v1.24.0

v1.24.0 Release 2025-05-21

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.24.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.24.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.24.0-slim

Dependency Updates:

• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 by @dependabot in #3244
• Prevent panic when image name and stage alias are the same by @mickvangelderen in #3245
• chore(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in #3253
• chore(deps): bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 by @dependabot in #3252
• chore(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19 by @dependabot in #3251
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.5 to 1.17.7 by @dependabot in #3250
• chore(deps): bump AdityaGarg8/remove-unwanted-software from 3 to 4 by @dependabot in #3248
• chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in #3247
• chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 by @dependabot in #3255
• chore(deps): bump github.com/moby/sys/signal from 0.7.0 to 0.7.1 by @dependabot in #3256
• chore(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20 by @dependabot in #3257
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.7 to 1.17.8 by @dependabot in #3258
• chore: remove aaron-prindle@ from maintainers by @aaron-prindle in #3290
• chore(deps): This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1 by @aswinayyolath in #3380
• fix: address outdated dependencies for go-git CVE upgrade by @JeromeJu in #3440
• chore(deps): bump google-github-actions/auth from 2.1.3 to 2.1.10 by @dependabot in #3463
• chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.8.2 by @dependabot in #3462
• chore(deps): bump docker/build-push-action from 6.3.0 to 6.16.0 by @dependabot in #3464
• fix: upgrade the ca-certificates source to Debian Bookworm by @tlk in #3450
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.8 to 1.17.73 by @dependabot in #3459
• chore(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.27 by @dependabot in #3447
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 by @dependabot in #3446
• chore: upgrade all the dependencies to their latest versions by @plumpy in #3454
• chore(release): release v1.24.0 by @JeromeJu in #3487

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Aswin A
• dependabot[bot]
• Michael Plump
• Mick van Gelderen
• Thomas L. Kjeldsen