containers / common

Location for shared common files in github.com/containers repos.
Apache License 2.0
191 stars 200 forks source link

fix(deps): update module github.com/opencontainers/runc to v1.2.0-rc.3 - autoclosed #2146

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 2 months ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/opencontainers/runc v1.2.0-rc.2.0.20240801140032-ad5b481dace5 -> v1.2.0-rc.3 age adoption passing confidence

Release Notes

opencontainers/runc (github.com/opencontainers/runc) ### [`v1.2.0-rc.3`](https://redirect.github.com/opencontainers/runc/releases/tag/v1.2.0-rc.3): runc v1.2.0-rc.3 -- "The supreme happiness of life is the conviction that we are loved." [Compare Source](https://redirect.github.com/opencontainers/runc/compare/v1.2.0-rc.2...v1.2.0-rc.3) This is the third release candidate for the 1.2.0 branch of runc. It includes all patches and bugfixes included in runc 1.1 patch releases (up to and including 1.1.14) and also includes a fix for a low severity security issue ([CVE-2024-45310][cve-2024-45310]). - Fix [CVE-2024-45310][cve-2024-45310], a low-severity attack that allowed maliciously configured containers to create empty files and directories on the host. - Document build prerequisites for different platforms. ([#​4353](https://redirect.github.com/opencontainers/runc/issues/4353)) - Try to delete exec fifo file when failure in creation. ([#​4319](https://redirect.github.com/opencontainers/runc/issues/4319)) - Revert "libcontainer: seccomp: pass around \*os.File for notifyfd". ([#​4337](https://redirect.github.com/opencontainers/runc/issues/4337)) - Fix link to gvariant documentation in systemd docs. ([#​4369](https://redirect.github.com/opencontainers/runc/issues/4369)) - Remove pre-go1.17 build-tags. ([#​4329](https://redirect.github.com/opencontainers/runc/issues/4329)) - libct/userns: assorted (godoc) improvements. ([#​4330](https://redirect.github.com/opencontainers/runc/issues/4330)) - libct/userns: split userns detection from internal userns code. ([#​4331](https://redirect.github.com/opencontainers/runc/issues/4331)) - rootfs: consolidate mountpoint creation logic. ([#​4359](https://redirect.github.com/opencontainers/runc/issues/4359)) - Add Go 1.23, drop 1.21. ([#​4360](https://redirect.github.com/opencontainers/runc/issues/4360)) - Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION. ([#​4370](https://redirect.github.com/opencontainers/runc/issues/4370)) - Mv contrib/cmd tests/cmd (except memfd-bind). ([#​4377](https://redirect.github.com/opencontainers/runc/issues/4377)) - Makefile: Don't read COMMIT, BUILDTAGS, EXTRA_BUILDTAGS from env vars. ([#​4380](https://redirect.github.com/opencontainers/runc/issues/4380)) [cve-2024-45310]: https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv ##### Static Linking Notices The `runc` binary distributed with this release are *statically linked* with the following [GNU LGPL-2.1][lgpl-2.1] licensed libraries, with `runc` acting as a "work that uses the Library": [lgpl-2.1]: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html - [libseccomp](https://redirect.github.com/seccomp/libseccomp) The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1. However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.
Thanks to all of the contributors who made this release possible: - Akihiro Suda - Aleksa Sarai - Avi Deitcher - Kir Kolyshkin - Rodrigo Campos - Sebastiaan van Stijn - lifubang - ver4a Signed-off-by: Aleksa Sarai

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 2 months ago

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: go.sum
Command failed: install-tool golang 1.21.13
openshift-ci[bot] commented 2 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: renovate[bot] Once this PR has been reviewed and has the lgtm label, please ask for approval from luap99. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/containers/common/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment