v1.40.0

What's Changed

Notable changes

• Bump Buildah to v1.39.0, c/storage v1.57.1, c/image v5.34.0, c/common v0.62.0 by @TomSweeneyRedHat in #5962
• CI: parallize unit tests by @flouthoc in #5954
• .cirrus: bump ci resources by @flouthoc in #5979
• Distinguish --mount=type=cache locations by ownership, too by @nalind in #5978
• Switch to the CNCF Code of Conduct by @mheon in #5982
• .cirrus: use more cores for smoke task by @flouthoc in #5986
• Use tmpfs for integration tests by @flouthoc in #5959
• Support the containers.conf container_name_as_hostname option by @nalind in #5943
• cirrus: reduce task timeout by @Luap99 in #5994
• chroot createPlatformContainer: use MS_REMOUNT by @nalind in #5992
• conformance: make TestCommit and TestConformance parallel by @flouthoc in #5995
• Fix Conformance tests on ARM64 by @Honny1 in #5990
• tests/conformance/testdata/Dockerfile.add: update some URLs by @nalind in #6012
• [skip-ci] TMT: system tests by @lsm5 in #5885
• internal/mkcw.Archive(): use github.com/containers/storage/pkg/ioutils by @nalind in #6031
• github: disable cron rerun action by @Luap99 in #6036
• Use UnparsedInstance.Manifest instead of ImageSource.GetManifest by @mtrmac in #6014
• stage_executor: history should include heredoc summary correctly by @flouthoc in #6041
• buildah-build.1.md: secret examples by @hdub-tech in #5999
• github: remove cirrus rerun action by @Luap99 in #6063
• fix: dockerfiles... always evaluates to an empty list by @aeijdenberg in #6047
• Update to Go 1.23 and bump golang.org/x/crypto v0.36.0 by @Luap99 in #6060
• Add --parents option for COPY in Containerfiles by @Honny1 in #6008
• Mask thermal paths by @giuseppe in #6074
• vendor: bump c/common to dbeb17e40c80 by @flouthoc in #6039
• Fix built-in args on ARM64 by @Honny1 in #6076
• vendor: update github.com/opencontainers/selinux to v1.12.0 by @Luap99 in #6079
• feat: use HistoryTimestamp, if set, for oci-archive entries by @aeijdenberg in #6023
• createPlatformContainer: drop MS_REMOUNT|MS_BIND by @nalind in #6088
• add: report error while creating dir for URL source. by @flouthoc in #6087
• Allow extendedGlob to work with Windows paths by @danegsta in #6083
• build: return ExecErrorCodeGeneric when git operation fails instead of relaying error code directly from git by @flouthoc in #6092
• cmd/buildah: rm unused code by @kolyshkin in #6101
• stage_executor: reset platform in systemcontext for every stage. by @flouthoc in #5971
• Golangci v2 by @kolyshkin in #6109
• Modernize by @kolyshkin in #6118
• Add a link to project governance and MAINTAINERS file by @mheon in #6108
• stage_executor,getCreatedBy: expand buildArgs before invoking generatePathChecksum by @flouthoc in #6110
• .github: check_cirrus_cron work around github bug by @Luap99 in #6120
• build: add support for --inherit-labels by @flouthoc in #6103
• cli: hide the completion command instead of disabling it outright by @nalind in #6128
• cirrus: make Total Success wait for rootless integration by @Luap99 in #6130
• [CI:DOCS] Document rw/src for --mount in buildah-run(1) by @nalind in #6127
• Update Buildah issue template to new version and support podman build by @ninja-quokka in #6099
• chroot: use symbolic names when complaining about mount() errors by @nalind in #6129

Dependency updates

• Update dependency containers/automation_images to v20250131 by @renovate in #5966
• Update module golang.org/x/sync to v0.11.0 by @renovate in #5969
• Update module golang.org/x/sys to v0.30.0 by @renovate in #5970
• fix(deps): update module golang.org/x/term to v0.29.0 by @renovate in #5972
• fix(deps): update module golang.org/x/crypto to v0.33.0 by @renovate in #5981
• fix(deps): update module github.com/spf13/cobra to v1.9.0 by @renovate in #5991
• fix(deps): update module github.com/opencontainers/runc to v1.2.5 by @renovate in #5989
• fix(deps): update module github.com/moby/buildkit to v0.20.0 by @renovate in #5997
• fix(deps): update module tags.cncf.io/container-device-interface to v0.8.1 by @renovate in #6004
• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] by @renovate in #6005
• fix(deps): update module github.com/opencontainers/runtime-spec to v1.2.1 by @renovate in #6013
• fix(deps): update module github.com/containers/image/v5 to v5.34.1 by @renovate in #6015
• fix(deps): update module github.com/opencontainers/image-spec to v1.1.1 by @renovate in #6020
• fix(deps): update module github.com/moby/buildkit to v0.20.1 by @renovate in #6032
• fix(deps): update github.com/containers/luksy digest to 40bd943 by @renovate in #6016
• fix(deps): update module github.com/containers/common to v0.62.1 by @renovate in #6021
• fix(deps): update module github.com/containers/storage to v1.57.2 by @renovate in #6042
• fix(deps): update module github.com/containers/image/v5 to v5.34.2 by @renovate in #6057
• fix(deps): update module github.com/containers/common to v0.62.2 by @renovate in #6062
• chore(deps): update module golang.org/x/net to v0.36.0 [security] by @renovate in #6064
• fix(deps): update module tags.cncf.io/container-device-interface to v1 by @renovate in #6045
• fix(deps): update module github.com/opencontainers/runc to v1.2.6 by @renovate in #6070
• fix(deps): update module tags.cncf.io/container-device-interface to v1.0.1 by @renovate in #6078
• chore(deps): update dependency containers/automation_images to v20250324 by @renovate in #6081
• fix(deps): update module github.com/docker/docker to v28.0.2+incompatible by @renovate in #5998
• fix(deps): update github.com/openshift/imagebuilder digest to e87e4e1 by @renovate in #6017
• fix(deps): update module github.com/moby/buildkit to v0.20.2 by @renovate in #6082
• fix(deps): update module github.com/docker/docker to v28.0.3+incompatible by @renovate in #6085
• fix(deps): update github.com/opencontainers/runtime-tools digest to 260e151 by @renovate in #6102
• fix(deps): update module golang.org/x/crypto to v0.37.0 by @renovate in #6115
• fix(deps): update module github.com/containernetworking/cni to v1.3.0 by @renovate in #6117
• fix(deps): update github.com/containers/storage digest to b1d1b45 by @renovate in #6100
• chore(deps): update dependency golangci/golangci-lint to v2.1.0 by @renovate in #6122
• fix(deps): update module github.com/moby/buildkit to v0.21.0 by @renovate in #6125
• fix(deps): update module github.com/containers/storage to v1.58.0 by @renovate in #6131
• fix(deps): update modul...

v1.39.4

What's Changed

Notable changes

• [release-1.39] Bump c/image to v5.34.3, c/common v0.62.3, Bulidah v1.39.4 by @TomSweeneyRedHat in #6094
• [release-1.39] createPlatformContainer: drop MS_REMOUNT|MS_BIND by @openshift-cherrypick-robot in #6089

Full Changelog: v1.39.3...v1.39.4

v1.39.3

What's Changed

Notable changes

• [release-1.39] Bump c/storage to v1.57.2, c/image v5.34.2, c/common v0.62.2, c/buildah v1.39.3 by @TomSweeneyRedHat in #6061

Full Changelog: v1.39.2...v1.39.3

v1.39.2

What's Changed

Notable changes

• [release-1.39] Bump c/image to v5.34.1, c/common v0.62.1, c/buildah v1.39.2 by @TomSweeneyRedHat #6022
• [release-1.39] tag v1.39.1 by @nalind in #6007

Full Changelog: v1.39.1...v1.39.2

v1.39.1

What's Changed

Notable changes

• [release-1.39] chroot createPlatformContainer: use MS_REMOUNT by @nalind in #6003
• [release-1.39] chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] by @openshift-cherrypick-robot in #6009

Full Changelog: v1.39.0...v1.39.1

v1.29.5

What's Changed

• [release-1.29] Properly validate cache IDs and sources by @dashea in #5787
• [release-1.29] Fix CVE-2024-11218 by @cevich in #5955

Full Changelog: v1.29.4...v1.29.5

v1.39.0

What's Changed

Notable changes

• Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0, Buildah to v1.38.0 by @TomSweeneyRedHat in #5830
• CI VMs: bump again by @edsantiago in #5833
• Finish updating to go 1.22 by @nalind in #5835
• (not just) Makefile cleanups by @kolyshkin in #5832
• executor: allow to specify --no-pivot-root by @giuseppe in #5838
• Makefile: list sources via find conditionally by @danishprakash in #5807
• Tests: make _prefetch() parallel-safe by @edsantiago in #5841
• [skip-ci] Packit: f39 and rhel cleanups by @lsm5 in #5849
• CI: remove some inter-job dependencies, run cross-compile task with make -j, use /tmp for Go build cache by @nalind in #5856
• copier: use .PAXRecords instead of .Xattrs by @nalind in #5875
• Add context to an error message by @nalind in #5873
• manifest add: add --artifact-annotation by @nalind in #5854
• chroot: on Linux, try to pivot_root before falling back to chroot by @nalind in #5874
• Fix an error message in the chroot unit test by @nalind in #5876
• stage_executor: set avoidLookingCache only if mounting stage and not additional build context by @flouthoc in #5693
• Allow cache mounts to be stages and additional build contexts by @nalind in #5897
• New VM Images by @Luap99 in #5900
• [skip-ci] RPM: cleanup changelog conditionals by @lsm5 in #5888
• copy-preserving-extended-attributes: use a different base image by @nalind in #5901
• Add support for --security-opt mask and unmask by @rhatdan in #5883
• [CI:DOCS] Touch up changelogs by @TomSweeneyRedHat in #5907
• relabel(): correct a misleading parameter name by @nalind in #5922
• Add more checks to the --mount flag parsing logic by @nalind in #5925
• chroot mount flags integration test: copy binaries by @nalind in #5926
• bump github.com/vbatts/tar-split by @nalind in #5930
• fix broken doc link by @cheesesashimi in #5936
• run_freebsd.go: only import runtime-spec once by @nalind in #5935
• Update c/image and update tests by @mtrmac in #5932
• refactor: replace golang.org/x/exp with stdlib by @Juneezee in #5937
• Run(): always clean up options.ExternalImageMounts by @nalind in #5924
• Accept image names as sources for cache mounts by @nalind in #5934
• [skip-ci] RPM: use default gobuild macro on RHEL by @lsm5 in #5938
• vendor to latest c/{common,image,storage} by @Luap99 in #5929
• build, run: record hash or digest in image history for sources used in --mount by @flouthoc in #5691
• pkg/overlay: cleanups by @nalind in #5927
• bats tests - parallelize by @edsantiago in #5552
• CI, .cirrus: parallelize containerized integration by @flouthoc in #5947

Dependency updates

• Update module github.com/moby/sys/capability to v0.4.0 by @renovate in #5836
• Update module github.com/opencontainers/runc to v1.2.2 by @renovate in #5840
• Update module github.com/moby/buildkit to v0.17.2 by @renovate in #5844
• Update module github.com/stretchr/testify to v1.10.0 by @renovate in #5846
• Update github.com/opencontainers/runtime-tools digest to f7e3563 by @renovate in #5852
• Update golang.org/x/exp digest to 2d47ceb by @renovate in #5853
• Update module github.com/moby/buildkit to v0.18.1 by @renovate in #5848
• Update module golang.org/x/crypto to v0.30.0 by @renovate in #5859
• Update module github.com/docker/docker to v27.4.0-rc.4+incompatible by @renovate in #5863
• Update module github.com/cyphar/filepath-securejoin to v0.3.5 by @renovate in #5865
• Update module github.com/docker/docker to v27.4.0+incompatible by @renovate in #5870
• Update module github.com/opencontainers/runc to v1.2.3 by @renovate in #5871
• Update module golang.org/x/crypto to v0.31.0 by @renovate in #5872
• fix(deps): update module github.com/moby/buildkit to v0.18.2 by @renovate in #5879
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6 by @renovate in #5880
• fix(deps): update module github.com/containers/ocicrypt to v1.2.1 by @renovate in #5878
• fix(deps): update module github.com/docker/docker to v27.4.1+incompatible by @renovate in #5882
• fix(deps): update module github.com/opencontainers/runc to v1.2.4 by @renovate in #5898
• fix(deps): update module golang.org/x/crypto to v0.32.0 by @renovate in #5896
• chore(deps): update module golang.org/x/net to v0.33.0 [security] by @renovate in #5887
• fix(deps): update github.com/containers/luksy digest to a3a812d by @renovate in #5890
• fix(deps): update module github.com/docker/docker to v27.5.0+incompatible by @renovate in #5904
• fix(deps): update module github.com/containers/image/v5 to v5.33.1 by @renovate in #5909
• fix(deps): update module github.com/containers/common to v0.61.1 by @renovate in #5912
• fix(deps): update module github.com/moby/buildkit to v0.19.0 by @renovate in #5923
• fix(deps): update module github.com/docker/docker to v27.5.1+incompatible by @renovate in #5933
• Update module github.com/containers/storage to v1.57.0 by @renovate in #5957

New Contributors

• @cheesesashimi made their first contribution in #5936

Full Changelog: v1.38.0...v1.39.0

v1.27.6

What's Changed

• [release-1.27] Properly validate cache IDs and sources by @dashea in #5797
• [release-1.27] Backport fix for CVE-2024-11218 by @dashea in #5946
• [release-1.27] Bump to 1.27.6 by @dashea in #5958

Full Changelog: v1.27.5...v1.27.6

v1.35.5

What's Changed

• [release-1.35] Address CVE-2024-3727 by @TomSweeneyRedHat in #5521
• [release-1.35] Cross-build on Fedora by @openshift-cherrypick-robot in #5578
• [release-1.35] integration tests: switch some base images by @nalind in #5814
• Fix GHSA-5vpc-35f4-r8w6 (CVE-2024-11218)

Full Changelog: v1.35.4...v1.35.5

v1.26.9

What's Changed

• [release-1.26] backport fix for CVE-2024-11218 by @dashea in #5931
• [release-1.26] Bump version to 1.26.9 by @dashea in #5942

Full Changelog: v1.26.8...v1.26.9