# container changelog

> container release notes.

- Vendor: container
- Category: Operating Systems
- Official site: https://apple.github.io/container/documentation/
- Tracked by: What's New (https://whatsnew.fyi/product/container)
- Harvested from: GitHub (apple/container)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

## Releases

### 1.2.0

- Date: 2026-07-29
- Version: 1.2.0
- Original notes: https://github.com/apple/container/releases/tag/1.2.0
- Permalink: https://whatsnew.fyi/product/container/releases/1.2.0

- **added** — Add OCI maskedPaths and readonlyPaths support to Container API
- **added** — Allow custom kernel boot args via --kernel-arg
- **added** — Add TestCLISystemLogs and TestCLITermIO integration tests in new integration test suite
- **changed** — Use containerization version 0.40.1
- **changed** — Upgrade grpc-swift-nio-transport to 2.9.0
- **changed** — Use ordered journal mode for unpacked images
- **changed** — Use log instead of print for system start status messages
- **changed** — Use enum for warmup images
- **fixed** — Verify kernel archive integrity
- **fixed** — Validate container ID from XPC requests
- **fixed** — Remove force unwraps on XPC error set/get
- **fixed** — Do not follow destination symlink when copying user configuration
- **fixed** — Fix machine ID length test
- **fixed** — Address flaky TestCLIKernelSetSerial suite
- **fixed** — Fix image env vars, build context checks, TCP/UDP port forward buffer, and validate plugin name
- **fixed** — Increase XPC timeout for Machine API operations
- **fixed** — Fix BuilderStart race, parallelize container build tests
- **removed** — Remove force unwraps on XPC error set/get
- **removed** — Removes obsolete CLITests directory

##### What's Changed
* Add TestCLISystemLogs and TestCLITermIO integration tests in new integration test suite by @katiewasnothere in https://github.com/apple/container/pull/1879
* Restore reverted migrations, migrate last tests. by @jglogan in https://github.com/apple/container/pull/1880
* Removes obsolete CLITests directory. by @jglogan in https://github.com/apple/container/pull/1886
* Integration coverage xpc helpers by @noah-thor in https://github.com/apple/container/pull/1551
* Upgrade grpc-swift-nio-transport to 2.9.0 and remove HTTP2ConnectBuff… by @adityabagchi24 in https://github.com/apple/container/pull/1790
* Updates containerization to 0.36.0. by @jglogan in https://github.com/apple/container/pull/1912
* Use containerization version 0.37.0 by @adityaramani in https://github.com/apple/container/pull/1932
* Verify kernel archive integrity by @haoruilee in https://github.com/apple/container/pull/1703
* Add commit/issue alert to PR template. by @jglogan in https://github.com/apple/container/pull/1945
* Remove `--skip-build` from test Makefile target. by @jglogan in https://github.com/apple/container/pull/1951
* Restore `--skip-build`, enable `import testable` for release builds. by @jglogan in https://github.com/apple/container/pull/1955
* [package]: bump container-builder-shim to 0.13.0 by @saehejkang in https://github.com/apple/container/pull/1953
* Validate container ID from XPC requests by @katiewasnothere in https://github.com/apple/container/pull/1956
* Remove force unwraps on XPC error set/get by @katiewasnothere in https://github.com/apple/container/pull/1958
* Do not follow destination symlink when copying user configuration by @katiewasnothere in https://github.com/apple/container/pull/1957
* Fix machine ID length test. by @jglogan in https://github.com/apple/container/pull/1971
* Address flaky TestCLIKernelSetSerial suite. by @jglogan in https://github.com/apple/container/pull/1976
* [gitignore]: ignore vscode workspace files by @saehejkang in https://github.com/apple/container/pull/1966
* Update containerization dependency with new EXT4Unpacker func definition by @katiewasnothere in https://github.com/apple/container/pull/1973
* Periodic dependency updates. by @jglogan in https://github.com/apple/container/pull/1981
* Use ordered journal mode for unpacked images. by @jglogan in https://github.com/apple/container/pull/1974
* Reword DNS container name resolution doc information by @katiewasnothere in https://github.com/apple/container/pull/1960
* ci: bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in https://github.com/apple/container/pull/1983
* Pass build config in when building protoc dependencies by @katiewasnothere in https://github.com/apple/container/pull/1972
* Container test fixture package by @katiewasnothere in https://github.com/apple/container/pull/1887
* Downgrade swift-collections to 1.5.1. by @jglogan in https://github.com/apple/container/pull/1984
* Use `enum` for warmup images. by @jglogan in https://github.com/apple/container/pull/1990
* Add missing dependencies to new ContainerTestSupport package by @katiewasnothere in https://github.com/apple/container/pull/1994
* Add OCI maskedPaths and readonlyPaths support to Container API. by @jglogan in https://github.com/apple/container/pull/1996
* Integration test - miscellaneous fixture and test refinements. by @jglogan in https://github.com/apple/container/pull/1993
* Use log instead of print for system start status messages by @adityabagchi24 in https://github.com/apple/container/pull/1889
* Fix BuilderStart race, parallelize `container build` tests. by @jglogan in https://github.com/apple/container/pull/2002
* Allow custom kernel boot args via --kernel-arg by @arirubinstein in https://github.com/apple/container/pull/1744
* fix: Increase XPC timeout for Machine API operations by @dev-kvt in https://github.com/apple/container/pull/2006
* Update containerization import to lates

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/1.2.0]_

### 1.1.0

- Date: 2026-07-06
- Version: 1.1.0
- Original notes: https://github.com/apple/container/releases/tag/1.1.0
- Permalink: https://whatsnew.fyi/product/container/releases/1.1.0

- **fixed** — Unix domain socket mounts now work in non-root containers
- **fixed** — Fix container cp failures with relative source paths
- **changed** — Always update default network with system configuration values
- **fixed** — Fix duplicate "(default: 3)" in --max-concurrent-downloads help text
- **fixed** — Propagate permissions for all host-to-container socket mounts
- **fixed** — Replace try! with try? for stdout/stderr writes in ProcessIO
- **fixed** — Remove force-unwrap on session dictionary in DefaultNetworkService
- **fixed** — Log the graceful-stop error instead of silently discarding it in gracefulStopContainer
- **fixed** — Fix exec empty arguments crash
- **removed** — Remove network variant computation from API server
- **changed** — Add collection capacity hints to known-size loops in parser
- **fixed** — Propagate error from createDirectory in system start
- **fixed** — Route container image save reference list to stderr in stdout mode
- **added** — Add checksum validation to hawkeye installation

##### Highlights 

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

- Core
  - [Unix domain socket mounts now work in non-root containers](https://github.com/apple/container/issues/1750).
- Storage
  - [Fix `container cp` failures with relative source paths](https://github.com/apple/container/issues/1738)

##### What's Changed
* Bump containerization to `0.33.4` by @dkovba in https://github.com/apple/container/pull/1650
* add standalone container machine document by @crosbymichael in https://github.com/apple/container/pull/1674
* Adds container machine example. by @jglogan in https://github.com/apple/container/pull/1676
* Always update default network with system configuration values by @katiewasnothere in https://github.com/apple/container/pull/1686
* ci: bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions group across 1 directory by @dependabot[bot] in https://github.com/apple/container/pull/1640
* Fix duplicate "(default: 3)" in --max-concurrent-downloads help text by @CharlieTLe in https://github.com/apple/container/pull/1725
* add container machine nested virt by @crosbymichael in https://github.com/apple/container/pull/1742
* Pin xcode swift version in CI to 6.3 by @katiewasnothere in https://github.com/apple/container/pull/1746
* Propagate permissions for all host-to-container socket mounts. by @jglogan in https://github.com/apple/container/pull/1751
* Fix CLITest when run in xcode by @mareksapota in https://github.com/apple/container/pull/1775
* [package]: bump containerization to 0.34.0 by @saehejkang in https://github.com/apple/container/pull/1774
* fix(cp): resolve relative host paths against current directory by @adityabagchi24 in https://github.com/apple/container/pull/1741
* fix: replace try! with try? for stdout/stderr writes in ProcessIO by @SEPURI-SAI-KRISHNA in https://github.com/apple/container/pull/1784
* fix: remove force-unwrap on session dictionary in DefaultNetworkService by @SEPURI-SAI-KRISHNA in https://github.com/apple/container/pull/1787
* Log the graceful-stop error instead of silently discarding it in gracefulStopContainer by @radheradhe01 in https://github.com/apple/container/pull/1782
* Disable flaky CLI test temporarily. by @jglogan in https://github.com/apple/container/pull/1828
* Fix/exec empty arguments crash by @SEPURI-SAI-KRISHNA in https://github.com/apple/container/pull/1783
* Remove network variant computation from API server. by @jglogan in https://github.com/apple/container/pull/1814
* Remove duplicate release workflow that double-builds and races on every tag by @radheradhe01 in https://github.com/apple/container/pull/1781
* perf(parser): add collection capacity hints to known-size loops by @hluaguo in https://github.com/apple/container/pull/1791
* fix: propagate error from createDirectory in system start by @SEPURI-SAI-KRISHNA in https://github.com/apple/container/pull/1785
* ci: bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/apple/container/pull/1792
* Route `container image save` reference list to stderr in stdout mode by @costajohnt in https://github.com/apple/container/pull/1804
* Enhanced test fixtures for integration tests. by @jglogan in https://github.com/apple/container/pull/1834
* Migrate some container tests, remove concurrent demo tests. by @jglogan in https://github.com/apple/container/pull/1840
* Update containerization import to 0.35.0 by @katiewasnothere in https://github.com/apple/container/pull/1842
* Adds build fixture and migrates build CLI tests. by @jglogan in https://github.com/apple/container/pull/1848
* Migrates container machine tests. by @jglogan in https://github.com/apple/container/pull/1856
* Migrate basic system tests to new test support types. by @jglogan in https://github.com/apple/container/pull/1841
* Migrates network integration tests. by @jglogan in https://github.com/apple/container/pull/1858
* Migrate registry t

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/1.1.0]_

### 1.0.0

- Date: 2026-06-09
- Version: 1.0.0
- Original notes: https://github.com/apple/container/releases/tag/1.0.0
- Permalink: https://whatsnew.fyi/product/container/releases/1.0.0

- **added** — Add `container machine` feature for long-lived Linux environments with tight host integration
- **added** — Add `--stop-signal` option for `container run`
- **added** — Add `container cp` command
- **added** — Add support for `--shm-size` option
- **added** — Add support for layered and plugin configurations
- **added** — Add `variant` support
- **changed** — Replace UserDefault-backed system properties with TOML configuration file
- **changed** — Clean up structured output shape for container, image, network, and volume `ls` and `inspect` commands
- **fixed** — Fix `container help subcommand...`
- **fixed** — Fix output formatting for several commands
- **fixed** — Use XPC-connection-as-lease to fix IP address leaks
- **fixed** — Fix accounting errors in `system df`
- **fixed** — Fix inconsistent volume createdAt JSON encoding
- **fixed** — Fix image list alignment with other commands when format should ignore quiet
- **removed** — Remove `container system property` `get` and `set` subcommands
- **removed** — Remove compatibility with application major version 0 XPC APIs

:birthday: `container` is one year old!

Try out the new [`container machine` feature](https://github.com/apple/container/blob/main/docs/container-machine.md) and let us know what you think!

> [!NOTE]
> The UserProperty-backed system settings have been replaced by a TOML configuration file. See [the tutorial](https://github.com/apple/container/blob/main/docs/tutorials/container-system-config-tutorial.md) for details.

##### Highlights 

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

- Core
  - [`container machine` for long-lived Linux environments with tight host integration](https://github.com/apple/container/pull/1662).
  - ⌨️ [A TOML configuration file replaces UserDefault-backed system properties](https://github.com/apple/container/pull/1425), removing the `container system property` `get` and `set` subcommands. 
  - ⌨️ Cleaned up structured (JSON, YAML, TOML) output shape for [container](https://github.com/apple/container/pull/1656), [image](https://github.com/apple/container/pull/1652), [network](https://github.com/apple/container/issues/1623), and [volume](https://github.com/apple/container/issues/1607) `ls` and `inpect`.
  - [Fixed `container help subcommand...`](https://github.com/apple/container/issues/1509)
  - [Fixed output formatting for several commands](https://github.com/apple/container/issues/1528)
  - [Add `--stop-signal` option for `container run`](https://github.com/apple/container/issues/1581)
  - 👩‍💻 Removed compatibility with application major version 0 XPC APIs. A subsequent release will introduce a version on the API itself so that clients and server can check compatibility.
- Network
  - [Use XPC-connection-as-lease to fix IP address leaks](https://github.com/apple/container/issues/1378)
- Storage
  - [Add `container cp` command](https://github.com/apple/container/issues/232)
  - [Fixed accounting errors in `system df`](https://github.com/apple/container/pull/1555)

##### What's Changed
* Tests/CLITests: drain stdout/stderr concurrently in CLITest.run by @mvanhorn in https://github.com/apple/container/pull/1471
* Build output should just be tags/paths. by @jglogan in https://github.com/apple/container/pull/1478
* Use NetworkResource for network management in API server. by @jglogan in https://github.com/apple/container/pull/1421
* Use SystemPath for HostDNSResolver. by @jglogan in https://github.com/apple/container/pull/1480
* Update documents with note about container-to-host networking. by @jglogan in https://github.com/apple/container/pull/1482
* Sort networks by ID in API server `list()`. by @jglogan in https://github.com/apple/container/pull/1487
* CLI: Support --shm-size by @dcantah in https://github.com/apple/container/pull/1488
* Improve integration test speed by @noah-thor in https://github.com/apple/container/pull/1489
* Simplify the serial suite trait by @katiewasnothere in https://github.com/apple/container/pull/1497
* Switch NetworksService, VolumesService, EntityStore to FilePath. by @jglogan in https://github.com/apple/container/pull/1493
* [scripts]: add prompt for updating container with unsigned package by @saehejkang in https://github.com/apple/container/pull/1468
* Change PR build to generate coverage and comment it by @noah-thor in https://github.com/apple/container/pull/1474
* Deps: Bump CZ to 0.32.0 by @dcantah in https://github.com/apple/container/pull/1498
* Move to TOML configuration for defaults by @noah-thor in https://github.com/apple/container/pull/1425
* docs: fix typos and polish README wording by @12ya in https://github.com/apple/container/pull/1499
* De-duplicate building during testing by @noah-thor in https://github.com/apple/container/pull/1507
* Centralize utilities for configuration loading and path parsing by @noah-thor in https://github.com/apple/container/pull/1448
* Use SystemPath for PacketFilter. by @chrisgeo in https://github.com/apple/container/pull/1518
* swift-configuration decoder

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/1.0.0]_

### 0.12.3

- Date: 2026-04-30
- Version: 0.12.3
- Original notes: https://github.com/apple/container/releases/tag/0.12.3
- Permalink: https://whatsnew.fyi/product/container/releases/0.12.3

- **security** — Prevent HTTP downgrade in registry-related commands
- **security** — Prevent path and rule injection in container system dns commands
- **fixed** — Fix RequestScheme formatting
- **changed** — ImagePush prints image reference to stdout on success
- **fixed** — ensure-container-stopped.sh does not fail on launchctl errors

This patch release includes two security fixes:

- [Prevent HTTP downgrade in registry-related commands](https://github.com/apple/container/commit/601f5f113abd796b4106dc8959c634269befd217)
- [Prevent path and rule injection in `container system dns` commands](https://github.com/apple/container/commit/f9899013fd43dd058fdf89709eed0b0861bfd931)

##### What's Changed
* Fix RequestScheme formatting. by @jglogan in https://github.com/apple/container/pull/1473
* ImagePush: print image reference to stdout on success by @mvanhorn in https://github.com/apple/container/pull/1470
* ensure-container-stopped.sh: don't fail on launchctl errors by @p-linnane in https://github.com/apple/container/pull/1461


**Full Changelog**: https://github.com/apple/container/compare/0.12.2...0.12.3

### 0.12.1

- Date: 2026-04-29
- Version: 0.12.1
- Original notes: https://github.com/apple/container/releases/tag/0.12.1
- Permalink: https://whatsnew.fyi/product/container/releases/0.12.1

- **fixed** — Allow macOS 15 to list and delete networks

This patch release addresses an API compatibility fix that only surfaces on Sequoia. There are no functional changes.

##### What's Changed
* Allow macOS 15 to list and delete networks by @katiewasnothere in https://github.com/apple/container/pull/1464


**Full Changelog**: https://github.com/apple/container/compare/0.12.0...0.12.1

### 0.12.0

- Date: 2026-04-27
- Version: 0.12.0
- Original notes: https://github.com/apple/container/releases/tag/0.12.0
- Permalink: https://whatsnew.fyi/product/container/releases/0.12.0

- **added** — Plain progress output
- **added** — Color progress output
- **added** — YAML output format support
- **added** — Support --cap-add and --cap-drop for containers
- **added** — Use TOML for plugin configuration files
- **added** — Journal option for container volume create
- **changed** — Use plain progress output if stderr is not a TTY
- **changed** — Consolidated output format handling
- **changed** — Update kernel to kata-3.28.0
- **changed** — Default set of Linux capabilities has been reduced
- **fixed** — Pass SSH_AUTH_SOCK properly if its value changes after user login
- **fixed** — Fix unable to write data to the archive, code 0 error during build
- **fixed** — Fix errors with Dockerfile-specific ignore file and read-only build context
- **fixed** — Fix ARG parsing bugs
- **fixed** — Fix unreliable single file mounts
- **fixed** — User-friendly platform error message for image save
- **removed** — Removes unused Archiver.uncompress()

##### Highlights 

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

- Core 
  - [`plain` progress output](https://github.com/apple/container/issues/1365)
  - [`color` progress output](https://github.com/apple/container/issues/1366)
  - [Use `plain` if stderr is not a TTY](https://github.com/apple/container/issues/113)
  - [Consolidated output format handling](https://github.com/apple/container/pull/1385)
  - [YAML output format support](https://github.com/apple/container/issues/1156)
  - ⌨️ [Support `--cap-add` and `--cap-drop` for containers](https://github.com/apple/container/issues/1260). The [default set of capabilities](https://github.com/apple/container/blob/main/docs/how-to.md#control-linux-capabilities) has been reduced, so if you need the old behavior that grants all capabilities, you will need to delete and recreate your containers.
  - [Use TOML for plugin configuration files](https://github.com/apple/container/discussions/1336)
  - [Pass `SSH_AUTH_SOCK` properly if its value changes after user login](https://github.com/apple/container/issues/357)
  - [Update kernel to kata-3.28.0](https://github.com/apple/container/pull/1431)
- Images 
  - [User-friendly platform error message for `image save`](https://github.com/apple/container/issues/874)
- Build
  - [Fix `unable to write data to the archive, code 0` error during build](https://github.com/apple/container/issues/1375)
  - 👩‍💻[Fix errors with Dockerfile-specific ignore file and read-only build context](https://github.com/apple/container/pull/1343). This change modified the container-builder-shim gRPC protocol such that older clients cannot perform builds. Please file an issue if this adversely affects your project. We've going to attempt to keep the protocol compatible for subsequent major version 0 releases.
  - [Fix `ARG` parsing bugs](https://github.com/apple/container/issues/1295) 
- Storage
  - [Fix unreliable single file mounts](https://github.com/apple/container/issues/1251)
  - [Journal option for `container volume create`](https://github.com/apple/container/issues/1411)

##### What's Changed
* Removes unused `Archiver.uncompress()`. by @jglogan in https://github.com/apple/container/pull/1372
* Relocate Source/Helpers folders to sensible locations. by @jglogan in https://github.com/apple/container/pull/1363
* ci: bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/apple/container/pull/1374
* Add Plain Progress Output Mode by @nrthakur in https://github.com/apple/container/pull/1367
* Adding Bug Report Guide by @ajemory in https://github.com/apple/container/pull/1292
* Fixing issue template help paths by @ajemory in https://github.com/apple/container/pull/1382
* doc: Document plain clear-on finish behavior by @manojmahapatra in https://github.com/apple/container/pull/1379
* Remove XPC timeout based on SIGTERM timeout in container stop by @katiewasnothere in https://github.com/apple/container/pull/1387
* Dedupe user-supplied IDs for container delete. by @jglogan in https://github.com/apple/container/pull/1388
* feat: add help for cli plugin by @tico88612 in https://github.com/apple/container/pull/1068
* Bump containerization to 0.30.1 by @adityaramani in https://github.com/apple/container/pull/1396
* Consolidate CLI formatting infrastructure by @realrajaryan in https://github.com/apple/container/pull/1385
* Move exit status check into ExitWaiter register call by @katiewasnothere in https://github.com/apple/container/pull/1397
* Create ResourceLabels and use for ManagedResource, NetworkConfiguration. by @jglogan in https://github.com/apple/container/pull/1360
* Add capabilities support by @dcantah in https://github.com/apple/container/pull/1383
* API: Rename to NetworkClient, client as instance. by @jglogan in https://github.com/apple/container/pull/1405
* Write file data into archive only for regular files by @adityaramani in https://github.com/apple/containe

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/0.12.0]_

### 0.11.0

- Date: 2026-03-31
- Version: 0.11.0
- Original notes: https://github.com/apple/container/releases/tag/0.11.0
- Permalink: https://whatsnew.fyi/product/container/releases/0.11.0

- **fixed** — Fix container lifecycle-related hangs
- **added** — Set default CPUs and memory for regular containers via system properties
- **added** — Set default CPUs and memory for builder via system properties
- **added** — Add CONTAINER_DEFAULT_PLATFORM environment variable for default image platform selection
- **added** — Make container export write an OCI layout tar file for a stopped container
- **added** — Build using Dockerfile-specific ignore files
- **added** — Build using secrets
- **fixed** — Fix ARG parsing bugs
- **added** — Add mtu network attachment option
- **fixed** — Fix container start hang on invalid executable
- **fixed** — Fix race condition on SandboxService.waiters
- **fixed** — Fix docker ignore
- **changed** — Update builder API to use grpc-swift-2
- **changed** — Allow "." in volumes
- **added** — Add rootfs override
- **added** — Add plugin resources
- **changed** — Stop and delete should error on not found containers
- **changed** — Extend signal handling scope to cover the unpack phase during build

##### Highlights 

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

- Core 
  - [Fix container lifecycle-related hangs](https://github.com/apple/container/issues/1277)
  - [Set default CPUs and memory for regular containers via system properties](https://github.com/apple/container/issues/1260)
  - [Set default CPUs and memory for builder via system properties](https://github.com/apple/container/issues/1261)
- Images 
  - [`CONTAINER_DEFAULT_PLATFORM` for default image platform selection](https://github.com/apple/container/issues/1252)
  - [`container export` writes an OCI layout tar file for a stopped container](https://github.com/apple/container/pull/1303)
- Build
  - [Build using Dockerfile-specific ignore files](https://github.com/apple/container/issues/1169)
  - [Build using secrets](https://github.com/apple/container/pull/1300)
  - [Fix `ARG` parsing bugs](https://github.com/apple/container/issues/1295) 
- Networking 
  - [Adds `mtu` network attachment option](https://github.com/apple/container/issues/1264)

##### What's Changed

* Bump containerization to 0.26.4 by @realrajaryan in https://github.com/apple/container/pull/1276
* Stabilize `testBuildNetworkAccess`. by @jglogan in https://github.com/apple/container/pull/1271
* Fix container start hang on invalid executable by @JaewonHur in https://github.com/apple/container/pull/1278
* [building]: add steps for using container-builder-shim locally by @saehejkang in https://github.com/apple/container/pull/1279
* Bump Containerization to 0.26.5 by @realrajaryan in https://github.com/apple/container/pull/1282
* GH actions: do not interpolate template variables in `run` blocks. by @jglogan in https://github.com/apple/container/pull/1284
* Capture container logs on failed CI runs. by @jglogan in https://github.com/apple/container/pull/1285
* Add mtu option for network attachments by @realrajaryan in https://github.com/apple/container/pull/1267
* ci: bump the github-actions group with 2 updates by @dependabot[bot] in https://github.com/apple/container/pull/1288
* Add container.cpus and container.memory system properties by @realrajaryan in https://github.com/apple/container/pull/1266
* Feat: add RegistryResource by @tico88612 in https://github.com/apple/container/pull/1195
* Fix race condition on SandboxService.waiters by @JaewonHur in https://github.com/apple/container/pull/1289
* Add build.cpus and build.memory system properties by @realrajaryan in https://github.com/apple/container/pull/1293
* Serialize network tests again by @JaewonHur in https://github.com/apple/container/pull/1294
* Move parser tests that rely on userdefault manipulation to TestCLINoP… by @realrajaryan in https://github.com/apple/container/pull/1299
* Tolerate container-builder-shim check fail by @JaewonHur in https://github.com/apple/container/pull/1297
* Give more time to DirectoryWatcherTest by @JaewonHur in https://github.com/apple/container/pull/1296
* Add fallback to CONTAINER_DEFAULT_PLATFORM for image architecture by @Willjianger9 in https://github.com/apple/container/pull/1286
* Bump to use containerization 0.27.0 by @adityaramani in https://github.com/apple/container/pull/1304
* Refactor: container export a tar archive by @tico88612 in https://github.com/apple/container/pull/1303
* Reap auto remove containers if there are running on system start by @JaewonHur in https://github.com/apple/container/pull/1290
* Remove trailing comma by @benediktjohannes in https://github.com/apple/container/pull/1315
* Update builder API to use grpc-swift-2. by @jglogan in https://github.com/apple/container/pull/1309
* Fix docker ignore by @JaewonHur in https://github.com/apple/container/pull/1273
* Add support for build secrets by @percontation in https://github.com/apple/container/pull/1300
* Remove user defaults on userdata uninstall. by @jglogan in https://github.com/apple/container/pull/1317
* [networks]: add decoder/encoder to Attachment and

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/0.11.0]_

### 0.10.0

- Date: 2026-02-26
- Version: 0.10.0
- Original notes: https://github.com/apple/container/releases/tag/0.10.0
- Permalink: https://whatsnew.fyi/product/container/releases/0.10.0

- **changed** — Rework ClientContainer as a generic client
- **changed** — Update API calls to use correct form of the term "clean up"
- **fixed** — Fix kernel panic (selinux_inode_free_security) in container under load
- **added** — Support selecting VM init image on container create/run
- **changed** — Move container bundle creation from ContainerService to SandboxService
- **added** — Add a script for updating container to release package
- **added** — Support exporting current container to image
- **changed** — Support using multiple different network plugins
- **added** — Add --pull option for fetching latest image in build command
- **added** — Add runtime flag to container create and run commands
- **added** — Add container registry list command
- **added** — Add support for filtering to list rpc in APIServer
- **added** — Add minimum memory amount validation in ContainerService
- **added** — Add --format option for system status command
- **fixed** — Fix environment variables being duplicated on run
- **added** — Add --init flag to run and create commands
- **added** — Warn user when a named volume is auto-created
- **fixed** — Fix directory watcher
- **fixed** — Fix relative path mount tests
- **changed** — Downgrade the mapping of warnings to the default log level

##### Highlights 

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

- Core 
    - 👩‍💻[Rework ClientContainer as client as a generic client](https://github.com/apple/container/pull/1139) 
    - 👩‍💻[Update API calls to use correct form of the term "clean up"](https://github.com/apple/container/pull/1161)
    - [Fix kernel panic (selinux_inode_free_security) in container under load](https://github.com/apple/container/pull/1166)
    - [Support selecting VM init image on container create/run](https://github.com/apple/container/pull/937)
    - 👩‍💻[Container bundle creation moved to SandboxService](https://github.com/apple/container/pull/1076)
    - [Add a script for updating `container` to release package](https://github.com/apple/container/pull/1173)
    - [Support exporting current container to image](https://github.com/apple/container/pull/1172)
- Networking 
    - 👩‍💻[Support using multiple different network plugins](https://github.com/apple/container/pull/1151)

##### What's Changed
* [Docs] Fix typo in BUILDING.md: launchd -> launchctl by @manojmahapatra in https://github.com/apple/container/pull/1146
* CI: Add signed commit check by @dcantah in https://github.com/apple/container/pull/1152
* CLI: Rework ClientContainer by @dcantah in https://github.com/apple/container/pull/1139
* Add debugging to the PR labeler CI flow by @katiewasnothere in https://github.com/apple/container/pull/1155
* Fix file path for the PR number in the PR labeler workflow by @katiewasnothere in https://github.com/apple/container/pull/1158
* [deps]: bump containerization to 0.25.0 by @saehejkang in https://github.com/apple/container/pull/1161
* [build-command]: Add --pull option for fetching latest image by @saehejkang in https://github.com/apple/container/pull/844
* chore: Replace force-unwrapped String(data:encoding:) with String(decoding:as:) by @manojmahapatra in https://github.com/apple/container/pull/1164
* CLI: Forego logging errors on multi-container operations by @dcantah in https://github.com/apple/container/pull/1163
* Send tar hash in the first BuildTransfer packet by @JaewonHur in https://github.com/apple/container/pull/1149
* Add builder tests by @JaewonHur in https://github.com/apple/container/pull/1154
* Don't enable selinux LSM on boot. by @jglogan in https://github.com/apple/container/pull/1166
* Warn user when a named volume is auto-created by @poetryofcode in https://github.com/apple/container/pull/1108
* Fix relative path mount tests by @dkovba in https://github.com/apple/container/pull/1168
* feat: Add runtime flag to container create and run commands (#1049) by @iko1 in https://github.com/apple/container/pull/1109
* feat: add --init-image flag for specifying custom init filesystem images per VM by @manuschillerdev in https://github.com/apple/container/pull/937
* Feat: add container registry list by @tico88612 in https://github.com/apple/container/pull/1119
* APIServer: Add support for filtering to list rpc by @dcantah in https://github.com/apple/container/pull/1175
* Fix persistent CI failures. by @jglogan in https://github.com/apple/container/pull/1205
* feat: Moving bundle creation from ContainerService to SandboxService by @ajemory in https://github.com/apple/container/pull/1076
* Support using multiple different network plugins by @katiewasnothere in https://github.com/apple/container/pull/1151
* ContainerService: Add minimum memory amount validation by @dcantah in https://github.com/apple/container/pull/1208
* Add init methods for all the members of the Flags type by @adityaramani in https://github.com/apple/container/pull/1203
* Support exporting current container to image by @JaewonHur in https://github.com/apple/container/pull/1172
* Fix CI integration test coldstart issues. by @jglogan in https://github.com/apple/container/pull/1230
* Add test for container export by @JaewonHur in https://github.com/apple/container/pull/1229
* bump to containerizatio

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/0.10.0]_

### 0.9.0

- Date: 2026-02-03
- Version: 0.9.0
- Original notes: https://github.com/apple/container/releases/tag/0.9.0
- Permalink: https://whatsnew.fyi/product/container/releases/0.9.0

- **changed** — Use Kata 3.26.0 kernel
- **added** — Unpack layer content compressed with zstd
- **added** — Install kernels compressed with zstd
- **added** — Configure resource limits
- **added** — Access host services through hostnames like host.docker.internal
- **added** — Create networks with host-only access
- **fixed** — Prevent delete default network
- **fixed** — Place image store data correctly for app-root path
- **added** — Add --dns support to build command for custom DNS resolution
- **added** — Add option to stop services in all launchd domains
- **added** — Add force option to container image delete
- **added** — Add full size field to image-list json output
- **added** — Implement container prune
- **added** — Launch a service with waitForDebugger if specified
- **fixed** — Fix file descriptor leak in DirectoryWatcher
- **fixed** — Fix pfctl executable path in PacketFilter DNS reload
- **changed** — Use labels instead of id to discriminate the builtin network
- **added** — Add support for rlimits to CLI
- **changed** — Set mtu to old Containerization default
- **added** — Add explanatory message before admin password prompt in uninstall script

##### Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

* Core
  * [Use Kata 3.26.0 kernel](https://github.com/apple/container/issues/1132)
  * [Unpack layer content compressed with zstd](https://github.com/apple/container/issues/988)
  * [Install kernels compressed with zstd](https://github.com/apple/container/issues/767)
  * [Configure resource limits](https://github.com/apple/container/issues/1097)
* Network
  * [Access host services through hostnames like `host.docker.internal`](https://github.com/apple/container/issues/346)
  * [Create networks with host-only access](https://github.com/apple/container/issues/1037)

##### What's Changed
* [image-inspect]: stdout/stderr and logging refactor by @saehejkang in https://github.com/apple/container/pull/1044
* Fix: prevent delete default network by @tico88612 in https://github.com/apple/container/pull/1083
* Place image store data correctly for app-root path. by @jglogan in https://github.com/apple/container/pull/1085
* Add --dns support to build command for custom DNS resolution by @cympak2 in https://github.com/apple/container/pull/1067
* Add option to stop services in all launchd domains by @p-linnane in https://github.com/apple/container/pull/1077
* Host connection by @JaewonHur in https://github.com/apple/container/pull/1078
* Feat: container image delete force option by @tico88612 in https://github.com/apple/container/pull/1096
* Make TerminalProgress a library. by @jglogan in https://github.com/apple/container/pull/1093
* Isolated network by @JaewonHur in https://github.com/apple/container/pull/1079
* Fix grammar in BUILDING.md by @claudeaceae in https://github.com/apple/container/pull/984
* Refactor container lifecycle functions to perform scoped rollback on failure by @JaewonHur in https://github.com/apple/container/pull/1080
* Implement container prune by @tico88612 in https://github.com/apple/container/pull/904
* [image-list]: Add full size field to json output by @saehejkang in https://github.com/apple/container/pull/1098
* Removes ArgumentParser import from NetworkMode. by @jglogan in https://github.com/apple/container/pull/1102
* Fix testExecOnExitingContainer by @JaewonHur in https://github.com/apple/container/pull/1107
* ci: bump actions/checkout from 6.0.1 to 6.0.2 in the github-actions group by @dependabot[bot] in https://github.com/apple/container/pull/1100
* Launch a service with waitForDebugger if specified by @JaewonHur in https://github.com/apple/container/pull/1101
* Bump to use containerization 0.23.2 by @adityaramani in https://github.com/apple/container/pull/1106
* Set mtu to old Containerization default by @dcantah in https://github.com/apple/container/pull/1110
* DirectoryWatcher: Small adjustments by @dcantah in https://github.com/apple/container/pull/1112
* Update to kata 3.20.0 kernel. by @jglogan in https://github.com/apple/container/pull/1114
* Add resource.role label to builder container by @realrajaryan in https://github.com/apple/container/pull/1120
* [docs]: update steps on building with containerization project by @saehejkang in https://github.com/apple/container/pull/1116
* Fix file descriptor leak in DirectoryWatcher by @Ronitsabhaya75 in https://github.com/apple/container/pull/1104
* Fix pfctl executable path in PacketFilter DNS reload by @w-ferg in https://github.com/apple/container/pull/1128
* Use labels instead of id to discriminate the builtin network. by @jglogan in https://github.com/apple/container/pull/1123
* CLI: Add support for rlimits by @dcantah in https://github.com/apple/container/pull/1129
* Deps: Bump Containerization to 0.24.0 by @dcantah in https://github.com/apple/container/pull/1127
* Add explanatory message before admin password prompt in uninstall script by @William-Laverty in https://github.com/apple/container/pull/1118
* Upgrade kernel to Kata 3.26.0. by @jglogan in https://github.com/apple/container/pull/1134
* Add in missing rlimits by

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/0.9.0]_

### 0.8.0

- Date: 2026-01-22
- Version: 0.8.0
- Original notes: https://github.com/apple/container/releases/tag/0.8.0
- Permalink: https://whatsnew.fyi/product/container/releases/0.8.0

- **security** — Prevent container image load from writing files outside the extraction directory, addressing CVE-2026-20613
- **fixed** — Fix panics and filesystem data integrity errors when stressing containers
- **changed** — Improve stability for container start and stop operations
- **added** — Add container system version command to show version info
- **added** — Add --read-only flag for container create and run commands to mount root filesystem read-only
- **added** — Add platform architecture aliases for amd64 and arm64
- **changed** — Reorganize client APIs
- **added** — Add container network prune command to remove unused networks
- **added** — Add IPv6 network configuration, container DNS, and port forwarding support
- **changed** — Improve volume filesystem performance
- **changed** — Translate block mount options correctly and use sync mode by default
- **fixed** — Make the progress bar respect locale-specific decimal separator
- **fixed** — Fix -it not being able to pipe stdout
- **fixed** — Fix container auto-delete on rapid stop and start
- **fixed** — Fix stop not signalling waiters
- **fixed** — Fix port validation to allow same port for different protocols
- **added** — Add support for reading environment variables from named pipes
- **added** — Support relative paths for --volume option

> [!IMPORTANT]
>
> This release addresses a low severity security issue ([CVE-2026-20613](https://github.com/apple/containerization/security/advisories/GHSA-cq3j-qj2h-6rv3)) in the containerization library whereby a poorly assembled or maliciously crafted image tar archive can write files to locations other than the extraction directory. The issue is present when a user runs the `container image load` command (or the `cctl image load command in containerization)
>
> No privilege escalation is possible by exploiting the issue; the archive extractor can only write files that the user could write themselves.

##### Highlights

⌨️ denotes breaking CLI changes.

👩‍💻 denotes breaking API changes.

* Core
  * [Prevent `container image load` from writing files outside the extraction directory](https://github.com/apple/container/pull/1056)
  * [Fixed panics filesystem data integrity errors when stressing containers](https://github.com/apple/container/issues/614)
  * Numerous stability fixes for container start and stop.
  * [`container system version` shows version info](https://github.com/apple/container/issues/824)
  * [`--read-only command for container create/run mounts root filesystem read-only](https://github.com/apple/container/pull/999)
  * [Add platform architecture aliases for amd64 and arm64](https://github.com/apple/container/issues/1035)
  * 👩‍💻 [Reorganized client APIs](https://github.com/apple/container/issues/461) and numerous other API changes
* Network
  * [`container network prune` removes unused networks](https://github.com/apple/container/issues/893)
  * [IPv6 network configuration, container DNS, and port forwarding](https://github.com/apple/container/issues/460)
* Storage
  * [Improve volume filesystem performance](https://github.com/apple/container/issues/882)
  * [Translate block mount options correctly, use sync mode by default](https://github.com/apple/container/issues/876)

##### What's Changed
* fix(TerminalProgress): make the progress bar respect locale-specific decimal separator by @TTtie in https://github.com/apple/container/pull/936
* Fix broken image integration tests. by @jglogan in https://github.com/apple/container/pull/944
* Update CONTRIBUTORS to MAINTAINERS and point at containerization by @katiewasnothere in https://github.com/apple/container/pull/942
* [volumes]: refactor prune command by @saehejkang in https://github.com/apple/container/pull/940
* Lowercase error messages by @dkovba in https://github.com/apple/container/pull/945
* Deps: Bump Containerization to 0.16.2 by @dcantah in https://github.com/apple/container/pull/947
* feat: implement version sub command by @fatelei in https://github.com/apple/container/pull/911
* CLI: Fix -it not being able to pipe stdout by @dcantah in https://github.com/apple/container/pull/951
* [images]: refactor prune command by @saehejkang in https://github.com/apple/container/pull/941
* Feat: customize console output with env variable by @karenheckel in https://github.com/apple/container/pull/952
* Upgrade GitHub Actions for Node 24 compatibility by @salmanmkc in https://github.com/apple/container/pull/958
* Add Dependabot for GitHub Actions updates by @salmanmkc in https://github.com/apple/container/pull/960
* Upgrade GitHub Actions to latest versions by @salmanmkc in https://github.com/apple/container/pull/959
* Use new IP/CIDR types from Containerization. by @jglogan in https://github.com/apple/container/pull/957
* [networks]: add prune command by @saehejkang in https://github.com/apple/container/pull/914
* Fix: Kubes Cluster in Container Crashing Container (IS#923) by @Michaelgathara in https://github.com/apple/container/pull/930
* Turn on oops=panic kernel cmdline by @dcantah in https://github.com/apple/container/pull/971
* Add support for reading env from named pipes by @Bortnyak in https://github.com/apple/container/pull/974
* Adds network IPv6 configuration. by @jglogan in https://github.com/apple/conta

_[Truncated at 4000 characters — full notes: https://github.com/apple/container/releases/tag/0.8.0]_