cilium / tetragon

eBPF-based Security Observability and Runtime Enforcement
https://tetragon.io
Apache License 2.0
3.66k stars 369 forks source link

fix(deps): update module github.com/containerd/containerd to v2 (main) #3120

Open cilium-renovate[bot] opened 1 week ago

cilium-renovate[bot] commented 1 week ago

This PR contains the following updates:

Package Type Update Change
github.com/containerd/containerd require major v1.7.23 -> v2.0.0

Release Notes

containerd/containerd (github.com/containerd/containerd) ### [`v2.0.0`](https://redirect.github.com/containerd/containerd/releases/tag/v2.0.0): containerd 2.0.0 [Compare Source](https://redirect.github.com/containerd/containerd/compare/v1.7.24...v2.0.0) Welcome to the v2.0.0 release of containerd! The first major release of containerd 2.x focuses on the continued stability of containerd's core feature set with an easy upgrade from containerd 1.x. This release includes the stabilization of new features added in the last 1.x release as well as the removal of features which were deprecated in 1.x. The goal is to support the vast community of containerd users well into the future along with their ever increasing deployment footprints and variety of use cases. See [containerd 2.0](https://redirect.github.com/containerd/containerd/blob/main/docs/containerd-2.0.md) documentation for details on what is new and has changed in this release. ##### Highlights - Allow sections of Plugins to be merged, and not overwritten as entire sections. ([#​9982](https://redirect.github.com/containerd/containerd/pull/9982)) - Add Update API for sandbox controller ([#​9903](https://redirect.github.com/containerd/containerd/pull/9903)) - Configure otel from env instead of config.toml ([#​8970](https://redirect.github.com/containerd/containerd/pull/8970)) - Enable NRI by default ([#​9744](https://redirect.github.com/containerd/containerd/pull/9744)) - Add PluginInfo to introspection API ([#​9442](https://redirect.github.com/containerd/containerd/pull/9442)) - Remove overlayfs volatile option on temp mounts ([#​9555](https://redirect.github.com/containerd/containerd/pull/9555)) - Expose usage of deprecated features ([#​9258](https://redirect.github.com/containerd/containerd/pull/9258)) - Use Intel ISA-L's igzip if available ([#​9200](https://redirect.github.com/containerd/containerd/pull/9200)) - Introduce top level config migration ([#​9223](https://redirect.github.com/containerd/containerd/pull/9223)) - Add image delete target ([#​8989](https://redirect.github.com/containerd/containerd/pull/8989)) - Remove `LimitNOFILE` from `containerd.service` ([#​8924](https://redirect.github.com/containerd/containerd/pull/8924)) - Add support for image expiration during garbage collection ([#​9022](https://redirect.github.com/containerd/containerd/pull/9022)) - Reduce the contention between ref lock and boltdb lock in content store ([#​8792](https://redirect.github.com/containerd/containerd/pull/8792)) - Remove "containerd.io/restart.logpath" label ([#​8264](https://redirect.github.com/containerd/containerd/pull/8264)) - Remove `aufs` snapshotter ([#​8263](https://redirect.github.com/containerd/containerd/pull/8263)) - Fix deadlock during NRI plugin registration ([containerd/nri#79](https://redirect.github.com/containerd/nri/pull/79)) - Support arm64/v9 and minor variants ([containerd/platforms#8](https://redirect.github.com/containerd/platforms/pull/8)) - Fix deadlock when writing to pipe blocks ([containerd/ttrpc#168](https://redirect.github.com/containerd/ttrpc/pull/168)) ##### Build and Release Toolchain - Generate attestation for artifacts during release ([#​10543](https://redirect.github.com/containerd/containerd/pull/10543)) - Remove `cri-containerd-*.tar.gz` release bundles ([#​9096](https://redirect.github.com/containerd/containerd/pull/9096)) ##### Container Runtime Interface (CRI) - Use 'UserSpecifiedImage' from CRI to set the image-name annotation ([#​10747](https://redirect.github.com/containerd/containerd/pull/10747)) - Fine-grained SupplementalGroups control ([#​9737](https://redirect.github.com/containerd/containerd/pull/9737)) - Add support to set loopback to up ([#​10238](https://redirect.github.com/containerd/containerd/pull/10238)) - KEP-3857: Recursive Read-only (RRO) mounts ([#​9787](https://redirect.github.com/containerd/containerd/pull/9787)) - Add support for multiple subscribers to CRI container events ([#​9661](https://redirect.github.com/containerd/containerd/pull/9661)) - Enable CDI by default ([#​9621](https://redirect.github.com/containerd/containerd/pull/9621)) - Remove non-sandboxed CRI implementation ([#​9228](https://redirect.github.com/containerd/containerd/pull/9228)) - Add support for userns in stateless and stateful pods with idmap mounts (KEP-127, k8s >= 1.27) ([#​8287](https://redirect.github.com/containerd/containerd/pull/8287)) - Use sandboxed CRI by default ([#​8994](https://redirect.github.com/containerd/containerd/pull/8994)) - Implement RuntimeConfig CRI call ([#​8722](https://redirect.github.com/containerd/containerd/pull/8722)) - Add support for user namespaces (KEP-127) ([#​8803](https://redirect.github.com/containerd/containerd/pull/8803)) - Remove CRI v1alpha2 ([#​8276](https://redirect.github.com/containerd/containerd/pull/8276)) ##### Go client - Add api Go module and move all protos under api ([#​10151](https://redirect.github.com/containerd/containerd/pull/10151)) - Move packages based on contributing guide ([#​9365](https://redirect.github.com/containerd/containerd/pull/9365)) - Generalize plugin library ([#​9214](https://redirect.github.com/containerd/containerd/pull/9214)) - Use github.com/containerd/log ([#​9086](https://redirect.github.com/containerd/containerd/pull/9086)) ##### Image Distribution - Support to syncfs after pull by using diff plugin ([#​10284](https://redirect.github.com/containerd/containerd/pull/10284)) - Skip "unknown" in image platform listing ([#​10257](https://redirect.github.com/containerd/containerd/pull/10257)) - Update unpacker to fetch all provided content ([#​10202](https://redirect.github.com/containerd/containerd/pull/10202)) - Enable Transfer service API to support plain HTTP ([#​10024](https://redirect.github.com/containerd/containerd/pull/10024)) - Enable Transfer service to use registry configuration directory ([#​9908](https://redirect.github.com/containerd/containerd/pull/9908)) - Disable the support for Schema 1 images ([#​9765](https://redirect.github.com/containerd/containerd/pull/9765)) - Update Transfer service to add OCI descriptors to Progress structure ([#​9630](https://redirect.github.com/containerd/containerd/pull/9630)) - Update import and export to allow references to missing content ([#​9554](https://redirect.github.com/containerd/containerd/pull/9554)) - Add option to perform syncfs after pull ([#​9401](https://redirect.github.com/containerd/containerd/pull/9401)) - Add image verifier transfer service plugin system based on a binary directory ([#​8493](https://redirect.github.com/containerd/containerd/pull/8493)) ##### Runtime - Implement RuntimeStatus.features.supplemental_groups_policy from KEP-3619 ([#​10410](https://redirect.github.com/containerd/containerd/pull/10410)) - Add pprof to runc-shim ([#​10242](https://redirect.github.com/containerd/containerd/pull/10242)) - Provide runtime options in plugin info ([#​10251](https://redirect.github.com/containerd/containerd/pull/10251)) - Store bootstrap parameters in sandbox metadata ([#​9736](https://redirect.github.com/containerd/containerd/pull/9736)) - Update apparmor to allow confined runc to kill containers ([#​10123](https://redirect.github.com/containerd/containerd/pull/10123)) - Support vsock connection to task api ([#​9738](https://redirect.github.com/containerd/containerd/pull/9738)) - Update RuntimeDefault seccomp profile to disallow io_uring related syscalls ([#​9320](https://redirect.github.com/containerd/containerd/pull/9320)) - Switch runc shim to task service v3 and fix restore ([#​9233](https://redirect.github.com/containerd/containerd/pull/9233)) - Add sandboxer configuration and move sandbox controllers to plugins ([#​8268](https://redirect.github.com/containerd/containerd/pull/8268)) - Add annotations to CreateSandbox request ([#​8960](https://redirect.github.com/containerd/containerd/pull/8960)) - Add SandboxMetrics ([#​8680](https://redirect.github.com/containerd/containerd/pull/8680)) - Publish sandbox events ([#​8602](https://redirect.github.com/containerd/containerd/pull/8602)) - Remove the CriuPath field from runc's options ([#​8279](https://redirect.github.com/containerd/containerd/pull/8279)) - Remove `io.containerd.runtime.v1.linux` and `io.containerd.runc.v1` ([#​8262](https://redirect.github.com/containerd/containerd/pull/8262)) ##### Security Advisories - \[medium] RAPL accessible to a container [GHSA-7ww5-4wqc-m92c](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-7ww5-4wqc-m92c) ##### Breaking - Remove `disable_cgroup` from CRI config ([#​10594](https://redirect.github.com/containerd/containerd/pull/10594)) - Disable the support for Schema 1 images ([#​9765](https://redirect.github.com/containerd/containerd/pull/9765)) - Update RuntimeDefault seccomp profile to disallow io_uring related syscalls ([#​9320](https://redirect.github.com/containerd/containerd/pull/9320)) - Move client to subpackage ([#​9316](https://redirect.github.com/containerd/containerd/pull/9316)) - Remove `LimitNOFILE` from `containerd.service` ([#​8924](https://redirect.github.com/containerd/containerd/pull/8924)) - Remove CRI v1alpha2 ([#​8276](https://redirect.github.com/containerd/containerd/pull/8276)) - Remove `io.containerd.runtime.v1.linux` and `io.containerd.runc.v1` ([#​8262](https://redirect.github.com/containerd/containerd/pull/8262)) - Remove "containerd.io/restart.logpath" label ([#​8264](https://redirect.github.com/containerd/containerd/pull/8264)) - Remove `aufs` snapshotter ([#​8263](https://redirect.github.com/containerd/containerd/pull/8263)) ##### Deprecations - Update warnings for deprecated CRI config fields ([#​10509](https://redirect.github.com/containerd/containerd/pull/10509)) - Add type alias for event Envelope ([#​10279](https://redirect.github.com/containerd/containerd/pull/10279)) - Postpone removal of deprecated CRI config properties ([#​9966](https://redirect.github.com/containerd/containerd/pull/9966)) - Deprecate go-plugin configuration option ([#​9238](https://redirect.github.com/containerd/containerd/pull/9238)) - CNI conf_template in CRI is no longer deprecated ([#​8637](https://redirect.github.com/containerd/containerd/pull/8637)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Akihiro Suda - Maksym Pavlenko - Wei Fu - Phil Estes - Sebastiaan van Stijn - Samuel Karp - Krisztian Litkey - Kazuyoshi Kato - Austin Vazquez - Rodrigo Campos - Danny Canter - Abel Feng - Mike Brown - Kirtana Ashok - Akhil Mohan - Iceber Gu - Gabriel Adrian Samfira - Jin Dong - Kohei Tokunaga - Bjorn Neergaard - Brian Goff - Justin Chadwell - rongfu.leng - James Sturtevant - Davanum Srinivas - Paul "TBBle" Hampson - Henry Wang - Enrico Weigelt - Laura Brehm - Marat Radchenko - Paweł Gronowski - Shingo Omura - Hsing-Yu (David) Chen - Ilya Hanov - Cardy.Tang - Swagat Bora - Aditi Sharma - Amit Barve - Bryant Biggs - Evan Lezar - James Jenkins - Jordan Liggitt - Kay Yan - Markus Lehtonen - Nashwan Azhari - Shuaiyi Zhang - Vinayak Goyal - helen - Alexandru Matei - Anthony Nandaa - Avi Deitcher - Charity Kathure - Cory Snider - Ed Bartosh - Etienne Champetier - Kevin Parsons - Michael Zappa - Milas Bowman - lengrongfu - ningmingxiao - yanggang - zounengren - Aditya Ramani - Adrian Reber - Amir M. Ghazanfari - Antonio Ojea - Artem Khramov - Brad Davidson - Chen Yiyang - Chongyi Zheng - Christian Muehlhaeuser - Djordje Lukic - Edgar Lee - Eric Lin - Ethan Lowman - Jiang Liu - June Rhodes - Kern Walster - Lei Jitang - Lucas Rattz - Mahamed Ali - Maksim An - Michael Crosby - Peteris Rudzusiks - Ray Burgemeestre - Sam Edwards - Samruddhi Khandale - Sascha Grunert - Steve Griffith - Tony Fang - Tõnis Tiigi - VERNOU Cédric - Vishal Reddy Gurrala - Xiaojin Zhang - Yang Yang - hang.jiang - harshitasao - jerryzhuang - roman-kiselenko - zhanluxianshen - Aaron Lehmann - AbdelrahmanElawady - Adrien Delorme - Alex Couture-Beil - Alex Ellis - Alex Rodriguez - Angelos Kolaitis - Antonio Huete Jimenez - Antti Kervinen - Arash Haghighat - Arkin Modi - Ben Foster - Benjamin Peterson - Bin Tang - Bin Xin - BinBin He - Brennan Kinney - Changqing Li - ChengenH - ChengyuZhu6 - Christian Stewart - Colin O'Dell - Craig Ingram - Daisy Rong - David Porter - David Son - Derek Nola - Eng Zer Jun - Erikson Tung - Fabiano Fidêncio - Fahed Dorgaa - Gabriela Cervantes - Gary McDonald - Iain Macdonald - James Lakin - Jan Dubois - Jaroslav Jindrak - Javier Maestro - Jian Wang - Jiongchi Yu - Julien Balestra - Kir Kolyshkin - Kirill A. Korinsky - Konstantin Khlebnikov - Lei Liu - Matteo Pulcini - Mauri de Souza Meneguzzo - Mike Baynton - Niklas Gehlen - Pan Yibo - Paul Meyer - Qasim Sarfraz - Qiutong Song - Reinhard Tartler - Robbie Buxton - Robert-André Mauchin - Ruihua Wen - Saket Jajoo - Sameer - Shengjing Zhu - Shiming Zhang - Shukui Yang - StepSecurity Bot - Talon - Tariq Ibrahim - Tianon Gravi - Tim Hockin - TinaMor - Tobias Klauser - Tomáš Virtus - Wang Xinwen - William Chen - Xinyang Ge - Yibo Zhuang - Yuhang Wei - Yury Gargay - Zechun Chen - Zhang Tianyang - Zoe - baijia - bo.jiang - bzsuni - charles-chenzz - chschumacher1994 - cormick - guangli.bao - guangwu - jinda.ljd - jingtao.liang - krglosse - pigletfly - rokkiter - wangxiang - zhangpeng - zhaojizhuang - 吴小白 - 张钰 - 沈陵 - 谭九鼎 ##### Dependency Changes - **dario.cat/mergo** v1.0.1 ***new*** - **github.com/AdaLogics/go-fuzz-headers** [`1f10f66`](https://redirect.github.com/containerd/containerd/commit/1f10f66a31bf) -> [`e8a1dd7`](https://redirect.github.com/containerd/containerd/commit/e8a1dd7889d6) - **github.com/AdamKorcz/go-118-fuzz-build** [`5330a85`](https://redirect.github.com/containerd/containerd/commit/5330a85ea652) -> [`2b5cbb2`](https://redirect.github.com/containerd/containerd/commit/2b5cbb29f3e2) - **github.com/Microsoft/go-winio** v0.6.0 -> v0.6.2 - **github.com/Microsoft/hcsshim** v0.10.0-rc.7 -> v0.12.9 - **github.com/cenkalti/backoff/v4** v4.2.0 -> v4.3.0 - **github.com/cespare/xxhash/v2** v2.2.0 -> v2.3.0 - **github.com/checkpoint-restore/checkpointctl** v1.3.0 ***new*** - **github.com/checkpoint-restore/go-criu/v7** v7.2.0 ***new*** - **github.com/cilium/ebpf** v0.9.1 -> v0.11.0 - **github.com/containerd/cgroups/v3** v3.0.1 -> v3.0.3 - **github.com/containerd/console** v1.0.3 -> v1.0.4 - **github.com/containerd/containerd/api** v1.8.0 ***new*** - **github.com/containerd/continuity** v0.3.0 -> v0.4.4 - **github.com/containerd/errdefs** v1.0.0 ***new*** - **github.com/containerd/errdefs/pkg** v0.3.0 ***new*** - **github.com/containerd/go-cni** v1.1.9 -> v1.1.10 - **github.com/containerd/go-runc** v1.0.0 -> v1.1.0 - **github.com/containerd/imgcrypt/v2** v2.0.0-rc.1 ***new*** - **github.com/containerd/log** v0.1.0 ***new*** - **github.com/containerd/nri** v0.3.0 -> v0.8.0 - **github.com/containerd/otelttrpc** [`ea5083f`](https://redirect.github.com/containerd/containerd/commit/ea5083fda723) ***new*** - **github.com/containerd/platforms** v1.0.0-rc.0 ***new*** - **github.com/containerd/plugin** v1.0.0 ***new*** - **github.com/containerd/ttrpc** v1.2.1 -> v1.2.6 - **github.com/containerd/typeurl/v2** v2.1.0 -> v2.2.2 - **github.com/containerd/zfs/v2** v2.0.0-rc.0 ***new*** - **github.com/containernetworking/cni** v1.1.2 -> v1.2.3 - **github.com/containernetworking/plugins** v1.2.0 -> v1.5.1 - **github.com/containers/ocicrypt** v1.1.6 -> v1.2.0 - **github.com/cpuguy83/go-md2man/v2** v2.0.2 -> v2.0.5 - **github.com/davecgh/go-spew** v1.1.1 -> [`d8f796a`](https://redirect.github.com/containerd/containerd/commit/d8f796af33cc) - **github.com/distribution/reference** v0.6.0 ***new*** - **github.com/emicklei/go-restful/v3** v3.10.1 -> v3.11.0 - **github.com/felixge/httpsnoop** v1.0.4 ***new*** - **github.com/fsnotify/fsnotify** v1.6.0 -> v1.7.0 - **github.com/fxamacker/cbor/v2** v2.7.0 ***new*** - **github.com/go-jose/go-jose/v4** v4.0.4 ***new*** - **github.com/go-logr/logr** v1.2.3 -> v1.4.2 - **github.com/golang/protobuf** v1.5.2 -> v1.5.4 - **github.com/google/go-cmp** v0.5.9 -> v0.6.0 - **github.com/google/uuid** v1.3.0 -> v1.6.0 - **github.com/gorilla/websocket** v1.5.0 ***new*** - **github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus** v1.0.1 ***new*** - **github.com/grpc-ecosystem/go-grpc-middleware/v2** v2.1.0 ***new*** - **github.com/grpc-ecosystem/grpc-gateway/v2** v2.7.0 -> v2.22.0 - **github.com/intel/goresctrl** v0.3.0 -> v0.8.0 - **github.com/klauspost/compress** v1.16.0 -> v1.17.11 - **github.com/mdlayher/socket** v0.4.1 ***new*** - **github.com/mdlayher/vsock** v1.2.1 ***new*** - **github.com/mistifyio/go-zfs/v3** v3.0.1 ***new*** - **github.com/moby/spdystream** v0.2.0 -> v0.4.0 - **github.com/moby/sys/mountinfo** v0.6.2 -> v0.7.2 - **github.com/moby/sys/sequential** v0.5.0 -> v0.6.0 - **github.com/moby/sys/signal** v0.7.0 -> v0.7.1 - **github.com/moby/sys/symlink** v0.2.0 -> v0.3.0 - **github.com/moby/sys/user** v0.3.0 ***new*** - **github.com/moby/sys/userns** v0.1.0 ***new*** - **github.com/munnerz/goautoneg** [`a7dc8b6`](https://redirect.github.com/containerd/containerd/commit/a7dc8b61c822) ***new*** - **github.com/mxk/go-flowrate** [`cca7078`](https://redirect.github.com/containerd/containerd/commit/cca7078d478f) ***new*** - **github.com/opencontainers/image-spec** [`3a7f492`](https://redirect.github.com/containerd/containerd/commit/3a7f492d3f1b) -> v1.1.0 - **github.com/opencontainers/runtime-spec** v1.1.0-rc.1 -> v1.2.0 - **github.com/opencontainers/runtime-tools** [`946c877`](https://redirect.github.com/containerd/containerd/commit/946c877fa809) -> [`2e043c6`](https://redirect.github.com/containerd/containerd/commit/2e043c6bd626) - **github.com/opencontainers/selinux** v1.11.0 -> v1.11.1 - **github.com/pelletier/go-toml/v2** v2.2.3 ***new*** - **github.com/pmezard/go-difflib** v1.0.0 -> [`5d4384e`](https://redirect.github.com/containerd/containerd/commit/5d4384ee4fb2) - **github.com/prometheus/client_golang** v1.14.0 -> v1.20.5 - **github.com/prometheus/client_model** v0.3.0 -> v0.6.1 - **github.com/prometheus/common** v0.37.0 -> v0.55.0 - **github.com/prometheus/procfs** v0.8.0 -> v0.15.1 - **github.com/sirupsen/logrus** v1.9.0 -> v1.9.3 - **github.com/stefanberger/go-pkcs11uri** [`78d3cae`](https://redirect.github.com/containerd/containerd/commit/78d3cae3a980) -> [`7828495`](https://redirect.github.com/containerd/containerd/commit/78284954bff6) - **github.com/stretchr/testify** v1.8.2 -> v1.9.0 - **github.com/urfave/cli/v2** v2.27.5 ***new*** - **github.com/vishvananda/netlink** v1.2.1-beta.2 -> v1.3.0 - **github.com/vishvananda/netns** [`2eb08e3`](https://redirect.github.com/containerd/containerd/commit/2eb08e3e575f) -> v0.0.4 - **github.com/x448/float16** v0.8.4 ***new*** - **github.com/xrash/smetrics** [`686a1a2`](https://redirect.github.com/containerd/containerd/commit/686a1a2994c1) ***new*** - **go.etcd.io/bbolt** v1.3.7 -> v1.3.11 - **go.mozilla.org/pkcs7** [`432b235`](https://redirect.github.com/containerd/containerd/commit/432b2356ecb1) -> v0.9.0 - **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.40.0 -> v0.56.0 - **go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp** v0.56.0 ***new*** - **go.opentelemetry.io/otel** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/otel/metric** v0.37.0 -> v1.31.0 - **go.opentelemetry.io/otel/sdk** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/otel/trace** v1.14.0 -> v1.31.0 - **go.opentelemetry.io/proto/otlp** v0.19.0 -> v1.3.1 - **golang.org/x/crypto** v0.1.0 -> v0.28.0 - **golang.org/x/exp** [`aacd6d4`](https://redirect.github.com/containerd/containerd/commit/aacd6d4b4611) ***new*** - **golang.org/x/mod** v0.7.0 -> v0.21.0 - **golang.org/x/net** v0.7.0 -> v0.30.0 - **golang.org/x/oauth2** v0.4.0 -> v0.22.0 - **golang.org/x/sync** v0.1.0 -> v0.8.0 - **golang.org/x/sys** v0.6.0 -> v0.26.0 - **golang.org/x/term** v0.5.0 -> v0.25.0 - **golang.org/x/text** v0.7.0 -> v0.19.0 - **golang.org/x/time** [`90d013b`](https://redirect.github.com/containerd/containerd/commit/90d013bbcef8) -> v0.3.0 - **google.golang.org/genproto/googleapis/api** [`5fefd90`](https://redirect.github.com/containerd/containerd/commit/5fefd90f89a9) ***new*** - **google.golang.org/genproto/googleapis/rpc** [`324edc3`](https://redirect.github.com/containerd/containerd/commit/324edc3d5d38) ***new*** - **google.golang.org/grpc** v1.53.0 -> v1.67.1 - **google.golang.org/protobuf** v1.28.1 -> v1.35.1 - **k8s.io/api** v0.26.2 -> v0.31.2 - **k8s.io/apimachinery** v0.26.2 -> v0.31.2 - **k8s.io/apiserver** v0.26.2 -> v0.31.2 - **k8s.io/client-go** v0.26.2 -> v0.31.2 - **k8s.io/component-base** v0.26.2 -> v0.31.2 - **k8s.io/cri-api** v0.26.2 -> v0.31.2 - **k8s.io/klog/v2** v2.90.1 -> v2.130.1 - **k8s.io/kubelet** v0.31.2 ***new*** - **k8s.io/utils** [`a5ecb01`](https://redirect.github.com/containerd/containerd/commit/a5ecb0141aa5) -> [`18e509b`](https://redirect.github.com/containerd/containerd/commit/18e509b52bc8) - **sigs.k8s.io/json** [`f223a00`](https://redirect.github.com/containerd/containerd/commit/f223a00ba0e2) -> [`bc3834c`](https://redirect.github.com/containerd/containerd/commit/bc3834ca7abd) - **sigs.k8s.io/structured-merge-diff/v4** v4.2.3 -> v4.4.1 - **sigs.k8s.io/yaml** v1.3.0 -> v1.4.0 - **tags.cncf.io/container-device-interface** v0.8.0 ***new*** - **tags.cncf.io/container-device-interface/specs-go** v0.8.0 ***new*** Previous release can be found at [v1.7.0](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.0) ##### Which file should I download? - `containerd---.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04). - `containerd-static---.tar.gz`: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent. In addition to containerd, typically you will have to install [runc](https://redirect.github.com/opencontainers/runc/releases) and [CNI plugins](https://redirect.github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://redirect.github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. ### [`v1.7.24`](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.24): containerd 1.7.24 [Compare Source](https://redirect.github.com/containerd/containerd/compare/v1.7.23...v1.7.24) Welcome to the v1.7.24 release of containerd! The twenty-fourth patch release for containerd 1.7 contains various fixes and updates. ##### Highlights - Update runc binary to 1.2.2 ([#​11027](https://redirect.github.com/containerd/containerd/pull/11027)) - Fix "invalid metric type" error message for cgroup v1 ([#​10814](https://redirect.github.com/containerd/containerd/pull/10814)) ##### Container Runtime Interface (CRI) - Update the container exit log to info level ([#​11007](https://redirect.github.com/containerd/containerd/pull/11007)) ##### Image Distribution - Fix retry logic and concurrency issue with http fallback ([#​11032](https://redirect.github.com/containerd/containerd/pull/11032)) Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ##### Contributors - Derek McGowan - Phil Estes - Akhil Mohan - Akihiro Suda - Maksym Pavlenko - Austin Vazquez - Samuel Karp - Benjamin Peterson - Davanum Srinivas - Iceber Gu - Mike Brown - Sebastiaan van Stijn - Tõnis Tiigi - ningmingxiao ##### Changes
36 commits

- Prepare release notes for v1.7.24 ([#​11036](https://redirect.github.com/containerd/containerd/pull/11036)) - [`936f8e2de`](https://redirect.github.com/containerd/containerd/commit/936f8e2dee4ab47369a23a1071efd4304ba35e39) Prepare release notes for v1.7.24 - Update the container exit log to info level ([#​11007](https://redirect.github.com/containerd/containerd/pull/11007)) - [`47ff8e2b6`](https://redirect.github.com/containerd/containerd/commit/47ff8e2b6250e582c03564bb8a02eec2af19571f) add info of exited event - Fix retry logic and concurrency issue with http fallback ([#​11032](https://redirect.github.com/containerd/containerd/pull/11032)) - [`10af0d60f`](https://redirect.github.com/containerd/containerd/commit/10af0d60fbaa20cc07c0d54c60ef22e349efce42) Adds a mutex to protect fallback host - [`e426ec51b`](https://redirect.github.com/containerd/containerd/commit/e426ec51ba9f27a64ba21a2c9a0902cfc8493832) Use unix and windows specific connection error checks - [`49c9f303b`](https://redirect.github.com/containerd/containerd/commit/49c9f303b1d35101bb798cb37c57b06cd1eacf5e) Allow fallback across default ports - local: avoid writing to content root on readonly store ([#​10913](https://redirect.github.com/containerd/containerd/pull/10913)) - [`ddf2b03ed`](https://redirect.github.com/containerd/containerd/commit/ddf2b03edf74a7b72b69125efcaad724f85f8b5d) local: avoid writing to content root on readonly store - Update runc binary to 1.2.2 ([#​11027](https://redirect.github.com/containerd/containerd/pull/11027)) - [`06e72da76`](https://redirect.github.com/containerd/containerd/commit/06e72da7673ef512e381fcabdc14e15b6677a7dc) update runc binary to 1.2.2 - Revert "Disable vagrant strict dependency checking" ([#​11011](https://redirect.github.com/containerd/containerd/pull/11011)) - [`23a31ce63`](https://redirect.github.com/containerd/containerd/commit/23a31ce630a580517d741f6160bf146d17dbbf8b) Revert "Disable vagrant strict dependency checking" - testutil: avoid conflict with continuity/testutil ([#​10956](https://redirect.github.com/containerd/containerd/pull/10956)) - [`4bd411f8c`](https://redirect.github.com/containerd/containerd/commit/4bd411f8c8cfc92fb6c55e8e1f5cb83d9790b3f8) testutil: avoid conflict with continuity/testutil - update cri-tools to v1.29.0 ([#​10969](https://redirect.github.com/containerd/containerd/pull/10969)) - [`216dc892e`](https://redirect.github.com/containerd/containerd/commit/216dc892e02cee69e3f5cdaaf54760307e0558ab) update cri-tools to v1.29.0 - update build to go1.22.9, test go1.23.3 ([#​10974](https://redirect.github.com/containerd/containerd/pull/10974)) - [`56a7d31cb`](https://redirect.github.com/containerd/containerd/commit/56a7d31cb5b4a3dac964350113240999707e26a9) update build to go1.22.9, test go1.23.3 - ci: disable marking 1.7 releases as latest ([#​10962](https://redirect.github.com/containerd/containerd/pull/10962)) - [`205940716`](https://redirect.github.com/containerd/containerd/commit/205940716b01b4eb8244e7431afd5f06166e1cb4) ci: disable marking 1.7 releases as latest - Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz ([#​10976](https://redirect.github.com/containerd/containerd/pull/10976)) - [`b7bb8d515`](https://redirect.github.com/containerd/containerd/commit/b7bb8d5158a497cff0f4735160f528e94b2b8e8b) Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz - backport: Disable vagrant strict dependency checking ([#​10965](https://redirect.github.com/containerd/containerd/pull/10965)) - [`860a51384`](https://redirect.github.com/containerd/containerd/commit/860a51384231e9ce432710676a15d17ee0c90b4b) Disable vagrant strict dependency checking - Update runc binary to 1.2.1 ([#​10940](https://redirect.github.com/containerd/containerd/pull/10940)) - [`710cd3716`](https://redirect.github.com/containerd/containerd/commit/710cd371690f0663c6953e1bdc7db4daee2354b5) update runc binary to 1.2.1 - services/snapshots: include name of snapshotter in debug logs ([#​10931](https://redirect.github.com/containerd/containerd/pull/10931)) - [`5bd0834ce`](https://redirect.github.com/containerd/containerd/commit/5bd0834ce94032f394f5cd6e267f98ede4ebe889) services/snapshots: include name of snapshotter in debug logs - Make TestContainerPids more resilient ([#​10936](https://redirect.github.com/containerd/containerd/pull/10936)) - [`455787bf8`](https://redirect.github.com/containerd/containerd/commit/455787bf80f3f1556f644211d393dbe26d5dafe6) Make TestContainerPids more resilient - Add After=dbus.service to containerd.service ([#​10859](https://redirect.github.com/containerd/containerd/pull/10859)) - [`cb82e52a4`](https://redirect.github.com/containerd/containerd/commit/cb82e52a43cfb150daa5ce2dcce5805655447fa7) Add After=dbus.service to containerd.service - Fix "invalid metric type" error message for cgroup v1 ([#​10814](https://redirect.github.com/containerd/containerd/pull/10814)) - [`d6f577843`](https://redirect.github.com/containerd/containerd/commit/d6f5778439dd9b2bdd7ab3199e6eaaddb3ba39b8) metrics: Use UnmarshalTo instead of UnmarshalAny

##### Dependency Changes This release has no dependency changes Previous release can be found at [v1.7.23](https://redirect.github.com/containerd/containerd/releases/tag/v1.7.23)

Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Renovate Bot.

cilium-renovate[bot] commented 1 week ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: contrib/tetragon-rthooks/go.sum
Command failed: mod upgrade --mod-name=github.com/containerd/containerd -t=2
err: exit status 1: stderr: go: inconsistent vendoring in /tmp/renovate/repos/github/cilium/tetragon/contrib/tetragon-rthooks:
    github.com/containerd/containerd@v1.7.24: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
    github.com/containerd/containerd/v2@v2.0.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
    github.com/containerd/ttrpc@v1.2.6: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
    github.com/containerd/containerd@v1.7.23: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
    github.com/containerd/ttrpc@v1.2.6-0.20240827082320-b5cd6e4b3287: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod

    To ignore the vendor directory, use -mod=readonly or -mod=mod.
    To sync the vendor directory, run:
        go mod vendor

could not load package
github.com/marwan-at-work/mod/major.Run
    /tmp/renovate/cache/others/go/pkg/mod/github.com/marwan-at-work/mod@v0.7.1/major/major.go:47
main.upgrade
    /tmp/renovate/cache/others/go/pkg/mod/github.com/marwan-at-work/mod@v0.7.1/cmd/mod/main.go:75
main.main.withExit.func1
    /tmp/renovate/cache/others/go/pkg/mod/github.com/marwan-at-work/mod@v0.7.1/cmd/mod/main.go:88
github.com/urfave/cli/v2.(*Command).Run
    /tmp/renovate/cache/others/go/pkg/mod/github.com/urfave/cli/v2@v2.25.1/command.go:274
github.com/urfave/cli/v2.(*Command).Run
    /tmp/renovate/cache/others/go/pkg/mod/github.com/urfave/cli/v2@v2.25.1/command.go:267
github.com/urfave/cli/v2.(*App).RunContext
    /tmp/renovate/cache/others/go/pkg/mod/github.com/urfave/cli/v2@v2.25.1/app.go:332
github.com/urfave/cli/v2.(*App).Run
    /tmp/renovate/cache/others/go/pkg/mod/github.com/urfave/cli/v2@v2.25.1/app.go:309
main.main
    /tmp/renovate/cache/others/go/pkg/mod/github.com/marwan-at-work/mod@v0.7.1/cmd/mod/main.go:71
runtime.main
    /opt/containerbase/tools/golang/1.23.3/src/runtime/proc.go:272
runtime.goexit
    /opt/containerbase/tools/golang/1.23.3/src/runtime/asm_amd64.s:1700
netlify[bot] commented 2 days ago

Deploy Preview for tetragon ready!

Name Link
Latest commit bff011fdbf3a6a0f6c14010399cf15096a30bd38
Latest deploy log https://app.netlify.com/sites/tetragon/deploys/673f78dd6b1ea40008dc2587
Deploy Preview https://deploy-preview-3120--tetragon.netlify.app
Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.