v1.34.0

What's Changed

• Bump to v1.33.1 by @TomSweeneyRedHat in #5182
• fix(deps): update module github.com/moby/buildkit to v0.12.3 by @renovate in #5180
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 by @renovate in #5007
• run: Allow using just one jail per container on FreeBSD by @dfr in #5176
• set makefile target internal/mkcw/embed/entrypoint.gz as .PHONY on non x86_64 by @dcermak in #5183
• vendor: update c/{storage,image,common} by @giuseppe in #5163
• fix(deps): update module golang.org/x/sys to v0.15.0 by @renovate in #5194
• fix(deps): update module golang.org/x/term to v0.15.0 by @renovate in #5196
• fix(deps): update module github.com/onsi/ginkgo to v2 by @rhatdan in #5184
• Integration tests: make skip_if_no_unshare check --map-users by @nalind in #5192
• fix(deps): update module golang.org/x/crypto to v0.16.0 by @renovate in #5193
• internal/mkcw/embed/entrypoint.gz: compress with -n9 by @nalind in #5195
• fix(deps): update module github.com/containerd/containerd to v1.7.10 by @renovate in #5201
• [CI:DOCS] man pages: underscores, too-wide lines by @edsantiago in #5203
• fix(deps): update module github.com/moby/buildkit to v0.12.4 by @renovate in #5209
• fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe by @renovate in #5208
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 by @renovate in #5200
• fix(deps): update github.com/containers/common digest to 630c929 by @renovate in #5204
• fix(deps): update github.com/containers/storage digest to 15c3cb7 by @renovate in #5207
• fix(deps): update module github.com/containerd/containerd to v1.7.11 by @renovate in #5217

Full Changelog: v1.33.1...v1.34.0

v1.33.2

What's Changed

• Bump to v1.33.1 by @TomSweeneyRedHat in #5182
• fix(deps): update module github.com/moby/buildkit to v0.12.3 by @renovate in #5180
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 by @renovate in #5007

Full Changelog: v1.33.1...v1.33.2

v1.33.1

What's Changed

• Bump 1.33.0 by @TomSweeneyRedHat in #5178
• test,heredoc: use fedora instead of docker.io/library/python:latest by @flouthoc in #5179
• fix(deps): update module github.com/moby/buildkit to v0.11.4 [security] by @renovate in #5177
• Bump 1.31.1 by @TomSweeneyRedHat in #5181

Full Changelog: v1.33.0...v1.33.1

v1.33.0

What's Changed

• Tag a v1.32.0 release by @nalind in #5046
• fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 by @renovate in #5047
• add/copy: make sure we handle relative path names correctly by @nalind in #5050
• Removing selinux_tag.sh as no longer needed after 580356f by @rahilarious in #5054
• vendor of containers/common by @rhatdan in #5057
• stage_executor: allow images without layers by @flouthoc in #5031
• [CI:BUILD] Packit: tag @packit-build team on copr build failures by @lsm5 in #5060
• build,config: add support for --unsetlabel by @flouthoc in #5062
• imagebuildah: consider ignorefile with --build-context by @danishprakash in #5021
• fix(deps): update module github.com/onsi/gomega to v1.28.0 by @renovate in #5065
• [CI:DOCS] Protocol can be specified with --port. Ex. --port 514/udp by @ranjithrajaram in #5066
• fix(deps): update github.com/containers/luksy digest to 6df88cb by @renovate in #5069
• Ensure the mount type is always BindMount by default by @BenjaminSchubert in #5067
• fix(deps): update github.com/containers/common digest to 8892536 by @renovate in #5068
• Use the parent's image ID in the config that we pass to imagebuilder by @nalind in #5074
• Update some comments related to confidential workload by @nalind in #5075
• fix(deps): update module golang.org/x/sync to v0.4.0 by @renovate in #5077
• fix(deps): update module golang.org/x/sys to v0.13.0 by @renovate in #5078
• fix(deps): update module golang.org/x/crypto to v0.14.0 by @renovate in #5079
• mkcw: remove entrypoint binaries by @flouthoc in #5076
• fix(deps): update module github.com/containerd/containerd to v1.7.7 by @renovate in #5082
• run: use internal.GetTempDir with os.MkdirTemp for root and bundle path by @flouthoc in #5084
• imagebuildah,multi-stage: do not remove base-image when built without --layers by @flouthoc in #5081
• chore(deps): update module golang.org/x/net to v0.17.0 [security] by @renovate in #5086
• Vendor containers/common main by @umohnani8 in #5085
• chore(deps): update dependency containers/automation_images to v20231004 by @renovate in #5090
• chroot.setupChrootBindMounts: pay more attention to flags by @nalind in #5083
• fix(deps): update module github.com/onsi/gomega to v1.28.1 by @renovate in #5097
• vendor c/common: appendable containers.conf strings, Part 1 by @vrothberg in #5101
• Add --no-hostname option to buildah containers by @rhatdan in #5094
• fix(deps): update module sigs.k8s.io/yaml to v1.4.0 by @renovate in #5102
• container.conf: support attributed string slices by @vrothberg in #5103
• fix(deps): update module go.etcd.io/bbolt to v1.3.8 by @renovate in #5105
• fix(deps): update module github.com/containerd/containerd to v1.7.8 by @renovate in #5109
• Log the platform for build errors during multi-platform builds by @nalind in #5112
• Use mask definitions from containers/common @rhatdan by @rhatdan in #5111
• fix(deps): update github.com/containers/luksy digest to b5a7f79 by @renovate in #5125
• fix(deps): update module github.com/opencontainers/runc to v1.1.10 by @renovate in #5126
• fix(deps): update github.com/containers/common digest to 8354404 by @renovate in #5124
• fix(deps): update module golang.org/x/sys to v0.14.0 by @renovate in #5137
• fix(deps): update module github.com/spf13/cobra to v1.8.0 by @renovate in #5138
• fix(deps): update module golang.org/x/sync to v0.5.0 by @renovate in #5136
• fix(deps): update module golang.org/x/term to v0.14.0 by @renovate in #5145
• conformance: use require.NoErrorf() more by @nalind in #5146
• createConfigsAndManifests: clear history before cw-specific logic by @nalind in #5147
• image: replace GetStoreImage with ResolveReference and bump c/image to 373c52a9466f by @flouthoc in #5129
• Update cirrus and version of golang by @rhatdan in #5139
• Tweak some help descriptions by @nalind in #5162
• fix(deps): update module golang.org/x/crypto to v0.15.0 by @renovate in #5149
• conformance tests: use go-dockerclient for BuildKit builds by @nalind in #5165
• Make TEE types case-insensitive by @nalind in #5159
• build: downgrade to go 1.20 by @giuseppe in #5166
• fix(deps): update module github.com/containerd/containerd to v1.7.9 by @renovate in #5168
• Add --compat-auth-file to login and logout by @mtrmac in #5143
• Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0 by @TomSweeneyRedHat in #5174
• conformance tests: archive the context directory as 0:0 by @nalind in #5171
• pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd by @nalind in #5169
• StageExecutor.Execute: force a commit for --unsetenv, too by @nalind in #5160
• Implement ADD --checksum flag by @jfroy in #5152
• [CI:DOCS] Pass secrets from the host down to internal podman containers by @rhatdan in #5154
• blobcacheinfo,test: blobs must be resued when pushing across registry by @flouthoc in #5153
• Stop using DefaultNetworkSysctl and use containers.conf only by @rhatdan in #5156
• buildah: add heredoc support for RUN, COPY and ADD by @flouthoc in #5092
• Add OverrideChanges and OverrideConfig to CommitOptions by @nalind in #5150
• Never omit layers for emptyLayer instructions when squashing/cwing by @nalind in #5161

New Contributors

• @rahilarious made their first contribution in #5054
• @ranjithrajaram made their first contribution in #5066
• @BenjaminSchubert made their first contribution in #5067
• @jfroy made their first contribution in #5152

Full Changelog: v1.32.0...v1.33.0

v1.31.4

What's Changed

• [release-1.31] c/storage 1.48.1, c/image 5.26.2, c/common 0.55.4, Buildah to 1.31.3, then 1.31.4-dev by @TomSweeneyRedHat in #4995
• [release-1.31] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5116

Full Changelog: v1.31.3...v1.31.4

v1.29.2

What's Changed

• [release-1.29] Bump to c/common v0.51.2 by @TomSweeneyRedHat in #4701
• [release-1.29] Cirrus: Add CI self-destruct condition on EOL date by @cevich in #4771
• [release-1.29] Cirrus: Increase conformance-test timeout by @cevich in #4808
• [release-1.29] remove registry.centos.org by @edsantiago in #4825
• [release-1.29] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5118

Full Changelog: v1.29.1...v1.29.2

v1.32.2

What's Changed

• Mask /sys/devices/virtual/powercap by default by @mheon in #5113

Full Changelog: v1.32.1...v1.32.2

v1.32.1

What's Changed

• [release-1.32] chroot.setupChrootBindMounts: pay more attention to flags by @openshift-cherrypick-robot in #5099

Full Changelog: v1.32.0...v1.32.1

v1.32.0

What's Changed

• [CI:DOCS] Update debian/ubuntu build instructions by @andrewgdotcom in #4876
• Bump c/image to 5.26.1, c/common to 0.55.1, Buildah to 1.31.0, and then to 1.32.0-dev by @TomSweeneyRedHat in #4902
• pkg/overlay: add limited support for FreeBSD by @dfr in #4888
• fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 by @renovate in #4903
• [CI:BUILD] Packit: fix pre-sync action for downstream tasks by @lsm5 in #4907
• contrib/buildahimage: set config correctly for rootless build user by @flouthoc in #4905
• fix(deps): update module golang.org/x/term to v0.10.0 by @renovate in #4911
• Vendor in containers/(common, image, storage) by @rhatdan in #4916
• [CI:BUILD] Packit: downstream task script needs GOPATH by @lsm5 in #4924
• fix(deps): update module github.com/containers/common to v0.55.2 by @renovate in #4923
• [CI:BUILD] Packit: remove pre-sync action by @lsm5 in #4926
• fix(deps): update module github.com/opencontainers/runc to v1.1.8 by @renovate in #4930
• Vendor in latest containers/(common, storage, image) by @rhatdan in #4900
• fix(deps): update module github.com/containers/image/v5 to v5.26.1 by @renovate in #4938
• fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0 by @renovate in #4936
• fix(deps): update module github.com/onsi/gomega to v1.27.10 by @renovate in #4939
• fix(deps): update module github.com/docker/docker to v24.0.5+incompatible by @renovate in #4941
• fix(deps): update module github.com/containerd/containerd to v1.7.3 by @renovate in #4943
• manifest, push: implement --add-compression to push with compressed variants. by @flouthoc in #4912
• CI:BUILD] RPM: define gobuild macro for rhel/centos stream by @lsm5 in #4946
• Ensure created ImageSource / ImageDestination objects are closed by @mtrmac in #4945
• fix(deps): update github.com/containers/storage digest to c3da76f by @renovate in #4949
• buildah: add --layer-label for setting labels on intermediate images by @flouthoc in #4940
• Cirrus: container/rootless env. var. passthrough by @cevich in #4872
• fix(deps): update module golang.org/x/term to v0.11.0 by @renovate in #4953
• Update install.md changes to reflect current Debian stable version name by @aaerrolla in #4955
• fix(deps): update module golang.org/x/crypto to v0.12.0 by @renovate in #4954
• packit: Build PRs into default packit COPRs by @martinpitt in #4959
• [CI:BUILD] Packit: add fedora-eln targets and build docs with vendored go-md2man by @lsm5 in #4964
• fix(deps): update module github.com/opencontainers/runc to v1.1.9 by @renovate in #4970
• chore(deps): update dependency ubuntu to v22 by @renovate in #4965
• chore(deps): update dependency containers/automation_images to v20230807 by @renovate in #4958
• [CI:BUILD] RPM: fix buildtags by @lsm5 in #4971
• chore(deps): update dependency containers/automation_images to v20230809 by @renovate in #4972
• buildah/push/manifest-push: add support for --force-compression to prevent reusing other blobs by @flouthoc in #4973
• chroot: setSeccomp add support for ArchPARISC(64) and ArchRISCV64 by @michalbiesek in #4976
• make,cross: restore loong64 by @michalbiesek in #4979
• fix(deps): update module github.com/containers/ocicrypt to v1.1.8 by @renovate in #4978
• [CI:BUILD] rpm: spdx compatible license field by @lsm5 in #4984
• [CI:DOCS] Replace troff code with markdown in buildah-{copy,add}.1.md by @PeterWhittaker in #4985
• chore(deps): update dependency containers/automation_images to v20230816 by @renovate in #4982
• executor: build-arg warnings must honor global args by @flouthoc in #4983
• Clear CommonBuildOpts when loading Builder status by @nalind in #4975
• fix(deps): update module github.com/containers/storage to v1.49.0 by @renovate in #4990
• Use buildah repo rather than podman repo by @rhatdan in #4994
• pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD by @dfr in #4997
• [skip-ci] GHA: Closed issue/PR comment-lock test by @cevich in #4991
• [skip-ci] GHA: Attempt to fix discussion_lock workflow by @cevich in #5002
• [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2 by @renovate in #5003
• [CI:DOCS] docs: add reference to oci-hooks by @flouthoc in #5004
• Support passing of ULimits as -1 to mean max by @rhatdan in #5000
• Update module github.com/containerd/containerd to v1.7.5 by @renovate in #4998
• Fixing the owner of the storage.conf. by @indyvanmol in #5001
• push: --force-compression should be true with --compression-format by @flouthoc in #5013
• vendor containers/common@12405381ff45 by @vrothberg in #5016
• fix(deps): update module golang.org/x/sys to v0.12.0 by @renovate in #5017
• [CI:DOCS] docs: use valid github repo by @flouthoc in #5020
• fix(deps): update module golang.org/x/crypto to v0.13.0 by @renovate in #5026
• Don't try to look up names when committing images by @nalind in #5025
• fix(deps): update module github.com/docker/docker to v24.0.6+incompatible by @renovate in #5029
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 by @renovate in #5030
• Make sure that pathnames picked up from the environment are absolute by @nalind in #5032
• Produce confidential workload images by @nalind in #4960
• fix(deps): update module github.com/containerd/containerd to v1.7.6 by @renovate in #5040
• Move code around to not require libimage by @Luap99 in #5039
• Cirrus: Remove multi-arch buildah image builds by @cevich in #5006
• Bump vendor containers/(common, storage, image) by @rhatdan in #5042
• Run codespell on code by @rhatdan in #5045
• GetTmpDir is not using ImageCopyTmpdir correctly by @rhatdan in #5043

New Contributors

• @andrewgdotcom made their first contribution in #4876
• @aaerrolla made their first contribution in #4955
• @martinpitt made their first contribution in #4959
• @michalbiesek made their first contribution in #4976
• @PeterWhittaker made their first contribution in #4985
• @indyvanmol made their first contribution in #5001

Full Changelog: v1.31.0...v1.32.0

v1.31.3

What's Changed

• [release-1.31] Bump to v1.31.2 and then to v1.31.3-dev by @TomSweeneyRedHat in #4969
• [release-1.31] [CI:BUILD] RPM: fix buildtags by @openshift-cherrypick-robot in #4980
• [release-1.31] [CI:BUILD] rpm: spdx compatible license field by @openshift-cherrypick-robot in #4989

Full Changelog: v1.31.2...v1.31.3