1.1.0 (2024-01-31)
Due to recent issues fixed in runc and BuildKit which allowed for unintended visibility from containers into external filesystems, this Finch release contains a dependency bundle which deviates from the default nerdctl bundle. While we do not anticipate much risk from these issues inside a Finch environment, we decided to provide a patch ASAP to uphold our security standards.
Finch Windows v1.1.0 installers recalled; see v1.1.1 for installers that include patching for runc and buildkit versions to match the macOS release v1.1.0.
Build System or External Dependencies
- deps: Bump github.com/aws/aws-sdk-go-v2 from 1.24.0 to 1.24.1 (#749) (c3ae967)
- deps: Bump github.com/containerd/containerd from 1.7.10 to 1.7.11 (#742) (7d1e250)
- deps: Bump github.com/docker/docker from 24.0.7+incompatible to 25.0.1+incompatible (#772) (b16f6ae)
- deps: Bump github.com/lima-vm/lima from 0.19.0 to 0.20.0 (#769) (7f0c86e)
- deps: Bump github.com/onsi/ginkgo/v2 from 2.13.2 to 2.14.0 (#758) (7d3a7c8)
- deps: Bump github.com/onsi/gomega from 1.30.0 to 1.31.1 (#768) (889abf8)
- deps: Bump github.com/runfinch/common-tests from 0.7.11 to 0.7.12 (#761) (bb17a96)
- deps: Bump github.com/shirou/gopsutil/v3 from 3.23.11 to 3.23.12 (#744) (eb55877)
- deps: Bump golang.org/x/crypto from 0.16.0 to 0.18.0 (#751) (fc434ac)
- deps: Bump golang.org/x/image from 0.0.0-20210220032944-ac19c3e999fb to 0.10.0 (#752) (9a08b45)
- deps: Bump golang.org/x/tools from 0.16.0 to 0.16.1 (#734) (efecfca)
- deps: Bump golang.org/x/tools from 0.16.1 to 0.17.0 (#757) (89623da)
- deps: Bump submodules and dependencies (#733) (8b2d8cd)