v1.55.2

What's Changed

• Backport pull request #2117 to release-1.55 by @anderbubble in #2159

Full Changelog: v1.55.1...v1.55.2

v1.56.0

What's Changed

• Bump to c/storage v1.55.0, then v1.56.0-dev by @TomSweeneyRedHat in #2046
• idmap: improve error messages by @giuseppe in #2047
• overlay,chunked: Add some more O_CLOEXEC by @cgwalters in #2048
• composefs: prefer std library functions by @giuseppe in #2050
• docs: Add (not installed) man pages for composefs and zstd:chunked by @cgwalters in #2054
• fix(deps): update module golang.org/x/sys to v0.23.0 by @renovate in #2052
• composefs use new mount api by @giuseppe in #2057
• fix(deps): update module github.com/moby/sys/user to v0.3.0 by @renovate in #2058
• fix(deps): update module golang.org/x/sys to v0.24.0 by @renovate in #2059
• chrootarchive: Pass root via fd by @cgwalters in #2049
• loopback: always return error if no loopback device by @giuseppe in #2056
• Update golangci-lint by @Honny1 in #2063
• Prepare a golangci-lint installation for automatic update using renovate by @Honny1 in #2064
• storage.conf: Various cleanups by @cgwalters in #2066
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.6 by @renovate in #2068
• Create Store.List method for listing layers, images, containers by @Honny1 in #2061
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by @renovate in #2070
• composefs fixes by @giuseppe in #2069
• pkg/fileutils: fix Lexists on FreeBSD by @dfr in #2071
• pkg/fileutils: fix Lexists on FreeBSD (second attempt) by @dfr in #2074
• docs: Fill in more about composefs and zstd:chunked by @cgwalters in #2072
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by @renovate in #2073
• Sync man page with storage.conf by @cgwalters in #2076
• chore(deps): update dependency containers/automation_images to v20240821 by @renovate in #2077
• fix(deps): update golang.org/x/exp digest to 9b4947d by @renovate in #2082
• overlay: ignore EINVAL for cleanup unmount by @giuseppe in #2083
• Be clearer about the layer store locking rules by @mtrmac in #2080
• Be explicit about impact of not writing caches by @mtrmac in #2079
• fix(deps): update module golang.org/x/sys to v0.25.0 by @renovate in #2085
• Update to Go 1.22 by @mtrmac in #2086
• Avoid manually-coded loops by @mtrmac in #2087
• Improve comments based on after-merge review comments by @mtrmac in #2088
• chore(deps): update dependency golangci/golangci-lint to v1.61.0 by @renovate in #2089
• pkg/directory: correctly ignore ENOENT while walking by @Luap99 in #2097
• chunked: fix reuse of the layers cache by @giuseppe in #2024
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 by @renovate in #2093
• Switch to github.com/moby/sys/capability by @kolyshkin in #2103
• userns: fix off-by-one userns max size detection by @giuseppe in #2105
• fix(deps): update module github.com/klauspost/compress to v1.17.10 by @renovate in #2106
• Use strings.Cut{,Prefix,Suffix} where appropriate by @kolyshkin in #2100
• userns: skip "nogroup" by @giuseppe in #2109
• Remove old +build tags, add gofix ci job by @kolyshkin in #2101
• overlay: additional layer: check layer existence before using by @ktock in #2108
• overlay: refactor getStagingDir helper by @giuseppe in #2107
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.7 by @renovate in #2110
• Assorted nits reported by revive linter by @kolyshkin in #2102
• overlay: fallback without data only layers by @giuseppe in #2112
• fix(deps): update module github.com/vbatts/tar-split to v0.11.6 by @renovate in #2114
• fix(deps): update module github.com/moby/sys/capability to v0.3.0 by @renovate in #2111
• Use tar-split/tar/asm.IterateHeaders now that it has been accepted by @mtrmac in #2116
• chunked: ignore ErrLayerUnknown when creating cache by @giuseppe in #2119
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 by @renovate in #2120
• chunked: define error for partial pulls not available by @giuseppe in #2118
• fix(deps): update module golang.org/x/sys to v0.26.0 by @renovate in #2124
• Audit and update OWNERS file by @baude in #2125
• CI: Fix git-validation.sh by @Honny1 in #2121
• Fix copy/clone of empty value by @Honny1 in #2122
• drivers/zfs: Handle missing layers during image deletion in ZFS file system by @kimminss0 in #2123
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 by @renovate in #2127
• fix(deps): update module github.com/klauspost/compress to v1.17.11 by @renovate in #2132
• Fix assignment of quota project IDs by @mheon in #2129
• chore(deps): update dependency containers/automation_images to v20241010 by @renovate in #2131
• chunked: prevent using an empty cache by @giuseppe in #2133
• Use securejoin.SecureJoin when forming userns paths by @mheon in #2134
• Correctly compute UncompressedSize on zstd:chunked pull, don’t set it on estargz by @mtrmac in #2130
• Follow-ups to #2130 by @mtrmac in #2136
• fix(deps): update module github.com/opencontainers/selinux to v1.11.1 by @renovate in #2138
• ci: add codespell by @kolyshkin in #2137
• Fall back from partial pull when on VFS by @mtrmac in #2140
• composefs: use mount from file where supported by @giuseppe in #2145
• fsdiff: mount both layers are read-only by @giuseppe in #2147
• Merge the release-1.55 branch into main by @mtrmac in #2143
• overlay: use private directory for composefs mounts by @giuseppe in #2148
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.8 by @renovate in #2144
• chunked: close payload stream by @giuseppe in #2151
• Refactor copy of slices and maps by @Honny1 in #2128
• overlay: make error lowercase by @giuseppe in #2153
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.9 by @renovate in #2154
• Update copy.DirCopy to leave sockets in the file system by @anderbubble in #2117
• fix(deps): update golang.org/x/exp digest to f66d83c by @renovate in #2158
• Disable partial pulls (zstd:chunked) by default by @nalind in #2156

New Contributors

• @kimminss0 made their first contribution in #2123
• @anderbubble made their first contribution in #2117

Full Changelog: v1.55.1...v1.56.0

v1.51.2

What's Changed

• [release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990
• [release-1.51] Backport CVE-2024-9676 fix by @mheon in #2146

Full Changelog: v1.51.1...v1.51.2

v1.55.1

What's Changed

• [release-1.55] backport fix for CVE-2026-9676 by @mheon in #2135

Full Changelog: v1.55.0...v1.55.1

v1.55.0

What's Changed

• Bump to v1.54.0 by @TomSweeneyRedHat in #1925
• Fix assignment of quota IDs for XFS quotas by @mheon in #1921
• Fix locking bugs from #1916, and one more by @mtrmac in #1927
• fix(deps): update module github.com/burntsushi/toml to v1.4.0 by @renovate in #1930
• composefs: add parent directory if missing by @giuseppe in #1929
• chore(deps): update dependency containers/automation_images to v20240529 by @renovate in #1932
• overlay: remove unreachable code by @giuseppe in #1934
• chunked: ignore the tar-split data if digest is empty by @giuseppe in #1936
• chunked: change auto merge threshold to 1024 by @giuseppe in #1937
• Trivial patches to minimize patches needed by NetBSD by @coypoop in #1935
• archive: always fix mode for root dir with ForceMask by @akihikodaki in #1931
• compression: Add some doc comments by @cgwalters in #1939
• chunked: fix deadlock by always consuming tar-split by @giuseppe in #1942
• dump: replace unicode package with custom functions by @giuseppe in #1940
• fix(deps): update module golang.org/x/sys to v0.21.0 by @renovate in #1946
• dump: use the sanitized path for root check by @giuseppe in #1948
• chunked: Set O_CLOEXEC by @cgwalters in #1947
• graphdriver: Clarify name of fsverity const, tweak docs by @cgwalters in #1949
• dump: handle duplicates by @giuseppe in #1951
• chunked: refactor file system ops in a new file and add some tests by @giuseppe in #1952
• chunked: Add helpers for /proc/self/fd accesses by @cgwalters in #1956
• chunked: use Fprint instead of Fprintf by @giuseppe in #1960
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.4 by @renovate in #1961
• Fix build failures by @mtrmac in #1954
• chunked: improve error messages for file system operations by @giuseppe in #1957
• compression: Fix Deprecated: and actually comment out unused bits by @cgwalters in #1958
• chunked: Fix two minor linter issues by @cgwalters in #1959
• overlay: extend overlayFileGetter to understand composefs by @giuseppe in #1950
• pkg/archive.statDifferent(): care about mtime for directories by @nalind in #1962
• chunked: add fuzzing tests for the cache by @giuseppe in #1963
• overlay: Fix root directoy state with extended attributes by @akihikodaki in #1953
• archive: use pigz|zstd if available by @giuseppe in #1964
• chunked: use existing buffer for io.Copy by @giuseppe in #1965
• chunked: honor store configuration by @giuseppe in #1966
• pkg/archive.statDifferent(): fix the previous change by @nalind in #1968
• Decide on tar-split usage based on trusted data in TOC by @mtrmac in #1967
• fix(deps): update module github.com/klauspost/compress to v1.17.9 by @renovate in #1969
• Fix warnings (SA9003, SA4023, SA1019) by @Honny1 in #1973
• Fix deprecated use of pwalk.Walk (SA1019) by @Honny1 in #1975
• Fix deprecated use of io/ioutil (SA1019) by @Honny1 in #1977
• chunked: honor the ForceMask setting by @giuseppe in #1971
• overlay: drop check for mount_program AND force_mask by @giuseppe in #1970
• Fix deprecated use of mountinfo.PidMountInfo (SA1019) by @Honny1 in #1981
• Fix deprecated use of capability.NewPid (SA1019) by @Honny1 in #1979
• Fix deprecated use of tar.TypeRegA (SA1019) by @Honny1 in #1980
• overlay: check for options != nil by @giuseppe in #1984
• Fix the issue where compiling containers-storage with exclude_disk_qu… by @xuegege5290 in #1982
• store: drop remap-[ug]ids by @giuseppe in #1976
• Fix the surrounding loop is unconditionally terminated (SA4004) by @Honny1 in #1986
• vfs: honor the specified mappings by @giuseppe in #1988
• Fix TestSafeLink on ARM64 by @Honny1 in #1989
• Add comented out example definition of driver_priority to storage.conf by @dcermak in #1987
• Fix deprecated use of hdr.Xattrs (SA1019) by @Honny1 in #1985
• chunked: skip setting time if empty by @giuseppe in #1996
• Move junkfile to ${TESTDIR} directory by @Honny1 in #1995
• Enable staticcheck linter by @Honny1 in #1991
• fix(deps): update module golang.org/x/sys to v0.22.0 by @renovate in #2000
• check: mount layer as read-only by @giuseppe in #1997
• Solve errcheck warnings (part 2) by @Honny1 in #1999
• Solve errcheck warnings (part 4) by @Honny1 in #2003
• Solve errcheck warnings (part 5) by @Honny1 in #2006
• Solve errcheck warnings (part 0) by @Honny1 in #1993
• Solve errcheck warnings (part 1) by @Honny1 in #1998
• Solve errcheck warnings (part 3) by @Honny1 in #2002
• chunked: store compressed digest if validated by @giuseppe in #2001
• Don't discard fields of LayerOptions by @mtrmac in #2008
• Clean up some warnings by @mtrmac in #2010
• Enable errcheck linter by @Honny1 in #2011
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.0 by @renovate in #2013
• drivers: drop modprobe calls by @giuseppe in #2021
• archive: report error from input stream by @giuseppe in #2012
• archive: improve filter error reporting by @giuseppe in #2025
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.5 by @renovate in #2029
• chunked, composefs: fix decoding of xattrs by @giuseppe in #2037
• fix(deps): update module github.com/moby/sys/mountinfo to v0.7.2 by @renovate in #2034
• Ensure chunked TOC and tar-split metadata are consistent by @mtrmac in #2035
• chunked: do not write cache file to RO store by @giuseppe in #2031
• overlay: use private merged directory for AIS by @giuseppe in #2036
• loopback: fix race condition opening loopback device by @giuseppe in #2039
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 by @renovate in #2040
• Add some error context in Changes codepaths by @cgwalters in #2043
• overlay: improve some composefs errors by @giuseppe in #2044
• fix(deps): update module github.com/moby/sys/user to v0.2.0 by @renovate in #2045

New Contributors

• @coypoop made their first contribution in #1935
• @akihikodaki made their first contribution in #1931
• @cgwalters made their first contribution in #1939
• @Honny1 made their first contribution in #1973
• @xuegege5290 made their first contribution in #1982

Full Changelog: v1.54.0...v1.55.0

v1.45.7

What's Changed

• [release-1.45] quota: unlink tmp file before creating it by @TomSweeneyRedHat in #1710
• [release-1.45] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1992

Full Changelog: v1.45.6...v1.45.7

v1.51.1

[release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990

Full Changelog: v1.51.0...v1.51.1

v1.54.0

What's Changed

• Bump to v1.53.0, and then to v1.53.1-dev by @TomSweeneyRedHat in #1852
• build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 by @dependabot in #1855
• overlay: create the merged path only if it does not exist by @giuseppe in #1858
• Cirrus-CI: Give success a name by @cevich in #1860
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in #1861
• chunked: skip file metadata for composefs-like links by @giuseppe in #1862
• chore(deps): update dependency containers/automation_images to v20240320 by @renovate in #1866
• chunked: use mmap to load cache files by @giuseppe in #1857
• build(deps): bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12 by @dependabot in #1874
• store: improve error from MountImage() by @giuseppe in #1873
• fix(deps): update module golang.org/x/sys to v0.19.0 by @renovate in #1876
• store: lock stores before calling Exists by @giuseppe in #1877
• chunked: fix unmarshaling of file names by @giuseppe in #1879
• bring read mappings proc into c/storage by @kannon92 in #1882
• build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 by @dependabot in #1880
• fileutils: new function to check for path existence by @giuseppe in #1875
• fileutils: make (Le|E)xists return os.PathError by @giuseppe in #1883
• Revert "bring read mappings proc into c/storage" by @giuseppe in #1884
• Refactor to make it clearer that we return the validated TOC value by @mtrmac in #1887
• Remove devicemapper storage driver by @kolyshkin in #1622
• pkg/parsers/kernel: simplify by @kolyshkin in #1889
• composefs: return mkcomposefs stderr as part of error by @Luap99 in #1890
• chunked: store cache as binary and use a bloom filter by @giuseppe in #1870
• chunked: fix escape of space by @giuseppe in #1895
• chunked: store original tar size for converted layers by @giuseppe in #1893
• Make ZstdChunkedFooterData write-only by @mtrmac in #1901
• chunked: fix divide by zero in bloom filter by @giuseppe in #1904
• chunked: downgrade loading cache file msg to info by @giuseppe in #1906
• Update to Go 1.21 by @mtrmac in #1907
• CI VMs: bump to new versions with tmpfs /tmp by @edsantiago in #1911
• build(deps): bump github.com/Microsoft/hcsshim from 0.12.0-rc.3 to 0.12.3 by @dependabot in #1898
• Remove dependabot, we use renovate now by @rhatdan in #1914
• chunked: skip cache file for non-partial layers by @giuseppe in #1910
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 by @renovate in #1917
• fix(deps): update module golang.org/x/sys to v0.20.0 by @renovate in #1918
• Update idtools.go by @paulcalabro in #1919
• overlay: lock staging directories by @giuseppe in #1916
• pkg/unshare: fix implicit declaration of basename function by @nmeum in #1920
• chore(deps): update dependency containers/automation_images to v20240513 by @renovate in #1922
• Ignore failure to ignore thinpool keys by @rhatdan in #1908
• [Additional Layer Store] Use TOCDigest as ID of each layer (patch for c/storage) by @ktock in #1924
• Move the tar-split digest into the TOC by @mtrmac in #1902

New Contributors

• @paulcalabro made their first contribution in #1919
• @nmeum made their first contribution in #1920

Full Changelog: v1.53.0...v1.54.0

v1.53.0

What's Changed

• overlay: use the default mode for the root directory by @giuseppe in #1799
• Bump to v1.52.0 and then 1.52.1-dev by @TomSweeneyRedHat in #1803
• chore(deps): update dependency containers/automation_images to v20240102 by @renovate in #1802
• overlay: move the fs-verity measurement to the chunked package by @giuseppe in #1804
• composefs: some fixes by @giuseppe in #1806
• Store: add ImageDirectory() and ImageRunDirectory() by @nalind in #1807
• fix(deps): update module github.com/klauspost/compress to v1.17.5 by @renovate in #1808
• Fix windows runtime dir by @ashley-cui in #1810
• homedir: use containers/storage on Windows by @giuseppe in #1812
• Run codespell on code by @rhatdan in #1809
• chunked: store UncompressedDigest if validated by @giuseppe in #1813
• fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] by @renovate in #1815
• Switch from libcontainer users package to moby/sys/user by @mheon in #1817
• fix(deps): update module github.com/klauspost/compress to v1.17.6 by @renovate in #1818
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.0-rc.3 by @renovate in #1819
• overlay: fix build of composefs without cgo by @giuseppe in #1824
• build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in #1823
• chunked: report TOCDigest for converted layers by @giuseppe in #1825
• build(deps): bump github.com/opencontainers/runtime-spec from 1.1.0 to 1.2.0 by @dependabot in #1831
• Extend PutLayer to optimize reusing data from existing layers by @mtrmac in #1830
• Fix compilation on non-Linux by @mtrmac in #1832
• store: new API ApplyStagedLayer by @giuseppe in #1826
• storage: enable partial images by default by @giuseppe in #1833
• Fix missing newline from stdout of create-container command by @edbaunton in #1834
• overlay: drop FHGFSFs from network file systems by @giuseppe in #1840
• Synchronise documentation for convert_images flag by @edbaunton in #1835
• fix(deps): update module github.com/klauspost/compress to v1.17.7 by @renovate in #1841
• pkg/archive: avoid user lookups when generating tarball by @giuseppe in #1837
• overlay: delete backup file by @giuseppe in #1842
• Chunked cleanups by @mtrmac in #1844
• overlay: ignore chown errors in additionalimagestore by @giuseppe in #1828
• chunked: preserve the original value for symlinks by @giuseppe in #1845
• chunked: add chunk size to cache file by @giuseppe in #1843
• Revert commit that breaks podman backwards compatibility by @Luap99 in #1848
• Stop putting user.overlay.* into container layer by @ChristopherHX in #1847
• store: simplify imagestore implementation by @giuseppe in #1784
• chunked: improve function to merge chunks by @giuseppe in #1846
• fix(deps): update module github.com/stretchr/testify to v1.9.0 by @renovate in #1850

New Contributors

• @edbaunton made their first contribution in #1834
• @ChristopherHX made their first contribution in #1847

Full Changelog: v1.52.0...v1.53.0

v1.52.0

What's Changed

• fix(deps): update module github.com/klauspost/compress to v1.17.3 by @renovate in #1760
• Bump to v1.51.0 and then v1.51.1-dev by @TomSweeneyRedHat in #1758
• Embed text from VERSION for use in Store.Version() by @nalind in #1761
• chore(deps): update dependency containers/automation_images to v20231116 by @renovate in #1762
• Consolidate XDG_RUNTIME code by @giuseppe in #1740
• On Read/only additional stores, ignore Read/Only errors by @rhatdan in #1763
• fix(deps): update module golang.org/x/sys to v0.15.0 by @renovate in #1764
• Don't expose account names when creating tar files with hard-coded account IDs by @mtrmac in #1765
• chunked: reject unexpected data after TOC by @giuseppe in #1766
• fix(deps): update module github.com/klauspost/compress to v1.17.4 by @renovate in #1767
• layers: add new TOCDigest attribute by @giuseppe in #1719
• pkg/unshare: return true from IsRootless if user is not root by @dfr in #1770
• composefs: enable it at runtime by @giuseppe in #1769
• Fedora 39 is released by @rhatdan in #1775
• chunked: flush the input tarball to the output by @giuseppe in #1772
• chunked: disallow both zstd:chunked and eStargz TOCs by @giuseppe in #1778
• chore(deps): update dependency containers/automation_images to v20231208 by @renovate in #1777
• refactor: change socket warning to info by @pohlt in #1776
• build(deps): bump github.com/Microsoft/hcsshim from 0.12.0-rc.1 to 0.12.0-rc.2 by @dependabot in #1783
• build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.11 by @dependabot in #1786
• build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.11 by @dependabot in #1790
• fix(deps): update module golang.org/x/sys to v0.16.0 by @renovate in #1792
• Move minimal golang to v1.20 by @rhatdan in #1791
• graphtest: skip tests on insufficient permissions by @mvo5 in #1780
• homedir: drop check for ConfigHome mode by @giuseppe in #1793
• chunked: validate converted images by @giuseppe in #1794
• fix: "undefined: quota.BackingFsBlockDeviceLink" on non-cgo build by @ilya-lesikov in #1800

New Contributors

• @pohlt made their first contribution in #1776
• @mvo5 made their first contribution in #1780
• @ilya-lesikov made their first contribution in #1800

Full Changelog: v1.51.0...v1.52.0