This release includes breaking changes for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Summary
AI summaryFixed port‑mapping error handling to abort registration on bind failures.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Builder special‑cases FROM scratch images. Builder special‑cases FROM scratch images. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Imported images register a GC root tag. Imported images register a GC root tag. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Converter matches legacy .tar.gzip and .tar.zstd Docker media types. Converter matches legacy .tar.gzip and .tar.zstd Docker media types. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Failed proxy bind errors abort registration. Failed proxy bind errors abort registration. Source: llm_adapter@2026-07-17 Confidence: high |
— |
| Bugfix | Medium |
Image accounting now includes DAG node files (blob + node sizes). Image accounting now includes DAG node files (blob + node sizes). Source: llm_adapter@2026-07-17 Confidence: high |
— |
Full changelog
v0.6.6
Bug fixes
- FROM scratch — builder now special-cases scratch
- load orphans store — imported images now register a GC root tag
- Docker media types — converter matches legacy .tar.gzip/.tar.zstd
- Port-mapping errors — failed proxy binds abort registration
- image accounting includes DAG node files (blob + node sizes)
Documentation
- Honest binary size claims
- Updated Go/Rust version badges
- Removed unverifiable performance claim
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Pullrun
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]