Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: Confidential ContainersClear ×

Confidential Containersv0.21.0SecurityMay 29, 2026

ACTION 1PLAN 4OTHER 16View full analysis

A release with Trustee, KBS, attestation, and platform-support changes, plus a security advisory fix. It also deprecates several CAA components and images planned for removal in 0.22.

Action needed (1)

securityGHSA-84rc-2q4r-45pc advisory fix
The release patches GHSA-84rc-2q4r-45pc in the guest components.

Plan ahead (4)

deprecatedpacker-built CAA podvm image deprecationdeprecated since 0.17 · removal planned in 0.22
Applies if you use the packer-built CAA podvm image.
The packer-built CAA podvm image has been deprecated since 0.17 and is planned for removal in 0.22.
deprecatedCAA docker provider deprecationdeprecated since 0.20 · removal planned in 0.22
Applies if you use the CAA docker provider.
The CAA docker provider has been deprecated since 0.20 and is planned for removal in 0.22.
deprecatedFedora-based mkosi-built CAA podvm image deprecationdeprecated since 0.20 · removal planned in 0.22
Applies if you use the Fedora-based mkosi-built CAA podvm image.
The Fedora-based mkosi-built CAA podvm image has been deprecated since 0.20 and is planned for removal in 0.22.
+ 1 more on the release page

Source ↗

Confidential Containersv0.20.0SecurityMay 5, 2026

ACTION 1PLAN 3OTHER 12View full analysis

Confidential Containers v0.20.0 combines operator-visible capability and compatibility updates with deprecations of several image and provider paths. It also includes a security fix identified by GHSA-q49m-57vm-c8cc.

Action needed (1)

securityhighGHSA-q49m-57vm-c8cc security fix
The release includes a fix for the security issue identified by GHSA-q49m-57vm-c8cc.

Plan ahead (3)

deprecatedThe Docker CAA provider, deprecatedremoval date not announced
Applies if you use the Docker CAA provider.
The Docker CAA provider is deprecated and planned to be dropped in the next release.
breakingThe Fedora-based mkosi CAA podvm image, deprecatedremoval date not announced
Applies if you use the Fedora-based mkosi CAA podvm image.
The Fedora-based mkosi CAA podvm image is deprecated and replaced with an Ubuntu image. It is planned to be dropped in the next release.
deprecatedSupport for packer images, deprecatedremoval date not announced
Applies if you use packer images.
Support for packer images is deprecated and will be dropped in some future release.

Source ↗

Browse by month