• CRI-O v1.36.1
  • Downloads
  • Changelog since v1.36.0
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.36.1

The release notes have been generated for the commit range v1.36.0…5d8e346 on Fri, 05 Jun 2026 19:18:48 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz
  • cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.sha256sum
  • cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.bundle
  • cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx
  • cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx.bundle
• cri-o.arm64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz
  • cri-o.arm64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.sha256sum
  • cri-o.arm64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.bundle
  • cri-o.arm64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx
  • cri-o.arm64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx.bundle
• cri-o.ppc64le.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz
  • cri-o.ppc64le.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.sha256sum
  • cri-o.ppc64le.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.bundle
  • cri-o.ppc64le.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx
  • cri-o.ppc64le.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx.bundle
• cri-o.s390x.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz
  • cri-o.s390x.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.sha256sum
  • cri-o.s390x.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.bundle
  • cri-o.s390x.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx
  • cri-o.s390x.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx.bundle

The OpenVEX report for this release is available at:

• cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.openvex.json

The SLSA provenance attestation for this release is available at:

• cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.provenance.json
  • cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.provenance.json.bundle

All release artifacts (bundles, SBOMs, VEX, and provenance) are also available as signed OCI artifacts at ghcr.io/cri-o/bundle:5d8e3464d8ff2d88644b396bf3b938dfa05222ac.

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz
> bom validate -e cri-o.amd64.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.tar.gz.spdx -d cri-o

To verify the OpenVEX vulnerability report, run:

> cosign verify-blob cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.openvex.json \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.openvex.json.bundle

To verify the SLSA provenance attestation, run:

> cosign verify-blob cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.provenance.json \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.5d8e3464d8ff2d88644b396bf3b938dfa05222ac.provenance.json.bundle

Changelog since v1.36.0

Changes by Kind

Uncategorized

• Fixed a bug where ImageRef in container status changed from a repo@digest to a raw image ID hash after CRI-O restart. (#9984, @openshift-cherrypick-robot)
• Reduced the verbosity of debug logs for List* RPC calls to improve performance (#9951, @openshift-cherrypick-robot)
• Update gomaxprocs hook to ignore workload partitioning when considering whether to inject, as well as update the calculation to ensure containers get at least double the requested number of CPUs, to reduce potential go scheduler throttling. (#10008, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.