Significant Changes New skopeo copy options --remove-list-signatures and --strip-removed-platforms What's Changed Bump Skopeo to v1.23.0, common 0.68.0, image 5.40.0, storage 1.63.0 by @TomSweeneyRedHat in #2881 CI migration by @mtrmac in #2883 ci: switch self-hosted runners from Oracle to CNCF Ubuntu by @timcoding1988 in #2887 [skip-ci] Update actions/checkout action to v6.0.3 by @renovate[bot] i…
Please Note! The Configuration File lookup behavior has changed. Callers of functions in this project that read configuration files should refer to containers-config(5) for details. What's Changed Bump to v1.20.0 then v1.21.0-dev by @TomSweeneyRedHat in #2666 chore(deps): update dependency golangci/golangci-lint to v2.3.1 by @renovate[bot] in #2668 fix(deps): update module github.com/containers/st…
What's Changed [release-1.11] CVE-2025-65637 Logrus by @TomSweeneyRedHat in #2789 [release-1.11] Bump Go Jose to v3.0.5, CVE-2026-34986, Skopeo to v1.11.5 by @TomSweeneyRedHat in #2863 Full Changelog: v1.11.4...v1.11.5
What's Changed [release-1.14] Bump Go Jose to v3.0.5, CVE-2026-34986 by @TomSweeneyRedHat in #2862 [release-1.14] Fixes Listing tags in JFrog Artifactory may fail by @TomSweeneyRedHat in #2381 [release-1.14] Support CI testing on non-x86_64 by @cevich in #2610 [release-1.14] Add conditional release-checking system test by @cevich in #2642 Full Changelog: v1.14.5...v1.14.6
What's Changed [release-1.18] Bump Go Jose v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #2853 [release-1.18] Fix CVE-2025-27144, bump Skopeo to v1.18.1 by @TomSweeneyRedHat in #2543 Move RHEL branches to TMT by @lsm5 in #2619 Full Changelog: v1.18.0...v1.18.2
Full Changelog: v1.20.0...v1.20.1 [release-1.20] Bump Go Jose v4.1.4, CVE-2026-34986 by @TomSweeneyRedHat in #2852
What's Changed Fixes signature verification of images which only sign the per-platform manifest in skopeo proxy, by @wking in #2847 New Contributors @wking made their first contribution in #2847 Full Changelog: v1.22.1...v1.22.2
What's Changed [release-1.22] Skopeo v1.22.0 by @TomSweeneyRedHat in #2800 Bump Skopeo to v1.22.1, CVE-2026-34986, c/common v067.1, c/image v5.39.2 by @TomSweeneyRedHat in #2842 Full Changelog: v1.22.0...v1.22.1
What's Changed [release-1.9] 1.9 backports by @mtrmac in #1784 [release-1.9] Bump ocicrypt and go-jose CVE-2024-28180 by @TomSweeneyRedHat in #2293 [release-1.9] remove square/jose, and bump to ocicrypt v1.1.8 by @TomSweeneyRedHat in #2314 [release-1.9] Support CI testing on non-x86_64 by @cevich in #2612 [release-1.9] Add conditional release-checking system test by @cevich in #2644 [release-1.9]…
What's Changed [release-1.22] Skopeo v1.22.0 by @TomSweeneyRedHat in #2800 [release-1.21] Packit: use post-modifications hook to update downstream TMT plan by @lsm5 in #2767 Full Changelog: v1.21.0...v1.22.0
What's Changed [release-1.11] CVE-2025-65637 Logrus by @TomSweeneyRedHat in #2789 Full Changelog: v1.11.3...v1.11.4