Bump github.com/containerd/containerd from 1.6.16 to 1.6.19

[dependabot[bot]]

Bumps github.com/containerd/containerd from 1.6.16 to 1.6.19.

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.6.19

Welcome to the v1.6.19 release of containerd!

The nineteenth patch release for containerd 1.6 contains runtime fixes and additions for Windows platforms

Notable Updates

• **Update hcsshim to v0.9.7 to include fix for graceful termination and pause containers (#8153)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Kirtana Ashok
• Derek McGowan
• Wei Fu

Changes

• [release/1.6] Prepare release notes for v1.6.19 (#8157)
  • 23e94075a Add release notes for v1.6.19
• [release/1.6] go.mod: Bump hcsshim to v0.9.7 (#8153)
  • f488a6241 Update hcsshim tag to v0.9.7

Dependency Changes

• github.com/Microsoft/hcsshim v0.9.6 -> v0.9.7

Previous release can be found at v1.6.18

containerd 1.6.18

Welcome to the v1.6.18 release of containerd!

The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173 along with a security update for Go.

Notable Updates

• Fix OCI image importer memory exhaustion (GHSA-259w-8hf6-59c2)
• Fix supplementary groups not being set up properly (GHSA-hmfx-3pcx-653p)
• Revert removal of /sbin/apparmor_parser check (#8087)
• Update Go to 1.19.6 (#8111)

... (truncated)

Commits

• 1e1ea6e Merge pull request #8157 from kiashok/releaseNotes-1.6.19
• 23e9407 Add release notes for v1.6.19
• 260533d Merge pull request #8153 from kiashok/updateShimTag-release1.6
• f488a62 Update hcsshim tag to v0.9.7
• 2456e98 Merge pull request #8118 from dmcgowan/prepare-v1.6.18
• 44e61d7 Add release notes for v1.6.18
• 133f6bb Merge pull request from GHSA-hmfx-3pcx-653p
• 0c31490 Merge pull request from GHSA-259w-8hf6-59c2
• 9cec7a8 Merge pull request #8106 from cpuguy83/1.6_loosen_windows_platform_matching
• 47f1aad Merge pull request #8111 from AkihiroSuda/cherrypick-8109-1.6
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this. Unfortunately, the Pivotal Tracker project is private so you may be unable to view the contents of the story.

The labels on this github issue will be updated when the story is started.