osscontainertools/kaniko v1.26.6

on GitHub

Community Update

Many thanks to @Mynacol for reporting an issue fixed in this release.

What's Changed

Security

• github.com/go-git/go-git/v5 5.16.4: CVE-2026-25934

Bugfixes

• refs/pull is not a valid branchname: #509
• persist secret files: #512

Standardization

• FF_KANIKO_COPY_CHMOD_ON_IMPLICIT_DIRS=false add buildkit compatibility mode: #510

Maintenance

• chore(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0: #498
• chore(deps): bump step-security/harden-runner from 2.14.1 to 2.14.2 in the actions group: #499
• chore(deps): bump github.com/go-git/go-git/v5 from 5.16.4 to 5.16.5 in the gomod group: #500
• chore(deps): bump google.golang.org/api from 0.265.0 to 0.267.0: #503 #514
• chore(deps): bump cloud.google.com/go/storage from 1.59.2 to 1.60.0: #502
• chore(deps): bump golang from 1.25.7 to 1.26.0 in /deploy: #501
• chore(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 in the actions group: #504 #505 #506
• chore(deps): bump github.com/GoogleCloudPlatform/docker-credential-gcr/v2 from 2.1.31 to 2.1.32: #513
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.7 to 1.32.9: #513 #515
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.1.2 to 0.1.4: #513 #515

Fork Related

• golden tests: #486
• update docs: #495
• rollback & freeze docker version in integration tests: #508

Refactorings

• cache lookahead refactoring: #330
• move resolveCrossStageCommands forwards: #337
• staticcheck: github.com/aws/aws-sdk-go-v2/feature/s3/manager is deprecated: #497