What's Changed
Security
- prevent Azure token disclosure to lookalike
azurecr.iohostnames: #1004
Bugfixes
--single-snapshoton a stage ending inMAINTAINERpushes an image without its layers: #1000--dryrunpanics when a destination is set: #999
Performance
FF_KANIKO_CROSS_REPO_MOUNT=falsemount layers the destination registry already holds: #990FF_KANIKO_SHARED_BASE_CACHE=falsereadCOPY --from=<image>through the shared base store: #949
Telemetry
KANIKO_TELEMETRY_OMIT_DOCKERFILE=falsekeep the Dockerfile source out of the trace: by @babs in #913- report registry socket and request counts on the build span: #971
- nest trace spans under the command they belong to: #931
Maintenance
- build(deps): bump github.com/moby/go-archive from 0.2.1 to 0.3.3: #976 #977 #995
- build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible: #975 #977 #995
- build(deps): bump busybox in /deploy: #974
- build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.43.5: #977 #995 #1003
- build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.32.36: #977 #995 #1003
- build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.7 to 0.3.12: #977 #984 #995 #1003
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.2 to 1.107.1: #977 #984 #995 #1003
- build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.9: #977 #995
- build(deps): bump debian in /deploy: #982
- build(deps): bump github.com/moby/buildkit from 0.32.0 to 0.32.2: #981 #984
- build(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1: #983
- build(deps): bump github.com/GoogleCloudPlatform/docker-credential-gcr/v2 from 2.1.32 to 2.2.1: #986 #995
- build(deps): bump go.opentelemetry.io/otel from 1.44.0 to 1.45.0: #988
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0: #985
- build(deps): bump golang in /deploy: #994
- build(deps): bump google.golang.org/api from 0.291.0 to 0.292.0: #997
- build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.44.0 to 1.45.0: #996 #1001