Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: Confidential ContainersClear ×

Confidential Containersv0.20.0SecurityMay 5, 2026

ACTION 1PLAN 3OTHER 12View full analysis

Confidential Containers v0.20.0 combines operator-visible capability and compatibility updates with deprecations of several image and provider paths. It also includes a security fix identified by GHSA-q49m-57vm-c8cc.

Action needed (1)

securityhighGHSA-q49m-57vm-c8cc security fix
The release includes a fix for the security issue identified by GHSA-q49m-57vm-c8cc.

Plan ahead (3)

deprecatedThe Docker CAA provider, deprecatedremoval date not announced
Applies if you use the Docker CAA provider.
The Docker CAA provider is deprecated and planned to be dropped in the next release.
breakingThe Fedora-based mkosi CAA podvm image, deprecatedremoval date not announced
Applies if you use the Fedora-based mkosi CAA podvm image.
The Fedora-based mkosi CAA podvm image is deprecated and replaced with an Ubuntu image. It is planned to be dropped in the next release.
deprecatedSupport for packer images, deprecatedremoval date not announced
Applies if you use packer images.
Support for packer images is deprecated and will be dropped in some future release.

Source ↗

Confidential Containersv0.18.0SecurityJan 23, 2026

CHECK 2PLAN 2OTHER 17View full analysis

A release that removes or deprecates several operator-facing components while adding capabilities and changing supported formats and behavior. It also updates shipped platform components, including Trustee, image-rs, guest kernels, and OVMF.

Check if affected (2)

breakingProcess-based confidential computing via enclave-cc, removed
Applies if you use enclave-cc.
Support for process-based confidential computing via enclave-cc is removed in this release.
breakingExperimental Secure Comms mode, removed from the Cloud API Adaptor
Applies if you configure Secure Comms mode.
The Cloud API Adaptor has dropped support for the experimental Secure Comms mode.

Plan ahead (2)

breakingThe CoCo operator, deprecated, with Helm chart installation
Applies if you use the CoCo operator.
The CoCo operator is deprecated. The project is now installed via a Helm chart.
deprecatedpacker guest images, deprecated in favor of mkosiremoval date not announced
Applies if you use packer images.
The Cloud API Adaptor is moving away from building guest images with packer in favor of mkosi. Support for packer images will be dropped in a future release.

Source ↗

Browse by month