github osscontainertools/kaniko v1.28.3

4 hours ago

What's Changed

Security

  • prevent Azure token disclosure to lookalike azurecr.io hostnames: #1004

Bugfixes

  • --single-snapshot on a stage ending in MAINTAINER pushes an image without its layers: #1000
  • --dryrun panics when a destination is set: #999

Performance

  • FF_KANIKO_CROSS_REPO_MOUNT=false mount layers the destination registry already holds: #990
  • FF_KANIKO_SHARED_BASE_CACHE=false read COPY --from=<image> through the shared base store: #949

Telemetry

  • KANIKO_TELEMETRY_OMIT_DOCKERFILE=false keep the Dockerfile source out of the trace: by @babs in #913
  • report registry socket and request counts on the build span: #971
  • nest trace spans under the command they belong to: #931

Maintenance

  • build(deps): bump github.com/moby/go-archive from 0.2.1 to 0.3.3: #976 #977 #995
  • build(deps): bump github.com/docker/cli from 29.6.2+incompatible to 29.7.2+incompatible: #975 #977 #995
  • build(deps): bump busybox in /deploy: #974
  • build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.43.5: #977 #995 #1003
  • build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.32.36: #977 #995 #1003
  • build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.3.7 to 0.3.12: #977 #984 #995 #1003
  • build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.2 to 1.107.1: #977 #984 #995 #1003
  • build(deps): bump github.com/google/go-containerregistry from 0.21.7 to 0.21.9: #977 #995
  • build(deps): bump debian in /deploy: #982
  • build(deps): bump github.com/moby/buildkit from 0.32.0 to 0.32.2: #981 #984
  • build(deps): bump step-security/harden-runner from 2.20.0 to 2.20.1: #983
  • build(deps): bump github.com/GoogleCloudPlatform/docker-credential-gcr/v2 from 2.1.32 to 2.2.1: #986 #995
  • build(deps): bump go.opentelemetry.io/otel from 1.44.0 to 1.45.0: #988
  • build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0: #985
  • build(deps): bump golang in /deploy: #994
  • build(deps): bump google.golang.org/api from 0.291.0 to 0.292.0: #997
  • build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.44.0 to 1.45.0: #996 #1001

Fork Related

  • doc changes: #967 #968
  • remove the BENCHMARK_FILE output in favor of otel traces: #969
  • integration test improvements: #917 #980

Don't miss a new kaniko release

NewReleases is sending notifications on new releases.