# Chainguard Changelog — Announcement Demo

URL: https://deploy-preview-3610--ornate-narwhal-088216.netlify.app/chainguard/changelog-announcement-demo.md
Last Modified: July 14, 2026
Tags: Chainguard Containers, Changelog

Demo of the changelog with manually entered sections, showing how a breaking change and a product announcement appear at the top of a week.

 Note: This is a demo page — a copy of the changelog with a sample breaking change and product announcement added to the top of the most recent week, to show how these manually entered sections render. It is not the live changelog; see the Changelog.
This page logs notable Chainguard Containers lifecycle events week by week, newest first: images that entered their end-of-life grace period, images no longer available after their grace period ended, and images newly added to the catalog. Each event is listed once, in the week it first appeared.
Week of 2026-07-14 Breaking Change nginx images now run as a non-root user by default The nginx images below now start as UID 65532 instead of root. Containers that bind to port 80, or write to root-owned paths, will fail to start until reconfigured.
Affected: nginx:1.27, nginx:1.28 (and their -fips variants). Action: listen on port 8080 (or another port above 1024) and make any mounted paths writable by UID 65532. EOL Chainguard offers a grace period for eligible end-of-life images: up to six months of continued rebuilds and security updates while you complete your upgrade.
The following images reached the end of their grace period and are no longer available:
Image End-of-life Grace period ended envoy:1.33 2026-01-14 2026-07-14 The following images reached end-of-life and entered their grace period:
Image End-of-life Grace period ends pdns:5.1 2026-07-08 2027-01-08 cloud-sql-proxy:2.18 2026-07-11 2027-01-11 affinity-clickhouse:23.3 2026-07-14 2027-01-14 altinity-clickhouse:23.3 2026-07-14 2027-01-14 New Image Chainguard built 21 new container images this week, including both standard and FIPS variants.
ImageTierAdded crossplane-aws-* — 10 images (with FIPS variants) ImageTierAdded crossplane-aws-budgetsapplication +fips2026-07-14 crossplane-aws-cloud9-fipsfips2026-07-14 crossplane-aws-codepipelineapplication +fips2026-07-14 crossplane-aws-configserviceapplication +fips2026-07-14 crossplane-aws-daxapplication +fips2026-07-14 crossplane-aws-dmsapplication +fips2026-07-14 crossplane-aws-imagebuilderapplication +fips2026-07-14 crossplane-aws-route53recoveryreadiness-fipsfips2026-07-14 crossplane-aws-servicecatalogapplication +fips2026-07-14 crossplane-aws-wafapplication +fips2026-07-14 kubeflow-tensorboard-web-appapplication +fips2026-07-13 solr-fipsfips2026-07-14 Product Announcement Container Policies now in open beta Launched July 10, 2026.
Container Policies gives DevOps and security teams org-wide, policy-based control over which container images can be pulled. Three policies are available:
no-eol — blocks pulls of end-of-life images. support-window — restricts pulls to long-term-support versions. cooldown — delays new builds for a configurable bake period (7 days by default). Each policy runs in DRY_RUN (warn only) or ENFORCE (blocking) mode and is managed at the org level through chainctl or the API. Container Policies replaces custom scripts and third-party registry tooling with built-in guardrails, so teams no longer have to choose between taking every upstream update (and risking breaking changes) or freezing versions (and missing security fixes).
Week of 2026-07-13 EOL Chainguard offers a grace period for eligible end-of-life images: up to six months of continued rebuilds and security updates while you complete your upgrade.
The following images reached the end of their grace period and are no longer available:
Image End-of-life Grace period ended coredns:1.13 2026-01-08 2026-07-08 prometheus:3.8 2026-01-09 2026-07-09 The following images reached end-of-life and entered their grace period:
Image End-of-life Grace period ends mariadb:10.6 2026-07-06 2027-01-06 New Image Chainguard built 1 new container image this week.
ImageTierAdded fluent-bit-iamguardedapplication2026-07-06 Week of 2026-07-07 EOL Chainguard offers a grace period for eligible end-of-life images: up to six months of continued rebuilds and security updates while you complete your upgrade.
The following images reached the end of their grace period and are no longer available:
Image End-of-life Grace period ended superset:4.1 2026-01-04 2026-07-04 keycloak:26.4 2026-01-06 2026-07-06 datadog-agent:7.73 2026-01-07 2026-07-07 The following images reached end-of-life and entered their grace period:
Image End-of-life Grace period ends superset:5.0 2026-07-01 2027-01-01 perl:5.38 2026-07-02 2027-01-02 New Image Chainguard built 6 new container images this week, including both standard and FIPS variants.
ImageTierAdded kubeflow-pipelines-driverapplication2026-07-01 ansibleapplication2026-07-02 opentelemetry-collector-k8sapplication +fips2026-07-02 gitlab-runner-operatorapplication +fips2026-07-03 Week of 2026-07-01 EOL Chainguard offers a grace period for eligible end-of-life images: up to six months of continued rebuilds and security updates while you complete your upgrade.
The following images reached the end of their grace period and are no longer available:
Image End-of-life Grace period ended haproxy:3.1 2026-01-01 2026-07-01 The following images reached end-of-life and entered their grace period:
Image End-of-life Grace period ends grafana:11.6 2026-06-25 2026-12-25 kube-conformance:1.33 2026-06-28 2026-12-28 kubernetes:1.33 2026-06-28 2026-12-28 rke2-runtime:1.33 2026-06-28 2026-12-28 New Image Chainguard built 27 new container images this week, including both standard and FIPS variants.
ImageTierAdded peerdb-flow-* — 4 images ImageTierAdded peerdb-flow-apiapplication2026-06-24 peerdb-flow-maintenanceapplication2026-06-24 peerdb-flow-snapshot-workerapplication2026-06-24 peerdb-flow-workerapplication2026-06-24 dependency-track-v4-migratorapplication2026-06-24 postgres-operator-logical-backupapplication +fips2026-06-24 swagger-uiapplication +fips2026-06-24 cosmo-routerapplication +fips2026-06-25 crossplane-provider-family-gcpapplication2026-06-25 kserve-models-web-appai2026-06-25 kubeflow-katib-tfevent-metrics-collectorapplication2026-06-25 starrocks-operatorapplication +fips2026-06-25 grafana-otel-lgtmapplication +fips2026-06-26 harvesterapplication +fips2026-06-26 tbot-distrolessapplication2026-06-26 versitygwapplication +fips2026-06-26 ksops-fipsfips2026-06-28 apache-tomeeapplication2026-06-29 tomcat-iamguardedapplication +fips2026-06-29