Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY

All Action needed Check if affected Plan ahead

KIND

Category

All AI & ML CI/CD & App Delivery Kubernetes Core Networking & Messaging Observability Orchestration & Management Provisioning & Runtime Security Storage & Data

Project: LimaClear ×

Limav2.2.0Kubernetes CoreJul 21, 2026

CHECK 3OTHER 18View full analysis

An experimental feature release adds guest, CLI, template, VM-driver, and device capabilities. It also changes the Windows default driver and socket_vmnet access constraint, removes a host dependency, and updates nerdctl.

Check if affected (3)

breakingThe default VM driver, from wsl2 to qemu
Applies if you do not configure the VM driver.
The default VM driver changes from wsl2 to qemu in Lima v2.2.0.
breakingThe socket_vmnet access constraint
Applies if you use socket_vmnet.
Access to socket_vmnet is limited from %everyone to the %admin group in Lima v2.2.0.
breakingThe almalinux-kitten template, moved to experimental/
Applies if you use almalinux-kitten.
The almalinux-kitten template moves to experimental/ in Lima v2.2.0.

Source ↗

Limav2.1.4Kubernetes CoreJul 3, 2026

OTHER 6View full analysis

Lima v2.1.4 contains behavior fixes, FreeBSD template and general template updates, a nerdctl update from v2.3.3 to v2.3.4, and a change to the JSON network-list output. No security advisories or security-specific fixes are disclosed.

Source ↗

Limav2.1.3Kubernetes CoreJun 19, 2026

CHECK 5OTHER 2View full analysis

A maintenance release that changes several defaults, updates dependencies, and fixes multiple security vulnerabilities. It also includes a fallback to scp for remote sources and destinations in auto mode.

Check if affected (5)

securitycriticalcontainerd v2.3.2 security fixes
Applies if you use containerd.
nerdctl v2.3.3 contains containerd v2.3.2, which fixes CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262.
securityhighCVE-2026-53657 and GHSA-2j9v-p4xj-cjw2 guest agent socket fix
Applies if you run a QEMU VM that uses the guest agent socket.
The fix addresses CVE-2026-53657 (GHSA-2j9v-p4xj-cjw2), which allowed an arbitrary user in a QEMU VM to gain root privilege through the guest agent socket.
breakingcontainerd.user default on non-Linux guests
Applies if you run non-Linux guests.
In limayaml, containerd.user no longer defaults to true on non-Linux guests.
+ 2 more on the release page

Source ↗

Limav2.1.2Kubernetes CoreJun 1, 2026

CHECK 1PLAN 1OTHER 34View full analysis

A feature and maintenance release with CLI and template changes, QEMU behavior updates, and fixes across drivers, hostagent, shell, and guest support. It also includes a deprecation, while no security advisories or explicitly described vulnerabilities are present.

Check if affected (1)

breakingQEMU 2MB OVMF images dropped by openSUSE
Applicability is not stated in the release notes.
openSUSE dropped the 2MB OVMF images from QEMU in version 202602.

Plan ahead (1)

deprecatedThe _LIMA_QEMU_UEFI_IN_BIOS flag, deprecated
Applies if you configure _LIMA_QEMU_UEFI_IN_BIOS.
The _LIMA_QEMU_UEFI_IN_BIOS flag is deprecated in v2.1.2.

Source ↗

Limav2.1.1Kubernetes CoreApr 3, 2026

CHECK 1OTHER 4View full analysis

A release with Windows artifacts, broader guest and template configuration support, and changed vz audio handling. It also updates the bundled nerdctl distribution and dependencies, including security updates in BuildKit and CNI plugins that are obtained by upgrading.

Check if affected (1)

securityBuildKit and CNI plugins security updates
Applies if you use BuildKit or CNI plugins.
The bundled nerdctl distribution includes updated BuildKit and CNI plugins; their security updates are described in the respective release notes.

Source ↗

Limav2.1.0Kubernetes CoreMar 17, 2026

CHECK 1OTHER 13View full analysis

A feature release that adds guest OS support, CLI capabilities, virtualization and synchronization features, template support, and a default hypervisor change for non-native architectures. The guest home directory moves from /home/${USER}.linux to /home/${USER}.guest with a compatibility symlink, and no security changes are disclosed.

Check if affected (1)

breakingQEMU as the default hypervisor for non-native architectures
Applies if QEMU runs on non-native architectures.
QEMU is the default hypervisor for non-native architectures in v2.1.0.

Source ↗

Browse by month