Skip to content

[release/1.7] Prepare release notes for v1.7.32#13452

Merged
samuelkarp merged 1 commit into
containerd:release/1.7from
samuelkarp:prepare-1.7.32
May 20, 2026
Merged

[release/1.7] Prepare release notes for v1.7.32#13452
samuelkarp merged 1 commit into
containerd:release/1.7from
samuelkarp:prepare-1.7.32

Conversation

@samuelkarp

Copy link
Copy Markdown
Member

containerd 1.7.32

Welcome to the v1.7.32 release of containerd!


The thirty-second patch release for containerd 1.7 contains various fixes
and updates including a security patch.

Security Updates

Highlights

Image Distribution

  • Allow hosts.toml to contain only root-level fields without an explicit [host] section (#10028)

Runtime

  • Fix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (#13450)
  • Apply hardening to block AF_ALG in default socket policy (#13406)
  • Support both "volatile" and "fsync=volatile" mount options for volatile snapshotter (#13299)
  • Set AppArmor abi conditionally to support versions < 3.0 (#13273)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

  • Maksym Pavlenko
  • Chris Henzie
  • Derek McGowan
  • Paweł Gronowski
  • Samuel Karp
  • Wei Fu
  • Brad Davidson
  • Brian Goff
  • LEI WANG
  • Phil Estes

Changes

17 commits

  • bc87d865c Prepare release notes for v1.7.32
  • oci: return explicit error for out-of-range USER values (#13450)
    • 503f47946 oci: return explicit error for out-of-range USER values
  • seccomp: Block AF_ALG in default socket policy (#13406)
    • e55b747d3 seccomp: Block AF_ALG in default socket policy
    • 4627a65f8 seccomp: Document socket rule scope and socketcall limitation
  • Fix issue with empty host tree in hosts.toml (#10028)
    • 24007441d Fix error parsing hosts.toml without any host tree
  • Support both styles of volatile mount option (#13299)
    • 940733149 Support both styles of volatile mount option
  • apparmor: Set abi conditionally (#13273)
  • Add GitHub Action for k8s node e2e tests (#13258)
    • 0db1e143a Add GitHub Action for k8s node e2e tests
  • Update release process after 1.7 (#13236)
    • 3223a75c2 Update for latest updates to release tool
    • 1b30082eb Update release process after 1.7

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.7.31

Signed-off-by: Samuel Karp <samuelkarp@google.com>
@samuelkarp samuelkarp requested a review from chrishenzie as a code owner May 20, 2026 18:45
@github-project-automation github-project-automation Bot moved this to Needs Triage in Pull Request Review May 20, 2026
@samuelkarp samuelkarp changed the title Prepare release notes for v1.7.32 [release/1.7] Prepare release notes for v1.7.32 May 20, 2026
@github-project-automation github-project-automation Bot moved this from Needs Triage to Review In Progress in Pull Request Review May 20, 2026
@samuelkarp samuelkarp merged commit 180a7b7 into containerd:release/1.7 May 20, 2026
91 of 92 checks passed
@github-project-automation github-project-automation Bot moved this from Review In Progress to Done in Pull Request Review May 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

Archived in project

Development

Successfully merging this pull request may close these issues.

4 participants