Paul Holzinger
c4a995c9ae
Merge pull request #29153 from podmanbot/bump-5.8.6-dev
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
Bump Podman to v5.8.6-dev
2026-07-13 14:58:15 +02:00
mheon
0cd8b90b13
Bump Podman to v5.8.6-dev
...
Signed-off-by: mheon <7735048+mheon@users.noreply.github.com>
2026-07-08 18:37:16 +00:00
Paul Holzinger
6265d8f35b
Merge pull request #29150 from mheon/bump_585
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
Bump to v5.8.5
2026-07-08 20:36:29 +02:00
Matt Heon
6d48b6f12f
Bump to v5.8.5
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-07-08 12:19:43 -04:00
Matt Heon
9d8a554665
Release notes for v5.8.5
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-07-08 12:19:26 -04:00
Matt Heon
e2727ad94e
Merge pull request #29144 from Luap99/v5.8
...
[v5.8] Backports for 5.8.5
2026-07-08 12:15:29 -04:00
Christophe Fergeau
172227f39b
macos: Use latest vfkit release in installer
...
Signed-off-by: Christophe Fergeau <cfergeau@redhat.com>
(cherry picked from commit 073ad746b0
2026-07-08 13:29:55 +02:00
Sergio Lopez
f975ff1438
Bump bundled krunkit from 1.3.1 to 1.3.2
...
Bump bundled krunkit to 1.3.2, which comes with libkrun 1.19.4.
This version of libkrun includes a fix in virtio-fs on macOS for
libkrun/libkrun#769 that potentially impacts podman users.
Signed-off-by: Sergio Lopez <slp@redhat.com>
(cherry picked from commit f68612b052
2026-07-08 13:29:54 +02:00
Sergio Lopez
ca6ed1122e
Bump bundled krunkit from 1.2.1 to 1.3.1
...
Bump bundled krunkit to 1.3.1, which comes with libkrun 1.19.3.
This version of krunkit makes HTTP parsing on the rest-uri more
robust to ensure it only acts on the right request.
It also enables a new permission semantics mode in libkrun that's
closer to the user expectations on macOS.
Fixes : #21402
Fixes : #29084
Signed-off-by: Sergio Lopez <slp@redhat.com>
(cherry picked from commit 06bfb55eb1
2026-07-08 13:29:54 +02:00
Sergio Lopez
775052f043
Bump bundled krunkit from 1.1.1 to 1.2.1
...
Bump bundled krunkit to 1.2.1, which comes with libkrun 1.17.4.
The highlights for podman in this release of libkrun are a number
of virtio-fs behavioural fixes, specially when running non-root
users within a container, along with better disk performance and
lower space consumption thanks to support for F_DISCARD and
F_WRITE_ZEROES.
This release of krunkit also introduces the "--timesync" flag,
with the same behavior as the vfkit counterpart, meaning it's now
possible to enable clock synchronization with this mechanism.
Fixes : #27679
Signed-off-by: Sergio Lopez <slp@redhat.com>
(cherry picked from commit 9dcc73079f
2026-07-08 13:29:52 +02:00
Paul Holzinger
32e8266fda
Merge pull request #29047 from lsm5/v5.8-packit-caution-note
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
[v5.8] Packit: Add cautionary note to ephemeral copr job
2026-06-29 18:14:14 +02:00
Paul Holzinger
a2cd4402f5
Merge pull request #29060 from podmanbot/bump-5.8.5-dev
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
Bump Podman to v5.8.5-dev
2026-06-26 19:20:09 +02:00
mheon
7b74db94fd
Bump Podman to v5.8.5-dev
...
Signed-off-by: mheon <7735048+mheon@users.noreply.github.com>
2026-06-26 15:27:38 +00:00
Paul Holzinger
a7bca4ba52
Merge pull request #29044 from mheon/bump_584
...
Bump to v5.8.4
2026-06-26 17:26:36 +02:00
Lokesh Mandvekar
b46e26e53a
Packit: Add cautionary note to ephemeral copr job
...
The packit copr jobs are consumed by podman-machine-os release process
so any change to the copr targets should be mindful of this fact.
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
(cherry picked from commit 8ce58d328c
2026-06-25 13:43:24 -04:00
Matt Heon
5431df23c7
Bump to v5.8.4
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-06-25 12:29:07 -04:00
Matt Heon
f91e707ec4
Update release notes for v5.8.4
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-06-25 12:29:07 -04:00
Ashley Cui
30a5433d45
Fix release email
...
gh auth login fails if we set GITHUB_TOKEN
Signed-off-by: Ashley Cui <acui@redhat.com>
2026-06-25 11:56:28 -04:00
Matt Heon
6eb839c947
Merge pull request #29040 from Luap99/v5.8
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
[v5.8] build the swagger.yml on readthedocs
2026-06-25 11:54:23 -04:00
Mario Loriedo
38d3442ea0
Windows installer tests: download v5.8.3 of the setup bundle
...
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
(cherry picked from commit 6ae463a9cd
2026-06-25 15:09:43 +02:00
Paul Holzinger
6421567bc2
build the swagger.yml on readthedocs
...
One problem with the swagger upload is we need an extra bucket and then
we need our own custom version schema and selector on the website. If we
can just embed the swagger.yml as part of the official build we can get
rid of all of that and have a much simpler way as the regular
readthedocs version selector will work.
We also no longer need to maintain an extra bucket upload and no longer
need to update the version list which was forgotten all the time.
Fixes : #28827
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit c2ffe88ce0
2026-06-25 14:52:44 +02:00
Paul Holzinger
5e36e3073a
Revert "docs: introduce custom version selector in api.html"
...
This reverts commit f87c8b9cba50a7acb364
2026-06-25 14:52:44 +02:00
Paul Holzinger
e489e00710
Revert "docs: generate Reference version list from json file"
...
This reverts commit 858150288f250c530055
2026-06-25 14:52:44 +02:00
Paul Holzinger
0c6d54e98e
readthedocs: update build env
...
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit 8dee14e304
2026-06-25 14:52:43 +02:00
Matt Heon
b5fe1c5ce6
Merge pull request #29027 from Luap99/v5.8
...
ci / int local root fedora-prior (push) Blocked by required conditions
ci / sys local root fedora-prior (push) Blocked by required conditions
ci / int local rootless fedora-prior (push) Blocked by required conditions
ci / sys local rootless fedora-prior (push) Blocked by required conditions
ci / int remote root fedora-prior (push) Blocked by required conditions
ci / sys remote root fedora-prior (push) Blocked by required conditions
ci / int local root fedora-rawhide (push) Blocked by required conditions
ci / sys local root fedora-rawhide (push) Blocked by required conditions
ci / int local rootless fedora-rawhide (push) Blocked by required conditions
ci / sys local rootless fedora-rawhide (push) Blocked by required conditions
ci / int remote root fedora-rawhide (push) Blocked by required conditions
ci / sys remote root fedora-rawhide (push) Blocked by required conditions
ci / apiv2 root fedora-current (push) Blocked by required conditions
ci / bindings root fedora-current (push) Blocked by required conditions
ci / compose_v2 root fedora-current (push) Blocked by required conditions
ci / docker_py root fedora-current (push) Blocked by required conditions
ci / unit root fedora-current (push) Blocked by required conditions
ci / apiv2 rootless fedora-current (push) Blocked by required conditions
ci / compose_v2 rootless fedora-current (push) Blocked by required conditions
ci / unit rootless fedora-current (push) Blocked by required conditions
ci / upgrade v5.3.1 root fedora-current (push) Blocked by required conditions
ci / upgrade v5.6.2 root fedora-current (push) Blocked by required conditions
ci / machine linux amd64 (push) Blocked by required conditions
ci / windows unit (push) Blocked by required conditions
ci / windows e2e (push) Blocked by required conditions
ci / windows machine hyperv (push) Blocked by required conditions
ci / windows machine wsl (push) Blocked by required conditions
ci / macos machine applehv (push) Blocked by required conditions
ci / macos machine libkrun (push) Blocked by required conditions
ci / Total Success (push) Blocked by required conditions
[v5.8] fix image host env leak
2026-06-24 11:42:41 -04:00
Paul Holzinger
85832029d5
fix image host env leak
...
When parsing image envs we need to be strict about the format, only the
"key=value" format must be accepted. Just keys must be rejected as they
are not valid according to the image spec.
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit 6c431b73db
2026-06-24 16:51:31 +02:00
Paul Holzinger
35de92568b
Merge pull request #28989 from Luap99/v5.8
...
ci / int local root fedora-prior (push) Blocked by required conditions
ci / sys local root fedora-prior (push) Blocked by required conditions
ci / int local rootless fedora-prior (push) Blocked by required conditions
ci / sys local rootless fedora-prior (push) Blocked by required conditions
ci / int remote root fedora-prior (push) Blocked by required conditions
ci / sys remote root fedora-prior (push) Blocked by required conditions
ci / int local root fedora-rawhide (push) Blocked by required conditions
ci / sys local root fedora-rawhide (push) Blocked by required conditions
ci / int local rootless fedora-rawhide (push) Blocked by required conditions
ci / sys local rootless fedora-rawhide (push) Blocked by required conditions
ci / int remote root fedora-rawhide (push) Blocked by required conditions
ci / sys remote root fedora-rawhide (push) Blocked by required conditions
ci / apiv2 root fedora-current (push) Blocked by required conditions
ci / bindings root fedora-current (push) Blocked by required conditions
ci / compose_v2 root fedora-current (push) Blocked by required conditions
ci / docker_py root fedora-current (push) Blocked by required conditions
ci / unit root fedora-current (push) Blocked by required conditions
ci / apiv2 rootless fedora-current (push) Blocked by required conditions
ci / compose_v2 rootless fedora-current (push) Blocked by required conditions
ci / unit rootless fedora-current (push) Blocked by required conditions
ci / upgrade v5.3.1 root fedora-current (push) Blocked by required conditions
ci / upgrade v5.6.2 root fedora-current (push) Blocked by required conditions
ci / machine linux amd64 (push) Blocked by required conditions
ci / windows unit (push) Blocked by required conditions
ci / windows e2e (push) Blocked by required conditions
ci / windows machine hyperv (push) Blocked by required conditions
ci / windows machine wsl (push) Blocked by required conditions
ci / macos machine applehv (push) Blocked by required conditions
ci / macos machine libkrun (push) Blocked by required conditions
ci / Total Success (push) Blocked by required conditions
[v5.8] Backport some CI fixes and one regression fix
2026-06-23 19:27:23 +02:00
Paul Holzinger
b00f4f7b2f
Merge pull request #28971 from lsm5/v5.8-cve-fix
...
[v5.8] Update golang.org/x/crypto to v0.52.0 for CVE-2026-39830
2026-06-23 18:56:03 +02:00
Lokesh Mandvekar
5eed4f1ec7
Update golang.org/x/crypto to v0.53.0 for CVE-2026-39830 and CVE-2026-42508
...
CVE-2026-39830: Invoking client can cause server deadlock on
unexpected responses in golang.org/x/crypto/ssh
CVE-2026-42508: Revoked SignatureKey not correctly checked for
revocation in golang.org/x/crypto/ssh/knownhosts
Update golang.org/x/crypto from v0.50.0 to v0.53.0.
References:
- https://pkg.go.dev/vuln/GO-2026-5017
- https://pkg.go.dev/vuln/GO-2026-5021
- https://go.dev/issue/79564
- https://go.dev/issue/79568
Signed-off-by: Lokesh Mandvekar <lsm5@linux.com>
2026-06-23 11:06:08 -04:00
Ashley Cui
b0fa3d4b73
Merge pull request #28987 from lsm5/v5.8-packit-update
...
ci / int local root fedora-prior (push) Blocked by required conditions
ci / sys local root fedora-prior (push) Blocked by required conditions
ci / int local rootless fedora-prior (push) Blocked by required conditions
ci / sys local rootless fedora-prior (push) Blocked by required conditions
ci / int remote root fedora-prior (push) Blocked by required conditions
ci / sys remote root fedora-prior (push) Blocked by required conditions
ci / int local root fedora-rawhide (push) Blocked by required conditions
ci / sys local root fedora-rawhide (push) Blocked by required conditions
ci / int local rootless fedora-rawhide (push) Blocked by required conditions
ci / sys local rootless fedora-rawhide (push) Blocked by required conditions
ci / int remote root fedora-rawhide (push) Blocked by required conditions
ci / sys remote root fedora-rawhide (push) Blocked by required conditions
ci / apiv2 root fedora-current (push) Blocked by required conditions
ci / bindings root fedora-current (push) Blocked by required conditions
ci / compose_v2 root fedora-current (push) Blocked by required conditions
ci / docker_py root fedora-current (push) Blocked by required conditions
ci / unit root fedora-current (push) Blocked by required conditions
ci / apiv2 rootless fedora-current (push) Blocked by required conditions
ci / compose_v2 rootless fedora-current (push) Blocked by required conditions
ci / unit rootless fedora-current (push) Blocked by required conditions
ci / upgrade v5.3.1 root fedora-current (push) Blocked by required conditions
ci / upgrade v5.6.2 root fedora-current (push) Blocked by required conditions
ci / machine linux amd64 (push) Blocked by required conditions
ci / windows unit (push) Blocked by required conditions
ci / windows e2e (push) Blocked by required conditions
ci / windows machine hyperv (push) Blocked by required conditions
ci / windows machine wsl (push) Blocked by required conditions
ci / macos machine applehv (push) Blocked by required conditions
ci / macos machine libkrun (push) Blocked by required conditions
ci / Total Success (push) Blocked by required conditions
[v5.8] Packit: skip rawhide, remove podman-next job
2026-06-22 09:50:54 -04:00
Paul Holzinger
d50b33560f
test/e2e: fix flake in login tests
...
By default we run tests in parallel so when we mount test/certs with the
":Z" option it means only one container can read it, depending on the
startup times this can mean the container fails to start. I observed
this error in a CI run:
level=fatal msg="open /certs/domain.crt: permission denied"
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit 1eda0cfbb4
2026-06-19 17:10:53 +02:00
Lokesh Mandvekar
4bd6a2498a
Packit: skip rawhide, remove podman-next job
...
Rawhide has moved on to v6.
Signed-off-by: Lokesh Mandvekar <lsm5@linux.com>
2026-06-19 11:10:33 -04:00
Paul Holzinger
0dad42f19d
test/e2e: split cli tmpdir from per test tempdir
...
Right now the tmpdir for the test and cli are are the same and worse the
root/runroot directories are subdirectories of the tmpdir so tests can
create conflicting files.
Also for rootless remote builds this cuases problems for all tests which
uses the main tmpdir as context dir as they then try to copy the storage
files with different uids which will fail. Commit 79e7b0f6fd6e20527004
2026-06-19 17:09:41 +02:00
Paul Holzinger
5fbeb04184
fix podman-remote save -f oci-dir/docker-dir
...
With podman-remote we do not enter a our user namespace like we do with
local podman so we keep running with the real user id.
So if we then try to use chrootarchive as normal user it fails with:
creating mount namespace before pivot: operation not permitted
So simply revert back to the normal archive code.
Now the more interesting thing is we do have a test
"podman save to directory with oci format" but it never runs
rootless+remote in our CI system with our current matrix as we wanted to
reduce jobs.
So rethink the matrix and add one such job as this shows it is needed.
Fixes: 25aee24cbdfd07b9c6ec
2026-06-19 17:08:17 +02:00
Paul Holzinger
c8c7a3cdcd
validate: disable golangci-lint cache
...
Something with the cache is not working right and results in
inconsistent lint result.
Even on PRs where there are no source code changes we observe random
failures. I have seen at least 4 different instances since we the new CI
setup. It is not reasonable to spot fix each new warning (mostly just
adding new nolint comments) each time as it affects all PRs at once.
It will also be very confusing for new contributors.
Fixes : #28893
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit c8ce2c6089
2026-06-19 17:08:05 +02:00
Paul Holzinger
c5b9ab76e2
Update automation image to 2026-06-16
...
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit 5c189e8136
2026-06-19 17:08:05 +02:00
Paul Holzinger
e8286b8bd8
update "No New Tests" PR filter list
...
For a while now we trigger CI tests based on if source files, i.e. *.go
files were changed. The "No New Tests" filter however checked something
else via a exclude list that was not being updated.
That means in many cases we needed to add the label when it is clear
that these thing should not need tests, i.e. packit or rpm/ changes.
To avoid the manual updates of all directories just grep for source
files.
Fixes : #28849
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
(cherry picked from commit 126d3e27ae
2026-06-19 17:08:02 +02:00
Paul Holzinger
8a43fb4bb2
Merge pull request #28921 from podmanbot/bump-5.8.4-dev
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
Bump Podman to v5.8.4-dev
2026-06-15 17:35:47 +02:00
mheon
f910d00a4c
Bump Podman to v5.8.4-dev
...
Signed-off-by: mheon <7735048+mheon@users.noreply.github.com>
2026-06-12 17:47:56 +00:00
Paul Holzinger
5ad0e5e131
Merge pull request #28916 from mheon/bump_583
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
Bump to v5.8.3
2026-06-12 19:05:23 +02:00
Matt Heon
93dbfd0d86
Bump to v5.8.3
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-06-12 10:49:45 -04:00
Matt Heon
6a33968ac6
Update release notes for v5.8.3
...
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-06-12 10:49:26 -04:00
Matt Heon
6b8ab91d9c
Bump to gvisor-tap-vsock v0.8.9
...
Contains an important fix for WSL2 usermode networking
Signed-off-by: Matt Heon <mheon@redhat.com>
2026-06-12 10:40:36 -04:00
Tom Sweeney
d3249cd56e
Merge pull request #28885 from Luap99/v5.8
...
ci / int local root fedora-prior (push) Has been cancelled
ci / sys local root fedora-prior (push) Has been cancelled
ci / int local rootless fedora-prior (push) Has been cancelled
ci / sys local rootless fedora-prior (push) Has been cancelled
ci / int remote root fedora-prior (push) Has been cancelled
ci / sys remote root fedora-prior (push) Has been cancelled
ci / int local root fedora-rawhide (push) Has been cancelled
ci / sys local root fedora-rawhide (push) Has been cancelled
ci / int local rootless fedora-rawhide (push) Has been cancelled
ci / sys local rootless fedora-rawhide (push) Has been cancelled
ci / int remote root fedora-rawhide (push) Has been cancelled
ci / sys remote root fedora-rawhide (push) Has been cancelled
ci / apiv2 root fedora-current (push) Has been cancelled
ci / bindings root fedora-current (push) Has been cancelled
ci / compose_v2 root fedora-current (push) Has been cancelled
ci / docker_py root fedora-current (push) Has been cancelled
ci / unit root fedora-current (push) Has been cancelled
ci / apiv2 rootless fedora-current (push) Has been cancelled
ci / compose_v2 rootless fedora-current (push) Has been cancelled
ci / unit rootless fedora-current (push) Has been cancelled
ci / upgrade v5.3.1 root fedora-current (push) Has been cancelled
ci / upgrade v5.6.2 root fedora-current (push) Has been cancelled
ci / machine linux amd64 (push) Has been cancelled
ci / windows unit (push) Has been cancelled
ci / windows e2e (push) Has been cancelled
ci / windows machine hyperv (push) Has been cancelled
ci / windows machine wsl (push) Has been cancelled
ci / macos machine applehv (push) Has been cancelled
ci / macos machine libkrun (push) Has been cancelled
ci / Total Success (push) Has been cancelled
[v5.8] some more CI related backports
2026-06-10 15:51:11 -04:00
Paul Holzinger
1338dbd9e3
Merge pull request #28890 from TomSweeneyRedHat/dev/tsweeney/Buildah-1.43.2-v5.8
...
ci / int local root fedora-prior (push) Blocked by required conditions
ci / sys local root fedora-prior (push) Blocked by required conditions
ci / int local rootless fedora-prior (push) Blocked by required conditions
ci / sys local rootless fedora-prior (push) Blocked by required conditions
ci / int remote root fedora-prior (push) Blocked by required conditions
ci / sys remote root fedora-prior (push) Blocked by required conditions
ci / int local root fedora-rawhide (push) Blocked by required conditions
ci / sys local root fedora-rawhide (push) Blocked by required conditions
ci / int local rootless fedora-rawhide (push) Blocked by required conditions
ci / sys local rootless fedora-rawhide (push) Blocked by required conditions
ci / int remote root fedora-rawhide (push) Blocked by required conditions
ci / sys remote root fedora-rawhide (push) Blocked by required conditions
ci / apiv2 root fedora-current (push) Blocked by required conditions
ci / bindings root fedora-current (push) Blocked by required conditions
ci / compose_v2 root fedora-current (push) Blocked by required conditions
ci / docker_py root fedora-current (push) Blocked by required conditions
ci / unit root fedora-current (push) Blocked by required conditions
ci / apiv2 rootless fedora-current (push) Blocked by required conditions
ci / compose_v2 rootless fedora-current (push) Blocked by required conditions
ci / unit rootless fedora-current (push) Blocked by required conditions
ci / upgrade v5.3.1 root fedora-current (push) Blocked by required conditions
ci / upgrade v5.6.2 root fedora-current (push) Blocked by required conditions
ci / machine linux amd64 (push) Blocked by required conditions
ci / windows unit (push) Blocked by required conditions
ci / windows e2e (push) Blocked by required conditions
ci / windows machine hyperv (push) Blocked by required conditions
ci / windows machine wsl (push) Blocked by required conditions
ci / macos machine applehv (push) Blocked by required conditions
ci / macos machine libkrun (push) Blocked by required conditions
ci / Total Success (push) Blocked by required conditions
[v5.8] Bump Buildah to v1.43.2
2026-06-10 16:58:15 +02:00
Tom Sweeney
a082bc9c0c
[v5.8] Bump Buildah to v1.43.2
...
Bump Buildah to v1.43.2 in prepration of the next Podman v5.8 release.
Also includes the changes from 47ab0f1e94
2026-06-09 17:13:35 -04:00
Kir Kolyshkin
645c4f3842
ci: fix validate-source checks vs stale labels
...
When the validate-source job is re-run manually after adding a label,
it uses stale labels (from the "pull_request" event that originally
triggered it), and so the steps that check labels don't see new labels.
Fix by querying the labels live (similar to how it was done before
commits 6e597af6dc1da154117cd05c113acd
2026-06-08 15:24:51 +02:00
Ashley Cui
50c105ab1f
Release automation: update org location
...
containers -> podman-container-tools
Signed-off-by: Ashley Cui <acui@redhat.com>
(cherry picked from commit c0f582d734
2026-06-08 15:23:20 +02:00
Daniel Hast
925107a0c9
ci: use env vars to avoid template expansion in code contexts
...
Template expansions are not aware of shell script syntax, and therefore
can potentially result in code injection vulnerabilities when used in
code contexts: https://docs.zizmor.sh/audits/#template-injection
To avoid this, instead use environment variables to safely store the
values of the template expansions.
Also (in the process of doing the above) added double-quotes around a
some instances of variable expansions in shell scripts, which is
necessary to avoid unintended shell splitting and globbing. (I didn't
see any instances where this was actually likely to result in erroneous
behavior, but it's good practice and makes shell scripts more robust.)
Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>
(cherry picked from commit 67c050bb8e
2026-06-08 15:22:46 +02:00
Daniel Hast
d97883bcc5
ci: use --sandbox for dynamically generated sed scripts
...
sed scripts are capable of doing file I/O and executing arbitrary
commands. The `--sandbox` option prevents this by rejecting sed commands
with such capabilities; it's good practice to use this whenever the sed
script is dynamically generated (e.g. if it involves a variable
expansion).
Also fixed an error in one sed script where `.*` had been placed outside
of the quoted string (and would therefore be subject to shell globbing),
presumably due to single-quotes having been changed to double-quotes at
some point in the past.
Signed-off-by: Daniel Hast <hast.daniel@protonmail.com>
(cherry picked from commit 3f4af378f4
2026-06-08 15:22:46 +02:00
