# Confidential Containers v0.23.0

> Security · 2026-09-28

A capability-focused release adds attestation, plugin, storage, and CLI functionality while changing defaults and supported components. It also removes the `eHSM` and `online-sev-kbc` integrations from `guest-components` and retains platform limitations.

## Action needed
- **[breaking]** Default-enabled `Trustee` external plugin
  - The `Trustee` external plugin is enabled by default in this release.

## Check if affected
- **[breaking]** `eHSM` support removed from `guest-components`
  - Applies if you use `eHSM`.
  - Support for `eHSM` is removed from `guest-components`.
- **[breaking]** `online-sev-kbc` support removed from `guest-components`
  - Applies if you use `online-sev-kbc`.
  - Support for `online-sev-kbc` is removed from `guest-components`.

## Other recorded changes
- 27 (value_changed 15, added 11, constraint_changed 1)

[Full analysis](https://ratatosk.io/en/releases/confidential-containers/v0.23.0)

[Original release notes](https://github.com/confidential-containers/confidential-containers/releases/tag/v0.23.0)