v1.57.1

• [1.57] Fall back …, bump limit to 150 MB, and tag as 1.57.1 by @mtrmac in #2241

Full Changelog: v1.57.0...v1.57.1

v1.57.0

What's Changed

• Bump c/storage to v1.56.0 by @TomSweeneyRedHat in #2163
• chore(deps): update dependency golangci/golangci-lint to v1.62.0 by @renovate in #2167
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.1 by @renovate in #2172
• chunked: rework GetBlobAt usage by @giuseppe in #2162
• fix(deps): update module golang.org/x/sys to v0.27.0 by @renovate in #2164
• fix(deps): update module github.com/moby/sys/capability to v0.4.0 by @renovate in #2171
• cirrus: update CI image to f41 by @Luap99 in #2173
• add support for unpacking layers with xattrs set on FreeBSD by @kimminss0 in #2170
• fix(deps): update module github.com/stretchr/testify to v1.10.0 by @renovate in #2178
• chore(deps): update dependency golangci/golangci-lint to v1.62.2 by @renovate in #2179
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.2 by @renovate in #2182
• pkg/system: add fromStatT for NetBSD by @tydavis in #2181
• pkg/system: add mimicked xattr syscalls on FreeBSD by @kimminss0 in #2177
• store: correctly remove incomplete layers on load. by @Luap99 in #2185
• archive: store the override xattr with the inode type by @giuseppe in #2183
• Enable overlay without cgo by @koct9i in #2192
• fix(deps): update module golang.org/x/sys to v0.28.0 by @renovate in #2189
• store: new Dedup() API by @giuseppe in #2176
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5 by @renovate in #2190
• chunked: handle creating root directory by @giuseppe in #2194
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.3 by @renovate in #2195
• Fix SafeChown when ContainersOverrideXattr is unset by @mtrmac in #2197
• Move pkg/chunked/internal to pkg/chunked/internal/minimal by @mtrmac in #2196
• archive: detect symlink target changes by @giuseppe in #2199
• composefs: remove cgo dependency by @giuseppe in #2201
• composefs: fix comment by @giuseppe in #2200
• fix(deps): update golang.org/x/exp digest to b2144cd by @renovate in #2203
• chore(deps): update dependency golangci/golangci-lint to v1.63.3 by @renovate in #2204
• chore(deps): update dependency golangci/golangci-lint to v1.63.4 by @renovate in #2205
• fix(deps): update module golang.org/x/sys to v0.29.0 by @renovate in #2206
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6 by @renovate in #2198
• chore(deps): update dependency containers/automation_images to v20250107 by @renovate in #2207
• Compute an uncompressed digest for chunked layers by @mtrmac in #2155
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.4.0 by @renovate in #2210
• fix(deps): update module github.com/tchap/go-patricia/v2 to v2.3.2 by @renovate in #2211
• Merge v1.56.1 into main by @mtrmac in #2214
• Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.4.0" by @Luap99 in #2216
• ioutils: fix typo by @hanwen-flow in #2218
• fix(deps): update module github.com/vbatts/tar-split to v0.11.7 by @renovate in #2215
• chunked: use fallback mechanism on non-linux platforms by @giuseppe in #2231

New Contributors

• @tydavis made their first contribution in #2181
• @koct9i made their first contribution in #2192
• @hanwen-flow made their first contribution in #2218

Full Changelog: v1.56.1...v1.57.0

v1.56.1

What's Changed

• [release-1.56] store: correctly remove incomplete layers on load. by @Luap99 in #2193

Full Changelog: v1.56.0...v1.56.1

v1.55.2

What's Changed

• Backport pull request #2117 to release-1.55 by @anderbubble in #2159

Full Changelog: v1.55.1...v1.55.2

v1.56.0

What's Changed

• Bump to c/storage v1.55.0, then v1.56.0-dev by @TomSweeneyRedHat in #2046
• idmap: improve error messages by @giuseppe in #2047
• overlay,chunked: Add some more O_CLOEXEC by @cgwalters in #2048
• composefs: prefer std library functions by @giuseppe in #2050
• docs: Add (not installed) man pages for composefs and zstd:chunked by @cgwalters in #2054
• fix(deps): update module golang.org/x/sys to v0.23.0 by @renovate in #2052
• composefs use new mount api by @giuseppe in #2057
• fix(deps): update module github.com/moby/sys/user to v0.3.0 by @renovate in #2058
• fix(deps): update module golang.org/x/sys to v0.24.0 by @renovate in #2059
• chrootarchive: Pass root via fd by @cgwalters in #2049
• loopback: always return error if no loopback device by @giuseppe in #2056
• Update golangci-lint by @Honny1 in #2063
• Prepare a golangci-lint installation for automatic update using renovate by @Honny1 in #2064
• storage.conf: Various cleanups by @cgwalters in #2066
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.6 by @renovate in #2068
• Create Store.List method for listing layers, images, containers by @Honny1 in #2061
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by @renovate in #2070
• composefs fixes by @giuseppe in #2069
• pkg/fileutils: fix Lexists on FreeBSD by @dfr in #2071
• pkg/fileutils: fix Lexists on FreeBSD (second attempt) by @dfr in #2074
• docs: Fill in more about composefs and zstd:chunked by @cgwalters in #2072
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by @renovate in #2073
• Sync man page with storage.conf by @cgwalters in #2076
• chore(deps): update dependency containers/automation_images to v20240821 by @renovate in #2077
• fix(deps): update golang.org/x/exp digest to 9b4947d by @renovate in #2082
• overlay: ignore EINVAL for cleanup unmount by @giuseppe in #2083
• Be clearer about the layer store locking rules by @mtrmac in #2080
• Be explicit about impact of not writing caches by @mtrmac in #2079
• fix(deps): update module golang.org/x/sys to v0.25.0 by @renovate in #2085
• Update to Go 1.22 by @mtrmac in #2086
• Avoid manually-coded loops by @mtrmac in #2087
• Improve comments based on after-merge review comments by @mtrmac in #2088
• chore(deps): update dependency golangci/golangci-lint to v1.61.0 by @renovate in #2089
• pkg/directory: correctly ignore ENOENT while walking by @Luap99 in #2097
• chunked: fix reuse of the layers cache by @giuseppe in #2024
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 by @renovate in #2093
• Switch to github.com/moby/sys/capability by @kolyshkin in #2103
• userns: fix off-by-one userns max size detection by @giuseppe in #2105
• fix(deps): update module github.com/klauspost/compress to v1.17.10 by @renovate in #2106
• Use strings.Cut{,Prefix,Suffix} where appropriate by @kolyshkin in #2100
• userns: skip "nogroup" by @giuseppe in #2109
• Remove old +build tags, add gofix ci job by @kolyshkin in #2101
• overlay: additional layer: check layer existence before using by @ktock in #2108
• overlay: refactor getStagingDir helper by @giuseppe in #2107
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.7 by @renovate in #2110
• Assorted nits reported by revive linter by @kolyshkin in #2102
• overlay: fallback without data only layers by @giuseppe in #2112
• fix(deps): update module github.com/vbatts/tar-split to v0.11.6 by @renovate in #2114
• fix(deps): update module github.com/moby/sys/capability to v0.3.0 by @renovate in #2111
• Use tar-split/tar/asm.IterateHeaders now that it has been accepted by @mtrmac in #2116
• chunked: ignore ErrLayerUnknown when creating cache by @giuseppe in #2119
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 by @renovate in #2120
• chunked: define error for partial pulls not available by @giuseppe in #2118
• fix(deps): update module golang.org/x/sys to v0.26.0 by @renovate in #2124
• Audit and update OWNERS file by @baude in #2125
• CI: Fix git-validation.sh by @Honny1 in #2121
• Fix copy/clone of empty value by @Honny1 in #2122
• drivers/zfs: Handle missing layers during image deletion in ZFS file system by @kimminss0 in #2123
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 by @renovate in #2127
• fix(deps): update module github.com/klauspost/compress to v1.17.11 by @renovate in #2132
• Fix assignment of quota project IDs by @mheon in #2129
• chore(deps): update dependency containers/automation_images to v20241010 by @renovate in #2131
• chunked: prevent using an empty cache by @giuseppe in #2133
• Use securejoin.SecureJoin when forming userns paths by @mheon in #2134
• Correctly compute UncompressedSize on zstd:chunked pull, don’t set it on estargz by @mtrmac in #2130
• Follow-ups to #2130 by @mtrmac in #2136
• fix(deps): update module github.com/opencontainers/selinux to v1.11.1 by @renovate in #2138
• ci: add codespell by @kolyshkin in #2137
• Fall back from partial pull when on VFS by @mtrmac in #2140
• composefs: use mount from file where supported by @giuseppe in #2145
• fsdiff: mount both layers are read-only by @giuseppe in #2147
• Merge the release-1.55 branch into main by @mtrmac in #2143
• overlay: use private directory for composefs mounts by @giuseppe in #2148
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.8 by @renovate in #2144
• chunked: close payload stream by @giuseppe in #2151
• Refactor copy of slices and maps by @Honny1 in #2128
• overlay: make error lowercase by @giuseppe in #2153
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.9 by @renovate in #2154
• Update copy.DirCopy to leave sockets in the file system by @anderbubble in #2117
• fix(deps): update golang.org/x/exp digest to f66d83c by @renovate in #2158
• Disable partial pulls (zstd:chunked) by default by @nalind in #2156

New Contributors

• @kimminss0 made their first contribution in #2123
• @anderbubble made their first contribution in #2117

Full Changelog: v1.55.1...v1.56.0

v1.51.2

What's Changed

• [release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990
• [release-1.51] Backport CVE-2024-9676 fix by @mheon in #2146

Full Changelog: v1.51.1...v1.51.2

v1.55.1

What's Changed

• [release-1.55] backport fix for CVE-2026-9676 by @mheon in #2135

Full Changelog: v1.55.0...v1.55.1

v1.55.0

What's Changed

• Bump to v1.54.0 by @TomSweeneyRedHat in #1925
• Fix assignment of quota IDs for XFS quotas by @mheon in #1921
• Fix locking bugs from #1916, and one more by @mtrmac in #1927
• fix(deps): update module github.com/burntsushi/toml to v1.4.0 by @renovate in #1930
• composefs: add parent directory if missing by @giuseppe in #1929
• chore(deps): update dependency containers/automation_images to v20240529 by @renovate in #1932
• overlay: remove unreachable code by @giuseppe in #1934
• chunked: ignore the tar-split data if digest is empty by @giuseppe in #1936
• chunked: change auto merge threshold to 1024 by @giuseppe in #1937
• Trivial patches to minimize patches needed by NetBSD by @coypoop in #1935
• archive: always fix mode for root dir with ForceMask by @akihikodaki in #1931
• compression: Add some doc comments by @cgwalters in #1939
• chunked: fix deadlock by always consuming tar-split by @giuseppe in #1942
• dump: replace unicode package with custom functions by @giuseppe in #1940
• fix(deps): update module golang.org/x/sys to v0.21.0 by @renovate in #1946
• dump: use the sanitized path for root check by @giuseppe in #1948
• chunked: Set O_CLOEXEC by @cgwalters in #1947
• graphdriver: Clarify name of fsverity const, tweak docs by @cgwalters in #1949
• dump: handle duplicates by @giuseppe in #1951
• chunked: refactor file system ops in a new file and add some tests by @giuseppe in #1952
• chunked: Add helpers for /proc/self/fd accesses by @cgwalters in #1956
• chunked: use Fprint instead of Fprintf by @giuseppe in #1960
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.4 by @renovate in #1961
• Fix build failures by @mtrmac in #1954
• chunked: improve error messages for file system operations by @giuseppe in #1957
• compression: Fix Deprecated: and actually comment out unused bits by @cgwalters in #1958
• chunked: Fix two minor linter issues by @cgwalters in #1959
• overlay: extend overlayFileGetter to understand composefs by @giuseppe in #1950
• pkg/archive.statDifferent(): care about mtime for directories by @nalind in #1962
• chunked: add fuzzing tests for the cache by @giuseppe in #1963
• overlay: Fix root directoy state with extended attributes by @akihikodaki in #1953
• archive: use pigz|zstd if available by @giuseppe in #1964
• chunked: use existing buffer for io.Copy by @giuseppe in #1965
• chunked: honor store configuration by @giuseppe in #1966
• pkg/archive.statDifferent(): fix the previous change by @nalind in #1968
• Decide on tar-split usage based on trusted data in TOC by @mtrmac in #1967
• fix(deps): update module github.com/klauspost/compress to v1.17.9 by @renovate in #1969
• Fix warnings (SA9003, SA4023, SA1019) by @Honny1 in #1973
• Fix deprecated use of pwalk.Walk (SA1019) by @Honny1 in #1975
• Fix deprecated use of io/ioutil (SA1019) by @Honny1 in #1977
• chunked: honor the ForceMask setting by @giuseppe in #1971
• overlay: drop check for mount_program AND force_mask by @giuseppe in #1970
• Fix deprecated use of mountinfo.PidMountInfo (SA1019) by @Honny1 in #1981
• Fix deprecated use of capability.NewPid (SA1019) by @Honny1 in #1979
• Fix deprecated use of tar.TypeRegA (SA1019) by @Honny1 in #1980
• overlay: check for options != nil by @giuseppe in #1984
• Fix the issue where compiling containers-storage with exclude_disk_qu… by @xuegege5290 in #1982
• store: drop remap-[ug]ids by @giuseppe in #1976
• Fix the surrounding loop is unconditionally terminated (SA4004) by @Honny1 in #1986
• vfs: honor the specified mappings by @giuseppe in #1988
• Fix TestSafeLink on ARM64 by @Honny1 in #1989
• Add comented out example definition of driver_priority to storage.conf by @dcermak in #1987
• Fix deprecated use of hdr.Xattrs (SA1019) by @Honny1 in #1985
• chunked: skip setting time if empty by @giuseppe in #1996
• Move junkfile to ${TESTDIR} directory by @Honny1 in #1995
• Enable staticcheck linter by @Honny1 in #1991
• fix(deps): update module golang.org/x/sys to v0.22.0 by @renovate in #2000
• check: mount layer as read-only by @giuseppe in #1997
• Solve errcheck warnings (part 2) by @Honny1 in #1999
• Solve errcheck warnings (part 4) by @Honny1 in #2003
• Solve errcheck warnings (part 5) by @Honny1 in #2006
• Solve errcheck warnings (part 0) by @Honny1 in #1993
• Solve errcheck warnings (part 1) by @Honny1 in #1998
• Solve errcheck warnings (part 3) by @Honny1 in #2002
• chunked: store compressed digest if validated by @giuseppe in #2001
• Don't discard fields of LayerOptions by @mtrmac in #2008
• Clean up some warnings by @mtrmac in #2010
• Enable errcheck linter by @Honny1 in #2011
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.0 by @renovate in #2013
• drivers: drop modprobe calls by @giuseppe in #2021
• archive: report error from input stream by @giuseppe in #2012
• archive: improve filter error reporting by @giuseppe in #2025
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.5 by @renovate in #2029
• chunked, composefs: fix decoding of xattrs by @giuseppe in #2037
• fix(deps): update module github.com/moby/sys/mountinfo to v0.7.2 by @renovate in #2034
• Ensure chunked TOC and tar-split metadata are consistent by @mtrmac in #2035
• chunked: do not write cache file to RO store by @giuseppe in #2031
• overlay: use private merged directory for AIS by @giuseppe in #2036
• loopback: fix race condition opening loopback device by @giuseppe in #2039
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 by @renovate in #2040
• Add some error context in Changes codepaths by @cgwalters in #2043
• overlay: improve some composefs errors by @giuseppe in #2044
• fix(deps): update module github.com/moby/sys/user to v0.2.0 by @renovate in #2045

New Contributors

• @coypoop made their first contribution in #1935
• @akihikodaki made their first contribution in #1931
• @cgwalters made their first contribution in #1939
• @Honny1 made their first contribution in #1973
• @xuegege5290 made their first contribution in #1982

Full Changelog: v1.54.0...v1.55.0

v1.45.7

What's Changed

• [release-1.45] quota: unlink tmp file before creating it by @TomSweeneyRedHat in #1710
• [release-1.45] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1992

Full Changelog: v1.45.6...v1.45.7

v1.51.1

[release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990

Full Changelog: v1.51.0...v1.51.1