1.4.1
qdm12/dns1.4.1Sep 9, 2026by github-actions[bot]
Upgrading?
AI Summary
This release addresses security vulnerabilities in OCI image loading and Unix type initialization while introducing a new `container clean` command and enhancing the `system status` output with more details.
Key Highlights
- Security fixes for OCI image loading (symlinks) and UnixType buffer overflow.
- New `container clean` command added to the CLI.
- Enhanced `container system status` reporting now includes host, client, paths, and resources.
- JSON output no longer escapes forward slashes.
Breaking Changes
- container system status now reports host, client, paths, and resources (API change).
New Features
- container clean command
- enhanced system status reporting
- JSON output improvements
- Updated Containerization to 0.45.0
Full Release Notes
This release addresses two security issues in the Containerization package: - [GHSA-4587-w9mm-xxvh](https://github.com/apple/containerization/security/advisories/GHSA-4587-w9mm-xxvh) - OCI image load follows symlinks for `oci-layout` and `index.json` outside the extraction directory - [GHSA-rgqp-277h-gcwj](https://github.com/apple/containerization/security/advisories/GHSA-rgqp-277h-gcwj) - `UnixType.init(path:)` uses a macOS length limit longer than the `sockaddr_un.sun_path` buffer it copies into There was no 1.4.0 release, we had to discard that tag so this release contains every change since 1.3.1. ## Highlights β¨οΈ denotes breaking CLI changes. π©βπ» denotes breaking API changes. - Core - [New `container clean` command](https://github.com/apple/container/pull/1949) - π©βπ» [`container system status` now reports host, client, paths, and resources](https://github.com/apple/container/pull/1769) - [JSON output no longer escapes forward slashes](https://github.com/apple/container/pull/2205) - [Updated Containerization to 0.45.0](https://github.com/apple/container/pull/2250) ## What's Changed * Avoid escaping slashes in JSON output by @taljeon in https://github.com/apple/container/pull/2205 * Enhance `container system status` command output by @muk2 in https://github.com/apple/container/pull/1769 * Updates containerization to 0.43.0. by @jglogan in https://github.com/apple/container/pull/2208 * [container]: add clean command by @saehejkang in https://github.com/apple/container/pull/1949 * fix: handle container clean failing on read-only named volume mounts by @zdk in https://github.com/apple/container/pull/2228 * ci: bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the github-actions group by @dependabot[bot] in https://github.com/apple/container/pull/2226 * Fix a compilation error by @dkovba in https://github.com/apple/container/pull/2234 * Remove security markdown in favor of inherited security guidelines by @katiewasnothere in https://github.com/apple/container/pull/2249 * docs: remove broken troubleshooting.md link in technical overview by @zdk in https://github.com/apple/container/pull/2227 * Fix compilation warnings by @dkovba in https://github.com/apple/container/pull/2235 * docs: Add k8s plugin reference by @egernst in https://github.com/apple/container/pull/2244 * Bump CZ to 0.45.0 by @realrajaryan in https://github.com/apple/container/pull/2250 ## New Contributors * @taljeon made their first contribution in https://github.com/apple/container/pull/2205 * @muk2 made their first contribution in https://github.com/apple/container/pull/1769 **Full Changelog**: https://github.com/apple/container/compare/1.3.1...1.4.1
Related Repositories
ollama/ollamaβ
184,207
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frpβ
110,051
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflowβ
92,612
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugoβ
90,198
The worldβs fastest framework for building websites.
junegunn/fzfβ
83,716
:cherry_blossom: A command-line fuzzy finder