v5.8.8

Podman v5.8.8 fixes CVE-2026-94603, a vulnerability where running a checkpoint image could disable all sandboxing, including user-specified security settings. To address this, the release removes support for checkpoint images in podman run entirely. The maintainers argue that checkpoints ignore user-defined security configurations and are too difficult to run safely given the differing security models between standard images and checkpoints. This breaking change effectively deprecates a feature to enforce stricter sandboxing defaults.