fix(deps): update module github.com/containerd/containerd to v2 - autoclosed

[gardener-ci-robot]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github.com/containerd/containerd	require	major	v1.7.18 -> v2.0.2

---

Release Notes

containerd/containerd (github.com/containerd/containerd)

v2.0.2: containerd 2.0.2

Compare Source

Welcome to the v2.0.2 release of containerd!

The second patch release for containerd 2.0 includes a number of bug fixes and improvements.

Highlights

Container Runtime Interface (CRI)

• Remove confusing warning in cri runtime config migration (#​11256)
• Fix runtime platform loading in cri image plugin init (#​11248)

Runtime

• Update runc binary to v1.2.4 (#​11239)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Jin Dong
• Derek McGowan
• Akihiro Suda
• Kazuyoshi Kato
• Henry Wang
• Krisztian Litkey
• Phil Estes
• Samuel Karp
• Sebastiaan van Stijn
• Akhil Mohan
• Brian Goff
• Chongyi Zheng
• Maksym Pavlenko
• Mike Brown
• Pierre Gimalac
• Wei Fu

Changes

23 commits

• Prepare release notes for v2.0.2 (#​11245)
  • cdaf4dfb4 Prepare release notes for v2.0.2
• Update platforms to latest rc (#​11259)
  • eb125e1dd Update platforms to latest rc
• Remove confusing warning in cri runtime config migration (#​11256)
  • 468079c5c Remove confusing warning in cri runtime config migration
• Fix runtime platform loading in cri image plugin init (#​11248)
  • a2d9d4fd5 Fix runtime platform loading in cri image plugin init
• make sure console master tty is closed on task exit (#​11246)
  • 184ffad01 Add integ test to check tty leak
  • 17181ed33 fix master tty leak due to leaking init container object
• Bump up otelttrpc to 0.1.0 (#​11242)
  • 8666e7422 Bump up otelttrpc to 0.1.0
• ctr: ctr images import --all-platforms: fix unpack (#​11236)
  • c4270430d ctr: ctr images import --all-platforms: fix unpack
• Update runc binary to v1.2.4 (#​11239)
  • 7373ddd70 update runc binary to v1.2.4
• downgrade go-difflib and go-spew to tagged releases (#​11222)
  • f34147772 downgrade go-difflib and go-spew to tagged releases
• Add a build tag to disable std plugin import (#​11213)
  • dca769485 chore: add a build tag to disable containerd plugin import
• Update golangci to 1.60.3 (#​11187)
  • 5942b3fcb Update golangci to 1.60.3

Changes from containerd/otelttrpc

6 commits

• Add dependabot and upgrade golang and dependency versions (containerd/otelttrpc#3)
  • 2d46141 upgrade golang, deps, CI versions
  • 64922e7 Add dependabot CI
• Fix concurrent map panic on metadata (containerd/otelttrpc#2)
  • 2ba3be1 Fix concurrent map panic on inject metadata
  • f50a922 UT for concurrent inject/extract metadata

Changes from containerd/platforms

6 commits

• Move windows matcher logic so all platforms can use (containerd/platforms#22)
  • 7c58292 Move windows matcher logic so all platforms can use
• replace testify with stdlib in tests (containerd/platforms#21)
  • 86a86b7 replace testify with stdlib in tests
• Replace arm64 minor variant logic with lookup table (containerd/platforms#18)
  • 364665a Replace arm64 minor variant logic with lookup table

Changes from containerd/ttrpc

5 commits

• Add MD.Clone function (containerd/ttrpc#177)
  • 430f734 Add MD.Clone
• server: fix a Serve() vs. (immediate) Shutdown() race (containerd/ttrpc#175)
  • c4d96d5 server: fix Serve() vs. immediate Shutdown() race.
  • ed6c3ba server_test: add Serve()/Shutdown() race test.

Dependency Changes

• github.com/containerd/otelttrpc ea5083f -> v0.1.0
• github.com/containerd/platforms v1.0.0-rc.0 -> v1.0.0-rc.1
• github.com/containerd/ttrpc v1.2.6 -> v1.2.7
• github.com/davecgh/go-spew d8f796a -> v1.1.1
• github.com/pmezard/go-difflib 5d4384e -> v1.0.0
• github.com/stretchr/testify v1.9.0 -> v1.10.0

Previous release can be found at v2.0.1

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.0.1: containerd 2.0.1

Compare Source

Welcome to the v2.0.1 release of containerd!

The first patch release for containerd 2.0 includes a number of bug fixes and improvements.

Highlights

Container Runtime Interface (CRI)

• Fix apply IoOwner options when not in user namespace (#​11151)
• Fix cri grpc plugin config migration (#​11140)
• Support CNI STATUS Verb (containerd/go-cni#123)

Image Distribution

• Update differ to handle zstd media types (#​11068)

Runtime

• Update runc binary to v1.2.3 (#​11142)
• Fix panic due to nil dereference cgroups v2 (#​11098)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Wei Fu
• Archit Kulkarni
• Jin Dong
• Phil Estes
• Akhil Mohan
• Akihiro Suda
• Alexey Lunev
• Austin Vazquez
• Maksym Pavlenko
• Mike Brown
• Michael Zappa
• Samuel Karp
• Sebastiaan van Stijn
• Andrey Smirnov
• Davanum Srinivas

Changes

50 commits

• Prepare release notes for v2.0.1 (#​11158)
  • b0ece5dc5 Prepare release notes for v2.0.1
• build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0 (#​11154)
  • fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
• update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ (#​11153)
  • eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
• ctr pull should unpack for default platform when transfer service is used (#​11139)
  • 44cdca68b ctr pull unpack for default platform using transfer service
• Fix apply IoOwner options when not in user namespace (#​11151)
  • 018d83650 internal/cri: should not apply IoOwner options
• Update go-cni for CNI STATUS (#​11146)
  • 5eb7995a9 feat: update go-cni version for CNI STATUS
• Fix cri grpc plugin config migration (#​11140)
  • a2302ea89 Add integration test for custom configuration
  • be5eda069 complete cri grpc config migration
• Update runc binary to v1.2.3 (#​11142)
  • a53eff53d update runc binary to v1.2.3
• Update differ to handle zstd media types (#​11068)
  • 73f57acb0 Update differ to handle zstd media types
• update to go1.23.4 / go1.22.10 (#​11109)
  • 290e8bc70 update to go1.23.4 / go1.22.10
• CI: update Fedora to 41 (#​11110)
  • 62b790bfa CI: update Fedora to 41
• Fix panic due to nil dereference cgroups v2 (#​11098)
  • 3ba2df924 fix panic due to nil dereference cgroups v2
• Publish attestation as release artifact (#​11067)
  • 34a45cab2 Publish attestation as release artifact
• Move rockylinux 9.4 to almalinux/9 in CI (#​11053)
  • 7dec6b460 move rocky 9.4 to almalinux/9 in CI
• *: should align pipe's owner with init process (#​11035)
  • cf07f28ee *: should align pipe's owner with init process
• fix: set the credentials even if not provided (#​11031)
  • 986088866 fix: set the credentials even if not provided
• fsverity_test.go: fix nil pointer derefence, fix test fail, fix minor/major device numbers resolving (#​10978)
  • 30b929ece fsverity_test.go: fix major/minor device number resolving
  • 10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail
• update runc binary to 1.2.2 (#​11023)
  • 9081e979f update runc binary to 1.2.2
• Revert "Disable vagrant strict dependency checking" (#​11009)
  • 6399c936f Revert "Disable vagrant strict dependency checking"
• fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems (#​11005)
  • a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
• bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3 (#​10997)
  • 389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
• update to go1.23.3 / go1.22.9 (#​10973)
  • 5b879f30c update to go1.23.3 / go1.22.9
• ci: enable marking 2.0 releases as latest (#​10963)
  • 458215f6c ci: enable marking 2.0 releases as latest
• Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz (#​10968)
  • e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz

Changes from containerd/go-cni

7 commits

• Support CNI STATUS Verb (containerd/go-cni#123)
  • 208eca9 support CNI status verb
• Bump github actions dependencies to match containerd CI repo and fix lint (containerd/go-cni#122)
  • 386f475 Fix ci.yml indent
  • a9b0675 Another doc commit to trigger lint?
  • 14af454 Bump github actions dependency versions
  • 9e0d096 Trivial doc commit to trigger lint

Dependency Changes

• github.com/containerd/go-cni v1.1.10 -> v1.1.11
• github.com/containerd/typeurl/v2 v2.2.2 -> v2.2.3

Previous release can be found at v2.0.0

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.0.0: containerd 2.0.0

Compare Source

Welcome to the v2.0.0 release of containerd!

The first major release of containerd 2.x focuses on the continued stability of
containerd's core feature set with an easy upgrade from containerd 1.x. This
release includes the stabilization of new features added in the last 1.x release
as well as the removal of features which were deprecated in 1.x. The goal is to
support the vast community of containerd users well into the future along with
their ever increasing deployment footprints and variety of use cases.

See containerd 2.0 documentation for details on what is new and has changed in this release.

Highlights

• Allow sections of Plugins to be merged, and not overwritten as entire sections. (#​9982)
• Add Update API for sandbox controller (#​9903)
• Configure otel from env instead of config.toml (#​8970)
• Enable NRI by default (#​9744)
• Add PluginInfo to introspection API (#​9442)
• Remove overlayfs volatile option on temp mounts (#​9555)
• Expose usage of deprecated features (#​9258)
• Use Intel ISA-L's igzip if available (#​9200)
• Introduce top level config migration (#​9223)
• Add image delete target (#​8989)
• Remove LimitNOFILE from containerd.service (#​8924)
• Add support for image expiration during garbage collection (#​9022)
• Reduce the contention between ref lock and boltdb lock in content store (#​8792)
• Remove "containerd.io/restart.logpath" label (#​8264)
• Remove aufs snapshotter (#​8263)
• Fix deadlock during NRI plugin registration (containerd/nri#79)
• Support arm64/v9 and minor variants (containerd/platforms#8)
• Fix deadlock when writing to pipe blocks (containerd/ttrpc#168)

Build and Release Toolchain

• Generate attestation for artifacts during release (#​10543)
• Remove cri-containerd-*.tar.gz release bundles (#​9096)

Container Runtime Interface (CRI)

• Use 'UserSpecifiedImage' from CRI to set the image-name annotation (#​10747)
• Fine-grained SupplementalGroups control (#​9737)
• Add support to set loopback to up (#​10238)
• KEP-3857: Recursive Read-only (RRO) mounts (#​9787)
• Add support for multiple subscribers to CRI container events (#​9661)
• Enable CDI by default (#​9621)
• Remove non-sandboxed CRI implementation (#​9228)
• Add support for userns in stateless and stateful pods with idmap mounts (KEP-127, k8s >= 1.27) (#​8287)
• Use sandboxed CRI by default (#​8994)
• Implement RuntimeConfig CRI call (#​8722)
• Add support for user namespaces (KEP-127) (#​8803)
• Remove CRI v1alpha2 (#​8276)

Go client

• Add api Go module and move all protos under api (#​10151)
• Move packages based on contributing guide (#​9365)
• Generalize plugin library (#​9214)
• Use github.com/containerd/log (#​9086)

Image Distribution

• Support to syncfs after pull by using diff plugin (#​10284)
• Skip "unknown" in image platform listing (#​10257)
• Update unpacker to fetch all provided content (#​10202)
• Enable Transfer service API to support plain HTTP (#​10024)
• Enable Transfer service to use registry configuration directory (#​9908)
• Disable the support for Schema 1 images (#​9765)
• Update Transfer service to add OCI descriptors to Progress structure (#​9630)
• Update import and export to allow references to missing content (#​9554)
• Add option to perform syncfs after pull (#​9401)
• Add image verifier transfer service plugin system based on a binary directory (#​8493)

Runtime

• Implement RuntimeStatus.features.supplemental_groups_policy from KEP-3619 (#​10410)
• Add pprof to runc-shim (#​10242)
• Provide runtime options in plugin info (#​10251)
• Store bootstrap parameters in sandbox metadata (#​9736)
• Update apparmor to allow confined runc to kill containers (#​10123)
• Support vsock connection to task api (#​9738)
• Update RuntimeDefault seccomp profile to disallow io_uring related syscalls (#​9320)
• Switch runc shim to task service v3 and fix restore (#​9233)
• Add sandboxer configuration and move sandbox controllers to plugins (#​8268)
• Add annotations to CreateSandbox request (#​8960)
• Add SandboxMetrics (#​8680)
• Publish sandbox events (#​8602)
• Remove the CriuPath field from runc's options (#​8279)
• Remove io.containerd.runtime.v1.linux and io.containerd.runc.v1 (#​8262)

Security Advisories

• [medium] RAPL accessible to a container GHSA-7ww5-4wqc-m92c

Breaking

• Remove disable_cgroup from CRI config (#​10594)
• Disable the support for Schema 1 images (#​9765)
• Update RuntimeDefault seccomp profile to disallow io_uring related syscalls (#​9320)
• Move client to subpackage (#​9316)
• Remove LimitNOFILE from containerd.service (#​8924)
• Remove CRI v1alpha2 (#​8276)
• Remove io.containerd.runtime.v1.linux and io.containerd.runc.v1 (#​8262)
• Remove "containerd.io/restart.logpath" label (#​8264)
• Remove aufs snapshotter (#​8263)

Deprecations

• Update warnings for deprecated CRI config fields (#​10509)
• Add type alias for event Envelope (#​10279)
• Postpone removal of deprecated CRI config properties (#​9966)
• Deprecate go-plugin configuration option (#​9238)
• CNI conf_template in CRI is no longer deprecated (#​8637)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Maksym Pavlenko
• Wei Fu
• Phil Estes
• Sebastiaan van Stijn
• Samuel Karp
• Krisztian Litkey
• Kazuyoshi Kato
• Austin Vazquez
• Rodrigo Campos
• Danny Canter
• Abel Feng
• Mike Brown
• Kirtana Ashok
• Akhil Mohan
• Iceber Gu
• Gabriel Adrian Samfira
• Jin Dong
• Kohei Tokunaga
• Bjorn Neergaard
• Brian Goff
• Justin Chadwell
• rongfu.leng
• James Sturtevant
• Davanum Srinivas
• Paul "TBBle" Hampson
• Henry Wang
• Enrico Weigelt
• Laura Brehm
• Marat Radchenko
• Paweł Gronowski
• Shingo Omura
• Hsing-Yu (David) Chen
• Ilya Hanov
• Cardy.Tang
• Swagat Bora
• Aditi Sharma
• Amit Barve
• Bryant Biggs
• Evan Lezar
• James Jenkins
• Jordan Liggitt
• Kay Yan
• Markus Lehtonen
• Nashwan Azhari
• Shuaiyi Zhang
• Vinayak Goyal
• helen
• Alexandru Matei
• Anthony Nandaa
• Avi Deitcher
• Charity Kathure
• Cory Snider
• Ed Bartosh
• Etienne Champetier
• Kevin Parsons
• Michael Zappa
• Milas Bowman
• lengrongfu
• ningmingxiao
• yanggang
• zounengren
• Aditya Ramani
• Adrian Reber
• Amir M. Ghazanfari
• Antonio Ojea
• Artem Khramov
• Brad Davidson
• Chen Yiyang
• Chongyi Zheng
• Christian Muehlhaeuser
• Djordje Lukic
• Edgar Lee
• Eric Lin
• Ethan Lowman
• Jiang Liu
• June Rhodes
• Kern Walster
• Lei Jitang
• Lucas Rattz
• Mahamed Ali
• Maksim An
• Michael Crosby
• Peteris Rudzusiks
• Ray Burgemeestre
• Sam Edwards
• Samruddhi Khandale
• Sascha Grunert
• Steve Griffith
• Tony Fang
• Tõnis Tiigi
• VERNOU Cédric
• Vishal Reddy Gurrala
• Xiaojin Zhang
• Yang Yang
• hang.jiang
• harshitasao
• jerryzhuang
• roman-kiselenko
• zhanluxianshen
• Aaron Lehmann
• AbdelrahmanElawady
• Adrien Delorme
• Alex Couture-Beil
• Alex Ellis
• Alex Rodriguez
• Angelos Kolaitis
• Antonio Huete Jimenez
• Antti Kervinen
• Arash Haghighat
• Arkin Modi
• Ben Foster
• Benjamin Peterson
• Bin Tang
• Bin Xin
• BinBin He
• Brennan Kinney
• Changqing Li
• ChengenH
• ChengyuZhu6
• Christian Stewart
• Colin O'Dell
• Craig Ingram
• Daisy Rong
• David Porter
• David Son
• Derek Nola
• Eng Zer Jun
• Erikson Tung
• Fabiano Fidêncio
• Fahed Dorgaa
• Gabriela Cervantes
• Gary McDonald
• Iain Macdonald
• James Lakin
• Jan Dubois
• Jaroslav Jindrak
• Javier Maestro
• Jian Wang
• Jiongchi Yu
• Julien Balestra
• Kir Kolyshkin
• Kirill A. Korinsky
• Konstantin Khlebnikov
• Lei Liu
• Matteo Pulcini
• Mauri de Souza Meneguzzo
• Mike Baynton
• Niklas Gehlen
• Pan Yibo
• Paul Meyer
• Qasim Sarfraz
• Qiutong Song
• Reinhard Tartler
• Robbie Buxton
• Robert-André Mauchin
• Ruihua Wen
• Saket Jajoo
• Sameer
• Shengjing Zhu
• Shiming Zhang
• Shukui Yang
• StepSecurity Bot
• Talon
• Tariq Ibrahim
• Tianon Gravi
• Tim Hockin
• TinaMor
• Tobias Klauser
• Tomáš Virtus
• Wang Xinwen
• William Chen
• Xinyang Ge
• Yibo Zhuang
• Yuhang Wei
• Yury Gargay
• Zechun Chen
• Zhang Tianyang
• Zoe
• baijia
• bo.jiang
• bzsuni
• charles-chenzz
• chschumacher1994
• cormick
• guangli.bao
• guangwu
• jinda.ljd
• jingtao.liang
• krglosse
• pigletfly
• rokkiter
• wangxiang
• zhangpeng
• zhaojizhuang
• 吴小白
• 张钰
• 沈陵
• 谭九鼎

Dependency Changes

• dario.cat/mergo v1.0.1 new
• github.com/AdaLogics/go-fuzz-headers 1f10f66 -> e8a1dd7
• github.com/AdamKorcz/go-118-fuzz-build 5330a85 -> 2b5cbb2
• github.com/Microsoft/go-winio v0.6.0 -> v0.6.2
• github.com/Microsoft/hcsshim v0.10.0-rc.7 -> v0.12.9
• github.com/cenkalti/backoff/v4 v4.2.0 -> v4.3.0
• github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
• github.com/checkpoint-restore/checkpointctl v1.3.0 new
• github.com/checkpoint-restore/go-criu/v7 v7.2.0 new
• github.com/cilium/ebpf v0.9.1 -> v0.11.0
• github.com/containerd/cgroups/v3 v3.0.1 -> v3.0.3
• github.com/containerd/console v1.0.3 -> v1.0.4
• github.com/containerd/containerd/api v1.8.0 new
• github.com/containerd/continuity v0.3.0 -> v0.4.4
• github.com/containerd/errdefs v1.0.0 new
• github.com/containerd/errdefs/pkg v0.3.0 new
• github.com/containerd/go-cni v1.1.9 -> v1.1.10
• github.com/containerd/go-runc v1.0.0 -> v1.1.0
• github.com/containerd/imgcrypt/v2 v2.0.0-rc.1 new
• github.com/containerd/log v0.1.0 new
• github.com/containerd/nri v0.3.0 -> v0.8.0
• github.com/containerd/otelttrpc ea5083f new
• github.com/containerd/platforms v1.0.0-rc.0 new
• github.com/containerd/plugin v1.0.0 new
• github.com/containerd/ttrpc v1.2.1 -> v1.2.6
• github.com/containerd/typeurl/v2 v2.1.0 -> v2.2.2
• github.com/containerd/zfs/v2 v2.0.0-rc.0 new
• github.com/containernetworking/cni v1.1.2 -> v1.2.3
• github.com/containernetworking/plugins v1.2.0 -> v1.5.1
• github.com/containers/ocicrypt v1.1.6 -> v1.2.0
• github.com/cpuguy83/go-md2man/v2 v2.0.2 -> v2.0.5
• github.com/davecgh/go-spew v1.1.1 -> d8f796a
• github.com/distribution/reference v0.6.0 new
• github.com/emicklei/go-restful/v3 v3.10.1 -> v3.11.0
• github.com/felixge/httpsnoop v1.0.4 new
• github.com/fsnotify/fsnotify v1.6.0 -> v1.7.0
• github.com/fxamacker/cbor/v2 v2.7.0 new
• github.com/go-jose/go-jose/v4 v4.0.4 new
• github.com/go-logr/logr v1.2.3 -> v1.4.2
• github.com/golang/protobuf v1.5.2 -> v1.5.4
• github.com/google/go-cmp v0.5.9 -> v0.6.0
• github.com/google/uuid v1.3.0 -> v1.6.0
• github.com/gorilla/websocket v1.5.0 new
• github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 new
• github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.1.0 new
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.0 -> v2.22.0
• github.com/intel/goresctrl v0.3.0 -> v0.8.0
• github.com/klauspost/compress v1.16.0 -> v1.17.11
• github.com/mdlayher/socket v0.4.1 new
• github.com/mdlayher/vsock v1.2.1 new
• github.com/mistifyio/go-zfs/v3 v3.0.1 new
• github.com/moby/spdystream v0.2.0 -> v0.4.0
• github.com/moby/sys/mountinfo v0.6.2 -> v0.7.2
• github.com/moby/sys/sequential v0.5.0 -> v0.6.0
• github.com/moby/sys/signal v0.7.0 -> v0.7.1
• github.com/moby/sys/symlink v0.2.0 -> v0.3.0
• github.com/moby/sys/user v0.3.0 new
• github.com/moby/sys/userns v0.1.0 new
• github.com/munnerz/goautoneg a7dc8b6 new
• github.com/mxk/go-flowrate cca7078 new
• github.com/opencontainers/image-spec 3a7f492 -> v1.1.0
• github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.2.0
• github.com/opencontainers/runtime-tools 946c877 -> 2e043c6
• github.com/opencontainers/selinux v1.11.0 -> v1.11.1
• github.com/pelletier/go-toml/v2 v2.2.3 new
• github.com/pmezard/go-difflib v1.0.0 -> 5d4384e
• github.com/prometheus/client_golang v1.14.0 -> v1.20.5
• github.com/prometheus/client_model v0.3.0 -> v0.6.1
• github.com/prometheus/common v0.37.0 -> v0.55.0
• github.com/prometheus/procfs v0.8.0 -> v0.15.1
• github.com/sirupsen/logrus v1.9.0 -> v1.9.3
• github.com/stefanberger/go-pkcs11uri 78d3cae -> 7828495
• github.com/stretchr/testify v1.8.2 -> v1.9.0
• github.com/urfave/cli/v2 v2.27.5 new
• github.com/vishvananda/netlink v1.2.1-beta.2 -> v1.3.0
• github.com/vishvananda/netns 2eb08e3 -> v0.0.4
• github.com/x448/float16 v0.8.4 new
• github.com/xrash/smetrics 686a1a2 new
• go.etcd.io/bbolt v1.3.7 -> v1.3.11
• go.mozilla.org/pkcs7 432b235 -> v0.9.0
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.40.0 -> v0.56.0
• go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.56.0 new
• go.opentelemetry.io/otel v1.14.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.14.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.14.0 -> v1.31.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.14.0 -> v1.31.0
• go.opentelemetry.io/otel/metric v0.37.0 -> v1.31.0
• go.opentelemetry.io/otel/sdk v1.14.0 -> v1.31.0
• go.opentelemetry.io/otel/trace v1.14.0 -> v1.31.0
• go.opentelemetry.io/proto/otlp v0.19.0 -> v1.3.1
• golang.org/x/crypto v0.1.0 -> v0.28.0
• golang.org/x/exp aacd6d4 new
• golang.org/x/mod v0.7.0 -> v0.21.0
• golang.org/x/net v0.7.0 -> v0.30.0
• golang.org/x/oauth2 v0.4.0 -> v0.22.0
• golang.org/x/sync v0.1.0 -> v0.8.0
• golang.org/x/sys v0.6.0 -> v0.26.0
• golang.org/x/term v0.5.0 -> v0.25.0
• golang.org/x/text v0.7.0 -> v0.19.0
• golang.org/x/time 90d013b -> v0.3.0
• google.golang.org/genproto/googleapis/api 5fefd90 new
• google.golang.org/genproto/googleapis/rpc 324edc3 new
• google.golang.org/grpc v1.53.0 -> v1.67.1
• google.golang.org/protobuf v1.28.1 -> v1.35.1
• k8s.io/api v0.26.2 -> v0.31.2
• k8s.io/apimachinery v0.26.2 -> v0.31.2
• k8s.io/apiserver v0.26.2 -> v0.31.2
• k8s.io/client-go v0.26.2 -> v0.31.2
• k8s.io/component-base v0.26.2 -> v0.31.2
• k8s.io/cri-api v0.26.2 -> v0.31.2
• k8s.io/klog/v2 v2.90.1 -> v2.130.1
• k8s.io/kubelet v0.31.2 new
• k8s.io/utils a5ecb01 -> 18e509b
• sigs.k8s.io/json f223a00 -> bc3834c
• sigs.k8s.io/structured-merge-diff/v4 v4.2.3 -> v4.4.1
• sigs.k8s.io/yaml v1.3.0 -> v1.4.0
• tags.cncf.io/container-device-interface v0.8.0 new
• tags.cncf.io/container-device-interface/specs-go v0.8.0 new

Previous release can be found at v1.7.0

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v1.7.25: containerd 1.7.25

Compare Source

Welcome to the v1.7.25 release of containerd!

The twenty-fifth patch release for containerd 1.7 contains various fixes
and updates.

Highlights

• Update runc binary to v1.2.4 (#​11238)
• Fix proto conflicts and update to 1.8 API (#​11184)

Container Runtime Interface (CRI)

• Fix ip_pref configuration option (#​11223)

Runtime

• Fix panic due to nil dereference cgroups v2 (#​11099)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Akihiro Suda
• Derek McGowan
• Sebastiaan van Stijn
• Wei Fu
• Maksym Pavlenko
• Akhil Mohan
• Henry Wang
• Jin Dong
• Phil Estes
• Sam Edwards
• Samuel Karp
• Brian Goff
• David Son
• Kohei Tokunaga
• Pierre Gimalac
• Yang Yang
• bo.jiang

Changes

32 commits

• Prepare release notes for v1.7.25 (#​11243)
  • bda53fc60 Prepare release notes for v1.7.25
• Update runc binary to v1.2.4 (#​11238)
  • d4a649130 update runc binary to v1.2.4
• Reduce shim plugin log level (#​11224)
  • 99c973791 runtime/v2: reduce shim plugin log
• Fix ip_pref configuration option (#​11223)
  • 0cfc1edf3 Fix "even if IPv4 comes first" test to have IPv4 first
  • 53d1fd0d9 Don't use To16() != nil to detect IPv6 addresses
• Add a build tag to disable std plugin import (#​11202) (#​11203)
  • 2b12ef2f4 chore: add a build tag to disable containerd plugin import
• bump github.com/containerd/continuity from 0.4.2 to 0.4.4 (#​11216)
  • b99091838 build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
  • 9f48f7af0 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.2
  • 79172ba16 go.mod: github.com/containerd/continuity v0.4.3
• deps: update golang.org/x/ (#​11178)
  • 2dfbe2c7c vendor: update golang.org/x/crypto dependencies
• Fix proto conflicts and update to 1.8 API (#​11184)
  • 3d7a50749 Replace use of deprecated api Envelope
  • 929e7bde6 Use api types over deprecated alias
  • 5a42503d1 Remove end of life api directory
  • c4069878e Update runtime/v2/runc/options to alias api type
  • 4d955223a Update to containerd api 1.8
  • efacd2ac7 Fix lint failures
• update runc binary to v1.2.3 (#​11143)
  • 957c31895 update runc binary to v1.2.3
• update build to go1.22.10, test go1.23.4 (#​11111)
  • 4c0db6ad6 update build to go1.22.10, test go1.23.4
• Fix panic due to nil dereference cgroups v2 (#​11099)
  • a40aa60a5 fix panic due to nil dereference cgroups v2
• Move rockylinux 9.4 to almalinux/9 in CI (#​11054)
  • b1ef1dda7 move rocky 9.4 to almalinux/9 in CI

Changes from containerd/continuity

40 commits

• go.mod: bump up (containerd/continuity#257)
  • 8ae2b5e Disable FUSE for FreeBSD
  • ef3b6f4 go.mod: bump up
• cmd/continuity/commands: MountCmd: remove macOS remnants (containerd/continuity#254)
  • 327ebdd cmd/continuity/commands: MountCmd: remove macOS remnants
• kind.String(): fix missing case statements for iota consts in switch (containerd/continuity#256)
  • 7d074e7 kind.String(): fix missing case statements for iota consts in switch
• go-fix: remove pre-go1.17 build-tags (containerd/continuity#252)
  • 433b975 go-fix: remove pre-go1.17 build-tags
• fs: properly handle ENOTSUP in copyXAttrs (containerd/continuity#245)
  • c494f3d fs: properly handle ENOTSUP in copyXAttrs
• gha: update CodeQL action to v3, run on go1.22 (containerd/continuity#251)
  • 3ca0c62 gha: update CodeQL action to v3, as v2 is deprecated
  • 1d06b76 gha: update CodeQL action to run on go1.22
• go.mod: prune indirect gopkg.in/yaml.v3 (containerd/continuity#250)
  • 3eb1ef4 cmd/continuity: tidy go.mod, go.sum
  • f0775b0 go.mod: prune indirect gopkg.in/yaml.v3
• gha: run CI on go1.22 (containerd/continuity#242)
  • f0f6869 gha: run CI on go1.22
• switch to github.com/containerd/log module (containerd/continuity#243)
  • 7d07d28 switch to github.com/containerd/log module
• Fix TestDiffDirChangeWith

---

Configuration

📅 Schedule: Branch creation - "after 07:30am,before 07:15pm,every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[gardener-ci-robot]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 19 additional dependencies were updated

Details:

Package	Change
github.com/prometheus/client_golang	v1.20.4 -> v1.20.5
cloud.google.com/go/compute/metadata	v0.3.0 -> v0.5.0
github.com/AdaLogics/go-fuzz-headers	v0.0.0-20230811130428-ced1acdcaa24 -> v0.0.0-20240806141605-e8a1dd7889d6
github.com/Microsoft/hcsshim	v0.12.3 -> v0.12.9
github.com/containerd/errdefs	v0.1.0 -> v1.0.0
github.com/containers/ocicrypt	v1.1.10 -> v1.2.0
github.com/docker/docker	v26.1.5+incompatible -> v27.1.1+incompatible
github.com/go-jose/go-jose/v4	v4.0.1 -> v4.0.4
github.com/google/go-containerregistry	v0.19.1 -> v0.20.1
github.com/grpc-ecosystem/grpc-gateway/v2	v2.20.0 -> v2.22.0
github.com/klauspost/compress	v1.17.9 -> v1.17.11
github.com/moby/sys/sequential	v0.5.0 -> v0.6.0
github.com/pelletier/go-toml/v2	v2.2.2 -> v2.2.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.53.0 -> v0.56.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.28.0 -> v1.31.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.27.0 -> v1.31.0
google.golang.org/genproto/googleapis/api	v0.0.0-20240826202546-f6391c0de4c7 -> v0.0.0-20241007155032-5fefd90f89a9
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240826202546-f6391c0de4c7 -> v0.0.0-20241021214115-324edc3d5d38
google.golang.org/grpc	v1.65.0 -> v1.67.1

[gardener-robot]

@gardener-ci-robot Thank you for your contribution.

[gardener-robot]

@gardener-ci-robot You need rebase this pull request with latest master branch. Please check.

[guewa]

build error