v1.59.0

What's Changed

• Bump c/storage to v1.58.0, then v1.59.0-dev by @TomSweeneyRedHat in #2319
• chore(deps): update dependency golangci/golangci-lint to v2.1.2 by @renovate[bot] in #2316
• types: Always apply rootless path defaults by @giuseppe in #2318
• Improve error handling in archive creation by @hanwen-flow in #2289
• chore(deps): update dependency containers/automation_images to v20250422 by @renovate[bot] in #2321
• chunked: use temporary file for tar-split data by @giuseppe in #2312
• chore(deps): update dependency golangci/golangci-lint to v2.1.5 by @renovate[bot] in #2322
• chore(deps): update dependency golangci/golangci-lint to v2.1.6 by @renovate[bot] in #2324
• fix(deps): update module golang.org/x/sync to v0.14.0 by @renovate[bot] in #2326
• fix(deps): update module golang.org/x/sys to v0.33.0 by @renovate[bot] in #2327
• fix tarsplit file leak by @giuseppe in #2323
• fix(deps): update module github.com/microsoft/hcsshim to v0.13.0 by @renovate[bot] in #2329
• Fix nits from #2312 by @mtrmac in #2328
• Fix git-validation on PRs behind main by @mtrmac in #2342
• fix(deps): update module golang.org/x/sync to v0.15.0 by @renovate[bot] in #2344
• overlay: drop unused fsMagic from support checks by @giuseppe in #2341
• Fix: Introduce StagingLockfile to resolve overlay staging lock memory leak by @Honny1 in #2336
• scope contiguity checks for idmap to mountProgram presence by @giuseppe in #2346
• Remove a deprecated configuration section by @mtrmac in #2339
• chunked: allow conversion without zstd compression by @giuseppe in #2343
• docfix: storage.overlay.pull_options should be storage.options.pull_o… by @albinvass in #2337
• chore(deps): update dependency golangci/golangci-lint to v2.2.1 by @renovate[bot] in #2348
• fix(deps): update module github.com/tchap/go-patricia/v2 to v2.3.3 by @renovate[bot] in #2349
• Introduce a temporary directory for deleting layer files outside the lock by @Honny1 in #2325
• fix(deps): update module golang.org/x/sync to v0.16.0 by @renovate[bot] in #2350
• fix(deps): update module golang.org/x/sys to v0.34.0 by @renovate[bot] in #2351

New Contributors

• @albinvass made their first contribution in #2337

Full Changelog: v1.58.0...v1.59.0

v1.58.0

What's Changed

• Bump to c/storage v1.57.0 then v1.58.0-dev by @TomSweeneyRedHat in #2236
• Fall back from chunked pulls when the chunked metadata is too large by @mtrmac in #2230
• Bump maxTocSize to 150 MB by @mtrmac in #2240
• fix(deps): update module github.com/vbatts/tar-split to v0.12.1 by @renovate in #2235
• Remove hashicorp dependencies by @saschagrunert in #2242
• chore(deps): update dependency containers/automation_images to v20250131 by @renovate in #2244
• Graphdriver test cleanups by @hanwen-flow in #2228
• Archive tests by @hanwen-flow in #2229
• fix(deps): update module golang.org/x/sync to v0.11.0 by @renovate in #2247
• fix(deps): update module golang.org/x/sys to v0.30.0 by @renovate in #2248
• Fix compilation of pkg/archive tests on non-Linux by @nalind in #2246
• overlay: Add error prefixing for mount.MakePrivate by @cgwalters in #2250
• pkg/fileutils: add LinkOrCopy() by @Luap99 in #2251
• unshare: fix data race by @giuseppe in #2254
• Merge tag 'v1.57.1' back into main by @Luap99 in #2255
• archive: regularize some naming by @hanwen-flow in #2219
• chore(deps): update dependency golangci/golangci-lint to v1.64.5 by @renovate in #2256
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.4.1 by @renovate in #2217
• layers: write read only layers to imagestore by @giuseppe in #2258
• feat: add Timestamp to TarOptions by @aeijdenberg in #2259
• Recursively set project ID for quota driver by @mheon in #2264
• fix(deps): update module github.com/klauspost/compress to v1.18.0 by @renovate in #2262
• idmap: force PRIVATE propagation by @giuseppe in #2269
• fix(deps): update module github.com/opencontainers/runtime-spec to v1.2.1 by @renovate in #2266
• chore(deps): update dependency golangci/golangci-lint to v1.64.6 by @renovate in #2268
• Fix handle leak by @Bbulatov in #2253
• loop: remove hardcoded constants by @giuseppe in #2273
• Merge c/storage v1.57.2 into main by @mtrmac in #2276
• Update to Go 1.23 by @mtrmac in #2279
• fix(deps): update module golang.org/x/sync to v0.12.0 by @renovate in #2270
• Write tar fixes by @hanwen-flow in #2261
• Remove some do-nothing files by @mtrmac in #2283
• fix(deps): update module golang.org/x/sys to v0.31.0 by @renovate in #2271
• chore(deps): update dependency golangci/golangci-lint to v1.64.7 by @renovate in #2278
• subid: drop support for old version by @giuseppe in #2277
• Add link to c/common contributor's guide by @Honny1 in #2280
• chore(deps): update dependency golangci/golangci-lint to v1.64.8 by @renovate in #2286
• fix(deps): update module github.com/burntsushi/toml to v1.5.0 by @renovate in #2287
• Fix: Overlay fails with a permission error when trying to create and access layers by @shaharlib in #2291
• chore(deps): update dependency containers/automation_images to v20250324 by @renovate in #2296
• store: use canonical image mapping when mounting by @giuseppe in #2285
• fix(deps): update module github.com/opencontainers/selinux to v1.12.0 by @renovate in #2292
• Update old dependencies by @mtrmac in #2282
• Switch to golangci-lint v2, fix new warnings by @kolyshkin in #2299
• driver/overlay: fix concurrent map write on stagingDirsLocks by @Luap99 in #2300
• idmap: fix first argument to open_tree by @giuseppe in #2301
• fix minor review comment about the driver mutex and a minor lint issue by @Luap99 in #2302
• Use min/max to simplify the code by @kolyshkin in #2303
• Use any instead of interface{} by @kolyshkin in #2304
• dirvers/btrfs: remove btrfs_noversion tag by @Luap99 in #2308
• Use for range over integers by @kolyshkin in #2305
• Use slices and maps more where appropriate by @kolyshkin in #2306
• ci: add nolintlint and unconvert linters, fix found issues by @kolyshkin in #2307
• fix(deps): update module github.com/moby/sys/user to v0.4.0 by @renovate in #2309
• fix(deps): update module golang.org/x/sync to v0.13.0 by @renovate in #2310
• fix(deps): update module golang.org/x/sys to v0.32.0 by @renovate in #2311
• pkg/archive: catch file Close() error by @hanwen-flow in #2313

New Contributors

• @aeijdenberg made their first contribution in #2259
• @Bbulatov made their first contribution in #2253
• @shaharlib made their first contribution in #2291

Full Changelog: v1.57.2...v1.58.0

v1.57.2

What's Changed

• [1.57] Fall back …, bump limit to 150 MB, and tag as 1.57.1 by @mtrmac in #2241
• [release-1.57] chore(deps): update dependency golangci/golangci-lint to v1.64.5 by @openshift-cherrypick-robot in #2274
• [release-1.57] idmap: force PRIVATE propagation by @openshift-cherrypick-robot in #2272

Full Changelog: v1.57.1...v1.57.2

v1.57.1

• [1.57] Fall back …, bump limit to 150 MB, and tag as 1.57.1 by @mtrmac in #2241

Full Changelog: v1.57.0...v1.57.1

v1.57.0

What's Changed

• Bump c/storage to v1.56.0 by @TomSweeneyRedHat in #2163
• chore(deps): update dependency golangci/golangci-lint to v1.62.0 by @renovate in #2167
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.1 by @renovate in #2172
• chunked: rework GetBlobAt usage by @giuseppe in #2162
• fix(deps): update module golang.org/x/sys to v0.27.0 by @renovate in #2164
• fix(deps): update module github.com/moby/sys/capability to v0.4.0 by @renovate in #2171
• cirrus: update CI image to f41 by @Luap99 in #2173
• add support for unpacking layers with xattrs set on FreeBSD by @kimminss0 in #2170
• fix(deps): update module github.com/stretchr/testify to v1.10.0 by @renovate in #2178
• chore(deps): update dependency golangci/golangci-lint to v1.62.2 by @renovate in #2179
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.2 by @renovate in #2182
• pkg/system: add fromStatT for NetBSD by @tydavis in #2181
• pkg/system: add mimicked xattr syscalls on FreeBSD by @kimminss0 in #2177
• store: correctly remove incomplete layers on load. by @Luap99 in #2185
• archive: store the override xattr with the inode type by @giuseppe in #2183
• Enable overlay without cgo by @koct9i in #2192
• fix(deps): update module golang.org/x/sys to v0.28.0 by @renovate in #2189
• store: new Dedup() API by @giuseppe in #2176
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5 by @renovate in #2190
• chunked: handle creating root directory by @giuseppe in #2194
• fix(deps): update module github.com/containerd/stargz-snapshotter/estargz to v0.16.3 by @renovate in #2195
• Fix SafeChown when ContainersOverrideXattr is unset by @mtrmac in #2197
• Move pkg/chunked/internal to pkg/chunked/internal/minimal by @mtrmac in #2196
• archive: detect symlink target changes by @giuseppe in #2199
• composefs: remove cgo dependency by @giuseppe in #2201
• composefs: fix comment by @giuseppe in #2200
• fix(deps): update golang.org/x/exp digest to b2144cd by @renovate in #2203
• chore(deps): update dependency golangci/golangci-lint to v1.63.3 by @renovate in #2204
• chore(deps): update dependency golangci/golangci-lint to v1.63.4 by @renovate in #2205
• fix(deps): update module golang.org/x/sys to v0.29.0 by @renovate in #2206
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6 by @renovate in #2198
• chore(deps): update dependency containers/automation_images to v20250107 by @renovate in #2207
• Compute an uncompressed digest for chunked layers by @mtrmac in #2155
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.4.0 by @renovate in #2210
• fix(deps): update module github.com/tchap/go-patricia/v2 to v2.3.2 by @renovate in #2211
• Merge v1.56.1 into main by @mtrmac in #2214
• Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.4.0" by @Luap99 in #2216
• ioutils: fix typo by @hanwen-flow in #2218
• fix(deps): update module github.com/vbatts/tar-split to v0.11.7 by @renovate in #2215
• chunked: use fallback mechanism on non-linux platforms by @giuseppe in #2231

New Contributors

• @tydavis made their first contribution in #2181
• @koct9i made their first contribution in #2192
• @hanwen-flow made their first contribution in #2218

Full Changelog: v1.56.1...v1.57.0

v1.56.1

What's Changed

• [release-1.56] store: correctly remove incomplete layers on load. by @Luap99 in #2193

Full Changelog: v1.56.0...v1.56.1

v1.55.2

What's Changed

• Backport pull request #2117 to release-1.55 by @anderbubble in #2159

Full Changelog: v1.55.1...v1.55.2

v1.56.0

What's Changed

• Bump to c/storage v1.55.0, then v1.56.0-dev by @TomSweeneyRedHat in #2046
• idmap: improve error messages by @giuseppe in #2047
• overlay,chunked: Add some more O_CLOEXEC by @cgwalters in #2048
• composefs: prefer std library functions by @giuseppe in #2050
• docs: Add (not installed) man pages for composefs and zstd:chunked by @cgwalters in #2054
• fix(deps): update module golang.org/x/sys to v0.23.0 by @renovate in #2052
• composefs use new mount api by @giuseppe in #2057
• fix(deps): update module github.com/moby/sys/user to v0.3.0 by @renovate in #2058
• fix(deps): update module golang.org/x/sys to v0.24.0 by @renovate in #2059
• chrootarchive: Pass root via fd by @cgwalters in #2049
• loopback: always return error if no loopback device by @giuseppe in #2056
• Update golangci-lint by @Honny1 in #2063
• Prepare a golangci-lint installation for automatic update using renovate by @Honny1 in #2064
• storage.conf: Various cleanups by @cgwalters in #2066
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.6 by @renovate in #2068
• Create Store.List method for listing layers, images, containers by @Honny1 in #2061
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 by @renovate in #2070
• composefs fixes by @giuseppe in #2069
• pkg/fileutils: fix Lexists on FreeBSD by @dfr in #2071
• pkg/fileutils: fix Lexists on FreeBSD (second attempt) by @dfr in #2074
• docs: Fill in more about composefs and zstd:chunked by @cgwalters in #2072
• [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 by @renovate in #2073
• Sync man page with storage.conf by @cgwalters in #2076
• chore(deps): update dependency containers/automation_images to v20240821 by @renovate in #2077
• fix(deps): update golang.org/x/exp digest to 9b4947d by @renovate in #2082
• overlay: ignore EINVAL for cleanup unmount by @giuseppe in #2083
• Be clearer about the layer store locking rules by @mtrmac in #2080
• Be explicit about impact of not writing caches by @mtrmac in #2079
• fix(deps): update module golang.org/x/sys to v0.25.0 by @renovate in #2085
• Update to Go 1.22 by @mtrmac in #2086
• Avoid manually-coded loops by @mtrmac in #2087
• Improve comments based on after-merge review comments by @mtrmac in #2088
• chore(deps): update dependency golangci/golangci-lint to v1.61.0 by @renovate in #2089
• pkg/directory: correctly ignore ENOENT while walking by @Luap99 in #2097
• chunked: fix reuse of the layers cache by @giuseppe in #2024
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 by @renovate in #2093
• Switch to github.com/moby/sys/capability by @kolyshkin in #2103
• userns: fix off-by-one userns max size detection by @giuseppe in #2105
• fix(deps): update module github.com/klauspost/compress to v1.17.10 by @renovate in #2106
• Use strings.Cut{,Prefix,Suffix} where appropriate by @kolyshkin in #2100
• userns: skip "nogroup" by @giuseppe in #2109
• Remove old +build tags, add gofix ci job by @kolyshkin in #2101
• overlay: additional layer: check layer existence before using by @ktock in #2108
• overlay: refactor getStagingDir helper by @giuseppe in #2107
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.7 by @renovate in #2110
• Assorted nits reported by revive linter by @kolyshkin in #2102
• overlay: fallback without data only layers by @giuseppe in #2112
• fix(deps): update module github.com/vbatts/tar-split to v0.11.6 by @renovate in #2114
• fix(deps): update module github.com/moby/sys/capability to v0.3.0 by @renovate in #2111
• Use tar-split/tar/asm.IterateHeaders now that it has been accepted by @mtrmac in #2116
• chunked: ignore ErrLayerUnknown when creating cache by @giuseppe in #2119
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 by @renovate in #2120
• chunked: define error for partial pulls not available by @giuseppe in #2118
• fix(deps): update module golang.org/x/sys to v0.26.0 by @renovate in #2124
• Audit and update OWNERS file by @baude in #2125
• CI: Fix git-validation.sh by @Honny1 in #2121
• Fix copy/clone of empty value by @Honny1 in #2122
• drivers/zfs: Handle missing layers during image deletion in ZFS file system by @kimminss0 in #2123
• fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 by @renovate in #2127
• fix(deps): update module github.com/klauspost/compress to v1.17.11 by @renovate in #2132
• Fix assignment of quota project IDs by @mheon in #2129
• chore(deps): update dependency containers/automation_images to v20241010 by @renovate in #2131
• chunked: prevent using an empty cache by @giuseppe in #2133
• Use securejoin.SecureJoin when forming userns paths by @mheon in #2134
• Correctly compute UncompressedSize on zstd:chunked pull, don’t set it on estargz by @mtrmac in #2130
• Follow-ups to #2130 by @mtrmac in #2136
• fix(deps): update module github.com/opencontainers/selinux to v1.11.1 by @renovate in #2138
• ci: add codespell by @kolyshkin in #2137
• Fall back from partial pull when on VFS by @mtrmac in #2140
• composefs: use mount from file where supported by @giuseppe in #2145
• fsdiff: mount both layers are read-only by @giuseppe in #2147
• Merge the release-1.55 branch into main by @mtrmac in #2143
• overlay: use private directory for composefs mounts by @giuseppe in #2148
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.8 by @renovate in #2144
• chunked: close payload stream by @giuseppe in #2151
• Refactor copy of slices and maps by @Honny1 in #2128
• overlay: make error lowercase by @giuseppe in #2153
• fix(deps): update module github.com/microsoft/hcsshim to v0.12.9 by @renovate in #2154
• Update copy.DirCopy to leave sockets in the file system by @anderbubble in #2117
• fix(deps): update golang.org/x/exp digest to f66d83c by @renovate in #2158
• Disable partial pulls (zstd:chunked) by default by @nalind in #2156

New Contributors

• @kimminss0 made their first contribution in #2123
• @anderbubble made their first contribution in #2117

Full Changelog: v1.55.1...v1.56.0

v1.51.2

What's Changed

• [release-1.51] Backport ignore chown errors in additionalimagestore by @TomSweeneyRedHat in #1990
• [release-1.51] Backport CVE-2024-9676 fix by @mheon in #2146

Full Changelog: v1.51.1...v1.51.2

v1.55.1

What's Changed

• [release-1.55] backport fix for CVE-2026-9676 by @mheon in #2135

Full Changelog: v1.55.0...v1.55.1