• CRI-O v1.26.2
• Downloads
• Changelog since v1.26.0
• Dependencies
  • Added
  • Changed
  • Removed

CRI-O v1.26.2

The release notes have been generated for the commit range
v1.26.1...v1.26.2 on Thu, 9 Mar 2023 08:25:19 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.26.2.tar.gz
• cri-o.amd64.v1.26.2.tar.gz.sha256sum
• cri-o.amd64.v1.26.2.tar.gz.sig
• cri-o.amd64.v1.26.2.tar.gz.cert
• cri-o.amd64.v1.26.2.tar.gz.spdx
• cri-o.amd64.v1.26.2.tar.gz.spdx.sig
• cri-o.amd64.v1.26.2.tar.gz.spdx.cert
• cri-o.arm64.v1.26.2.tar.gz
• cri-o.arm64.v1.26.2.tar.gz.sha256sum
• cri-o.arm64.v1.26.2.tar.gz.sig
• cri-o.arm64.v1.26.2.tar.gz.cert
• cri-o.arm64.v1.26.2.tar.gz.spdx
• cri-o.arm64.v1.26.2.tar.gz.spdx.sig
• cri-o.arm64.v1.26.2.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.26.2.tar.gz \
    --certificate-identity-regexp '.*' \
    --certificate-oidc-issuer-regexp '.*' \
    --signature cri-o.amd64.v1.26.2.tar.gz.sig \
    --certificate cri-o.amd64.v1.26.2.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.26.2.tar.gz
> bom validate -e cri-o.amd64.v1.26.2.tar.gz.spdx -d cri-o

Changelog since v1.26.1

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• Action required ... if running with experimental NRI support enabled. NRI related block in the configuration file needs to be updated.

The NRI-related configuration and command line options have been updated to reflect the corresponding changes in NRI itself. In particular,

• remove 'nri_config_file' configuration file and '--nri-config-file' command line options
• add 'nri_plugin_config_dir' configuration and '--nri-plugin-config-dir' command line options to specify directory to scan for configuration of plugins pre-launched by the runtime
• add 'nri_disable_connections' configuration and '--nri-disable-connections' command line options to disable connections from externally launched plugins
• add 'nri_plugin_registration_timeout' configuration and '--nri-plugin-registration-timeout' command line options to allow overriding the default plugin registration timeout
• add 'nri_plugin_request_timeout' configuration and '--nri-plugin-request-timeout' command line options to allow overriding the default plugin request handling timeout (#6702, @klihub)

Changes by Kind

Dependency-Change

• '/dev' is now mounted again without the 'noexec' flag. (#6618, @haircommander)
• Update github.com/containers/image to v5.24 for sigstore features (#6635, @mrunalp)

Documentation

• Fix a bug where compilation failed when linking against btrfs-prog (#6508, @haircommander)

Uncategorized

• Updated crun to v1.8.1. (#6707, @openshift-cherrypick-robot)

Dependencies

Added

• cloud.google.com/go/accessapproval: v1.5.0
• cloud.google.com/go/accesscontextmanager: v1.4.0
• cloud.google.com/go/apigateway: v1.4.0
• cloud.google.com/go/apigeeconnect: v1.4.0
• cloud.google.com/go/appengine: v1.5.0
• cloud.google.com/go/baremetalsolution: v0.4.0
• cloud.google.com/go/batch: v0.4.0
• cloud.google.com/go/beyondcorp: v0.3.0
• cloud.google.com/go/certificatemanager: v1.4.0
• cloud.google.com/go/channel: v1.9.0
• cloud.google.com/go/cloudbuild: v1.4.0
• cloud.google.com/go/clouddms: v1.4.0
• cloud.google.com/go/compute/metadata: v0.2.3
• cloud.google.com/go/contactcenterinsights: v1.4.0
• cloud.google.com/go/container: v1.7.0
• cloud.google.com/go/datafusion: v1.5.0
• cloud.google.com/go/dataplex: v1.4.0
• cloud.google.com/go/dataproc: v1.8.0
• cloud.google.com/go/deploy: v1.5.0
• cloud.google.com/go/dlp: v1.7.0
• cloud.google.com/go/essentialcontacts: v1.4.0
• cloud.google.com/go/eventarc: v1.8.0
• cloud.google.com/go/filestore: v1.4.0
• cloud.google.com/go/gkebackup: v0.3.0
• cloud.google.com/go/gkemulticloud: v0.4.0
• cloud.google.com/go/gsuiteaddons: v1.4.0
• cloud.google.com/go/iap: v1.5.0
• cloud.google.com/go/ids: v1.2.0
• cloud.google.com/go/iot: v1.4.0
• cloud.google.com/go/longrunning: v0.3.0
• cloud.google.com/go/managedidentities: v1.4.0
• cloud.google.com/go/maps: v0.1.0
• cloud.google.com/go/networkmanagement: v1.5.0
• cloud.google.com/go/optimization: v1.2.0
• cloud.google.com/go/orchestration: v1.4.0
• cloud.google.com/go/orgpolicy: v1.5.0
• cloud.google.com/go/policytroubleshooter: v1.4.0
• cloud.google.com/go/pubsublite: v1.5.0
• cloud.google.com/go/resourcemanager: v1.4.0
• cloud.google.com/go/resourcesettings: v1.4.0
• cloud.google.com/go/run: v0.3.0
• cloud.google.com/go/servicecontrol: v1.5.0
• cloud.google.com/go/servicemanagement: v1.5.0
• cloud.google.com/go/serviceusage: v1.4.0
• cloud.google.com/go/shell: v1.4.0
• cloud.google.com/go/storagetransfer: v1.6.0
• cloud.google.com/go/texttospeech: v1.5.0
• cloud.google.com/go/tpu: v1.4.0
• cloud.google.com/go/translate: v1.4.0
• cloud.google.com/go/video: v1.9.0
• cloud.google.com/go/vmmigration: v1.3.0
• cloud.google.com/go/vmwareengine: v0.1.0
• cloud.google.com/go/vpcaccess: v1.5.0
• cloud.google.com/go/websecurityscanner: v1.4.0
• github.com/go-jose/go-jose/v3: v3.0.0

Changed

• cloud.google.com/go/aiplatform: v1.24.0 → v1.27.0
• cloud.google.com/go/artifactregistry: v1.7.0 → v1.9.0
• cloud.google.com/go/asset: v1.7.0 → v1.10.0
• cloud.google.com/go/assuredworkloads: v1.6.0 → v1.9.0
• cloud.google.com/go/automl: v1.6.0 → v1.8.0
• cloud.google.com/go/bigquery: v1.42.0 → v1.44.0
• cloud.google.com/go/billing: v1.5.0 → v1.7.0
• cloud.google.com/go/binaryauthorization: v1.2.0 → v1.4.0
• cloud.google.com/go/cloudtasks: v1.6.0 → v1.8.0
• cloud.google.com/go/compute: v1.10.0 → v1.14.0
• cloud.google.com/go/datacatalog: v1.6.0 → v1.8.0
• cloud.google.com/go/dataform: v0.4.0 → v0.5.0
• cloud.google.com/go/datastore: v1.5.0 → v1.10.0
• cloud.google.com/go/datastream: v1.3.0 → v1.5.0
• cloud.google.com/go/dialogflow: v1.16.1 → v1.19.0
• cloud.google.com/go/documentai: v1.8.0 → v1.10.0
• cloud.google.com/go/edgecontainer: v0.1.0 → v0.2.0
• cloud.google.com/go/errorreporting: v0.2.0 → v0.3.0
• cloud.google.com/go/firestore: v1.6.1 → v1.9.0
• cloud.google.com/go/functions: v1.7.0 → v1.9.0
• cloud.google.com/go/gaming: v1.6.0 → v1.8.0
• cloud.google.com/go/iam: v0.5.0 → v0.8.0
• cloud.google.com/go/kms: v1.4.0 → v1.8.0
• cloud.google.com/go/language: v1.6.0 → v1.8.0
• cloud.google.com/go/logging: v1.4.2 → v1.6.1
• cloud.google.com/go/memcache: v1.5.0 → v1.7.0
• cloud.google.com/go/metastore: v1.6.0 → v1.8.0
• cloud.google.com/go/monitoring: v1.1.0 → v1.8.0
• cloud.google.com/go/networkconnectivity: v1.5.0 → v1.7.0
• cloud.google.com/go/notebooks: v1.3.0 → v1.5.0
• cloud.google.com/go/osconfig: v1.8.0 → v1.10.0
• cloud.google.com/go/oslogin: v1.5.0 → v1.7.0
• cloud.google.com/go/pubsub: v1.11.0-beta.schemas → v1.27.1
• cloud.google.com/go/recaptchaenterprise/v2: v2.2.0 → v2.5.0
• cloud.google.com/go/recommender: v1.6.0 → v1.8.0
• cloud.google.com/go/redis: v1.8.0 → v1.10.0
• cloud.google.com/go/retail: v1.9.0 → v1.11.0
• cloud.google.com/go/scheduler: v1.5.0 → v1.7.0
• cloud.google.com/go/secretmanager: v1.6.0 → v1.9.0
• cloud.google.com/go/security: v1.8.0 → v1.10.0
• cloud.google.com/go/securitycenter: v1.14.0 → v1.16.0
• cloud.google.com/go/servicedirectory: v1.5.0 → v1.7.0
• cloud.google.com/go/spanner: v1.31.0 → v1.41.0
• cloud.google.com/go/speech: v1.7.0 → v1.9.0
• cloud.google.com/go/storage: v1.23.0 → v1.27.0
• cloud.google.com/go/talent: v1.2.0 → v1.4.0
• cloud.google.com/go/trace: v1.0.0 → v1.4.0
• cloud.google.com/go/videointelligence: v1.7.0 → v1.9.0
• cloud.google.com/go/vision/v2: v2.3.0 → v2.5.0
• cloud.google.com/go/webrisk: v1.5.0 → v1.7.0
• cloud.google.com/go/workflows: v1.7.0 → v1.9.0
• cloud.google.com/go: v0.104.0 → v0.105.0
• filippo.io/edwards25519: v1.0.0-rc.1 → v1.0.0
• github.com/Azure/azure-sdk-for-go: v67.0.0+incompatible → v67.3.0+incompatible
• github.com/ProtonMail/go-crypto: 4b6e5c5 → cf6655e
• github.com/aws/aws-sdk-go-v2/config: v1.17.8 → v1.18.8
• github.com/aws/aws-sdk-go-v2/credentials: v1.12.21 → v1.13.8
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.17 → v1.12.21
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.23 → v1.1.27
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.17 → v2.4.21
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.24 → v1.3.28
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.17 → v1.9.21
• github.com/aws/aws-sdk-go-v2/service/kms: v1.18.12 → v1.20.0
• github.com/aws/aws-sdk-go-v2/service/sso: v1.11.23 → v1.12.0
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6 → v1.14.0
• github.com/aws/aws-sdk-go-v2/service/sts: v1.16.19 → v1.18.0
• github.com/aws/aws-sdk-go-v2: v1.16.16 → v1.17.3
• github.com/aws/aws-sdk-go: v1.44.119 → v1.44.180
• github.com/aws/smithy-go: v1.13.3 → v1.13.5
• github.com/containerd/nri: v0.2.0 → v0.3.0
• github.com/containers/image/v5: 2f770d6 → v5.24.2
• github.com/containers/libtrust: 9c3a6c2 → c1716e8
• github.com/containers/ocicrypt: v1.1.6 → v1.1.7
• github.com/containers/storage: a747b27 → v1.45.3
• github.com/coreos/go-oidc/v3: v3.4.0 → v3.5.0
• github.com/cyberphone/json-canonicalization: dc406ce → 57a0ce2
• github.com/docker/docker: v20.10.21+incompatible → v20.10.23+incompatible
• github.com/docker/libtrust: aabc10e → fa56704
• github.com/fullstorydev/grpcurl: v1.8.6 → v1.8.7
• github.com/go-playground/validator/v10: v10.11.0 → v10.11.1
• github.com/go-rod/rod: v0.112.0 → v0.112.3
• github.com/go-test/deep: v1.0.8 → v1.1.0
• github.com/google/btree: v1.0.1 → v1.1.2
• github.com/google/go-containerregistry: v0.12.0 → v0.12.1
• github.com/google/martian/v3: v3.2.1 → v3.3.2
• github.com/google/trillian: v1.4.1 → v1.5.0
• github.com/googleapis/enterprise-certificate-proxy: v0.2.0 → v0.2.1
• github.com/googleapis/gax-go/v2: v2.6.0 → v2.7.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.11.2 → v2.11.3
• github.com/hashicorp/go-plugin: v1.4.5 → v1.4.6
• github.com/hashicorp/go-retryablehttp: v0.7.1 → v0.7.2
• github.com/hashicorp/vault/api: v1.8.1 → v1.8.2
• github.com/hashicorp/vault/sdk: v0.6.0 → v0.6.1
• github.com/jhump/protoreflect: v1.13.0 → v1.14.0
• github.com/klauspost/compress: v1.15.13 → v1.15.15
• github.com/letsencrypt/boulder: 7658355 → 85aa520
• github.com/mattn/go-runewidth: v0.0.13 → v0.0.14
• github.com/opencontainers/runtime-tools: 946c877 → a6a0738
• github.com/pelletier/go-toml/v2: v2.0.1 → v2.0.5
• github.com/rivo/uniseg: v0.2.0 → v0.4.3
• github.com/sigstore/fulcio: v0.5.3 → v1.0.0
• github.com/sigstore/rekor: v0.11.0 → v1.0.1
• github.com/sigstore/sigstore: v1.4.5 → v1.5.1
• github.com/spf13/viper: v1.12.0 → v1.13.0
• github.com/subosito/gotenv: v1.3.0 → v1.4.1
• github.com/sylabs/sif/v2: v2.8.1 → v2.9.0
• github.com/theupdateframework/go-tuf: 3890c1e → 9cb61d6
• github.com/weppos/publicsuffix-go: dd1d648 → e4081aa
• github.com/ysmood/gson: v0.7.2 → v0.7.3
• github.com/zmap/zcrypto: 6f9bc4a → 599ec18
• github.com/zmap/zlint/v3: cb17369 → v3.4.0
• go.mongodb.org/mongo-driver: v1.10.0 → v1.11.1
• go.opencensus.io: v0.23.0 → v0.24.0
• go.step.sm/crypto: v0.17.2 → v0.21.0
• go.uber.org/zap: v1.22.0 → v1.23.0
• golang.org/x/crypto: v0.1.0 → v0.5.0
• golang.org/x/exp: 8498777 → 807a232
• golang.org/x/net: 1e63c2f → v0.5.0
• golang.org/x/oauth2: v0.1.0 → v0.4.0
• golang.org/x/sys: v0.3.0 → v0.4.0
• golang.org/x/term: v0.3.0 → v0.4.0
• golang.org/x/text: v0.5.0 → v0.6.0
• golang.org/x/time: f3bd1da → v0.2.0
• google.golang.org/api: v0.100.0 → v0.107.0
• google.golang.org/genproto: 99cd37c → f9683d7

Removed

• github.com/ReneKroon/ttlcache/v2: v2.11.0
• github.com/urfave/negroni: v1.0.0