pygmystack / pygmy

the pygmy stack is a container stack for local development
MIT License
25 stars 12 forks source link

Bump github.com/containerd/containerd from 1.6.8 to 1.6.10 #409

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps github.com/containerd/containerd from 1.6.8 to 1.6.10.

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.6.10

Welcome to the v1.6.10 release of containerd!

The tenth patch release for containerd 1.6 contains various fixes, including a CVE fix for Windows platforms.

Notable Updates

  • Always check userxattr for overlay on kernels >= 5.11 (#7646)
  • Bump hcsshim to 0.9.5 to fix container shutdown bug on Windows (#7610
  • Bump Go version to 1.18.8 to address CVE-2022-41716 (#7634)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Akihiro Suda
  • Danny Canter
  • Kazuyoshi Kato
  • Austin Vazquez
  • Derek McGowan
  • Gavin Inglis
  • Kathryn Baldauf
  • Kevin Parsons
  • Phil Estes
  • Sebastiaan van Stijn
  • Yasin Turan

Changes

  • [release/1.6] Prepare release notes for v1.6.10 (#7664)
    • Prepare release notes for v1.6.10
  • [release/1.6] overlayutils: Add fastpath for userxattr check (#7646)
    • overlayutils: Add fastpath for userxattr check
  • [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 (#7634)
    • [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
  • [release/1.6] ctr export strictly match default platform (#7627)
    • ctr export strictly match default platform
  • [release/1.6] go.mod: Bump hcsshim to v0.9.5 (#7610)
    • [release/1.6] go.mod: Bump hcsshim to v0.9.5
  • [release/1.6] ctr import: strictly match platform (#7594)
    • ctr import: strictly match platform
  • [release/1.6] cherry-pick: Migrate away from GitHub actions set-output (#7582)
    • Migrate away from GitHub actions set-output

... (truncated)

Commits
  • 770bd01 Merge pull request #7664 from dcantah/release-notes-1.6.10
  • e639ecd Prepare release notes for v1.6.10
  • 6c41694 Merge pull request #7646 from dcantah/cp-userxattr-1.6
  • 5af8d89 overlayutils: Add fastpath for userxattr check
  • f69fbac Merge pull request #7634 from thaJeztah/1.6_bump_go1.18.8
  • 303f608 [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
  • 10841d6 Merge pull request #7627 from turan18/backport-ctr-export-strict
  • 3f9f950 ctr export strictly match default platform
  • a865cb5 Merge pull request #7610 from katiewasnothere/kabaldau/1.6-hcsshim-v0.9.5
  • df73aca [release/1.6] go.mod: Bump hcsshim to v0.9.5
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)