• CRI-O v1.33.0
  • Downloads
  • Changelog since v1.32.0
    • Changes by Kind
      • Other
      • Deprecation
      • API Change
      • Feature
      • Bug or Regression
      • Other (Cleanup or Flake)
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.33.0

The release notes have been generated for the commit range v1.32.0…30a69d9 on Mon, 02 Jun 2025 13:26:27 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sha256sum
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sig
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.cert
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.sig
  • cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.cert
• cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sha256sum
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sig
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.cert
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.sig
  • cri-o.arm64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.cert
• cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sha256sum
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sig
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.cert
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.sig
  • cri-o.ppc64le.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.cert
• cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sha256sum
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sig
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.cert
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.sig
  • cri-o.s390x.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/30a69d9a5cebb84e389b56614d975eb5fb16b6c0 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/30a69d9a5cebb84e389b56614d975eb5fb16b6c0 \
    --signature cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.sig \
    --certificate cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz
> bom validate -e cri-o.amd64.30a69d9a5cebb84e389b56614d975eb5fb16b6c0.tar.gz.spdx -d cri-o

Changelog since v1.32.0

Changes by Kind

Other

• Fix path traversal in CRI-O log handling (#8968, @sohankunkerkar)

Deprecation

• Explicit configuration for LimitNOFILE in the reference crio.service systemd service file is removed.

Warning: Administrators on platforms running versions less than systemd 240 should explicitly configure LimitNOFILE=1024:524288 or risk falling back to the kernel default of 4096. (#8962, @saschagrunert)

API Change

• Added container stop signal feature (KEP-4960). (#9086, @bitoku)
• Disabled pull-progress-timeout per default. (#9130, @saschagrunert)

Feature

• Add option to enable/disable OCI Artifact mount. (#9147, @bitoku)
• Add support for OCI Artifact (#9062, @bitoku)
• Added OCI artifact store support. This means that CRI-O now stores artifacts per default in /var/lib/containers/storage/artifacts, which are handled as pinned images. The artifacts are pullable using crictl pull and will also show-up in crictl images. It is also possible to crictl inspecti them as well as deleting them using crictl rmi. (#8996, @saschagrunert)
• Added image volume subpath support for Kubernetes v1.33 (https://github.com/kubernetes/enhancements/issues/4639). (#9050, @saschagrunert)
• Added multi-architecture artifacts support. (#9194, @bitoku)
• Added new metric container_spec_memory_limit_bytes to display the memory limit of containers in bytes. (#9140, @bingikarthik)
• Added option --privileged-seccomp-profile / privileged_seccomp_profile to allow specifying a seccomp profile for privileged containers. (#9190, @saschagrunert)
• Added runtime config block to the StatusResponse returned by the CRI Status endpoint. (#9129, @tariq1890)
• Added support for OCI artifact mount sub paths. (#9159, @saschagrunert)
• Added support for handling CNAI models from OCI artifacts. (#9131, @saschagrunert)
• Experimental support for FreeBSD. (#7727, @dfr)
• Signature verification for image volumes (#9060, @xw19)

Bug or Regression

• Decouple CNI plugin initialization from CRI-O health checks. (#8911, @sohankunkerkar)
• Fix a panic when default_annotations are used (#8867, @haircommander)
• Fix artifact handling to retrieve artifact status using both the canonical name and the short name. (#9081, @bitoku)
• Fix log rotation failure during pod termination (#8868, @bitoku)
• Fixed bug to allow conmon_cgroup to be empty when cgroup manager is cgroupfs . (#8888, @xw19)
• Fixed context cancellation when image pull progress timeout is 0 (--pull-progress-timeout=0 / pull_progress_timeout=0) (#8998, @saschagrunert)
• Fixed log format from klog. (#8918, @bitoku)
• Prevent multiple crio wipes on reboot (#9059, @PannagaRao)

Other (Cleanup or Flake)

• Change log levels and formats for some iptables logs and klog related logs. (#8883, @bitoku)
• Changed runtime default masked paths for non privileged containers to:
• /proc/acpi
• /proc/asound
• /proc/interrupts
• /proc/kcore
• /proc/keys
• /proc/latency_stats
• /proc/sched_debug
• /proc/scsi
• /proc/timer_list
• /proc/timer_stats
• /sys/devices/system/cpu/cpu/thermal_throttle
• /sys/devices/virtual/powercap
• /sys/firmware
• /sys/fs/selinux (#9069, @saschagrunert)
• Hostports are now implemented using nftables rather than iptables. cri-o now depends on the nft binary being available (and does not depend on the iptables binaries being available). (#8684, @danwinship)
• Improve sync.Map iterators with an implicit call (#8871, @roman-kiselenko)
• Increased pull-progress-timeout to default to 30s. (#9108, @saschagrunert)
• Removed exclude_graphdriver_devicemapper build tag usage. (#8994, @saschagrunert)
• Removed image status info log message for the response, we already provide that information in the debug logs. (#9034, @saschagrunert)
• Require go 1.24 for build. (#9051, @saschagrunert)
• Update Packit configuration to remove reference to Fedora 39. (#8898, @buckaroogeek)

Uncategorized

• Fix a potential deadlock when an infra container is taking a long time to exit and the sandbox’s readiness is blocked on the infra container’s opLock (#9214, @openshift-cherrypick-robot)
• Fixes a crash introduced in 1.33.0 when cleaning up a pod that uses HostPorts on a system that has either just iptables (but not nftables) or just nftables (but not iptables). (#9241, @openshift-cherrypick-robot)

Dependencies

Added

• github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider: v0.14.0
• github.com/CloudNativeAI/model-spec: v0.0.4
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric: v0.49.0
• github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping: v0.49.0
• github.com/avast/retry-go/v4: v4.6.1
• github.com/buildkite/roko: v1.2.0
• github.com/chainguard-dev/clog: v1.5.1
• github.com/envoyproxy/go-control-plane/envoy: v1.32.4
• github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
• github.com/in-toto/attestation: v1.1.0
• github.com/keybase/go-keychain: v0.0.1
• github.com/lithammer/dedent: v1.1.0
• github.com/opencontainers/cgroups: v0.0.2
• github.com/prashantv/gostub: v1.1.0
• github.com/santhosh-tekuri/jsonschema/v5: v5.3.1
• github.com/santhosh-tekuri/jsonschema/v6: v6.0.1
• github.com/sigstore/sigstore-go: v0.6.1
• github.com/smallstep/pkcs7: v0.1.1
• github.com/theupdateframework/go-tuf/v2: v2.0.1
• github.com/tink-crypto/tink-go-awskms/v2: v2.1.0
• github.com/tink-crypto/tink-go-gcpkms/v2: v2.2.0
• github.com/tink-crypto/tink-go/v2: v2.3.0
• go.opentelemetry.io/auto/sdk: v1.1.0
• go.opentelemetry.io/contrib/detectors/gcp: v1.34.0
• go.opentelemetry.io/otel/sdk/metric: v1.34.0
• go.uber.org/automaxprocs: v1.6.0
• sigs.k8s.io/randfill: v1.0.0

Changed

• cel.dev/expr: v0.16.1 → v0.20.0
• chainguard.dev/go-grpc-kit: v0.17.5 → v0.17.7
• chainguard.dev/sdk: v0.1.23 → v0.1.29
• cloud.google.com/go/accessapproval: v1.7.12 → v1.8.3
• cloud.google.com/go/accesscontextmanager: v1.8.12 → v1.9.3
• cloud.google.com/go/aiplatform: v1.68.0 → v1.74.0
• cloud.google.com/go/analytics: v0.24.0 → v0.26.0
• cloud.google.com/go/apigateway: v1.6.12 → v1.7.3
• cloud.google.com/go/apigeeconnect: v1.6.12 → v1.7.3
• cloud.google.com/go/apigeeregistry: v0.8.10 → v0.9.3
• cloud.google.com/go/appengine: v1.8.12 → v1.9.3
• cloud.google.com/go/area120: v0.8.12 → v0.9.3
• cloud.google.com/go/artifactregistry: v1.14.14 → v1.16.1
• cloud.google.com/go/asset: v1.19.6 → v1.20.4
• cloud.google.com/go/assuredworkloads: v1.11.12 → v1.12.3
• cloud.google.com/go/auth/oauth2adapt: v0.2.4 → v0.2.8
• cloud.google.com/go/auth: v0.9.1 → v0.15.0
• cloud.google.com/go/automl: v1.13.12 → v1.14.4
• cloud.google.com/go/baremetalsolution: v1.2.11 → v1.3.3
• cloud.google.com/go/batch: v1.9.4 → v1.12.0
• cloud.google.com/go/beyondcorp: v1.0.11 → v1.1.3
• cloud.google.com/go/bigquery: v1.62.0 → v1.66.2
• cloud.google.com/go/bigtable: v1.29.0 → v1.35.0
• cloud.google.com/go/billing: v1.18.10 → v1.20.1
• cloud.google.com/go/binaryauthorization: v1.8.8 → v1.9.3
• cloud.google.com/go/certificatemanager: v1.8.6 → v1.9.3
• cloud.google.com/go/channel: v1.17.12 → v1.19.2
• cloud.google.com/go/cloudbuild: v1.16.6 → v1.22.0
• cloud.google.com/go/clouddms: v1.7.11 → v1.8.4
• cloud.google.com/go/cloudtasks: v1.12.13 → v1.13.3
• cloud.google.com/go/compute/metadata: v0.5.0 → v0.6.0
• cloud.google.com/go/compute: v1.27.5 → v1.34.0
• cloud.google.com/go/contactcenterinsights: v1.13.7 → v1.17.1
• cloud.google.com/go/container: v1.38.1 → v1.42.2
• cloud.google.com/go/containeranalysis: v0.12.2 → v0.13.3
• cloud.google.com/go/datacatalog: v1.21.1 → v1.24.3
• cloud.google.com/go/dataflow: v0.9.12 → v0.10.3
• cloud.google.com/go/dataform: v0.9.9 → v0.10.3
• cloud.google.com/go/datafusion: v1.7.12 → v1.8.3
• cloud.google.com/go/datalabeling: v0.8.12 → v0.9.3
• cloud.google.com/go/dataplex: v1.18.3 → v1.22.0
• cloud.google.com/go/dataproc/v2: v2.5.4 → v2.11.0
• cloud.google.com/go/dataqna: v0.8.12 → v0.9.3
• cloud.google.com/go/datastore: v1.19.0 → v1.20.0
• cloud.google.com/go/datastream: v1.10.11 → v1.13.0
• cloud.google.com/go/deploy: v1.21.2 → v1.26.2
• cloud.google.com/go/dialogflow: v1.56.0 → v1.66.0
• cloud.google.com/go/dlp: v1.17.0 → v1.21.0
• cloud.google.com/go/documentai: v1.32.0 → v1.35.2
• cloud.google.com/go/domains: v0.9.12 → v0.10.3
• cloud.google.com/go/edgecontainer: v1.2.6 → v1.4.1
• cloud.google.com/go/errorreporting: v0.3.1 → v0.3.2
• cloud.google.com/go/essentialcontacts: v1.6.13 → v1.7.3
• cloud.google.com/go/eventarc: v1.13.11 → v1.15.1
• cloud.google.com/go/filestore: v1.8.8 → v1.9.3
• cloud.google.com/go/firestore: v1.16.0 → v1.18.0
• cloud.google.com/go/functions: v1.18.0 → v1.19.3
• cloud.google.com/go/gkebackup: v1.5.5 → v1.6.3
• cloud.google.com/go/gkeconnect: v0.8.12 → v0.12.1
• cloud.google.com/go/gkehub: v0.14.12 → v0.15.3
• cloud.google.com/go/gkemulticloud: v1.2.5 → v1.5.1
• cloud.google.com/go/gsuiteaddons: v1.6.12 → v1.7.4
• cloud.google.com/go/iam: v1.1.13 → v1.4.1
• cloud.google.com/go/iap: v1.9.11 → v1.10.3
• cloud.google.com/go/ids: v1.4.12 → v1.5.3
• cloud.google.com/go/iot: v1.7.12 → v1.8.3
• cloud.google.com/go/kms: v1.18.5 → v1.21.1
• cloud.google.com/go/language: v1.13.1 → v1.14.3
• cloud.google.com/go/lifesciences: v0.9.12 → v0.10.3
• cloud.google.com/go/logging: v1.11.0 → v1.13.0
• cloud.google.com/go/longrunning: v0.5.12 → v0.6.5
• cloud.google.com/go/managedidentities: v1.6.12 → v1.7.3
• cloud.google.com/go/maps: v1.11.7 → v1.19.0
• cloud.google.com/go/mediatranslation: v0.8.12 → v0.9.3
• cloud.google.com/go/memcache: v1.10.12 → v1.11.3
• cloud.google.com/go/metastore: v1.13.11 → v1.14.3
• cloud.google.com/go/monitoring: v1.20.4 → v1.24.0
• cloud.google.com/go/networkconnectivity: v1.14.11 → v1.16.1
• cloud.google.com/go/networkmanagement: v1.13.7 → v1.18.0
• cloud.google.com/go/networksecurity: v0.9.12 → v0.10.3
• cloud.google.com/go/notebooks: v1.11.10 → v1.12.3
• cloud.google.com/go/optimization: v1.6.10 → v1.7.3
• cloud.google.com/go/orchestration: v1.9.7 → v1.11.4
• cloud.google.com/go/orgpolicy: v1.12.8 → v1.14.2
• cloud.google.com/go/osconfig: v1.13.3 → v1.14.3
• cloud.google.com/go/oslogin: v1.13.8 → v1.14.3
• cloud.google.com/go/phishingprotection: v0.8.12 → v0.9.3
• cloud.google.com/go/policytroubleshooter: v1.10.10 → v1.11.3
• cloud.google.com/go/privatecatalog: v0.9.12 → v0.10.4
• cloud.google.com/go/profiler: v0.4.0 → v0.4.2
• cloud.google.com/go/pubsub: v1.42.0 → v1.47.0
• cloud.google.com/go/recaptchaenterprise/v2: v2.14.3 → v2.19.4
• cloud.google.com/go/recommendationengine: v0.8.12 → v0.9.3
• cloud.google.com/go/recommender: v1.12.8 → v1.13.3
• cloud.google.com/go/redis: v1.16.5 → v1.18.0
• cloud.google.com/go/resourcemanager: v1.9.12 → v1.10.3
• cloud.google.com/go/resourcesettings: v1.7.5 → v1.8.3
• cloud.google.com/go/retail: v1.17.5 → v1.19.2
• cloud.google.com/go/run: v1.4.1 → v1.9.0
• cloud.google.com/go/scheduler: v1.10.13 → v1.11.4
• cloud.google.com/go/secretmanager: v1.13.6 → v1.14.5
• cloud.google.com/go/security: v1.18.0 → v1.18.3
• cloud.google.com/go/securitycenter: v1.34.0 → v1.36.0
• cloud.google.com/go/servicedirectory: v1.11.12 → v1.12.3
• cloud.google.com/go/shell: v1.7.12 → v1.8.3
• cloud.google.com/go/spanner: v1.67.0 → v1.76.1
• cloud.google.com/go/speech: v1.24.1 → v1.26.0
• cloud.google.com/go/storage: v1.39.1 → v1.50.0
• cloud.google.com/go/storagetransfer: v1.10.11 → v1.12.1
• cloud.google.com/go/talent: v1.6.13 → v1.8.0
• cloud.google.com/go/texttospeech: v1.7.12 → v1.11.0
• cloud.google.com/go/tpu: v1.6.12 → v1.8.0
• cloud.google.com/go/trace: v1.10.12 → v1.11.3
• cloud.google.com/go/translate: v1.11.0 → v1.12.3
• cloud.google.com/go/video: v1.22.1 → v1.23.3
• cloud.google.com/go/videointelligence: v1.11.12 → v1.12.3
• cloud.google.com/go/vision/v2: v2.8.7 → v2.9.3
• cloud.google.com/go/vmmigration: v1.7.12 → v1.8.3
• cloud.google.com/go/vmwareengine: v1.2.1 → v1.3.3
• cloud.google.com/go/vpcaccess: v1.7.12 → v1.8.3
• cloud.google.com/go/webrisk: v1.9.12 → v1.10.3
• cloud.google.com/go/websecurityscanner: v1.6.12 → v1.7.3
• cloud.google.com/go/workflows: v1.12.11 → v1.13.3
• cloud.google.com/go: v0.115.1 → v0.118.3
• cuelabs.dev/go/oci/ociregistry: 224736b → a39bec0
• cuelang.org/go: v0.8.1 → v0.9.2
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.13.0 → v1.17.1
• github.com/Azure/azure-sdk-for-go/sdk/azidentity: v1.7.0 → v1.8.2
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys: v1.1.0 → v1.3.1
• github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal: v1.0.0 → v1.1.1
• github.com/Azure/go-ansiterm: 306776e → faa5f7b
• github.com/AzureAD/microsoft-authentication-library-for-go: v1.2.2 → v1.3.3
• github.com/BurntSushi/toml: v1.4.0 → v1.5.0
• github.com/Masterminds/semver/v3: v3.2.1 → v3.3.1
• github.com/ProtonMail/go-crypto: v1.0.0 → v1.1.6
• github.com/aliyun/credentials-go: v1.3.1 → v1.3.2
• github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.6.2 → v1.6.3
• github.com/aws/aws-sdk-go-v2/config: v1.27.27 → v1.29.10
• github.com/aws/aws-sdk-go-v2/credentials: v1.17.27 → v1.17.63
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.16.11 → v1.16.30
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.16.9 → v1.17.10
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.3.15 → v1.3.34
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.6.15 → v2.6.34
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.8.0 → v1.8.3
• github.com/aws/aws-sdk-go-v2/internal/v4a: v1.3.9 → v1.3.15
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.11.3 → v1.12.3
• github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.3.11 → v1.3.17
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.11.17 → v1.12.15
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.17.9 → v1.17.15
• github.com/aws/aws-sdk-go-v2/service/kms: v1.35.3 → v1.38.1
• github.com/aws/aws-sdk-go-v2/service/s3: v1.55.1 → v1.58.3
• github.com/aws/aws-sdk-go-v2/service/sso: v1.22.4 → v1.25.1
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.26.4 → v1.29.2
• github.com/aws/aws-sdk-go-v2/service/sts: v1.30.3 → v1.33.17
• github.com/aws/aws-sdk-go-v2: v1.30.3 → v1.36.3
• github.com/aws/aws-sdk-go: v1.55.5 → v1.55.6
• github.com/aws/smithy-go: v1.20.3 → v1.22.2
• github.com/buildkite/agent/v3: v3.62.0 → v3.81.0
• github.com/buildkite/go-pipeline: v0.3.2 → v0.13.1
• github.com/buildkite/interpolate: 07f35b4 → v0.1.3
• github.com/census-instrumentation/opencensus-proto: v0.4.1 → v0.2.1
• github.com/cilium/ebpf: v0.16.0 → v0.17.3
• github.com/cncf/udpa/go: c52dc94 → 269d4d4
• github.com/cncf/xds/go: b4127c9 → 2f00578
• github.com/containerd/cgroups/v3: v3.0.3 → v3.0.5
• github.com/containerd/containerd/api: v1.8.0 → v1.9.0
• github.com/containerd/containerd: v1.7.24 → v1.7.27
• github.com/containerd/continuity: v0.4.2 → v0.4.4
• github.com/containerd/errdefs: v0.3.0 → v1.0.0
• github.com/containerd/nri: v0.9.0 → e597e78
• github.com/containerd/otelttrpc: ea5083f → v0.1.0
• github.com/containerd/stargz-snapshotter/estargz: v0.15.1 → v0.16.3
• github.com/containerd/ttrpc: b5cd6e4 → v1.2.7
• github.com/containerd/typeurl/v2: v2.2.0 → v2.2.3
• github.com/containernetworking/cni: v1.2.3 → v1.3.0
• github.com/containernetworking/plugins: v1.6.1 → v1.7.1
• github.com/containers/common: v0.61.0 → v0.63.0
• github.com/containers/image/v5: v5.33.0 → v5.35.0
• github.com/containers/ocicrypt: v1.2.0 → v1.2.1
• github.com/containers/storage: v1.56.0 → v1.58.0
• github.com/coreos/go-oidc/v3: v3.11.0 → v3.13.0
• github.com/coreos/go-oidc: v2.2.1+incompatible → v2.3.0+incompatible
• github.com/cpuguy83/go-md2man/v2: v2.0.5 → v2.0.6
• github.com/cyberphone/json-canonicalization: ba74d44 → 19d51d7
• github.com/cyphar/filepath-securejoin: v0.3.5 → v0.4.1
• github.com/danieljoos/wincred: v1.2.1 → v1.2.2
• github.com/docker/cli: v27.3.1+incompatible → v28.0.4+incompatible
• github.com/docker/docker-credential-helpers: v0.8.2 → v0.9.3
• github.com/docker/docker: v27.3.1+incompatible → v28.0.4+incompatible
• github.com/elazarl/goproxy: 2592e75 → v1.4.0
• github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.4
• github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
• github.com/fsnotify/fsnotify: v1.8.0 → v1.9.0
• github.com/gliderlabs/ssh: v0.3.7 → v0.3.8
• github.com/go-chi/chi/v5: v5.1.0 → v5.2.1
• github.com/go-git/go-billy/v5: v5.5.0 → v5.6.2
• github.com/go-git/go-git/v5: v5.12.0 → v5.13.2
• github.com/go-jose/go-jose/v4: v4.0.4 → v4.0.5
• github.com/go-kit/log: v0.2.1 → v0.1.0
• github.com/go-logfmt/logfmt: v0.5.1 → v0.5.0
• github.com/go-openapi/errors: v0.22.0 → v0.22.1
• github.com/go-openapi/swag: v0.23.0 → v0.23.1
• github.com/go-sql-driver/mysql: v1.8.1 → v1.9.1
• github.com/golang-jwt/jwt/v4: v4.5.0 → v4.5.2
• github.com/golang-jwt/jwt/v5: v5.2.1 → v5.2.2
• github.com/golang/glog: v1.2.2 → v1.2.4
• github.com/golang/groupcache: 41bb18b → 2c02b82
• github.com/google/btree: v1.0.1 → v1.1.3
• github.com/google/cel-go: v0.20.1 → v0.23.2
• github.com/google/certificate-transparency-go: v1.2.1 → v1.3.1
• github.com/google/gnostic-models: c7be7c7 → v0.6.9
• github.com/google/go-cmp: v0.6.0 → v0.7.0
• github.com/google/go-containerregistry: v0.20.2 → v0.20.3
• github.com/google/pprof: d1b30fe → 27863c8
• github.com/google/s2a-go: v0.1.8 → v0.1.9
• github.com/google/trillian: v1.6.0 → v1.7.1
• github.com/googleapis/enterprise-certificate-proxy: v0.3.2 → v0.3.6
• github.com/googleapis/gax-go/v2: v2.13.0 → v2.14.1
• github.com/gorilla/websocket: v1.5.0 → e064f32
• github.com/gregjones/httpcache: 9cad4c3 → 901d907
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.23.0 → v2.26.1
• github.com/hashicorp/vault/api: v1.14.0 → v1.16.0
• github.com/jellydator/ttlcache/v3: v3.2.0 → v3.3.0
• github.com/jmespath/go-jmespath: v0.4.0 → b0104c8
• github.com/jmoiron/sqlx: v1.3.5 → v1.4.0
• github.com/jonboulle/clockwork: v0.2.2 → v0.4.0
• github.com/klauspost/compress: v1.17.11 → v1.18.0
• github.com/klauspost/cpuid/v2: v2.0.9 → v2.0.4
• github.com/magiconair/properties: v1.8.7 → v1.8.9
• github.com/mailru/easyjson: v0.7.7 → v0.9.0
• github.com/mattn/go-sqlite3: v1.14.24 → v1.14.27
• github.com/maxbrunsfeld/counterfeiter/v6: v6.8.1 → v6.11.2
• github.com/moby/spdystream: v0.4.0 → v0.5.0
• github.com/moby/sys/capability: v0.3.0 → v0.4.0
• github.com/moby/sys/user: v0.3.0 → v0.4.0
• github.com/moby/term: v0.5.0 → v0.5.2
• github.com/mozillazg/docker-credential-acr-helper: v0.3.0 → v0.4.0
• github.com/oleiade/reflections: v1.0.1 → v1.1.0
• github.com/onsi/ginkgo/v2: v2.22.0 → v2.23.4
• github.com/onsi/gomega: v1.36.0 → v1.37.0
• github.com/opencontainers/image-spec: v1.1.0 → v1.1.1
• github.com/opencontainers/runc: v1.2.1 → v1.2.6
• github.com/opencontainers/runtime-spec: v1.2.0 → v1.2.1
• github.com/opencontainers/runtime-tools: 6c9570a → 260e151
• github.com/opencontainers/selinux: v1.11.1 → v1.12.0
• github.com/pjbgf/sha1cd: v0.3.0 → v0.3.2
• github.com/pkg/sftp: v1.13.7 → v1.13.9
• github.com/proglottis/gpgme: v0.1.3 → v0.1.4
• github.com/prometheus/client_golang: v1.20.5 → v1.22.0
• github.com/prometheus/common: v0.57.0 → v0.62.0
• github.com/redis/go-redis/v9: v9.5.1 → v9.7.3
• github.com/rs/cors: v1.11.0 → v1.11.1
• github.com/safchain/ethtool: v0.5.9 → v0.5.10
• github.com/seccomp/libseccomp-golang: v0.10.0 → v0.11.0
• github.com/secure-systems-lab/go-securesystemslib: v0.8.0 → v0.9.0
• github.com/sigstore/cosign/v2: v2.2.4 → v2.4.1
• github.com/sigstore/fulcio: v1.6.4 → v1.6.6
• github.com/sigstore/protobuf-specs: v0.3.0 → v0.4.1
• github.com/sigstore/rekor: v1.3.6 → v1.3.10
• github.com/sigstore/sigstore/pkg/signature/kms/aws: v1.8.8 → v1.9.1
• github.com/sigstore/sigstore/pkg/signature/kms/azure: v1.8.8 → v1.9.1
• github.com/sigstore/sigstore/pkg/signature/kms/gcp: v1.8.8 → v1.9.1
• github.com/sigstore/sigstore/pkg/signature/kms/hashivault: v1.8.8 → v1.9.1
• github.com/sigstore/sigstore: v1.8.9 → v1.9.3
• github.com/skeema/knownhosts: v1.3.0 → v1.3.1
• github.com/spf13/cast: v1.6.0 → v1.7.0
• github.com/spf13/cobra: v1.8.1 → v1.9.1
• github.com/spf13/pflag: v1.0.5 → v1.0.6
• github.com/spiffe/go-spiffe/v2: v2.3.0 → v2.5.0
• github.com/stoewer/go-strcase: v1.2.0 → v1.3.0
• github.com/sylabs/sif/v2: v2.19.1 → v2.21.1
• github.com/tchap/go-patricia/v2: v2.3.1 → v2.3.2
• github.com/urfave/cli/v2: v2.27.5 → v2.27.6
• github.com/urfave/cli: v1.22.15 → v1.22.16
• github.com/uwu-tools/magex: v0.10.0 → v0.10.1
• github.com/vbatts/tar-split: v0.11.6 → v0.12.1
• github.com/vbauerster/mpb/v8: v8.8.3 → v8.9.3
• github.com/veraison/go-cose: v1.2.1 → v1.3.0
• github.com/vishvananda/netlink: v1.3.0 → 0e7078e
• github.com/vishvananda/netns: v0.0.4 → v0.0.5
• github.com/xanzy/go-gitlab: v0.102.0 → v0.109.0
• github.com/xiang90/probing: 43a291a → a49e3df
• github.com/zeebo/errs: v1.3.0 → v1.4.0
• go.etcd.io/bbolt: v1.3.11 → v1.4.0
• go.etcd.io/etcd/api/v3: v3.5.14 → v3.5.21
• go.etcd.io/etcd/client/pkg/v3: v3.5.14 → v3.5.21
• go.etcd.io/etcd/client/v2: v2.305.13 → v2.305.21
• go.etcd.io/etcd/client/v3: v3.5.14 → v3.5.21
• go.etcd.io/etcd/pkg/v3: v3.5.13 → v3.5.21
• go.etcd.io/etcd/raft/v3: v3.5.13 → v3.5.21
• go.etcd.io/etcd/server/v3: v3.5.13 → v3.5.21
• go.mozilla.org/pkcs7: 33d0574 → 432b235
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.57.0 → v0.60.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 → v0.59.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.32.0 → v1.35.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.21.0 → v1.33.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.32.0 → v1.35.0
• go.opentelemetry.io/otel/metric: v1.32.0 → v1.35.0
• go.opentelemetry.io/otel/sdk: v1.32.0 → v1.35.0
• go.opentelemetry.io/otel/trace: v1.32.0 → v1.35.0
• go.opentelemetry.io/otel: v1.32.0 → v1.35.0
• go.opentelemetry.io/proto/otlp: v1.3.1 → v1.5.0
• go.step.sm/crypto: v0.51.1 → v0.60.0
• go.uber.org/mock: v0.5.0 → v0.5.2
• gocloud.dev: v0.37.0 → v0.40.0
• golang.org/x/crypto: v0.29.0 → v0.38.0
• golang.org/x/exp: f66d83c → 2d47ceb
• golang.org/x/lint: 6edffad → 1621716
• golang.org/x/mod: v0.21.0 → v0.24.0
• golang.org/x/net: v0.30.0 → v0.40.0
• golang.org/x/oauth2: v0.23.0 → v0.29.0
• golang.org/x/sync: v0.9.0 → v0.14.0
• golang.org/x/sys: v0.28.0 → v0.33.0
• golang.org/x/term: v0.26.0 → v0.32.0
• golang.org/x/text: v0.20.0 → v0.25.0
• golang.org/x/time: v0.6.0 → v0.11.0
• golang.org/x/tools: v0.26.0 → v0.31.0
• golang.org/x/xerrors: 104605a → 93cc26a
• google.golang.org/api: v0.195.0 → v0.228.0
• google.golang.org/appengine: v1.6.8 → v1.6.7
• google.golang.org/genproto/googleapis/api: dd2ea8e → a0af3ef
• google.golang.org/genproto/googleapis/rpc: dd2ea8e → e70fdf4
• google.golang.org/genproto: 4ba0660 → a0af3ef
• google.golang.org/grpc: v1.68.0 → v1.72.0
• google.golang.org/protobuf: v1.35.1 → v1.36.6
• gotest.tools/v3: v3.5.1 → v3.5.2
• honnef.co/go/tools: v0.1.3 → ea95bdf
• k8s.io/api: v0.31.4 → v0.33.0
• k8s.io/apimachinery: v0.31.4 → v0.33.0
• k8s.io/apiserver: v0.31.4 → v0.33.0
• k8s.io/client-go: v0.31.4 → v0.33.0
• k8s.io/component-base: v0.31.4 → v0.33.0
• k8s.io/cri-api: v0.31.4 → v0.33.0
• k8s.io/cri-client: v0.31.4 → v0.33.0
• k8s.io/gengo/v2: 51d4e06 → a7b603a
• k8s.io/kms: v0.31.4 → v0.33.0
• k8s.io/kube-openapi: 70dd376 → c8a335a
• k8s.io/kubelet: v0.31.4 → v0.33.0
• k8s.io/utils: 18e509b → 24370be
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.30.3 → v0.31.2
• sigs.k8s.io/json: bc3834c → 9aa6b5e
• sigs.k8s.io/release-sdk: v0.12.1 → v0.12.2
• sigs.k8s.io/release-utils: v0.8.5 → v0.11.1
• sigs.k8s.io/structured-merge-diff/v4: v4.4.1 → v4.6.0
• tags.cncf.io/container-device-interface/specs-go: v0.8.0 → v1.0.0
• tags.cncf.io/container-device-interface: v0.8.0 → v1.0.1

Removed

• cloud.google.com/go/apikeys: v0.6.0
• cloud.google.com/go/dataproc: v1.12.0
• cloud.google.com/go/gaming: v1.9.0
• cloud.google.com/go/grafeas: v0.2.0
• cloud.google.com/go/recaptchaenterprise: v1.3.1
• cloud.google.com/go/servicecontrol: v1.11.1
• cloud.google.com/go/servicemanagement: v1.8.0
• cloud.google.com/go/serviceusage: v1.6.0
• cloud.google.com/go/vision: v1.2.0
• dmitri.shuralyov.com/gpu/mtl: 666a987
• gioui.org: 57750fc
• git.sr.ht/~sbinet/gg: v0.3.1
• github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/alibabacloudsdkgo/helper: v0.2.0
• github.com/BurntSushi/xgb: 27f1227
• github.com/JohnCGriffin/overflow: 46fa312
• github.com/ajstarks/deck/generate: c3f852c
• github.com/ajstarks/deck: 30c9fc6
• github.com/ajstarks/svgo: 1546f12
• github.com/andybalholm/brotli: v1.1.0
• github.com/apache/arrow/go/v10: v10.0.1
• github.com/apache/arrow/go/v11: v11.0.0
• github.com/apache/thrift: v0.16.0
• github.com/boombuler/barcode: v1.0.1
• github.com/cenkalti/backoff/v3: v3.2.2
• github.com/cespare/xxhash: v1.1.0
• github.com/chainguard-dev/slogctx: v1.2.2
• github.com/docopt/docopt-go: ee0de3b
• github.com/dsnet/compress: f669936
• github.com/fogleman/gg: v1.3.0
• github.com/ghodss/yaml: v1.0.0
• github.com/go-fonts/dejavu: v0.1.0
• github.com/go-fonts/latin-modern: v0.2.0
• github.com/go-fonts/liberation: v0.2.0
• github.com/go-fonts/stix: v0.1.0
• github.com/go-gl/glfw/v3.3/glfw: 6f7a984
• github.com/go-gl/glfw: e6da0ac
• github.com/go-latex/latex: c0d11ff
• github.com/go-pdf/fpdf: v0.6.0
• github.com/golang/freetype: e2365df
• github.com/google/flatbuffers: v2.0.8+incompatible
• github.com/google/martian/v3: v3.3.2
• github.com/google/martian: v2.1.0+incompatible
• github.com/google/tink/go: v1.7.0
• github.com/googleapis/go-type-adapters: v1.0.0
• github.com/googleapis/google-cloud-go-testing: bcd43fb
• github.com/iancoleman/strcase: v0.2.0
• github.com/jstemmer/go-junit-report: v0.9.1
• github.com/jung-kurt/gofpdf: 24315ac
• github.com/kballard/go-shellquote: 95032a8
• github.com/klauspost/asmfmt: v1.3.2
• github.com/lyft/protoc-gen-star/v2: v2.0.1
• github.com/lyft/protoc-gen-star: v0.6.1
• github.com/mholt/archiver/v3: v3.5.1
• github.com/minio/asm2plan9s: cdd7644
• github.com/minio/c2goasm: 36a3d3b
• github.com/mmcloughlin/avo: v0.5.0
• github.com/nwaples/rardecode: v1.1.3
• github.com/phpdave11/gofpdf: v1.4.2
• github.com/phpdave11/gofpdi: v1.0.13
• github.com/pkg/diff: 20ebb0f
• github.com/remyoudompheng/bigfft: eec4a21
• github.com/ruudk/golang-pdf417: a7e3863
• github.com/spaolacci/murmur3: f09979e
• github.com/xi2/xz: 48954b6
• github.com/zeebo/assert: v1.3.0
• github.com/zeebo/xxh3: v1.0.2
• golang.org/x/image: 723b81c
• golang.org/x/mobile: d2bd2a2
• gonum.org/v1/gonum: v0.11.0
• gonum.org/v1/netlib: 8cb4219
• gonum.org/v1/plot: v0.10.1
• gopkg.in/errgo.v2: v2.1.0
• gopkg.in/square/go-jose.v2: v2.6.0
• gotest.tools: v2.2.0+incompatible
• lukechampine.com/uint128: v1.2.0
• modernc.org/cc/v3: v3.36.3
• modernc.org/ccgo/v3: v3.16.9
• modernc.org/ccorpus: v1.11.6
• modernc.org/httpfs: v1.0.6
• modernc.org/libc: v1.17.1
• modernc.org/mathutil: v1.5.0
• modernc.org/memory: v1.2.1
• modernc.org/opt: v0.1.3
• modernc.org/sqlite: v1.18.1
• modernc.org/strutil: v1.1.3
• modernc.org/tcl: v1.13.1
• modernc.org/token: v1.0.0
• modernc.org/z: v1.5.1
• rsc.io/binaryregexp: v0.2.0
• rsc.io/pdf: v0.1.1
• rsc.io/quote/v3: v3.1.0
• rsc.io/sampler: v1.3.0