v1.35.2

What's Changed

• [release-1.35] GHSA-8r3f-844c-mc37 protobuf to 1.33 y @TomSweeneyRedHat in #5428
• [release-1.35] CVE-2024-1753 fix, bump to v1.35.1, then v1.35.2-dev by @TomSweeneyRedHat in #5416

Full Changelog: v1.35.1...v1.35.2

v1.34.3

What's Changed

• [release-1.34] CVE-2024-24786 protobuf to 1.33, Bump to Buildah v1.34.2, Bump to Buildah v1.34.3-dev, conformance tests by @TomSweeneyRedHat in #5423
• [v1.34] tests: skip_if_no_unshare(): check for --setuid by @edsantiago in #5365
• [release-1.34] CVE-2024-1753 fix, bump Buildah to v1.34.2, then to v1.34.3-dev by @TomSweeneyRedHat in #5419

Full Changelog: v1.35.1...v1.34.3

v1.33.7

What's Changed

• [release-1.33] CVE-2024-1753 container escape fix by @TomSweeneyRedHat in #5417
• [v1.33] tests: skip_if_no_unshare(): check for --setuid by @edsantiago in #5364

Full Changelog: v1.35.1...v1.33.7

v1.35.1

[release-1.35] CVE-2024-1753 fix, bump to v1.35.1, then v1.35.2-dev by @TomSweeneyRedHat in #5416

Full Changelog: v1.35.0...v1.35.1

v1.35.0

What's Changed

• fix(deps): update github.com/containers/image/v5 digest to 7a40fee by @renovate in #5205
• Bump 1.34.0 by @TomSweeneyRedHat in #5222
• fix(deps): update module github.com/containernetworking/plugins to v1.4.0 by @renovate in #5211
• [skip-ci] Update actions/stale action to v9 by @renovate in #5215
• Ignore errors if label.Relabel returns ENOSUP by @rhatdan in #5197
• chore(deps): update dependency containers/automation_images to v20231208 by @renovate in #5223
• mkcw: populate the rootfs using an overlay by @nalind in #5224
• commit: add a --add-file flag by @nalind in #5226
• chore(deps): update dependency containers/automation_images to v20231208 by @renovate in #5229
• manifest: addCompression use default from containers.conf by @rhatdan in #5228
• fix(deps): update module golang.org/x/crypto to v0.17.0 [security] by @renovate in #5232
• [CI:DOCS] Document use of containers-transports values in buildah by @rhatdan in #5230
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 by @renovate in #5233
• fix(deps): update github.com/containers/image/v5 digest to 1b221d4 by @renovate in #5240
• fix(deps): update github.com/containers/storage digest to ef81e9b by @renovate in #5241
• Replace strings.SplitN with strings.Cut by @serprex in #5239
• Bump CI VMs by @edsantiago in #5246
• fix(deps): update module golang.org/x/term to v0.16.0 by @renovate in #5249
• fix(deps): update module golang.org/x/sync to v0.6.0 by @renovate in #5247
• Replace map[K]bool with map[K]struct{} where it makes sense by @serprex in #5238
• fix(deps): update module golang.org/x/crypto to v0.18.0 by @renovate in #5253
• stage_executor,layers: burst cache of layers if heredoc content is changed by @flouthoc in #5261
• internal/mkcw.Archive(): handle extra image content by @nalind in #5252
• commit: force omitHistory if the parent has layers but no history by @nalind in #5276
• build,commit: add --sbom to scan and produce SBOMs when committing by @nalind in #5279
• stage_executor,heredoc: honor interpreter in heredoc by @flouthoc in #5255
• fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 by @renovate in #5283
• fix(deps): update module github.com/onsi/gomega to v1.31.1 by @renovate in #5278
• Use reversed logo for dark theme in README by @Sea-n in #5287
• tests: Remove a bad FROM line by @edsantiago in #5291
• Fix a build break on FreeBSD by @dfr in #5293
• Fix FreeBSD version parsing by @dfr in #5296
• Run codespell on code by @rhatdan in #5297
• [CI:DOCS] move footnotes to where they're applicable by @edsantiago in #5305
• Allow users to specify no-dereference by @rhatdan in #5299
• fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] by @renovate in #5308
• fix(deps): update github.com/containers/luksy digest to b62d551 by @renovate in #5310
• fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] by @renovate in #5309
• imagebuildah: fix crash with empty RUN by @giuseppe in #5313
• fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 by @renovate in #5311
• fix(deps): update module github.com/containerd/containerd to v1.7.13 by @renovate in #5269
• manifest, push: add support for --retry and --retry-delay by @flouthoc in #5315
• Make buildah match podman for handling of ulimits by @rhatdan in #5275
• [CI:DOCS] docs: correct default authfile path by @rhatdan in #5319
• build, heredoc: show heredoc summary in build output by @flouthoc in #5314
• buildah manifest: add artifact-related options by @nalind in #5301
• Split up error messages for missing --sbom related flags by @nalind in #5288
• Vendor in latest containers/storage and image by @rhatdan in #5290
• Bump main to v1.35.0-dev by @TomSweeneyRedHat in #5328
• build --all-platforms: skip some base "image" platforms by @nalind in #5335
• Build with CNI support on FreeBSD by @dfr in #5339
• Reduce official image size by @isker in #5347
• Update module github.com/opencontainers/image-spec to v1.1.0 by @renovate in #5341
• [CI:DOCS] Revert "Reduce official image size" by @cevich in #5350
• Update module go.etcd.io/bbolt to v1.3.9 by @renovate in #5355
• [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 by @renovate in #5357
• Properly handle build --pull=false by @rhatdan in #5354
• [CI:DOCS] Add comment re: Total Success task name by @cevich in #5342
• Update module golang.org/x/crypto to v0.20.0 by @renovate in #5358
• tests: skip_if_no_unshare(): check for --setuid by @edsantiago in #5360
• Use retry logic from containers/common by @rhatdan in #5345
• manifest add: complain if we get artifact flags without --artifact by @nalind in #5366
• fix(deps): update github.com/containers/image/v5 digest to cdc6802 by @renovate in #5368
• fix(deps): update github.com/containers/storage digest to eadc620 by @renovate in #5370
• fix(deps): update github.com/containers/luksy digest to ceb12d4 by @renovate in #5369
• fix(deps): update module github.com/stretchr/testify to v1.9.0 by @renovate in #5372
• Update vendor of containers/common by @rhatdan in #5367
• Add a conformance test for copying to a mounted prior stage by @nalind in #5375
• conformance tests: don't break on trailing zeroes in layer blobs by @nalind in #5386

New Contributors

• @serprex made their first contribution in #5239
• @Sea-n made their first contribution in #5287
• @isker made their first contribution in #5347

Full Changelog: v1.34.0...v1.35.0

v1.34.1

What's Changed

• [release-1.34] Cherry Pick a number of commits from main by @TomSweeneyRedHat in #5343
• [release-1.34] Vendor bumps by @TomSweeneyRedHat in #5346

Full Changelog: v1.34.0...v1.34.1

v1.33.6

What's Changed

• [release-1.33] Bump golang.org/x/crypto v0.17.0 by @TomSweeneyRedHat in #5338
• [release-1.33] Bump c/common to v0.57.4, moby/buildkit to v012.5, and Buildah to v1.33.5 by @TomSweeneyRedHat in #5316
• [release-1.33] bump google.golang.org/protobuf to 1.33.0 for CVE-2024-24786 by @TomSweeneyRedHat in #5405

Full Changelog: v1.33.5...v1.33.6

1.33.5

What's Changed

• [release-1.33] Bump c/common to v0.57.4, moby/buildkit to v012.5, and Buildah to v1.33.5 by @TomSweeneyRedHat in #5316
• [release-1.33] Bump c/image to v5.29.2, c/common to v0.57.3 and Buildah to 1.33.4 by @TomSweeneyRedHat in #5303

Full Changelog: v1.33.4...v1.33.5

v1.33.4

What's Changed

• [release-1.33] Bump c/image to v5.29.2, c/common to v0.57.3 and Buildah to 1.33.4 by @TomSweeneyRedHat in #5303
• Bump c/image to v5.29.1, c/common to v0.57.2, and Buildah to v1.33.3 by @TomSweeneyRedHat in #5280

Full Changelog: v1.33.3...v1.33.4

v1.33.3

What's Changed

• [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1 by @TomSweeneyRedHat in #5280
• [release-1.33.2] Bump to v1.33.2 by @TomSweeneyRedHat in #5189

Full Changelog: v1.33.2...v1.33.3