fix(deps): update module github.com/containerd/containerd to v1.7.17 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/containerd/containerd	v1.7.11 -> v1.7.17

---

Release Notes

containerd/containerd (github.com/containerd/containerd)

v1.7.17: containerd 1.7.17

Compare Source

Welcome to the v1.7.17 release of containerd!

The seventeenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

• Use LOOP_CONFIGURE when creating loop devices (#​10209)
• Update unpacker to fetch all provided content (#​10233)
• Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts (#​10210)
• Update metadata snapshotter to lease on already exists (#​10198)
• Handle unsupported config versions (#​10165)
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Stefan Berger
• Derek McGowan
• Austin Vazquez
• Alexandru Matei
• Maksym Pavlenko
• Akihiro Suda
• Bryant Biggs
• Kevin Parsons
• Kirtana Ashok
• Phil Estes
• Kazuyoshi Kato
• Kohei Tokunaga
• Swagat Bora

Changes

43 commits

• Prepare release notes for v1.7.17 (#​10235)
  • 114b07b97 Prepare release notes for v1.7.17
• Use LOOP_CONFIGURE when creating loop devices (#​10209)
  • 803aaa680 Remove internal LoopConfig struct
  • 7bd3be948 Swap internal ioctl implementation with golang.org/x/sys
  • a0739dc0e Use LOOP_CONFIGURE when creating loop devices
• Update unpacker to fetch all provided content (#​10233)
  • 1573ea598 Update ctr image pull all platforms
  • 32b594f1b Update unpacker to always fetch all
• Update hcsshim tag to v0.11.5 (#​10232)
  • 5a03a3aee Update hcsshim tag to v0.11.5
• Update ttrpc tag to 1.2.4 (#​10221)
  • 9a1eda40f update ttrpc tag to 1.2.4
• Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts (#​10210)
  • ad85652fa Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
• Update instrumentation fuzzer with new flag (#​10229)
  • 582f3f43d Update instrumentation fuzzer with new flag
• vendor: github.com/containerd/[email protected] (#​10215)
  • a5d13689b vendor: github.com/containerd/[email protected]
• vendor: golang.org/x/[email protected] (#​10211)
  • f853bc129 vendor: golang.org/x/[email protected]
  • 837972979 vendor: golang.org/x/[email protected]
  • 56aa87792 vendor: golang.org/x/[email protected]
  • 4e6335ebd vendor: golang.org/x/[email protected]
  • 1c6c745c6 vendor: golang.org/x/[email protected]
  • 1077d38c9 vendor: golang.org/x/[email protected]
• Update tooling to Go 1.21.10, 1.22.3 for net/http bug fixes (#​10207)
  • c53b635f9 Update toolchain to Go 1.21.10 and 1.22.3
• vendor: golang.org/x/[email protected] (#​10204)
  • 4b52104f0 vendor: golang.org/x/[email protected]
  • 2f65c83b0 vendor: golang.org/x/[email protected]
  • 8a76171f7 vendor: golang.org/x/[email protected]
  • d45778523 vendor: golang.org/x/[email protected], golang.org/x/[email protected]
  • 24038de8c vendor: golang.org/x/[email protected]
• Update metadata snapshotter to lease on already exists (#​10198)
  • eb930375c Add lease test for metadata snapshotter
  • 9f6c61ab9 Update metadata snapshotter to lease on exists
• Update grpc and image-spec dependencies (#​10180)
  • 24dd403ab Update image-spec to v1.1.0
  • 189b69e24 go.mod: github.com/opencontainers/image-spec v1.1.0-rc3
  • 388fb336b Update grpc to v1.59.0
• Handle unsupported config versions (#​10165)
  • 00347b7fa Add check for unsupported config versions

Changes from containerd/imgcrypt

53 commits

• CHANGES: Updated CHANGES document for 1.1.8 release (containerd/imgcrypt#122)
  • 956b4d3 CHANGES: Updated CHANGES document for 1.1.8 release
• Synchronize enc-ctr with upstream ctr from containerd v1.6.23 and use containerd v1.6.23 in dependency (containerd/imgcrypt#120)
  • 9e8e1c1 ctr: Sync code with containerd v1.6.23 ctr
  • 7d2cca5 build(deps): bump containerd from 1.6.20 to 1.6.23
• Synchronize enc-ctr with upstream ctr from containerd v1.6.20 (containerd/imgcrypt#119)
  • 0f2559e ctr: Sync code with containerd v1.6.20 ctr
  • c48dd78 cmd: Copy IntToInt32Array into img package and use it
• Update to ocicrypt 1.1.8 and minimum go 1.20 (containerd/imgcrypt#118)
  • 6d48a4e build(deps): bump ocicrypt from 1.1.7 to 1.1.8
  • 1bc94a2 github: Use golangci-lint v1.54.1 and adjust config file
  • 9065f1d github: Test with go 1.21 and go 1.20
  • 74986f3 go.mod: Require go 1.20
• build(deps): bump google.golang.org/grpc from 1.47.0 to 1.53.0 (containerd/imgcrypt#117)
  • a2a8273 build(deps): bump google.golang.org/grpc from 1.47.0 to 1.53.0
• test: Test creating and running of container with key file missing (containerd/imgcrypt#116)
  • 286470a test: Test creating and running of container with key file missing
• Fix some issues in the test script (containerd/imgcrypt#115)
  • aa517cc test: Fix order of parameters and remove unnecessary key parameter
  • ec72311 test: Add comments to test case
  • 2959ec0 test: To be able to run testLocalKeys alone add missing env variable
• build(deps): upgrade github.com/containerd/containerd from 1.6.18 to … (containerd/imgcrypt#112)
  • a7f2760 build(deps): upgrade github.com/containerd/containerd from 1.6.18 to 1.6.20
• ci: Update golangci-lint to v1.52.2 (containerd/imgcrypt#113)
  • 002abac images: Change 'any' to 'anything' to avoid clash with built-in type 'any'
  • 5780ecc images: Replace unused function parameters with '_'
  • 7dc8592 ci: Update golangci-lint to v1.52.2
• build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (containerd/imgcrypt#109)
  • 90e4f77 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5
• Abandon go 1.18 (end-of-life) and use 1.19 and 1.20 in tests (containerd/imgcrypt#110)
  • 8fc037f tests: Upgrade toml written by test case to version 2
  • 0b31beb ci: Run tests with go 1.19 and 1.20 (abandon 1.18)
  • 523674c build(deps): Update to minimum required go v1.19
• Update to golang.org/x/[email protected] and github.com/containers/[email protected] (containerd/imgcrypt#107)
  • 96a2314 build(deps): Upgrade to github.com/containers/[email protected]
  • 1c50555 bulid(deps): Update to golang.org/x/[email protected]
  • 9645d39 build(deps): Update to minimum required go v1.18
• build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (containerd/imgcrypt#106)
  • 8daaa45 build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18
• README: Fix a typo (containerd/imgcrypt#105)
  • 12e84f5 README: Fix a typo
• build(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.12 (containerd/imgcrypt#103)
  • 4e5a73e build(deps): bump github.com/containerd/containerd from 1.6.8 to 1.6.12
• Update golangci-lint to v1.50.1 (containerd/imgcrypt#101)
  • 16a071b Update golangci-lint to v1.50.1
• Remove references to package io/ioutil (containerd/imgcrypt#100)
  • 981a3fd Remove references to package io/ioutil
• Update GitHub actions CI workflow (containerd/imgcrypt#99)
  • 06827a1 Update containerd project checks package in CI
  • f6a39e1 Update GitHub actions packages in CI workflow
  • 6383351 Update GitHub actions CI workflow OS runner images
• CI/CD: Run CodeQL on PRs and once a month (containerd/imgcrypt#98)
  • b6e16db CI/CD: Run CodeQL on PRs and once a month

Changes from containerd/ttrpc

10 commits

• Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 (containerd/ttrpc#166)
  • 272c857 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)
  • 1b4f6f8 client: Fix deadlock when writing to pipe blocks
• Bump golang.org/x/net from 0.17.0 to 0.23.0 (containerd/ttrpc#167)
  • 13b8289 Bump golang.org/x/net from 0.17.0 to 0.23.0
• Update GitHub Actions CI to resolve deprecation warnings (containerd/ttrpc#161)
  • 589a593 Update GitHub Actions CI to resolve deprecation warnings
• Fix proto3 generation error (containerd/ttrpc#158)
  • 73b6a91 Add optional feature in protobuf compiler

Dependency Changes

• github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
• github.com/Microsoft/hcsshim v0.11.4 -> v0.11.5
• github.com/containerd/imgcrypt v1.1.7 -> v1.1.8
• github.com/containerd/ttrpc v1.2.3 -> v1.2.4
• github.com/containers/ocicrypt v1.1.6 -> v1.1.10
• github.com/go-jose/go-jose/v3 v3.0.3 new
• github.com/google/uuid v1.3.0 -> v1.3.1
• github.com/opencontainers/image-spec 3a7f492 -> v1.1.0
• github.com/stefanberger/go-pkcs11uri 78d3cae -> 7828495
• golang.org/x/crypto v0.14.0 -> v0.21.0
• golang.org/x/mod v0.11.0 -> v0.12.0
• golang.org/x/net v0.17.0 -> v0.23.0
• golang.org/x/oauth2 v0.10.0 -> v0.11.0
• golang.org/x/sys v0.13.0 -> v0.18.0
• golang.org/x/term v0.13.0 -> v0.18.0
• golang.org/x/text v0.13.0 -> v0.14.0
• google.golang.org/genproto 782d3b1 -> b8732ec
• google.golang.org/genproto/googleapis/api 782d3b1 -> b8732ec
• google.golang.org/genproto/googleapis/rpc cbb8c96 -> b8732ec
• google.golang.org/grpc v1.58.3 -> v1.59.0

Previous release can be found at v1.7.16

v1.7.16: containerd 1.7.16

Compare Source

Welcome to the v1.7.16 release of containerd!

The sixteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

• Update AppArmor template to allow confined runc to kill containers (#​10129)
• Fix config import relative path glob (#​9834)
• Update AppArmor template to better support rootlesskit (#​10116)
• Update HTTP fallback to better account for TLS timeout and previous attempts (#​10112)
• Add support for HPC port forwarding (#​10008)
• Prevent GC from schedule itself with 0 period. (#​10102)
• Fix issue with using invalid token to retry fetching layer (#​10065)
• Automatically decompress archives for transfer service import (#​9989)
• Fix HTTPFallback fails when pushing manifest (#​10044)
• Add support for configuring otel from env and config deprecation notice (#​9992)
• Fix deadlock during NRI plugin registration (containerd/nri#79)

Build and Release Toolchain

• Update Go to 1.21.9 and 1.22.2 with net/http security fix (#​10115)

Container Runtime Interface (CRI)

• Fix CRI snapshotter root path when not under containerd root (#​10096)
• Fix network creation failure from CreatedAt time as 269 years ago (#​10122)
• Include userns info in PodSandboxStatus (#​9865)
• Fix default working directory Windows HostProcess containers (#​10071)
• Fix ListPodSandboxStats to skip sandboxes with missing tasks (#​10042)

Deprecations

• Add support for configuring otel from env and config deprecation notice (#​9992)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Samuel Karp
• Wei Fu
• Danny Canter
• Kazuyoshi Kato
• Kirtana Ashok
• Maksym Pavlenko
• Phil Estes
• Sebastiaan van Stijn
• Brian Goff
• Rodrigo Campos
• Akihiro Suda
• Angelos Kolaitis
• Bin Tang
• David Porter
• Edgar Lee
• Evan Lezar
• Kirill A. Korinsky
• Kohei Tokunaga
• Maksim An
• Paweł Gronowski
• Tomáš Virtus
• 张钰10307750
• 沈陵

Changes

50 commits

• Add release notes for v1.7.16 (#​10124)
  • 1c623084f Add release notes for v1.7.16
• Update AppArmor template to allow confined runc to kill containers (#​10129)
  • 18a2c36fa apparmor: Allow confined runc to kill containers
• Fix config import relative path glob (#​9834)
  • 62e9535f2 Fix config import relative path glob
• Fix CRI snapshotter root path when not under containerd root (#​10096)
  • a8ebceb97 CRI: "Fix" imageFSPath behavior
  • bd423bf84 Snapshotters: Export the root path
  • 8fb6bfa71 Add exports to proxy plugin config
  • 8916e2cf9 Add platform config to proxy plugins
• Fix network creation failure from CreatedAt time as 269 years ago (#​10122)
  • 293f5151d pod: CreatedAt time will be 269 years ago while creating cri network failed.
• Update AppArmor template to better support rootlesskit (#​10116)
  • af19e746e apparmor: add signal (receive) peer=/usr/local/bin/rootlesskit,
• Update Go to 1.21.9 and 1.22.2 with net/http security fix (#​10115)
  • 637d259dd update to go1.21.9, go1.22.2
• Update HTTP fallback to better account for TLS timeout and previous attempts (#​10112)
  • 794b0c723 Add deprecated HTTPFallback for package compatibility
  • 51c649d9d Update HTTPFallback to handle tls handshake timeout
  • aa14890ed Remove empty default tls configuration in ctr
• Add support for HPC port forwarding (#​10008)
  • 3df5d4445 Add support for HPC port forwarding
• Prevent GC from schedule itself with 0 period. (#​10102)
  • 5c15bf406 Prevent GC from schedule itself with 0 period.
• Include userns info in PodSandboxStatus (#​9865)
  • b57dc9fd3 cri/server: Add userns tests in PodSandboxStatus
  • 6e809ef13 cri: Expose userns in PodSandboxStatus rpc
• mod: bump github.com/containerd/[email protected] (#​10097)
  • 395a31901 mod: bump github.com/containerd/[email protected]
• Fix issue with using invalid token to retry fetching layer (#​10065)
  • f61de0864 fix bug that using invalid token to retry fetching layer
• Bump tags.cncf.io/container-device-interface to v0.7.2 (#​10077)
  • 7a2f49f70 Bump tags.cncf.io/container-device-interface to v0.7.2
• Fix default working directory Windows HostProcess containers (#​10071)
  • 989f1ec54 fix default working directory hostProcess
• Fix unexpected order of mounts since go 1.19 (#​10063)
  • 9f774e438 fix(cri): fix unexpected order of mounts since go 1.19
• Automatically decompress archives for transfer service import (#​9989)
  • 2aec52493 Automatically decompress archives for transfer service import
• Use different containerd sock address in tests (#​10056)
  • 8c76e7948 Use different containerd sock address in tests
• Fix HTTPFallback fails when pushing manifest (#​10044)
  • 18f4ad5ee remote: Fix HTTPFallback fails when pushing manifest
• Add support for configuring otel from env and config deprecation notice (#​9992)
  • 600ba8612 vendor: revendor OTEL
  • 9360e3716 Changes to configuring otel from env only
  • f2354894f Deprecate otel configs
• Fix ListPodSandboxStats to skip sandboxes with missing tasks (#​10042)
  • 90c309fe2 Add IsNotFound case to ListPodSandboxStats

Changes from containerd/nri

5 commits

• Fix deadlock during NRI plugin registration (containerd/nri#79)
  • c4893c7 Fix deadlock during NRI plugin registration
• go.mod: github.com/containerd/ttrpc v1.2.3 (containerd/nri#71)
  • 02a1d5e go.mod: github.com/containerd/ttrpc v1.2.3
  • eb3edc4 examples: go mod tidy

Dependency Changes

• github.com/containerd/nri v0.6.0 -> v0.6.1
• tags.cncf.io/container-device-interface v0.6.2 -> v0.7.2
• tags.cncf.io/container-device-interface/specs-go v0.6.0 -> v0.7.0

Previous release can be found at v1.7.15

v1.7.15: containerd 1.7.15

Compare Source

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a
regression introduced in v1.7.14 in the way process exits were handled.

Highlights

• Adds mediatype to OCI index record on export (#​9990)

Runtime

• Fix runc shim to only defer init process exits (#​10037)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Phil Estes
• Austin Vazquez
• Laura Brehm
• Sebastiaan van Stijn
• Talon

Changes

12 commits

• Prepare for v1.7.15 release (#​10039)
  • 4d4759b54 Prep v1.7.15 release
• Fix runc shim to only defer init process exits (#​10037)
  • 21df46766 runc-shim: only defer init process exits
• Fix compile from version control system (source) use case (#​10012)
  • 2a054213e Fix compile from version control system (source) use case
• Adds mediatype to OCI index record on export (#​9990)
  • 6605c47a4 adds mediatype to oci index record
• vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#​9975)
  • e6d91d843 vendor: github.com/golang/protobuf v1.5.4
  • 2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
  • a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

• github.com/golang/protobuf v1.5.3 -> v1.5.4
• google.golang.org/protobuf v1.31.0 -> v1.33.0

Previous release can be found at v1.7.14

v1.7.14: containerd 1.7.14

Compare Source

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

• Update builds to use go 1.21.8 (#​9933)
• Fix various timing issues with docker pusher (#​9921)
• Register imagePullThroughput and count with MiB (#​9855)
• Move high volume event logs to Trace level (#​9823)

Container Runtime Interface (CRI)

• Handle pod transition states gracefully while listing pod stats (#​9905)

Runtime

• Update runc-shim to process exec exits before init (#​9928)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Wei Fu
• Derek McGowan
• Maksym Pavlenko
• Krisztian Litkey
• Akihiro Suda
• Justin Chadwell
• Sebastiaan van Stijn
• Phil Estes
• Kirtana Ashok
• Akhil Mohan
• Austin Vazquez
• Etienne Champetier
• Jordan Liggitt
• Kohei Tokunaga
• Mike Brown
• Samuel Karp
• Davanum Srinivas
• Edgar Lee
• Henry Wang
• James Sturtevant
• Laura Brehm
• Nashwan Azhari
• Robbie Buxton
• Robert-André Mauchin
• Shukui Yang

Changes

70 commits

• Prepare release notes for v1.7.14 (#​9953)
  • 1babe6b58 Prepare release notes for v1.7.14
• Backport use Go toolchain in CI matrix to build binaries (#​9951)
  • a9bbbefcf Use the Go toolchain in CI matrix to build binaries
• Update builds to use go 1.21.8 (#​9933)
  • 1ca9a643a update to go 1.21.8, 1.22.1
• Move inline PS scripts into files (#​9938)
  • 39caf532e Move inline PS scripts into files
• Disable OOM set score unpriv test temporarily (#​9944)
  • 630226bb4 Disable OOM set score unpriv test temporarily
• Update runc-shim to process exec exits before init (#​9928)
  • de7b6bae9 runc-shim: process exec exits before init
• update to go 1.21.6, test 1.22.0 (#​9860)
  • 3b3e537ea Uninstall mingw before attempting upgrade
  • 9e24388b2 CI: Explicitly upgrade MinGW on Windows 2019 GitHub runners.
  • 5b23a4127 seccomp, apparmor: add go:noinline
  • 753422ac1 Drop go 1.20 and build against 1.22
  • a2d64218c Fix windows integration tests
  • 6379dd6f4 Update workflow files to install Go via composite action
  • a5c0d061c Extract a composite action to install Go
• Fix various timing issues with docker pusher (#​9921)
  • 52a1402df copy: prevent potential deadlock if close before fully written
  • 872746386 copy: setError should imply Close
  • a8004007a copy: remove max number of ErrResets
  • 0465472ed pushWriter: refactor reset pipe logic into separate function
  • 2577207cc copy: improve error detection from closed pipes
  • d081da86b copy: check if writer was closed before setting a pipe
  • 2a25c085b copy: remove wrapping io.NopCloser from push writer pipe
• Register imagePullThroughput and count with MiB (#​9855)
  • 711cebd48 Register imagePullThroughput and count with MiB
• Update golangci-lint to v1.56.1 (#​9900)
  • 926ceb036 fix golangci-lint errors
  • 4030ae235 Update golangci-lint to v1.56.1
  • 6620d6bfd ci: bump up golangci-lint to v1.55.2
  • b16ca72b2 Bump up golangci-lint to v1.54.2
• Handle pod transition states gracefully while listing pod stats (#​9905)
  • 39db3f18b adjust test cases to run for windows
  • 579d8b463 [cri] Handle Windows pod transitions gracefully
• Backport GitHub actions package updates (#​9876)
  • 8d6f0f2ae build(deps): bump golangci/golangci-lint-action from 3 to 4
  • 7929592b9 build(deps): bump actions/upload-artifact from 3 to 4
  • e11de777d build(deps): bump crazy-max/ghaction-github-runtime from 2 to 3
  • 2b40a4074 build(deps): bump actions/checkout from 3 to 4
  • 22feefa57 build(deps): bump actions/setup-go from 3 to 5
  • b96aa4012 build(deps): bump actions/upload-artifact from 1 to 3
  • 97763f91d build(deps): bump docker/setup-buildx-action from 2 to 3
  • 6875bb14f build(deps): bump github/codeql-action from 2 to 3
  • 87f9adb6b build(deps): bump actions/download-artifact from 3 to 4
• .github: windows should use fix critool version (#​9874)
  • d9c099a9a .github: windows should use fix critool version
• ci: update crun version to 1.14.3 (#​9850)
  • dc594b01d ci: update crun version to 1.14.3
• Add WithMetaStore to overlay snapshotter and missing unpacker.Wait for image import (#​9837)
  • 8fe0b26f1 Add missing unpacker.Wait for image import
  • 31ea2d7d9 Add WithMetaStore to overlay snapshotter to allow bringing your own
• Move high volume event logs to Trace level (#​9823)
  • 982e0cffb Move high volume event logs to Trace level
• cri: propagate deprecation list to runtime status (#​9818)
  • c79ffa277 cri: propagate deprecation list to runtime status
• ctr: print deprecation warnings on every invocation (#​9820)
  • eaebe23de ctr: print deprecation warnings on every invocation
• bug fix: make sure cri image is pinned when it is pulled outside cri (#​9784)
  • 26c057423 bug fix: make sure cri image is pinned when it is pulled outside cri
• go.{mod,sum}: update NRI dependency, fixing a potential fd double close error. (#​9783)
  • d3e997556 go.{mod,sum}: update NRI dependency, re-vendor.
• Add option to perform syncfs after pull (#​9769)
  • ea0a92ec3 *: introduce image_pull_with_sync_fs in CRI
  • 4caf44032 api: introduce sync_fs to diff.ApplyRequest
• Move certain debug logs to trace logs (#​9761)
  • 3f75af7bf Move certain debug logs to trace logs

Changes from containerd/nri

23 commits

• socketpair_windows: remove implementation for now (containerd/nri#69)
  • e47f09b socketpair_windows: remove implementation for now
• adaptation, stub: allow extra ttrpc client and server options. (containerd/nri#67)
  • 45b9e3f plugins: update dependencies.
  • f600cf6 go.{mod,sum}: update dependencies.
  • 13ee978 pkg/stub: add support for extra ttrpc options.
  • c4e2f81 pkg/adaptation: add support for extra ttrpc options.
• socketpair_unix: avoid double close(), set FD_CLOEXEC (containerd/nri#66)
  • 5d0b52b sockerpair_unix: avoid double close(), set FD_CLOEXEC
• Task: fix typo in godoc (containerd/nri#61)
  • ae7840b Task: fix typo in godoc
• Take pkg/hooks from github.com/containers/common (carry 46) (containerd/nri#55)
  • b4ac58c Take pkg/hooks from github.com/containers/common
• gha: remove GOPATH and workingdir, update actions/setup-go@v4, actions/checkout@v4 (containerd/nri#53)
  • ee96969 gha: update actions/checkout@v4
  • 7b33fbf gha: update actions/setup-go@v4
  • e33ac3e gha: remove working-dir and GOPATH
• remove containerd as dependency (containerd/nri#51)
  • da8a7e5 remove containerd as dependency
• make plugins/ulimit-adjuster a separate module (containerd/nri#54)
  • 934815e make plugins/ulimit-adjuster a separate module
• scripts: fix protobuf URL on arm64 (containerd/nri#52)
  • 9b43daa scripts: fix protobuf URL on arm64

Changes from containerd/ttrpc

21 commits

• Fix streaming with empty payloads (containerd/ttrpc#157)
  • 44ca009 Add comment
  • 6615f15 Fix linter
  • dea99e9 Fix handling of empty payloads
  • 336fc1b Add integration test to reproduce issue with empty payloads
• Bump google.golang.org/grpc from 1.57.0 to 1.57.1 (containerd/ttrpc#156)
  • 1e51c46 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
• Bump golang.org/x/net from 0.10.0 to 0.17.0 (containerd/ttrpc#155)
  • bea960d Bump golang.org/x/net from 0.10.0 to 0.17.0
• Implement support for unary interceptor chaining. (containerd/ttrpc#152)
  • 40f227d server: implement UnaryServerInterceptor chaining.
  • f984c9b client: implement UnaryClientInterceptor chaining.
• Fix grammar in comment for UserOnCloseWait. (containerd/ttrpc#153)
  • 8ca4110 Fix comment for UserOnCloseWait.
• Bump genproto dependency (containerd/ttrpc#154)
  • a2fbc14 go.mod: google.golang.org/genproto/googleapis/rpc v0.0.0-20230731190214-cbb8c96f2d6d
  • cf2b85d go.mod: bump to supported go version
• server_test: wait for OnClose in TestClientEOF. (containerd/ttrpc#150)
  • e0cd801 server_test: wait for OnClose in TestClientEOF.
• .github: give more slack for build+tests. (containerd/ttrpc#151)
  • 8d47846 .github: give more slack for build+tests.

Dependency Changes

• github.com/containerd/nri v0.4.0 -> v0.6.0
• github.com/containerd/ttrpc v1.2.2 -> v1.2.3
• google.golang.org/genproto/googleapis/rpc 782d3b1 -> cbb8c96

Previous release can be found at v1.7.13

v1.7.13: containerd 1.7.13

Compare Source

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary
in the release builds to address CVE-2024-21626

Notable Updates

• Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
• Update seccomp profile for new syscalls added since Linux 5.16 (#​9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Evan Lezar
• Paweł Gronowski
• Phil Estes
• Wei Fu

Changes

9 commits

• Prepare v1.7.13 and update runc to v1.1.12 (#​9724)
  • b97e611b9 Prepare release notes for v1.7.13
  • 2e7fa14db Update runc binary to v1.1.12
• [release/1.7] seccomp: kernel 6.7 (#​9693)
  • 1bed37871 seccomp: kernel 6.7
• [release/1.7] Update container-device-interface to v0.6.2 (#​9685)
  • 14628d4aa Update container-device-interface to v0.6.2
• [release/1.7] content: Add InfoReaderProvider (#​9658)
  • 836477930 content: Add InfoReaderProvider

Dependency Changes

• tags.cncf.io/container-device-interface v0.6.2 new
• tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

v1.7.12: containerd 1.7.12

Compare Source

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

• Fix on dialer function for Windows (#​9501)
• Improve /etc/group handling when appending groups (#​9544)
• Update shim pidfile permissions to 0644 (#​9548)
• Update runc binary to v1.1.11 (#​9596)
• Allow import and export to reference missing content (#​9600)
• Remove runc import (#​9605)
• Update Go version to 1.20.13 (#​9624)

Deprecation Warnings

• Emit deprecation warning for containerd.io/restart.logpath label usage (#​9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Akihiro Suda
• Sebastiaan van Stijn
• Wei Fu
• Derek McGowan
• Paweł Gronowski
• Jaroslav Jindrak
• Maksym Pavlenko
• Samuel Karp
• Anthony Nandaa
• Bjorn Neergaard
• Djordje Lukic
• Kay Yan

Changes

34 commits

• [release/1.7] Prepare release notes for v1.7.12 (#​9632)
  • 775d544fe Prepare release notes for v1.7.12
• [release/1.7] update to go1.20.13, test go1.21.6 (#​9624)
  • [a5dc5b894](https://togithub.com/containerd/containerd/commit/a5d

---

Configuration

📅 Schedule: Branch creation - "after 11pm every weekday,before 7am every weekday,every weekend" in timezone Europe/Brussels, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.