What's Changed Notable changes Bump Buildah to v1.45.0, c/storage v1.64.0, c/image v5.41.0, c/common v0.69.0 by @TomSweeneyRedHat in #7014 Makefile: add install.nobuild target to install ONLY. by @rahilarious in #6984 link org wide LLM_POLICY by @Luap99 in #7018 Run tests in parallel on testing-farm by @nalind in #7015 Packit config update to skip TF jobs for unavailable composes and Fedora-45 dow…
What's Changed Notable changes packit: add fedora-45 to dist_git_branches by @lsm5 in #7115 [release-1.45] vendor: update storage to v1.64.2 by @Luap99 in #7151 [release-1.45] tag v1.45.2 by @nalind in #7159 copier: put: resolve symlinks before os.Root path check by @Honny1 copier: reject relative symlink escapes, only resolve absolute ones by @Honny1 Full Changelog: v1.45.1...v1.45.2
What's Changed Notable changes [release-1.43] Fix the typo in bud test by @dashea in #7132 [release-1.43] vendor: update storage to v1.62.2 by @Luap99 in #7152 copier: put: resolve symlinks before os.Root path check by @Honny1 copier: reject relative symlink escapes, only resolve absolute ones by @Honny1 Full Changelog: v1.43.4...v1.43.5
What's Changed Notable changes [release-1.43] Bump Buildah to v1.43.3 by @TomSweeneyRedHat in #7019 [release-1.43] bump golang.org/x/crypto to v0.56.0 - CVE-2026-78662, CVE-2026-56855 by @lsm5 in #7100 Merge commit from fork to incorporate fixes from GHSA-3528-5p26-cf44. [release-1.43] tag v1.43.4 by @nalind in #7113 Full Changelog: v1.43.3...v1.43.4
What's Changed Notable changes [release-1.45] vendor: bump golang.org/x/crypto to v0.56.0 - CVE-2026-78662, CVE-2026-56855 by @lsm5 in #7110 Merge commit from fork to incorporate fixes from GHSA-3528-5p26-cf44. [release-1.45] tag v1.45.1 by @nalind in #7112 Full Changelog: v1.45.0...v1.45.1
What's Changed Notable changes [release-1.43] fix packit by @lsm5 in #6887 [release-1.43] rpm/buildah.spec tests: require xz and /usr/bin/selinuxenabled by @lsm5 in #6909 [release-1.43] Add new CI github actions CI to this branch by @Luap99 in #6921 [release-1.43] Bump golang.org/x/crypto to v0.53.0 for CVE-2026-39830 by @lsm5 in #6929 Full Changelog: v1.43.2...v1.43.3
What's Changed Notable changes Bump Buildah to v1.44.0, then to v1.45.0-dev by @TomSweeneyRedHat in #6877 bump oc/selinux to v1.15.0, remove !linux wrappers by @kolyshkin in #6864 Add a FollowSymlink option to AddAndCopyOptions to allow disabling deference of symlinks by @BenjaminSchubert in #6760 new gha ci with lima by @timcoding1988 in #6884 ci: install cached Docker debs for debian conformance…
What's Changed Notable changes [release-1.44] Add new CI github actions CI to this branch by @Luap99 in #6917 [release-1.44] fix opaque whiteout pull error regression by @Luap99 in #6923 Full Changelog: v1.44.0...v1.44.1
What's Changed Notable changes [release-1.43] Bump c/common v0.67.1, c/image v5.39.2, Buildah v1.43.1 by @TomSweeneyRedHat in #6771 [release-1.43] Cite go module change by @baude in #6831 [release-1.43] Backport a number of commits for a security fix by @TomSweeneyRedHat in #6878 Full Changelog: v1.43.1...v1.43.2
Please Note! The Configuration File lookup behavior has changed. Callers of functions in this project that read configuration files should refer to containers-config(5) for details. What's Changed Notable changes fix(build): make --tag oci-archive:xxx.tar work with simple images by @aeijdenberg in #6284 RPM: build with sequoia on F43+ by @lsm5 in #6395 Bump Buildah to v1.42.0, storage v1.61.0, ima…
What's Changed Notable changes [release-1.39] CVE-2025-49713 x/crypto v0.43.0, bump to Buildah v1.39.9 by @TomSweeneyRedHat in #6612 [release-1.39] Bump Go Jose to v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #6795 Full Changelog: v1.39.8...v1.39.9
What's Changed [release-1.29] Bump Go Jose to v3.0.5, CVE-2026-34986, Buildah to v1.29.8 by @TomSweeneyRedHat in #6825 [release-1.29] CVE-2025-49713 x/crypto, Buildah to 1.29.7 by @TomSweeneyRedHat in #6633 Full Changelog: v1.29.7...v1.29.8
What's Changed [release-1.26] Bump runc up to 1.2.9 for CVE-2025-52881, CVE-2025-31133 and CVE-2025-52565 by @cevich in #6570 [release-1.26] Fix CVE-2025-47913 with x/crypto + minimum go bump by @cevich in #6813 Full Changelog: v1.26.10...v1.26.11
What's Changed [release-1.33] Bump Go Jose v3.0.5, CVE-2026-34986 by @TomSweeneyRedHat in #6818 [release-1.33] CVE-2025-49713 x/crypto, Buildah to 1.33.14 by @TomSweeneyRedHat in #6616 Full Changelog: v1.33.14...v1.33.15
What's Changed Notable changes [release-1.41] Bump Jose to v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #6792 [release-1.41] Buildah to 1.41.8 for CVE-2025-47913 by @TomSweeneyRedHat in #6620 [release-1.41] CI config: post-branch update by @nalind in #6673 [release-1.41] fix call to chown by @nalind in #6763 Full Changelog: v1.41.8...v1.41.9
What's Changed Notable changes [release-1.43] Bump to Buildah v1.43.0 by @TomSweeneyRedHat in #6671 [release-1.43] fix call to chown by @nalind in #6761 [release-1.43] update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] by @nalind in #6775 [release-1.43] ignore ErrLayerUnknown in cache lookup by @nalind in #6764 [release-1.43] Bump c/common v0.67.1, c/image v5.39.2, Buildah v1.43.1 by…
What's Changed Notable changes [release-1.42] Bump runc to v1.3.4 by @TomSweeneyRedHat in #6560 [release-1.42] Run: don't try to encode SystemContext with json by @nalind in #6665 [release-1.42] tests: use cached images instead of fedoraproject.org by @nalind in #6667 [release-1.42] test: do not untar archive into fs when checking file names by @nalind in #6668 [release-1.42] chroot.bats(chroot wi…
What's Changed [release-1.21] Replace registry.centos.org by @cevich in #4854 [release-1.21] conformance test: ignore file type bits when comparing layers by @cevich in #5265 [release-1.21] conformance tests: don't break on trailing zeroes in layer blobs by @openshift-cherrypick-robot in #5509 [release-1.21] tests/conformance/testdata/Dockerfile.add:... by @openshift-cherrypick-robot in #6054 [rel…