Notable changes (v0.26.0):
Change how file checksum is calculated when wildcards and include/exclude patterns are involved to better align with how they are calculated in the non-wildcard path. #6238
LLB Copy operation now allows specifying required paths to be included in the copy. #6229
Fixed race condition between cache and snapshot for the Git source. #6281
Fixed race condition in HTTP cache key digest computation that could cause duplicate requests and digest mismatch errors. #6292
Runc container runtime has been updated to v1.3.3. #6331
Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for Git sources. This can be used to resolve Git commit and tag checksums and also to access the raw commit and tag objects for further verification. #6283
Source metadata requests via ResolveSourceMeta, previously available for image sources, can now be performed for HTTP sources. This can be used to access artifact checksums, last-modified time etc. #6285
Git sources can now perform verification of GPG or SSH signatures on commits and tags. Enable git signature checks via source policy. #6300 #6344
contentutil package now supports moving referrer objects when using CopyChain function. #6336
Fix fetch by commit for git source when tags change or branch names are updated. #6259
Fix http connection leak when resolving metadata from http source on non-2xx HTTP status codes. #6313
A new type of source policies has been added that supports making policy decisions on the client side via session tunnel. #6276
Add buildkit capability for detecting if source policy decisions can be made via session tunnel. #6345
Avoid intermediate type wrappers for custom fields in provenance. #6275
Add raw commit/tag object access when resolving git source metadata. #6298
Move image source resolver away from the ResolveImageConfig type to ResolveSourceMetadata. #6330 # probably not needed for changelog
Fix inline cache used with multiple exporters. #6263
Fix handling multiple inline cache exporters configured for single build. #6272
Fix handling of annotated Git tags. The pin of the annotated tag should be the SHA of the tag and not the commit it is pointing to. #6251
Fix source policy attributes validation when multiple rules use the same identifier. #6342
Notable changes (v0.26.1):
Fix excessive chunking when fetching blobs #6366
Notable changes (v0.26.2):
Fix possible error when uploading big files to S3 cache exporter #6373

Deployment:

• gitlab-cloud-runners staging
• gitlab-cloud-runners production
• WMCS and Trusted runners