What's Changed
- We updated our build process to bring in newly compiled versions of the Linux container runtime dependencies (containerd, runc, CNI plugins, etc.). We grab most of these from Wolfi's APK repository. For runc, we needed a statically compiled version, so we compile that ourselves (pipeline here). The motivation for this was to clear out CVE's related to the version of Go that each of those binaries were compiled with. If you scan the Linux tarball in this release you should find no CVE's (at the time of publishing at least)
- Fix task caches by reverting [#9330] but keep using sha256 instead of sha1 by @taylorsilva [#9429]
- As a side-note, you can define absolute paths for your task caches. See https://github.com/concourse/docs/pull/583 for details
📦 Bundled Resource Types
- bosh-io-release: [v1.3.3](https://github.com/concourse/bosh-io-release-resource/releases/tag/v1.3.3)
- bosh-io-stemcell: [v1.5.3](https://github.com/concourse/bosh-io-stemcell-resource/releases/tag/v1.5.3)
- docker-image: [v1.12.2](https://github.com/concourse/docker-image-resource/releases/tag/v1.12.2)
- git: [v1.22.0](https://github.com/concourse/git-resource/releases/tag/v1.22.0)
- github-release: [v1.13.1](https://github.com/concourse/github-release-resource/releases/tag/v1.13.1)
- hg: [v1.5.1](https://github.com/concourse/hg-resource/releases/tag/v1.5.1)
- mock: [v0.14.3](https://github.com/concourse/mock-resource/releases/tag/v0.14.3)
- pool: [v1.7.1](https://github.com/concourse/pool-resource/releases/tag/v1.7.1)
- registry-image: [v1.15.3](https://github.com/concourse/registry-image-resource/releases/tag/v1.15.3)
- s3: [v2.5.2](https://github.com/concourse/s3-resource/releases/tag/v2.5.2)
- semver: [v1.11.1](https://github.com/concourse/semver-resource/releases/tag/v1.11.1)
- time: [v1.11.1](https://github.com/concourse/time-resource/releases/tag/v1.11.1)
Full Changelog: https://github.com/concourse/concourse/compare/v8.0.1...v8.0.2