• CRI-O v1.31.8
  • Downloads
  • Changelog since v1.31.7
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.31.8

The release notes have been generated for the commit range
v1.31.7...v1.31.8 on Fri, 02 May 2025 10:06:51 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.31.8.tar.gz
  • cri-o.amd64.v1.31.8.tar.gz.sha256sum
  • cri-o.amd64.v1.31.8.tar.gz.sig
  • cri-o.amd64.v1.31.8.tar.gz.cert
  • cri-o.amd64.v1.31.8.tar.gz.spdx
  • cri-o.amd64.v1.31.8.tar.gz.spdx.sig
  • cri-o.amd64.v1.31.8.tar.gz.spdx.cert
• cri-o.arm64.v1.31.8.tar.gz
  • cri-o.arm64.v1.31.8.tar.gz.sha256sum
  • cri-o.arm64.v1.31.8.tar.gz.sig
  • cri-o.arm64.v1.31.8.tar.gz.cert
  • cri-o.arm64.v1.31.8.tar.gz.spdx
  • cri-o.arm64.v1.31.8.tar.gz.spdx.sig
  • cri-o.arm64.v1.31.8.tar.gz.spdx.cert
• cri-o.ppc64le.v1.31.8.tar.gz
  • cri-o.ppc64le.v1.31.8.tar.gz.sha256sum
  • cri-o.ppc64le.v1.31.8.tar.gz.sig
  • cri-o.ppc64le.v1.31.8.tar.gz.cert
  • cri-o.ppc64le.v1.31.8.tar.gz.spdx
  • cri-o.ppc64le.v1.31.8.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.31.8.tar.gz.spdx.cert
• cri-o.s390x.v1.31.8.tar.gz
  • cri-o.s390x.v1.31.8.tar.gz.sha256sum
  • cri-o.s390x.v1.31.8.tar.gz.sig
  • cri-o.s390x.v1.31.8.tar.gz.cert
  • cri-o.s390x.v1.31.8.tar.gz.spdx
  • cri-o.s390x.v1.31.8.tar.gz.spdx.sig
  • cri-o.s390x.v1.31.8.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.8.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.8 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.8 \
    --signature cri-o.amd64.v1.31.8.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.8.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.8.tar.gz
> bom validate -e cri-o.amd64.v1.31.8.tar.gz.spdx -d cri-o

Changelog since v1.31.7

Changes by Kind

Uncategorized

• Prevent multiple crio wipes on reboot (#9137, @PannagaRao)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

• CRI-O v1.30.13
  • Downloads
  • Changelog since v1.30.12
    • Changes by Kind
      • Bug or Regression
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.30.13

The release notes have been generated for the commit range
v1.30.12...v1.30.13 on Fri, 02 May 2025 10:06:54 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.30.13.tar.gz
  • cri-o.amd64.v1.30.13.tar.gz.sha256sum
  • cri-o.amd64.v1.30.13.tar.gz.sig
  • cri-o.amd64.v1.30.13.tar.gz.cert
  • cri-o.amd64.v1.30.13.tar.gz.spdx
  • cri-o.amd64.v1.30.13.tar.gz.spdx.sig
  • cri-o.amd64.v1.30.13.tar.gz.spdx.cert
• cri-o.arm64.v1.30.13.tar.gz
  • cri-o.arm64.v1.30.13.tar.gz.sha256sum
  • cri-o.arm64.v1.30.13.tar.gz.sig
  • cri-o.arm64.v1.30.13.tar.gz.cert
  • cri-o.arm64.v1.30.13.tar.gz.spdx
  • cri-o.arm64.v1.30.13.tar.gz.spdx.sig
  • cri-o.arm64.v1.30.13.tar.gz.spdx.cert
• cri-o.ppc64le.v1.30.13.tar.gz
  • cri-o.ppc64le.v1.30.13.tar.gz.sha256sum
  • cri-o.ppc64le.v1.30.13.tar.gz.sig
  • cri-o.ppc64le.v1.30.13.tar.gz.cert
  • cri-o.ppc64le.v1.30.13.tar.gz.spdx
  • cri-o.ppc64le.v1.30.13.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.30.13.tar.gz.spdx.cert
• cri-o.s390x.v1.30.13.tar.gz
  • cri-o.s390x.v1.30.13.tar.gz.sha256sum
  • cri-o.s390x.v1.30.13.tar.gz.sig
  • cri-o.s390x.v1.30.13.tar.gz.cert
  • cri-o.s390x.v1.30.13.tar.gz.spdx
  • cri-o.s390x.v1.30.13.tar.gz.spdx.sig
  • cri-o.s390x.v1.30.13.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.30.13.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.30.13 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.30.13 \
    --signature cri-o.amd64.v1.30.13.tar.gz.sig \
    --certificate cri-o.amd64.v1.30.13.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.30.13.tar.gz
> bom validate -e cri-o.amd64.v1.30.13.tar.gz.spdx -d cri-o

Changelog since v1.30.12

Changes by Kind

Bug or Regression

• Prevent multiple crio wipes on reboot (#9148, @PannagaRao)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

• CRI-O v1.32.3
  • Downloads
  • Changelog since v1.32.2
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.32.3

The release notes have been generated for the commit range
v1.32.2...v1.32.3 on Wed, 02 Apr 2025 00:23:32 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.32.3.tar.gz
  • cri-o.amd64.v1.32.3.tar.gz.sha256sum
  • cri-o.amd64.v1.32.3.tar.gz.sig
  • cri-o.amd64.v1.32.3.tar.gz.cert
  • cri-o.amd64.v1.32.3.tar.gz.spdx
  • cri-o.amd64.v1.32.3.tar.gz.spdx.sig
  • cri-o.amd64.v1.32.3.tar.gz.spdx.cert
• cri-o.arm64.v1.32.3.tar.gz
  • cri-o.arm64.v1.32.3.tar.gz.sha256sum
  • cri-o.arm64.v1.32.3.tar.gz.sig
  • cri-o.arm64.v1.32.3.tar.gz.cert
  • cri-o.arm64.v1.32.3.tar.gz.spdx
  • cri-o.arm64.v1.32.3.tar.gz.spdx.sig
  • cri-o.arm64.v1.32.3.tar.gz.spdx.cert
• cri-o.ppc64le.v1.32.3.tar.gz
  • cri-o.ppc64le.v1.32.3.tar.gz.sha256sum
  • cri-o.ppc64le.v1.32.3.tar.gz.sig
  • cri-o.ppc64le.v1.32.3.tar.gz.cert
  • cri-o.ppc64le.v1.32.3.tar.gz.spdx
  • cri-o.ppc64le.v1.32.3.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.32.3.tar.gz.spdx.cert
• cri-o.s390x.v1.32.3.tar.gz
  • cri-o.s390x.v1.32.3.tar.gz.sha256sum
  • cri-o.s390x.v1.32.3.tar.gz.sig
  • cri-o.s390x.v1.32.3.tar.gz.cert
  • cri-o.s390x.v1.32.3.tar.gz.spdx
  • cri-o.s390x.v1.32.3.tar.gz.spdx.sig
  • cri-o.s390x.v1.32.3.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.3.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.3 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.3 \
    --signature cri-o.amd64.v1.32.3.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.3.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.3.tar.gz
> bom validate -e cri-o.amd64.v1.32.3.tar.gz.spdx -d cri-o

Changelog since v1.32.2

Changes by Kind

Uncategorized

• Prevent multiple crio wipes on reboot (#9071, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/containers/storage: v1.57.1 → v1.57.2

Removed

Nothing has changed.

• CRI-O v1.31.7
  • Downloads
  • Changelog since v1.31.6
    • Changes by Kind
      • Other (Cleanup or Flake)
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.31.7

The release notes have been generated for the commit range
v1.31.6...v1.31.7 on Wed, 02 Apr 2025 00:23:35 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.31.7.tar.gz
  • cri-o.amd64.v1.31.7.tar.gz.sha256sum
  • cri-o.amd64.v1.31.7.tar.gz.sig
  • cri-o.amd64.v1.31.7.tar.gz.cert
  • cri-o.amd64.v1.31.7.tar.gz.spdx
  • cri-o.amd64.v1.31.7.tar.gz.spdx.sig
  • cri-o.amd64.v1.31.7.tar.gz.spdx.cert
• cri-o.arm64.v1.31.7.tar.gz
  • cri-o.arm64.v1.31.7.tar.gz.sha256sum
  • cri-o.arm64.v1.31.7.tar.gz.sig
  • cri-o.arm64.v1.31.7.tar.gz.cert
  • cri-o.arm64.v1.31.7.tar.gz.spdx
  • cri-o.arm64.v1.31.7.tar.gz.spdx.sig
  • cri-o.arm64.v1.31.7.tar.gz.spdx.cert
• cri-o.ppc64le.v1.31.7.tar.gz
  • cri-o.ppc64le.v1.31.7.tar.gz.sha256sum
  • cri-o.ppc64le.v1.31.7.tar.gz.sig
  • cri-o.ppc64le.v1.31.7.tar.gz.cert
  • cri-o.ppc64le.v1.31.7.tar.gz.spdx
  • cri-o.ppc64le.v1.31.7.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.31.7.tar.gz.spdx.cert
• cri-o.s390x.v1.31.7.tar.gz
  • cri-o.s390x.v1.31.7.tar.gz.sha256sum
  • cri-o.s390x.v1.31.7.tar.gz.sig
  • cri-o.s390x.v1.31.7.tar.gz.cert
  • cri-o.s390x.v1.31.7.tar.gz.spdx
  • cri-o.s390x.v1.31.7.tar.gz.spdx.sig
  • cri-o.s390x.v1.31.7.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.7.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.7 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.7 \
    --signature cri-o.amd64.v1.31.7.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.7.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.7.tar.gz
> bom validate -e cri-o.amd64.v1.31.7.tar.gz.spdx -d cri-o

Changelog since v1.31.6

Changes by Kind

Other (Cleanup or Flake)

• Fixed bug when trying to pull certain docker schema 1 images in CRI-O. (#9072, @saschagrunert)

Dependencies

Added

Nothing has changed.

Changed

• github.com/containers/storage: a030a44 → 028e88d

Removed

Nothing has changed.

• CRI-O v1.30.12
  • Downloads
  • Changelog since v1.30.11
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.30.12

The release notes have been generated for the commit range
v1.30.11...v1.30.12 on Wed, 02 Apr 2025 00:23:41 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.30.12.tar.gz
  • cri-o.amd64.v1.30.12.tar.gz.sha256sum
  • cri-o.amd64.v1.30.12.tar.gz.sig
  • cri-o.amd64.v1.30.12.tar.gz.cert
  • cri-o.amd64.v1.30.12.tar.gz.spdx
  • cri-o.amd64.v1.30.12.tar.gz.spdx.sig
  • cri-o.amd64.v1.30.12.tar.gz.spdx.cert
• cri-o.arm64.v1.30.12.tar.gz
  • cri-o.arm64.v1.30.12.tar.gz.sha256sum
  • cri-o.arm64.v1.30.12.tar.gz.sig
  • cri-o.arm64.v1.30.12.tar.gz.cert
  • cri-o.arm64.v1.30.12.tar.gz.spdx
  • cri-o.arm64.v1.30.12.tar.gz.spdx.sig
  • cri-o.arm64.v1.30.12.tar.gz.spdx.cert
• cri-o.ppc64le.v1.30.12.tar.gz
  • cri-o.ppc64le.v1.30.12.tar.gz.sha256sum
  • cri-o.ppc64le.v1.30.12.tar.gz.sig
  • cri-o.ppc64le.v1.30.12.tar.gz.cert
  • cri-o.ppc64le.v1.30.12.tar.gz.spdx
  • cri-o.ppc64le.v1.30.12.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.30.12.tar.gz.spdx.cert
• cri-o.s390x.v1.30.12.tar.gz
  • cri-o.s390x.v1.30.12.tar.gz.sha256sum
  • cri-o.s390x.v1.30.12.tar.gz.sig
  • cri-o.s390x.v1.30.12.tar.gz.cert
  • cri-o.s390x.v1.30.12.tar.gz.spdx
  • cri-o.s390x.v1.30.12.tar.gz.spdx.sig
  • cri-o.s390x.v1.30.12.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.30.12.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.30.12 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.30.12 \
    --signature cri-o.amd64.v1.30.12.tar.gz.sig \
    --certificate cri-o.amd64.v1.30.12.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.30.12.tar.gz
> bom validate -e cri-o.amd64.v1.30.12.tar.gz.spdx -d cri-o

Changelog since v1.30.11

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

• CRI-O v1.32.2
  • Downloads
  • Changelog since v1.32.1
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.32.2

The release notes have been generated for the commit range
v1.32.1...v1.32.2 on Mon, 03 Mar 2025 00:23:07 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.32.2.tar.gz
  • cri-o.amd64.v1.32.2.tar.gz.sha256sum
  • cri-o.amd64.v1.32.2.tar.gz.sig
  • cri-o.amd64.v1.32.2.tar.gz.cert
  • cri-o.amd64.v1.32.2.tar.gz.spdx
  • cri-o.amd64.v1.32.2.tar.gz.spdx.sig
  • cri-o.amd64.v1.32.2.tar.gz.spdx.cert
• cri-o.arm64.v1.32.2.tar.gz
  • cri-o.arm64.v1.32.2.tar.gz.sha256sum
  • cri-o.arm64.v1.32.2.tar.gz.sig
  • cri-o.arm64.v1.32.2.tar.gz.cert
  • cri-o.arm64.v1.32.2.tar.gz.spdx
  • cri-o.arm64.v1.32.2.tar.gz.spdx.sig
  • cri-o.arm64.v1.32.2.tar.gz.spdx.cert
• cri-o.ppc64le.v1.32.2.tar.gz
  • cri-o.ppc64le.v1.32.2.tar.gz.sha256sum
  • cri-o.ppc64le.v1.32.2.tar.gz.sig
  • cri-o.ppc64le.v1.32.2.tar.gz.cert
  • cri-o.ppc64le.v1.32.2.tar.gz.spdx
  • cri-o.ppc64le.v1.32.2.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.32.2.tar.gz.spdx.cert
• cri-o.s390x.v1.32.2.tar.gz
  • cri-o.s390x.v1.32.2.tar.gz.sha256sum
  • cri-o.s390x.v1.32.2.tar.gz.sig
  • cri-o.s390x.v1.32.2.tar.gz.cert
  • cri-o.s390x.v1.32.2.tar.gz.spdx
  • cri-o.s390x.v1.32.2.tar.gz.spdx.sig
  • cri-o.s390x.v1.32.2.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.2.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.2 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.2 \
    --signature cri-o.amd64.v1.32.2.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.2.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.2.tar.gz
> bom validate -e cri-o.amd64.v1.32.2.tar.gz.spdx -d cri-o

Changelog since v1.32.1

Changes by Kind

Uncategorized

• Fixed context cancellation when image pull progress timeout is 0 (--pull-progress-timeout=0 / pull_progress_timeout=0) (#9010, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

• github.com/go-jose/go-jose/v4: v4.0.4 → v4.0.5
• golang.org/x/crypto: v0.29.0 → v0.32.0
• golang.org/x/sync: v0.9.0 → v0.10.0
• golang.org/x/sys: v0.28.0 → v0.29.0
• golang.org/x/term: v0.26.0 → v0.28.0
• golang.org/x/text: v0.20.0 → v0.21.0
• tags.cncf.io/container-device-interface: v0.8.0 → v0.8.1

Removed

Nothing has changed.

• CRI-O v1.31.6
  • Downloads
  • Changelog since v1.31.5
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.31.6

The release notes have been generated for the commit range
v1.31.5...v1.31.6 on Mon, 03 Mar 2025 00:23:05 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.31.6.tar.gz
  • cri-o.amd64.v1.31.6.tar.gz.sha256sum
  • cri-o.amd64.v1.31.6.tar.gz.sig
  • cri-o.amd64.v1.31.6.tar.gz.cert
  • cri-o.amd64.v1.31.6.tar.gz.spdx
  • cri-o.amd64.v1.31.6.tar.gz.spdx.sig
  • cri-o.amd64.v1.31.6.tar.gz.spdx.cert
• cri-o.arm64.v1.31.6.tar.gz
  • cri-o.arm64.v1.31.6.tar.gz.sha256sum
  • cri-o.arm64.v1.31.6.tar.gz.sig
  • cri-o.arm64.v1.31.6.tar.gz.cert
  • cri-o.arm64.v1.31.6.tar.gz.spdx
  • cri-o.arm64.v1.31.6.tar.gz.spdx.sig
  • cri-o.arm64.v1.31.6.tar.gz.spdx.cert
• cri-o.ppc64le.v1.31.6.tar.gz
  • cri-o.ppc64le.v1.31.6.tar.gz.sha256sum
  • cri-o.ppc64le.v1.31.6.tar.gz.sig
  • cri-o.ppc64le.v1.31.6.tar.gz.cert
  • cri-o.ppc64le.v1.31.6.tar.gz.spdx
  • cri-o.ppc64le.v1.31.6.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.31.6.tar.gz.spdx.cert
• cri-o.s390x.v1.31.6.tar.gz
  • cri-o.s390x.v1.31.6.tar.gz.sha256sum
  • cri-o.s390x.v1.31.6.tar.gz.sig
  • cri-o.s390x.v1.31.6.tar.gz.cert
  • cri-o.s390x.v1.31.6.tar.gz.spdx
  • cri-o.s390x.v1.31.6.tar.gz.spdx.sig
  • cri-o.s390x.v1.31.6.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.6.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.6 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.6 \
    --signature cri-o.amd64.v1.31.6.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.6.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.6.tar.gz
> bom validate -e cri-o.amd64.v1.31.6.tar.gz.spdx -d cri-o

Changelog since v1.31.5

Changes by Kind

Uncategorized

• Fix log rotation failure during pod termination (#8948, @openshift-cherrypick-robot)
• Fixed context cancellation when image pull progress timeout is 0 (--pull-progress-timeout=0 / pull_progress_timeout=0) (#9009, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

• CRI-O v1.30.11
  • Downloads
  • Changelog since v1.30.10
    • Changes by Kind
      • Feature
      • Bug or Regression
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.30.11

The release notes have been generated for the commit range
v1.30.10...v1.30.11 on Mon, 03 Mar 2025 00:23:03 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.30.11.tar.gz
  • cri-o.amd64.v1.30.11.tar.gz.sha256sum
  • cri-o.amd64.v1.30.11.tar.gz.sig
  • cri-o.amd64.v1.30.11.tar.gz.cert
  • cri-o.amd64.v1.30.11.tar.gz.spdx
  • cri-o.amd64.v1.30.11.tar.gz.spdx.sig
  • cri-o.amd64.v1.30.11.tar.gz.spdx.cert
• cri-o.arm64.v1.30.11.tar.gz
  • cri-o.arm64.v1.30.11.tar.gz.sha256sum
  • cri-o.arm64.v1.30.11.tar.gz.sig
  • cri-o.arm64.v1.30.11.tar.gz.cert
  • cri-o.arm64.v1.30.11.tar.gz.spdx
  • cri-o.arm64.v1.30.11.tar.gz.spdx.sig
  • cri-o.arm64.v1.30.11.tar.gz.spdx.cert
• cri-o.ppc64le.v1.30.11.tar.gz
  • cri-o.ppc64le.v1.30.11.tar.gz.sha256sum
  • cri-o.ppc64le.v1.30.11.tar.gz.sig
  • cri-o.ppc64le.v1.30.11.tar.gz.cert
  • cri-o.ppc64le.v1.30.11.tar.gz.spdx
  • cri-o.ppc64le.v1.30.11.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.30.11.tar.gz.spdx.cert
• cri-o.s390x.v1.30.11.tar.gz
  • cri-o.s390x.v1.30.11.tar.gz.sha256sum
  • cri-o.s390x.v1.30.11.tar.gz.sig
  • cri-o.s390x.v1.30.11.tar.gz.cert
  • cri-o.s390x.v1.30.11.tar.gz.spdx
  • cri-o.s390x.v1.30.11.tar.gz.spdx.sig
  • cri-o.s390x.v1.30.11.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.30.11.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.30.11 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.30.11 \
    --signature cri-o.amd64.v1.30.11.tar.gz.sig \
    --certificate cri-o.amd64.v1.30.11.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.30.11.tar.gz
> bom validate -e cri-o.amd64.v1.30.11.tar.gz.spdx -d cri-o

Changelog since v1.30.10

Changes by Kind

Feature

• Backported the option pull_progress_timeout to allow for increasing/disabling the context cancellation on image pull requests. (#9012, @robbmanes)

Bug or Regression

• Fix log rotation failure during pod termination (#8949, @bitoku)

Dependencies

Added

Nothing has changed.

Changed

• github.com/containers/image/v5: f8d6234 → 64440ba
• github.com/containers/storage: 75435e4 → e1bc50e

Removed

Nothing has changed.

• CRI-O v1.32.1
  • Downloads
  • Changelog since v1.32.0
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.32.1

The release notes have been generated for the commit range
v1.32.0...v1.32.1 on Tue, 04 Feb 2025 00:21:01 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.32.1.tar.gz
  • cri-o.amd64.v1.32.1.tar.gz.sha256sum
  • cri-o.amd64.v1.32.1.tar.gz.sig
  • cri-o.amd64.v1.32.1.tar.gz.cert
  • cri-o.amd64.v1.32.1.tar.gz.spdx
  • cri-o.amd64.v1.32.1.tar.gz.spdx.sig
  • cri-o.amd64.v1.32.1.tar.gz.spdx.cert
• cri-o.arm64.v1.32.1.tar.gz
  • cri-o.arm64.v1.32.1.tar.gz.sha256sum
  • cri-o.arm64.v1.32.1.tar.gz.sig
  • cri-o.arm64.v1.32.1.tar.gz.cert
  • cri-o.arm64.v1.32.1.tar.gz.spdx
  • cri-o.arm64.v1.32.1.tar.gz.spdx.sig
  • cri-o.arm64.v1.32.1.tar.gz.spdx.cert
• cri-o.ppc64le.v1.32.1.tar.gz
  • cri-o.ppc64le.v1.32.1.tar.gz.sha256sum
  • cri-o.ppc64le.v1.32.1.tar.gz.sig
  • cri-o.ppc64le.v1.32.1.tar.gz.cert
  • cri-o.ppc64le.v1.32.1.tar.gz.spdx
  • cri-o.ppc64le.v1.32.1.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.32.1.tar.gz.spdx.cert
• cri-o.s390x.v1.32.1.tar.gz
  • cri-o.s390x.v1.32.1.tar.gz.sha256sum
  • cri-o.s390x.v1.32.1.tar.gz.sig
  • cri-o.s390x.v1.32.1.tar.gz.cert
  • cri-o.s390x.v1.32.1.tar.gz.spdx
  • cri-o.s390x.v1.32.1.tar.gz.spdx.sig
  • cri-o.s390x.v1.32.1.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.32.1.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.32.1 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.32.1 \
    --signature cri-o.amd64.v1.32.1.tar.gz.sig \
    --certificate cri-o.amd64.v1.32.1.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.32.1.tar.gz
> bom validate -e cri-o.amd64.v1.32.1.tar.gz.spdx -d cri-o

Changelog since v1.32.0

Changes by Kind

Uncategorized

• Decouple CNI plugin initialization from CRI-O health checks. (#8932, @openshift-cherrypick-robot)
• Fix a panic when default_annotations are used (#8886, @openshift-cherrypick-robot)
• Fix log rotation failure during pod termination (#8947, @openshift-cherrypick-robot)
• Fix path traversal in CRI-O log handling (#8976, @sohankunkerkar)

Dependencies

Added

Nothing has changed.

Changed

• github.com/containers/image/v5: v5.33.0 → 8b4e15e
• github.com/containers/storage: v1.56.0 → b78c0cb
• github.com/urfave/cli: v1.22.15 → v1.22.16
• github.com/vbatts/tar-split: v0.11.6 → v0.11.7

Removed

Nothing has changed.

• CRI-O v1.31.5
  • Downloads
  • Changelog since v1.31.4
    • Changes by Kind
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.31.5

The release notes have been generated for the commit range
v1.31.4...v1.31.5 on Tue, 04 Feb 2025 00:21:02 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.v1.31.5.tar.gz
  • cri-o.amd64.v1.31.5.tar.gz.sha256sum
  • cri-o.amd64.v1.31.5.tar.gz.sig
  • cri-o.amd64.v1.31.5.tar.gz.cert
  • cri-o.amd64.v1.31.5.tar.gz.spdx
  • cri-o.amd64.v1.31.5.tar.gz.spdx.sig
  • cri-o.amd64.v1.31.5.tar.gz.spdx.cert
• cri-o.arm64.v1.31.5.tar.gz
  • cri-o.arm64.v1.31.5.tar.gz.sha256sum
  • cri-o.arm64.v1.31.5.tar.gz.sig
  • cri-o.arm64.v1.31.5.tar.gz.cert
  • cri-o.arm64.v1.31.5.tar.gz.spdx
  • cri-o.arm64.v1.31.5.tar.gz.spdx.sig
  • cri-o.arm64.v1.31.5.tar.gz.spdx.cert
• cri-o.ppc64le.v1.31.5.tar.gz
  • cri-o.ppc64le.v1.31.5.tar.gz.sha256sum
  • cri-o.ppc64le.v1.31.5.tar.gz.sig
  • cri-o.ppc64le.v1.31.5.tar.gz.cert
  • cri-o.ppc64le.v1.31.5.tar.gz.spdx
  • cri-o.ppc64le.v1.31.5.tar.gz.spdx.sig
  • cri-o.ppc64le.v1.31.5.tar.gz.spdx.cert
• cri-o.s390x.v1.31.5.tar.gz
  • cri-o.s390x.v1.31.5.tar.gz.sha256sum
  • cri-o.s390x.v1.31.5.tar.gz.sig
  • cri-o.s390x.v1.31.5.tar.gz.cert
  • cri-o.s390x.v1.31.5.tar.gz.spdx
  • cri-o.s390x.v1.31.5.tar.gz.spdx.sig
  • cri-o.s390x.v1.31.5.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.31.5.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.31.5 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.31.5 \
    --signature cri-o.amd64.v1.31.5.tar.gz.sig \
    --certificate cri-o.amd64.v1.31.5.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.31.5.tar.gz
> bom validate -e cri-o.amd64.v1.31.5.tar.gz.spdx -d cri-o

Changelog since v1.31.4

Changes by Kind

Uncategorized

• Fix path traversal in CRI-O log handling (#8977, @sohankunkerkar)

Dependencies

Added

Nothing has changed.

Changed

• github.com/containers/image/v5: v5.32.2 → 0c20855
• github.com/containers/storage: a868bc0 → a030a44
• github.com/cpuguy83/go-md2man/v2: v2.0.4 → v2.0.5
• github.com/urfave/cli: v1.22.14 → v1.22.16
• github.com/vbatts/tar-split: v0.11.5 → v0.11.7
• golang.org/x/sys: v0.24.0 → v0.26.0

Removed

Nothing has changed.