v1.34.1

What's Changed

• [release-1.34] Cherry Pick a number of commits from main by @TomSweeneyRedHat in #5343
• [release-1.34] Vendor bumps by @TomSweeneyRedHat in #5346

Full Changelog: v1.34.0...v1.34.1

v1.33.6

What's Changed

• [release-1.33] Bump golang.org/x/crypto v0.17.0 by @TomSweeneyRedHat in #5338
• [release-1.33] Bump c/common to v0.57.4, moby/buildkit to v012.5, and Buildah to v1.33.5 by @TomSweeneyRedHat in #5316
• [release-1.33] bump google.golang.org/protobuf to 1.33.0 for CVE-2024-24786 by @TomSweeneyRedHat in #5405

Full Changelog: v1.33.5...v1.33.6

1.33.5

What's Changed

• [release-1.33] Bump c/common to v0.57.4, moby/buildkit to v012.5, and Buildah to v1.33.5 by @TomSweeneyRedHat in #5316
• [release-1.33] Bump c/image to v5.29.2, c/common to v0.57.3 and Buildah to 1.33.4 by @TomSweeneyRedHat in #5303

Full Changelog: v1.33.4...v1.33.5

v1.33.4

What's Changed

• [release-1.33] Bump c/image to v5.29.2, c/common to v0.57.3 and Buildah to 1.33.4 by @TomSweeneyRedHat in #5303
• Bump c/image to v5.29.1, c/common to v0.57.2, and Buildah to v1.33.3 by @TomSweeneyRedHat in #5280

Full Changelog: v1.33.3...v1.33.4

v1.33.3

What's Changed

• [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1 by @TomSweeneyRedHat in #5280
• [release-1.33.2] Bump to v1.33.2 by @TomSweeneyRedHat in #5189

Full Changelog: v1.33.2...v1.33.3

v1.34.0

What's Changed

• Bump to v1.33.1 by @TomSweeneyRedHat in #5182
• fix(deps): update module github.com/moby/buildkit to v0.12.3 by @renovate in #5180
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 by @renovate in #5007
• run: Allow using just one jail per container on FreeBSD by @dfr in #5176
• set makefile target internal/mkcw/embed/entrypoint.gz as .PHONY on non x86_64 by @dcermak in #5183
• vendor: update c/{storage,image,common} by @giuseppe in #5163
• fix(deps): update module golang.org/x/sys to v0.15.0 by @renovate in #5194
• fix(deps): update module golang.org/x/term to v0.15.0 by @renovate in #5196
• fix(deps): update module github.com/onsi/ginkgo to v2 by @rhatdan in #5184
• Integration tests: make skip_if_no_unshare check --map-users by @nalind in #5192
• fix(deps): update module golang.org/x/crypto to v0.16.0 by @renovate in #5193
• internal/mkcw/embed/entrypoint.gz: compress with -n9 by @nalind in #5195
• fix(deps): update module github.com/containerd/containerd to v1.7.10 by @renovate in #5201
• [CI:DOCS] man pages: underscores, too-wide lines by @edsantiago in #5203
• fix(deps): update module github.com/moby/buildkit to v0.12.4 by @renovate in #5209
• fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe by @renovate in #5208
• fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 by @renovate in #5200
• fix(deps): update github.com/containers/common digest to 630c929 by @renovate in #5204
• fix(deps): update github.com/containers/storage digest to 15c3cb7 by @renovate in #5207
• fix(deps): update module github.com/containerd/containerd to v1.7.11 by @renovate in #5217

Full Changelog: v1.33.1...v1.34.0

v1.33.2

What's Changed

• Bump to v1.33.1 by @TomSweeneyRedHat in #5182
• fix(deps): update module github.com/moby/buildkit to v0.12.3 by @renovate in #5180
• fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 by @renovate in #5007

Full Changelog: v1.33.1...v1.33.2

v1.33.1

What's Changed

• Bump 1.33.0 by @TomSweeneyRedHat in #5178
• test,heredoc: use fedora instead of docker.io/library/python:latest by @flouthoc in #5179
• fix(deps): update module github.com/moby/buildkit to v0.11.4 [security] by @renovate in #5177
• Bump 1.31.1 by @TomSweeneyRedHat in #5181

Full Changelog: v1.33.0...v1.33.1

v1.33.0

What's Changed

• Tag a v1.32.0 release by @nalind in #5046
• fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 by @renovate in #5047
• add/copy: make sure we handle relative path names correctly by @nalind in #5050
• Removing selinux_tag.sh as no longer needed after 580356f by @rahilarious in #5054
• vendor of containers/common by @rhatdan in #5057
• stage_executor: allow images without layers by @flouthoc in #5031
• [CI:BUILD] Packit: tag @packit-build team on copr build failures by @lsm5 in #5060
• build,config: add support for --unsetlabel by @flouthoc in #5062
• imagebuildah: consider ignorefile with --build-context by @danishprakash in #5021
• fix(deps): update module github.com/onsi/gomega to v1.28.0 by @renovate in #5065
• [CI:DOCS] Protocol can be specified with --port. Ex. --port 514/udp by @ranjithrajaram in #5066
• fix(deps): update github.com/containers/luksy digest to 6df88cb by @renovate in #5069
• Ensure the mount type is always BindMount by default by @BenjaminSchubert in #5067
• fix(deps): update github.com/containers/common digest to 8892536 by @renovate in #5068
• Use the parent's image ID in the config that we pass to imagebuilder by @nalind in #5074
• Update some comments related to confidential workload by @nalind in #5075
• fix(deps): update module golang.org/x/sync to v0.4.0 by @renovate in #5077
• fix(deps): update module golang.org/x/sys to v0.13.0 by @renovate in #5078
• fix(deps): update module golang.org/x/crypto to v0.14.0 by @renovate in #5079
• mkcw: remove entrypoint binaries by @flouthoc in #5076
• fix(deps): update module github.com/containerd/containerd to v1.7.7 by @renovate in #5082
• run: use internal.GetTempDir with os.MkdirTemp for root and bundle path by @flouthoc in #5084
• imagebuildah,multi-stage: do not remove base-image when built without --layers by @flouthoc in #5081
• chore(deps): update module golang.org/x/net to v0.17.0 [security] by @renovate in #5086
• Vendor containers/common main by @umohnani8 in #5085
• chore(deps): update dependency containers/automation_images to v20231004 by @renovate in #5090
• chroot.setupChrootBindMounts: pay more attention to flags by @nalind in #5083
• fix(deps): update module github.com/onsi/gomega to v1.28.1 by @renovate in #5097
• vendor c/common: appendable containers.conf strings, Part 1 by @vrothberg in #5101
• Add --no-hostname option to buildah containers by @rhatdan in #5094
• fix(deps): update module sigs.k8s.io/yaml to v1.4.0 by @renovate in #5102
• container.conf: support attributed string slices by @vrothberg in #5103
• fix(deps): update module go.etcd.io/bbolt to v1.3.8 by @renovate in #5105
• fix(deps): update module github.com/containerd/containerd to v1.7.8 by @renovate in #5109
• Log the platform for build errors during multi-platform builds by @nalind in #5112
• Use mask definitions from containers/common @rhatdan by @rhatdan in #5111
• fix(deps): update github.com/containers/luksy digest to b5a7f79 by @renovate in #5125
• fix(deps): update module github.com/opencontainers/runc to v1.1.10 by @renovate in #5126
• fix(deps): update github.com/containers/common digest to 8354404 by @renovate in #5124
• fix(deps): update module golang.org/x/sys to v0.14.0 by @renovate in #5137
• fix(deps): update module github.com/spf13/cobra to v1.8.0 by @renovate in #5138
• fix(deps): update module golang.org/x/sync to v0.5.0 by @renovate in #5136
• fix(deps): update module golang.org/x/term to v0.14.0 by @renovate in #5145
• conformance: use require.NoErrorf() more by @nalind in #5146
• createConfigsAndManifests: clear history before cw-specific logic by @nalind in #5147
• image: replace GetStoreImage with ResolveReference and bump c/image to 373c52a9466f by @flouthoc in #5129
• Update cirrus and version of golang by @rhatdan in #5139
• Tweak some help descriptions by @nalind in #5162
• fix(deps): update module golang.org/x/crypto to v0.15.0 by @renovate in #5149
• conformance tests: use go-dockerclient for BuildKit builds by @nalind in #5165
• Make TEE types case-insensitive by @nalind in #5159
• build: downgrade to go 1.20 by @giuseppe in #5166
• fix(deps): update module github.com/containerd/containerd to v1.7.9 by @renovate in #5168
• Add --compat-auth-file to login and logout by @mtrmac in #5143
• Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0 by @TomSweeneyRedHat in #5174
• conformance tests: archive the context directory as 0:0 by @nalind in #5171
• pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd by @nalind in #5169
• StageExecutor.Execute: force a commit for --unsetenv, too by @nalind in #5160
• Implement ADD --checksum flag by @jfroy in #5152
• [CI:DOCS] Pass secrets from the host down to internal podman containers by @rhatdan in #5154
• blobcacheinfo,test: blobs must be resued when pushing across registry by @flouthoc in #5153
• Stop using DefaultNetworkSysctl and use containers.conf only by @rhatdan in #5156
• buildah: add heredoc support for RUN, COPY and ADD by @flouthoc in #5092
• Add OverrideChanges and OverrideConfig to CommitOptions by @nalind in #5150
• Never omit layers for emptyLayer instructions when squashing/cwing by @nalind in #5161

New Contributors

• @rahilarious made their first contribution in #5054
• @ranjithrajaram made their first contribution in #5066
• @BenjaminSchubert made their first contribution in #5067
• @jfroy made their first contribution in #5152

Full Changelog: v1.32.0...v1.33.0

v1.31.4

What's Changed

• [release-1.31] c/storage 1.48.1, c/image 5.26.2, c/common 0.55.4, Buildah to 1.31.3, then 1.31.4-dev by @TomSweeneyRedHat in #4995
• [release-1.31] Mask /sys/devices/virtual/powercap by default by @openshift-cherrypick-robot in #5116

Full Changelog: v1.31.3...v1.31.4