What's Changed
- Podman v6 support - by @navidys in #514
- Doc update: podman container and SELinux enforced by @Legendary4226 in #472
- Remove BUILDTAG btrfs_noversion as no longer effective by @rahilarious in #495
- Golang 1.25.9 + golanci lint 2.12.2 + DOC update by @navidys in #513
- Packit downstream update by @navidys in #515
- Fix duplicate image metrics that 500 the whole /metrics gather by @apoorva-01 in #492
- Set -1 for container exited/started unit time if never existed/started by @navidys in #516
- Configurable container stats timeout by @bataroland in #517
- CLI options update - underline changed to single dash + using duration for cache-duration by @navidys in #518
- Bump github.com/prometheus/client_golang from 1.23.2 to 1.24.1 by @dependabot[bot] in #500
- Bump github.com/prometheus/exporter-toolkit from 0.16.0 to 0.19.0 by @dependabot[bot] in #509
- Bump github.com/prometheus/exporter-toolkit from 0.15.1 to 0.16.0 by @dependabot[bot] in #461
- Bump github.com/prometheus/common from 0.69.0 to 0.71.0 by @dependabot[bot] in #512
- Bump github.com/prometheus/common from 0.67.5 to 0.69.0 by @dependabot[bot] in #482
- Bump github.com/sirupsen/logrus from 1.9.4 to 1.10.2 by @dependabot[bot] in #510
- Bump github.com/onsi/gomega from 1.42.1 to 1.43.0 by @dependabot[bot] in #511
- Bump github.com/onsi/gomega from 1.39.1 to 1.42.0 by @dependabot[bot] in #481
- Bump github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.2 by @dependabot[bot] in #504
- Bump github.com/onsi/ginkgo/v2 from 2.28.0 to 2.31.0 by @dependabot[bot] in #480
Security Fixes
- CVE-2026-39833 golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation
- CVE-2026-46597 golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs
- CVE-2026-39831 golang.org/x/crypto/ssh: Security key bypass due to missing user presence check
- CVE-2026-41178 OpenTelemetry-Go: Denial of Service via oversized baggage headers
- CVE-2026-17106 moby/go-archive: Arbitrary file write via link following in tar extraction
- CVE-2025-47914 SSH Agent servers: Denial of Service due to malformed messages
- CVE-2026-41178 p OpenTelemetry-Go: Denial of Service via oversized baggage headers
New Contributors
- @Legendary4226 made their first contribution in #472
- @apoorva-01 made their first contribution in #492
- @bataroland made their first contribution in #517