[ANNOUNCE] Release 5.4

[Jan Kiszka]

Hi all,

A new release 5.4 is available. A big thanks to all contributors:
Felix Moessbauer, Jan Kiszka, Jorge Solla Rubiales, João Marcos Costa
(Schneider Electric)

Highlights in 5.4
- kas: only disable ssh host key checking in CI environments (CVE-2026-54548)
- kas: add support for isar-rootless build system
- kas: allow overriding the url property
- kas: allow overrides to remove commit ID
- kas: consistently use openembedded as default build_system
- kas: Suppress unpinned repo warnings when running lock plugin
- kas: Do not warn about unpinned local repos
- kas: Do not warn about unpinned repos on enforced update
- kas: Avoid GPG warning on check if key is cached
- kas-container: add git credential cache socket support
- kas-container: let buildsystem set via CLI take precedence
- kas-container: Prefer podman over docker for new isar-rootless build mode
- kas-container: Fail container start if binfmt_misc cannot be initialized
- kas-container: Drop support for loop device
- kas-container: show --help also in absence of container engine
- kas-container: Avoid directory creations for only showing --help
- kas-container: Ensure that --runtime-args are always appended last
- docs: Fold Command Line Usage section into User Guide

Thanks,
Jan

https://github.com/siemens/kas/releases/tag/5.4
(74026ceb8fad0c9c02b865d57c03c1626a254c2f)
https://github.com/orgs/siemens/packages/container/package/kas%2Fkas
(ghcr.io/siemens/kas/kas:5.4@sha256:11f076b79b84f57cb7d933941ff619f09a7c17e562e1643d13836d5f8d0a92f3)
https://github.com/orgs/siemens/packages/container/package/kas%2Fkas-isar
(ghcr.io/siemens/kas/kas-isar:5.4@sha256:c8f53ea44645dc8eee5c4cb76fa6201bad1a5e65f8d8b99e4fb93c7fd3ec0f8b)


Felix Moessbauer (14):
kas-container: let buildsystem set via CLI take precedence
keyhandler: Avoid GPG warning on check if key is cached
consistently use openembedded as default build_system
refactor: pass context to get_build_environ
schema: add support for isar in rootless mode
kas: add support for isar-rootless build system
extend buildsystem test to check isar-rootless configuration
clean: add support for cleaning isar-rootless generated data
kas-container: configure container for nested namespaces
docs: implement kas-container usage parsing as sphinx extension
docs: let sphinx-build fail on warnings
docs: let readthedocs build fail on sphinx warnings
ssh agent: only disable host key checking in CI envs
add test for disabling ssh host key checking in CI envs

Jan Kiszka (28):
test: Fix style error
scripts: Fix twine upload pattern
ci: Bump version of buildkit-cache-dance
ci: Bump version of ghcr-cleanup-action
kas-container: Align case-esac style
kas-container: Move container engine detection after argument parsing
lock: Stop deriving from Checkout plugin
Suppress unpinned repo warnings when running lock plugin
kas-container: Move setup_kas_dirs after argument parsing
kas-container: Move setup_kas_dirs implementation close to check_and_expand
kas-container: Initialize KAS_OPTIONS_DIRECT
kas-container: Drop support for loop device
kas-container: Make usage output more consistent
kas-container: Move kas_container_cleanup into scope that requires it
repos: Do not warn about unpinned local repos
kas-container: Append extra runtime args late
kas-container: Move container engine after build system detection/check
kas-container: Prefer podman over docker when the build system is isar-rootless
kas-container: Refactor docker rootless check
kas-container: Initialize internal variable KAS_EXTRA_RUNTIME_ARGS
docs: Improve description of overrides nodes
configs: Do not warn about unpinned repos on enforced update
docs: Fix long lines
scripts: Add .inc files to doc8 check
docs: Fold Command Line Usage section into User Guide
kas: Drop useless subparser help string
kas-container: Fail container start if binfmt_misc cannot be initialized
Release 5.4

Jorge Solla Rubiales (2):
kas-container: add git credential cache socket support
docs: document KAS_GIT_CREDENTIAL_STORE environment variable

João Marcos Costa (Schneider Electric) (2):
kas: allow overriding the url property
kas: schemas-kas.json: allow overrides to remove default


--
Siemens AG, Foundational Technologies
Linux Expert Center

[Jörg Sommer]

'Jan Kiszka' via kas-devel schrieb am Mi 24. Jun, 15:19 (+0200):

> Jan Kiszka (28):
> test: Fix style error
> scripts: Fix twine upload pattern
> ci: Bump version of buildkit-cache-dance
> ci: Bump version of ghcr-cleanup-action
> kas-container: Align case-esac style
> kas-container: Move container engine detection after argument parsing

I think this commit broke passing of multiple --runtime-args. It did

```
--runtime-args | --docker-args)
[ $# -gt 0 ] || usage
- KAS_RUNTIME_ARGS="${KAS_RUNTIME_ARGS} $2"
+ KAS_EXTRA_RUNTIME_ARGS=" $2"
shift 2
;;
```

Now, calling kas-container with multiple --runtime-args (like in scripts),
only the last one counts.


Regards, Jörg

--
Navimatix GmbH T: 03641 - 327 99 0
Tatzendpromenade 2 F: 03641 - 526 306
07745 Jena www.navimatix.de

Geschäftsführer: Steffen Späthe, Jan Rommeley
Registergericht: Amtsgericht Jena, HRB 501480

[Jan Kiszka]

On 29.06.26 08:42, Jörg Sommer wrote:
> 'Jan Kiszka' via kas-devel schrieb am Mi 24. Jun, 15:19 (+0200):
>> Jan Kiszka (28):
>> test: Fix style error
>> scripts: Fix twine upload pattern
>> ci: Bump version of buildkit-cache-dance
>> ci: Bump version of ghcr-cleanup-action
>> kas-container: Align case-esac style
>> kas-container: Move container engine detection after argument parsing
>
> I think this commit broke passing of multiple --runtime-args. It did
>
> ```
> --runtime-args | --docker-args)
> [ $# -gt 0 ] || usage
> - KAS_RUNTIME_ARGS="${KAS_RUNTIME_ARGS} $2"
> + KAS_EXTRA_RUNTIME_ARGS=" $2"
> shift 2
> ;;
> ```
>
> Now, calling kas-container with multiple --runtime-args (like in scripts),
> only the last one counts.

Err... yes... sorry. Please provide a patch. If it is critical, I can
consider some 5.4.1.

Jan