Bump Buildah to v1.27.7

Signed-off-by: Chris Evich <[email protected]>

Author: cevich

CHANGELOG.md

@@ -2,6 +2,42 @@
 
 # Changelog
 
+## v1.27.7 (2025-12-11)
+
+    conformance test: ignore file type bits when comparing layers
+    Builder.SetWorkDir(): trim off a path separator suffix, if there is one
+    commit: set "parent" for docker format only when requested
+    Stop setting "parent" in docker format
+    cross-compile: drop windows as a target GOOS
+    Fix linter errors
+    Makefile: run unit and conformance tests without -cover
+    .cirrus: run -race only on non-PR branch
+    tests/tools: update ginkgo and golangci-lint
+    Remove -cover flag from test-unit target
+    Adjust supportability date to match RHEL 8.6
+    Skip bud with --cpu-shares test on runc/cgroupsv2
+    Temporarily hard-skip bud-multiple-platform-values test
+    Adjust tests for new CI environment
+    CI: switch to debian for testing there, re-enable some tests
+    CI: run integration tests on Fedora with both crun and runc
+    buildah-build(1): clarify that --cgroup-parent affects RUN instructions
+    runUsingRuntime: use named constants for runtime states
+    Add a dummy "runtime" that just dumps its config file
+    run: handle relabeling bind mounts ourselves
+    Integration tests: run git daemon on a random-but-bind()able port
+    Partially work around containers/common
+    Don't set ambient capabilities
+    finish switching to moby/sys/capability
+    vendor: switch to moby/sys/capability
+    Handle Cobra v1.5 -> v1.8 behavior changes
+    Bump runc to v1.2.9 for CVE-2025-31133,52565,52881
+    util.SortMounts(): make the returned order more stable
+    Proxy module access
+    Bump x/tools to v0.26.0
+    Bump CI environment to match release-1.39
+    Bump minimum to golang 1.22.6
+    [release-1.27] tests/conformance/testdata/Dockerfile.add:...
+
 ## v1.27.6 (2025-01-30)
 
     Fix cache locks with multiple mounts

changelog.txt

@@ -1,3 +1,38 @@
+- Changelog for v1.27.7 (2025-12-11)
+  * conformance test: ignore file type bits when comparing layers
+  * Builder.SetWorkDir(): trim off a path separator suffix, if there is one
+  * commit: set "parent" for docker format only when requested
+  * Stop setting "parent" in docker format
+  * cross-compile: drop windows as a target GOOS
+  * Fix linter errors
+  * Makefile: run unit and conformance tests without -cover
+  * .cirrus: run -race only on non-PR branch
+  * tests/tools: update ginkgo and golangci-lint
+  * Remove -cover flag from test-unit target
+  * Adjust supportability date to match RHEL 8.6
+  * Skip bud with --cpu-shares test on runc/cgroupsv2
+  * Temporarily hard-skip bud-multiple-platform-values test
+  * Adjust tests for new CI environment
+  * CI: switch to debian for testing there, re-enable some tests
+  * CI: run integration tests on Fedora with both crun and runc
+  * buildah-build(1): clarify that --cgroup-parent affects RUN instructions
+  * runUsingRuntime: use named constants for runtime states
+  * Add a dummy "runtime" that just dumps its config file
+  * run: handle relabeling bind mounts ourselves
+  * Integration tests: run git daemon on a random-but-bind()able port
+  * Partially work around containers/common
+  * Don't set ambient capabilities
+  * finish switching to moby/sys/capability
+  * vendor: switch to moby/sys/capability
+  * Handle Cobra v1.5 -> v1.8 behavior changes
+  * Bump runc to v1.2.9 for CVE-2025-31133,52565,52881
+  * util.SortMounts(): make the returned order more stable
+  * Proxy module access
+  * Bump x/tools to v0.26.0
+  * Bump CI environment to match release-1.39
+  * Bump minimum to golang 1.22.6
+  * [release-1.27] tests/conformance/testdata/Dockerfile.add:...
+
 - Changelog for v1.27.6 (2025-01-30)
   * Fix cache locks with multiple mounts
   * Fix TOCTOU error when bind and cache mounts use "src" values

define/types.go

@@ -30,7 +30,7 @@ const (
 	Package = "buildah"
 	// Version for the Package.  Bump version in contrib/rpm/buildah.spec
 	// too.
-	Version = "1.27.6"
+	Version = "1.27.7"
 
 	// DefaultRuntime if containers.conf fails.
 	DefaultRuntime = "runc"