v1.4.27

Package Updates:

• Updates golang-1-linux from 1.26.0 to 1.26.1

What's Changed

• Fix: remove stray file committed ~5 years ago by @aramprice in #206
• point bosh docker image to ghcr by @mkocher in #209
• Add acceptance tests for resource limits via privileged observer by @mkocher in #210
• Fix bosh-env path by @neddp in #211
• move integration tests from jammy to noble by @mkocher in #213
• Add CI bump tasks for gperf, libseccomp, pkgconf, and tini by @mkocher in #214
• remove the last vestiges of Jammy, update readme by @mkocher in #215

New Contributors

• @mkocher made their first contribution in #209
• @neddp made their first contribution in #211

Full Changelog: v1.4.26...v1.4.27

v1.4.26

What's Changed

• CI: remove invalid git resource params by @aramprice in #205
• allow preadv2 and pwritev2 by @KauzClay in #204

Full Changelog: v1.4.25...v1.4.26

v1.4.25

Package Updates:

• Updates golang-1-linux from 1.25.6 to 1.25.7

What's Changed

• CI: add inputs: all to put step by @aramprice in #202

Full Changelog: v1.4.24...v1.4.25

v1.4.24

Package Updates:

• Updates golang-1-linux from 1.25.5 to 1.25.6

Full Changelog: v1.4.23...v1.4.24

v1.4.23

Package Updates:

• Updates golang-1-linux from 1.25.3 to 1.25.5

What's Changed

• Add internal constants for personality flags by @ystros in #196
• Bump actions/checkout from 5 to 6 by @dependabot[bot] in #197
• Ci fixes by @aramprice in #198

Full Changelog: v1.4.22...v1.4.23

v1.4.22

What's Changed

• ci: Deploy Director w/ bpm before release by @ystros in #195
• Fix clone3 syscall in containers by @KauzClay in #194

Full Changelog: v1.4.21...v1.4.22

v1.4.21

Known Issues:

• The upgrade to runc 1.2.8 can cause workloads to fail due to missing syscall permissions. We are investigating.

Fixed CVEs:

• CVE-2025-31133: runc: container escape via 'masked path' abuse due to mount race conditions
• CVE-2025-52565: runc: container escape with malicious config due to /dev/console mount and related races
• CVE-2025-52881: runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Package Updates:

• Updates golang-1-linux from 1.24.2 to 1.25.3

Updates:

• Updates runc from 1.2.6 to 1.2.8

What's Changed

• Randomize errand job name during tests to avoid cgroup conflicts by @rajathagasthya in #179
• Move integration2 tests to integration package by @rajathagasthya in #180
• Bump golangci/golangci-lint-action from 7 to 8 by @dependabot[bot] in #181
• Use new opencontainers/cgroups package by @ystros in #182
• Bump actions/checkout from 4 to 5 by @dependabot[bot] in #184
• Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #185
• Increase open file limit in spec by @ystros in #187
• Pin back to runc v1.2 for CVE fixes by @ystros in #191
• ci: Use GHCR image for golang-release by @ystros in #192
• Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in #190
• docs: add warning about unmounting shared volumes by @KauzClay in #189
• Rewrite hanging test in Ginkgo v2 style by @ystros in #193

New Contributors

• @rajathagasthya made their first contribution in #179
• @KauzClay made their first contribution in #189

Full Changelog: v1.4.20...v1.4.21

v1.4.20

Package Updates:

• Updates golang-1-linux from 1.24.1 to 1.24.2

Full Changelog: v1.4.19...v1.4.20

v1.4.19

Package Updates:

• Updates golang-1-linux from 1.24.1 to 1.24.2

What's Changed

• Use concourse dns servers in bosh subnet by @julian-hj in #178

New Contributors

• @julian-hj made their first contribution in #178

Full Changelog: v1.4.18...v1.4.19

v1.4.18

Package Updates:

• Updates golang-1-linux from 1.24.1 to 1.24.2

What's Changed

• Bump golangci/golangci-lint-action from 6 to 7 by @dependabot in #177

Full Changelog: v1.4.17...v1.4.18