Closed renovate[bot] closed 2 months ago
All modified and coverable lines are covered by tests :white_check_mark:
Project coverage is 70.06%. Comparing base (
1c8b55e
) to head (f77900b
). Report is 1 commits behind head on main.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
This PR contains the following updates:
v1.1.13
->v1.1.14
1.23.0
->1.23.1
v3.3.3
->v3.3.4
Release Notes
opencontainers/runc (github.com/opencontainers/runc)
### [`v1.1.14`](https://redirect.github.com/opencontainers/runc/releases/tag/v1.1.14): runc v1.1.14 -- "年を取っていいことは、驚かなくなることね。" [Compare Source](https://redirect.github.com/opencontainers/runc/compare/v1.1.13...v1.1.14) This is the fourteenth patch release in the 1.1.z release branch of runc. It includes a fix for a low severity security issue (CVE-2024-45310) as well as some minor build-related fixes (including Go 1.23 support). - Fix [CVE-2024-45310][cve-2024-45310], a low-severity attack that allowed maliciously configured containers to create empty files and directories on the host. - Add support for Go 1.23. ([#4360](https://redirect.github.com/opencontainers/runc/issues/4360), [#4372](https://redirect.github.com/opencontainers/runc/issues/4372)) - Revert "allow overriding VERSION value in Makefile" and add EXTRA_VERSION. ([#4370](https://redirect.github.com/opencontainers/runc/issues/4370), [#4382](https://redirect.github.com/opencontainers/runc/issues/4382)) - rootfs: consolidate mountpoint creation logic. ([#4359](https://redirect.github.com/opencontainers/runc/issues/4359)) [cve-2024-45310]: https://redirect.github.com/opencontainers/runc/security/advisories/GHSA-jfvp-7x6p-h2pv ##### Static Linking Notices The `runc` binary distributed with this release are *statically linked* with the following [GNU LGPL-2.1][lgpl-2.1] licensed libraries, with `runc` acting as a "work that uses the Library": [lgpl-2.1]: https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html - [libseccomp](https://redirect.github.com/seccomp/libseccomp) The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1. However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.Thanks to all of the contributors who made this release possible: - Akihiro Suda
golang/go (go)
### [`v1.23.1`](https://redirect.github.com/golang/go/compare/go1.23.0...go1.23.1)kubewarden/github-actions (kubewarden/github-actions)
### [`v3.3.4`](https://redirect.github.com/kubewarden/github-actions/releases/tag/v3.3.4) [Compare Source](https://redirect.github.com/kubewarden/github-actions/compare/v3.3.3...v3.3.4) - use kwctl 1.16.1 ([#135](https://redirect.github.com/kubewarden/github-actions/issues/135))Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.