Features
- support Windows containerd named-pipe CRI endpoints (#1229) #1229 (Charles)
- run the worker handoff over Unix sockets on Windows (#1231) #1231 (Charles)
- make the worker handoff write path cancellable (#1237) #1237 (Charles)
- add Windows HostProcess image stages for the collector and remover (#1275) #1275 (Charles)
- give each image deletion its own timeout (#1239) #1239 (Charles)
- publish windows/amd64 layers for the remover and collector (#1276) #1276 (Charles)
- manager emits Windows ImageJob pods (#1236) #1236 (Xinhe Li)
Bug Fixes
- use --pkg-types instead of deprecated --vuln-type for trivy (#1223) #1223 (jiashun0011)
- deps: remediate Go module vulnerabilities (#1224) #1224 (Sertaç Özercan)
- bump Go builder image to 1.26.6 to clear stdlib CVEs (repo-wide Trivy failure) (#1232) #1232 (Charles)
- bump grpc to v1.83.1 to clear CVE-2026-84304 (repo-wide Trivy failure) (#1272) #1272 (Charles)
- give the worker handoff endpoints a Windows path (#1238) #1238 (Charles)
Documentation
Chores
- bump golang from
ecef830to45b4337in /build/tooling (#1083) #1083 (dependabot[bot]) - bump peter-evans/create-pull-request from 7.0.0 to 7.0.1 in the all group (#1084) #1084 (dependabot[bot])
- bump the all group with 3 updates (#1086) #1086 (dependabot[bot])
- bump the npm_and_yarn group in /docs with 4 updates (#1087) #1087 (dependabot[bot])
- bump the all group with 3 updates (#1088) #1088 (dependabot[bot])
- bump the all group with 2 updates (#1090) #1090 (dependabot[bot])
- bump golang from
45b4337to1a26d5ain /build/tooling (#1091) #1091 (dependabot[bot]) - bump golang from
1a26d5atoebaf58din /build/tooling (#1092) #1092 (dependabot[bot]) - bump the all group across 1 directory with 7 updates (#1095) #1095 (dependabot[bot])
- bump the all group with 3 updates (#1097) #1097 (dependabot[bot])
- bump golang from
ebaf58dtoecb3fe7in /build/tooling (#1098) #1098 (dependabot[bot]) - bump the all group across 1 directory with 6 updates (#1101) #1101 (dependabot[bot])
- bump http-proxy-middleware from 2.0.6 to 2.0.7 in /docs in the npm_and_yarn group (#1102) #1102 (dependabot[bot])
- bump the docusaurus group in /docs with 3 updates (#1105) #1105 (dependabot[bot])
- bump cross-spawn from 7.0.3 to 7.0.6 in /docs in the npm_and_yarn group (#1109) #1109 (dependabot[bot])
- bump the all group across 1 directory with 4 updates (#1110) #1110 (dependabot[bot])
- bump the docusaurus group in /docs with 3 updates (#1111) #1111 (dependabot[bot])
- bump the all group with 3 updates (#1113) #1113 (dependabot[bot])
- bump golang from
ecb3fe7to1002103in /build/tooling (#1103) #1103 (dependabot[bot]) - bump nanoid from 3.3.7 to 3.3.8 in /docs in the npm_and_yarn group (#1115) #1115 (dependabot[bot])
- bump the all group with 2 updates (#1116) #1116 (dependabot[bot])
- bump golang from
0c1625ato6d4cbf0in /build/tooling (#1118) #1118 (dependabot[bot]) - bump the docusaurus group in /docs with 3 updates (#1119) #1119 (dependabot[bot])
- bump the all group with 7 updates (#1120) #1120 (dependabot[bot])
- bump golang from
6d4cbf0to462521fin /build/tooling (#1121) #1121 (dependabot[bot]) - bump the all group with 3 updates (#1122) #1122 (dependabot[bot])
- bump the all group with 2 updates (#1123) #1123 (dependabot[bot])
- bump the all group with 3 updates (#1124) #1124 (dependabot[bot])
- bump golang from
462521fto80eb314in /build/tooling (#1125) #1125 (dependabot[bot]) - bump prismjs from 1.29.0 to 1.30.0 in /docs in the npm_and_yarn group (#1133) #1133 (dependabot[bot])
- bump the npm_and_yarn group in /docs with 3 updates (#1142) #1142 (dependabot[bot])
- bump image-size from 1.1.1 to 1.2.1 in /docs in the npm_and_yarn group (#1143) #1143 (dependabot[bot])
- bump the npm_and_yarn group in /docs with 2 updates (#1147) #1147 (dependabot[bot])
- bump the docusaurus group in /docs with 3 updates (#1157) #1157 (dependabot[bot])
- bump prism-react-renderer from 2.4.0 to 2.4.1 in /docs (#1117) #1117 (dependabot[bot])
- bump sigs.k8s.io/controller-runtime from 0.14.1 to 0.14.7 (#1138) #1138 (dependabot[bot])
- bump github.com/onsi/gomega from 1.24.1 to 1.24.2 (#1139) #1139 (dependabot[bot])
- bump github.com/go-logr/logr from 1.2.3 to 1.2.4 (#1140) #1140 (dependabot[bot])
- bump golang from 1.23-bullseye@sha256:80eb3147ef40b58d527d9c2e634b1a79a750aee09de6f973844db38b33f0550b to sha256:d9db32125db0c3a680cfb7a1afcaefb89c898a075ec148fdc2f0f646cc2ed509 in /build/tooling (#1146) #1146 (dependabot[bot])
- bump k8s.io/kubernetes from 1.26.11 to 1.26.15 in the k8s group (#1151) #1151 (dependabot[bot])
- bump golang from 1.23-bookworm to 1.25-bookworm (#1161) #1161 (dependabot[bot])
- bump the all group across 1 directory with 16 updates (#1162) #1162 (dependabot[bot])
- bump @mdx-js/react from 3.0.1 to 3.1.1 in /docs (#1165) #1165 (dependabot[bot])
- bump got from 14.4.2 to 14.6.2 in /docs (#1173) #1173 (dependabot[bot])
- bump golang.org/x/oauth2 from 0.10.0 to 0.27.0 (#1174) #1174 (dependabot[bot])
- bump golang.org/x/net from 0.23.0 to 0.38.0 (#1176) #1176 (dependabot[bot])
- bump brace-expansion from 1.1.11 to 1.1.12 in /docs (#1177) #1177 (dependabot[bot])
- bump react and react-dom in /docs (#1178) #1178 (dependabot[bot])
- bump k8s.io/cri-api from 0.25.5 to 0.25.16 (#1152) #1152 (dependabot[bot])
- bump the docusaurus group in /docs with 3 updates (#1183) #1183 (dependabot[bot])
- bump got from 14.6.4 to 14.6.5 in /docs (#1185) #1185 (dependabot[bot])
- bump google.golang.org/grpc from 1.73.0 to 1.73.1 (#1182) #1182 (dependabot[bot])
- bump node-forge from 1.3.1 to 1.3.2 in /docs (#1187) #1187 (dependabot[bot])
- fix vulnerabilities and CI failures (#1179) #1179 (Ashna Mehrotra)
- bump the all group with 14 updates (#1184) #1184 (dependabot[bot])
- Patch docs for 1.4.1 release (#1194) #1194 (github-actions[bot])
- Patch docs for 1.4.2 release (#1227) #1227 (github-actions[bot])
- bump the all group across 1 directory with 20 updates (#1245) #1245 (dependabot[bot])
- bump react-router-dom from 6.30.2 to 7.18.2 in /docs (#1197) #1197 (dependabot[bot])
- bump js-yaml from 3.14.2 to 4.1.1 in /docs (#1198) #1198 (dependabot[bot])
- bump google.golang.org/grpc from 1.82.1 to 1.82.2 (#1243) #1243 (dependabot[bot])
- bump @babel/core from 7.28.5 to 7.29.7 in /docs (#1264) #1264 (dependabot[bot])
- bump brace-expansion from 1.1.12 to 1.1.18 in /docs (#1246) #1246 (dependabot[bot])
- bump golang from 1.26.6-bookworm to 1.27.0-bookworm in /build/tooling (#1244) #1244 (dependabot[bot])
- consolidate dependabot /docs dependency bumps (#1269) #1269 (Copilot)
- bump google.golang.org/grpc from 1.82.2 to 1.83.1 (#1273) #1273 (dependabot[bot])
- bump browserslist from 4.28.0 to 4.28.8 in /docs (#1270) #1270 (dependabot[bot])
- bump browserslist from 4.28.8 to 4.28.9 in /docs (#1277) #1277 (dependabot[bot])
- bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#1278) #1278 (dependabot[bot])
- bump golang from 1.27.0-bookworm to 1.27.1-bookworm in /build/tooling (#1279) #1279 (dependabot[bot])
- bump the docusaurus group in /docs with 4 updates (#1280) #1280 (dependabot[bot])
- bump colord from 2.9.3 to 2.10.0 in /docs (#1284) #1284 (dependabot[bot])
- Prepare v1.5.0-beta.1 release (#1287) #1287 (github-actions[bot])