microsoft/kata-containers 3.19.1.kata3

3.19.1.kata3

Repository: microsoft/kata-containers

Tag: 3.19.1.kata3

Published: 2026-04-13T21:41:52Z

Prerelease: no

Release notes:

What's Changed

• ci: Delete codeql.yml by @manuelh-dev in https://github.com/microsoft/kata-containers/pull/390
• Re-add codeql.yml with proper branches by @manuelh-dev in https://github.com/microsoft/kata-containers/pull/391
• Revert "runtime: fix error when using the debug console" by @manuelh-dev in https://github.com/microsoft/kata-containers/pull/388
• node-builder: fix typo in string comparison by @sprt in https://github.com/microsoft/kata-containers/pull/392
• docs: node-builder: fix static check error by @sprt in https://github.com/microsoft/kata-containers/pull/394
• runtime: fix make test by @sprt in https://github.com/microsoft/kata-containers/pull/393
• docs: node-builder: Remove references to moby-containerd-cc by @manuelh-dev in https://github.com/microsoft/kata-containers/pull/399
• Cherry pick static-checks fixes from upstream by @sprt in https://github.com/microsoft/kata-containers/pull/398
• runtime: Enforce that OCI memory limit exceeds configurable 128MB baseline by @Camelron in https://github.com/microsoft/kata-containers/pull/389
• runtime: Set disable_image_nvdimm=true to disable pmem by @Camelron in https://github.com/microsoft/kata-containers/pull/402
• cherry-pick: ci: static-checks: Don't hardcode default repo branch by @sprt in https://github.com/microsoft/kata-containers/pull/403
• network: preseed default-gateway neighbor by @Redent0r in https://github.com/microsoft/kata-containers/pull/407
• Cherry-pick upstream CI hardening commits and eliminate pull_request_target by @sprt in https://github.com/microsoft/kata-containers/pull/411
• cherry-pick: ci: Run Zizmor on pushes to any branch by @sprt in https://github.com/microsoft/kata-containers/pull/413
• runtime: clh: Use msft/v41.0.139 API YAML by @Redent0r in https://github.com/microsoft/kata-containers/pull/414
• ci: security: Cherry-pick all Zizmor fixes from upstream by @sprt in https://github.com/microsoft/kata-containers/pull/416
• webhook: enforce min memory limits and allow privileged containers by @Redent0r in https://github.com/microsoft/kata-containers/pull/418
• cherry-pick: agent/rustjail: Fix double free in TTY handling by @sprt in https://github.com/microsoft/kata-containers/pull/420
• agent: disable detect_initdata_device by @danmihai1 in https://github.com/microsoft/kata-containers/pull/422
• version: Bump sirupsen/logrus by @Sumynwa in https://github.com/microsoft/kata-containers/pull/426
• msft-main: runtime: upgrade to CH v51.1 by @Redent0r in https://github.com/microsoft/kata-containers/pull/439

Full Changelog: https://github.com/microsoft/kata-containers/compare/3.19.1.kata2...3.19.1.kata3