• CRI-O v1.32.0
  • Downloads
  • Changelog since v1.31.0
    • Changes by Kind
      • Dependency-Change
      • Ci
      • Other
      • Feature
      • Bug or Regression
      • Other (Cleanup or Flake)
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.32.0

The release notes have been generated for the commit range v1.31.0…e14f4d3 on Mon, 03 Feb 2025 17:35:00 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sha256sum
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sig
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.cert
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.sig
  • cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.cert
• cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sha256sum
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sig
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.cert
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.sig
  • cri-o.arm64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.cert
• cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sha256sum
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sig
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.cert
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.sig
  • cri-o.ppc64le.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.cert
• cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sha256sum
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sig
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.cert
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.sig
  • cri-o.s390x.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/e14f4d365321ed2dbfed1967291c5dca875e3db4 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/e14f4d365321ed2dbfed1967291c5dca875e3db4 \
    --signature cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.sig \
    --certificate cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz
> bom validate -e cri-o.amd64.e14f4d365321ed2dbfed1967291c5dca875e3db4.tar.gz.spdx -d cri-o

Changelog since v1.31.0

Changes by Kind

Dependency-Change

• Update NRI to latest available version. (#8688, @klihub)
• Upgrade runc to v1.1.15 (#8669, @kannon92)

Ci

• Use go 1.23 for nix (static) builds. (#8598, @saschagrunert)

Other

• Fixed building CRI-O without libseccomp. (#8686, @michalsieron)

Feature

• A runtime handler definition in the configuration file can use a new option use_default_runtime. Setting it to true causes the values for runtime path, runtime type and runtime root to be inherited from the currently configured default runtime. (#8754, @MarSik)
• Add default_annotations to the runtime handler configuration field, allowing admins to specify default annotations to pass to pods (#8829, @haircommander)
• Added --pull-progress-timeout / pull_progress_timeout option to fine-tune the timeout for making progress on image pull. (#8765, @saschagrunert)
• Added crio status goroutines subcommand and /debug/goroutines HTTP endpoint for printing the go routine stack. (#8697, @saschagrunert)
• Added crio status heap subcommand and /debug/heap HTTP endpoint for creating memory heap dumps. (#8702, @saschagrunert)
• Adding support for the systemd watchdog. For now it verifies that the CRI socket is reachable and the runtime reports ready status. (#8791, @saschagrunert)
• Call network plugin GC on startup to attempt cleaning up stale network resources of pods that could not be restored (#8245, @jcaamano)
• Nri plugins can obtain access to the assigned Pod IPs on the PodSandbox hooks (#8731, @aojea)
• Updated NRI to v0.9.0. (#8855, @saschagrunert)
• Use SignatureValidationFailed CRI error for invalid signatures. (#8656, @saschagrunert)
• Use the context timeout / deadline for stopping containers if provided. (#8678, @saschagrunert)

Bug or Regression

• Fix a bug where an allowed_annotation specified twice (in either a workload or runtime) couldn’t be used (#8628, @haircommander)
• Fix a bug where signature checking failed if an image specified both a tag and a digest (#8605, @haircommander)
• Fixed bug to always inherit monitor_env when calling the OCI runtime. (#8808, @saschagrunert)
• Fixed evented pleg pod sandbox status timestamp to use a time in nanosecond resolution. (#8582, @saschagrunert)
• Fixed gpgme/gnupg search path in static build binaries. (#8708, @saschagrunert)
• Fixed issue when sandbox removal is not possible due to stale or missing network namespace path. (#8785, @saschagrunert)

Other (Cleanup or Flake)

• Move factory/sandbox to lib/sandbox (#8610, @xw19)
• Require go 1.23 to build CRI-O. (#8597, @saschagrunert)
• Switched to use RFC3339Nano timestamp log format (2006-01-02T15:04:05.999999999Z07:00) (#8592, @saschagrunert)
• Validate stream server TLS config on startup if TLS should be used. (#8744, @saschagrunert)

Uncategorized

• Decouple CNI plugin initialization from CRI-O health checks. (#8932, @openshift-cherrypick-robot)
• Fix a panic when default_annotations are used (#8886, @openshift-cherrypick-robot)
• Fix log rotation failure during pod termination (#8947, @openshift-cherrypick-robot)
• Fix path traversal in CRI-O log handling (#8976, @sohankunkerkar)
• Restructuring of packages. (#8601, @xw19)

Dependencies

Added

• chainguard.dev/sdk: v0.1.23
• cloud.google.com/go/auth/oauth2adapt: v0.2.4
• cloud.google.com/go/auth: v0.9.1
• cloud.google.com/go/bigtable: v1.29.0
• github.com/chainguard-dev/slogctx: v1.2.2
• github.com/checkpoint-restore/go-criu/v6: v6.3.0
• github.com/containerd/errdefs/pkg: v0.3.0
• github.com/go-logr/zapr: v1.3.0
• github.com/insomniacslk/dhcp: a3a4c1f
• github.com/josharian/native: v1.1.0
• github.com/knqyf263/go-plugin: d8d4205
• github.com/mdlayher/packet: v1.1.2
• github.com/moby/sys/capability: v0.3.0
• github.com/tetratelabs/wazero: v1.8.2
• github.com/u-root/uio: d2acac8
• k8s.io/cri-client: v0.31.4
• sigs.k8s.io/knftables: v0.0.18

Changed

• cel.dev/expr: v0.15.0 → v0.16.1
• chainguard.dev/go-grpc-kit: v0.17.2 → v0.17.5
• cloud.google.com/go/accessapproval: v1.7.5 → v1.7.12
• cloud.google.com/go/accesscontextmanager: v1.8.5 → v1.8.12
• cloud.google.com/go/aiplatform: v1.62.2 → v1.68.0
• cloud.google.com/go/analytics: v0.23.0 → v0.24.0
• cloud.google.com/go/apigateway: v1.6.5 → v1.6.12
• cloud.google.com/go/apigeeconnect: v1.6.5 → v1.6.12
• cloud.google.com/go/apigeeregistry: v0.8.3 → v0.8.10
• cloud.google.com/go/appengine: v1.8.5 → v1.8.12
• cloud.google.com/go/area120: v0.8.5 → v0.8.12
• cloud.google.com/go/artifactregistry: v1.14.7 → v1.14.14
• cloud.google.com/go/asset: v1.18.0 → v1.19.6
• cloud.google.com/go/assuredworkloads: v1.11.5 → v1.11.12
• cloud.google.com/go/automl: v1.13.5 → v1.13.12
• cloud.google.com/go/baremetalsolution: v1.2.4 → v1.2.11
• cloud.google.com/go/batch: v1.8.2 → v1.9.4
• cloud.google.com/go/beyondcorp: v1.0.4 → v1.0.11
• cloud.google.com/go/bigquery: v1.59.1 → v1.62.0
• cloud.google.com/go/billing: v1.18.3 → v1.18.10
• cloud.google.com/go/binaryauthorization: v1.8.1 → v1.8.8
• cloud.google.com/go/certificatemanager: v1.7.5 → v1.8.6
• cloud.google.com/go/channel: v1.17.5 → v1.17.12
• cloud.google.com/go/cloudbuild: v1.15.1 → v1.16.6
• cloud.google.com/go/clouddms: v1.7.4 → v1.7.11
• cloud.google.com/go/cloudtasks: v1.12.6 → v1.12.13
• cloud.google.com/go/compute/metadata: v0.3.0 → v0.5.0
• cloud.google.com/go/compute: v1.25.0 → v1.27.5
• cloud.google.com/go/contactcenterinsights: v1.13.0 → v1.13.7
• cloud.google.com/go/container: v1.33.0 → v1.38.1
• cloud.google.com/go/containeranalysis: v0.11.4 → v0.12.2
• cloud.google.com/go/datacatalog: v1.19.3 → v1.21.1
• cloud.google.com/go/dataflow: v0.9.5 → v0.9.12
• cloud.google.com/go/dataform: v0.9.2 → v0.9.9
• cloud.google.com/go/datafusion: v1.7.5 → v1.7.12
• cloud.google.com/go/datalabeling: v0.8.5 → v0.8.12
• cloud.google.com/go/dataplex: v1.14.2 → v1.18.3
• cloud.google.com/go/dataproc/v2: v2.4.0 → v2.5.4
• cloud.google.com/go/dataqna: v0.8.5 → v0.8.12
• cloud.google.com/go/datastore: v1.15.0 → v1.19.0
• cloud.google.com/go/datastream: v1.10.4 → v1.10.11
• cloud.google.com/go/deploy: v1.17.1 → v1.21.2
• cloud.google.com/go/dialogflow: v1.49.0 → v1.56.0
• cloud.google.com/go/dlp: v1.12.0 → v1.17.0
• cloud.google.com/go/documentai: v1.26.0 → v1.32.0
• cloud.google.com/go/domains: v0.9.5 → v0.9.12
• cloud.google.com/go/edgecontainer: v1.1.5 → v1.2.6
• cloud.google.com/go/errorreporting: v0.3.0 → v0.3.1
• cloud.google.com/go/essentialcontacts: v1.6.6 → v1.6.13
• cloud.google.com/go/eventarc: v1.13.4 → v1.13.11
• cloud.google.com/go/filestore: v1.8.1 → v1.8.8
• cloud.google.com/go/firestore: v1.15.0 → v1.16.0
• cloud.google.com/go/functions: v1.16.0 → v1.18.0
• cloud.google.com/go/gkebackup: v1.3.5 → v1.5.5
• cloud.google.com/go/gkeconnect: v0.8.5 → v0.8.12
• cloud.google.com/go/gkehub: v0.14.5 → v0.14.12
• cloud.google.com/go/gkemulticloud: v1.1.1 → v1.2.5
• cloud.google.com/go/gsuiteaddons: v1.6.5 → v1.6.12
• cloud.google.com/go/iam: v1.1.6 → v1.1.13
• cloud.google.com/go/iap: v1.9.4 → v1.9.11
• cloud.google.com/go/ids: v1.4.5 → v1.4.12
• cloud.google.com/go/iot: v1.7.5 → v1.7.12
• cloud.google.com/go/kms: v1.15.8 → v1.18.5
• cloud.google.com/go/language: v1.12.3 → v1.13.1
• cloud.google.com/go/lifesciences: v0.9.5 → v0.9.12
• cloud.google.com/go/logging: v1.9.0 → v1.11.0
• cloud.google.com/go/longrunning: v0.5.5 → v0.5.12
• cloud.google.com/go/managedidentities: v1.6.5 → v1.6.12
• cloud.google.com/go/maps: v1.7.0 → v1.11.7
• cloud.google.com/go/mediatranslation: v0.8.5 → v0.8.12
• cloud.google.com/go/memcache: v1.10.5 → v1.10.12
• cloud.google.com/go/metastore: v1.13.4 → v1.13.11
• cloud.google.com/go/monitoring: v1.18.0 → v1.20.4
• cloud.google.com/go/networkconnectivity: v1.14.4 → v1.14.11
• cloud.google.com/go/networkmanagement: v1.9.4 → v1.13.7
• cloud.google.com/go/networksecurity: v0.9.5 → v0.9.12
• cloud.google.com/go/notebooks: v1.11.3 → v1.11.10
• cloud.google.com/go/optimization: v1.6.3 → v1.6.10
• cloud.google.com/go/orchestration: v1.9.0 → v1.9.7
• cloud.google.com/go/orgpolicy: v1.12.1 → v1.12.8
• cloud.google.com/go/osconfig: v1.12.5 → v1.13.3
• cloud.google.com/go/oslogin: v1.13.1 → v1.13.8
• cloud.google.com/go/phishingprotection: v0.8.5 → v0.8.12
• cloud.google.com/go/policytroubleshooter: v1.10.3 → v1.10.10
• cloud.google.com/go/privatecatalog: v0.9.5 → v0.9.12
• cloud.google.com/go/pubsub: v1.37.0 → v1.42.0
• cloud.google.com/go/pubsublite: v1.8.1 → v1.8.2
• cloud.google.com/go/recaptchaenterprise/v2: v2.11.0 → v2.14.3
• cloud.google.com/go/recommendationengine: v0.8.5 → v0.8.12
• cloud.google.com/go/recommender: v1.12.1 → v1.12.8
• cloud.google.com/go/redis: v1.14.2 → v1.16.5
• cloud.google.com/go/resourcemanager: v1.9.5 → v1.9.12
• cloud.google.com/go/resourcesettings: v1.6.5 → v1.7.5
• cloud.google.com/go/retail: v1.16.0 → v1.17.5
• cloud.google.com/go/run: v1.3.5 → v1.4.1
• cloud.google.com/go/scheduler: v1.10.6 → v1.10.13
• cloud.google.com/go/secretmanager: v1.11.5 → v1.13.6
• cloud.google.com/go/security: v1.15.6 → v1.18.0
• cloud.google.com/go/securitycenter: v1.27.0 → v1.34.0
• cloud.google.com/go/servicedirectory: v1.11.4 → v1.11.12
• cloud.google.com/go/shell: v1.7.5 → v1.7.12
• cloud.google.com/go/spanner: v1.58.0 → v1.67.0
• cloud.google.com/go/speech: v1.22.0 → v1.24.1
• cloud.google.com/go/storagetransfer: v1.10.4 → v1.10.11
• cloud.google.com/go/talent: v1.6.6 → v1.6.13
• cloud.google.com/go/texttospeech: v1.7.5 → v1.7.12
• cloud.google.com/go/tpu: v1.6.5 → v1.6.12
• cloud.google.com/go/trace: v1.10.5 → v1.10.12
• cloud.google.com/go/translate: v1.10.1 → v1.11.0
• cloud.google.com/go/video: v1.20.4 → v1.22.1
• cloud.google.com/go/videointelligence: v1.11.5 → v1.11.12
• cloud.google.com/go/vision/v2: v2.8.0 → v2.8.7
• cloud.google.com/go/vmmigration: v1.7.5 → v1.7.12
• cloud.google.com/go/vmwareengine: v1.1.1 → v1.2.1
• cloud.google.com/go/vpcaccess: v1.7.5 → v1.7.12
• cloud.google.com/go/webrisk: v1.9.5 → v1.9.12
• cloud.google.com/go/websecurityscanner: v1.6.5 → v1.6.12
• cloud.google.com/go/workflows: v1.12.4 → v1.12.11
• cloud.google.com/go: v0.112.1 → v0.115.1
• dario.cat/mergo: v1.0.0 → v1.0.1
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.10.0 → v1.13.0
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.5.1 → v1.7.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.5.2 → v1.10.0
• github.com/Microsoft/cosesign1go: v1.1.0 → v1.2.0
• github.com/Microsoft/didx509go: v0.0.2 → v0.0.3
• github.com/Microsoft/hcsshim: v0.12.5 → v0.12.9
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.6.1 → v1.6.2
• github.com/aws/aws-sdk-go-v2/config: v1.27.9 → v1.27.27
• github.com/aws/aws-sdk-go-v2/credentials: v1.17.9 → v1.17.27
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.16.0 → v1.16.11
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.3.4 → v1.3.15
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.6.4 → v2.6.15
• github.com/aws/aws-sdk-go-v2/internal/v4a: v1.3.3 → v1.3.9
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.11.1 → v1.11.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.3.5 → v1.3.11
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.11.6 → v1.11.17
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.17.3 → v1.17.9
• github.com/aws/aws-sdk-go-v2/service/kms: v1.30.0 → v1.35.3
• github.com/aws/aws-sdk-go-v2/service/s3: v1.51.4 → v1.55.1
• github.com/aws/aws-sdk-go-v2/service/sso: v1.20.3 → v1.22.4
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.23.3 → v1.26.4
• github.com/aws/aws-sdk-go-v2/service/sts: v1.28.5 → v1.30.3
• github.com/aws/aws-sdk-go-v2: v1.26.0 → v1.30.3
• github.com/aws/aws-sdk-go: v1.51.6 → v1.55.5
• github.com/aws/smithy-go: v1.20.1 → v1.20.3
• github.com/checkpoint-restore/checkpointctl: v1.2.1 → v1.3.0
• github.com/checkpoint-restore/go-criu/v7: v7.1.0 → v7.2.0
• github.com/cilium/ebpf: v0.11.0 → v0.16.0
• github.com/cncf/xds/go: 555b57e → b4127c9
• github.com/containerd/console: v1.0.3 → v1.0.4
• github.com/containerd/containerd/api: v1.7.19 → v1.8.0
• github.com/containerd/containerd: v1.7.21 → v1.7.24
• github.com/containerd/errdefs: v0.1.0 → v0.3.0
• github.com/containerd/nri: v0.6.1 → v0.9.0
• github.com/containerd/ttrpc: v1.2.5 → b5cd6e4
• github.com/containerd/typeurl/v2: v2.1.1 → v2.2.0
• github.com/containernetworking/plugins: v1.5.1 → v1.6.1
• github.com/containers/common: v0.60.2 → v0.61.0
• github.com/containers/conmon-rs: v0.6.5 → v0.6.6
• github.com/containers/image/v5: v5.32.2 → 8b4e15e
• github.com/containers/storage: v1.55.0 → b78c0cb
• github.com/coreos/go-iptables: v0.7.0 → v0.8.0
• github.com/coreos/go-oidc/v3: v3.10.0 → v3.11.0
• github.com/cpuguy83/go-md2man/v2: v2.0.4 → v2.0.5
• github.com/creack/pty: v1.1.23 → v1.1.24
• github.com/cri-o/ocicni: v0.4.2 → v0.4.3
• github.com/cyphar/filepath-securejoin: v0.3.1 → v0.3.5
• github.com/docker/cli: v27.1.1+incompatible → v27.3.1+incompatible
• github.com/docker/docker: v27.1.1+incompatible → v27.3.1+incompatible
• github.com/eggsampler/acme/v3: v3.5.0 → v3.6.0
• github.com/envoyproxy/go-control-plane: 1eb8caa → v0.13.0
• github.com/envoyproxy/protoc-gen-validate: v1.0.4 → v1.1.0
• github.com/fsnotify/fsnotify: v1.7.0 → v1.8.0
• github.com/go-jose/go-jose/v4: v4.0.2 → v4.0.4
• github.com/go-rod/rod: v0.116.0 → v0.116.2
• github.com/go-test/deep: v1.1.0 → v1.1.1
• github.com/golang/glog: v1.2.1 → v1.2.2
• github.com/google/certificate-transparency-go: v1.1.8 → v1.2.1
• github.com/google/go-containerregistry: v0.20.0 → v0.20.2
• github.com/google/pprof: fa2c70b → d1b30fe
• github.com/google/s2a-go: v0.1.7 → v0.1.8
• github.com/googleapis/gax-go/v2: v2.12.3 → v2.13.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.22.0 → v2.23.0
• github.com/hashicorp/vault/api: v1.12.2 → v1.14.0
• github.com/intel/goresctrl: v0.7.0 → v0.8.0
• github.com/klauspost/compress: v1.17.9 → v1.17.11
• github.com/lestrrat-go/jwx: v1.2.28 → v1.2.29
• github.com/letsencrypt/boulder: 89b07f4 → de9c061
• github.com/mattn/go-sqlite3: v1.14.22 → v1.14.24
• github.com/mdlayher/socket: v0.2.0 → v0.5.1
• github.com/onsi/ginkgo/v2: v2.20.2 → v2.22.0
• github.com/onsi/gomega: v1.34.2 → v1.36.0
• github.com/open-policy-agent/opa: v0.63.0 → v0.68.0
• github.com/opencontainers/runc: v1.1.14 → v1.2.1
• github.com/opencontainers/runtime-tools: 408c51e → 6c9570a
• github.com/opencontainers/selinux: v1.11.0 → v1.11.1
• github.com/pelletier/go-toml/v2: v2.1.0 → v2.2.2
• github.com/pkg/sftp: v1.13.6 → v1.13.7
• github.com/prometheus/client_golang: v1.20.2 → v1.20.5
• github.com/prometheus/common: v0.55.0 → v0.57.0
• github.com/rogpeppe/go-internal: v1.12.0 → v1.13.1
• github.com/rs/cors: v1.10.1 → v1.11.0
• github.com/safchain/ethtool: v0.4.0 → v0.5.9
• github.com/sebdah/goldie/v2: v2.5.3 → v2.5.5
• github.com/sigstore/fulcio: v1.4.5 → v1.6.4
• github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.8.3 → v1.8.8
• github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.8.3 → v1.8.8
• github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.8.3 → v1.8.8
• github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.8.3 → v1.8.8
• github.com/sigstore/sigstore: v1.8.4 → v1.8.9
• github.com/skeema/knownhosts: v1.2.2 → v1.3.0
• github.com/spf13/viper: v1.18.2 → v1.19.0
• github.com/spiffe/go-spiffe/v2: v2.2.0 → v2.3.0
• github.com/stretchr/testify: v1.9.0 → v1.10.0
• github.com/sylabs/sif/v2: v2.18.0 → v2.19.1
• github.com/uptrace/opentelemetry-go-extra/otellogrus: v0.3.1 → v0.3.2
• github.com/uptrace/opentelemetry-go-extra/otelutil: v0.3.1 → v0.3.2
• github.com/urfave/cli/v2: v2.27.4 → v2.27.5
• github.com/urfave/cli: v1.22.14 → v1.22.16
• github.com/vbatts/tar-split: v0.11.5 → v0.11.7
• github.com/vbauerster/mpb/v8: v8.7.5 → v8.8.3
• github.com/weppos/publicsuffix-go: 2120216 → 5f1d033
• github.com/ysmood/got: v0.34.1 → v0.40.0
• github.com/ysmood/leakless: v0.8.0 → v0.9.0
• go.etcd.io/bbolt: v1.3.10 → v1.3.11
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.54.0 → v0.57.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.29.0 → v1.32.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.29.0 → v1.32.0
• go.opentelemetry.io/otel/log: v0.3.0 → v0.6.0
• go.opentelemetry.io/otel/metric: v1.29.0 → v1.32.0
• go.opentelemetry.io/otel/sdk: v1.29.0 → v1.32.0
• go.opentelemetry.io/otel/trace: v1.29.0 → v1.32.0
• go.opentelemetry.io/otel: v1.29.0 → v1.32.0
• go.step.sm/crypto: v0.44.2 → v0.51.1
• go.uber.org/mock: v0.4.0 → v0.5.0
• golang.org/x/crypto: v0.26.0 → v0.29.0
• golang.org/x/exp: 8a7402a → f66d83c
• golang.org/x/mod: v0.20.0 → v0.21.0
• golang.org/x/net: v0.28.0 → v0.30.0
• golang.org/x/oauth2: v0.22.0 → v0.23.0
• golang.org/x/sync: v0.8.0 → v0.9.0
• golang.org/x/sys: v0.24.0 → v0.28.0
• golang.org/x/term: v0.23.0 → v0.26.0
• golang.org/x/text: v0.17.0 → v0.20.0
• golang.org/x/time: v0.5.0 → v0.6.0
• golang.org/x/tools: v0.24.0 → v0.26.0
• google.golang.org/api: v0.172.0 → v0.195.0
• google.golang.org/genproto/googleapis/api: fc7c04a → dd2ea8e
• google.golang.org/genproto/googleapis/rpc: fc7c04a → dd2ea8e
• google.golang.org/genproto: c811ad7 → 4ba0660
• google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.3.0 → v1.5.1
• google.golang.org/grpc: v1.66.0 → v1.68.0
• google.golang.org/protobuf: v1.34.2 → v1.35.1
• k8s.io/api: v0.31.0 → v0.31.4
• k8s.io/apimachinery: v0.31.0 → v0.31.4
• k8s.io/apiserver: v0.31.0 → v0.31.4
• k8s.io/client-go: v0.31.0 → v0.31.4
• k8s.io/component-base: v0.31.0 → v0.31.4
• k8s.io/cri-api: v0.31.0 → v0.31.4
• k8s.io/kms: v0.31.0 → v0.31.4
• k8s.io/kubelet: v0.31.0 → v0.31.4
• sigs.k8s.io/release-utils: v0.8.4 → v0.8.5

Removed

• github.com/blendle/zapdriver: v1.3.1
• github.com/checkpoint-restore/go-criu/v5: v5.3.0
• github.com/cpuguy83/go-md2man: v1.0.10
• github.com/d2g/dhcp4: a1d1b6c
• github.com/d2g/dhcp4client: v1.0.0
• github.com/d2g/dhcp4server: 7d4a0a7
• github.com/d2g/hardwareaddr: e7d9fbe
• github.com/frankban/quicktest: v1.14.5
• github.com/go-task/slim-sprig: 52ccab3
• github.com/shurcooL/sanitized_anchor_name: v1.0.0
• github.com/vektah/gqlparser/v2: v2.4.5
• knative.dev/pkg: 74c4be5