• CRI-O v1.34.10
  • Downloads
  • Changelog since v1.34.9
    • Changes by Kind
      • Bug or Regression
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.34.10

The release notes have been generated for the commit range v1.34.9…e565d25 on Fri, 31 Jul 2026 11:10:24 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz
  • cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.sha256sum
  • cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.bundle
  • cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx
  • cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx.bundle
• cri-o.arm64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz
  • cri-o.arm64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.sha256sum
  • cri-o.arm64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.bundle
  • cri-o.arm64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx
  • cri-o.arm64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx.bundle
• cri-o.ppc64le.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz
  • cri-o.ppc64le.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.sha256sum
  • cri-o.ppc64le.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.bundle
  • cri-o.ppc64le.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx
  • cri-o.ppc64le.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx.bundle
• cri-o.s390x.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz
  • cri-o.s390x.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.sha256sum
  • cri-o.s390x.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.bundle
  • cri-o.s390x.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx
  • cri-o.s390x.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx.bundle

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz
> bom validate -e cri-o.amd64.e565d252ca1409581fb018255e1420a0a0d9a8d2.tar.gz.spdx -d cri-o

Changelog since v1.34.9

Changes by Kind

Bug or Regression

• Update gomaxprocs hook to ignore workload partitioning when considering whether to inject, as well as update the calculation to ensure containers get at least double the requested number of CPUs, to reduce potential go scheduler throttling. (#10019, @haircommander)

Uncategorized

• Fixed a bug where ImageRef in container status changed from a repo@digest to a raw image ID hash after CRI-O restart. (#9986, @saschagrunert)
• Restores pre-1.34 behavior handling envvar values containing non-utf8 data (#10187, @liggitt)

Dependencies

Added

Nothing has changed.

Changed

• github.com/go-jose/go-jose/v4: v4.1.1 → v4.1.4
• go.opentelemetry.io/auto/sdk: v1.1.0 → v1.2.1
• go.opentelemetry.io/otel/metric: v1.38.0 → v1.41.0
• go.opentelemetry.io/otel/trace: v1.38.0 → v1.41.0
• go.opentelemetry.io/otel: v1.38.0 → v1.41.0
• google.golang.org/protobuf: v1.36.8 → f2248ac
• k8s.io/api: v0.34.1 → v0.34.10
• k8s.io/apimachinery: v0.34.1 → v0.34.10
• k8s.io/apiserver: v0.34.1 → v0.34.10
• k8s.io/client-go: v0.34.1 → v0.34.10
• k8s.io/component-base: v0.34.1 → v0.34.10
• k8s.io/cri-api: v0.34.1 → v0.34.10
• k8s.io/cri-client: v0.34.0 → v0.34.10
• k8s.io/kms: v0.34.1 → v0.34.10
• k8s.io/kubelet: v0.34.1 → v0.34.10

Removed

Nothing has changed.