containerd / zfs

ZFS snapshotter plugin for containerd
Apache License 2.0
67 stars 29 forks source link

Bump github.com/containerd/containerd from 1.5.5 to 1.5.8 #54

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps github.com/containerd/containerd from 1.5.5 to 1.5.8.

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.5.8

Welcome to the v1.5.8 release of containerd!

The eighth patch release for containerd 1.5 contains a mitigation for CVE-2021-41190 as well as several fixes and updates.

Notable Updates

  • Handle ambiguous OCI manifest parsing (GHSA-5j5w-g665-5m35)
  • Filter selinux xattr for image volumes in CRI plugin (#5104)
  • Use DeactiveLayer to unlock layers that cannot be renamed in Windows snapshotter (#5422)
  • Fix pull failure on unexpected EOF (#5921)
  • Close task IO before waiting on delete (#5974)
  • Log a warning for ignored invalid image labels rather than erroring (#6124)
  • Update pull to handle of non-https urls in descriptors (#6221)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Phil Estes
  • Sebastiaan van Stijn
  • Derek McGowan
  • Kazuyoshi Kato
  • Wei Fu
  • Akihiro Suda
  • Daniel Canter
  • Kevin Parsons
  • Kohei Tokunaga
  • Samuel Karp
  • Claudiu Belu
  • Jacob Blain Christen
  • Maksym Pavlenko
  • Mike Brown
  • Paul "TBBle" Hampson
  • Sambhav Kothari
  • zounengren

Changes

  • [release/1.5] Prepare release notes for v1.5.8 (#6260)
  • [release/1.5] mailmap: Add Kevin Parsons (#6261)
  • Merge Github Security Advisory GHSA-5j5w-g665-5m35
    • 15d8c03e3 schema1: reject ambiguous documents

... (truncated)

Commits
  • 1e5ef94 Merge pull request #6260 from dmcgowan/prepare-v1.5.8
  • 4f342d8 Merge pull request #6261 from kevpar/1.5_kevpar-mailmap
  • ef071b0 mailmap: Add Kevin Parsons
  • 2385fd1 Prepare release notes for v1.5.8
  • 26c76a3 Merge pull request from GHSA-5j5w-g665-5m35
  • 15d8c03 schema1: reject ambiguous documents
  • 833407f images: validate document type before unmarshal
  • 5fde9a5 Merge pull request #6238 from ktock/urls-fallback-1.5
  • c34181f Merge pull request #6231 from dcantah/update-hcsshim-0.8.23
  • 01428ec Fix containerd fails to pull OCI image with non-http(s):// urls
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/containerd/zfs/network/alerts).