v1.24.0 Release 2025-05-21

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.24.0
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.24.0-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.24.0-slim

Dependency Updates:

• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.64.1 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3244
• Prevent panic when image name and stage alias are the same by @mickvangelderen in https://github.com/GoogleContainerTools/kaniko/pull/3245
• chore(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3253
• chore(deps): bump github.com/minio/highwayhash from 1.0.2 to 1.0.3 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3252
• chore(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3251
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.5 to 1.17.7 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3250
• chore(deps): bump AdityaGarg8/remove-unwanted-software from 3 to 4 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3248
• chore(deps): bump actions/setup-go from 5.0.1 to 5.0.2 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3247
• chore(deps): bump google.golang.org/api from 0.187.0 to 0.188.0 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3255
• chore(deps): bump github.com/moby/sys/signal from 0.7.0 to 0.7.1 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3256
• chore(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3257
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.7 to 1.17.8 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3258
• chore: remove aaron-prindle@ from maintainers by @aaron-prindle in https://github.com/GoogleContainerTools/kaniko/pull/3290
• chore(deps): This PR adresses CVE-2025-21613 by upgrading go-git to v5.13.1 by @aswinayyolath in https://github.com/GoogleContainerTools/kaniko/pull/3380
• fix: address outdated dependencies for go-git CVE upgrade by @JeromeJu in https://github.com/GoogleContainerTools/kaniko/pull/3440
• chore(deps): bump google-github-actions/auth from 2.1.3 to 2.1.10 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3463
• chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.8.2 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3462
• chore(deps): bump docker/build-push-action from 6.3.0 to 6.16.0 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3464
• fix: upgrade the ca-certificates source to Debian Bookworm by @tlk in https://github.com/GoogleContainerTools/kaniko/pull/3450
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.8 to 1.17.73 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3459
• chore(deps): bump github.com/containerd/containerd from 1.7.20 to 1.7.27 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3447
• chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2 by @dependabot in https://github.com/GoogleContainerTools/kaniko/pull/3446
• chore: upgrade all the dependencies to their latest versions by @plumpy in https://github.com/GoogleContainerTools/kaniko/pull/3454
• chore(release): release v1.24.0 by @JeromeJu in https://github.com/GoogleContainerTools/kaniko/pull/3487

Huge thank you for this release towards our contributors:

• Aaron Prindle
• Aswin A
• dependabot[bot]
• Michael Plump
• Mick van Gelderen
• Thomas L. Kjeldsen