2355-v99r), [CVE-2023-24538](https://github.com/advisories/GHSA-v4m2-x4rp-hv22), [CVE-2023-24534](https://github.com/advisories/GHSA-8v5j-pwr7-w5f8), and [CVE-2023-24536](https://github.com/advisories/GHSA-9f7g-gqwh-jpf5) ### [`v23.0.3`](https://github.com/moby/moby/releases/tag/v23.0.3) [Compare Source](https://github.com/docker/docker/compare/v23.0.2...v23.0.3) #### 23.0.3 > **Note** > > Due to an issue with CentOS 9 Stream's package repositories, packages for > CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later, > or as part of the next (23.0.4) patch release. ##### Bug fixes and enhancements - Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). - A lack of kernel support for encrypted overlay networks now reports as an error. - Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach. - Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the `xt_bpf` kernel module. - Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw) to ensure that unintentional exposure has not occurred. ##### Packaging Updates - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20). - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5). ### [`v23.0.2`](https://github.com/moby/moby/releases/tag/v23.0.2) [Compare Source](https://github.com/docker/docker/compare/v23.0.1...v23.0.2) #### 23.0.2 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.2 milestone](https://github.com/docker/cli/milestone/75?closed=1) - [moby/moby, 23.0.2 milestone](https://github.com/moby/moby/milestone/114?closed=1) ##### Bug fixes and enhancements - Fully resolve missing checks for `apparmor_parser` when an AppArmor enabled kernel is detected. [containerd/containerd#8087](https://github.com/containerd/containerd/pull/8087), [moby/moby#45043](https://github.com/moby/moby/pull/45043) - Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes [CVE-2023-26054](https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc). [moby/moby#45110](https://github.com/moby/moby/pull/45110) - Fix anonymous volumes created by a `VOLUME` line in a Dockerfile being excluded from volume prune. [moby/moby#45159](https://github.com/moby/moby/pull/45159) - Fix a failure to properly propagate errors during removal of volumes on a Swarm node. [moby/moby#45155](https://github.com/moby/moby/pull/45155) - Temporarily work around a bug in BuildKit `COPY --link` by disabling mergeop/diffop optimization. [moby/moby#45112](https://github.com/moby/moby/pull/45112) - Properly clean up child tasks when a parent Swarm job is removed. [moby/swarmkit#3112](https://github.com/moby/swarmkit/pull/3112), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. [moby/swarmkit#3082](https://github.com/moby/swarmkit/pull/3082), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. [moby/swarmkit#3116](https://github.com/moby/swarmkit/pull/3116), [moby/moby#45107](https://github.com/moby/moby/pull/45107) - Fix a panic caused by log buffering in some configurations. [containerd/fifo#47](https://github.com/containerd/fifo/pull/47), [moby/moby#45051](https://github.com/moby/moby/pull/45051) - Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. [moby/moby#45016](https://github.com/moby/moby/pull/45016) - Fix a DNS resolution issue affecting containers created with `--dns-opt` or `--dns-search` when `systemd-resolved` is used outside the container. [moby/moby#45000](https://github.com/moby/moby/pull/45000) - Fix a panic when logging errors in handling DNS queries originating from inside a container. [moby/moby#44980](https://github.com/moby/moby/pull/44980) - Improve the speed of `docker ps` by allowing users to opt out of size calculations with `--size=false`. [docker/cli#4107](https://github.com/docker/cli/pull/4107) - Extend support for Bash completion to all plugins. [docker/cli#4092](https://github.com/docker/cli/pull/4092) - Fix `docker stack deploy` failing on Windows when special environment variables set by `cmd.exe` are present. [docker/cli#4083](https://github.com/docker/cli/pull/4083) - Add forward compatibility for future API versions by considering empty image tags to be the same as `<none>`. [docker/cli#4065](https://github.com/docker/cli/pull/4065) - Atomically write context files to greatly reduce the probability of corruption, and improve the error message for a corrupt context. [docker/cli#4063](https://github.com/docker/cli/pull/4063) ##### Packaging - Upgrade Go to `1.19.7`. [docker/docker-ce-packaging#857](https://github.com/docker/docker-ce-packaging/pull/857), [docker/cli#4086](https://github.com/docker/cli/pull/4086), [moby/moby#45137](https://github.com/moby/moby/pull/45137) - Upgrade `containerd` to `v1.6.19`. [moby/moby#45084](https://github.com/moby/moby/pull/45084), [moby/moby#45099](https://github.com/moby/moby/pull/45099) - Upgrade Buildx to `v0.10.4`. [docker/docker-ce-packaging#855](https://github.com/docker/docker-ce-packaging/pull/855) - Upgrade Compose to `v2.17.2`. [docker/docker-ce-packaging#867](hhttps://github.com/docker/docker-ce-packaging/pull/867) ### [`v23.0.1`](https://github.com/moby/moby/releases/tag/v23.0.1) [Compare Source](https://github.com/docker/docker/compare/v23.0.0...v23.0.1) #### 23.0.1 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.1 milestone](https://github.com/docker/cli/milestone/73?closed=1) - [moby/moby, 23.0.1 milestone](https://github.com/moby/moby/milestone/113?closed=1) ##### Bug fixes and enhancements - Fix containers not starting if the kernel has AppArmor enabled, but `apparmor_parser` is not available. [moby/moby#44942](https://github.com/moby/moby/pull/44942) - Fix BuildKit-enabled builds with inline caching causing the daemon to crash. [moby/moby#44944](https://github.com/moby/moby/pull/44944) - Fix BuildKit improperly loading cached layers created by previous versions. [moby/moby#44959](https://github.com/moby/moby/pull/44959) - Fix an issue where `ipvlan` networks created prior to upgrading would prevent the daemon from starting. [moby/moby#44937](https://github.com/moby/moby/pull/44937) - Fix the `overlay2` storage driver failing early in `metacopy` testing when initialized on an unsupported backing filesystem. [moby/moby#44922](https://github.com/moby/moby/pull/44922) - Fix `exec` exit events being misinterpreted as container exits under some runtimes, such as Kata Containers. [moby/moby#44892](https://github.com/moby/moby/pull/44892) - Improve the error message returned by the CLI when recieving a truncated JSON response caused by the API hanging up mid-request. [docker/cli#4004](https://github.com/docker/cli/pull/4004) - Fix an incorrect CLI exit code when attempting to execute a directory with a `runc` compiled using Go 1.20. [docker/cli#4004](https://github.com/docker/cli/pull/4004) - Fix mishandling the size argument to `--device-write-bps` as a path. [docker/cli#4004](https://github.com/docker/cli/pull/4004) ##### Packaging - Add `/etc/docker` to RPM and DEB packaging. [docker/docker-ce-packaging#842](https://github.com/docker/docker-ce-packaging/pull/842) - Not all use cases will benefit; if you depend on this, you should explicitly `mkdir -p /etc/docker`. - Upgrade Compose to `v2.16.0`. [docker/docker-ce-packaging#844](https://github.com/docker/docker-ce-packaging/pull/844) ### [`v23.0.0`](https://github.com/moby/moby/releases/tag/v23.0.0) [Compare Source](https://github.com/docker/docker/compare/v20.10.27...v23.0.0) #### 23.0.0 For more information about: - Deprecated and removed features, see [Deprecated Engine Features](https://github.com/docker/cli/blob/v23.0.0/docs/deprecated.md). - Changes to the Engine API, see [Engine API version history](https://github.com/moby/moby/blob/v23.0.0/docs/api/version-history.md). For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 23.0.0 milestone](https://github.com/docker/cli/milestone/51?closed=1) - [moby/moby, 23.0.0 milestone](https://github.com/moby/moby/milestone/91?closed=1) ##### New - Set Buildx and BuildKit as the default builder on Linux. [moby/moby#43992](https://github.com/moby/moby/pull/43992) - Alias `docker build` to `docker buildx build`. [docker/cli#3314](https://github.com/docker/cli/pull/3314) - The legacy builder can still be used by explicitly setting `DOCKER_BUILDKIT=0`. - There are differences in how BuildKit and the legacy builder handle multi-stage builds. For more information, see [Multi-stage builds](../../build/building/multi-stage.md#differences-between-legacy-builder-and-buildkit). - Add support for pulling `zstd` compressed layers. [moby/moby#41759](https://github.com/moby/moby/pull/41759), [moby/moby#42862](https://github.com/moby/moby/pull/42862) - Add support for alternate OCI runtimes on Linux, compatible with the containerd runtime v2 API. [moby/moby#43887](https://github.com/moby/moby/pull/43887), [moby/moby#43993](https://github.com/moby/moby/pull/43993) - Add support for the containerd `runhcs` shim on Windows (off by default). [moby/moby#42089](https://github.com/moby/moby/pull/42089) - Add `dockerd --validate` to check the daemon JSON config and exit. [moby/moby#42393](https://github.com/moby/moby/pull/42393) - Add the ability to configure the daemon's HTTP proxy via flags or JSON config. [moby/moby#42835](https://github.com/moby/moby/pull/42835) - Add support for RFC 3021 point-to-point networks (IPv4 /31s) and single hosts (IPv4 /32s). For networks with two or fewer addresses, IPAM won't reserve a network and broadcast address. [moby/moby#42626](https://github.com/moby/moby/pull/42626) - Add support for setting `ipvlan_flag` and using the `l3s` `ipvlan_mode` in the `ipvlan` network driver. [moby/moby#42542](https://github.com/moby/moby/pull/42542) - Add support for displaying the value of the `metacopy` option for the `overlay2` storage driver. [moby/moby#43557](https://github.com/moby/moby/pull/43557) - Add support for describing Windows devices using the syntax `IDType://ID`. [moby/moby#43368](https://github.com/moby/moby/pull/43368) - Add `RootlessKit`, `slirp4netns`, and `VPNKit` version reporting. [moby/moby#42330](https://github.com/moby/moby/pull/42330) - Add experimental support for SwarmKit cluster volumes (CSI). [moby/moby#41982](https://github.com/moby/moby/pull/41982) - CLI: Add cluster volume (CSI) options to `docker volume`. [docker/cli#3606](https://github.com/docker/cli/pull/3606) - CLI: Add cluster volume (CSI) support to `docker stack`. [docker/cli#3662](https://github.com/docker/cli/pull/3662) - Add support for SwarmKit jobs in `docker stack deploy`. [docker/cli#2907](https://github.com/docker/cli/pull/2907) - Add the `docker stack config` command to output the merged and interpolated config files as utilized by `stack deploy`. [docker/cli#3544](https://github.com/docker/cli/pull/3544) - Add a new `docker context show` command that prints the name of the current context. [docker/cli#3567](https://github.com/docker/cli/pull/3567) - Add the `--format=json` shorthand variant of `--format="{{ json . }}"` to all commands supporting the `--format` flag. [docker/cli#2936](https://github.com/docker/cli/pull/2936) - Add a `--quiet` option to `docker create` and `docker run` commands to suppress output when pulling an image. [docker/cli#3377](https://github.com/docker/cli/pull/3377) - Add a `--force` option to `docker network rm` subcommand. Causes CLI to return a 0 exit code even if the network doesn't exist. Has no effect on the server-side procedure for removing a network. [docker/cli#3547](https://github.com/docker/cli/pull/3547) - Add a `--signal` option to `docker stop` and `docker restart`. [docker/cli#3614](https://github.com/docker/cli/pull/3614) - Add a `-v/--version` flag to `docker-proxy`. [moby/moby#44703](https://github.com/moby/moby/pull/44703) - Plugins are now discovered in well-known user-level paths when the daemon is running in rootless mode. [moby/moby#44778](https://github.com/moby/moby/pull/44778) - The daemon now handles common alternate JSON encodings in the JSON configuration file gracefully, and reports useful errors. [moby/moby#44777](https://github.com/moby/moby/pull/44777), [moby/moby#44832](https://github.com/moby/moby/pull/44832) - UTF-8 with a byte order mark is accepted. - UTF-16 with a byte order mark is accepted. - Invalid UTF-8 is reported early and with a comprehensible error message. - Allow use of `STOPSIGNAL` via `docker commit`. [moby/moby#43369](https://github.com/moby/moby/pull/43369) - Add a new option to the `awslogs` log driver to allow skipping log stream creation in CloudWatch. [moby/moby#42132](https://github.com/moby/moby/pull/42132) - Add a new option to the `awslogs` log driver to specify the log format that's sent to CloudWatch. [moby/moby#42838](https://github.com/moby/moby/pull/42838) - Add a new option to the `fluentd` log driver to set the reconnection interval. [moby/moby#43100](https://github.com/moby/moby/pull/43100) - Add new options-setters to the Go API client: `WithTLSClientConfigFromEnv()`, `WithHostFromEnv()`, and `WithVersionFromEnv()`. [moby/moby#42224](https://github.com/moby/moby/pull/42224) - Add generation of shell command completion through a `docker completion` subcommand. [docker/cli#3429](https://github.com/docker/cli/pull/3429) - API: Add a `Swarm` header to `GET /_ping` and `HEAD /_ping`, allowing single-request detection of Swarm support. [moby/moby#42064](https://github.com/moby/moby/pull/42064) - API: Add a `signal` parameter to `POST /containers/{id}/stop` and `POST /containers/{id}/restart` to set the signal used. [moby/moby#43206](https://github.com/moby/moby/pull/43206) - API: Add a `CreateMountPoint` parameter to `POST /containers/create`. [moby/moby#43484](https://github.com/moby/moby/pull/43484) - API: Add a `shared-size` parameter to `GET /images/json` to enable shared-size computation of images. [moby/moby#42531](https://github.com/moby/moby/pull/42531) - API: Add a `type` parameter to `GET /system/df`, to control what object types to are considered when computing disk usage. [moby/moby#42559](https://github.com/moby/moby/pull/42559) - systemd: Start `docker.service` after `time-set.target`. [moby/moby#43107](https://github.com/moby/moby/pull/43107) ##### Removed - Remove support for reading configuration from `~/.dockercfg`. [docker/cli#2504](https://github.com/docker/cli/pull/2504) - This location has been deprecated since 1.7.0. - [Deprecation notice](../deprecated.md#support-for-legacy-dockercfg-configuration-files) - Remove the `-g` and `--graph` daemon options in favor of `--data-root`. [docker/cli#3739](https://github.com/docker/cli/pull/3739) - These options have been hidden and deprecated since 17.05. - [Deprecation notice](../deprecated.md#-g-and---graph-flags-on-dockerd) - Remove client-side sorting of results, in favor of the order in which the search API returns. [docker/cli#3470](https://github.com/docker/cli/pull/3470) - Remove warnings related to deprecated storage drivers from the CLI. Warnings are now handled by the daemon instead. [docker/cli#3542](https://github.com/docker/cli/pull/3542) - Remove `Experimental` client field from `docker version`. [docker/cli#3543](https://github.com/docker/cli/pull/3543) - [Deprecation notice](../deprecated.md#configuration-options-for-experimental-cli-features) - Require explicit opt-in to use deprecated storage drivers, and don't automatically select them when upgrading. [moby/moby#43378](https://github.com/moby/moby/pull/43378) - Remove deprecated support for `overlay` and `overlay2` storage drivers on backing filesystems without `d_type` support. [moby/moby#43472](https://github.com/moby/moby/pull/43472) - [Deprecation notice](../deprecated.md#backing-filesystem-without-d_type-support-for-overlayoverlay2) - Remove the deprecated `overrideKernelCheck` option from the `overlay2` storage driver. [moby/moby#44279](https://github.com/moby/moby/pull/44279) [Deprecation notice](../deprecated.md#support-for-the-overlay2override_kernel_check-storage-option) - Remove support for the deprecated `io.containerd.runtime.v1.linux` OCI runtime. [moby/moby#43695](https://github.com/moby/moby/pull/43695) - Remove LCOW (Linux Containers on Windows). [moby/moby#42451](https://github.com/moby/moby/pull/42451), [moby/moby#42499](https://github.com/moby/moby/pull/42499), [moby/moby#42506](https://github.com/moby/moby/pull/42506), [moby/moby#42511](https://github.com/moby/moby/pull/42511), [moby/moby#42520](https://github.com/moby/moby/pull/42520), [moby/moby#42683](https://github.com/moby/moby/pull/42683), [moby/moby#42684](https://github.com/moby/moby/pull/42684), [moby/moby#42685](https://github.com/moby/moby/pull/42685), [moby/moby#43187](https://github.com/moby/moby/pull/43187) - LCOW was introduced as a technical preview in 17.09 and deprecated in 20.10. - [Deprecation notice](../deprecated.md#linux-containers-on-windows-lcow-experimental) - Remove daemon options related to legacy overlay networks used with standalone Swarm. - Remove `--cluster-xx` options from `dockerd`. [moby/moby#40383](https://github.com/moby/moby/issues/40383) - Remove `host-discovery` and overlay networks with external k/v stores. [moby/moby#42247](https://github.com/moby/moby/pull/42247) - [Deprecation notice](../deprecated.md#classic-swarm-and-overlay-networks-using-cluster-store) - Remove a deprecated `arm` platform fallback. `--platform linux/arm/vY` will now return a error when `arm/vY` isn't available instead of pulling the wrong image. [moby/moby#44414](https://github.com/moby/moby/pull/44414) - Remove the deprecated `SetCustomHTTPHeaders()`, `CustomHTTPHeaders()` options-setters from the Go client API. [moby/moby#42694](https://github.com/moby/moby/pull/42694) - Remove the deprecated `WithDialer()` option-setter from the Go client API. [moby/moby#44022](https://github.com/moby/moby/pull/44022) - Use `WithDialContext()` instead. - Remove the daemon implementation of `opts.QuotedString`. The implementation has moved to the CLI. [moby/moby#43250](https://github.com/moby/moby/pull/43250) - Remove separate daemon ID from trust-key in the daemon, and disable generating the trust-key. [moby/moby#43555](https://github.com/moby/moby/pull/43555) - API: Remove the deprecated `KernelMemory` option from `POST /containers/create` on API version >= 1.42. [moby/moby#43214](https://github.com/moby/moby/pull/43214) - [Deprecation notice](../deprecated.md#kernel-memory-limit) ##### Deprecated - Require Windows Server RS5 / LTSC 2019 (build 17763) as the minimum to run the daemon. [moby/moby#43254](https://github.com/moby/moby/pull/43254) - Deprecate `BuilderSize` in API versions >= 1.42 [moby/moby#42608](https://github.com/moby/moby/pull/42608) - Deprecate `BuildCache.Parent` in favor of the newly introduced `BuildCache.Parents` in API version >= 1.42. [moby/moby#43908](https://github.com/moby/moby/pull/43908) - Deprecate `pkg/urlutil`, moving the implementation to `builder/remotecontext/urlutil`. [moby/moby#43477](https://github.com/moby/moby/pull/43477) ##### Upgrades - Upgrade Go to `1.19.5`. [docker/cli#3958](https://github.com/docker/cli/pull/3958), [moby/moby#44794](https://github.com/moby/moby/pull/44794) - Upgrade `rootlesskit` to `v0.14.4`. [moby/moby#42708](https://github.com/moby/moby/pull/42708) - Upgrade `buildkit` to `v0.10.6`. [moby/moby#43239](https://github.com/moby/moby/pull/43239) - Upgrade `buildx` to `v0.10.2`. [docker/docker-ce-packaging#840](https://github.com/docker/docker-ce-packaging/pull/840) - Upgrade `swarmkit` to `v2.0.0-20230119195359-904c221ac281`. [moby/moby#44858](https://github.com/moby/moby/pull/44858) - Upgrade `containerd` to `v1.6.16`. [moby/moby#44766](https://github.com/moby/moby/pull/44766), [moby/moby#44769](https://github.com/moby/moby/pull/44769), [moby/moby#44881](https://github.com/moby/moby/pull/44881) - Upgrade `runc` to `v1.1.4`. [moby/moby#44039](https://github.com/moby/moby/pull/44039) - Upgrade `hcsshim` `v0.9.6`. [moby/moby#44658](https://github.com/moby/moby/pull/44658) - The `btrfs` storage driver now depends on Linux kernel headers (>= 4.12) instead of headers from btrfs-progs. [moby/moby#44776](https://github.com/moby/moby/pull/44776) ##### Security - Change permissions on container `hostconfig.json` files to `0600` (was `0644`). [moby/moby#41620](https://github.com/moby/moby/pull/41620) - Fix `--seccomp-profile` not accepting `unconfined` and renamed the default seccomp profile to `builtin`. [moby/moby#42481](https://github.com/moby/moby/pull/42481) - Always build with seccomp support, and remove the `seccomp` build tag. [moby/moby#42501](https://github.com/moby/moby/pull/42501) - Add seccomp support on `riscv64`. [moby/moby#43553](https://github.com/moby/moby/pull/43553) - Add support for setting flags passed to `seccomp(2)` in seccomp profiles. [moby/moby#42648](https://github.com/moby/moby/pull/42648) - Refactor seccomp types to reuse runtime-spec, and add support for `ErrnoRet`. [moby/moby#42005](https://github.com/moby/moby/pull/42005) - Add support for `DefaultErrnoRet` in `seccomp` profiles. [moby/moby#42604](https://github.com/moby/moby/pull/42604) - Add an explicit `DefaultErrnoRet` field to the default seccomp profile, with no behavior change. [moby/moby#42649](https://github.com/moby/moby/pull/42649) - Block `socket` with `AF_VSOCK` in the default seccomp profile. [moby/moby#44563](https://github.com/moby/moby/pull/44563) - Re-enable `process_vm_readv` and `process_vm_writev` in the default seccomp profile. [moby/moby#42083](https://github.com/moby/moby/pull/42083) - Add syscalls related to PKU to the default seccomp profile. [moby/moby#43812](https://github.com/moby/moby/pull/43812) - Allow `clock_settime64` with `CAP_SYS_TIME`. [moby/moby#43775](https://github.com/moby/moby/pull/43775) - Allow `bpf` with `CAP_BPF` and `perf_event_open` with `CAP_PERFMON`. [moby/moby#43988](https://github.com/moby/moby/pull/43988) - Explicitly set the `clone3` syscall to return `ENOSYS` in the default seccomp profile, in order to ensure `glibc` will correctly fallback to using `clone`. [moby/moby#42681](https://github.com/moby/moby/pull/42681) ##### Bug fixes and enhancements - Promote `overlay2` to be the default storage driver (`btrfs` and `zfs` are now opt-in). [moby/moby#42661](https://github.com/moby/moby/pull/42661) - Add a loading spinner to the `docker cp` command. [docker/cli#2708](https://github.com/docker/cli/pull/2708) - Deprecate the `ElectAuthServer` function, and made it return the default registry without calling the `GET /info` API endpoint. [docker/cli#2819](https://github.com/docker/cli/pull/2819) - Progress bars are no longer reversed when rolling back Swarm services [docker/cli#2940](https://github.com/docker/cli/pull/2940) - Use `net.JoinHostPort()` to fix formatting with IPv6 addresses [docker/cli#2972](https://github.com/docker/cli/pull/2972) - CLI error messages are now printed to `stderr`. [docker/cli#3044](https://github.com/docker/cli/pull/3044) - Improve performance of `docker info` if a custom `--format` is used that only uses local information. With this change, the CLI only uses the daemon API if it detects that information from the daemon is needed. [docker/cli#3179](https://github.com/docker/cli/pull/3179) - Remove the default value from the `--stop-signal` flag, as it may not reflect the actual default used by the daemon. [docker/cli#3245](https://github.com/docker/cli/pull/3245) - Add Compose schema `3.10` to `docker stack`; allow omitting the `version` field (resulting in `latest`). [docker/cli#3257](https://github.com/docker/cli/pull/3257) - Compose version `3` is now equivalent to `3.x` (latest) in `docker stack`. [docker/cli#3445](https://github.com/docker/cli/pull/3445) - Fix `<Ctrl-c>` hanging on Windows to exit after running a container in non-interactive mode. [docker/cli#3302](https://github.com/docker/cli/pull/3302) - Add relative source paths to the `run` command in the `-v`/`--volume` and `-m`/`--mount` flags. [docker/cli#3469](https://github.com/docker/cli/pull/3469) - `docker exec -t` now sets the console size for the executed process immediately when it's created. [docker/cli#3627](https://github.com/docker/cli/pull/3627) - Update the pretty-print format of `docker info` to provide more details on installed plugins. [docker/cli#3645](https://github.com/docker/cli/pull/3645) - Print warning messages for the `docker context list` and `docker context use` commands when the context is overridden by the environment. [docker/cli#3668](https://github.com/docker/cli/pull/3668) - Add a custom `aliases` annotation that can be used to print all available aliases for a command. [docker/cli#3694](https://github.com/docker/cli/pull/3694) - The CLI no longer creates or updates the CLI configuration file when running `docker context use` and selecting the current context. [docker/cli#3721](https://github.com/docker/cli/pull/3721) - Non-existing contexts are now ignored when running `docker context rm --force`. [docker/cli#3791](https://github.com/docker/cli/pull/3791) - Add the ability to override integers to `0` in Compose files [docker/cli#3812](https://github.com/docker/cli/pull/3812) - SIGINT (`<Ctrl-c>`) now passes through to running containers instead of causing the CLI to exit. [docker/cli#3849](https://github.com/docker/cli/pull/3849) - Improve `docker port CONTAINER` UX by sorting ports before printing. [docker/cli#3892](https://github.com/docker/cli/pull/3892) - API: `GET /containers/{id}/logs` and `POST /containers/{id}/attach` now report which raw-stream format is in use using the `Content-type` response header on API version >= 1.42. [moby/moby#39812](https://github.com/moby/moby/pull/39812) - Set default sandbox size for Windows layers to 127GB, and ensure that the `--storage-opts` flag applies to all storage on Windows. [moby/moby#41636](https://github.com/moby/moby/pull/41636) - Remove the plugin section from the containerd configuration file `(/var/run/docker/containerd/containerd.toml)`. [moby/moby#41675](https://github.com/moby/moby/pull/41675) - Reject `null` manifests during tar import. [moby/moby#41842](https://github.com/moby/moby/pull/41842) - Add shim config for custom runtimes for plugins. [moby/moby#41854](https://github.com/moby/moby/pull/41854) - Container health checks now resume when the daemon is restarted. [moby/moby#41935](https://github.com/moby/moby/pull/41935) - Quota is no longer disabled on cleanup of the `btrfs` driver. [moby/moby#42273](https://github.com/moby/moby/pull/42273) - Host devices that are accessible can now be mounted in `--privileged` rootless containers. [moby/moby#42638](https://github.com/moby/moby/pull/42638) - Fix incorrect handling of `**/foo` recursive wildcard directory patterns in `.dockerignore`. [moby/moby#42676](https://github.com/moby/moby/pull/42676) - Extend `docker import --platform` to allow marking an imported image as a foreign architecture. [moby/moby#43103](https://github.com/moby/moby/pull/43103) - Validation of CPU real-time options is now performed when the daemon starts instead of performing validations for each individual container, allowing startup to fail early. [moby/moby#43131](https://github.com/moby/moby/pull/43131) - Freeze the `namesgenerator` package against new additions. Users will have to be satisfied with the existing 25359 adjective-name combinations. [moby/moby#43210](https://github.com/moby/moby/pull/43210) - API: `containers/{id}/attach/ws` only to streams according by `stdin`, `stdout` and `stderr` parameters on API version >= 1.42. [moby/moby#43322](https://github.com/moby/moby/pull/43322) - Fix UDP traffic in containers not working after the container is restarted under sustained traffic. [moby/moby#43409](https://github.com/moby/moby/pull/43409) - Add support for pulling images with custom amd64 micro-architecture feature levels as supported by the latest versions of Go, GCC, LLVM, and other compiler tools. [moby/moby#43434](https://github.com/moby/moby/pull/43434) - Improve validation of invalid JSON requests in the API. [moby/moby#43463](https://github.com/moby/moby/pull/43463) - Mitigate the impact of slow `exec` starts on health checks. Check timeout now only applies to the duration that the health check command is running. The time it takes to start the command no longer counts against the timeout. [moby/moby#43480](https://github.com/moby/moby/pull/43480) - Console `tty` size is set immediately on creation. [moby/moby#43593](https://github.com/moby/moby/pull/43593), [moby/moby#43622](https://github.com/moby/moby/pull/43622) - Fix `overlay2` mounts not being cleaned up after failed container starts, or daemon shutdown. [moby/moby#43659](https://github.com/moby/moby/pull/43659) - Match manifest list resolution with `containerd`. [moby/moby#43675](https://github.com/moby/moby/pull/43675) - Skip use of `firewalld` for networking when the daemon is running in rootless mode. [moby/moby#43813](https://github.com/moby/moby/pull/43813) - Custom NAT networks are now re-created after daemon restart if missing on Windows. [moby/moby#43858](https://github.com/moby/moby/pull/43858) - Fix terminating the container health-check process when it times out. [moby/moby#43994](https://github.com/moby/moby/pull/43994) - Fix `live-restore` with restart policies and volume refs. [moby/moby#44237](https://github.com/moby/moby/pull/44237) - API: Only anonymous volumes now pruned by default on API version >= v1.42. Pass the filter `all=true` to prune named volumes in addition to anonymous. [moby/moby#44259](https://github.com/moby/moby/pull/44259) - API: Support concurrent calls on the `GET /system/df` endpoint. [moby/moby#42715](https://github.com/moby/moby/pull/42715) - Improve the reliability of the daemon dumping the stack and exits with code 2 when sent a SIGQUIT. [moby/moby#44831](https://github.com/moby/moby/pull/44831) - Fix a rare deadlock in the daemon caused by buffering of container logs. [moby/moby#44856](https://github.com/moby/moby/pull/44856) - Improve error handling in misc filesystem operations so that the daemon can start on a overlayfs backing filesystem. [moby/moby#44834](https://github.com/moby/moby/pull/44834) - Fix an issue where `--ipc=host` wasn't handled correctly when the daemon is running in rootless mode. [moby/moby#44863](https://github.com/moby/moby/pull/44863) - Fix a long-standing set of issues where stale conntrack entries caused incorrect routing of UDP traffic for containers. [moby/moby#44752](https://github.com/moby/moby/pull/44752) - Fix half-registered containers being listed in the API, as well as a nil pointer de-reference and panic caused by using a partially registered container in API calls. [moby/moby#44633](https://github.com/moby/moby/pull/44633) - Fix a failure to create the `DOCKER-USER` ip6tables chain. [moby/moby#44845](https://github.com/moby/moby/pull/44845) - Fix a failure to clean up iptables rules when the `ip6tables` command isn't available. [moby/moby#44727](https://github.com/moby/moby/pull/44727) - Fix an issue where some iptables NAT rules weren't cleaned up after enabling the userland proxy. [moby/moby#44811](https://github.com/moby/moby/pull/44811) - Fix a potentially leaked process in rare situations where cleaning up a failed attempt to start a container was mishandled. [moby/moby#44400](https://github.com/moby/moby/pull/44400) - Fix the `CreatedAt` time of a volume reflecting initialization and not creation. [moby/moby#44725](https://github.com/moby/moby/pull/44725) - Fix an issue where the CLI incorrectly reported an incompatible server instead of an unreachable server in some commands. [docker/cli#3901](https://github.com/docker/cli/pull/3901), [docker/cli#3904](https://github.com/docker/cli/pull/3904) - Fix broken completion of volumes in Zsh. [docker/cli#2998](https://github.com/docker/cli/pull/2998) - Improve output of `docker context` when an invalid context is present. [docker/cli#3847](https://github.com/docker/cli/pull/3847) - Remove ANSI decoration of CLI help annotations when the output isn't a TTY, and added a newline for readability. [docker/cli#3973](https://github.com/docker/cli/pull/3973) - Add `docker container remove` as an alias for `docker container rm`. [docker/cli#3986](https://github.com/docker/cli/pull/3986) ### [`v20.10.27`](https://github.com/moby/moby/releases/tag/v20.10.27) [Compare Source](https://github.com/docker/docker/compare/v20.10.26...v20.10.27) #### v20.10.27 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 20.10.27 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.27) - [moby/moby, 20.10.27 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.27) ##### Bug Fixes and Enhancements - Fix dockerd-rootless-setuptools.sh when user name contains a backslash. https://github.com/moby/moby/pull/46424 - Add `IP_NF_MANGLE` to check-config.sh to the "generally required" list in check-config.sh because it is required by Swarm. https://github.com/moby/moby/pull/46674 - Fix a deadlock in libnetwork which could prevent containers from starting. https://github.com/moby/moby/pull/46693 - Write overlay2 layer metadata atomically. https://github.com/moby/moby/pull/46705 - Support building with Go 1.20. https://github.com/moby/moby/pull/46694 https://github.com/moby/moby/pull/46695 https://github.com/moby/moby/pull/46696 ##### Packaging Updates - Update to go1.20.10, golang/org/x/net v0.17.0. https://github.com/moby/moby/pull/46692 ##### Security - Deny containers access to `/sys/devices/virtual/powercap` by default. This change hardens against [CVE-2020-8694](https://scout.docker.com/v/CVE-2020-8694), [CVE-2020-8695](https://scout.docker.com/v/CVE-2020-8695), and [CVE-2020-12912](https://scout.docker.com/v/CVE-2020-12912), and an attack known as [the PLATYPUS attack](https://platypusattack.com/). For more details, see [advisory](https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p), [commit](https://github.com/moby/moby/commit/81ebe71275768629689a23bc3bca34b3b374a6a6). ### [`v20.10.26`](https://github.com/moby/moby/releases/tag/v20.10.26) [Compare Source](https://github.com/docker/docker/compare/v20.10.25...v20.10.26) #### 20.10.26 For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones: - [docker/cli, 20.10.26 milestone](https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A20.10.26) - [moby/moby, 20.10.26 milestone](https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A20.10.26) ##### Bug Fixes and Enhancements - Support filesystems which do not support extended file attributes with the VFS graph driver. https://github.com/moby/moby/pull/45466 - Fix AppArmor profile docker-default `/proc/sys` rule. https://github.com/moby/moby/pull/45716 - seccomp: always allow `name_to_handle_at(2)`. https://github.com/moby/moby/pull/45835 - Fix an issue which prevented volumes mounted to a live-restored container from being removed. https://github.com/moby/moby/pull/45840 - client: resolve an incompatibility with Go 1.20.6, Go 1.20.7, Go 1.19.11 and Go 1.19.12. https://github.com/moby/moby/pull/45972 - windows: fix `--register-service` when executed from within binary directory. https://github.com/moby/moby/pull/46217 ##### Packaging Updates - Update Go to 1.19.12. https://github.com/moby/moby/pull/46142 - Update containerd to v1.6.22. https://github.com/moby/moby/pull/46105 - Update runc to v1.1.8. https://github.com/moby/moby/pull/46031 - Delete Upstart init scripts and clean up sysvinit. https://github.com/moby/moby/pull/46047 ### [`v20.10.25`](https://github.com/moby/moby/releases/tag/v20.10.25) [Compare Source](https://github.com/docker/docker/compare/v20.10.24...v20.10.25) #### Bug fixes and enhancements - Fix log loss with the AWSLogs log driver https://github.com/moby/moby/pull/45349 - Upgrade github.com/docker/libnetwork https://github.com/moby/moby/pull/45398 - Fix a panic in libnetwork during daemon start https://github.com/moby/libnetwork/pull/2677 - Fix a deadlock which can occur when attaching and detaching containers from a network https://github.com/moby/libnetwork/pull/2674 #### Packaging Updates - Update Go runtime to [1.19.9](https://go.dev/doc/devel/release#go1.19.minor) - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20) - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5) ### [`v20.10.24`](https://github.com/moby/moby/releases/tag/v20.10.24) [Compare Source](https://github.com/docker/docker/compare/v20.10.23...v20.10.24) #### 20.10.24 ##### Bug fixes and enhancements - Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing [CVE-2023-28841](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841), [CVE-2023-28840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840), and [CVE-2023-28842](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842). - A lack of kernel support for encrypted overlay networks now reports as an error. - Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach. - Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the `xt_bpf` kernel module. - Users of Swarm overlay networks should review [GHSA-vwm3-crmr-xfxw](https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw) to ensure that unintentional exposure has not occurred. - Upgrade github.com/containerd/fifo to v1.1.0 to fix a potential panic [moby/moby#45216](https://github.com/moby/moby/pull/45242). - Fix missing Bash completion for installed cli-plugins [docker/cli#4091](https://github.com/docker/cli/pull/4091). ##### Packaging Updates - Update Go runtime to [1.19.7](https://go.dev/doc/devel/release#go1.19.minor). - Update Docker Buildx to [v0.10.4](https://github.com/docker/buildx/releases/tag/v0.10.4). - Update containerd to [v1.6.20](https://github.com/containerd/containerd/releases/tag/v1.6.20). - Update runc to [v1.1.5](https://github.com/opencontainers/runc/releases/tag/v1.1.5). ### [`v20.10.23`](https://github.com/moby/moby/releases/tag/v20.10.23) [Compare Source](https://github.com/docker/docker/compare/v20.10.22...v20.10.23) ##### Bug fixes and enhancements - Fix an issue where `docker build` would fail when using `--add-host=host.docker.internal:host-gateway` with BuildKit enabled [moby/moby#44650](https://github.com/moby/moby/pull/44650). - Revert seccomp: block socket calls to `AF_VSOCK` in default profile [moby/moby#44712](https://github.com/moby/moby/pull/44712). This change, while favorable from a security standpoint, caused a change in behavior for some use-cases. As such, we are reverting it to ensure stability and compatibility for the affected users. However, users of `AF_VSOCK` in containers should recognize that this (special) address family is not currently namespaced in any version of the Linux kernel, and may result in unexpected behavior, like containers communicating directly with host hypervisors. Future releases, will filter `AF_VSOCK`. Users who need to allow containers to communicate over the unnamespaced `AF_VSOCK` will need to turn off seccomp confinement or set a custom seccomp profile. ##### Packaging Updates - Update Docker Compose to [v2.15.1](https://github.com/docker/compose/releases/tag/v2.15.1). - Update Docker Buildx to [v0.10.0](https://github.com/docker/buildx/releases/tag/v0.10.0). - Update containerd (`containerd.io` package) to [v1.6.15](https://github.com/containerd/containerd/releases/tag/v1.6.15). - Update the package versioning format for `docker-compose-cli` to allow distro version updates [docker/docker-ce-packaging#822](https://github.com/docker/docker-ce-packaging/pull/822). - Update Go runtime to [1.18.10](https://go.dev/doc/devel/release#go1.18.minor). </details> <details> <summary>go-git/go-git</summary> ### [`v5.12.0`](https://github.com/go-git/go-git/releases/tag/v5.12.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0) #### What's Changed - git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by [@moranCohen26](https://github.com/moranCohen26) in https://github.com/go-git/go-git/pull/994 - git: Signer: fix usage of crypto.Signer interface by [@wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/1029 - git: Remote, fetch, adds the prune option. by [@juliens](https://github.com/juliens) in https://github.com/go-git/go-git/pull/366 - git: Add crypto.Signer option to CommitOptions. by [@wlynch](https://github.com/wlynch) in https://github.com/go-git/go-git/pull/996 - git: Worktree checkout tag hash id ([#959](https://github.com/go-git/go-git/issues/959)) by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/966 - git: Worktree, Don't panic on empty or root path when checking if it is valid by [@tim775](https://github.com/tim775) in https://github.com/go-git/go-git/pull/1042 - git: Add commit validation for Reset by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1048 - git: worktree_commit, Fix amend commit to apply changes. Fixes [#1024](https://github.com/go-git/go-git/issues/1024) by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1045 - git: Implement Merge function with initial `FastForwardMerge` support by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1044 - plumbing: object, Make first commit visible on logs filtered with filename. Fixes [#191](https://github.com/go-git/go-git/issues/191) by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1036 - plumbing: no panic in printStats function. Fixes [#177](https://github.com/go-git/go-git/issues/177) by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/971 - plumbing: object, Optimize logging with file. by [@onee-only](https://github.com/onee-only) in https://github.com/go-git/go-git/pull/1046 - plumbing: object, check legitimacy in (\*Tree).Encode by [@niukuo](https://github.com/niukuo) in https://github.com/go-git/go-git/pull/967 - plumbing: format/gitattributes, close file in ReadAttributesFile by [@prskr](https://github.com/prskr) in https://github.com/go-git/go-git/pull/1018 - plumbing: check setAuth error. Fixes [#185](https://github.com/go-git/go-git/issues/185) by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/969 - plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by [@Jerry-yz](https://github.com/Jerry-yz) in https://github.com/go-git/go-git/pull/987 - utils: merkletrie, calculate filesystem node's hash lazily. by [@candid82](https://github.com/candid82) in https://github.com/go-git/go-git/pull/825 - utils: update comment in node.go's Hash() by [@codablock](https://github.com/codablock) in https://github.com/go-git/go-git/pull/992 - \_example: fix 404 link and added ssh-agent clone link by [@grinish21](https://github.com/grinish21) in https://github.com/go-git/go-git/pull/1022 - \_example: checkout-branch example by [@dlambda](https://github.com/dlambda) in https://github.com/go-git/go-git/pull/446 - \_example: example for git clone using ssh-agent by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/998 #### New Contributors - [@candid82](https://github.com/candid82) made their first contribution in https://github.com/go-git/go-git/pull/825 - [@codablock](https://github.com/codablock) made their first contribution in https://github.com/go-git/go-git/pull/992 - [@Jerry-yz](https://github.com/Jerry-yz) made their first contribution in https://github.com/go-git/go-git/pull/987 - [@wlynch](https://github.com/wlynch) made their first contribution in https://github.com/go-git/go-git/pull/996 - [@moranCohen26](https://github.com/moranCohen26) made their first contribution in https://github.com/go-git/go-git/pull/994 - [@grinish21](https://github.com/grinish21) made their first contribution in https://github.com/go-git/go-git/pull/1022 - [@prskr](https://github.com/prskr) made their first contribution in https://github.com/go-git/go-git/pull/1018 - [@dlambda](https://github.com/dlambda) made their first contribution in https://github.com/go-git/go-git/pull/446 - [@juliens](https://github.com/juliens) made their first contribution in https://github.com/go-git/go-git/pull/366 - [@onee-only](https://github.com/onee-only) made their first contribution in https://github.com/go-git/go-git/pull/1036 - [@tim775](https://github.com/tim775) made their first contribution in https://github.com/go-git/go-git/pull/1042 - [@niukuo](https://github.com/niukuo) made their first contribution in https://github.com/go-git/go-git/pull/967 - [@avoidalone](https://github.com/avoidalone) made their first contribution in https://github.com/go-git/go-git/pull/1047 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0 ### [`v5.11.0`](https://github.com/go-git/go-git/releases/tag/v5.11.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0) #### What's Changed - git: validate reference names ([#929](https://github.com/go-git/go-git/issues/929)) by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/950 - git: stop iterating at oldest shallow when pulling. Fixes [#305](https://github.com/go-git/go-git/issues/305) by [@dhoizner](https://github.com/dhoizner) in https://github.com/go-git/go-git/pull/939 - plumbing: object, enable renames in getFileStatsFromFilePatches by [@djmoch](https://github.com/djmoch) in https://github.com/go-git/go-git/pull/941 - storage: filesystem, Add option to set a specific FS for alternates by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/953 - Align worktree validation with upstream and remove build warnings by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/958 #### New Contributors - [@dhoizner](https://github.com/dhoizner) made their first contribution in https://github.com/go-git/go-git/pull/939 - [@djmoch](https://github.com/djmoch) made their first contribution in https://github.com/go-git/go-git/pull/941 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0 ### [`v5.10.1`](https://github.com/go-git/go-git/releases/tag/v5.10.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1) #### What's Changed - Worktree, ignore ModeSocket files by [@steiler](https://github.com/steiler) in https://github.com/go-git/go-git/pull/930 - git: add tracer package by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/916 - remote: Flip clause for fast-forward only check by [@adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/875 - plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes [#900](https://github.com/go-git/go-git/issues/900) by [@anandf](https://github.com/anandf) in https://github.com/go-git/go-git/pull/901 - plumbing: uppload-server-info, implement upload-server-info by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/896 - plumbing: optimise memory consumption for filesystem storage by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/799 - plumbing: format/packfile, Refactor patch delta by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/908 - plumbing: fix empty uploadpack request error by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/932 - plumbing: transport/git, Improve tests error message by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/752 - plumbing: format/pktline, Respect pktline error-line errors by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/936 - utils: remove ioutil.Pipe and use std library io.Pipe by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/922 - utils: move trace to utils by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/931 - cli: separate go module for cli by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/914 - build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/887 - build: bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/891 - build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/888 - build: bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/890 - build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/907 - build: bump golang.org/x/text from 0.13.0 to 0.14.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/906 - build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/917 - build: bump golang.org/x/net from 0.17.0 to 0.18.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/918 #### New Contributors - [@anandf](https://github.com/anandf) made their first contribution in https://github.com/go-git/go-git/pull/901 - [@steiler](https://github.com/steiler) made their first contribution in https://github.com/go-git/go-git/pull/930 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1 ### [`v5.10.0`](https://github.com/go-git/go-git/releases/tag/v5.10.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0) #### What's Changed - PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/782 - Worktree, apply ProxyOption on Pull by [@nodivbyzero](https://github.com/nodivbyzero) in https://github.com/go-git/go-git/pull/840 - Repository: add clone --shared feature by [@enverbisevac](https://github.com/enverbisevac) in https://github.com/go-git/go-git/pull/860 - build: Add github workflow to check commit message format by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/867 - Improve handling of remote errors by [@makkes](https://github.com/makkes) in https://github.com/go-git/go-git/pull/866 - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/873 - plumbing: commitgraph, Add generation v2 support by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/869 - plumbing: protocol/packp, Add validation for decodeLine by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/868 - plumbing: parse the encoding header of the commit object by [@liwenqiu](https://github.com/liwenqiu) in https://github.com/go-git/go-git/pull/761 - plumbing: commitgraph, allow SHA256 commit-graphs by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/853 - plumbing: commitgraph, Allow reading commit-graph chains by [@zeripath](https://github.com/zeripath) in https://github.com/go-git/go-git/pull/854 - plumbing/object: Support mergetag in merge commits by [@adityasaky](https://github.com/adityasaky) in https://github.com/go-git/go-git/pull/847 #### New Contributors - [@nodivbyzero](https://github.com/nodivbyzero) made their first contribution in https://github.com/go-git/go-git/pull/840 - [@adityasaky](https://github.com/adityasaky) made their first contribution in https://github.com/go-git/go-git/pull/847 - [@hezhizhen](https://github.com/hezhizhen) made their first contribution in https://github.com/go-git/go-git/pull/836 - [@0x34d](https://github.com/0x34d) made their first contribution in https://github.com/go-git/go-git/pull/855 - [@liwenqiu](https://github.com/liwenqiu) made their first contribution in https://github.com/go-git/go-git/pull/761 - [@enverbisevac](https://github.com/enverbisevac) made their first contribution in https://github.com/go-git/go-git/pull/860 - [@makkes](https://github.com/makkes) made their first contribution in https://github.com/go-git/go-git/pull/866 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.9.0...v5.10.0 ### [`v5.9.0`](https://github.com/go-git/go-git/releases/tag/v5.9.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0) #### What's Changed - git: worktree: add Amend option to CommitOptions by [@john-cai](https://github.com/john-cai) in https://github.com/go-git/go-git/pull/438 - git: worktree, reset ignored files that are part of the worktree: Fixes [#819](https://github.com/go-git/go-git/issues/819) by [@daolis](https://github.com/daolis) in https://github.com/go-git/go-git/pull/821 - plumbing: Do not swallow http message coming from VCS providers by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/835 - plumbing: transport, handle IPv6 while parsing endpoint. Fixes [#740](https://github.com/go-git/go-git/issues/740) by [@ninedraft](https://github.com/ninedraft) in https://github.com/go-git/go-git/pull/820 - \*: update goproxy dependency to fix CVE-2023-37788 vulnerability by [@svghadi](https://github.com/svghadi) in https://github.com/go-git/go-git/pull/832 - \*: bump dependencies and Go to 1.19 by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/837 #### New Contributors - [@svghadi](https://github.com/svghadi) made their first contribution in https://github.com/go-git/go-git/pull/832 - [@daolis](https://github.com/daolis) made their first contribution in https://github.com/go-git/go-git/pull/821 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.1...v5.9.0 ### [`v5.8.1`](https://github.com/go-git/go-git/releases/tag/v5.8.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1) #### What's Changed - \*: Bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/815 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.8.0...v5.8.1 ### [`v5.8.0`](https://github.com/go-git/go-git/releases/tag/v5.8.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.7.0...v5.8.0) #### What's Changed - git: Fix fetching after shallow clone. Fixes [#305](https://github.com/go-git/go-git/issues/305) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/778 - git: enable fetch with unqualified references by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/762 - git: don't add to want if exists, shallow and depth 1 by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/763 - git: Clone HEAD should not force master. Fixes [#363](https://github.com/go-git/go-git/issues/363) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/758 - git: fix the issue with submodules having the SCP style URL fail due to the wrong URL parsing by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/756 - git: add a clone option to allow for shallow cloning of submodules by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/765 - worktree: minor speedup for `doAddDirectory` by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/702 - \_examples: Remove wrong comment by [@pascal-hofmann](https://github.com/pascal-hofmann) in https://github.com/go-git/go-git/pull/357 - \*: Handle paths starting with tilde by [@ricci2511](https://github.com/ricci2511) in https://github.com/go-git/go-git/pull/808 - \*: Handle paths starting with ~Username by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/809 - storage: filesystem/dotgit, add support for tmp_objdir prefix by [@L11R](https://github.com/L11R) in https://github.com/go-git/go-git/pull/812 - plumbing: gitignore, replace user dir in path by [@Jleagle](https://github.com/Jleagle) in https://github.com/go-git/go-git/pull/772 - plumbing: gitignore, fix incorrect parsing. Fixes [#500](https://github.com/go-git/go-git/issues/500) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/781 - plumbing: http, Fix empty repos on Git v2.41+ by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/802 - plumbing: packp, A request is not empty if it contains shallows. Fixes [#328](https://github.com/go-git/go-git/issues/328) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/792 - plumbing: blame, Complete rewrite. Fixes [#603](https://github.com/go-git/go-git/issues/603) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/789 - plumbing: gitignore, Allow gitconfig to contain a gitignore relative to any user home. Fixes [#578](https://github.com/go-git/go-git/issues/578) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/785 #### New Contributors - [@Jleagle](https://github.com/Jleagle) made their first contribution in https://github.com/go-git/go-git/pull/772 - [@pascal-hofmann](https://github.com/pascal-hofmann) made their first contribution in https://github.com/go-git/go-git/pull/357 - [@ricci2511](https://github.com/ricci2511) made their first contribution in https://github.com/go-git/go-git/pull/808 - [@L11R](https://github.com/L11R) made their first contribution in https://github.com/go-git/go-git/pull/812 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.7.0...v5.7.1 ### [`v5.7.0`](https://github.com/go-git/go-git/releases/tag/v5.7.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0) #### What's Changed - \*: Add support for initializing SHA256 repositories by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/707 - git: add mirror clone option by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/735 - git: Add support to ls-remote with peeled references. Fixes [#749](https://github.com/go-git/go-git/issues/749) by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/750 - git: fix cloning with branch name by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/755 - git: Worktree, add check to see if file already checked in. Fixes [#718](https://github.com/go-git/go-git/issues/718) by [@cbbm142](https://github.com/cbbm142) in https://github.com/go-git/go-git/pull/719 - git: Worktree, git grep bare repositories by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/728 - git: Add Depth to SubmoduleUpdateOptions by [@matejrisek](https://github.com/matejrisek) in https://github.com/go-git/go-git/pull/754 - git: Testing, Fix tests not cleaning temp folders by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/769 - git: remote, add support for a configurable timeout. by [@andrewpollock](https://github.com/andrewpollock) in https://github.com/go-git/go-git/pull/753 - git: Allow Initial Branch to be configurable by [@techknowlogick](https://github.com/techknowlogick) in https://github.com/go-git/go-git/pull/764 - storage: filesystem/dotgit, Improve load packed-refs by [@fcharlie](https://github.com/fcharlie) in https://github.com/go-git/go-git/pull/743 - storage: filesystem, Populate index before use. Fixes [#148](https://github.com/go-git/go-git/issues/148) by [@AriehSchneier](https://github.com/AriehSchneier) in https://github.com/go-git/go-git/pull/722 - plumbing: resolve non-external delta references by [@ZauberNerd](https://github.com/ZauberNerd) in https://github.com/go-git/go-git/pull/485 - plumbing/transport: fix regression in scp-like match by [@jotadrilo](https://github.com/jotadrilo) in https://github.com/go-git/go-git/pull/715 - plumbing/transport: Add support for custom proxy settings by [@aryan9600](https://github.com/aryan9600) in https://github.com/go-git/go-git/pull/744 - \*: small fixes across the codebase by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/770 - \*: bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/776 - \*: bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/748 - \*: bump Go version to 1.18 on go.mod by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/774 - \*: add Codeql workflow and bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/775 - ci: fix upstream git build for master branch by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/739 #### New Contributors - [@ZauberNerd](https://github.com/ZauberNerd) made their first contribution in https://github.com/go-git/go-git/pull/485 - [@jotadrilo](https://github.com/jotadrilo) made their first contribution in https://github.com/go-git/go-git/pull/715 - [@fcharlie](https://github.com/fcharlie) made their first contribution in https://github.com/go-git/go-git/pull/743 - [@AriehSchneier](https://github.com/AriehSchneier) made their first contribution in https://github.com/go-git/go-git/pull/755 - [@cbbm142](https://github.com/cbbm142) made their first contribution in https://github.com/go-git/go-git/pull/719 - [@aryan9600](https://github.com/aryan9600) made their first contribution in https://github.com/go-git/go-git/pull/744 - [@matejrisek](https://github.com/matejrisek) made their first contribution in https://github.com/go-git/go-git/pull/754 - [@andrewpollock](https://github.com/andrewpollock) made their first contribution in https://github.com/go-git/go-git/pull/753 - [@techknowlogick](https://github.com/techknowlogick) made their first contribution in https://github.com/go-git/go-git/pull/764 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.1...v5.7.0 ### [`v5.6.1`](https://github.com/go-git/go-git/releases/tag/v5.6.1) [Compare Source](https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1) #### What's Changed - plumbing/transport: don't use the `firstErrLine` when it is empty by [@ThinkChaos](https://github.com/ThinkChaos) in https://github.com/go-git/go-git/pull/682 - plumbing/transport: ssh, unable to pass a custom HostKeyCallback func by [@aymanbagabas](https://github.com/aymanbagabas) in https://github.com/go-git/go-git/pull/655 - storage/filesystem: dotgit: fix a filesystem race in Refs/walkReferencesTree by [@MichaelMure](https://github.com/MichaelMure) in https://github.com/go-git/go-git/pull/659 - \*: bump golang.org/x/net from 0.2.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/go-git/go-git/pull/684 - \*: bump dependencies by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/697 - \*: fix panic for empty revisions by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/696 - ci: bump GitHub actions, enable go test race detection and stop using developer's GPG keys during test execution by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/701 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.6.0...v5.6.1 ### [`v5.6.0`](https://github.com/go-git/go-git/releases/tag/v5.6.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0) #### What's Changed - Worktree, check for empty parent dirs during Reset (Fixes [#670](https://github.com/go-git/go-git/issues/670)) by [@mbohy](https://github.com/mbohy) in https://github.com/go-git/go-git/pull/671 - \*: remove need to build with CGO by [@pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/688 - plumbing: support SSH/X509 signed tags by [@hiddeco](https://github.com/hiddeco) in https://github.com/go-git/go-git/pull/690 **Full Changelog**: https://github.com/go-git/go-git/compare/v5.5.2...v5.6.0 </details> <details> <summary>google/uuid</summary> ### [`v1.6.0`](https://github.com/google/uuid/releases/tag/v1.6.0) [Compare Source](https://github.com/google/uuid/compare/v1.5.0...v1.6.0) ##### Features - add Max UUID constant ([#149](https://github.com/google/uuid/issues/149)) ([c58770e](https://github.com/google/uuid/commit/c58770eb495f55fe2ced6284f93c5158a62e53e3)) ##### Bug Fixes - fix typo in version 7 uuid documentation ([#153](https://github.com/google/uuid/issues/153)) ([016b199](https://github.com/google/uuid/commit/016b199544692f745ffc8867b914129ecb47ef06)) - Monotonicity in UUIDv7 ([#150](https://github.com/google/uuid/issues/150)) ([a2b2b32](https://github.com/google/uuid/commit/a2b2b32373ff0b1a312b7fdf6d38a977099698a6)) ### [`v1.5.0`](https://github.com/google/uuid/releases/tag/v1.5.0) [Compare Source](https://github.com/google/uuid/compare/v1.4.0...v1.5.0) ##### Features - Validate UUID without creating new UUID ([#141](https://github.com/google/uuid/issues/141)) ([9ee7366](https://github.com/google/uuid/commit/9ee7366e66c9ad96bab89139418a713dc584ae29)) ### [`v1.4.0`](https://github.com/google/uuid/releases/tag/v1.4.0) [Compare Source](https://github.com/google/uuid/compare/v1.3.1...v1.4.0) ##### Features - UUIDs slice type with Strings() convenience method ([#133](https://github.com/google/uuid/issues/133)) ([cd5fbbd](https://github.com/google/uuid/commit/cd5fbbdd02f3e3467ac18940e07e062be1f864b4)) ##### Fixes - Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior) ### [`v1.3.1`](https://github.com/google/uuid/releases/tag/v1.3.1) [Compare Source](https://github.com/google/uuid/compare/v1.3.0...v1.3.1) ##### Bug Fixes - Use .EqualFold() to parse urn prefixed UUIDs ([#118](https://github.com/google/uuid/issues/118)) ([574e687](https://github.com/google/uuid/commit/574e6874943741fb99d41764c705173ada5293f0)) </details> <details> <summary>moby/buildkit</summary> ### [`v0.13.1`](https://github.com/moby/buildkit/releases/tag/v0.13.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.13.0...v0.13.1) buildkit 0.13.1 Welcome to the 0.13.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Fix handling of deleted blobs when importing cache from Github Actions cache backend [#4771](https://github.com/moby/buildkit/issues/4771) - Fix unclean shutdown error on WCOW on Ctrl-C [#4774](https://github.com/moby/buildkit/issues/4774) - Mitigate issue with mounting OpenTelemetry socket in containers in some installations [#4778](https://github.com/moby/buildkit/issues/4778) - Fix parsing `./.git` source path as Git URL. [#4776](https://github.com/moby/buildkit/issues/4776) ##### Dependency Changes This release has no dependency changes Previous release can be found at [v0.13.0](https://github.com/moby/buildkit/releases/tag/v0.13.0) ### [`v0.13.0`](https://github.com/moby/buildkit/releases/tag/v0.13.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.5...v0.13.0) buildkit 0.13.0 Welcome to the 0.13.0 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - CrazyMax - Justin Chadwell - Sebastiaan van Stijn - Akihiro Suda - Jonathan A. Sternberg - Kohei Tokunaga - David Karlsson - Leandro Santiago - Gabriel Adrian Samfira - Chris Goller - Anthony Nandaa - Erik Sipsma - Paweł Gronowski - Jakub Ciolek - Paul "TBBle" Hampson - Brian Goff - Adrien Delorme - Artem Khramov - Nguyễn Đức Chiến - Aaron Lehmann - Dan Duvall - Mark Yen - Milas Bowman - Tristan Stenner - Yan Song - Ahmon Dancy - Alex Couture-Beil - Alex Suraci - Arnaldo Garcia Rincon - Austin Vazquez - Bjorn Neergaard - Brennan Kinney - Bunyamin Dokmetas - Burt Holzman - Dennis Haney - Derek McGowan - Erik McKelvey - Frank Villaro-Dixon - Grégoire Payen de La Garanderie - Guilhem Charles - Ian King'ori - James Carnegie - Kazuyoshi Kato - Reshen - Sascha Hemleb - Tibor Vass - Zhizhen He - fanjiyun.fjy - frankyang - guangwu - liulanzheng - njucjc - omahs - retornam - x893675 - yumemio - yzewei - 蝦米 ##### Notable Changes - Default Dockerfile frontend has been updated to [v1.7.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.7.0) - Experimental Windows Containers support is now available with containerd worker. Windows release artifacts now also contain the `buildkitd.exe` binary. [#3518](https://github.com/moby/buildkit/issues/3518) [#3517](https://github.com/moby/buildkit/issues/3517) [#4494](https://github.com/moby/buildkit/issues/4494) [#4479](https://github.com/moby/buildkit/issues/4479) [#4432](https://github.com/moby/buildkit/issues/4432) [#4387](https://github.com/moby/buildkit/issues/4387) [#4364](https://github.com/moby/buildkit/issues/4364) [#4670](https://github.com/moby/buildkit/issues/4670) [#4692](https://github.com/moby/buildkit/issues/4692) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/windows.md) - Multiple exporters(outputs) can now be specified with a single build request [#4134](https://github.com/moby/buildkit/issues/4134) - New option `rewrite-timestamps` is available when exporting images that with convert files in exported layers according to the epoch time for reproducible builds [#4057](https://github.com/moby/buildkit/issues/4057) [docs](https://github.com/moby/buildkit/blob/v0.13.0/docs/build-repro.md#source_date_epoch) - There is a new bridge network mode `--oci-worker-net=bridge` that can be used to set up CNI bridge networking with no external dependencies for better network isolation of build containers. It is expected that v0.14.0 release will enable this network mode by default. [#4352](https://github.com/moby/buildkit/issues/4352) [#4650](https://github.com/moby/buildkit/issues/4650) [#4539](https://github.com/moby/buildkit/issues/4539) - `SOURCE_DATE_EPOCH` in now not applied to the layer records of the base image to keep them immutable [#4663](https://github.com/moby/buildkit/issues/4663) - Github Actions cache backend now supports defining timeout in case the service gets rate-limited [#4702](https://github.com/moby/buildkit/issues/4702) - Gateway API has a new method `ResolveSourceMeta` that will replace the previous `ResolveImageConfig` method. The new method works with all LLB source types, not just images, and correctly handles policy conversions between sources. [#4563](https://github.com/moby/buildkit/issues/4563) [#4647](https://github.com/moby/buildkit/issues/4647) - When using host networking, local host DNS routes can also be used instead of the default [#4524](https://github.com/moby/buildkit/issues/4524) - Changing cache mount's ID property does not invalidate cache for the build step anymore [#4585](https://github.com/moby/buildkit/issues/4585) - Basic metrics support has been added via OpenTelemetry and Prometheus [#4460](https://github.com/moby/buildkit/issues/4460) - Token cache is no longer shared between parallel push requests [#3592](https://github.com/moby/buildkit/issues/3592) - Update insecure registry fallback logic to only fallback with previous host [#4613](https://github.com/moby/buildkit/issues/4613) - Build secrets can now avoid `noexec` mount restrictions if file mode set execution bit [#4670](https://github.com/moby/buildkit/issues/4670) - GRPC socket for OpenTelemetry tracing now defaults to runtime directory path [#4078](https://github.com/moby/buildkit/issues/4078) [#4619](https://github.com/moby/buildkit/issues/4619) - LLB API now has new options to directly control how different mounts for container steps are cached [#4624](https://github.com/moby/buildkit/issues/4624) - Cancellation and timeout errors should now contain better stacktraces on `--debug` mode [#4587](https://github.com/moby/buildkit/issues/4587) [#4457](https://github.com/moby/buildkit/issues/4457) - Edge case of empty multiplatform build result does not generate errors anymore [#4526](https://github.com/moby/buildkit/issues/4526) - Prune command now avoids taking database lock for a long time if deletion takes too much time [#4413](https://github.com/moby/buildkit/issues/4413) - Healthcheck service has been added to Control API [#4145](https://github.com/moby/buildkit/issues/4145) - Buildctl has new `quiet` and `rawjson` progress mode [#4213](https://github.com/moby/buildkit/issues/4213) [#4113](https://github.com/moby/buildkit/issues/4113) - Buildctl has new `--debug-json-cache-metrics` debug option [#4464](https://github.com/moby/buildkit/issues/4464) - Buildctl now supports `--registry-auth-tlscontext` flag for controlling the client authentication requests [#4420](https://github.com/moby/buildkit/issues/4420) [#4211](https://github.com/moby/buildkit/issues/4211) - Buildctl now propagates `SOURCE_DATE_EPOCH` to build arg automatically if it is defined [#4231](https://github.com/moby/buildkit/issues/4231) - LLB client now allows exposing local sources via `FS` interface instead of local path [#4094](https://github.com/moby/buildkit/issues/4094) - Ensure only one platform is pulled on resolving image config, even if multiple match [#4311](https://github.com/moby/buildkit/issues/4311) - Rootless version supports new `--detach-netns` mode [#4546](https://github.com/moby/buildkit/issues/4546) - Update default CNI config path for rootless mode to `~/.config/buildkit/cni.json` [#4547](https://github.com/moby/buildkit/issues/4547) - Ensure correct pinned commit is checked out if tags that have same path components [#4473](https://github.com/moby/buildkit/issues/4473) - Exporting caches for results with no layers is now skipped in OCI structures [#4336](https://github.com/moby/buildkit/issues/4336) - New debugging options have been added to the scheduler component [#4410](https://github.com/moby/buildkit/issues/4410) - Improve error messages on `StatFile` requests [#4321](https://github.com/moby/buildkit/issues/4321) - Daemon logs can now be exported in JSON format [#4044](https://github.com/moby/buildkit/issues/4044) - Qemu emulation for loongarch64 is now detected if available [#4392](https://github.com/moby/buildkit/issues/4392) - Number of log lines per build step on TTY mode can now be configured with `BUILDKIT_TTY_LOG_LINES` [#4284](https://github.com/moby/buildkit/issues/4284) - Empty `OnBuild` value is now omitted from image config [#4648](https://github.com/moby/buildkit/issues/4648) - Fixes for bridge networking on Rootless mode [#4655](https://github.com/moby/buildkit/issues/4655) - Fix possible "missing lease requirement" error on canceling one of parallel exports [#4529](https://github.com/moby/buildkit/issues/4529) - Fix file permissions error if `ADD <tar.gz>` used with User namespace [#4712](https://github.com/moby/buildkit/issues/4712) - Fix possible permission error when using custom frontends with User namespace on certain systems [#4714](https://github.com/moby/buildkit/issues/4714) - Fixes for merging parallel build steps that generate the same cache keys [#4559](https://github.com/moby/buildkit/issues/4559) [#4285](https://github.com/moby/buildkit/issues/4285) - Fix processing result map in LLB API if the evaluate option is set to true [#4544](https://github.com/moby/buildkit/issues/4544) - Fix hardlink issue with whiteout deletes in the merge snapshotter [#4516](https://github.com/moby/buildkit/issues/4516) - Fix issue with caching multiple mounts originating from the same source [#4270](https://github.com/moby/buildkit/issues/4270) [#4281](https://github.com/moby/buildkit/issues/4281) - Fix possible panic condition on deleting history records [#4451](https://github.com/moby/buildkit/issues/4451) - Fix issue where same source image layer chains could end up in the provenance attestation multiple times [#4433](https://github.com/moby/buildkit/issues/4433) - Fix possible pull error caused by previous cache [#4428](https://github.com/moby/buildkit/issues/4428) - Fix possible data race on transfer progress handling [#4726](https://github.com/moby/buildkit/issues/4726) - Fix issues where session messages could grow bigger than maximum message size when transferring SBOM to client [#4313](https://github.com/moby/buildkit/issues/4313) - Fix issue where specific build steps could drop progress messages [#4347](https://github.com/moby/buildkit/issues/4347) - Fix possible wrong usage statitics in merged snapshotters [#4389](https://github.com/moby/buildkit/issues/4389) - Fix possible storage leak for compression variants [#4353](https://github.com/moby/buildkit/issues/4353) - Fix handling of certain SSH Git URLs [#4326](https://github.com/moby/buildkit/issues/4326) - Fix possible missing blob error on mapping files to SBOM packages [#4210](https://github.com/moby/buildkit/issues/4210) - Fix diffing layers when custom Gzip compression level is set [#4275](https://github.com/moby/buildkit/issues/4275) - Fix possible panic with stargz snapshotter [#4187](https://github.com/moby/buildkit/issues/4187) - Fix generation of cache checksums for Merge and Diff operations [#4192](https://github.com/moby/buildkit/issues/4192) - Fix possible negative pull time in progressbar on parallel pulls [#4183](https://github.com/moby/buildkit/issues/4183) - Fix handling of missing files in LLB File remove API [#4051](https://github.com/moby/buildkit/issues/4051) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) -> [`ced1acd`](https://github.com/moby/buildkit/commit/ced1acdcaa24) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) -> [`8075edf`](https://github.com/moby/buildkit/commit/8075edf89bb0) - **github.com/Microsoft/hcsshim** v0.10.0-rc.8 -> v0.11.4 - **github.com/aws/aws-sdk-go-v2** v1.17.6 -> v1.24.1 - **github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream** v1.4.10 -> v1.5.4 - **github.com/aws/aws-sdk-go-v2/config** v1.18.16 -> v1.26.6 - **github.com/aws/aws-sdk-go-v2/credentials** v1.13.16 -> v1.16.16 - **github.com/aws/aws-sdk-go-v2/feature/ec2/imds** v1.12.24 -> v1.14.11 - **github.com/aws/aws-sdk-go-v2/feature/s3/manager** v1.11.56 -> v1.15.15 - **github.com/aws/aws-sdk-go-v2/internal/configsources** v1.1.30 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/internal/endpoints/v2** v2.4.24 -> v2.5.10 - **github.com/aws/aws-sdk-go-v2/internal/ini** v1.3.31 -> v1.7.3 - **github.com/aws/aws-sdk-go-v2/internal/v4a** v1.0.22 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding** v1.9.11 -> v1.10.4 - **github.com/aws/aws-sdk-go-v2/service/internal/checksum** v1.1.25 -> v1.2.10 - **github.com/aws/aws-sdk-go-v2/service/internal/presigned-url** v1.9.24 -> v1.10.10 - **github.com/aws/aws-sdk-go-v2/service/internal/s3shared** v1.13.24 -> v1.16.10 - **github.com/aws/aws-sdk-go-v2/service/s3** v1.30.6 -> v1.48.1 - **github.com/aws/aws-sdk-go-v2/service/sso** v1.12.5 -> v1.18.7 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 -> v1.21.7 - **github.com/aws/aws-sdk-go-v2/service/sts** v1.18.6 -> v1.26.7 - **github.com/aws/smithy-go** v1.13.5 -> v1.19.0 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.2.1 - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd** v1.7.2 -> v1.7.13 - **github.com/containerd/continuity** v0.4.1 -> v0.4.3 - **github.com/containerd/fuse-overlayfs-snapshotter** v1.0.2 -> v1.0.8 - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nydus-snapshotter** v0.8.2 -> v0.13.7 - **github.com/containerd/stargz-snapshotter** v0.14.3 -> v0.15.1 - **github.com/containerd/stargz-snapshotter/estargz** v0.14.3 -> v0.15.1 - **github.com/containernetworking/plugins** v1.4.0 ***new*** - **github.com/distribution/reference** v0.5.0 ***new*** - **github.com/docker/cli** v24.0.4 -> v25.0.3 - **github.com/docker/docker** [`8e51b8b`](https://github.com/moby/buildkit/commit/8e51b8b59cb8) -> v25.0.3 - **github.com/docker/docker-credential-helpers** v0.7.0 -> v0.8.0 - **github.com/docker/go-connections** v0.4.0 -> v0.5.0 - **github.com/felixge/fgprof** v0.9.3 ***new*** - **github.com/felixge/httpsnoop** v1.0.3 -> v1.0.4 - **github.com/go-logr/logr** v1.2.3 -> v1.3.0 - **github.com/golang-jwt/jwt/v4** v4.4.2 -> v4.5.0 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/pprof** [`e72429f`](https://github.com/moby/buildkit/commit/e72429f035bd) ***new*** - **github.com/google/uuid** v1.3.0 -> v1.5.0 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 -> v2.16.0 - **github.com/hanwen/go-fuse/v2** v2.2.0 -> v2.4.0 - **github.com/hashicorp/go-retryablehttp** v0.7.2 -> v0.7.5 - **github.com/klauspost/compress** v1.17.2 -> v1.17.4 - **github.com/moby/docker-image-spec** v1.3.1 ***new*** - **github.com/moby/patternmatcher** v0.5.0 -> v0.6.0 - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.1 - **github.com/moby/sys/user** v0.1.0 ***new*** - **github.com/moby/term** v0.5.0 ***new*** - **github.com/opencontainers/image-spec** v1.1.0-rc3 -> v1.1.0-rc5 - **github.com/opencontainers/runtime-spec** v1.1.0-rc.2 -> v1.1.0 - **github.com/pkg/profile** v1.5.0 -> v1.7.0 - **github.com/prometheus/client_golang** v1.14.0 -> v1.17.0 - **github.com/prometheus/client_model** v0.3.0 -> v0.5.0 - **github.com/prometheus/common** v0.42.0 -> v0.44.0 - **github.com/prometheus/procfs** v0.9.0 -> v0.12.0 - **github.com/serialx/hashring** [`8b29126`](https://github.com/moby/buildkit/commit/8b2912629002) -> [`22c0c7a`](https://github.com/moby/buildkit/commit/22c0c7ab6b1b) - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/spdx/tools-golang** v0.5.1 -> v0.5.3 - **github.com/stretchr/testify** v1.8.3 -> v1.8.4 - **github.com/tonistiigi/fsutil** [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb) -> [`7525a1a`](https://github.com/moby/buildkit/commit/7525a1af2bb5) - **github.com/tonistiigi/go-actions-cache** [`0bdeb6e`](https://github.com/moby/buildkit/commit/0bdeb6e1eac7) -> [`a0b64f3`](https://github.com/moby/buildkit/commit/a0b64f338598) - **github.com/urfave/cli** v1.22.12 -> v1.22.14 - **github.com/vbatts/tar-split** v0.11.2 -> v0.11.5 - **github.com/vishvananda/netlink** v1.2.1-beta.2 ***new*** - **github.com/vishvananda/netns** v0.0.4 ***new*** - **go.etcd.io/bbolt** v1.3.7 -> v1.3.9 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.40.0 -> v0.46.1 - **go.opentelemetry.io/otel** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/jaeger** v1.14.0 -> v1.17.0 - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp** v0.42.0 ***new*** - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/exporters/prometheus** v0.42.0 ***new*** - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/otel/sdk/metric** v1.21.0 ***new*** - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.21.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.0.0 - **google.golang.org/genproto** [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4) -> [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) - **google.golang.org/genproto/googleapis/api** [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`49dd2c1`](https://github.com/moby/buildkit/commit/49dd2c1f3d0b) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.59.0 Previous release can be found at [v0.12.5](https://github.com/moby/buildkit/releases/tag/v0.12.5) ### [`v0.12.5`](https://github.com/moby/buildkit/releases/tag/v0.12.5) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.4...v0.12.5) https://hub.docker.com/r/moby/buildkit ##### Notable changes: ##### This release contains following security fixes: - Runc has been updated to v1.1.12 addressing https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv - Fix possible race condition with accessing subpaths from cache mounts https://github.com/moby/buildkit/security/advisories/GHSA-m3r6-h7wv-7xxv - Fix possible host system access from mount stub cleaner https://github.com/moby/buildkit/security/advisories/GHSA-4v98-7qmw-rqr8 - Fix interactive containers API validation against entitlements https://github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g - Fix possible panic when incorrect parameters sent from frontend https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx ### [`v0.12.4`](https://github.com/moby/buildkit/releases/tag/v0.12.4) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.3...v0.12.4) Welcome to the 0.12.4 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible concurrent map access on remote cache export [#4346](https://github.com/moby/buildkit/issues/4346) - Fix hang on debug server listener [#4361](https://github.com/moby/buildkit/issues/4361) - Fix possible deadlock in History API under high number of parallel builds [#4362](https://github.com/moby/buildkit/issues/4362) - Fix possible panic on handling deleted records in History API [#4451](https://github.com/moby/buildkit/issues/4451) - Fix possible data corruption in zstd library [#4372](https://github.com/moby/buildkit/issues/4372) ### [`v0.12.3`](https://github.com/moby/buildkit/releases/tag/v0.12.3) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.2...v0.12.3) Welcome to the 0.12.3 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible duplicate source files in provenance attestation for chained builds [#4190](https://github.com/moby/buildkit/issues/4190) - Fix possible negative step time in progressbar for step shared with other build request [#4183](https://github.com/moby/buildkit/issues/4183) - Fix properly closing history and cache DB on shutdown to avoid corruption [#4185](https://github.com/moby/buildkit/issues/4185) [#4189](https://github.com/moby/buildkit/issues/4189) - Fix incorrect error handling for invalid HTTP source URLs [#4201](https://github.com/moby/buildkit/issues/4201) - Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. [#4299](https://github.com/moby/buildkit/issues/4299) - Fix possible data race with parallel image config resolves [#4157](https://github.com/moby/buildkit/issues/4157) - Fix regression in v0.12 for clients waiting on buildkitd to become available [#4200](https://github.com/moby/buildkit/issues/4200) - Fix Cgroup NS handling for hosts supporting only CgroupV1 [#4308](https://github.com/moby/buildkit/issues/4308) ### [`v0.12.2`](https://github.com/moby/buildkit/releases/tag/v0.12.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.1...v0.12.2) Welcome to the 0.12.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible discarded network error when exporting result to client [#4117](https://github.com/moby/buildkit/issues/4117) - Avoid unnecessary memory allocations when writing build progress [#4116](https://github.com/moby/buildkit/issues/4116) ### [`v0.12.1`](https://github.com/moby/buildkit/releases/tag/v0.12.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.12.0...v0.12.1) Welcome to the 0.12.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Fix possible goroutine leak in resource monitor for failed containers [#4081](https://github.com/moby/buildkit/issues/4081) - Fix possible tracing socket path length error on some configurations [#3483](https://github.com/moby/buildkit/issues/3483) ### [`v0.12.0`](https://github.com/moby/buildkit/releases/tag/v0.12.0) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.6...v0.12.0) buildkit 0.12.0 Welcome to the 0.12.0 release of buildkit! *This is a pre-release of buildkit* Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Contributors - Tõnis Tiigi - Justin Chadwell - CrazyMax - Sebastiaan van Stijn - Akihiro Suda - Erik Sipsma - Gabriel Adrian Samfira - Kohei Tokunaga - Alex Couture-Beil - Cory Bennett - Brian Goff - Nick Santos - Wei Zhang - Alex Suraci - Alexis Murzeau - Changwei Ge - David Karlsson - Paweł Gronowski - Aaron Lehmann - Jordan Goasdoue - Seiya Miyata - Ben Longo - Jacob Gillespie - Alan Fregtman - Andy Alt - Bertrand Paquet - Chaerim Yeo - Chris Goller - Cory Snider - Dan Duvall - Gabriel - Gahl Saraf - George - Hugo Santos - Ilya Dmitrichenko - Kang, Matthew - Matias Insaurralde - Matt Kang - Nick Miyake - Pranav Pandit - Sertac Ozercan - Vladislav Ivanov - Yan Song - Yurii Rashkovskii - [@ggjulio](https://github.com/ggjulio) - [@chengjoey](https://github.com/chengjoey) - [@lomot](https://github.com/lomot) ##### Notable Changes - Default Dockerfile frontend has been updated to [1.6.0](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.6.0) - Remote cache export/import to the registry now supports OCI image manifest compatible format when setting `image-manifest=true` [#3724](https://github.com/moby/buildkit/issues/3724) - Local and Tar exporters now support `platform-split=false` option to merge all artifacts for multiple platforms to the same directory. [#3161](https://github.com/moby/buildkit/issues/3161) - Provenance attestation can now capture resource usage information for the system and individual build steps. This information can be written to exported attestation by setting `capture-usage=true` attestation option and is set automatically for History API records. This feature depends on CgroupV2, and some fields require kernel configured with `CONFIG_PSI` enabled. [#3860](https://github.com/moby/buildkit/issues/3860) [#3999](https://github.com/moby/buildkit/issues/3999) - `SOURCE_DATE_EPOCH` value for reproducible builds is now set as the creation timestamp when exporting image to containerd image store [#3263](https://github.com/moby/buildkit/issues/3263) - `buildctl` has new `--wait` flag to block RPCs until the connection becomes available [#3586](https://github.com/moby/buildkit/issues/3586) - WCOW support for certain actions has improved [#3783](https://github.com/moby/buildkit/issues/3783) [#3782](https://github.com/moby/buildkit/issues/3782) [#3907](https://github.com/moby/buildkit/issues/3907) [#3906](https://github.com/moby/buildkit/issues/3906) [#3545](https://github.com/moby/buildkit/issues/3545) [#3544](https://github.com/moby/buildkit/issues/3544) [#3516](https://github.com/moby/buildkit/issues/3516) [#3908](https://github.com/moby/buildkit/issues/3908) - Stargz support is out of experimental [#3637](https://github.com/moby/buildkit/issues/3637) - Creating layer blobs now uses deterministic timestamps for whiteout files when Overlay snapshotter is supported for more reproducible builds [#3981](https://github.com/moby/buildkit/issues/3981) - Source policy support now also applies to image config metadata requests. These requests can return a new source reference defined by the policy that the frontend can use in follow-up LLB requests. [#3956](https://github.com/moby/buildkit/issues/3956) [#4014](https://github.com/moby/buildkit/issues/4014) - Sourcemaps in provenance attestations and errors now allow setting the source language name [#3620](https://github.com/moby/buildkit/issues/3620) - File operations are now always platform-independent for better direct cache reuse [#3858](https://github.com/moby/buildkit/issues/3858) - When exporting an image to Containerd image store, unpack logic now works for multi-platform images by unpacking only the native platform by default [#3982](https://github.com/moby/buildkit/issues/3982) [#3983](https://github.com/moby/buildkit/issues/3983) - Cgroup namespace isolation is enabled for containers on supported systems [#4003](https://github.com/moby/buildkit/issues/4003) - New DockerUI package is provided by frontend authors who want to target `docker buildx` flags without the need to copy code from Dockerfile frontend [#3606](https://github.com/moby/buildkit/issues/3606) - Downloading image layers in the exporter can now work in parallel for different platforms [#3984](https://github.com/moby/buildkit/issues/3984) - Zstd compressed layers are now supported also with Docker-style mediatypes [#3968](https://github.com/moby/buildkit/issues/3968) - Secret environment variables can now be set using the interactive container API [#3957](https://github.com/moby/buildkit/issues/3957) - TOML buildkitd config now supports multiple units for storage limits [#3773](https://github.com/moby/buildkit/issues/3773) - gRPC API now enables reflection [#3790](https://github.com/moby/buildkit/issues/3790) - HTTP sources now have better caching for servers that handle `Accept-Encoding` differently for different HTTP methods [#3745](https://github.com/moby/buildkit/issues/3745) [#3788](https://github.com/moby/buildkit/issues/3788) - New `buildctl` commands `debug histories` and `prune-histories` [#3498](https://github.com/moby/buildkit/issues/3498) - Loading SBOM generator image can now be configured with resolve mode parameter [#3446](https://github.com/moby/buildkit/issues/3446) - Gateway frontend source image can now be set with defining named context [#3633](https://github.com/moby/buildkit/issues/3633) - Performance improvements to scanning local files for context upload [#3977](https://github.com/moby/buildkit/issues/3977) - Interactive container API now supports setting container Hostname [#3680](https://github.com/moby/buildkit/issues/3680) - History API now uses a separate Containerd namespace for its objects, fixing some issues when the same blobs are used by image store [#3833](https://github.com/moby/buildkit/issues/3833) - Make files created by Git source more deterministic [#3598](https://github.com/moby/buildkit/issues/3598) - Git source now handles URLs that define subdir and empty reference [#3596](https://github.com/moby/buildkit/issues/3596) - Remote cache export now supports `registry.insecure` option like the Image exporter [#3501](https://github.com/moby/buildkit/issues/3501) - Azure Blob storage cache export supports setting the account name as parameter [#3476](https://github.com/moby/buildkit/issues/3476) - New client APIs for configuring TLS authentication to use system certificates [#3760](https://github.com/moby/buildkit/issues/3760) - Fixes for copying Unicode filenames with local context [#3946](https://github.com/moby/buildkit/issues/3946) [#4009](https://github.com/moby/buildkit/issues/4009) - Fix the issue where some builds could fail with "missing provenance" error [#3945](https://github.com/moby/buildkit/issues/3945) - Fix lazy loaded layers reuse for cache when running parallel builds [#3109](https://github.com/moby/buildkit/issues/3109) - Fix issue with missing GC label for layers when exporting image to containerd image store [#3161](https://github.com/moby/buildkit/issues/3161) - Fix possible progressbar panic on resizing terminal window [#3967](https://github.com/moby/buildkit/issues/3967) - Fix possible "inconsistent graph state" error when running parallel cached, and no-cache builds [#3953](https://github.com/moby/buildkit/issues/3953) - Fix possible zero build step index numbers on progressbar [#3942](https://github.com/moby/buildkit/issues/3942) [#3838](https://github.com/moby/buildkit/issues/3838) - Fix possible "container does not exist" error [#3940](https://github.com/moby/buildkit/issues/3940) - Fix possible "concurrent map read and write" error [#3938](https://github.com/moby/buildkit/issues/3938) - Fix possible issue where the status stream could be missing for History record [#3937](https://github.com/moby/buildkit/issues/3937) - Fix possible data races [#4004](https://github.com/moby/buildkit/issues/4004) [#3994](https://github.com/moby/buildkit/issues/3994) [#4010](https://github.com/moby/buildkit/issues/4010) - Fix OCI layout URIs in provenance attestation [#3918](https://github.com/moby/buildkit/issues/3918) - Fix regression bug in v0.11.x OpenTelemetry trace delegation from the client [#3909](https://github.com/moby/buildkit/issues/3909) - Fix possible deadlock on network error [#3857](https://github.com/moby/buildkit/issues/3857) - Fix filtering out deleted History API records [#3827](https://github.com/moby/buildkit/issues/3827) [#3733](https://github.com/moby/buildkit/issues/3733) - Fix possible build cache reference leak [#3851](https://github.com/moby/buildkit/issues/3851) [#3815](https://github.com/moby/buildkit/issues/3815) - Fix possible FD leak in SSH forwarding [#3848](https://github.com/moby/buildkit/issues/3848) - Fix possible concurrent map access in Client library [#3813](https://github.com/moby/buildkit/issues/3813) - Fixes for Runc container SIGKILL/exit-code handling [#3754](https://github.com/moby/buildkit/issues/3754) [#3765](https://github.com/moby/buildkit/issues/3765) [#3658](https://github.com/moby/buildkit/issues/3658) [#3722](https://github.com/moby/buildkit/issues/3722) - Fix creating `oci-layout` file when exporting uncompressed OCI layout [#3729](https://github.com/moby/buildkit/issues/3729) ##### Dependency Changes - **github.com/AdaLogics/go-fuzz-headers** [`43070de`](https://github.com/moby/buildkit/commit/43070de90fa1) ***new*** - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://github.com/moby/buildkit/commit/5330a85ea652) ***new*** - **github.com/Masterminds/semver/v3** v3.1.0 ***new*** - **github.com/Microsoft/go-winio** v0.5.2 -> v0.6.1 - **github.com/Microsoft/hcsshim** v0.9.6 -> v0.10.0-rc.8 - **github.com/anchore/go-struct-converter** [`c68fdcf`](https://github.com/moby/buildkit/commit/c68fdcfa2092) ***new*** - **github.com/aws/aws-sdk-go-v2** v1.16.3 -> v1.17.6 - **github.com/aws/aws-sdk-go-v2/service/ssooidc** v1.14.5 ***new*** - **github.com/aws/smithy-go** v1.11.2 -> v1.13.5 - **github.com/containerd/cgroups** v1.0.4 -> v1.1.0 - **github.com/containerd/containerd** v1.6.14 -> v1.7.2 - **github.com/containerd/continuity** v0.3.0 -> v0.4.1 - **github.com/containerd/fifo** v1.0.0 -> v1.1.0 - **github.com/containerd/go-cni** v1.1.6 -> v1.1.9 - **github.com/containerd/go-runc** v1.0.0 -> v1.1.0 - **github.com/containerd/nydus-snapshotter** v0.3.1 -> v0.8.2 - **github.com/containerd/stargz-snapshotter** v0.13.0 -> v0.14.3 - **github.com/containerd/ttrpc** v1.1.0 -> v1.2.2 - **github.com/containerd/typeurl/v2** v2.1.1 ***new*** - **github.com/containernetworking/cni** v1.1.1 -> v1.1.2 - **github.com/cyphar/filepath-securejoin** v0.2.3 ***new*** - **github.com/docker/cli** v23.0.0-rc.1 -> v24.0.2 - **github.com/docker/distribution** v2.8.1 -> v2.8.2 - **github.com/docker/docker** v23.0.0-rc.1 -> [`98d3da7`](https://github.com/moby/buildkit/commit/98d3da79ef9c) - **github.com/felixge/httpsnoop** v1.0.2 -> v1.0.3 - **github.com/golang/protobuf** v1.5.2 -> v1.5.3 - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.11.3 ***new*** - **github.com/hanwen/go-fuse/v2** [`f57e95b`](https://github.com/moby/buildkit/commit/f57e95bda82d) -> v2.2.0 - **github.com/hashicorp/go-cleanhttp** v0.5.1 -> v0.5.2 - **github.com/hashicorp/go-retryablehttp** v0.7.1 -> v0.7.2 - **github.com/klauspost/compress** v1.15.12 -> v1.16.3 - **github.com/opencontainers/image-spec** [`02efb9a`](https://github.com/moby/buildkit/commit/02efb9a75ee1) -> v1.1.0-rc3 - **github.com/opencontainers/runc** v1.1.3 -> v1.1.7 - **github.com/opencontainers/runtime-spec** [`1c3f411`](https://github.com/moby/buildkit/commit/1c3f411f0417) -> v1.1.0-rc.2 - **github.com/opencontainers/selinux** v1.10.2 -> v1.11.0 - **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5 - **github.com/prometheus/common** v0.37.0 -> v0.42.0 - **github.com/prometheus/procfs** v0.8.0 -> v0.9.0 - **github.com/spdx/tools-golang** [`d6f5855`](https://github.com/moby/buildkit/commit/d6f58551be3f) -> v0.5.1 - **github.com/stretchr/testify** v1.8.0 -> v1.8.3 - **github.com/tonistiigi/fsutil** [`fb43384`](https://github.com/moby/buildkit/commit/fb433841cbfa) -> [`36ef4d8`](https://github.com/moby/buildkit/commit/36ef4d8c0dbb) - **github.com/tonistiigi/vt100** [`8066bb9`](https://github.com/moby/buildkit/commit/8066bb97264f) -> [`f9a4f7e`](https://github.com/moby/buildkit/commit/f9a4f7ef6531) - **github.com/urfave/cli** v1.22.4 -> v1.22.12 - **go.etcd.io/bbolt** v1.3.6 -> v1.3.7 - **go.opencensus.io** v0.23.0 -> v0.24.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.29.0 -> v0.40.0 - **go.opentelemetry.io/otel** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/jaeger** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/internal/retry** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/metric** v0.27.0 -> v0.37.0 - **go.opentelemetry.io/otel/sdk** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/otel/trace** v1.4.1 -> v1.14.0 - **go.opentelemetry.io/proto/otlp** v0.12.0 -> v0.19.0 - **golang.org/x/mod** v0.9.0 ***new*** - **golang.org/x/tools** v0.7.0 ***new*** - **google.golang.org/genproto** [`7780775`](https://github.com/moby/buildkit/commit/7780775163c4) -> [`7f2fa6f`](https://github.com/moby/buildkit/commit/7f2fa6fef1f4) - **google.golang.org/grpc** v1.50.1 -> v1.53.0 - **kernel.org/pub/linux/libs/security/libcap/cap** v1.2.67 ***new*** - **kernel.org/pub/linux/libs/security/libcap/psx** v1.2.67 ***new*** Previous release can be found at [v0.11.6](https://github.com/moby/buildkit/releases/tag/v0.11.6) ### [`v0.11.6`](https://github.com/moby/buildkit/releases/tag/v0.11.6) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.5...v0.11.6) https://hub.docker.com/r/moby/buildkit Notable changes: - Revert previous signal handling fix to make sure no process leaks happen. The signaling issue will be fixed in the next feature release. https://github.com/moby/buildkit/pull/3757 - Update runc to v1.1.5 for security https://github.com/moby/buildkit/pull/3763 - Update containerd to v1.6.20 . Brings in fix for not writing local user/group names in differ. [#3736](https://github.com/moby/buildkit/issues/3736) - Fix possible "duplicate output 0" error on parallel builds [#3774](https://github.com/moby/buildkit/issues/3774) - Fix token management for servers that don't return proper `IssuedAt` value [#3779](https://github.com/moby/buildkit/issues/3779) - Fix SBOM and provenance processing for certain nil-result cases [#3805](https://github.com/moby/buildkit/issues/3805) ### [`v0.11.5`](https://github.com/moby/buildkit/releases/tag/v0.11.5) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.4...v0.11.5) https://hub.docker.com/r/moby/buildkit ##### Notable changes: - Fix process termination handling to Runc when running interactive processes [#3722](https://github.com/moby/buildkit/issues/3722) - Fix gateway exec tty cleanup on context.Canceled [#3658](https://github.com/moby/buildkit/issues/3658) - Register builds before recording build history to avoid possible timeout error [#3726](https://github.com/moby/buildkit/issues/3726) - Fix performance regression in creating LLB graphs [#3732](https://github.com/moby/buildkit/issues/3732) - Fix sorting of build history records for GC [#3733](https://github.com/moby/buildkit/issues/3733) - Fix an issue where linking builds with providing LLB inputs dropped the original source information for such inputs [#3678](https://github.com/moby/buildkit/issues/3678) - Fix running BuildKit on BottleRocket OS [#3697](https://github.com/moby/buildkit/issues/3697) ### [`v0.11.4`](https://github.com/moby/buildkit/releases/tag/v0.11.4) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.3...v0.11.4) https://hub.docker.com/r/moby/buildkit ##### Notable changes: ##### This release contains two security fixes. - Fix the issue where credentials inlined to Git URLs could end up in provenance attestation https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc - Containerd has been updated to 1.6.18 , fixing issue with supplementary groups not being set up properly https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p [#3651](https://github.com/moby/buildkit/issues/3651) ##### Other updates - Fix possible panic with writing annotations [#3670](https://github.com/moby/buildkit/issues/3670) - Fix possible panic with passing nil frontend input [#3659](https://github.com/moby/buildkit/issues/3659) - Fix file capabilities in merged snapshots by changing chown order [#3671](https://github.com/moby/buildkit/issues/3671) ### [`v0.11.3`](https://github.com/moby/buildkit/releases/tag/v0.11.3) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.2...v0.11.3) Welcome to the 0.11.3 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable Changes - Builtin Dockerfile frontend updated to v1.5.2 - Fix not mounting optional secrets missing from build requests [#3561](https://github.com/moby/buildkit/issues/3561) - Fix an issue with Github cache backend that could cause invalid range requests [#3618](https://github.com/moby/buildkit/issues/3618) - Fix possible cache loading error when loading local cache created by BuildKit releases older than v0.10 [#3605](https://github.com/moby/buildkit/issues/3605) - Fix issues with missing layer metadata in SBOMs in latest releases [#3594](https://github.com/moby/buildkit/issues/3594) - Fix possible "digest not found" error on exporting build results [#3566](https://github.com/moby/buildkit/issues/3566) - Make sure timezones are dropped on handling `SOURCE_DATE_EPOCH` [#3559](https://github.com/moby/buildkit/issues/3559) ##### Dependency Changes - **github.com/containerd/containerd** [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9) -> v1.6.16 Previous release can be found at [v0.11.2](https://github.com/moby/buildkit/releases/tag/v0.11.2) ### [`v0.11.2`](https://github.com/moby/buildkit/releases/tag/v0.11.2) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.1...v0.11.2) Welcome to the 0.11.2 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Update containerd patches to fix regression in handling push errors [#3531](https://github.com/moby/buildkit/issues/3531) - Multiple fixes for History API [#3530](https://github.com/moby/buildkit/issues/3530) - Fix issue with parallel build requests using local cache imports [#3493](https://github.com/moby/buildkit/issues/3493) ##### Dependency Changes - **github.com/containerd/containerd** v1.6.14 -> [`1709cfe`](https://github.com/moby/buildkit/commit/1709cfe273d9) - **github.com/pelletier/go-toml** v1.9.4 -> v1.9.5 Previous release can be found at [v0.11.1](https://github.com/moby/buildkit/releases/tag/v0.11.1) ### [`v0.11.1`](https://github.com/moby/buildkit/releases/tag/v0.11.1) [Compare Source](https://github.com/moby/buildkit/compare/v0.11.0...v0.11.1) Welcome to the 0.11.1 release of buildkit! Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues. ##### Notable changes - Builtin Dockerfile frontend has been updated to [1.5.1](https://github.com/moby/buildkit/releases/tag/dockerfile%2F1.5.1), fixing possible panic in certain warning condition [#3505](https://github.com/moby/buildkit/issues/3505) - Fix possible hang when closing down the SSH forwarding socket in v0.11.0 [#3506](https://github.com/moby/buildkit/issues/3506) - Fix typo in an environment variable used to configure OpenTelemetry endpoints [#3508](https://github.com/moby/buildkit/issues/3508) </details> <details> <summary>opencontainers/image-spec</summary> ### [`v1.1.0`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc6...v1.1.0) Vote Passed `[+7-0]` - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag **Release PR** : https://github.com/opencontainers/image-spec/pull/1161 **Full Changelog**: https://github.com/opencontainers/image-spec/compare/v1.0.2...v1.1.0 Associated Distribution Specification Release - https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.0 ### [`v1.1.0-rc6`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc6) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc5...v1.1.0-rc6) Vote passed \[+6 -0] - https://groups.google.com/a/opencontainers.org/g/dev/c/HOxZlfhr9-o For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1157 ### [`v1.1.0-rc5`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc5) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc4...v1.1.0-rc5) For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1109 Vote - https://groups.google.com/a/opencontainers.org/g/dev/c/KIwyzExcjZ8 ### [`v1.1.0-rc4`](https://github.com/opencontainers/image-spec/releases/tag/v1.1.0-rc4) [Compare Source](https://github.com/opencontainers/image-spec/compare/v1.1.0-rc3...v1.1.0-rc4) Vote passed \[+6 -0]: https://groups.google.com/a/opencontainers.org/g/dev/c/gPgzESGb7xs For changeset and diff please see - https://github.com/opencontainers/image-spec/pull/1080 </details> <details> <summary>rs/zerolog</summary> ### [`v1.32.0`](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.31.0...v1.32.0) ### [`v1.31.0`](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.30.0...v1.31.0) ### [`v1.30.0`](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.29.1...v1.30.0) ### [`v1.29.1`](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1) [Compare Source](https://github.com/rs/zerolog/compare/v1.29.0...v1.29.1) ### [`v1.29.0`](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0) [Compare Source](https://github.com/rs/zerolog/compare/v1.28.0...v1.29.0) </details> <details> <summary>sergi/go-diff</summary> ### [`v1.3.1`](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1) [Compare Source](https://github.com/sergi/go-diff/compare/v1.3.0...v1.3.1) ### [`v1.3.0`](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0) [Compare Source](https://github.com/sergi/go-diff/compare/v1.2.0...v1.3.0) </details> <details> <summary>sirupsen/logrus</summary> ### [`v1.9.3`](https://github.com/sirupsen/logrus/releases/tag/v1.9.3) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3) - Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines https://github.com/sirupsen/logrus/commit/f9291a534cac1466d26414fd9e326381cd64ecef (re-apply https://github.com/sirupsen/logrus/pull/1376) - Fix panic in Writer https://github.com/sirupsen/logrus/commit/d40e25cd45ed9c6b2b66e6b97573a0413e4c23bd **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.2...v1.9.3 ### [`v1.9.2`](https://github.com/sirupsen/logrus/releases/tag/v1.9.2) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2) - Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1 **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.1...v1.9.2 ### [`v1.9.1`](https://github.com/sirupsen/logrus/releases/tag/v1.9.1) [Compare Source](https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1) #### What's Changed - Fix data race in hooks.test package by [@FrancoisWagner](https://github.com/FrancoisWagner) in https://github.com/sirupsen/logrus/pull/1362 - Add instructions to use different log levels for local and syslog by [@tommyblue](https://github.com/tommyblue) in https://github.com/sirupsen/logrus/pull/1372 - This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by [@ozfive](https://github.com/ozfive) in https://github.com/sirupsen/logrus/pull/1376 - Use text when shows the logrus output by [@xieyuschen](https://github.com/xieyuschen) in https://github.com/sirupsen/logrus/pull/1339 #### New Contributors - [@FrancoisWagner](https://github.com/FrancoisWagner) made their first contribution in https://github.com/sirupsen/logrus/pull/1362 - [@tommyblue](https://github.com/tommyblue) made their first contribution in https://github.com/sirupsen/logrus/pull/1372 - [@ozfive](https://github.com/ozfive) made their first contribution in https://github.com/sirupsen/logrus/pull/1376 - [@xieyuschen](https://github.com/xieyuschen) made their first contribution in https://github.com/sirupsen/logrus/pull/1339 **Full Changelog**: https://github.com/sirupsen/logrus/compare/v1.9.0...v1.9.1 </details> <details> <summary>spf13/cobra</summary> ### [`v1.8.0`](https://github.com/spf13/cobra/releases/tag/v1.8.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0) #### ✨ Features - Support usage as plugin for tools like kubectl by [@nirs](https://github.com/nirs) in https://github.com/spf13/cobra/pull/2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.) - Move documentation sources to site/content by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1428 - Add 'one required flag' group by [@marevers](https://github.com/marevers) in https://github.com/spf13/cobra/pull/1952 - this includes a new `MarkFlagsOneRequired` API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked. - Customizable error message prefix by [@5ouma](https://github.com/5ouma) in https://github.com/spf13/cobra/pull/2023 - This adds the `SetErrPrefix` and `ErrPrefix` APIs on the `Command` struct to allow for setting a custom prefix for errors - feat: add getters for flag completions by [@avirtopeanu-ionos](https://github.com/avirtopeanu-ionos) in https://github.com/spf13/cobra/pull/1943 - Feature: allow running persistent run hooks of all parents by [@vkhoroz](https://github.com/vkhoroz) in https://github.com/spf13/cobra/pull/2044 - Improve API to get flag completion function by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2063 #### 🐛 Bug fixes - Fix typo in fish completions by [@twpayne](https://github.com/twpayne) in https://github.com/spf13/cobra/pull/1945 - Fix grammar: 'allows to' by [@supertassu](https://github.com/supertassu) in https://github.com/spf13/cobra/pull/1978 - powershell: escape variable with curly brackets by [@Luap99](https://github.com/Luap99) in https://github.com/spf13/cobra/pull/1960 - Don't complete --help flag when flag parsing disabled by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2061 - Replace all non-alphanumerics in active help env var program prefix by [@scop](https://github.com/scop) in https://github.com/spf13/cobra/pull/1940 #### 🔧 Maintenance - build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1971 - build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1976 - build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2021 - build(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/1934 - build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2047 - build(deps): bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/cobra/pull/2028 - command: temporarily disable G602 due to [securego/gosec#1005](https://github.com/securego/gosec/issues/1005) by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/2022 #### 🧪 Testing & CI/CD - test: make fish_completions_test more robust by [@branchvincent](https://github.com/branchvincent) in https://github.com/spf13/cobra/pull/1980 - golangci: enable 'unused' and disable deprecated replaced by it by [@umarcor](https://github.com/umarcor) in https://github.com/spf13/cobra/pull/1983 - cleanup: minor corrections to unit tests by [@JunNishimura](https://github.com/JunNishimura) in https://github.com/spf13/cobra/pull/2003 - ci: test golang 1.21 by [@nunoadrego](https://github.com/nunoadrego) in https://github.com/spf13/cobra/pull/2024 - Fix linter errors by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2052 - Add tests for flag completion registration by [@marckhouzam](https://github.com/marckhouzam) in https://github.com/spf13/cobra/pull/2053 #### ✏️ Documentation - doc: fix typo, Deperecated -> Deprecated by [@callthingsoff](https://github.com/callthingsoff) in https://github.com/spf13/cobra/pull/2000 - Add notes to doc about the execution condition of \*PreRun and \*PostRun functions by [@haoming29](https://github.com/haoming29) in https://github.com/spf13/cobra/pull/2041 *** Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍 **Full Changelog**: https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0 ### [`v1.7.0`](https://github.com/spf13/cobra/releases/tag/v1.7.0) [Compare Source](https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0) ##### ✨ Features - Allow to preserve ordering of completions in `bash`, `zsh`, `pwsh`, & `fish`: [@h4ck3rk3y](https://github.com/h4ck3rk3y) [#1903](https://github.com/spf13/cobra/issues/1903) - Add support for PowerShell 7.2+ in completions: [@oldium](https://github.com/oldium) [#1916](https://github.com/spf13/cobra/issues/1916) - Allow sourcing zsh completion script: [@marckhouzam](https://github.com/marckhouzam) [#1917](https://github.com/spf13/cobra/issues/1917) ##### 🐛 Bug fixes - Don't remove flag values that match sub-command name: [@brianpursley](https://github.com/brianpursley) [#1781](https://github.com/spf13/cobra/issues/1781) - Fix powershell completions not returning single word: [@totkeks](https://github.com/totkeks) [#1850](https://github.com/spf13/cobra/issues/1850) - Remove masked `template` import variable name: [@yashLadha](https://github.com/yashLadha) [#1879](https://github.com/spf13/cobra/issues/1879) - Correctly detect completions with dash in argument: [@oncilla](https://github.com/oncilla) [#1817](https://github.com/spf13/cobra/issues/1817) ##### 🧪 Testing & CI/CD - Deprecate Go 1.15 in CI: [@umarcor](https://github.com/umarcor) [#1866](https://github.com/spf13/cobra/issues/1866) - Deprecate Go 1.16 in CI: [@umarcor](https://github.com/umarcor) [#1926](https://github.com/spf13/cobra/issues/1926) - Add testing for Go 1.20 in CI: [@umarcor](https://github.com/umarcor) [#1925](https://github.com/spf13/cobra/issues/1925) - Add tests to illustrate unknown flag bug: [@brianpursley](https://github.com/brianpursley) [#1854](https://github.com/spf13/cobra/issues/1854) ##### 🔧 Maintenance - Update main image to better handle dark backgrounds: [@Deleplace](https://github.com/Deleplace) and [@marckhouzam](https://github.com/marckhouzam) [#1883](https://github.com/spf13/cobra/issues/1883) - Fix `stale.yaml` mispellings: [@enrichman](https://github.com/enrichman) [#1863](https://github.com/spf13/cobra/issues/1863) - Remove stale bot from GitHub actions: [@jpmcb](https://github.com/jpmcb) [#1908](https://github.com/spf13/cobra/issues/1908) - Add makefile target for installing dependencies: [@umarcor](https://github.com/umarcor) [#1865](https://github.com/spf13/cobra/issues/1865) - Add Sia to projects using Cobra: [@mike76-dev](https://github.com/mike76-dev) [#1844](https://github.com/spf13/cobra/issues/1844) - Add `Vitess` and `Arewefastyet` to projects using cobra: [@frouioui](https://github.com/frouioui) [#1932](https://github.com/spf13/cobra/issues/1932) - Fixup for Kubescape github org: [@dwertent](https://github.com/dwertent) [#1874](https://github.com/spf13/cobra/issues/1874) - Fix route for GitHub workflows badge: [@sh-cho](https://github.com/sh-cho) [#1884](https://github.com/spf13/cobra/issues/1884) - Fixup for GoDoc style documentation: [@yashLadha](https://github.com/yashLadha) [#1885](https://github.com/spf13/cobra/issues/1885) - Various bash scripting improvements for completion: [@scop](https://github.com/scop) [#1702](https://github.com/spf13/cobra/issues/1702) - Add Constellation to projects using Cobra: [@datosh](https://github.com/datosh) [#1829](https://github.com/spf13/cobra/issues/1829) ##### ✏️ Documentation - Add documentation about disabling completion descriptions: [@Shihta](https://github.com/Shihta) [#1901](https://github.com/spf13/cobra/issues/1901) - Improve `MarkFlagsMutuallyExclusive` example in user guide: [@janhn](https://github.com/janhn) [#1904](https://github.com/spf13/cobra/issues/1904) - Update `shell_completions.md`: [@gusega](https://github.com/gusega) [#1907](https://github.com/spf13/cobra/issues/1907) - Update copywrite year: [@umarcor](https://github.com/umarcor) [#1927](https://github.com/spf13/cobra/issues/1927) - Document suggested layout of subcommands: [@lcarva](https://github.com/lcarva) [#1930](https://github.com/spf13/cobra/issues/1930) - Replace deprecated ExactValidArgs with MatchAll in doc: [@doniacld](https://github.com/doniacld) [#1836](https://github.com/spf13/cobra/issues/1836) *** This release contains several long running fixes, improvements to powershell completions, and further optimizations for completions. Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you! 🐍 Full changelog: https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0 </details> <details> <summary>spf13/viper</summary> ### [`v1.18.2`](https://github.com/spf13/viper/releases/tag/v1.18.2) [Compare Source](https://github.com/spf13/viper/compare/v1.18.1...v1.18.2) **tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.** This release fixes a regression that appears in rare circumstances when using `Unmarshal` or `UnmarshalExact` to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs. The feature is now disabled by default and can be enabled using the `viper_bind_struct` build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future. #### What's Changed ##### Bug Fixes 🐛 - feat!: hide struct binding behind a feature flag by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1715 **Full Changelog**: https://github.com/spf13/viper/compare/v1.18.1...v1.18.2 ### [`v1.18.1`](https://github.com/spf13/viper/releases/tag/v1.18.1) [Compare Source](https://github.com/spf13/viper/compare/v1.18.0...v1.18.1)  #### What's Changed ##### Bug Fixes 🐛 - Merge missing struct keys inside UnmarshalExact by [@krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1704 **Full Changelog**: https://github.com/spf13/viper/compare/v1.18.0...v1.18.1 ### [`v1.18.0`](https://github.com/spf13/viper/releases/tag/v1.18.0) [Compare Source](https://github.com/spf13/viper/compare/v1.17.0...v1.18.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### `AutomaticEnv` works with `Unmarshal` Previously, environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#761](https://github.com/spf13/viper/issues/761)) [#1429](https://github.com/spf13/viper/issues/1429) introduced a solution that solves that issue. #### What's Changed ##### Enhancements 🚀 - chore: rename files according to enabled build tags by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1642 - test: replace ifs with asserts to simplify tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1656 - ci: enable test shuffle and fix tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1643 - fix: gocritic lint issues by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1696 ##### Bug Fixes 🐛 - Implement viper.BindStruct for automatic unmarshalling from environment variables by [@krakowski](https://github.com/krakowski) in https://github.com/spf13/viper/pull/1429 - fix isPathShadowedInFlatMap type cast bug by [@linuxsong](https://github.com/linuxsong) in https://github.com/spf13/viper/pull/1585 ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1661 - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1659 - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1663 - build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1686 - build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1688 - build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1692 - build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1690 - build(deps): bump cachix/install-nix-action from 23 to 24 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1689 - build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1672 - build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1691 - build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1668 - chore: update dependencies by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1694 - chore: update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1701 ##### Other Changes - Add info about multiple hosts for remote config by [@KaymeKaydex](https://github.com/KaymeKaydex) in https://github.com/spf13/viper/pull/1684 - refactor: drop fsonitfy wrapper by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1693 - Note Get\* behavior on parse failure by [@scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1687 - fix: godot lint issues by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1657 #### New Contributors - [@KaymeKaydex](https://github.com/KaymeKaydex) made their first contribution in https://github.com/spf13/viper/pull/1684 - [@krakowski](https://github.com/krakowski) made their first contribution in https://github.com/spf13/viper/pull/1429 - [@linuxsong](https://github.com/linuxsong) made their first contribution in https://github.com/spf13/viper/pull/1585 **Full Changelog**: https://github.com/spf13/viper/compare/v1.17.0...v1.18.0 ### [`v1.17.0`](https://github.com/spf13/viper/releases/tag/v1.17.0) [Compare Source](https://github.com/spf13/viper/compare/v1.16.0...v1.17.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### Minimum Go version: 1.19 Viper now requires Go 1.19 This change ensures we can stay up to date with modern practices and dependencies. ##### `log/slog` support **\[BREAKING]** Viper [v1.11.0](https://github.com/spf13/viper/releases/tag/v1.11.0) added an experimental `Logger` interface to allow custom implementations (besides [jwalterweatherman](https://github.com/spf13/jwalterweatherman)). In addition, it also exposed an experimental `WithLogger` function allowing to set a custom logger. This release deprecates that interface in favor of [log/slog](https://pkg.go.dev/log/slog) released in Go 1.21. > \[!WARNING] > `WithLogger` accepts an [\*slog.Logger](https://pkg.go.dev/log/slog#Logger) from now on. To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a [\*golang.org/x/exp/slog.Logger](https://pkg.go.dev/golang.org/x/exp/slog#Logger). The experimental flag is removed. ##### New finder implementation **\[BREAKING]** As of this release, Viper uses a new library to look for files, called [locafero](https://github.com/sagikazarmark/locafero). The new library is better covered by tests and has been built from scratch as a general purpose file finder library. The implementation is experimental and is hidden behind a `finder` build tag. > \[!WARNING] > The `io/fs` based implementation (that used to be hidden behind a `finder` build tag) has been removed. #### What's Changed ##### Exciting New Features 🎉 - Add NATS support by [@hooksie1](https://github.com/hooksie1) in https://github.com/spf13/viper/pull/1590 - Add slog support by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1627 ##### Enhancements 🚀 - chore: add local development environment using nix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1572 - feat: add func GetEnvPrefix by [@baruchiro](https://github.com/baruchiro) in https://github.com/spf13/viper/pull/1565 - Improve dev env by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1575 - fix: code optimization by [@testwill](https://github.com/testwill) in https://github.com/spf13/viper/pull/1557 - test: remove not needed testutil.Setenv by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1610 - new finder library based on afero by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1625 - refactor: make use of `strings.Cut` by [@scop](https://github.com/scop) in https://github.com/spf13/viper/pull/1650 ##### Breaking Changes 🛠 - feat: drop support for Go 1.17 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1574 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 4 to 5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1563 - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1558 - build(deps): bump cachix/install-nix-action from 21 to 22 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1573 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1586 - chore: upgrade crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1589 - build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1616 - build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1615 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1614 - build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1605 - build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1604 - build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1593 - build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1603 - build(deps): bump cachix/install-nix-action from 22 to 23 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1620 - chore(deps): update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1621 - build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1623 - Bump minimum Go version to 1.19 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1626 - build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1632 - build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1634 - build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1641 - build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1640 - build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1638 - build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1648 - chore(deps): update crypt by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1652 ##### Other Changes - \[StepSecurity] ci: Harden GitHub Actions by [@step-security-bot](https://github.com/step-security-bot) in https://github.com/spf13/viper/pull/1592 - Add Vitess to list of projects using Viper by [@systay](https://github.com/systay) in https://github.com/spf13/viper/pull/1619 - docs: fix typos in comments by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1609 - ci: add Go 1.21 to the test matrix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1622 - Remove usages of deprecated io/ioutil; simplify viper tests by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1631 - chore: remove deprecated build tags by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1630 - refactor: replace 'interface{}' with 'any' by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1646 - test: refactor asserts by [@alexandear](https://github.com/alexandear) in https://github.com/spf13/viper/pull/1644 - docs: add set subset KV example by [@yhliyr](https://github.com/yhliyr) in https://github.com/spf13/viper/pull/1647 - Make deps fixes by [@bersace](https://github.com/bersace) in https://github.com/spf13/viper/pull/1628 #### New Contributors - [@goldeneggg](https://github.com/goldeneggg) made their first contribution in https://github.com/spf13/viper/pull/1561 - [@baruchiro](https://github.com/baruchiro) made their first contribution in https://github.com/spf13/viper/pull/1565 - [@testwill](https://github.com/testwill) made their first contribution in https://github.com/spf13/viper/pull/1557 - [@step-security-bot](https://github.com/step-security-bot) made their first contribution in https://github.com/spf13/viper/pull/1592 - [@systay](https://github.com/systay) made their first contribution in https://github.com/spf13/viper/pull/1619 - [@alexandear](https://github.com/alexandear) made their first contribution in https://github.com/spf13/viper/pull/1609 - [@hooksie1](https://github.com/hooksie1) made their first contribution in https://github.com/spf13/viper/pull/1590 - [@yhliyr](https://github.com/yhliyr) made their first contribution in https://github.com/spf13/viper/pull/1647 - [@bersace](https://github.com/bersace) made their first contribution in https://github.com/spf13/viper/pull/1628 - [@scop](https://github.com/scop) made their first contribution in https://github.com/spf13/viper/pull/1650 **Full Changelog**: https://github.com/spf13/viper/compare/v1.16.0...v1.17.0 ### [`v1.16.0`](https://github.com/spf13/viper/releases/tag/v1.16.0) [Compare Source](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0)  #### What's Changed ##### Enhancements 🚀 - Sub parent inheritance by [@TaylorOno](https://github.com/TaylorOno) in https://github.com/spf13/viper/pull/1056 - fix: fix typo by [@yquansah](https://github.com/yquansah) in https://github.com/spf13/viper/pull/1523 - ci: add Go 1.20 to build matrix by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1506 - extend v.find() to handle stringToInt value types with stringToInt pflag [#1435](https://github.com/spf13/viper/issues/1435) by [@vorishirne](https://github.com/vorishirne) in https://github.com/spf13/viper/pull/1462 - add:viper: allow to disable internal log messages by [@burgesQ](https://github.com/burgesQ) in https://github.com/spf13/viper/pull/1483 - Allow ConfigParseError to unwrap by [@andig](https://github.com/andig) in https://github.com/spf13/viper/pull/1433 ##### Bug Fixes 🐛 - fix: time.Duration slice type conversion by [@UrbanskiDawid](https://github.com/UrbanskiDawid) in https://github.com/spf13/viper/pull/1498 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1533 - build(deps): bump actions/setup-go from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1526 - build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1519 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1516 - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1515 - build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1518 - build(deps): bump github.com/sagikazarmark/crypt from 0.9.0 to 0.10.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1550 - build(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1551 - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1553 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.7 to 2.0.8 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1555 ##### Other Changes - Update main image to better handle dark background by [@Deleplace](https://github.com/Deleplace) in https://github.com/spf13/viper/pull/1532 #### New Contributors - [@UrbanskiDawid](https://github.com/UrbanskiDawid) made their first contribution in https://github.com/spf13/viper/pull/1498 - [@TaylorOno](https://github.com/TaylorOno) made their first contribution in https://github.com/spf13/viper/pull/1056 - [@yquansah](https://github.com/yquansah) made their first contribution in https://github.com/spf13/viper/pull/1523 - [@Azanul](https://github.com/Azanul) made their first contribution in https://github.com/spf13/viper/pull/1544 - [@Deleplace](https://github.com/Deleplace) made their first contribution in https://github.com/spf13/viper/pull/1532 - [@cfabianski](https://github.com/cfabianski) made their first contribution in https://github.com/spf13/viper/pull/1552 - [@vorishirne](https://github.com/vorishirne) made their first contribution in https://github.com/spf13/viper/pull/1462 - [@burgesQ](https://github.com/burgesQ) made their first contribution in https://github.com/spf13/viper/pull/1483 - [@andig](https://github.com/andig) made their first contribution in https://github.com/spf13/viper/pull/1433 **Full Changelog**: https://github.com/spf13/viper/compare/v1.15.0...v1.16.0 ### [`v1.15.0`](https://github.com/spf13/viper/releases/tag/v1.15.0) [Compare Source](https://github.com/spf13/viper/compare/v1.14.0...v1.15.0)  #### What's Changed ##### Exciting New Features 🎉 - feat: add multiple endpoints support for remote by [@mozartz](https://github.com/mozartz) in https://github.com/spf13/viper/pull/1464 ##### Enhancements 🚀 - Add DocBlock to WatchConfig by [@glebik000](https://github.com/glebik000) in https://github.com/spf13/viper/pull/1467 ##### Breaking Changes 🛠 - Drop YAML v2 and TOML v1 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1493 - Drop support for Go 1.16 by [@sagikazarmark](https://github.com/sagikazarmark) in https://github.com/spf13/viper/pull/1494 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.9.2 to 1.9.3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1465 - build(deps): bump github.com/magiconair/properties from 1.8.6 to 1.8.7 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1475 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.5 to 2.0.6 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1466 - build(deps): bump mheap/github-action-required-labels from 2 to 3 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1482 - build(deps): bump github.com/subosito/gotenv from 1.4.1 to 1.4.2 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1488 - build(deps): bump github.com/sagikazarmark/crypt from 0.8.0 to 0.9.0 by [@dependabot](https://github.com/dependabot) in https://github.com/spf13/viper/pull/1490 #### New Contributors - [@choar816](https://github.com/choar816) made their first contribution in https://github.com/spf13/viper/pull/1481 - [@lol768](https://github.com/lol768) made their first contribution in https://github.com/spf13/viper/pull/1485 - [@mozartz](https://github.com/mozartz) made their first contribution in https://github.com/spf13/viper/pull/1464 - [@glebik000](https://github.com/glebik000) made their first contribution in https://github.com/spf13/viper/pull/1467 **Full Changelog**: https://github.com/spf13/viper/compare/v1.14.0...v1.15.0 </details> <details> <summary>stretchr/testify</summary> ### [`v1.9.0`](https://github.com/stretchr/testify/releases/tag/v1.9.0) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0) #### What's Changed - Fix Go modules version by [@SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1394 - Document that require is not safe to call in created goroutines by [@programmer04](https://github.com/programmer04) in https://github.com/stretchr/testify/pull/1392 - Remove myself from MAINTAINERS.md by [@mvdkleijn](https://github.com/mvdkleijn) in https://github.com/stretchr/testify/pull/1367 - Correct spelling/grammar by [@echarrod](https://github.com/echarrod) in https://github.com/stretchr/testify/pull/1389 - docs: Update URLs in README by [@davidjb](https://github.com/davidjb) in https://github.com/stretchr/testify/pull/1349 - Update mockery link to Github Pages in README by [@LandonTClipp](https://github.com/LandonTClipp) in https://github.com/stretchr/testify/pull/1346 - docs: Fix typos in tests and comments by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1410 - CI: tests from go1.17 by [@SuperQ](https://github.com/SuperQ) in https://github.com/stretchr/testify/pull/1409 - Fix adding ? when no values passed by [@lesichkovm](https://github.com/lesichkovm) in https://github.com/stretchr/testify/pull/1320 - codegen: use standard header for generated files by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1406 - mock: AssertExpectations log reason only on failure by [@hikyaru-suzuki](https://github.com/hikyaru-suzuki) in https://github.com/stretchr/testify/pull/1360 - assert: fix flaky TestNeverTrue by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1417 - README: fix typos "set up" vs "setup" by [@ossan-dev](https://github.com/ossan-dev) in https://github.com/stretchr/testify/pull/1428 - mock: move regexp compilation outside of `Called` by [@aud10slave](https://github.com/aud10slave) in https://github.com/stretchr/testify/pull/631 - assert: refactor internal func getLen() by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1445 - mock: deprecate type AnythingOfTypeArgument ([#1434](https://github.com/stretchr/testify/issues/1434)) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1441 - Remove no longer needed assert.canConvert by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1470 - assert: ObjectsAreEqual: use time.Equal for time.Time types by [@tscales](https://github.com/tscales) in https://github.com/stretchr/testify/pull/1464 - Bump actions/checkout from 3 to 4 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1466 - Bump actions/setup-go from 3.2.0 to 4.1.0 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1451 - fix: make EventuallyWithT concurrency safe by [@czeslavo](https://github.com/czeslavo) in https://github.com/stretchr/testify/pull/1395 - assert: fix httpCode and HTTPBody occur panic when http.Handler read Body by [@hidu](https://github.com/hidu) in https://github.com/stretchr/testify/pull/1484 - assert.EqualExportedValues: fix handling of arrays by [@zrbecker](https://github.com/zrbecker) in https://github.com/stretchr/testify/pull/1473 - .github: use latest Go versions by [@kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1489 - assert: Deprecate EqualExportedValues by [@HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1488 - suite: refactor test assertions by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1474 - suite: fix SetupSubTest and TearDownSubTest execution order by [@linusbarth](https://github.com/linusbarth) in https://github.com/stretchr/testify/pull/1471 - docs: Fix deprecation comments for http package by [@alexandear](https://github.com/alexandear) in https://github.com/stretchr/testify/pull/1335 - Add map support doc comments to Subset and NotSubset by [@jedevc](https://github.com/jedevc) in https://github.com/stretchr/testify/pull/1306 - TestErrorIs/TestNotErrorIs: check error message contents by [@craig65535](https://github.com/craig65535) in https://github.com/stretchr/testify/pull/1435 - suite: fix subtest names (fix [#1501](https://github.com/stretchr/testify/issues/1501)) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1504 - assert: improve unsafe.Pointer tests by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1505 - assert: simplify isNil implementation by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1506 - assert.InEpsilonSlice: fix expected/actual order and other improvements by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1483 - Fix dependency cycle with objx [#1292](https://github.com/stretchr/testify/issues/1292) by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1453 - mock: refactor TestIsArgsEqual by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1444 - mock: optimize argument matching checks by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1416 - assert: fix TestEventuallyTimeout by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1412 - CI: add go 1.21 in GitHub Actions by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1450 - suite: fix recoverAndFailOnPanic to report test failure at the right location by [@dolmen](https://github.com/dolmen) in https://github.com/stretchr/testify/pull/1502 - Update maintainers by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1533 - assert: Fix EqualValues to handle overflow/underflow by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1531 - assert: better formatting for Len() error by [@kevinburkesegment](https://github.com/kevinburkesegment) in https://github.com/stretchr/testify/pull/1485 - Ensure AssertExpectations does not fail in skipped tests by [@ianrose14](https://github.com/ianrose14) in https://github.com/stretchr/testify/pull/1331 - suite: fix deadlock in suite.Require()/Assert() by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1535 - Revert "assert: ObjectsAreEqual: use time.Equal for time.Time type" by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1537 - \[chore] Add issue templates by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1538 - Update the build status badge by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1540 - Update Github workflows setup-go to V5 by [@hendrywiranto](https://github.com/hendrywiranto) in https://github.com/stretchr/testify/pull/1545 - Support Pointer to Struct in EqualExportedValues by [@Lucaber](https://github.com/Lucaber) in https://github.com/stretchr/testify/pull/1517 - README: drop link to gorc by [@guettli](https://github.com/guettli) in https://github.com/stretchr/testify/pull/1248 - http_assertions: honour the msgAndArgs provided with each assertion by [@arjunmahishi](https://github.com/arjunmahishi) in https://github.com/stretchr/testify/pull/1548 - fix typos in comments and tests by [@ccoVeille](https://github.com/ccoVeille) in https://github.com/stretchr/testify/pull/1247 - Include the auto-release notes in releases by [@brackendawson](https://github.com/brackendawson) in https://github.com/stretchr/testify/pull/1550 - Add `NotImplements` and variants by [@hslatman](https://github.com/hslatman) in https://github.com/stretchr/testify/pull/1385 - Add support to compare uintptr by [@bogdandrutu](https://github.com/bogdandrutu) in https://github.com/stretchr/testify/pull/1339 - build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2 by [@dependabot](https://github.com/dependabot) in https://github.com/stretchr/testify/pull/1552 #### New Contributors - [@SuperQ](https://github.com/SuperQ) made their first contribution in https://github.com/stretchr/testify/pull/1394 - [@programmer04](https://github.com/programmer04) made their first contribution in https://github.com/stretchr/testify/pull/1392 - [@echarrod](https://github.com/echarrod) made their first contribution in https://github.com/stretchr/testify/pull/1389 - [@davidjb](https://github.com/davidjb) made their first contribution in https://github.com/stretchr/testify/pull/1349 - [@LandonTClipp](https://github.com/LandonTClipp) made their first contribution in https://github.com/stretchr/testify/pull/1346 - [@alexandear](https://github.com/alexandear) made their first contribution in https://github.com/stretchr/testify/pull/1410 - [@lesichkovm](https://github.com/lesichkovm) made their first contribution in https://github.com/stretchr/testify/pull/1320 - [@dolmen](https://github.com/dolmen) made their first contribution in https://github.com/stretchr/testify/pull/1406 - [@hikyaru-suzuki](https://github.com/hikyaru-suzuki) made their first contribution in https://github.com/stretchr/testify/pull/1360 - [@ossan-dev](https://github.com/ossan-dev) made their first contribution in https://github.com/stretchr/testify/pull/1428 - [@aud10slave](https://github.com/aud10slave) made their first contribution in https://github.com/stretchr/testify/pull/631 - [@tscales](https://github.com/tscales) made their first contribution in https://github.com/stretchr/testify/pull/1464 - [@czeslavo](https://github.com/czeslavo) made their first contribution in https://github.com/stretchr/testify/pull/1395 - [@hidu](https://github.com/hidu) made their first contribution in https://github.com/stretchr/testify/pull/1484 - [@zrbecker](https://github.com/zrbecker) made their first contribution in https://github.com/stretchr/testify/pull/1473 - [@kevinburkesegment](https://github.com/kevinburkesegment) made their first contribution in https://github.com/stretchr/testify/pull/1489 - [@linusbarth](https://github.com/linusbarth) made their first contribution in https://github.com/stretchr/testify/pull/1471 - [@jedevc](https://github.com/jedevc) made their first contribution in https://github.com/stretchr/testify/pull/1306 - [@craig65535](https://github.com/craig65535) made their first contribution in https://github.com/stretchr/testify/pull/1435 - [@arjunmahishi](https://github.com/arjunmahishi) made their first contribution in https://github.com/stretchr/testify/pull/1531 - [@ianrose14](https://github.com/ianrose14) made their first contribution in https://github.com/stretchr/testify/pull/1331 - [@hendrywiranto](https://github.com/hendrywiranto) made their first contribution in https://github.com/stretchr/testify/pull/1545 - [@Lucaber](https://github.com/Lucaber) made their first contribution in https://github.com/stretchr/testify/pull/1517 - [@guettli](https://github.com/guettli) made their first contribution in https://github.com/stretchr/testify/pull/1248 - [@ccoVeille](https://github.com/ccoVeille) made their first contribution in https://github.com/stretchr/testify/pull/1247 - [@hslatman](https://github.com/hslatman) made their first contribution in https://github.com/stretchr/testify/pull/1385 - [@bogdandrutu](https://github.com/bogdandrutu) made their first contribution in https://github.com/stretchr/testify/pull/1339 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.4...v1.9.0 ### [`v1.8.4`](https://github.com/stretchr/testify/releases/tag/v1.8.4) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4) #### What's Changed - Create GitHub release when new release tag is pushed by [@aldas](https://github.com/aldas) in https://github.com/stretchr/testify/pull/1354 #### New Contributors - [@aldas](https://github.com/aldas) made their first contribution in https://github.com/stretchr/testify/pull/1354 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4 ### [`v1.8.3`](https://github.com/stretchr/testify/releases/tag/v1.8.3) [Compare Source](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3) #### What's Changed - Compare public elements of struct by [@mchlp](https://github.com/mchlp) in https://github.com/stretchr/testify/pull/1309 - assert: fix error message formatting for NotContains by [@wwade](https://github.com/wwade) in https://github.com/stretchr/testify/pull/1362 - allow testing for functional options by [@nbaztec](https://github.com/nbaztec) in https://github.com/stretchr/testify/pull/1023 - add EventuallyWithT assertion by [@tobikris](https://github.com/tobikris) in https://github.com/stretchr/testify/pull/1264 - EqualExportedValues: Handle nested pointer, slice and map fields by [@HaraldNordgren](https://github.com/HaraldNordgren) in https://github.com/stretchr/testify/pull/1379 #### New Contributors - [@mchlp](https://github.com/mchlp) made their first contribution in https://github.com/stretchr/testify/pull/1309 - [@wwade](https://github.com/wwade) made their first contribution in https://github.com/stretchr/testify/pull/1362 - [@nbaztec](https://github.com/nbaztec) made their first contribution in https://github.com/stretchr/testify/pull/1023 - [@tobikris](https://github.com/tobikris) made their first contribution in https://github.com/stretchr/testify/pull/1264 **Full Changelog**: https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3 </details> <details> <summary>grpc/grpc-go</summary> ### [`v1.63.0`](https://github.com/grpc/grpc-go/releases/tag/v1.63.0): Release 1.63.0 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.2...v1.63.0) ### Behavior Changes - grpc: Return canonical target string from `resolver.Address.String()` (experimental) ([#6923](https://github.com/grpc/grpc-go/issues/6923)) - client & server: when using write buffer pooling, use input value for buffer size instead of size\*2 ([#6983](https://github.com/grpc/grpc-go/issues/6983)) - Special Thanks: [@raghav-stripe](https://github.com/raghav-stripe) ### New Features - grpc: add `ClientConn.CanonicalTarget()` to return the canonical target string. ([#7006](https://github.com/grpc/grpc-go/issues/7006)) - xds: implement LRS named metrics support ([gRFC A64](https://github.com/grpc/proposal/blob/master/A64-lrs-custom-metrics.md)) ([#7027](https://github.com/grpc/grpc-go/issues/7027)) - Special Thanks: [@danielzhaotongliu](https://github.com/danielzhaotongliu) - grpc: introduce `grpc.NewClient` to allow users to create new clients in idle mode and with "dns" as the default resolver ([#7010](https://github.com/grpc/grpc-go/issues/7010)) - Special Thanks: [@bruuuuuuuce](https://github.com/bruuuuuuuce) ### API Changes - grpc: stabilize experimental method `ClientConn.Target()` ([#7006](https://github.com/grpc/grpc-go/issues/7006)) ### Bug Fixes - xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server ([#7026](https://github.com/grpc/grpc-go/issues/7026)) - server: Fix some errors returned by a server when using a `grpc.Server` as an `http.Handler` with the Go stdlib HTTP server ([#6989](https://github.com/grpc/grpc-go/issues/6989)) - resolver/dns: add `SetResolvingTimeout` to allow configuring the DNS resolver's global timeout ([#6917](https://github.com/grpc/grpc-go/issues/6917)) - Special Thanks: [@and1truong](https://github.com/and1truong) - Set the security level of Windows named pipes to NoSecurity ([#6956](https://github.com/grpc/grpc-go/issues/6956)) - Special Thanks: [@irsl](https://github.com/irsl) ### [`v1.62.2`](https://github.com/grpc/grpc-go/releases/tag/v1.62.2): Release 1.62.2 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.1...v1.62.2) ### Dependencies - Update http2 library to address vulnerability [CVE-2023-45288](https://www.kb.cert.org/vuls/id/421644) ### [`v1.62.1`](https://github.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1 [Compare Source](https://github.com/grpc/grpc-go/compare/v1.62.0...v1.62.1) ### Bug Fixes - xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#6997](https://github.com/grpc/grpc-go/issues/6997)) - server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#6766](https://github.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@hueypark](https://github.com/hueypark) - grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#6766](https://github.com/grpc/grpc-go/is </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

kjuulh force-pushed renovate/all from 83be5837c2 to e3e8eafbc0

2023-01-13 14:07:19 +01:00

Compare

kjuulh changed title from ~~fix(deps): update module google.golang.org/grpc to v1.52.0~~ to fix(deps): update all dependencies

2023-01-13 14:07:20 +01:00

kjuulh force-pushed renovate/all from e3e8eafbc0 to 4929a594dd

2023-01-18 13:59:36 +01:00

Compare

kjuulh force-pushed renovate/all from 4929a594dd to 779d92e0e9

2023-01-19 17:19:00 +01:00

Compare

kjuulh force-pushed renovate/all from 779d92e0e9 to 5d058d0dc4

2023-01-20 13:49:37 +01:00

Compare

kjuulh force-pushed renovate/all from 5d058d0dc4 to b4f122abbe

2023-01-23 20:52:37 +01:00

Compare

kjuulh force-pushed renovate/all from b4f122abbe to 4030ea5769

2023-01-24 21:49:15 +01:00

Compare

kjuulh force-pushed renovate/all from 4030ea5769 to 90b8aa2f38

2023-01-24 22:34:36 +01:00

Compare

kjuulh force-pushed renovate/all from 90b8aa2f38 to e531935494

2023-01-25 21:46:15 +01:00

Compare

kjuulh force-pushed renovate/all from e531935494 to 8298a656d7

2023-01-26 17:55:53 +01:00

Compare

kjuulh force-pushed renovate/all from 8298a656d7 to 8626a6bcac

2023-01-26 19:57:05 +01:00

Compare

kjuulh force-pushed renovate/all from 8626a6bcac to d2cd406bfa

2023-01-26 21:20:30 +01:00

Compare

kjuulh force-pushed renovate/all from d2cd406bfa to d9323e2545

2023-01-27 16:43:40 +01:00

Compare

kjuulh force-pushed renovate/all from d9323e2545 to 3238c1c834

2023-01-28 19:37:58 +01:00

Compare

kjuulh force-pushed renovate/all from 3238c1c834 to 82ef0c08f2

2023-01-30 21:06:55 +01:00

Compare

kjuulh force-pushed renovate/all from 82ef0c08f2 to 3818919fcd

2023-01-31 22:49:54 +01:00

Compare

kjuulh force-pushed renovate/all from 3818919fcd to 1101456237

2023-02-01 02:30:04 +01:00

Compare

kjuulh force-pushed renovate/all from 1101456237 to 1a4c279fd6

2023-02-02 12:34:43 +01:00

Compare

kjuulh commented

2023-02-02 12:34:49 +01:00

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: errors parsing go.mod:
go.mod:149:2: replace github.com/docker/docker: version "v26.0.0" invalid: should be v0 or v1, not v26

### ⚠ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: go.sum ``` Command failed: go get -d -t ./... go: errors parsing go.mod: go.mod:149:2: replace github.com/docker/docker: version "v26.0.0" invalid: should be v0 or v1, not v26 ```

kjuulh force-pushed renovate/all from 1a4c279fd6 to 0b120a21aa

2023-02-02 18:26:25 +01:00

Compare

kjuulh force-pushed renovate/all from 0b120a21aa to 70f6f3a75f

2023-02-05 12:12:53 +01:00

Compare

kjuulh force-pushed renovate/all from 70f6f3a75f to 29b3804526

2023-02-07 20:43:18 +01:00

Compare

kjuulh force-pushed renovate/all from 29b3804526 to 04d14a6332

2023-02-07 21:04:26 +01:00

Compare

kjuulh force-pushed renovate/all from 04d14a6332 to 121d4258df

2023-02-07 23:27:01 +01:00

Compare

kjuulh force-pushed renovate/all from 121d4258df to 5a2994e663

2023-02-08 12:39:36 +01:00

Compare

kjuulh force-pushed renovate/all from 5a2994e663 to c04d1667e1

2023-02-08 18:43:30 +01:00

Compare

kjuulh force-pushed renovate/all from c04d1667e1 to 93ad4480d0

2023-02-08 19:23:50 +01:00

Compare

kjuulh force-pushed renovate/all from 93ad4480d0 to beffc95d32

2023-02-08 20:06:08 +01:00

Compare

kjuulh force-pushed renovate/all from beffc95d32 to 9628a810c0

2023-02-10 01:38:28 +01:00

Compare

kjuulh force-pushed renovate/all from 9628a810c0 to d85e53944b

2023-02-10 16:53:16 +01:00

Compare

kjuulh force-pushed renovate/all from d85e53944b to a7abf2858c

2023-02-10 17:31:25 +01:00

Compare

kjuulh force-pushed renovate/all from a7abf2858c to dfdabc4d87

2023-02-10 19:31:00 +01:00

Compare

kjuulh force-pushed renovate/all from dfdabc4d87 to edea3523bc

2023-02-11 16:58:21 +01:00

Compare

kjuulh force-pushed renovate/all from edea3523bc to b98c3762fc

2023-02-12 13:59:15 +01:00

Compare

kjuulh force-pushed renovate/all from b98c3762fc to c0a6353e57

2023-02-13 03:00:17 +01:00

Compare

kjuulh force-pushed renovate/all from c0a6353e57 to b0229ff992

2023-02-13 13:06:23 +01:00

Compare

kjuulh force-pushed renovate/all from b0229ff992 to 3d0c37e68a

2023-02-13 17:11:35 +01:00

Compare

kjuulh force-pushed renovate/all from 3d0c37e68a to 1e0426a466

2023-02-13 19:15:18 +01:00

Compare

kjuulh force-pushed renovate/all from 1e0426a466 to 35eedf63ff

2023-02-13 19:50:53 +01:00

Compare

kjuulh force-pushed renovate/all from 35eedf63ff to 70f23587f9

2023-02-13 21:16:13 +01:00

Compare

kjuulh force-pushed renovate/all from 70f23587f9 to 7af41342fc

2023-02-14 16:40:41 +01:00

Compare

kjuulh force-pushed renovate/all from 7af41342fc to 8df9611d61

2023-02-14 20:46:02 +01:00

Compare

kjuulh force-pushed renovate/all from 8df9611d61 to 0c9fd97370

2023-02-14 21:05:34 +01:00

Compare

kjuulh force-pushed renovate/all from 0c9fd97370 to 52dd18f4e4

2023-02-15 00:04:32 +01:00

Compare

kjuulh force-pushed renovate/all from 52dd18f4e4 to e56bbb5073

2023-02-15 19:01:05 +01:00

Compare

kjuulh force-pushed renovate/all from e56bbb5073 to d3d4a292bc

2023-02-16 00:01:01 +01:00

Compare

kjuulh force-pushed renovate/all from d3d4a292bc to 2013a80b23

2023-02-16 10:40:16 +01:00

Compare

kjuulh force-pushed renovate/all from 2013a80b23 to fc2ccb62b2

2023-02-16 14:33:06 +01:00

Compare

kjuulh force-pushed renovate/all from fc2ccb62b2 to 867a9da212

2023-02-17 15:02:18 +01:00

Compare

kjuulh force-pushed renovate/all from 867a9da212 to b060488b26

2023-02-17 16:28:24 +01:00

Compare

kjuulh force-pushed renovate/all from b060488b26 to c7573ca769

2023-02-17 23:03:37 +01:00

Compare

kjuulh force-pushed renovate/all from c7573ca769 to 27499f2933

2023-02-18 02:03:45 +01:00

Compare

kjuulh force-pushed renovate/all from 27499f2933 to fad41cca1d

2023-02-18 16:04:13 +01:00

Compare

kjuulh force-pushed renovate/all from fad41cca1d to a9c723f800

2023-02-25 10:19:11 +01:00

Compare

kjuulh force-pushed renovate/all from a9c723f800 to 6b4d695af4

2023-02-25 14:18:44 +01:00

Compare

kjuulh force-pushed renovate/all from 6b4d695af4 to df90154f1a

2023-02-26 20:39:16 +01:00

Compare

kjuulh force-pushed renovate/all from df90154f1a to 5bc02e7c06

2023-02-27 20:18:07 +01:00

Compare

kjuulh changed title from ~~fix(deps): update all dependencies~~ to chore(deps): update all dependencies

2023-02-27 20:18:12 +01:00

kjuulh force-pushed renovate/all from 5bc02e7c06 to af44b52cd7

2023-02-27 23:41:33 +01:00

Compare

kjuulh force-pushed renovate/all from af44b52cd7 to fb5531f4cc

2023-02-28 00:05:30 +01:00

Compare

kjuulh force-pushed renovate/all from fb5531f4cc to e4b00622d3

2023-02-28 00:27:42 +01:00

Compare

kjuulh force-pushed renovate/all from e4b00622d3 to 9e5de6500a

2023-02-28 00:50:48 +01:00

Compare

kjuulh force-pushed renovate/all from 9e5de6500a to 024b43cd22

2023-02-28 01:13:40 +01:00

Compare

kjuulh force-pushed renovate/all from 024b43cd22 to 379748adb4

2023-03-01 17:43:42 +01:00

Compare

kjuulh force-pushed renovate/all from 379748adb4 to d8728adf6e

2023-03-04 16:22:16 +01:00

Compare

kjuulh force-pushed renovate/all from d8728adf6e to 21bd28f76f

2023-03-05 15:52:47 +01:00

Compare

kjuulh force-pushed renovate/all from 21bd28f76f to 8d578e53b1

2023-03-06 20:46:38 +01:00

Compare

kjuulh force-pushed renovate/all from 8d578e53b1 to f5e8457287

2023-03-07 13:35:32 +01:00

Compare

kjuulh force-pushed renovate/all from f5e8457287 to a6d9b7b69b

2023-03-08 20:01:48 +01:00

Compare

kjuulh force-pushed renovate/all from a6d9b7b69b to aa0cca07e6

2023-03-10 18:03:05 +01:00

Compare

kjuulh force-pushed renovate/all from aa0cca07e6 to 785499712b

2023-03-10 19:38:11 +01:00

Compare

kjuulh force-pushed renovate/all from 785499712b to b95d9f51a9

2023-03-10 21:46:11 +01:00

Compare

kjuulh force-pushed renovate/all from b95d9f51a9 to 45515a0475

2023-03-10 23:57:38 +01:00

Compare

kjuulh force-pushed renovate/all from 45515a0475 to 6514d01cf5

2023-03-11 12:31:51 +01:00

Compare

kjuulh force-pushed renovate/all from 6514d01cf5 to 9b969ab2ba

2023-03-14 18:18:57 +01:00

Compare

kjuulh force-pushed renovate/all from 9b969ab2ba to 9e4e567314

2023-03-14 22:29:28 +01:00

Compare

kjuulh force-pushed renovate/all from 9e4e567314 to 3e057add7b

2023-03-15 15:49:24 +01:00

Compare

kjuulh force-pushed renovate/all from 3e057add7b to cc5edf7de3

2023-03-15 22:16:49 +01:00

Compare

kjuulh force-pushed renovate/all from cc5edf7de3 to be3471937a

2023-03-16 21:51:59 +01:00

Compare

kjuulh force-pushed renovate/all from be3471937a to 33b5c02e72

2023-03-22 01:59:07 +01:00

Compare

kjuulh force-pushed renovate/all from 33b5c02e72 to 8242f7a7e5

2023-03-22 16:52:21 +01:00

Compare

kjuulh force-pushed renovate/all from 8242f7a7e5 to d37a761061

2023-03-23 16:20:16 +01:00

Compare

kjuulh force-pushed renovate/all from d37a761061 to 57268b9e8d

2023-03-23 19:20:52 +01:00

Compare

kjuulh force-pushed renovate/all from 57268b9e8d to 870c5f06d2

2023-03-23 19:43:55 +01:00

Compare

kjuulh force-pushed renovate/all from 870c5f06d2 to dceef950ea

2023-03-23 22:44:32 +01:00

Compare

kjuulh force-pushed renovate/all from dceef950ea to ba8c02b613

2023-03-24 23:08:47 +01:00

Compare

kjuulh changed title from ~~chore(deps): update all dependencies~~ to fix(deps): update all dependencies

2023-03-24 23:08:59 +01:00

kjuulh force-pushed renovate/all from ba8c02b613 to ba4ff2ab0f

2023-03-28 14:01:38 +02:00

Compare

kjuulh force-pushed renovate/all from ba4ff2ab0f to 647b86e331

2023-03-28 20:58:06 +02:00

Compare

kjuulh force-pushed renovate/all from 647b86e331 to 2ab1dc22c1

2023-03-29 01:05:36 +02:00

Compare

kjuulh force-pushed renovate/all from 2ab1dc22c1 to bef732c89d

2023-03-29 07:13:38 +02:00

Compare

kjuulh force-pushed renovate/all from bef732c89d to 061ce3eff2

2023-04-03 16:46:53 +02:00

Compare

kjuulh force-pushed renovate/all from 061ce3eff2 to 8efa2f47a1

2023-04-03 19:06:36 +02:00

Compare

kjuulh force-pushed renovate/all from 8efa2f47a1 to 424ff78c07

2023-04-04 17:03:26 +02:00

Compare

kjuulh force-pushed renovate/all from 424ff78c07 to 390aa9b0c6

2023-04-04 17:25:36 +02:00

Compare

kjuulh force-pushed renovate/all from 390aa9b0c6 to c36d4c81f9

2023-04-04 18:53:49 +02:00

Compare

kjuulh force-pushed renovate/all from c36d4c81f9 to d22d7184cf

2023-04-04 21:12:53 +02:00

Compare

kjuulh force-pushed renovate/all from d22d7184cf to e27c04e282

2023-04-04 23:31:02 +02:00

Compare

kjuulh force-pushed renovate/all from e27c04e282 to b23b68725b

2023-04-05 02:38:50 +02:00

Compare

kjuulh force-pushed renovate/all from b23b68725b to 686830d0be

2023-04-05 20:22:01 +02:00

Compare

kjuulh force-pushed renovate/all from 686830d0be to 415108ea41

2023-04-06 19:44:57 +02:00

Compare

kjuulh force-pushed renovate/all from 415108ea41 to 9152963d60

2023-04-07 00:11:31 +02:00

Compare

kjuulh force-pushed renovate/all from 9152963d60 to 4ea46f671e

2023-04-07 18:26:31 +02:00

Compare

kjuulh force-pushed renovate/all from 4ea46f671e to fffeaf3be1

2023-04-12 01:12:20 +02:00

Compare

kjuulh force-pushed renovate/all from fffeaf3be1 to 7cc1cb2472

2023-04-12 17:21:18 +02:00

Compare

kjuulh force-pushed renovate/all from 7cc1cb2472 to 6a25f4b5e2

2023-04-13 15:13:20 +02:00

Compare

kjuulh force-pushed renovate/all from 6a25f4b5e2 to f59fc345dc

2023-04-13 19:41:28 +02:00

Compare

kjuulh force-pushed renovate/all from f59fc345dc to 108ad6c0d7

2023-04-13 20:26:09 +02:00

Compare

kjuulh force-pushed renovate/all from 108ad6c0d7 to 6262fca8a3

2023-04-15 13:22:37 +02:00

Compare

kjuulh force-pushed renovate/all from 6262fca8a3 to fd30aaf824

2023-04-17 20:55:47 +02:00

Compare

kjuulh force-pushed renovate/all from fd30aaf824 to 30ffbeabf6

2023-04-17 22:27:27 +02:00

Compare

kjuulh force-pushed renovate/all from 30ffbeabf6 to 49e151a841

2023-04-18 23:10:25 +02:00

Compare

kjuulh force-pushed renovate/all from 49e151a841 to e4cf5095b2

2023-04-20 20:24:13 +02:00

Compare

kjuulh force-pushed renovate/all from e4cf5095b2 to 8e50af8757

2023-04-20 20:45:46 +02:00

Compare

kjuulh force-pushed renovate/all from 8e50af8757 to 5f9fc1f801

2023-04-26 21:57:43 +02:00

Compare

kjuulh force-pushed renovate/all from 5f9fc1f801 to 3451faa6bb

2023-04-26 22:31:19 +02:00

Compare

kjuulh force-pushed renovate/all from 3451faa6bb to 05e068532f

2023-04-27 14:17:35 +02:00

Compare

kjuulh force-pushed renovate/all from 05e068532f to 2e2c491943

2023-04-27 18:19:52 +02:00

Compare

kjuulh force-pushed renovate/all from 2e2c491943 to b500c54fae

2023-04-27 19:25:43 +02:00

Compare

kjuulh force-pushed renovate/all from b500c54fae to 4a7b4b2228

2023-04-29 01:52:05 +02:00

Compare

kjuulh force-pushed renovate/all from 4a7b4b2228 to bf32b8a111

2023-04-29 21:21:12 +02:00

Compare

kjuulh force-pushed renovate/all from bf32b8a111 to 52318186a1

2023-05-02 19:50:41 +02:00

Compare

kjuulh force-pushed renovate/all from 52318186a1 to d13fe7dc11

2023-05-02 21:35:01 +02:00

Compare

kjuulh force-pushed renovate/all from d13fe7dc11 to 00bf3c7066

2023-05-04 20:53:02 +02:00

Compare

kjuulh force-pushed renovate/all from 00bf3c7066 to 9b4acc0b0f

2023-05-04 23:31:52 +02:00

Compare

kjuulh force-pushed renovate/all from 9b4acc0b0f to ac27805cfb

2023-05-06 17:09:51 +02:00

Compare

kjuulh force-pushed renovate/all from ac27805cfb to 3361cc4b16

2023-05-08 20:11:16 +02:00

Compare

kjuulh force-pushed renovate/all from 3361cc4b16 to e947b3024f

2023-05-09 13:49:56 +02:00

Compare

kjuulh force-pushed renovate/all from e947b3024f to 3dd02c48ec

2023-05-10 00:49:02 +02:00

Compare

kjuulh force-pushed renovate/all from 3dd02c48ec to 9369aba38c

2023-05-10 12:15:04 +02:00

Compare

kjuulh force-pushed renovate/all from 9369aba38c to 75ddc24f17

2023-05-11 17:02:52 +02:00

Compare

kjuulh force-pushed renovate/all from 75ddc24f17 to 9db5d9d2b2

2023-05-13 07:09:58 +02:00

Compare

kjuulh force-pushed renovate/all from 9db5d9d2b2 to 0ee3471438

2023-05-13 08:25:55 +02:00

Compare

kjuulh force-pushed renovate/all from 0ee3471438 to 78b41a6db1

2023-05-13 11:51:09 +02:00

Compare

kjuulh force-pushed renovate/all from 78b41a6db1 to 6bfa5dddbb

2023-05-16 19:49:29 +02:00

Compare

kjuulh force-pushed renovate/all from 6bfa5dddbb to cb5726c077

2023-05-17 01:06:39 +02:00

Compare

kjuulh force-pushed renovate/all from cb5726c077 to 23bccff952

2023-05-17 20:28:06 +02:00

Compare

kjuulh force-pushed renovate/all from 23bccff952 to a0fc646005

2023-05-19 02:09:30 +02:00

Compare

kjuulh force-pushed renovate/all from a0fc646005 to da9c4813e0

2023-05-20 01:59:28 +02:00

Compare

kjuulh force-pushed renovate/all from da9c4813e0 to d453eaa01c

2023-05-23 12:24:34 +02:00

Compare

kjuulh force-pushed renovate/all from d453eaa01c to 9c9f229c7a

2023-05-23 17:10:44 +02:00

Compare

kjuulh force-pushed renovate/all from 9c9f229c7a to 302350bdcb

2023-05-24 01:42:36 +02:00

Compare

kjuulh force-pushed renovate/all from 302350bdcb to 6650ce5d07

2023-05-26 10:47:57 +02:00

Compare

kjuulh force-pushed renovate/all from 6650ce5d07 to fe5dd08170

2023-05-30 12:57:44 +02:00

Compare

kjuulh force-pushed renovate/all from fe5dd08170 to 2f6a30145f

2023-06-07 23:54:46 +02:00

Compare

kjuulh force-pushed renovate/all from 2f6a30145f to efd86ac5e1

2023-06-08 02:53:22 +02:00

Compare

kjuulh force-pushed renovate/all from efd86ac5e1 to 810fa5c99f

2023-06-08 04:08:37 +02:00

Compare

kjuulh force-pushed renovate/all from 810fa5c99f to cf5e694074

2023-06-09 11:24:47 +02:00

Compare

kjuulh force-pushed renovate/all from cf5e694074 to f7488bcb00

2023-06-09 18:07:03 +02:00

Compare

kjuulh force-pushed renovate/all from f7488bcb00 to cb557ece16

2023-06-12 21:07:09 +02:00

Compare

kjuulh force-pushed renovate/all from cb557ece16 to 66a4ee26bb

2023-06-13 16:51:44 +02:00

Compare

kjuulh force-pushed renovate/all from 66a4ee26bb to a365233ea5

2023-06-14 03:17:04 +02:00

Compare

kjuulh force-pushed renovate/all from a365233ea5 to 66e6c7b142

2023-06-14 17:57:19 +02:00

Compare

kjuulh force-pushed renovate/all from 66e6c7b142 to fb3bcfc191

2023-06-14 18:24:04 +02:00

Compare

kjuulh force-pushed renovate/all from fb3bcfc191 to f082ce81fb

2023-06-18 02:32:54 +02:00

Compare

kjuulh force-pushed renovate/all from f082ce81fb to 7e386c460b

2023-06-18 22:42:12 +02:00

Compare

kjuulh force-pushed renovate/all from 7e386c460b to c0774979ff

2023-06-19 11:15:44 +02:00

Compare

kjuulh force-pushed renovate/all from c0774979ff to 4ede96376f

2023-06-20 20:59:01 +02:00

Compare

kjuulh force-pushed renovate/all from 4ede96376f to 3b2ed3cbeb

2023-06-21 03:36:33 +02:00

Compare

kjuulh force-pushed renovate/all from 3b2ed3cbeb to 463e09d049

2023-06-21 21:53:07 +02:00

Compare

kjuulh force-pushed renovate/all from 463e09d049 to 9c755a0f43

2023-06-22 00:39:09 +02:00

Compare

kjuulh force-pushed renovate/all from 9c755a0f43 to 075533668f

2023-06-23 06:44:59 +02:00

Compare

kjuulh force-pushed renovate/all from 075533668f to ee18115a53

2023-06-27 23:58:32 +02:00

Compare

kjuulh force-pushed renovate/all from ee18115a53 to 2475e239df

2023-06-29 19:48:33 +02:00

Compare

kjuulh force-pushed renovate/all from 2475e239df to 6096b9ff51

2023-06-29 21:09:20 +02:00

Compare

kjuulh force-pushed renovate/all from 6096b9ff51 to bc3071b258

2023-06-29 23:09:54 +02:00

Compare

kjuulh force-pushed renovate/all from bc3071b258 to f7fe7d0cf1

2023-06-30 19:06:38 +02:00

Compare

kjuulh force-pushed renovate/all from f7fe7d0cf1 to 1eabe7acca

2023-07-01 19:10:19 +02:00

Compare

kjuulh force-pushed renovate/all from 1eabe7acca to e010a3e5d0

2023-07-04 17:00:50 +02:00

Compare

kjuulh force-pushed renovate/all from e010a3e5d0 to 2a8dc072c3

2023-07-23 12:42:42 +02:00

Compare

kjuulh force-pushed renovate/all from 2a8dc072c3 to 5d965f3efc

2023-07-24 18:20:24 +02:00

Compare

kjuulh force-pushed renovate/all from 5d965f3efc to 1beced8359

2023-07-26 10:19:18 +02:00

Compare

kjuulh force-pushed renovate/all from 1beced8359 to 6df58098e6

2023-07-26 22:09:35 +02:00

Compare

kjuulh force-pushed renovate/all from 6df58098e6 to 866f9faf4b

2023-07-27 23:31:41 +02:00

Compare

kjuulh force-pushed renovate/all from 866f9faf4b to 50da8edbc0

2023-07-30 01:34:01 +02:00

Compare

kjuulh force-pushed renovate/all from 50da8edbc0 to b462b83147

2023-08-01 02:09:40 +02:00

Compare

kjuulh force-pushed renovate/all from b462b83147 to d36c62f4a4

2023-08-01 23:32:03 +02:00

Compare

kjuulh force-pushed renovate/all from d36c62f4a4 to d298f54cd1

2023-08-02 00:53:45 +02:00

Compare

kjuulh force-pushed renovate/all from d298f54cd1 to f9668938ab

2023-08-02 14:09:44 +02:00

Compare

kjuulh force-pushed renovate/all from f9668938ab to 1ae1c9977a

2023-08-04 17:43:46 +02:00

Compare

kjuulh force-pushed renovate/all from 1ae1c9977a to 1c9a3a7fe0

2023-08-08 23:58:16 +02:00

Compare

kjuulh force-pushed renovate/all from 1c9a3a7fe0 to 5ab5ebc967

2023-08-09 12:58:20 +02:00

Compare

kjuulh force-pushed renovate/all from 5ab5ebc967 to b341a44fff

2023-08-09 23:57:33 +02:00

Compare

kjuulh force-pushed renovate/all from b341a44fff to 534b8b70c9

2023-08-10 01:21:23 +02:00

Compare

kjuulh force-pushed renovate/all from 534b8b70c9 to de831ed013

2023-08-14 10:15:04 +02:00

Compare

kjuulh force-pushed renovate/all from de831ed013 to f887423459

2023-08-15 09:00:29 +02:00

Compare

kjuulh force-pushed renovate/all from f887423459 to 4a4f123b13

2023-08-15 22:31:34 +02:00

Compare

kjuulh force-pushed renovate/all from 4a4f123b13 to 56f985823d

2023-08-17 21:46:41 +02:00

Compare

kjuulh force-pushed renovate/all from 56f985823d to 25b0b8b5b5

2023-08-19 00:19:38 +02:00

Compare

kjuulh force-pushed renovate/all from 25b0b8b5b5 to a845db5b39

2023-08-21 18:54:21 +02:00

Compare

kjuulh force-pushed renovate/all from a845db5b39 to 80e6357166

2023-08-22 09:46:31 +02:00

Compare

kjuulh force-pushed renovate/all from 80e6357166 to eb13a8a420

2023-08-23 20:59:39 +02:00

Compare

kjuulh force-pushed renovate/all from eb13a8a420 to 1121987669

2023-08-24 20:32:51 +02:00

Compare

kjuulh force-pushed renovate/all from 1121987669 to e93a83d43c

2023-08-25 16:35:43 +02:00

Compare

kjuulh force-pushed renovate/all from e93a83d43c to 50d52c94eb

2023-08-25 21:27:33 +02:00

Compare

kjuulh force-pushed renovate/all from 50d52c94eb to 20ec8fc62f

2023-08-25 23:36:59 +02:00

Compare

kjuulh force-pushed renovate/all from 20ec8fc62f to 2f799a8059

2023-08-29 19:12:47 +02:00

Compare

kjuulh force-pushed renovate/all from 2f799a8059 to 24feeb75af

2023-08-31 23:34:37 +02:00

Compare

kjuulh force-pushed renovate/all from 24feeb75af to 2e22ae3b86

2023-09-03 16:06:16 +02:00

Compare

kjuulh force-pushed renovate/all from 2e22ae3b86 to 3739fcc75e

2023-09-04 14:34:55 +02:00

Compare

kjuulh force-pushed renovate/all from 3739fcc75e to aa67702699

2023-09-05 23:27:38 +02:00

Compare

kjuulh force-pushed renovate/all from aa67702699 to b9b6ba48cb

2023-09-06 21:32:55 +02:00

Compare

kjuulh force-pushed renovate/all from b9b6ba48cb to 6429d54988

2023-09-06 23:49:10 +02:00

Compare

kjuulh force-pushed renovate/all from 6429d54988 to 79b6260c15

2023-09-10 14:41:33 +02:00

Compare

kjuulh force-pushed renovate/all from 79b6260c15 to 8815a11afd

2023-09-11 20:28:00 +02:00

Compare

kjuulh force-pushed renovate/all from 8815a11afd to 7824d490f7

2023-09-12 19:29:03 +02:00

Compare

kjuulh force-pushed renovate/all from 7824d490f7 to 5d4800cba5

2023-09-12 20:19:39 +02:00

Compare

kjuulh force-pushed renovate/all from 5d4800cba5 to 29eb013a33

2023-09-12 20:50:22 +02:00

Compare

kjuulh force-pushed renovate/all from 29eb013a33 to e3b0f7ede9

2023-09-14 02:58:47 +02:00

Compare

kjuulh force-pushed renovate/all from e3b0f7ede9 to 09165a1916

2023-09-14 19:26:06 +02:00

Compare

kjuulh force-pushed renovate/all from 09165a1916 to 1d97282acd

2023-09-14 20:14:27 +02:00

Compare

kjuulh force-pushed renovate/all from 1d97282acd to 296e17a7d5

2023-09-20 18:33:54 +02:00

Compare

kjuulh force-pushed renovate/all from 296e17a7d5 to 4511485ea8

2023-09-21 03:27:35 +02:00

Compare

kjuulh force-pushed renovate/all from 4511485ea8 to 9aacbd2fa0

2023-09-21 15:29:27 +02:00

Compare

kjuulh force-pushed renovate/all from 9aacbd2fa0 to 9d5928b742

2023-09-22 02:10:51 +02:00

Compare

kjuulh force-pushed renovate/all from 9d5928b742 to 79875ea83c

2023-09-25 11:45:27 +02:00

Compare

kjuulh force-pushed renovate/all from 79875ea83c to 5edbb272c1

2023-09-27 18:28:43 +02:00

Compare

kjuulh force-pushed renovate/all from 5edbb272c1 to 8390ab1855

2023-10-02 20:32:11 +02:00

Compare

kjuulh force-pushed renovate/all from 8390ab1855 to 70768113e3

2023-10-05 15:08:45 +02:00

Compare

kjuulh force-pushed renovate/all from 70768113e3 to 482b849dc0

2023-10-05 15:30:36 +02:00

Compare

kjuulh force-pushed renovate/all from 482b849dc0 to 8b0756b8e9

2023-10-05 17:10:34 +02:00

Compare

kjuulh force-pushed renovate/all from 8b0756b8e9 to f2626e50e3

2023-10-06 00:40:29 +02:00

Compare

kjuulh force-pushed renovate/all from f2626e50e3 to b598fdd8ad

2023-10-06 01:09:26 +02:00

Compare

kjuulh force-pushed renovate/all from b598fdd8ad to 6f0f1ec159

2023-10-06 14:41:29 +02:00

Compare

kjuulh force-pushed renovate/all from 6f0f1ec159 to fe0acf2383

2023-10-09 23:30:00 +02:00

Compare

kjuulh force-pushed renovate/all from fe0acf2383 to 6e1f938d46

2023-10-10 02:10:56 +02:00

Compare

kjuulh force-pushed renovate/all from 6e1f938d46 to 4942d64805

2023-10-10 21:06:11 +02:00

Compare

kjuulh force-pushed renovate/all from 4942d64805 to cac9a238c8

2023-10-10 21:58:40 +02:00

Compare

kjuulh force-pushed renovate/all from cac9a238c8 to 59cdd7531a

2023-10-10 22:43:05 +02:00

Compare

kjuulh force-pushed renovate/all from 59cdd7531a to bf1c51e9af

2023-10-12 01:36:14 +02:00

Compare

kjuulh force-pushed renovate/all from bf1c51e9af to d09ff00959

2023-10-12 02:10:54 +02:00

Compare

kjuulh force-pushed renovate/all from d09ff00959 to 6f340c697d

2023-10-18 00:00:40 +02:00

Compare

kjuulh force-pushed renovate/all from 6f340c697d to b946533f7f

2023-10-18 00:24:04 +02:00

Compare

kjuulh force-pushed renovate/all from b946533f7f to a183345750

2023-10-18 22:55:34 +02:00

Compare

kjuulh force-pushed renovate/all from a183345750 to 86c8a80e7a

2023-10-19 04:00:52 +02:00

Compare

kjuulh force-pushed renovate/all from 86c8a80e7a to ffd566007e

2023-10-19 21:50:03 +02:00

Compare

kjuulh force-pushed renovate/all from ffd566007e to ced306bfd1

2023-10-24 20:57:46 +02:00

Compare

kjuulh force-pushed renovate/all from ced306bfd1 to 26c04701ee

2023-10-24 22:55:23 +02:00

Compare

kjuulh force-pushed renovate/all from 26c04701ee to 70c49c5e1a

2023-10-25 11:43:44 +02:00

Compare

kjuulh force-pushed renovate/all from 70c49c5e1a to f434dbf17c

2023-10-26 03:18:35 +02:00

Compare

kjuulh force-pushed renovate/all from f434dbf17c to fa06232ca9

2023-10-26 18:12:05 +02:00

Compare

kjuulh force-pushed renovate/all from fa06232ca9 to edd3ff0912

2023-10-26 19:02:09 +02:00

Compare

kjuulh force-pushed renovate/all from edd3ff0912 to 3ebe1e3b83

2023-10-27 00:34:52 +02:00

Compare

kjuulh force-pushed renovate/all from 3ebe1e3b83 to c8abe0591e

2023-10-30 23:02:52 +01:00

Compare

kjuulh force-pushed renovate/all from c8abe0591e to c214e9fd09

2023-10-31 17:01:44 +01:00

Compare

kjuulh force-pushed renovate/all from c214e9fd09 to 54f410fed5

2023-11-04 16:01:23 +01:00

Compare

kjuulh force-pushed renovate/all from 54f410fed5 to eac0794978

2023-11-04 16:24:44 +01:00

Compare

kjuulh force-pushed renovate/all from eac0794978 to d0fadcd740

2023-11-04 21:20:24 +01:00

Compare

kjuulh force-pushed renovate/all from d0fadcd740 to aefdb97d4b

2023-11-04 22:35:58 +01:00

Compare

kjuulh force-pushed renovate/all from aefdb97d4b to 49a2090b7d

2023-11-05 07:32:34 +01:00

Compare

kjuulh force-pushed renovate/all from 49a2090b7d to d4f2242a49

2023-11-07 22:15:04 +01:00

Compare

kjuulh force-pushed renovate/all from d4f2242a49 to eade311c39

2023-11-08 04:25:55 +01:00

Compare

kjuulh force-pushed renovate/all from eade311c39 to 6a3c95e2e3

2023-11-09 00:26:30 +01:00

Compare

kjuulh force-pushed renovate/all from 6a3c95e2e3 to b2fe8468fa

2023-11-14 20:42:04 +01:00

Compare

kjuulh force-pushed renovate/all from b2fe8468fa to 91ccc2910f

2023-11-14 22:03:03 +01:00

Compare

kjuulh force-pushed renovate/all from 91ccc2910f to 88f4036b9c

2023-11-15 19:51:37 +01:00

Compare

kjuulh force-pushed renovate/all from 88f4036b9c to c88ab31725

2023-11-16 05:40:25 +01:00

Compare

kjuulh force-pushed renovate/all from c88ab31725 to df1cc0b3a8

2023-11-16 16:55:53 +01:00

Compare

kjuulh force-pushed renovate/all from df1cc0b3a8 to bfac543c56

2023-11-16 23:50:12 +01:00

Compare

kjuulh force-pushed renovate/all from bfac543c56 to 604dbd41c6

2023-11-21 23:16:19 +01:00

Compare

kjuulh force-pushed renovate/all from 604dbd41c6 to fba1c97c17

2023-11-22 01:11:41 +01:00

Compare

kjuulh force-pushed renovate/all from fba1c97c17 to 5d4c5c59d1

2023-11-22 08:51:27 +01:00

Compare

kjuulh force-pushed renovate/all from 5d4c5c59d1 to 9f47963537

2023-11-27 16:51:06 +01:00

Compare

kjuulh force-pushed renovate/all from 9f47963537 to 200efb5d54

2023-11-27 17:40:45 +01:00

Compare

kjuulh force-pushed renovate/all from 200efb5d54 to dee42ad6aa

2023-11-29 23:38:59 +01:00

Compare

kjuulh force-pushed renovate/all from dee42ad6aa to 047362929e

2023-11-30 20:09:59 +01:00

Compare

kjuulh force-pushed renovate/all from 047362929e to 06963dbf18

2023-12-01 07:18:19 +01:00

Compare

kjuulh force-pushed renovate/all from 06963dbf18 to e74da147b2

2023-12-05 20:27:08 +01:00

Compare

kjuulh force-pushed renovate/all from e74da147b2 to 5c45bdf1a9

2023-12-05 22:00:26 +01:00

Compare

kjuulh force-pushed renovate/all from 5c45bdf1a9 to 1cd8b8b3ac

2023-12-06 13:35:14 +01:00

Compare

kjuulh force-pushed renovate/all from 1cd8b8b3ac to c212ad9141

2023-12-06 15:59:03 +01:00

Compare

kjuulh force-pushed renovate/all from c212ad9141 to 89d703d0d4

2023-12-06 16:47:00 +01:00

Compare

kjuulh force-pushed renovate/all from 89d703d0d4 to bf241e2eb5

2023-12-07 14:22:05 +01:00

Compare

kjuulh force-pushed renovate/all from bf241e2eb5 to 4f94399a1c

2023-12-08 15:14:57 +01:00

Compare

kjuulh force-pushed renovate/all from 4f94399a1c to e679647b10

2023-12-09 00:48:23 +01:00

Compare

kjuulh force-pushed renovate/all from e679647b10 to a5fd913a5e

2023-12-09 21:11:36 +01:00

Compare

kjuulh force-pushed renovate/all from a5fd913a5e to bac134dc16

2023-12-12 01:11:36 +01:00

Compare

kjuulh force-pushed renovate/all from bac134dc16 to 1447f76b90

2023-12-12 18:28:43 +01:00

Compare

kjuulh force-pushed renovate/all from 1447f76b90 to 6587ce8a46

2023-12-14 18:08:34 +01:00

Compare

kjuulh force-pushed renovate/all from 6587ce8a46 to 267ea601ff

2023-12-18 19:33:27 +01:00

Compare

kjuulh force-pushed renovate/all from 267ea601ff to 572a3f7299

2023-12-19 00:11:40 +01:00

Compare

kjuulh force-pushed renovate/all from 572a3f7299 to 4627c0b900

2023-12-21 10:52:51 +01:00

Compare

kjuulh force-pushed renovate/all from 4627c0b900 to bf735f99cb

2023-12-21 11:37:23 +01:00

Compare

kjuulh force-pushed renovate/all from bf735f99cb to 25685ea9f5

2023-12-26 18:19:46 +01:00

Compare

kjuulh force-pushed renovate/all from 25685ea9f5 to 1a57c60773

2023-12-26 19:58:14 +01:00

Compare

kjuulh force-pushed renovate/all from 1a57c60773 to f15bf132ca

2023-12-29 00:42:03 +01:00

Compare

kjuulh force-pushed renovate/all from f15bf132ca to fe82ec47f5

2023-12-29 20:55:25 +01:00

Compare

kjuulh force-pushed renovate/all from fe82ec47f5 to c3ddfbb65b

2023-12-29 21:40:40 +01:00

Compare

kjuulh force-pushed renovate/all from c3ddfbb65b to ae9d4798c1

2024-01-02 23:24:34 +01:00

Compare

kjuulh force-pushed renovate/all from ae9d4798c1 to b6d69e5e0e

2024-01-04 16:30:43 +01:00

Compare

kjuulh force-pushed renovate/all from b6d69e5e0e to a6fef9d524

2024-01-05 20:19:39 +01:00

Compare

kjuulh force-pushed renovate/all from a6fef9d524 to e3c0f47042

2024-01-09 23:56:27 +01:00

Compare

kjuulh force-pushed renovate/all from e3c0f47042 to 98da6a7e76

2024-01-12 03:49:11 +01:00

Compare

kjuulh force-pushed renovate/all from 98da6a7e76 to ea3398fd0f

2024-01-12 17:58:22 +01:00

Compare

kjuulh force-pushed renovate/all from ea3398fd0f to 5958dc0bc0

2024-01-16 22:42:43 +01:00

Compare

kjuulh force-pushed renovate/all from 5958dc0bc0 to e832a14265

2024-01-18 04:27:26 +01:00

Compare

kjuulh force-pushed renovate/all from e832a14265 to e69756c8d2

2024-01-18 20:20:58 +01:00

Compare

kjuulh force-pushed renovate/all from e69756c8d2 to 2fccf25dbb

2024-01-19 13:00:51 +01:00

Compare

kjuulh force-pushed renovate/all from 2fccf25dbb to d057e2c6b8

2024-01-23 20:50:56 +01:00

Compare

kjuulh force-pushed renovate/all from d057e2c6b8 to e443f11e9e

2024-01-24 02:06:44 +01:00

Compare

kjuulh force-pushed renovate/all from e443f11e9e to dad5f726b9

2024-01-24 11:12:33 +01:00

Compare

kjuulh force-pushed renovate/all from dad5f726b9 to ceaa341c55

2024-01-25 09:52:44 +01:00

Compare

kjuulh force-pushed renovate/all from ceaa341c55 to 9858a4b01d

2024-01-26 02:06:39 +01:00

Compare

kjuulh force-pushed renovate/all from 9858a4b01d to 5e845fc111

2024-01-26 14:24:42 +01:00

Compare

kjuulh force-pushed renovate/all from 5e845fc111 to 0a6cacfa24

2024-01-29 20:13:28 +01:00

Compare

kjuulh force-pushed renovate/all from 0a6cacfa24 to 677cf3837a

2024-01-30 19:36:59 +01:00

Compare

kjuulh force-pushed renovate/all from 677cf3837a to e6ffdfef82

2024-01-31 21:54:33 +01:00

Compare

kjuulh force-pushed renovate/all from e6ffdfef82 to e4e41d767d

2024-02-01 03:51:49 +01:00

Compare

kjuulh force-pushed renovate/all from e4e41d767d to ceaaffea64

2024-02-04 16:18:27 +01:00

Compare

kjuulh force-pushed renovate/all from ceaaffea64 to 252fdc8ba1

2024-02-05 18:43:49 +01:00

Compare

kjuulh force-pushed renovate/all from 252fdc8ba1 to 440ce21739

2024-02-07 01:53:50 +01:00

Compare

kjuulh force-pushed renovate/all from 440ce21739 to 530e71cec7

2024-02-07 04:54:38 +01:00

Compare

kjuulh force-pushed renovate/all from 530e71cec7 to fea836129d

2024-02-07 18:43:42 +01:00

Compare

kjuulh force-pushed renovate/all from fea836129d to 4723ccf1e8

2024-02-07 19:44:29 +01:00

Compare

kjuulh force-pushed renovate/all from 4723ccf1e8 to dbef10ebe8

2024-02-08 19:17:07 +01:00

Compare

kjuulh force-pushed renovate/all from dbef10ebe8 to fb0a626543

2024-02-08 20:08:33 +01:00

Compare

kjuulh force-pushed renovate/all from fb0a626543 to 00255b3aa8

2024-02-10 11:13:21 +01:00

Compare

kjuulh force-pushed renovate/all from 00255b3aa8 to ee43f7b636

2024-02-12 16:26:40 +01:00

Compare

kjuulh force-pushed renovate/all from ee43f7b636 to 783c2730bf

2024-02-13 05:51:05 +01:00

Compare

kjuulh force-pushed renovate/all from 783c2730bf to 293c386164

2024-02-13 19:40:20 +01:00

Compare

kjuulh force-pushed renovate/all from 293c386164 to 9097a53768

2024-02-14 00:19:27 +01:00

Compare

kjuulh force-pushed renovate/all from 9097a53768 to a3b192a1c9

2024-02-15 19:54:11 +01:00

Compare

kjuulh force-pushed renovate/all from a3b192a1c9 to 11be840a49

2024-02-16 03:07:30 +01:00

Compare

kjuulh force-pushed renovate/all from 11be840a49 to 972cc371a4

2024-02-16 19:10:22 +01:00

Compare

kjuulh force-pushed renovate/all from 972cc371a4 to e56109ab5f

2024-02-20 22:38:29 +01:00

Compare

kjuulh force-pushed renovate/all from e56109ab5f to 993c15b16c

2024-02-21 03:53:38 +01:00

Compare

kjuulh force-pushed renovate/all from 993c15b16c to 4f5244d688

2024-02-21 21:28:11 +01:00

Compare

kjuulh force-pushed renovate/all from 4f5244d688 to 5a8918c6d5

2024-02-22 01:28:19 +01:00

Compare

kjuulh force-pushed renovate/all from 5a8918c6d5 to 5d48b26061

2024-02-22 22:58:54 +01:00

Compare

kjuulh force-pushed renovate/all from 5d48b26061 to bb43ac8e94

2024-02-23 20:21:54 +01:00

Compare

kjuulh force-pushed renovate/all from bb43ac8e94 to 7cea8300cc

2024-02-25 14:39:40 +01:00

Compare

kjuulh force-pushed renovate/all from 7cea8300cc to cb23381f3b

2024-02-26 20:43:30 +01:00

Compare

kjuulh force-pushed renovate/all from cb23381f3b to ede986463f

2024-03-01 12:42:13 +01:00

Compare

kjuulh force-pushed renovate/all from ede986463f to a4d07b3966

2024-03-01 13:56:02 +01:00

Compare

kjuulh force-pushed renovate/all from a4d07b3966 to c756cb1362

2024-03-04 16:25:47 +01:00

Compare

kjuulh force-pushed renovate/all from c756cb1362 to 8dcd28c880

2024-03-04 19:00:48 +01:00

Compare

kjuulh force-pushed renovate/all from 8dcd28c880 to 0a8548a8e3

2024-03-05 19:21:34 +01:00

Compare

kjuulh force-pushed renovate/all from 0a8548a8e3 to eacd9b028d

2024-03-05 20:44:37 +01:00

Compare

kjuulh force-pushed renovate/all from eacd9b028d to d2d1335a56

2024-03-07 12:04:16 +01:00

Compare

kjuulh force-pushed renovate/all from d2d1335a56 to 282d3120f9

2024-03-11 16:20:22 +01:00

Compare

kjuulh force-pushed renovate/all from 282d3120f9 to b4948a117a

2024-03-12 18:35:15 +01:00

Compare

kjuulh force-pushed renovate/all from b4948a117a to 471550136b

2024-03-13 17:25:46 +01:00

Compare

kjuulh force-pushed renovate/all from 471550136b to b380997823

2024-03-13 22:51:05 +01:00

Compare

kjuulh force-pushed renovate/all from b380997823 to f1da9eb206

2024-03-15 12:03:34 +01:00

Compare

kjuulh force-pushed renovate/all from f1da9eb206 to 5067863a02

2024-03-15 13:44:10 +01:00

Compare

kjuulh force-pushed renovate/all from 5067863a02 to 4e0f74b890

2024-03-18 20:12:31 +01:00

Compare

kjuulh force-pushed renovate/all from 4e0f74b890 to 714ab1748b

2024-03-19 18:41:15 +01:00

Compare

kjuulh force-pushed renovate/all from 714ab1748b to 2a6b3d6657

2024-03-19 22:44:29 +01:00

Compare

kjuulh force-pushed renovate/all from 2a6b3d6657 to 2315f6af43

2024-03-20 20:41:29 +01:00

Compare

kjuulh force-pushed renovate/all from 2315f6af43 to 5c1fd54f9c

2024-03-21 22:45:47 +01:00

Compare

kjuulh force-pushed renovate/all from 5c1fd54f9c to 68a21e28a1

2024-03-24 16:58:19 +01:00

Compare

kjuulh force-pushed renovate/all from 68a21e28a1 to 9b119afcd7

2024-03-26 22:47:11 +01:00

Compare

kjuulh force-pushed renovate/all from 9b119afcd7 to fa84fb611a

2024-03-29 18:29:24 +01:00

Compare

kjuulh force-pushed renovate/all from fa84fb611a to f3f479f63a

2024-03-29 19:13:40 +01:00

Compare

kjuulh force-pushed renovate/all from f3f479f63a to 4cf632d999

2024-03-31 15:06:37 +02:00

Compare

kjuulh force-pushed renovate/all from 4cf632d999 to 7bf92990dc

2024-04-02 23:03:28 +02:00

Compare

kjuulh force-pushed renovate/all from 7bf92990dc to 2a726da59f

2024-04-03 10:52:56 +02:00

Compare

kjuulh force-pushed renovate/all from 2a726da59f to f2d8f44177

2024-04-03 23:46:00 +02:00

Compare

kjuulh force-pushed renovate/all from f2d8f44177 to d6f31b4982

2024-04-04 03:47:49 +02:00

Compare

kjuulh force-pushed renovate/all from d6f31b4982 to 250a9d9406

2024-04-04 10:18:29 +02:00

Compare

kjuulh force-pushed renovate/all from 250a9d9406 to 88185fb561

2024-04-04 17:25:48 +02:00

Compare

kjuulh force-pushed renovate/all from 88185fb561 to 336e55341f

2024-04-04 18:09:23 +02:00

Compare

kjuulh force-pushed renovate/all from 336e55341f to 08d6745a51

2024-04-04 18:57:52 +02:00

Compare

kjuulh force-pushed renovate/all from 08d6745a51 to 9f52c3df03

2024-04-04 20:36:21 +02:00

Compare

kjuulh force-pushed renovate/all from 9f52c3df03 to ba31795303

2024-04-05 19:30:57 +02:00

Compare

kjuulh closed this pull request

2024-04-08 21:37:05 +02:00

This repo is archived. You cannot comment on pull requests.

1 Participants

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: kjuulh/dagger#52