v1.23.2 Release 2024-07-09

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.2-slim

v1.23.2 is a patch release updating kaniko dependency version. See below for the specific deps that were updated.

Dependency Updates:

• chore(deps): bump github.com/moby/buildkit and github.com/docker/docker #3242
• chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 #3236
• chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 #3235
• chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 #3237
• chore(deps): bump google.golang.org/api from 0.185.0 to 0.187.0 #3238
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.1 to 1.17.5 #3239
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.24 to 1.17.1 #3220
• chore(deps): bump docker/build-push-action from 6.0.0 to 6.1.0 #3218
• chore(deps): bump google.golang.org/api from 0.183.0 to 0.185.0 #3219
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.56.1 #3221
• chore(deps): bump docker/build-push-action from 5.3.0 to 6.0.0 #3212
• chore(deps): bump cloud.google.com/go/storage from 1.41.0 to 1.42.0 #3204
• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 #3205
• chore(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 #3206
• chore(deps): bump imjasonh/setup-crane from 0.3 to 0.4 #3210
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 #3190
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.21 to 1.16.24 #3191
• chore(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 #3192
• chore(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 #3193
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.2 #3194

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]

v1.23.1 Release 2024-06-07

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.1-slim

Highlights:

This patch release reverts recently changed behaviour it so that --no-push properly still pushes intermediate cache layers. Additionally documentation around the --no-push and --no-push-cache flag have been added to make the expected behaviour more clear. Additionally numerous dependencies have been updated.

Fixes:

• fix: Enable pushing cache with --no-push #3181

Docs Updates:

• docs: document --no-push-cache flag in README.md #3188

Dependency Updates::

• chore(deps): bump google.golang.org/api from 0.181.0 to 0.182.0 #3187
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.17 to 1.16.21 #3179
• chore(deps): bump google.golang.org/api from 0.180.0 to 0.181.0 #3170
• chore(deps): bump google-github-actions/auth from 2.1.2 to 2.1.3 #3168
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.2 to 1.54.2 #3169
• chore(deps): bump cloud.google.com/go/storage from 1.40.0 to 1.41.0 #3171
• chore(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 #3172
• chore(deps): bump github.com/docker/docker from 26.1.2+incompatible to 26.1.3+incompatible #3173

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• Leo Palmer Sunmo

v1.23.0 Release 2024-05-14

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.0-slim

Features:

• feat: add registry mirror support to registry map for kaniko warmer #3140
• feat: added --chmod for ADD and COPY commands. Fixes #2850 and #1751 #3119

Fixes:

• fix: integration test fail on error when build with docker due to buildkit difference #3131
• fix: Make --registry-map compatible with namespaced images #3138
• fix: resolve issue where kaniko would push cache images with --no-push set" #3132
• fix: warn instead of error when docker wildcard does not match any files #3127

Docs updates:

• docs: wiki url #3117
• docs: update docs on mirrors and registry map. #3153

Dependency Updates:

• chore: bump cred helper libraries #3133
• chore: update cred helper go libraries #3087
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 #3152
• chore(deps): bump AdityaGarg8/remove-unwanted-software from 2 to 3 #3110
• chore(deps): bump cloud.google.com/go/storage from 1.39.1 to 1.40.0 #3097
• chore(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 #3111
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.7 to 1.27.11 #3106
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.15 to 1.16.17 #3158
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.9 to 1.16.15 #3104
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.52.1 to 1.53.1 #3096
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.1 to 1.3.2 #3114
• chore(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15 #3112
• chore(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16 #3144
• chore(deps): bump github.com/docker/docker from 26.0.0+incompatible to 26.0.2+incompatible #3121
• chore(deps): bump github.com/docker/docker from 26.1.0+incompatible to 26.1.1+incompatible #3149
• chore(deps): bump github.com/docker/docker from 26.1.1+incompatible to 26.1.2+incompatible #3161
• chore(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 #3095
• chore(deps): bump github.com/google/slowjam from 1.1.0 to 1.1.1 #3129
• chore(deps): bump github.com/moby/buildkit from 0.13.0 to 0.13.1 #3093
• chore(deps): bump github.com/moby/buildkit from 0.13.1 to 0.13.2 #3145
• chore(deps): bump golang.org/x/net from 0.22.0 to 0.24.0 #3113
• chore(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 #3107
• chore(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 #3150
• chore(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 #3105
• chore(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 #3103
• chore(deps): bump google.golang.org/api from 0.171.0 to 0.172.0 #3094
• chore(deps): bump google.golang.org/api from 0.172.0 to 0.175.0 #3128
• chore(deps): bump google.golang.org/api from 0.175.0 to 0.177.0 #3151
• chore(deps): bump google.golang.org/api from 0.177.0 to 0.180.0 #3160
• chore(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 #3109

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• Djabx
• Marc Lallaouret
• Matthias Schneider
• Prima Adi Pradana
• Samarth08
• Verlhac Gaëtan

v1.22.0 Release 2024-03-26

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.22.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.22.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.22.0-slim

• feat: Kaniko/add path regmaps [possible in registry maps and/or mirror] #3051

• fix: add AWS ECR error message for tag Immutability #3045

• fix: fix COPY fails when multiple files are copied to path specified in ENV #3034

• fix: Remove query parameters in ADD command when the destinatio… #3053

• chore: update google.golang.org/protobuff to resolve CVE-2024-24786 #3068

• chore(deps): bump cloud.google.com/go/storage from 1.39.0 to 1.39.1 #3075

• chore(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 #3061

• chore(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 #3070

• chore(deps): bump docker/setup-buildx-action from 3.1.0 to 3.2.0 #3071

• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.25.3 #3057

• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.25.3 to 1.26.0 #3083

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.6 to 1.16.9 #3058

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.51.4 #3059

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.4 to 1.52.1 #3076

• chore(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14 #3084

• chore(deps): bump github.com/docker/docker from 25.0.3+incompatible to 25.0.4+incompatible #3060

• chore(deps): bump github.com/docker/docker from 25.0.4+incompatible to 26.0.0+incompatible #3085

• chore(deps): bump github.com/google/go-containerregistry from 0.19.0 to 0.19.1 #3073

• chore(deps): bump github.com/moby/buildkit from 0.12.5 to 0.13.0 #3072

• chore(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 #3056

• chore(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 #3074

• chore(deps): bump google.golang.org/api from 0.167.0 to 0.171.0 #3082

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Alessandro Bitocchi
• dependabot[bot]
• Jérémie Augustin
• Prima Adi Pradana

v1.21.1 Release 2024-03-06

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.21.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.21.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.21.1-slim

Highlights:

• this patch release updates dependencies to remove CVEs present in v1.21.0, for patched dependencies see PRs included in this release below

Dependency Updates:

• chore(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 #3040
• chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.13 #3038
• chore(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 #3037
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.0 to 1.3.1 #3039

Testing:

• test: fix test breakage caused by external dependency update #3049

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]

v1.21.0 Release 2024-02-29

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.21.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.21.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.21.0-slim

• fix: unpack tar.gz archive with ADD instruction, issue #2409 #2991
• fix: missing or partial support for pattern substition in variable when cache enabled #2968
• feat: add support for no push environment variable #2983
• feat: add skip tls flag for private git context #2854
• feat: add nightly grype vuln scan to kaniko executor image #2970
• feat: add flag to remap registries for any registry mirror #2935
• feat: add --push-ignore-immutable-tag-errors boolean CLI option #2774
• docs: fix broken links and redirects #3009
• docs: add ROADMAP.md to kaniko project #3005
• docs: add documentation for --chown support limitation #3019
• chore(deps): bump google.golang.org/api from 0.165.0 to 0.167.0 #3023
• chore(deps): bump google.golang.org/api from 0.161.0 to 0.165.0 #3016
• chore(deps): bump google-github-actions/auth from 2.1.1 to 2.1.2 #3025
• chore(deps): bump google-github-actions/auth from 2.1.0 to 2.1.1 #3002
• chore(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 #3001
• chore(deps): bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 #3000
• chore(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 #2999
• chore(deps): bump golang from 1.21 to 1.22 in /deploy #2997
• chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.2.1 to 1.3.0 #3013
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.0 to 1.51.1 #3021
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.1 to 1.16.6 #3020
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.15 to 1.16.1 #3014
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.0 to 1.27.4 #3024
• chore(deps): bump cloud.google.com/go/storage from 1.37.0 to 1.38.0 #3015
• chore(deps): bump cloud.google.com/go/storage from 1.36.0 to 1.37.0 #2998
• chore: update MAINTAINERS file with up-to-date information #3003
• chore: update google github-action auth version #3030
• chore: update docker-credential-gcr to use v2 #3026
• refactor: remove artifact upload from nightly-vulnerabiliy-scan.yml #3029

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Alessandro Bitocchi
• Damien Degois
• dependabot[bot]
• JeromeJu
• Kraev Sergei
• Matheus Pimenta
• Oliver Radwell
• Sacha Smart
• schwannden

v1.20.1 Release 2024-02-10

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.20.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.20.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.20.1-slim

• docs: README change only: Clarify why merging into another container is a bad idea [#2965]

• docs: Update clarification for release.md #2957

• chore(deps): bump github.com/moby/buildkit from 0.11.6 to 0.12.5, github.com/docker/docker from 24.0.7+incompatible to 25.0.2+incompatible, and other deps #2995

• chore(deps): bump google.golang.org/api from 0.157.0 to 0.161.0 #2987

• chore(deps): bump github.com/google/go-containerregistry from 0.18.0 to 0.19.0 #2988

• chore(deps): bump sigstore/cosign-installer from 3.3.0 to 3.4.0 #2989

• chore(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 #2981
  (#2965)

• chore(deps): bump google-github-actions/auth from 2.0.1 to 2.1.0 #2972

• chore(deps): bump google-github-actions/setup-gcloud from 2.0.1 to 2.1.0 #2973

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.14 to 1.15.15 #2975

• chore(deps): bump github.com/google/go-containerregistry from 0.17.0 to 0.18.0 #2976

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.11 to 1.15.14 #2966

• chore(deps): bump google.golang.org/api from 0.155.0 to 0.157.0 #2960

• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.26.3 to 1.26.5 #2963

• chore(deps): update go-git/go-git, ProtonMail/go-cryto, and cloudflare/circl deps #2959

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Asher
• Bob Du
• dependabot[bot]
• JeromeJu
• Maximilian Hippler
• timbavtbc

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.20.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.20.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.20.0-slim

• fix: prevent extra snapshot with --use-new-run #2943

• docs: fixed wrong example in README.md #2931

• chore(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0 #2948

• chore(deps): bump google-github-actions/auth from 2.0.0 to 2.0.1 #2947

• chore(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 #2950

• chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 #2951

• chore(deps): replace github.com/Azure/azure-storage-blob-go => github.com/Azure/azure-sdk-for-go/sdk/storage/azblob #2945

• chore(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 #2936

• chore(deps): bump google.golang.org/api from 0.154.0 to 0.155.0 #2937

• chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 #2942

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.9 to 1.15.11 #2939

• chore(deps): bump AdityaGarg8/remove-unwanted-software from 1 to 2 #2940

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.7 to 1.47.8 #2932

• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.26.2 to 1.26.3 #2933

• chore(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.17.0 #2924

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.7 to 1.15.9 #2926

• chore(deps): bump google-github-actions/setup-gcloud from 2.0.0 to 2.0.1 #2927

Huge thank you for this release towards our contributors:

• Asher
• Bob Du
• dependabot[bot]
• Maximilian Hippler

v1.19.2 Release 2023-12-19

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.19.2-slim

v1.19.2 Changes:

• fix: resolve integration test issue issue where container-diff cannot pull OCI images properly from registry #2918
• fix: also update github.com/awslabs/amazon-ecr-credential-helper to resolve issues with AWS ECR authentication (resolves #2882) #2908
• chore: update gcr and acr cred helpers #2910
• chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 #2911
• chore(deps): bump google.golang.org/api from 0.152.0 to 0.154.0 #2912
• chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 #2913
• chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #2914
• chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 #2915

v1.19.1 Changes
Fixes:

• fix: reproducing and fixing warmer issue when layer already cached #2892 #2893
• fix: resolve aws-sdk-go-v2 lib compat issues causing ECR failures #2885

v1.19.0 Changes (feat + fix only, omitting dependency updates)
feat: add a retry with result function (#2837) #2853
feat: add a retry with result function #2837
feat: support https URLs for digest-file #2811
fix: create intermediate directories in COPY with correct uid and gid #2795
fix: makefile container-diff on darwin #2842
fix: print error to stderr instead of stdout before exiting #2823
fix: resolve issue with copy_multistage_test.go and broken ioutil import #2879
fix: resolve warmer memory leak. #2763
fix: skip the /kaniko directory when copying root #2863

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• Patrick Decat

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.19.1-slim

• Reproducing and Fixing #2892 #2893
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.3 to 1.15.7 #2897
• chore(deps): bump google-github-actions/setup-gcloud from 1.1.1 to 2.0.0 #2902
• chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 #2901
• chore(deps): bump github.com/containerd/containerd from 1.7.10 to 1.7.11 #2899
• chore(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 #2898
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.23.5 to 1.24.0 #2896
• chore(deps): bump github.com/containerd/containerd from 1.7.9 to 1.7.10 #2888
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.8 to 1.25.11 #2889
• chore(deps): bump google-github-actions/auth from 1.2.0 to 2.0.0 #2886
• chore(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 #2890
• fix: resolve aws-sdk-go-v2 lib compat issues causing ECR failures #2885
• chore(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 #2891

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• Maxime BOSSARD

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.19.0-slim

• fix: resolve issue with copy_multistage_test.go and broken ioutil import #2879
• Fix warmer memory leak. #2763
• Skip the /kaniko directory when copying root #2863
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.25.5 to 1.25.8 #2875
• fix: Remove references to deprecated io/ioutil pkg #2867
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.14.0 to 1.14.3 #2874
• Create intermediate directories in COPY with correct uid and gid #2795
• chore(deps): bump google-github-actions/auth from 1.1.1 to 1.2.0 #2868
• chore(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 #2871
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.43.0 to 1.44.0 #2872
• chore(deps): bump github.com/containerd/containerd from 1.7.8 to 1.7.9 #2873
• impl: add a retry with result function (#2837) #2853
• chore(deps): bump docker/build-push-action from 5.0.0 to 5.1.0 #2857
• chore(deps): bump golang.org/x/net from 0.17.0 to 0.18.0 #2859
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.13.1 to 1.14.0 #2861
• chore(deps): bump google.golang.org/api from 0.150.0 to 0.151.0 #2862
• fix: makefile container-diff on darwin #2842
• Print error to stderr instead of stdout before exiting #2823
• refactor: rm bool param detectFilesystem in InitIgnoreList #2843
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.22.0 to 1.24.0 #2851
• chore(deps): bump google.golang.org/api from 0.149.0 to 0.150.0 #2845
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.22.1 to 1.22.2 #2846
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.0 to 1.42.1 #2847
• chore(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 #2848
• chore(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0 #2849
• feat: support https URLs for digest-file #2811
• impl: add a retry with result function #2837

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Adrià Garriga-Alonso
• Anna Levenberg
• Anoop S
• dependabot[bot]
• JeromeJu
• Lio李歐
• Manish Giri
• Maxime BOSSARD
• tal66

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.18.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.18.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.18.0-slim

• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.92 to 1.13.1 #2829
• chore(deps): bump google.golang.org/api from 0.148.0 to 0.149.0 #2831
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.2 to 1.42.0 #2828
• chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 #2827
• fix: fix COPY command error due to missing but ignored files #2812
• snapshotter: use syncfs system call #2816
• Fix missing slash #2658
• chore(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.8 #2819
• chore(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 #2818
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.91 to 1.11.92 #2814
• chore(deps): bump google.golang.org/api from 0.145.0 to 0.148.0 #2810

Huge thank you for this release towards our contributors:

• dependabot[bot]
• Paolo Di Tommaso
• Quan Zhang
• zhouhaibing089

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.17.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.17.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.17.0-slim

• docs: fix readme sample typo #2792
• fix: remove log line from listpullreqs.go and additional release.sh fixes #2790
• chore(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 #2798
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.87 to 1.11.91 #2805
• chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 #2797
• chore(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 #2796
• chore(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 #2791
• fix: resolve issue with integration tests where lack of disk space caused k3s issues #2804
• test: add test cases and docString for regex in COPY command #2773
• feat: add automated way of cutting releases w/ generation of CHANGELOG.md {{PULL_REQUESTS}} Makefile changes #2786
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.0 to 1.40.1 #2780
• docs: Update designdoc.md with correct link to skaffold repository #2775
• chore(deps): bump google.golang.org/api from 0.143.0 to 0.145.0 #2778
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.42 to 1.18.44 #2777
• chore(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 #2781
• refactor: Remove fallbackToUID bool option from Kaniko code #2767
• chore(deps): bump github.com/otiai10/copy from 1.12.0 to 1.14.0 #2772
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.86 to 1.11.87 #2770
• chore(deps): bump google.golang.org/api from 0.142.0 to 0.143.0 #2769
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.39.0 to 1.40.0 #2771
• chore(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 #2758
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.83 to 1.11.86 #2757
• chore(deps): bump google.golang.org/api from 0.141.0 to 0.142.0 #2756

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• JeromeJu
• Vishal Khot
• vivekkoya
• zhangzhiqiangcs

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.16.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.16.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.16.0-slim

• fix: make it so release.sh script doesn't output duplicate change PRs #2735
• chore: update function names to be correct and representative of functionality #2720
• chore(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 #2749
• chore(deps): bump google.golang.org/api from 0.140.0 to 0.141.0 #2748
• chore(deps): bump github.com/containerd/containerd from 1.7.5 to 1.7.6 #2750
• fix: ensure images layers correspond with the image media type #2719
• chore(deps): bump github.com/google/slowjam from 1.0.1 to 1.1.0 #2745
• chore(deps): bump docker/setup-buildx-action from 2.10.0 to 3.0.0 #2743
• chore(deps): bump github.com/go-git/go-billy/v5 from 5.4.1 to 5.5.0 #2746
• chore(deps): bump google.golang.org/api from 0.138.0 to 0.140.0 #2747
• chore(deps): bump docker/setup-qemu-action from 2.2.0 to 3.0.0 #2744
• chore(deps): bump docker/build-push-action from 4.2.1 to 5.0.0 #2742
• chore(deps): bump google.golang.org/api from 0.138.0 to 0.139.0 #2741
• chore(deps): bump cloud.google.com/go/storage from 1.32.0 to 1.33.0 #2740
• chore(deps): bump docker/build-push-action from 4.1.1 to 4.2.1 #2739
• chore(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 #2732
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.81 to 1.11.83 #2733
• chore(deps): bump golang.org/x/net from 0.14.0 to 0.15.0 #2734
• chore(deps): bump github.com/containerd/containerd from 1.7.3 to 1.7.5 #2723
• chore(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 #2727
• chore(deps): bump docker/setup-buildx-action from 2.9.1 to 2.10.0 #2726
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 #2724
• chore(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 #2722
• chore: unnecessary use of fmt.Sprintf #2717
• fix function name on comment #2707
• Avoid returning the UID when resolving the GIDs. #2689

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• Diego Gonzalez
• geekvest
• guangwu
• Logan Price

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.15.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.15.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.15.0-slim

• Ensure New Layers Match Image Media Type #2700
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.79 to 1.11.81 #2702
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.4 to 1.38.5 #2706
• chore(deps): bump google.golang.org/api from 0.136.0 to 0.138.0 #2704
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.20.3 to 1.21.0 #2703
• docs: fix --use-new-run typo #2698
• docs: add more information regarding --use-new-run #2687
• chore(deps): bump cloud.google.com/go/storage from 1.31.0 to 1.32.0 #2692
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.77 to 1.11.79 #2690
• Fix: Change condition for the behaviour when --no-push=true without setting --destinations #2676

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]
• JeromeJu
• Logan Price

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.14.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.14.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.14.0-slim

• chore(deps): bump actions/setup-go from 4.0.1 to 4.1.0 #2672
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.29 to 1.18.31 #2651
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.31 to 1.18.33 #2680
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.73 to 1.11.75 #2650
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.75 to 1.11.77 #2679
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.37.0 to 1.37.1 #2648
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.0 to 1.38.2 #2673
• chore(deps): bump github.com/containerd/containerd from 1.7.2 to 1.7.3 #2644
• chore(deps): bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 #2662
• chore(deps): bump golang from 1.20 to 1.21 in /deploy #2682
• chore(deps): bump golang.org/x/net from 0.12.0 to 0.14.0 #2663
• chore(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 #2661
• chore(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 #2659
• chore(deps): bump google.golang.org/api from 0.133.0 to 0.134.0 #2645
• chore(deps): bump google.golang.org/api from 0.134.0 to 0.136.0 #2681
• docs: add enforcement section to code-of-conduct.md #2654
• feat: added skip-push-permission flag #2657
• fix: resolve issue where CI env was failing due to dependency change #2668
• refactor: Avoid redundant calls to filepath.Clean #2652

Huge thank you for this release towards our contributors:

• Aaron Lehmann
• Aaron Prindle
• dependabot[bot]
• Julian

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.13.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.13.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.13.0-slim

• chore(deps): bump cloud.google.com/go/storage from 1.30.1 to 1.31.0 #2611
• chore(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 #2606
• chore(deps): bump docker/setup-buildx-action from 2.8.0 to 2.9.1 #2626
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.18.1 to 1.19.0 #2623
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.28 to 1.18.29 #2638
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.70 to 1.11.71 #2610
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.71 to 1.11.72 #2624
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.72 to 1.11.73 #2639
• chore(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 #2633
• chore(deps): bump golang.org/x/oauth2 from 0.9.0 to 0.10.0 #2617
• chore(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 #2613
• chore(deps): bump google.golang.org/api from 0.128.0 to 0.129.0 #2609
• chore(deps): bump google.golang.org/api from 0.129.0 to 0.131.0 #2625
• chore(deps): bump google.golang.org/api from 0.131.0 to 0.132.0 #2634
• chore(deps): bump google.golang.org/api from 0.132.0 to 0.133.0 #2636
• chore(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 #2607
• feat: Allows to disable the fallback to the default registry on image pull #2637

Huge thank you for this release towards our contributors:

• dependabot[bot]
• Fernando Giannetti

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.12.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.12.1-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.12.1-slim

The warmer images are available at:

gcr.io/kaniko-project/warmer:v1.12.1
gcr.io/kaniko-project/warmer:latest

Fixes:

• fix: resolve issue where warmer CLI always validated optional arg -> breakage for majority of users #2603

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.12.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.12.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.12.0-slim

• chore: add debug line to RedoHasher #2591
• chore(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 #2557
• chore(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 #2580
• chore(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 #2555
• chore(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 #2579
• chore(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 #2556
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.18.25 to 1.18.27 #2581
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.67 to 1.11.70 #2597
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.33.1 to 1.35.0 #2582
• chore(deps): bump github.com/otiai10/copy from 1.11.0 to 1.12.0 #2598
• chore(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 #2578
• chore(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 #2573
• chore(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 #2564
• chore(deps): bump google.golang.org/api from 0.125.0 to 0
• chore(deps): bump google.golang.org/api from 0.126.0 to 0.127.0 #2565
• chore(deps): bump google.golang.org/api from 0.127.0 to 0.128.0 #2596
• chore(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 #2595
• Don't write whiteout files to directories that were replaced with files or links #2590
• feat: cache dockerfile images through warmer #2499
• Fix fs_util tests failing on systems with /tmp mountpoint #2583
• Fix multistage caching with COPY --from #2559
• fix: hack/boilerplate.sh: fix error handling and use python3 #2587
• fix: hack/install_golint.sh: allow installation on linux/arm64 #2585
• fix: install tools using go.mod for versioning #2562
• fix: Refactors IsSrcRemoteFileURL to only validate the URL is valid #2563
• fix: update cache-ttl help text to be correct regarding unit of duration #2568
• fix: valdiateFlags typo fixed #2554

Huge thank you for this release towards our contributors:

• Aaron Prindle
• alexezio
• Andreas Fleig
• Angus Williams
• dependabot[bot]
• Kraev Sergei
• Liam Newman
• Zigelboim Misha

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.11.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.11.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.11.0-slim

• chore: run go mod tidy #2532
• chore(deps): bump actions/setup-go from 3.2.0 to 4.0.1 #2517
• chore(deps): bump cloud.google.com/go/storage from 1.29.0 to 1.30.1 #2439
• chore(deps): bump docker/setup-buildx-action from 2.0.0 to 2.5.0 #2519
• chore(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1 #2534
• chore(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2 #2542
• chore(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.7.0 #2528
• chore(deps): bump github.com/google/go-containerregistry from 0.15.1 to 0.15.2 #2546
• chore(deps): bump github.com/moby/buildkit from 0.11.4 to 0.11.6 #2520
• chore(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 #2545
• chore(deps): bump google.golang.org/api from 0.121.0 to 0.124.0 #2535
• chore(deps): bump google.golang.org/api from 0.124.0 to 0.125.0 #2544
• chore(deps): bump sigstore/cosign-installer from 3.0.3 to 3.0.5 #2518
• chore(deps): update docker-credential-* binaries in kaniko images #2531
• chore(deps): Update google-github-actions/setup-gcloud to v1.1.1 #2548
• chore(deps): use aws-sdk-go-v2 #2550
• docs: Add guide on creating multi-arch manifests #2306
• docs: update changelog to correct old release tags #2536
• fix: Deduplicate paths while saving files for later use #2504
• fix: Download docker-credential-gcr from release artifacts #2540
• refactor: Use a multistage image to remove all redundancies on Dockerfiles #2547
• test: only build for linux/amd64 on PRs #2460

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Bob Du
• dependabot[bot]
• Fedor V
• Ferran Vidal
• Jason Hall
• Jasper Ben Orschulko