This release fixes a glitch that prevented container k8s working when installed from the release package.

What's Changed

• Integration test: fix username/uid flake. by @jglogan in #2086
• refactor: extract K8s logic into ContainerK8s library target by @jshi991 in #2079
• Refactor container k8s to use plugin resource management. by @jglogan in #2097
• Migrate ProgressBarTests to Swift Testing by @VictorPuga in #2085

New Contributors

• @VictorPuga made their first contribution in #2085

Full Changelog: 1.2.1...1.2.2

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • k8s plugin for turnkey local Kubernetes cluster
  • container export for live containers.
  • --ssh option for container build.
  • --read-only-path and --masked-path for container run for Kubernetes, Docker, and similar containers.

What's Changed

• [container]: add container export for live containers by @saehejkang in #1630
• Adjust overcommit and max_map_count vm defaults in guest VMs by @adityabagchi24 in #2055
• [package]: bump container-builder-shim to 0.13.1 by @saehejkang in #2056
• [builder]: enable ssh forwarding for container build by @saehejkang in #1508
• Move SSH builder test to Serialized tests by @JaewonHur in #2061
• Increase testExecDetachProcessRunning sleep margin to avoid CI flake by @jglogan in #2063
• Add readiness signal to DirectoryWatcher, fix DirectoryWatcherTest. by @jglogan in #2066
• Log core counts in CI for perf analysis. by @jglogan in #2070
• Add --read-only-path and --masked-path option to container run / create by @adityaramani in #2069
• Simplify correlation of test prefix to test ID. by @jglogan in #2071
• Integration test: cache warmup image tarfiles. by @jglogan in #2074
• K8s plugin by @jshi991 in #2044

New Contributors

• @jshi991 made their first contribution in #2044

Full Changelog: 1.2.0...1.2.1

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• SECURITY FIXES
  • GHSA-5h49-6pr7-9mv4 - reset special permission bits when extracting archives onto the host.
  • GHSA-xwgf-4rc5-p4m4 - CVE-2026-64786 - bare-name image Config.Env entries should not inherit values from the launching process's environment
• Core
  • k8s plugin for turnkey local Kubernetes cluster
  • container export for live containers.
  • --ssh option for container build.
  • --read-only-path and --masked-path for container run for Kubernetes, Docker, and similar containers.

What's Changed

• Add TestCLISystemLogs and TestCLITermIO integration tests in new integration test suite by @katiewasnothere in #1879
• Restore reverted migrations, migrate last tests. by @jglogan in #1880
• Removes obsolete CLITests directory. by @jglogan in #1886
• Integration coverage xpc helpers by @noah-thor in #1551
• Upgrade grpc-swift-nio-transport to 2.9.0 and remove HTTP2ConnectBuff… by @adityabagchi24 in #1790
• Updates containerization to 0.36.0. by @jglogan in #1912
• Use containerization version 0.37.0 by @adityaramani in #1932
• Verify kernel archive integrity by @haoruilee in #1703
• Add commit/issue alert to PR template. by @jglogan in #1945
• Remove --skip-build from test Makefile target. by @jglogan in #1951
• Restore --skip-build, enable import testable for release builds. by @jglogan in #1955
• [package]: bump container-builder-shim to 0.13.0 by @saehejkang in #1953
• Validate container ID from XPC requests by @katiewasnothere in #1956
• Remove force unwraps on XPC error set/get by @katiewasnothere in #1958
• Do not follow destination symlink when copying user configuration by @katiewasnothere in #1957
• Fix machine ID length test. by @jglogan in #1971
• Address flaky TestCLIKernelSetSerial suite. by @jglogan in #1976
• [gitignore]: ignore vscode workspace files by @saehejkang in #1966
• Update containerization dependency with new EXT4Unpacker func definition by @katiewasnothere in #1973
• Periodic dependency updates. by @jglogan in #1981
• Use ordered journal mode for unpacked images. by @jglogan in #1974
• Reword DNS container name resolution doc information by @katiewasnothere in #1960
• ci: bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #1983
• Pass build config in when building protoc dependencies by @katiewasnothere in #1972
• Container test fixture package by @katiewasnothere in #1887
• Downgrade swift-collections to 1.5.1. by @jglogan in #1984
• Use enum for warmup images. by @jglogan in #1990
• Add missing dependencies to new ContainerTestSupport package by @katiewasnothere in #1994
• Add OCI maskedPaths and readonlyPaths support to Container API. by @jglogan in #1996
• Integration test - miscellaneous fixture and test refinements. by @jglogan in #1993
• Use log instead of print for system start status messages by @adityabagchi24 in #1889
• Fix BuilderStart race, parallelize container build tests. by @jglogan in #2002
• Allow custom kernel boot args via --kernel-arg by @arirubinstein in #1744
• fix: Increase XPC timeout for Machine API operations by @dev-kvt in #2006
• Update containerization import to latest 0.40.0 by @katiewasnothere in #2028
• Fix image env vars, build context checks, TCP/UDP port forward buffer, and validate plugin name by @katiewasnothere in #2027
• Update containerization import to 0.40.1 by @katiewasnothere in #2038

New Contributors

• @haoruilee made their first contribution in #1703
• @arirubinstein made their first contribution in #1744
• @dev-kvt made their first contribution in #2006

Full Changelog: 1.1.0...1.2.0

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • Unix domain socket mounts now work in non-root containers.
• Storage
  • Fix container cp failures with relative source paths

What's Changed

• Bump containerization to 0.33.4 by @dkovba in #1650
• add standalone container machine document by @crosbymichael in #1674
• Adds container machine example. by @jglogan in #1676
• Always update default network with system configuration values by @katiewasnothere in #1686
• ci: bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group across 1 directory by @dependabot[bot] in #1640
• Fix duplicate "(default: 3)" in --max-concurrent-downloads help text by @CharlieTLe in #1725
• add container machine nested virt by @crosbymichael in #1742
• Pin xcode swift version in CI to 6.3 by @katiewasnothere in #1746
• Propagate permissions for all host-to-container socket mounts. by @jglogan in #1751
• Fix CLITest when run in xcode by @mareksapota in #1775
• [package]: bump containerization to 0.34.0 by @saehejkang in #1774
• fix(cp): resolve relative host paths against current directory by @adityabagchi24 in #1741
• fix: replace try! with try? for stdout/stderr writes in ProcessIO by @SEPURI-SAI-KRISHNA in #1784
• fix: remove force-unwrap on session dictionary in DefaultNetworkService by @SEPURI-SAI-KRISHNA in #1787
• Log the graceful-stop error instead of silently discarding it in gracefulStopContainer by @radheradhe01 in #1782
• Disable flaky CLI test temporarily. by @jglogan in #1828
• Fix/exec empty arguments crash by @SEPURI-SAI-KRISHNA in #1783
• Remove network variant computation from API server. by @jglogan in #1814
• Remove duplicate release workflow that double-builds and races on every tag by @radheradhe01 in #1781
• perf(parser): add collection capacity hints to known-size loops by @hluaguo in #1791
• fix: propagate error from createDirectory in system start by @SEPURI-SAI-KRISHNA in #1785
• ci: bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #1792
• Route container image save reference list to stderr in stdout mode by @costajohnt in #1804
• Enhanced test fixtures for integration tests. by @jglogan in #1834
• Migrate some container tests, remove concurrent demo tests. by @jglogan in #1840
• Update containerization import to 0.35.0 by @katiewasnothere in #1842
• Adds build fixture and migrates build CLI tests. by @jglogan in #1848
• Migrates container machine tests. by @jglogan in #1856
• Migrate basic system tests to new test support types. by @jglogan in #1841
• Migrates network integration tests. by @jglogan in #1858
• Migrate registry tests to new test support types. by @jglogan in #1845
• Add checksum validation to hawkeye installation by @katiewasnothere in #1869
• Migrate image, volume and miscellaneous system tests. by @jglogan in #1868
• Migrates container create, run-lifecycle, exec, remove, copy. by @jglogan in #1844
• Migrates container run integration tests. by @jglogan in #1857
• Ensure test filenames match test suite names and each file has a single suite defined by @katiewasnothere in #1877
• Finalize Makefile for integration test rework. by @jglogan in #1878

New Contributors

• @CharlieTLe made their first contribution in #1725
• @mareksapota made their first contribution in #1775
• @adityabagchi24 made their first contribution in #1741
• @SEPURI-SAI-KRISHNA made their first contribution in #1784
• @radheradhe01 made their first contribution in #1782
• @hluaguo made their first contribution in #1791
• @costajohnt made their first contribution in #1804

Full Changelog: 1.0.0...1.1.0

🎂 container is one year old!

Try out the new container machine feature and let us know what you think!

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • container machine for long-lived Linux environments with tight host integration.
  • ⌨️ A TOML configuration file replaces UserDefault-backed system properties, removing the container system property get and set subcommands.
  • ⌨️ Cleaned up structured (JSON, YAML, TOML) output shape for container, image, network, and volume ls and inpect.
  • Fixed container help subcommand...
  • Fixed output formatting for several commands
  • Add --stop-signal option for container run
  • 👩‍💻 Removed compatibility with application major version 0 XPC APIs. A subsequent release will introduce a version on the API itself so that clients and server can check compatibility.
• Network
  • Use XPC-connection-as-lease to fix IP address leaks
• Storage
  • Add container cp command
  • Fixed accounting errors in system df

What's Changed

• Tests/CLITests: drain stdout/stderr concurrently in CLITest.run by @mvanhorn in #1471
• Build output should just be tags/paths. by @jglogan in #1478
• Use NetworkResource for network management in API server. by @jglogan in #1421
• Use SystemPath for HostDNSResolver. by @jglogan in #1480
• Update documents with note about container-to-host networking. by @jglogan in #1482
• Sort networks by ID in API server list(). by @jglogan in #1487
• CLI: Support --shm-size by @dcantah in #1488
• Improve integration test speed by @noah-thor in #1489
• Simplify the serial suite trait by @katiewasnothere in #1497
• Switch NetworksService, VolumesService, EntityStore to FilePath. by @jglogan in #1493
• [scripts]: add prompt for updating container with unsigned package by @saehejkang in #1468
• Change PR build to generate coverage and comment it by @noah-thor in #1474
• Deps: Bump CZ to 0.32.0 by @dcantah in #1498
• Move to TOML configuration for defaults by @noah-thor in #1425
• docs: fix typos and polish README wording by @12ya in #1499
• De-duplicate building during testing by @noah-thor in #1507
• Centralize utilities for configuration loading and path parsing by @noah-thor in #1448
• Use SystemPath for PacketFilter. by @chrisgeo in #1518
• swift-configuration decoder by @noah-thor in #1447
• Fix PR coverage comment never posting by @noah-thor in #1541
• Use SystemPath for DirectoryWatcher. by @chrisgeo in #1522
• Adds XPC sessions with disconnect handlers. by @jglogan in #1524
• Use allocate with session to automatically clean up IPs. by @jglogan in #1544
• Use SystemPath for ContainerResource.Filesystem. by @chrisgeo in #1523
• Add support for layered and plugin configurations by @noah-thor in #1543
• Bump containerization to 0.32.1 by @JaewonHur in #1549
• Remove IP allocation from API server. by @jglogan in #1545
• Add variant Support by @ajemory in #1548
• ci: bump actions/labeler from 6.0.1 to 6.1.0 in the github-actions group by @dependabot[bot] in #1550
• Relax host-only network test. by @jglogan in #1552
• Fix inconsistent volume createdAt JSON encoding by @realrajaryan in #1556
• Fix: image list align with other commands when use format should ignore quiet by @tico88612 in #1553
• Reject conflicting DNS flags by @LeSingh1 in #1559
• Reject conflicting volume delete flags by @realrajaryan in #1560
• Validate container system logs --last flag by @realrajaryan in #1561
• Ensure read-only user config removed on every startup. by @jglogan in #1567
• Rename config file to config.toml. by @jglogan in #1568
• Make inspect error handling for missing resources consistent by @realrajaryan in #1564
• Add container copy/cp command for host-container file transfer by @simone-panico in #1190
• [images]: convert save to use FilePath by @saehejkang in #1574
• [images]: fix image load error to write to stderr and use FilePath by @saehejkang in #1570
• Reorganize runtime targets for scalable plugin support by @ajemory in #1577
• Add more tests for container copy by @JaewonHur in #1579
• Update container copy to use FilePath by @JaewonHur in #1580
• Add notes regarding --log-root to the command reference. by @jglogan in #1582
• cli: Add support for --stop-signal by @dcantah in #1462
• fix: clamp ProgressBar barLength to non-negative value to avoid crash by @ErwanLegrand in #1525
• Adds vertical space between groups in help. by @jglogan in #1585
• Refine custom init how-to and BUILDING documentation. by @jglogan in #1586
• Improve readability of progress bar width computation. by @jglogan in #1584
• Bump containerization to 0.33.1 by @dkovba in #1601
• Use FilePath for app, install, and log roots. by @jglogan in #1558
• Support use of custom app root with system config in CLI commands by @katiewasnothere in #1600
• Add shmSize to management flag's init by @katiewasnothere in #1603
• cli: resolve subcommand path in container help by @0xMH in #1587
• Add ability to configure integration test list at command line by @katiewasnothere in #1608
• Align JSON output with shape for container resource. by @jglogan in #1611
• Use ManagedResource for volumes in CLI commands by @katiewasnothere in #1607
• Fix potential integer math crash on PublishPort. by @jglogan in #1612
• Reorganize Swift package targets for network plugin. by @jglogan in #1615
• [how-to]: fix documentation example by @saehejkang in #1596
• Remove XPC compatibility code, simplify network model. by @jglogan in #1616
• Use FilePath for PublishSocket by @chrisgeo in #1594
• Fix system df to count content blobs and deduplicate shared storage by @realrajaryan in #1555
• Create ImageResource conforming to ManagedResource by @katiewasnothere in #1619
• Use a consistent container CLI path in integration tests by @zdk in #1621
• Normalize JSON output for network and volume resources. by @jglogan in #1624
• Fix TestCLIVersion build-type check for release CI by @zdk in #1627
• Add NOTICE entry for swift-configuration-toml by @katiewasnothere in #1629
• kill: Wait for container to exit after sigkill by @dcantah in #1589
• Add an error message for dockerfile >= 16KB until #735 is resolved by @katiewasnothere in #1634
• Write log/e...

This patch release includes two security fixes:

• Prevent HTTP downgrade in registry-related commands
• Prevent path and rule injection in container system dns commands

What's Changed

• Fix RequestScheme formatting. by @jglogan in #1473
• ImagePush: print image reference to stdout on success by @mvanhorn in #1470
• ensure-container-stopped.sh: don't fail on launchctl errors by @p-linnane in #1461

Full Changelog: 0.12.2...0.12.3

This patch release addresses an API compatibility fix that only surfaces on Sequoia. There are no functional changes.

What's Changed

• Allow macOS 15 to list and delete networks by @katiewasnothere in #1464

Full Changelog: 0.12.0...0.12.1

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • plain progress output
  • color progress output
  • Use plain if stderr is not a TTY
  • Consolidated output format handling
  • YAML output format support
  • ⌨️ Support --cap-add and --cap-drop for containers. The default set of capabilities has been reduced, so if you need the old behavior that grants all capabilities, you will need to delete and recreate your containers.
  • Use TOML for plugin configuration files
  • Pass SSH_AUTH_SOCK properly if its value changes after user login
  • Update kernel to kata-3.28.0
• Images
  • User-friendly platform error message for image save
• Build
  • Fix unable to write data to the archive, code 0 error during build
  • 👩‍💻Fix errors with Dockerfile-specific ignore file and read-only build context. This change modified the container-builder-shim gRPC protocol such that older clients cannot perform builds. Please file an issue if this adversely affects your project. We've going to attempt to keep the protocol compatible for subsequent major version 0 releases.
  • Fix ARG parsing bugs
• Storage
  • Fix unreliable single file mounts
  • Journal option for container volume create

What's Changed

• Removes unused Archiver.uncompress(). by @jglogan in #1372
• Relocate Source/Helpers folders to sensible locations. by @jglogan in #1363
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #1374
• Add Plain Progress Output Mode by @nrthakur in #1367
• Adding Bug Report Guide by @ajemory in #1292
• Fixing issue template help paths by @ajemory in #1382
• doc: Document plain clear-on finish behavior by @manojmahapatra in #1379
• Remove XPC timeout based on SIGTERM timeout in container stop by @katiewasnothere in #1387
• Dedupe user-supplied IDs for container delete. by @jglogan in #1388
• feat: add help for cli plugin by @tico88612 in #1068
• Bump containerization to 0.30.1 by @adityaramani in #1396
• Consolidate CLI formatting infrastructure by @realrajaryan in #1385
• Move exit status check into ExitWaiter register call by @katiewasnothere in #1397
• Create ResourceLabels and use for ManagedResource, NetworkConfiguration. by @jglogan in #1360
• Add capabilities support by @dcantah in #1383
• API: Rename to NetworkClient, client as instance. by @jglogan in #1405
• Write file data into archive only for regular files by @adityaramani in #1403
• Add Color Progress Output Mode by @nrthakur in #1384
• Fall back to simple text output when stdout is not a TTY by @knQzx in #1392
• Fix ContainerResource build failure by @DePasqualeOrg in #1408
• ci: bump the github-actions group with 3 updates by @dependabot[bot] in #1419
• Move to TOML configuration for plugin configurations by @noah-thor in #1422
• Fix ssh forwarding to use current SSH_AUTH_SOCK value by @JaewonHur in #1420
• Update builder API to use grpc-swift-2. (#1309) by @jglogan in #1416
• stats: restore terminal when streaming is interrupted by a signal by @Otoru in #1355
• improve error message when image save platform is not available by @knQzx in #1418
• Fix using docker specific ignore with read-only build context by @JaewonHur in #1349
• Update kernel to kata-3.28.0. by @jglogan in #1431
• Makes bootstrap env parameter compatible with older clients. by @jglogan in #1434
• Add unit and integration coverage report make targets by @noah-thor in #1427
• [build]: add tests for copy from by @saehejkang in #1380
• Explicitly pass default subnets into network creation by @noah-thor in #1424
• Updates containerization dependency to 0.31.0. by @jglogan in #1435
• Fix: memory leak and silent read error in Archiver._compressFile causing build failures under /Users/ by @Ronitsabhaya75 in #1432
• Adds journal option to container volume create. by @jglogan in #1412
• Create a NOTICE file for apple/container's dependencies by @katiewasnothere in #1436
• Make ProgressFlags.makeConfig() public. by @jglogan in #1438
• Change guest ssh socket path by @JaewonHur in #1441
• Add container system version with format yaml by @tico88612 in #1353
• add plugin label to builder by @realrajaryan in #1443
• Add yams to apple/container's notice file by @katiewasnothere in #1442
• Fix "not installing shadowed plugin" startup log noise. by @jglogan in #1451

New Contributors

• @nrthakur made their first contribution in #1367
• @knQzx made their first contribution in #1392
• @DePasqualeOrg made their first contribution in #1408
• @noah-thor made their first contribution in #1422

Full Changelog: 0.11.0...0.12.0

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • Fix container lifecycle-related hangs
  • Set default CPUs and memory for regular containers via system properties
  • Set default CPUs and memory for builder via system properties
• Images
  • CONTAINER_DEFAULT_PLATFORM for default image platform selection
  • container export writes an OCI layout tar file for a stopped container
• Build
  • Build using Dockerfile-specific ignore files
  • Build using secrets
  • Fix ARG parsing bugs
• Networking
  • Adds mtu network attachment option

What's Changed

• Bump containerization to 0.26.4 by @realrajaryan in #1276
• Stabilize testBuildNetworkAccess. by @jglogan in #1271
• Fix container start hang on invalid executable by @JaewonHur in #1278
• [building]: add steps for using container-builder-shim locally by @saehejkang in #1279
• Bump Containerization to 0.26.5 by @realrajaryan in #1282
• GH actions: do not interpolate template variables in run blocks. by @jglogan in #1284
• Capture container logs on failed CI runs. by @jglogan in #1285
• Add mtu option for network attachments by @realrajaryan in #1267
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #1288
• Add container.cpus and container.memory system properties by @realrajaryan in #1266
• Feat: add RegistryResource by @tico88612 in #1195
• Fix race condition on SandboxService.waiters by @JaewonHur in #1289
• Add build.cpus and build.memory system properties by @realrajaryan in #1293
• Serialize network tests again by @JaewonHur in #1294
• Move parser tests that rely on userdefault manipulation to TestCLINoP… by @realrajaryan in #1299
• Tolerate container-builder-shim check fail by @JaewonHur in #1297
• Give more time to DirectoryWatcherTest by @JaewonHur in #1296
• Add fallback to CONTAINER_DEFAULT_PLATFORM for image architecture by @Willjianger9 in #1286
• Bump to use containerization 0.27.0 by @adityaramani in #1304
• Refactor: container export a tar archive by @tico88612 in #1303
• Reap auto remove containers if there are running on system start by @JaewonHur in #1290
• Remove trailing comma by @benediktjohannes in #1315
• Update builder API to use grpc-swift-2. by @jglogan in #1309
• Fix docker ignore by @JaewonHur in #1273
• Add support for build secrets by @percontation in #1300
• Remove user defaults on userdata uninstall. by @jglogan in #1317
• [networks]: add decoder/encoder to Attachment and NetworkStatus by @saehejkang in #1216
• Revert "Update builder API to use grpc-swift-2. (#1309)" by @egernst in #1324
• volumes: Allow "." by @dcantah in #1326
• Add rootfs override by @JaewonHur in #1323
• Bump Containerization version to 0.29.0 by @adityaramani in #1327
• Use Sendable DNS types. by @jglogan in #1269
• make schemeFor public by @realrajaryan in #1331
• README: Add logo by @dcantah in #1339
• ci: bump actions/download-artifact from 8.0.0 to 8.0.1 in the github-actions group by @dependabot[bot] in #1325
• Remove obsolete disableAllocator from network delete path by @manojmahapatra in #1332
• Add TestCLIVersion to integration tests and fix assertions by @tico88612 in #1312
• CLI: stop and delete should error on not found containers by @dcantah in #878
• Fix a compilation error by @dkovba in #1346
• Make ProcessConfiguration.User Equatable by @JaewonHur in #1357
• Add plugin resources by @JaewonHur in #1356
• Ensure that the bar length never exceeds the remaining width by @dkovba in #1348
• build: extend signal handling scope to cover the unpack phase by @Otoru in #1358
• Update builder to 0.11.0. by @jglogan in #1369
• [build]: add tests for dockerfile arg parsing by @saehejkang in #1342
• Don't bake DNS server into builder container config. by @jglogan in #1370
• Add TestCLIStatus to integration tests and fix assertions by @tico88612 in #1368

New Contributors

• @Willjianger9 made their first contribution in #1286
• @benediktjohannes made their first contribution in #1315
• @percontation made their first contribution in #1300
• @Otoru made their first contribution in #1358

Full Changelog: 0.10.0...0.11.0

Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

• Core
  • 👩‍💻Rework ClientContainer as client as a generic client
  • 👩‍💻Update API calls to use correct form of the term "clean up"
  • Fix kernel panic (selinux_inode_free_security) in container under load
  • Support selecting VM init image on container create/run
  • 👩‍💻Container bundle creation moved to SandboxService
  • Add a script for updating container to release package
  • Support exporting current container to image
• Networking
  • 👩‍💻Support using multiple different network plugins

What's Changed

• [Docs] Fix typo in BUILDING.md: launchd -> launchctl by @manojmahapatra in #1146
• CI: Add signed commit check by @dcantah in #1152
• CLI: Rework ClientContainer by @dcantah in #1139
• Add debugging to the PR labeler CI flow by @katiewasnothere in #1155
• Fix file path for the PR number in the PR labeler workflow by @katiewasnothere in #1158
• [deps]: bump containerization to 0.25.0 by @saehejkang in #1161
• [build-command]: Add --pull option for fetching latest image by @saehejkang in #844
• chore: Replace force-unwrapped String(data:encoding:) with String(decoding:as:) by @manojmahapatra in #1164
• CLI: Forego logging errors on multi-container operations by @dcantah in #1163
• Send tar hash in the first BuildTransfer packet by @JaewonHur in #1149
• Add builder tests by @JaewonHur in #1154
• Don't enable selinux LSM on boot. by @jglogan in #1166
• Warn user when a named volume is auto-created by @poetryofcode in #1108
• Fix relative path mount tests by @dkovba in #1168
• feat: Add runtime flag to container create and run commands (#1049) by @iko1 in #1109
• feat: add --init-image flag for specifying custom init filesystem images per VM by @manuschillerdev in #937
• Feat: add container registry list by @tico88612 in #1119
• APIServer: Add support for filtering to list rpc by @dcantah in #1175
• Fix persistent CI failures. by @jglogan in #1205
• feat: Moving bundle creation from ContainerService to SandboxService by @ajemory in #1076
• Support using multiple different network plugins by @katiewasnothere in #1151
• ContainerService: Add minimum memory amount validation by @dcantah in #1208
• Add init methods for all the members of the Flags type by @adityaramani in #1203
• Support exporting current container to image by @JaewonHur in #1172
• Fix CI integration test coldstart issues. by @jglogan in #1230
• Add test for container export by @JaewonHur in #1229
• bump to containerization 0.26.2 by @yibozhuang in #1235
• CI observability enhancements. by @jglogan in #1193
• added the other labels by @Ronitsabhaya75 in #1125
• Downgrade the mapping of warnings to the default log level by @dkovba in #1238
• Add --format option for system status. by @jglogan in #1237
• Fix: Environment variables can be duplicated on run by @simone-panico in #1218
• Minimal runtime variant plumbing. by @jglogan in #1239
• Revert "Minimal runtime variant plumbing. (#1239)" by @jglogan in #1255
• cli: Add --init to run/create by @dcantah in #1244
• [scripts]: add update-container script for upgrade/downgrades by @saehejkang in #1173
• Fix directory watcher by @JaewonHur in #1234
• Try to trigger the network privacy alert on port publish. by @jglogan in #1248

New Contributors

• @manojmahapatra made their first contribution in #1146
• @poetryofcode made their first contribution in #1108
• @ajemory made their first contribution in #1076
• @simone-panico made their first contribution in #1218

Full Changelog: 0.9.0...0.10.0