All pull requests

Pull requests

• build(deps): bump the gomod group across 1 directory with 24 updates

  dco-signoff: yesrelease-note-none
  #10418·dependabot[bot] opened Oct 9, 2026Bot·

  ·
  3

• Validate container username and homedir against newline injection

  dco-signoff: nodo-not-merge/release-note-label-neededneeds-ok-to-test
  #10417·kalt2212 opened Oct 9, 2026·

  ·
  7

• seccomp: receive the notifier fd with close-on-exec

  approveddco-signoff: yeslgtmok-to-testrelease-note
  #10415·ecomger opened Oct 8, 2026·

  ·
  6

  

• statsserver: parallelize background stats update loop

  dco-signoff: yeskind/cleanuprelease-note-none
  #10413·dgrisonnet opened Oct 8, 2026Contributor·

  ·
  7

• statsserver: collect only the stats required by enabled pod metrics

  dco-signoff: yeskind/cleanuprelease-note-none
  #10412·dgrisonnet opened Oct 7, 2026Contributor·

  ·
  4

• storage,server: backport CoCO image server (#9907) to release-1.35

  dco-signoff: yesdo-not-merge/holddo-not-merge/release-note-label-neededdo-not-merge/work-in-progressneeds-ok-to-test
  #10399·suppathak opened Oct 2, 2026·

  ·
  5

• [KEP-5855] Add mount_options (noexec, nosuid, nodev) support for CRI mounts

  dco-signoff: yeskind/featureneeds-ok-to-testrelease-note
  #10397·nispriha opened Oct 1, 2026Contributor·

  ·
  17

• [release-1.36] Update release notes for SPDX 3 bundle SBOMs

  approveddco-signoff: yeskind/cleanuprelease-note
  #10396·saschagrunert opened Oct 1, 2026Member·

  ·
  3

• [release-1.35] Update release notes for SPDX 3 bundle SBOMs

  approveddco-signoff: yeskind/cleanuprelease-note
  #10395·saschagrunert opened Oct 1, 2026Member·

  ·
  3

• [release-1.34] Update release notes for SPDX 3 bundle SBOMs

  approveddco-signoff: yeskind/cleanuprelease-note
  #10394·saschagrunert opened Oct 1, 2026Member·

  ·
  3

• Add enable_layer_dedup config for automatic reflink deduplication on image pull

  dco-signoff: yesok-to-testrelease-note
  #10386·asahay19 opened Sep 30, 2026Contributor·

  ·
  38

• Support cgroup_mount_mode (KEP-5474)

  dco-signoff: yesdo-not-merge/work-in-progresskind/featureneeds-ok-to-testrelease-note
  #10384·chrishenzie opened Sep 29, 2026·

  ·
  6

• WIP: Add OCI artifact based seccomp profiles (KEP-6061)

  approveddco-signoff: yesdo-not-merge/work-in-progresskind/featurerelease-note
  #10382·saschagrunert opened Sep 29, 2026Member·

  ·
  1

  23

• [release-1.35] DNM: test CI health

  dco-signoff: yesdo-not-merge/release-note-label-neededok-to-test
  #10378·k37y opened Sep 28, 2026·

  ·
  10

• oci: kill never-started containers without waiting for the stop timeout

  dco-signoff: yeskind/bugneeds-ok-to-testrelease-note
  #10376·pujitha24 opened Sep 26, 2026·

  ·
  1

  18

  

• build(deps): bump github.com/containerd/containerd from 1.7.35 to 1.7.36

  dco-signoff: yesrelease-note-none
  #10374·dependabot[bot] opened Sep 25, 2026Bot·

  ·
  3

• statsserver: add total_active/inactive_file memory metrics

  dco-signoff: yeskind/featureneeds-ok-to-testrelease-note
  #10368·michalskrivanek opened Sep 21, 2026·

  ·
  4

• Close temporary files and add GoHawk to CI

  dco-signoff: yeskind/bugneeds-ok-to-testrelease-note-none
  #10367·kojah opened Sep 20, 2026·

  ·
  7

• build(deps): bump the actions group across 1 directory with 5 updates

  dco-signoff: yesrelease-note-none
  #10365·dependabot[bot] opened Sep 18, 2026Bot·

  ·
  3

• [KEP-5365] Report resolved image digest for image-volume mounts via CRI

  dco-signoff: yeskind/featureneeds-ok-to-testrelease-note
  #10358·iholder101 opened Sep 16, 2026Contributor·

  ·
  10

• OCPBUGS-114446: server: add timeout to gRPC graceful stop on shutdown

  dco-signoff: yesjira/invalid-bugjira/severity-moderatejira/valid-referencekind/bugok-to-testrelease-note
  #10357·nispriha opened Sep 15, 2026Contributor·

  ·
  9

  

• OCPBUGS-121852: oci: do not treat a cancelled stop as a successful one

  approveddco-signoff: yesjira/severity-importantjira/valid-bugjira/valid-referencekind/buglgtmrelease-note
  #10352·harche opened Sep 14, 2026Contributor·

  ·
  29

  

• ci: retain test output and generate JUnit artifacts in Prow jobs

  dco-signoff: yeskind/cineeds-ok-to-testrelease-note-none
  #10348·madhoshyagnik opened Sep 13, 2026·

  ·
  1

  3

• server: make reloaded config visible to all runtime consumers

  dco-signoff: yeskind/bugok-to-testrelease-note
  #10344·alwaysprince05 opened Sep 12, 2026·

  ·
  1

  19

  

• OCPBUGS-122035: systemd: allow failed conmon scopes to be garbage collected by systemd

  dco-signoff: yesjira/severity-moderatejira/valid-bugjira/valid-referencekind/buglgtmok-to-testrelease-note
  #10343·amritansh1502 opened Sep 12, 2026·

  ·
  18