user/v0.4.1

What's Changed

• user: prevent possible DoS via unbounded parsing of user and group database files in CVE-2026-61801 / GHSA-mjcv-p78q-w5fw. This fixes a similar issue as CVE-2026-47262 in containerd.
• user: prevent falling back to looking up numeric usernames and improve handling of numeric user/group to prevent looking up numeric values as usernames. This fixes a similar issue as CVE-2026-46680 in containerd. #221
• user: bump Go to 1.18, modernize #198
• user: make code a bit more DRY #225
• user: test cleanups #226

Full Changelog: user/v0.4.0...user/v0.4.1

mount v0.3.5

What's Changed

• update minimum go version to go1.18
• mount: MergeTmpfsOptions: use strings.Cut
• remove legacy build tags
• adjust build-tags for darwin

Full Changelog: mount/v0.3.4...mount/v0.3.5

sequential v0.7.0

What's Changed

• update minimum go version to 1.24
• use os.OpenFile with O_FILE_FLAG_SEQUENTIAL_SCAN on Go 1.26+

Full Changelog: sequential/v0.6.0...sequential/v0.7.0

devices v0.1.0

This is the initial release of the github.com/moby/sys/devices
module. The code is taken from the
github.com/opencontainers/runc/libcontainer/devices package as
of runc v1.4.0, with a few commits on top to adapt to the new
location.

The functionality here is not used by runc itself, but is used
by higher-level runtimes to generate device configurations for
runc. See issue 181 for more details.

Most of the git history is migrated, except for some of the
pre-2015 commits. Commit runc@8f97d39 moved libcontainer
into a subdirectory, meaning the libcontainer/devices glob is
missing commits before then, but this should be sufficient.

atomicwriter v0.1.0

This is the initial release of the github.com/moby/sys/atomicwriter module,
which was migreated from the github.com/docker/docker/pkg/reexec package
at commit moby@d7b743b8569e253b61ea8d70e75146ff35d50417.

user v0.4.0

This release merges the github.com/moby/moby/pkg/idtools package
functionality. The package was previously trimmed down and is simplified
further to better fit moby/sys.

Now the package interface will just expand with:

• MkdirAllAndChown with WithOnlyNew as a MkdirOpt
• MkdirAndChown also supporting the opts
• IdentityMapping its functions RootPair, ToHost, ToContainer, Empty

Note that the Identity type is gone since SID was not used in the
package or by any of the functions. It is more common to just pass the
uid and gid.

What's Changed

• Merge functionality from github.com/moby/moby/pkg/idtools into user #182
• Makefile: fix error from test #172
• Add go fix to CI, rm old build tags #148
• Add Go 1.23, drop 1.21, bump golangci-lint #147
• ci: fix not honoring PACKAGES setting in gha Windows runners #157
• ci: checkout first, disable go caching #160
• ci: add unparam linter #158
• ci: Update macOS runner image to macOS 13 #167
• ci: add codespell #159
• ci: add codecov #180

Full Changelog: user/v0.3.0...user/v0.4.0

reexec v0.1.0

What's Changed

This is the initial release of the github.com/moby/sys/reexec module, which
is a fork of the github.com/docker/docker/pkg/reexec package at commit
moby@cc1d50a63daa725dfb8d43bba7c259107fbb9f74.

capability v0.4.0

Added

• New separate API for ambient (GetAmbient, SetAmbient, ResetAmbient)
  and bound (GetBound, DropBound) capabilities, modelled after libcap. (#176)

Fixed

• Apply now returns an error if called for non-zero pid. Before this change,
  it could silently change some capabilities of the current process, instead of
  the one identified by the pid. (#168, #174)
• Fixed tests that change capabilities to be run in a separate process. (#173)
• Other improvements in tests. (#169, #170)

Changed

• Use raw syscalls (which are slightly faster). (#176)
• Most tests are now limited to testing the public API of the package. (#162)
• Simplify parsing /proc/pid/status, add a test case. (#162)
• Optimize the number of syscall to set ambient capabilities in Apply
  by clearing them first; add a test case. (#163, #164)
• Better documentation for Apply, NewFile, NewFile2, NewPid, NewPid2. (#175)

Removed

• .golangci.yml and .codespellrc are no longer part of the package. (#158)

For the complete list of changes, see capability/CHANGELOG.md.

---

Thanks to all of the contributors who made this release possible:

• Kir Kolyshkin (@kolyshkin)
• lifubang (@lifubang)
• Sebastiaan van Stijn (@thaJeztah)
• Tianon Gravi (@tianon)

capability v0.3.0

Added

• Added ListKnown and ListSupported functions. (#153)
• LastCap is now available on non-Linux platforms (where it returns an error). (#152)

Changed

• List is now deprecated in favor of ListKnown and ListSupported. (#153)

Fixed

• Various documentation improvements. (#151)
• Fix "generated code" comment. (#153)

For the complete list of changes, see capability/CHANGELOG.md.

capability v0.2.0

What's Changed

This is the initial release of the github.com/moby/sys/capability module, which
is a fork of https://github.com/syndtr/gocapability at commit gocapability@42c35b4376354fd5.
This fork had a temporary home at https://github.com/kolyshkin/capability and was moved here
in #149.

For the complete list of changes since the fork, see CHANGELOG.md.