osscontainertools/kaniko v1.28.5

on GitHub

Community Update

Many thanks to @WoozyMasta, @pstoeckle, @7schroet, and @MikeMoore63 for reporting issues fixed in this release.

What's Changed

Bugfixes

• KANIKO_DIR relocation deletes the directory instead of moving it: #1099
• --compression-level below 1 is ignored: #1100
• FF_KANIKO_PRESERVE_MOUNTED_SYMLINKS=false a bind-mount over a base image symlink breaks every RUN: #1080
• a base image mixing OCI and docker media types panics the build: #1079

Standardization

• FF_KANIKO_REPRODUCIBLE_PRESERVE_FORMAT=false --reproducible keeps the requested compression and format: #1047

Performance

• FF_KANIKO_CACHE_HASH_BLAKE3=false hash cache-key inputs with blake3 instead of md5: by @BobDu in #1042
• FF_KANIKO_POOL_REGISTRY_CONNECTIONS=false share one connection pool per registry: #972
• CopyDir repeats stat and utimensat calls for every file: #1049

Usability

• experimental support for bakefile via kaniko bake: #773

Telemetry

• KANIKO_TELEMETRY_TOKEN_EXCHANGE_ENDPOINT exchanges a CI identity token for a collector token: #1071
• read CI attributes from github and gitlab predefined variables: #1072
• kaniko.build_id derives from the CI job instead of the Dockerfile: #1072

Maintenance

• build(deps): bump step-security/harden-runner from 2.21.0 to 2.21.1: #1063
• build(deps): bump google.golang.org/api from 0.294.0 to 0.298.0: #1062 #1077 #1097
• build(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.33.1 to 1.33.5: #1068 #1081 #1090 #1101
• build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.1 to 0.4.7: #1068 #1081 #1090 #1092 #1101
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.109.1 to 1.113.1: #1068 #1081 #1090 #1092
• build(deps): bump github.com/docker/cli from 29.7.2+incompatible to 29.8.1+incompatible: #1075 #1102
• build(deps): bump docker/setup-qemu-action from 4.2.0 to 4.4.0: #1067 #1105
• build(deps): bump github.com/aws/aws-sdk-go-v2 from 1.45.1 to 1.47.0: #1081 #1089
• build(deps): bump github.com/google/go-containerregistry from 0.22.0 to 0.22.1: #1081
• build(deps): bump github.com/moby/moby/api from 1.55.0 to 1.56.0: #1076
• build(deps): bump github.com/moby/buildkit from 0.32.2 to 0.33.0: #1070
• build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0: #1085
• build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0: #1083
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.8.0 to 1.8.1: #1092
• build(deps): bump go from 1.26.7 to 1.26.8: #1095
• build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1: #1096 #1105
• build(deps): bump docker/build-push-action from 7.3.0 to 7.4.0: #1105
• build(deps): bump docker/setup-buildx-action from 4.3.0 to 4.4.1: #1105
• build(deps): bump docker/setup-docker-action from 5.4.0 to 5.5.0: #1105
• build(deps): bump github.com/osscontainertools/docker-credential-acr from 0.9.0 to 0.9.1: #1106

Fork Related

• replace the EOL bullseye fixture for 2049 with a synthetic repro: #1078
• inline the media type classification: #1082
• bump diffoci to containerd v2: #1094
• narrow azblob imports to blob and sas: #1091
• read the GCS build context over the JSON API: #1093
• compare integration images in the registry: #1087
• pin the bake golden base image by digest: #1104