✓ No known CVEs patched in this version
Topics
+4 more
Summary
AI summaryUpdates v0.21.4 - 2026-06-03, What to do next?, and https://docs.dagger.io across a mixed release.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes regression in 1Password secret provider for secrets with spaces. Fixes regression in 1Password secret provider for secrets with spaces. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Fixes intermittent failure of container image tarball export after cache pruning. Fixes intermittent failure of container image tarball export after cache pruning. Source: llm_adapter@2026-06-03 Confidence: high |
— |
| Bugfix | Medium |
Fixes directory materialization issue when writing through symlinked paths. Fixes directory materialization issue when writing through symlinked paths. Source: llm_adapter@2026-06-03 Confidence: high |
— |
Full changelog
v0.21.4 - 2026-06-03
Fixed
- Fix a regression in the 1Password secret provider where secrets with spaces could not be resolved. https://github.com/dagger/dagger/pull/13297
- Container image tarball export can fail after cache pruning when the export needs layer content that is no longer retained by an owner lease. The observed failure was intermittent during engine builds, especially through Container.asTarball(forcedCompression: Zstd), with errors like a missing local content blob or a content digest not found while ensuring the requested compression type. https://github.com/dagger/dagger/pull/13307
- When WithFile/WithDirectory writes to a path that traverses a symlinked directory (e.g. ubuntu's /bin -> usr/bin), ensureDir resolved the symlink to the real view path but recursed on the parent of the original destPath instead of the parent of the resolved path. On a fresh overlay layer this skipped materializing intermediate dirs (e.g. usr) in the upperdir, so materializeExistingDir failed with 'mkdir .../usr/bin: no such file or directory'. https://github.com/dagger/dagger/pull/13308
What to do next?
- Read the documentation
- Join our Discord server
- Follow us on Twitter
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About dagger
Automation engine to build, test and ship any codebase. Runs locally, in CI, or directly in the cloud
Beta — feedback welcome: [email protected]