0.12.3

apple/container0.12.3Apr 30, 2026by github-actions[bot]

AI Summary

This patch release includes two security fixes preventing HTTP downgrade and path injection in DNS commands.

Key Highlights

Prevents HTTP downgrade in registry-related commands.
Prevents path and rule injection in container system dns commands.
Fixes RequestScheme formatting.

New Features

HTTP downgrade fix
DNS injection fix

Full Release Notes

This patch release includes two security fixes:

- [Prevent HTTP downgrade in registry-related commands](https://github.com/apple/container/commit/601f5f113abd796b4106dc8959c634269befd217)
- [Prevent path and rule injection in `container system dns` commands](https://github.com/apple/container/commit/f9899013fd43dd058fdf89709eed0b0861bfd931)

## What's Changed
* Fix RequestScheme formatting. by @jglogan in https://github.com/apple/container/pull/1473
* ImagePush: print image reference to stdout on success by @mvanhorn in https://github.com/apple/container/pull/1470
* ensure-container-stopped.sh: don't fail on launchctl errors by @p-linnane in https://github.com/apple/container/pull/1461


**Full Changelog**: https://github.com/apple/container/compare/0.12.2...0.12.3