Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: containerdClear ×

containerdv2.2.7Kubernetes CoreAug 12, 2026

CHECK 3PLAN 1OTHER 5View full analysis

A container runtime and CRI release that changes checkpoint-restore defaults and lifecycle, adds CRIU and Windows log-scrubbing configuration, and expands runtime support. It also includes fixes for CRI environment handling and mount-manager activation, plus dependency manifest updates that are not operator-facing.

Check if affected (3)

breakingThe enable_experimental_restore_via_create default
Applies if you use CreateContainer.
The CRI disables enable_experimental_restore_via_create by default in CreateContainer.
breakingThe ScrubLogs default on Windows
Applies if you run on Windows.
ScrubLogs is enabled by default for Windows.
breakingCheckpoint restore without CRIU
Applies if you do not have CRIU installed.
The checkpoint restore code path is disabled when CRIU is not installed.

Plan ahead (1)

deprecatedRestore in CreateContainer, deprecated
Applies if you use CreateContainer.
The CRI deprecates restore in CreateContainer.

Source ↗

containerdv2.3.4Kubernetes CoreAug 12, 2026

CHECK 3PLAN 1OTHER 11View full analysis

A container runtime release with changes to CRI behavior, checkpoint restore handling, and configuration. It also adds CRI capabilities and fixes runtime and snapshotter defects.

Check if affected (3)

breakingCheckpoint restore in CreateContainer disabled by default
Applies if you set enable_experimental_restore_via_create.
Checkpoint restore in CreateContainer is disabled by default. The enable_experimental_restore_via_create configuration option enables it.
breakingruntimeFeatures.UserNamespacesHostNetwork enabled by default
Applies if you run CRI.
CRI sets runtimeFeatures.UserNamespacesHostNetwork to true by default.
breakingLog scrubbing enabled by default on Windows
Applies if you run Windows.
Log scrubbing is enabled by default on Windows.

Plan ahead (1)

deprecatedCheckpoint restore in CreateContainer deprecated
Applies if you use CreateContainer.
Checkpoint restore through CreateContainer is deprecated.

Source ↗

containerdv2.3.1Kubernetes CoreMay 20, 2026

ACTION 1CHECK 1PLAN 1OTHER 8View full analysis

A maintenance release focused on runtime correctness and security, including fixes across snapshotter, storage, and server components. It also contains compatibility changes and updates to the API and Go toolchain.

Action needed (1)

securityhighCVE-2026-46680 correction
The fix for CVE-2026-46680 ships in this release.

Check if affected (1)

breakingThe overlayfs "rebase" capability, disabled in user namespaces
Applies if you use overlayfs and run in a user namespace.
The overlayfs "rebase" capability is disabled when running in a user namespace.

Plan ahead (1)

deprecatedTask fields in Runc options, deprecated
Applies if you configure task fields in Runc options.
Task fields in Runc options are deprecated in this release.

Source ↗

containerdv2.3.0Kubernetes CoreApr 30, 2026

ACTION 1PLAN 1OTHER 41View full analysis

A substantial operator-facing release with new capabilities, behavior changes, a compatibility constraint, and a deprecation. It is the first annual LTS release under a Kubernetes-aligned cadence, with support planned for at least two years.

Action needed (1)

breakingPlugin names disallow commas
OCI hook adjustments accumulate owners, and commas are disallowed in plugin names in this release.

Plan ahead (1)

deprecatedThe shim.Command API, deprecated
Applies if you use shim.Command.
shim.Command is deprecated in containerd 2.3.

Source ↗

Browse by month