Release v1.9.0

[imjasonh]

v1.8.1 was cut on April 5, about 2 months ago.

Diff since then: v1.8.1...main

Some notable changes / fixes:

• Installed binaries are missing from image #2049
• proc: detect kubernetes runtime by mounts #2054
• Fixes #2046: make target stage lookup case insensitive #2047
• fix: Refactor LayersMap to correct old strange code behavior #2066
• Fix missing setuid flags on COPY --from=build operation #2089
• Fixes #2046: make target stage lookup case insensitive #2047
• Add GitLab CI credentials helper #2040
• and a number of dependency bumps

ref: #2049 (comment) asking for a timeline on a new release

We might also want to wait for #2106 to land.

[chuangw6]

Thanks @imjasonh! #2117 is created.

[imjasonh]

@chuangw6 do you think we should wait for #2106?

[chuangw6]

@chuangw6 do you think we should wait for #2106?

sgtm! Converted #2117 to draft. I'll update the pr once #2106 is merged.

[jebatc]

Will v1.9.0 update golang to v1.18.1 or newer? The current release is affected by the following vulnerability CVE-2022-24675. If so, is there any estimate for when v.1.9.0 will be release? If not, any idea when this vulnerability might be addressed?

It looks like you already have a pull request to do this. #2121

[imjasonh]

Will v1.9.0 update golang to v1.18.1 or newer? The current release is affected by the following vulnerability CVE-2022-24675. If so, is there any estimate for when v.1.9.0 will be release? If not, any idea when this vulnerability might be addressed?

It looks like you already have a pull request to do this. #2121

I've sent #2141 to build Kaniko with Go 1.18.

I'm pretty confident the vulnerability doesn't affect Kaniko, unless I'm misunderstanding, but we should be on the latest Go anyway.

I don't have an estimate for when the next Kaniko release might happen.

[lappazos]

@imjasonh Adding #1669 for this release - build crashes with big images. Works fine with gcr.io/kaniko-project/executor:09e70e44d9e9a3fecfcf70cb809a654445837631

[chuangw6]

@imjasonh Adding #1669 for this release - build crashes with big images. Works fine with gcr.io/kaniko-project/executor:09e70e44d9e9a3fecfcf70cb809a654445837631

Hey @imjasonh , are we planning to include the fix for #1669 in this release? Please let me know when it's time to cut the release. Thanks

[imjasonh]

I still don't know exactly what's wrong in #1669 -- if someone can test the latest commit-tagged image and let me know if it's been fixed since 1.8.0 that would be great. There have been some snapshotting improvements from @gabyx especially that might have fixed this.

In any case, I don't think we need to block the release on that fix, there have been plenty of improvements worth releasing even if that long-standing issue isn't included.

[aaron-prindle]

Closing, v1.9.0 is released