All pull requests

Pull requests

• [release/2.4] update runc binary to v1.5.3 (security)

  size/XS
  #14564·k8s-infra-cherrypick-robot opened Nov 12, 2026·

  ·
  1

  

• [release/2.3] update runc binary to v1.5.3 (security)

  size/XS
  #14563·k8s-infra-cherrypick-robot opened Nov 12, 2026·

  ·
  1

  

• [release/2.3] Revert "fix: propagate context deadline exceeded error properly"

  size/XS
  #14562·sondavidb opened Nov 12, 2026Contributor·

  ·
  2

• remotes: abort stale ingest when digest mismatches

  size/L
  #14560·ningmingxiao opened Nov 12, 2026Contributor·

  ·
  1

  25

• overlay: use userxattr on tmpfs when it supports user xattrs

  cherry-pick/2.0.xcherry-pick/2.3.xcherry-pick/2.4.xsize/L
  #14558·hellivan opened Nov 11, 2026·

  ·
  1

  4

• docker: fetch only from hosts with pull capability

  size/L
  #14554·samuelkarp opened Nov 11, 2026Member·

  ·
  7

• mount/manager: check lease bucket in rollback

  size/M
  #14553·samuelkarp opened Nov 11, 2026Member·

  ·
  1

• cri: fix resource copy in status deepCopyOf

  size/M
  #14552·samuelkarp opened Nov 11, 2026Member·

  ·
  1

• mount: copy options before replacing lowerdir

  size/S
  #14551·samuelkarp opened Nov 11, 2026Member·

  ·
  1

• metadata: apply no_sync with empty sharing policy

  size/S
  #14549·samuelkarp opened Nov 11, 2026Member·

  ·
  1

• images: record distribution sources after successful pushes

  size/L
  #14548·rleungx opened Nov 11, 2026·

  ·
  1

  2

• ci: report gosocialcheck findings as GitHub Actions annotations

  kind/testsize/L
  #14547·AkihiroSuda opened Nov 10, 2026Member·

  ·
  1

• core/images/archive: skip blobs already in the content store on import

  size/L
  #14546·dsander opened Nov 10, 2026·

  ·
  1

  3

• add local and CI integration buckets for kata

  size/L
  #14545·mikebrow opened Nov 10, 2026Member·

  ·
  36

• [release/2.4] Update to go1.27.4 and go1.26.11

  size/S
  #14544·vvoland opened Nov 10, 2026Contributor·

  ·

  · 2.4
  1

  

• mount: preserve data-only lowerdir separators

  size/M
  #14539·mike-sul opened Nov 10, 2026Contributor·

  ·
  1

• pkg/archive: confine apply to os.Root to prevent symlink escapes

  size/L
  #14538·ningmingxiao opened Nov 10, 2026Contributor·

  ·
  6

• Omit credential headers from registry debug logs

  size/M
  #14536·ProMartY opened Nov 8, 2026·

  ·
  6

• erofs: add an optional label of upperdir location of each snapshot

  size/M
  #14535·ningmingxiao opened Nov 7, 2026Contributor·

  ·
  15

• remotes/docker: use bounded ranges for parallel fetch chunks

  size/L
  #14534·jaewak opened Nov 7, 2026·

  ·
  1

  17

• docs: document the diff-service sync_fs option

  size/XS
  #14533·Marrrrrrrrry opened Nov 7, 2026·

  ·
  3

• build(deps): bump github.com/urfave/cli-docs/v3 from 3.1.0 to 3.2.0

  dependenciesgosize/L
  #14531·dependabot[bot] opened Nov 6, 2026Bot·

  ·
  1

• build(deps): bump the moby-sys group across 1 directory with 2 updates

  dependenciesgosize/L
  #14530·dependabot[bot] opened Nov 6, 2026Bot·

  ·
  2

• [sandboxed shim]: set up pod namespaces through runc

  size/XXL
  #14525·mxpv opened Nov 5, 2026Member·

  ·

  · 2.5
  3

• releases: generate the support table from support.toml

  size/XL
  #14524·chrishenzie opened Nov 5, 2026Member·

  ·
  4