|
| 1 | +# v11.0.0 (2025-11-12) |
| 2 | + |
| 3 | +## OS Changes |
| 4 | +- Add image signing verification for ECR images signed by AWS Signer ([#722]) |
| 5 | +- Add an apiclient command to lockdown the datastore to prevent further changes ([#727]) |
| 6 | +- Provide `rottweiler`, a unified storage encryption helper ([#717]) |
| 7 | +- Add support for encrypted storage ([#721]) |
| 8 | +- Fix `whippet` defaults and wildcard replacements ([#720]) |
| 9 | +- Add apiclient support to exclude settings prefixes and canonicalize output ([#716]) |
| 10 | +- Add `apiclient network configure` subcommand ([#714]) |
| 11 | +- Ensure that bootconfig keys are written in a consistent order ([#735]) |
| 12 | +- Enhance `bloodhound` CIS compliance checks ([#665], [#738]) |
| 13 | +- Decouple the network stack initialization from the DATA partition ([#638]) |
| 14 | +- Add EBS volumes support for ephemeral storage ([#395]) - Thanks @jesseanttila-cai |
| 15 | +- Build `systemd-257` with `cryptsetup` support ([#691]) |
| 16 | +- Update `host-ctr` go dependencies ([#723]) |
| 17 | +- Build `libcryptsetup` and `libdevmapper` with udev support ([#706]) |
| 18 | +- Support kdump for zboot kernels on aarch64 ([#707]) |
| 19 | + |
| 20 | +### Third Party Package Updates |
| 21 | +- Add `hwloc` package ([#672]) |
| 22 | +- Update `systemd-252` to v252.39 ([#700]) |
| 23 | +- Update `systemd-257` to v257.9 ([#691]) |
| 24 | +- Drop `socat` package ([#742]) |
| 25 | +- Update `libexpat` ([#695]) |
| 26 | +- Add `libudev` package ([#706]) |
| 27 | +- Update `kexec-tools` ([#707]) |
| 28 | +- Add `docker-cli-29`, `docker-engine-29` packages ([#711], [#743], [#745]) |
| 29 | +- Update `aws-otel-collector`, `aws-signing-helper` ([#715]) |
| 30 | +- Update `containerd-1.7`, `containerd-2.0`, `containerd-2.1` ([#724]) |
| 31 | + |
| 32 | +## Build Changes |
| 33 | +- Add changelog validation improvements ([#699]) |
| 34 | +- Update `bottlerocket-settings-models` to v0.17.0 ([#689]) |
| 35 | +- Update `twoliter` from v0.12.0 to v0.13.0 ([#736]) |
| 36 | + |
| 37 | +## Orchestrator Changes |
| 38 | +### Kubernetes |
| 39 | +- Update DNS IP generation to support IPv6 ([#734]) |
| 40 | +- Update to latest versions of `ecr-credential-provider` and `kubernetes` packages ([#715]) |
| 41 | +- Add `enableDebuggingHandlers`, `imageMinimumGCAge`, `maxParallelImagePulls`, `ImageMaximumGCAge` and CPU manager settings ([#689]) |
| 42 | + |
| 43 | +### ECS |
| 44 | +- Default to containerd's transfer service for `docker-engine-29` ([#730]) |
| 45 | + |
| 46 | +[#395]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/395 |
| 47 | +[#638]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/638 |
| 48 | +[#665]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/665 |
| 49 | +[#672]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/672 |
| 50 | +[#689]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/689 |
| 51 | +[#691]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/691 |
| 52 | +[#695]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/695 |
| 53 | +[#699]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/699 |
| 54 | +[#700]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/700 |
| 55 | +[#706]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/706 |
| 56 | +[#707]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/707 |
| 57 | +[#711]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/711 |
| 58 | +[#714]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/714 |
| 59 | +[#715]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/715 |
| 60 | +[#716]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/716 |
| 61 | +[#717]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/717 |
| 62 | +[#720]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/720 |
| 63 | +[#721]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/721 |
| 64 | +[#722]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/722 |
| 65 | +[#723]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/723 |
| 66 | +[#724]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/724 |
| 67 | +[#727]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/727 |
| 68 | +[#730]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/730 |
| 69 | +[#734]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/734 |
| 70 | +[#735]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/735 |
| 71 | +[#736]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/736 |
| 72 | +[#738]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/738 |
| 73 | +[#742]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/742 |
| 74 | +[#743]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/743 |
| 75 | +[#745]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/745 |
| 76 | + |
1 | 77 | # v10.9.3 (2025-11-11) |
2 | 78 |
|
3 | 79 | ## Orchestrator Changes |
|
8 | 84 |
|
9 | 85 | # v10.9.2 (2025-11-08) |
10 | 86 |
|
11 | | -## OS Changes |
| 87 | +### Third Party Package Updates |
12 | 88 | - Patch runc to set the correct mode for tmpfs mounts ([#731]) |
13 | 89 |
|
14 | 90 | [#731]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/731 |
15 | 91 |
|
16 | 92 | # v10.9.1 (2025-11-05) |
17 | 93 |
|
18 | | -## OS Changes |
| 94 | +### Third Party Package Updates |
19 | 95 | - Update runc to v1.2.8 ([#708]) |
20 | 96 |
|
21 | 97 | [#708]: https://github.com/bottlerocket-os/bottlerocket-core-kit/pull/708 |
|
0 commit comments