Tags from plugins

v1.9.1

2026-03-16T14:18:42Z

bridge: include attempted IP address in AddrAdd error message

This PR includes the IP in the `AddrAdd` error message which could help debug better with any issues while adding the IP address to the bridge and improves the readability.

Signed-off-by: Amulyam24 <[email protected]>

CNI plugins v1.9.0

2025-12-09T10:57:12Z

portmap: ensure nftables backend only intercept local traffic

portmap iptables backend uses `-m addrtype --dst-type LOCAL`
and a common chain (CNI-HOSTPORT-DNAT) for both hostPort and hostIP/hostPort.

Before this commit, nftables backend was using 2 separate chains,
`hostip_hostports` and `hostports`. The goal was to avoid using
`fib daddr type local` before we jump to `hostip_hostports`,
but this is a behavior change compared to iptables backend,
and a security issue (hostIP: 1.1.1.1 / hostPort: 53).
Also while switching from input to prerouting hook, we forgot to
add the fib lookup for `hostports`, rendering the nftables backend half broken.

To allow transparent upgrades and avoid running the fib lookup twice,
we use an intermediate chain (`hostports_all`)
```
chain hostports_all {
jump hostip_hostports
jump hostports
}
```

Long-term we want to remove `hostip_hostports`,
so all new rules are created in the `hostports` chain.

We can't use implicit chains (`jump { jump hostip_hostports; jump hostports }`)
as it's not supported by knftables.Fake yet.

Fixes 9296c5f
Fixes 01a94e1

Signed-off-by: Etienne Champetier <[email protected]>

CNI plugins v1.8.0

2025-09-01T15:53:02Z

lint: allow "util" package

Perfection is impossible.

Signed-off-by: Casey Callendrello <[email protected]>

CNI plugins v1.7.1

2025-04-25T13:01:04Z

build(deps): bump github.com/onsi/gomega in the golang group

Bumps the golang group with 1 update: [github.com/onsi/gomega](https://github.com/onsi/gomega).

Updates `github.com/onsi/gomega` from 1.36.3 to 1.37.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.3...v1.37.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: golang
...

Signed-off-by: dependabot[bot] <[email protected]>

v1.7.0: build(deps): bump github.com/onsi/gomega in the golang group

2025-04-25T11:20:34Z

build(deps): bump github.com/onsi/gomega in the golang group

Bumps the golang group with 1 update: [github.com/onsi/gomega](https://github.com/onsi/gomega).

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-version: 1.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: golang
...

Signed-off-by: dependabot[bot] <[email protected]>

v1.6.2

2025-01-06T16:15:02Z

portmap: fix iptables conditions detection

As show in the docs, iptables conditions can also start with '!'

Fixes 01a94e1

Signed-off-by: Etienne Champetier <[email protected]>

v1.6.1: portmap: fix iptables conditions detection

2024-12-02T16:08:09Z

portmap: fix iptables conditions detection

As show in the docs, iptables conditions can also start with '!'

Fixes 01a94e1

Signed-off-by: Etienne Champetier <[email protected]>

CNI plugins v1.6.0

2024-10-15T09:41:54Z

Pass status along ipam update

Signed-off-by: Lionel Jouin <[email protected]>

v1.5.1

2024-06-21T19:39:01Z

Merge pull request #1056 from containernetworking/dependabot/go_modul…

…es/golang-82cdb19fbc

build(deps): bump the golang group across 1 directory with 3 updates

CNI Plugins v1.5.0

2024-05-20T07:25:53Z

Merge pull request #1043 from containernetworking/dependabot/go_modul…

…es/golang-efff583b38

build(deps): bump the golang group with 2 updates