CRI-O
v1.37.2Kubernetes CoreOct 2, 2026
A maintenance release that updates the release bundle SBOM format and raises the required `bom` validation-tool version. No security change is stated.
Action needed (1)
breakingRelease bundle SBOM format
Release bundle SBOMs now use SPDX 3.0.1 JSON-LD and the
.suffix instead of SPDX 2.3 tag-value files with thespdx. json .suffix.spdx
Check if affected (1)
breaking
bomvalidation version requirementApplicability is not stated in the release notes.
Validating the release bundle SBOMs with
bomrequires version 0.8.0 or later.
Add CRI-O to your stack
A weekly email arrives when a release needs action. Like the breaking changes in this release.