Download Latest Version v1.36.3 source code.zip (28.5 MB)
Email in envelope

Get an email when there's a new version of CRI-O

Home / v1.36.2
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-07-02 6.1 kB
0
v1.36.2 source code.tar.gz 2026-07-02 21.7 MB
0
v1.36.2 source code.zip 2026-07-02 28.6 MB
0
Totals: 3 Items   50.3 MB 0

CRI-O v1.36.2

The release notes have been generated for the commit range v1.36.1...v1.36.2 on Thu, 02 Jul 2026 00:55:41 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

The OpenVEX report for this release is available at:

The SLSA provenance attestation for this release is available at:

All release artifacts (bundles, SBOMs, VEX, and provenance) are also available as signed OCI artifacts at ghcr.io/cri-o/bundle:v1.36.2.

To verify the artifact signatures via cosign, run:

:::console
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.36.2.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.amd64.v1.36.2.tar.gz.bundle

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

:::console
> tar xfz cri-o.amd64.v1.36.2.tar.gz
> bom validate -e cri-o.amd64.v1.36.2.tar.gz.spdx -d cri-o

To verify the OpenVEX vulnerability report, run:

:::console
> cosign verify-blob cri-o.v1.36.2.openvex.json \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.v1.36.2.openvex.json.bundle

To verify the SLSA provenance attestation, run:

:::console
> cosign verify-blob cri-o.v1.36.2.provenance.json \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --bundle cri-o.v1.36.2.provenance.json.bundle

Changelog since v1.36.1

Changes by Kind

Uncategorized

  • Update gomaxprocs hook to ignore workload partitioning when considering whether to inject, as well as update the calculation to ensure containers get at least double the requested number of CPUs, to reduce potential go scheduler throttling. (#10008, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Source: README.md, updated 2026-07-02