Community Update
@iahsanGill made their first contribution in #703
Also many thanks to @mosauter, @phoenix-frozen, and @cmellazchy for reporting issues fixed in this release.
What's Changed
Security
- github.com/docker/cli v29.4.1: CVE-2025-15558
- github.com/go-git/go-billy/v5 v5.8.0: CVE-2026-44973 CVE-2026-44740
- github.com/go-git/go-git/v5 v5.18.0: CVE-2026-45022
- go stdlib v1.26.2: CVE-2026-33811 CVE-2026-33814 CVE-2026-39820 CVE-2026-39836 CVE-2026-42499 CVE-2026-39823 CVE-2026-39825 CVE-2026-39826
Bugfixes
kaniko-alpinepush fails withUNAUTHORIZEDand TLS verification fails after pre-cleanup: #678- COPY instructions silently skip files in the ignore list with no output at the default log level: #663
Caching
FF_KANIKO_CACHE_PROBE_AFTER_MISS=falsekeep probing the cache after a layer miss: by @iahsanGill in #703
Maintenance
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.1.19 to 0.1.21: #670 #687
- build(deps): bump github.com/docker/cli from 29.4.1 to 29.5.0: #670 #687 #701
- build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.3: #675 #699 #702
- build(deps): bump google.golang.org/api from 0.277.0 to 0.279.0: #681 #696
- build(deps): bump debian in /deploy: #683 #691
- build(deps): bump golang in /deploy: #682 #688 #692 #695 #698
- build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0: #684
- build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0: #685
- build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2: #686
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.100.1 to 1.101.0: #687
- build(deps): bump github.com/docker/docker-credential-helpers from 0.9.6 to 0.9.7: #689
- build(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0: #690
- build(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0: #697
- build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.6.4 to 1.7.0: #700