containers/podman v5.8.2 on GitHub

This release addresses CVE-2026-33414, where the podman machine init --image command when run on Windows using the Hyper-V backend can run Powershell-escaped commands from the user-specified image path on in a Powershell session on the host (GHSA-hc8w-h2mf-hp59).

Fixed a bug where containers with the unless-stopped restart policy would not restart after a reboot when podman-restart.service was enabled (#28152).
Fixed a bug where setting Entrypoint="" in a Quadlet .container file did not clear the container's entrypoint (#28213).
Fixed a bug where setting a HealthCmd in a Quadlet .container file to a command that included double-quotes (") would result in a nonfunctional healthcheck due to a parsing issue (#28409).
Fixed a bug where FreeBSD systems could panic when inspecting containers created with the host network mode (#28289).

Fixed a bug where the Libpod System Check endpoint could perform operations with bad data after returning a 400 error (#28350).
Fixed a bug where the remote attach API for containers (Libpod & Compat) could panic due to a rare race condition (#28277).
Fixed a bug where the Secret Create API could not create functional secrets using the shell driver due to options from the default driver being improperly added.