v1.19.11

What's Changed

• [release-1.19] run: add container gid to additional groups by @nalind in #4289
• [release-1.19] add: fail on bad HTTP response instead of writing to container for URL sources by @flouthoc in #4287

v1.28.0

What's Changed

• release: prepare for release v1.27.0 by @flouthoc in #4152
• build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8 by @dependabot in #4177
• Scrub user and group names from layer diffs by @nalind in #4181
• [CI:DOCS] docs: specify git:// protocol is not supported for github hosted repo by @flouthoc in #4179
• build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2 by @dependabot in #4186
• cmd/buildah: add "manifest create --amend" by @nalind in #4189
• Drop util/util.Cause() by @nalind in #4191
• commit: use race-free RemoveNames instead of SetNames for pruning names by @flouthoc in #4190
• mount,cache: enable SElinux shared content label (z) option by default by @flouthoc in #4192
• build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3 by @dependabot in #4197
• test: use T.TempDir to create temporary test directory by @Juneezee in #4194
• Makefile: always call $(GO) instead of go by @nalind in #4198
• buildah: add support for --retry and --retry-delay incase of push/pull failures. by @flouthoc in #4195
• run: add container gid to additional groups by @flouthoc in #4200
• build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 by @dependabot in #4204
• Cirrus: use image with fewer downloaded dependencies by @lsm5 in #4201
• build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1 by @dependabot in #4206
• Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause by @nalind in #4210
• build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 by @dependabot in #4215
• Add support for buildah run with chroot isolation by @dfr in #4174
• manifest: add support for buildah manifest exists by @flouthoc in #4220
• Don't call os.Exit(1) from manifest exist by @rhatdan in #4223
• Buildah should ignore /etc/crio/seccomp.json by @rhatdan in #4219
• Use constants from containers/common for finding seccomp.json by @nalind in #4225
• build(deps): bump github.com/docker/docker from 20.10.17+incompatible to 20.10.18+incompatible by @dependabot in #4232
• [CI:DOCS] Update install.md: Debian 11 (Bullseye) is stable by @Enrico204 in #4237
• build: honor <Containerfile>.containerignore or <Containerfile>.dockerignore as ignore file by @flouthoc in #4239
• Minor test fix for podman-remote by @edsantiago in #4241
• parse: make processing fields for --mount order agnostic by @flouthoc in #4234
• build: make --cache-ttl=0 equivalent to --no-cache by @flouthoc in #4248
• build: support --skip-unused-stages for multi-stage builds. by @flouthoc in #4249
• buildah bud --network=none should have no network by @rhatdan in #4229
• Fix broken command completion by @edsantiago in #4256
• Fix stutters by @rhatdan in #4205
• Prevent use of --dns* options with --net=none by @rhatdan in #4250
• Fix broken dns test (from merge collision) by @edsantiago in #4283
• run,build: conflict --isolation=chroot and --network by @flouthoc in #4257
• vendor: update c/storage and c/common by @giuseppe in #4269
• copier: work around freebsd bug for "mkdir /" by @dfr in #4285
• vendor in latest containers/common by @rhatdan in #4235
• pkg/cli: improve completion test by @Luap99 in #4267
• Run codespell on code by @rhatdan in #4296
• Proof of concept: nightly dependency treadmill by @edsantiago in #4297
• [ci:docs] Fix buildahimage container.conf permissions regression by @AndASM in #4290
• Set sysctls from containers.conf by @rhatdan in #4292
• Vendor in latest containers/storage by @rhatdan in #4299
• Check for unset build args after setting TARGET args by @lucacome in #4295
• build(deps): bump github.com/opencontainers/selinux from 1.10.1 to 1.10.2 by @dependabot in #4301
• config,builder: process variant while populating image spec by @flouthoc in #4286
• [CI:DOCS] Add quay-description update reminder by @cevich in #4302
• Update vendor containers/(common,image) by @rhatdan in #4304
• Update for klauspost/pgzip#50 by @mtrmac in #4306

New Contributors

• @Juneezee made their first contribution in #4194
• @Enrico204 made their first contribution in #4237
• @AndASM made their first contribution in #4290
• @lucacome made their first contribution in #4295

Full Changelog: v1.27.0...v1.28.0

v1.26.5

What's Changed

• [release-1.26] [backport] BuildDockerfiles: error out if path to containerfile is a directory by @flouthoc in #4166
• [release-1.26] run: add container gid to additional groups by @nalind in #4266
• [release-1.26] bump github.com/theupdateframework/go-tuf by @nalind in #4275

Full Changelog: v1.26.4...v1.26.5

v1.24.6

What's Changed

• [release-1.24] run: add container gid to additional groups by @nalind in #4265

Full Changelog: v1.24.5...v1.24.6

v1.23.5

What's Changed

• [release-1.23] Bump golang.org/x/crypto to 7b82a4e by @lsm5 in #3911
• [release-1.23] run: add container gid to additional groups by @nalind in #4264

Full Changelog: v1.23.4...v1.23.5

v1.22.5

What's Changed

• [release-1.22] CVE-2022-27651: do not set the inheritable capabilities by @nalind in #3856
• [release-1.22] CVE-2022-21698: bump github.com/prometheus/client_golang to v1.11.1 by @nalind in #3857
• [release-1.22] run: add container gid to additional groups by @nalind in #4263

Full Changelog: v1.22.4...v1.22.5

v1.21.5

What's Changed

• [1.21] runtime-flag (debug) test: handle old & new runc by @edsantiago in #3407
• [BACKPORT release-1.21]: bud.bats: use a local git daemon for the git protocol test by @lsm5 in #4073
• [release-1.21] run: add container gid to additional groups by @nalind in #4262
• [release-1.21] do not set the inheritable capabilities by @nalind in #4268
• [release-1.21] bump github.com/prometheus/client_golang to v1.11.1 by @nalind in #4271

Full Changelog: v1.21.4...v1.21.5

v1.20.2

What's Changed

• [release-1.20] do not set the inheritable capabilities by @nalind in #4260
• [release-1.20] run: add container gid to additional groups by @nalind in #4261
• [release-1.20] bump github.com/prometheus/client_golang to v1.11.1 by @nalind in #4272

Full Changelog: v1.20.1...v1.20.2

v1.27.2

What's Changed

• [release-1.27] build: support --skip-unused-stages for multi-stage builds by @nalind in #4270

Full Changelog: v1.27.1...v1.27.2

v1.19.10

• [release-1.19] github.com/prometheus/client_golang to v1.11.1
• [release-1.19]Bump c/storage to 1.24.10
• Tests: disable three gating-test failures
• [release-1.19] CVE-2022-27651: do not set the inheritable capabilities
• Cirrus: Disable conformance test
• chroot isolation: environment value leakage to intermediate processes