# CRI-O v1.35.11

> Kubernetes Core · 2026-11-03

A maintenance release focused on CPU cleanup, user-namespace handling, systemd scope cleanup, and dead-shim failures. Release bundle SBOMs now use a new SPDX format, with `bom` v0.8.0 or later required for validation.

## Check if affected
- **[breaking]** Release bundle SBOM format
  - Applies if you use `bom`.
  - Release bundle SBOMs now use SPDX 3.0.1 JSON-LD and the `.spdx.json` suffix instead of SPDX 2.3 tag-value `.spdx` files. Validation with `bom` requires v0.8.0 or later.

## Other recorded changes
- 5 (defect_corrected 4, value_changed 1)

[Full analysis](https://ratatosk.io/en/releases/cri-o/v1.35.11)

[Original release notes](https://github.com/cri-o/cri-o/releases/tag/v1.35.11)