Skip to content

chore: update dependencies - #1205

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies
Open

renovate[bot] wants to merge 1 commit into
mainfrom
renovate/dependencies

Conversation

@renovate

@renovate renovate Bot commented Apr 10, 2025

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

Update Request | Renovate Bot

This PR contains the following updates:

Package Type Update Change
LINBIT/drbd patch 9.3.39.3.4
NVIDIA/gds-nvidia-fs minor v2.29.4v2.30.2
containerd/containerd minor v2.3.5v2.4.0
docker.io/library/fedora (source) stage major 4246
git://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git minor 7.1.17.2.0
git://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git minor 2026081020260916
hailo-ai/hailort-drivers major 4.24.05.4.0
https://github.com/a13xp0p0v/kernel-hardening-checker.git digest 27f7bdaeddca02
https://github.com/ipxe/ipxe.git digest ff6e5207cd92e0
https://gitlab.com/apparmor/apparmor.git major v3.1.7v5.0.2
https://gitlab.gnome.org/GNOME/glib.git minor 2.89.32.90.0
seccomp/libseccomp patch 2.6.02.6.1
systemd/systemd minor 261.2261.3
urcu/userspace-rcu patch 0.15.60.15.7

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

LINBIT/drbd (LINBIT/drbd)

v9.3.4

Compare Source

  • Fix drbdsetup failing with "Operation not supported" on every command
    that names a peer; a regression of the YNL-generated netlink code in
    9.3.4-rc.1
  • Generate the netlink interface code with the upstream YNL generator
    instead of the genl_magic macro system
  • Fix a ProtocolError disconnect loop ("BAD! BarrierAck received with
    n_writes=...") when two volumes of one connection replicate and
    resync without replication at the same time
  • Tolerate a verify-alg mismatch when connecting, and refuse to start
    an online verify while the algorithms differ, instead of rejecting
    the connection outright
  • Fix several bitmap lifetime bugs around attach and detach: a NULL
    bitmap dereference in the peer device statistics, a missing bitmap
    in drbd_set_sync(), concurrent drbd_bm_free() callers, and freeing
    a bitmap that a later attach published
  • Fix a device reference leak and a NULL pointer dereference when a
    peer request's bio allocation fails under memory pressure
  • Hold state_rwlock while walking the transfer log from debugfs
  • All fixes from 9.2.20
  • Fix a secondary that stayed with the primary ending up Outdated for
    good after an isolated peer returns: an equal-UUID reconcile is now
    sourced from the node that has a primary neighbour
  • Fix two nodes ending UpToDate with different data after a reconnect
    with equal current UUIDs and out-of-sync bits standing: such bits now
    survive a resync-free connect and drive a reconciliation resync
  • Fix divergence around the end of a resync
  • Fix a node losing its obligation to start a new data generation and
    ending in a split brain
  • Fix a number of aspects of online resize
  • Fix a sync target overwriting acknowledged writes with older resync
    data when the sync source lost the diskless primary; such writes are
    now held back or postponed (new feature flag WRITE_POSTPONE) instead
    of being silently rolled back
  • Fix data corruption when a peer bitmap that is being cleared by a
    running resync was copied for a second peer
  • Fix several ways a Primary lost its obligation to start a new data
    generation after losing a peer, each ending in silent divergence,
    and a spurious I/O error when a deferred generation resumes; the
    obligation is now tracked per volume and logged
  • Fix a diskless Primary losing a peer: rotate the current UUID so the
    stale peer resyncs on return, outdate far-away members before
    resuming I/O, and keep the sole UpToDate survivor UpToDate; also
    fixes promotions freezing I/O on nodes not connected to every member
  • Fix a resync target ending with stale data or an old data generation
    when a crashed primary rejoins or a diskless primary announces a new
    generation mid-resync
  • Fix al-updates=no: honour it at attach time, and mark all bitmap
    slots out of sync after a primary crash
  • Fix kernel memory corruption by a malicious or man-in-the-middle
    peer sending out-of-range payload, drain or digest sizes, and a
    divide error caused by bogus peer block sizes
  • Fix a use-after-free of the resource when a connections dump is
    interrupted, and a refcount imbalance flooding the log with put_ldev
    assertions after a resync request allocation failure
  • Fix soft lockups: the sender thread pinning a CPU while its
    connection is down, and IRQ-disabled bitmap scans on multi-TiB
    volumes
  • Fix several deadlocks and hangs: whole-bitmap IO vs clear_peer_slot()
    or online resize, WFBitMapS on an equal-UUID reconnect with leftover
    out-of-sync bits, demotion starved by a failing connect handshake,
    and connection teardown blocked behind an unacknowledged resync
    conflict
  • Fix many two-phase-commit issues: stale replies answering the wrong
    transaction, prepared peers that disconnected, forwarding node
    handling, a state_sem leak on timeout, and unbounded connect
    retries; log which volume a connect is waiting for
  • Fix resyncs stalling short of completion, and a connection dropping
    to StandAlone when a crashed primary rejoins during a resync
  • Fix drbd_suspend_io() not waiting for in-flight writes; a detach
    hanging on a dead backing device stays interruptible
  • Fix restoring quorum after a reboot when the remaining members are
    diskless
  • Fix connection losses: online resize ending in ProtocolError,
    volume-less connections reconnecting every ping-timeout, lb-tcp
    "drbdadm down" stalling for a connect-int, and a TLS control socket
    close going unnoticed
  • Declare a connection broken where a two-phase-commit send failed,
    and repeat a disconnect without delay and with a bound; together
    they end a hanging "drbdadm disconnect"
  • Do not account requests as waiting for the activity log while it is
    suspended; the stale counters throttled resync to c-min-rate and
    drained the epoch for every incoming peer write
NVIDIA/gds-nvidia-fs (NVIDIA/gds-nvidia-fs)

v2.30.2: GPUDirect Storage kernel driver (nvidia-fs) ver-2.30.2

Compare Source

containerd/containerd (containerd/containerd)

v2.4.0: containerd 2.4.0

Compare Source

Welcome to the v2.4.0 release of containerd!

containerd 2.4 is a regular (non-LTS) release with a shorter support window,
intended for users who want to adopt new features sooner. As the release
following the 2.3 LTS, it is the point in the release cycle where previously
deprecated features may be removed, so this release may include breaking
changes; check the notes below and clear any deprecation warnings from your
current version before upgrading.

Users prioritizing stability and a longer support lifecycle should stay on the
2.3 LTS release.

Highlights
Container Runtime Interface (CRI)
  • Enable mount manager for image mounts in CRI (#​13542)
  • Export sandbox image and CNI directory configuration in CRI plugin info (#​13940)
  • Set default runtimeFeatures.UserNamespacesHostNetwork to true (#​13162)
  • Support OCI runtime feature introspection for non-runc runtimes (#​13504)
Image Distribution
  • Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#​12889)
  • Support propagating HTTP 299 warning headers from registries to the resolver (#​12698)
  • Use klauspost/compress for gzip layer decompression (#​13560)
Image Storage
  • Add client options to fetch all layer content during unpack even when snapshots exist (#​14126)
  • Include media type in content create events (#​13833)
  • Add forward References to the GC collection context (#​13634)
Node Resource Interface (NRI)
  • Expose container image name, digest, and config digest to NRI plugins (#​13960)
  • Emit deprecation warnings for plugins using deprecated NRI interfaces (#​13916)
Runtime
  • Mask /proc/interrupts and CPU thermal throttle sysfs paths in Linux containers by default (#​14090)
  • Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#​14105)
  • Avoid immediately restarting containers with restart=always policy after they are explicitly stopped (#​13993)
  • Pass tracing context from shim to runc and hooks (#​14036)
  • Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group (#​13818)
  • Implement Windows named-pipe server and log streaming support in pkg/shim (#​13948)
  • Enable log scrubbing by default on Windows (#​13837)
  • Allow specifying parent checkpoint directory when checkpointing with runc (#​13699)
Snapshotters
  • Add Prometheus metrics for EROFS snapshotter layer content cache (#​13941)
  • Support warm image cache for erofs snapshotter (#​13813)
  • Add max size label for snapshots (#​13520)
Breaking
  • Remove deprecated CRI and tracing configuration options:
    • Remove enable_cdi in CRI runtime configuration (CDI is now always enabled)
    • Remove bin_dir in CRI CNI configuration (use bin_dirs)
    • Remove endpoint, protocol, and insecure in OTLP tracing processor configuration (use standard OTLP environment variables)
    • Remove service_name and sampling_ratio in internal tracing configuration (use standard OpenTelemetry environment variables) (#​14166)
  • Remove restore in CreateContainer (#​13871)
Deprecations
  • Deprecate containerd.io/runtime-allow-mounts shim annotation in favor of MountCapabilities bootstrap extension (#​14002)
  • Remove deprecated shim.Command from pkg (#​13991)
  • Deprecate task API address and version fields in runc options and move to CreateTaskRequest (#​13360)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Maksym Pavlenko
  • Sebastiaan van Stijn
  • Samuel Karp
  • Derek McGowan
  • Wei Fu
  • Akihiro Suda
  • Mike Brown
  • Paweł Gronowski
  • Chris Henzie
  • Phil Estes
  • Brian Goff
  • Austin Vazquez
  • ningmingxiao
  • Jordan Liggitt
  • Akhil Mohan
  • Eshaan Mathur
  • Krisztian Litkey
  • Chris Ayoub
  • Kazuyoshi Kato
  • Kir Kolyshkin
  • Sergey Kanzhelev
  • Ahmet Alp Balkan
  • Arpit Jain
  • Cindy Li
  • Damien Grisonnet
  • Esteban Ginez
  • Gao Xiang
  • Harsh Rawat
  • Laura Lorenz
  • Maksim An
  • Oleh Konko
  • Philip Laine
  • Abhishek Bhunia
  • Alan Grosskurth
  • Albin Kerouanton
  • Alex Lyn
  • Aman Raj
  • Amir Alavi
  • Amit Barve
  • Andrew Halaney
  • AprilNEA
  • Arjun Yogidas
  • Ayato Tokubi
  • Aysha Afrah Ziya
  • Ben Cressey
  • Bing Hongtao
  • Chris Crone
  • Craig Gumbley
  • Daniel De Graaf
  • Davanum Srinivas
  • Dr. Jan-Philip Gehrcke
  • Harshal Patel
  • Henry Wang
  • Hsiu-Chi Tsai
  • JP Phillips
  • Jing Chen
  • Kohei Tokunaga
  • LEI WANG
  • Martín Fernández
  • Mikhail Dmitrichenko
  • Nahum Litvin
  • Nikolaus Schuetz
  • Pablo Garcia Caceres
  • Paco Xu
  • Robert Cronin
  • SaloniRathi
  • Shambhavi Srivastava
  • Tianon Gravi
  • XlabAI
  • Yuanliang Zhang
  • ayush-panta
  • crawfordxx
  • cshung
  • match man
  • s3onghyun
  • 归寂
  • 徐晓伟
Changes
658 commits

  • 647fafa847 Prepare release notes for v2.4.0
  • Prepare release notes for api/v1.12.0 (#​14170)
    • 5c4ea21de3 Prepare release notes for api/v1.12.0
  • Deprecations and removals for 2.4 (#​14166)
    • 531b3a37b9 tracing: remove deprecated tracing config options
    • ca8579a334 tracing: add tests for otlp exporter and env vars
    • ee024b7c99 tracing: remove deprecated otlp configs
    • f7c654fb4f cri: remove deprecated cni bin_dir
    • 4f7de25abb cri: remove enable_cdi config option
    • 830b48d3fd cri: delay registry config removal to 2.7
  • Prepare release notes for v2.4.0-rc.0 (#​14115)
    • c02620e398 Prepare release notes for v2.4.0-rc.0
    • 02c7c97f43 Update release doc for 2.4.0 release
    • 484e5aba58 vendor: github.com/containerd/containerd/api v1.12.0-rc.1
    • 67174d675c mailmap: add Paweł Gronowski
  • Update erofs snapshotter to record blob source (#​14107)
    • 697a7571a4 erofs: give a dm-verity device a name unique to its mount
    • f75817eb3b erofs: record where a layer blob is
    • d92088d822 erofs: refuse to apply into a read-only snapshot
    • 8cc0b076a6 erofs: serve layer content cache on parented Prepare
  • build(deps): bump the golang-x group with 4 updates (#​14150)
    • 75138b3fda build(deps): bump the golang-x group with 4 updates
  • build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0 (#​14153)
    • 353342cae6 build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.0
  • pkg/oci: mask thermal interrupt info (#​14090)
  • vendor: github.com/containerd/nri v0.12.3 (#​14065)
    • 69269c635b vendor: github.com/containerd/nri v0.12.3
  • cri: only unmount image volumes when mounting fails (#​14143)
    • d13064937e cri: only unmount image volumes when mounting fails
  • migrate to github.com/urfave/cli/v3 (#​14095)
  • shim-runc-v2: record exit status in bundle (#​14113)
    • 3264a09dff shim-runc-v2: record exit status in bundle
  • core/unpack: fetch layers of every config-sharing manifest (#​13966)
    • 3c5d9fefd8 core/unpack: fetch layers of every config-sharing manifest
  • time to update cri-tools to v1.37.0 (#​14133)
    • 5c957005ab adding container_threads metric emission for cgroups v1
    • d038c4f1f9 time to update cri-tools to v1.37.0
  • update crun to v1.29.1 (#​14136)
  • vendor: github.com/containerd/log main, use log.Level consts for log-levels (#​14019)
    • b178103a4f use log.Level consts for log-levels
    • a77089ba8e vendor: github.com/containerd/log v0.2.0
    • 0ca704384f vendor: github.com/containerd/log/otel v0.1.0
  • vendor: github.com/moby/sys/userns v0.2.1 (#​14130)
    • f30398314f vendor: github.com/moby/sys/userns v0.2.1
  • cri: enable mount manager for image mounts (#​13542)
    • 9224f17d7c cri: enable mount manager for image mounts
  • Fix input mutation in mount option helpers (#​13433)
    • 165abaf8fd core/mount: Keep lazy copy for filtered options
    • 674c3a1acb core/mount: Return copied filtered mount options
    • 79455dd4b0 mount: share lazy option filtering
    • b73b82f2af mount: fix shallow copy of Options in RemoveVolatileOption and RemoveIDMapOption
    • 70cfd7796a mount: fix input mutation in readonlyMounts
    • 35e919f329 mount: replace copyMounts with slices.Clone
  • cmd: refactor in preparation of urfave/cli/v3 migration (#​14103)
    • 861dc7ed7a cmd: commands.NewClient: explicitly pass context
    • 324866a884 cmd: commands.AppContext: explicitly pass context
    • bd954e4e2c cmd: initialize CLI apps with struct literals
    • ba71234151 cmd: rename cliContext -> cmd in preparation of v3 migration
    • de193f2059 cmd: edit: pass editor name instead of cli.Context
    • 2cc86cb07b cmd: rename some vars that shadowed
    • e6be784a71 cmd: use urfave/cli RunContext
    • 4d13856983 cmd: remove redundant empty slice flag values
    • 211cde9039 cmd: remove uses of urfave/cli.Commands
    • c52e77eccd cmd/ctr: remove unused pluginCmds
  • unpack: Add opt-in fetching for existing snapshots (#​14126)
    • 2b0302fd85 unpack: Add opt-in fetching for existing snapshots
  • integration/client: fix TestContainerExecLargeOutputWithTTY (#​14120)
    • 68f92da9fb integration/client: fix TestContainerExecLargeOutputWithTTY
  • vendor: github.com/go-jose/go-jose/v4 v4.1.5 (security) (#​14116)
    • 0c4981cc2e vendor: github.com/go-jose/go-jose/v4 v4.1.5
  • Revert "metadata: bound snapshotter Remove during garbage collection" (#​14119)
    • aeb095b175 Revert "metadata: bound snapshotter Remove during garbage collection"
  • build(deps): bump azure/login from 3.0.1 to 3.0.2 (#​14114)
    • 2bfdafac7b build(deps): bump azure/login from 3.0.1 to 3.0.2
  • pkg/tracing: deprecate Logrushook in favor of log/otel.Logrushook (#​14023)
    • 20fed5179a pkg/tracing: deprecate Logrushook in favor of log/otel.Logrushook
  • sandbox: wire Controller.Update through to the shim (#​14105)
    • b971bac19f docs: document optional sandbox updates
    • 40f84371c6 vendor: update containerd api
    • 2ea4ddb32f sandbox: add UpdateSandbox RPC and forward Controller.Update to the shim
  • vendor: golang.org/x/crypto v0.56.0 (#​14093)
  • vendor: tags.cncf.io/container-device-interface v1.1.1 (#​14109)
    • d1b8275dc2 vendor: tags.cncf.io/container-device-interface v1.1.1
  • vendor: bump go-cni v1.1.14 and containernetworking/cni v1.3.1 (#​14104)
    • 9ca93e5488 vendor: bump go-cni v1.1.14 and containernetworking/cni v1.3.1
  • Update Go 1.26.8 and 1.27.1 (#​14087)
  • gha: Update golangci-lint to v2.13.2 (#​14089)
    • 3c10e5f0be all: Address G702 command execution findings
    • 7797833d8e gha: Update golangci-lint to v2.13.2
    • 2e587fd358 ctr: Use context-aware pprof dialing
    • a0ea6a138b runtime: Preserve context values in background goroutines
    • 2c75374a2f all: Use slices.Backward for reverse iteration
    • b7ae26eea7 all: Use errors.AsType
  • runtime: invoke shim.Delete when connection is closed (#​13309)
    • e49a475d4a runtime: invoke shim.Delete when connection is closed
  • Fix data races and a deadlock in the byte stream helpers (#​14085)
    • 3914a449d4 Fix data races and a deadlock in the byte stream helpers
  • erofs: enable fsview fallback for unsupported features (#​14077)
    • 9d804de10b erofs: enable fsview fallback for unsupported features
  • all: fix typos in code comments (#​14082)
  • fix: fix incorrect restart=always restart logic (#​13993)
    • 452b4d99cc fix: fix incorrect restart=always restart logic
  • add additional tests for toCriSignal contract (#​14073)
    • 961764f6b2 test toCriSignal contract for metadata pre SIGNAL_ prefix
  • build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the docker-actions group (#​14067)
    • 6512b4caf1 build(deps): bump docker/setup-buildx-action in the docker-actions group
  • build(deps): bump azure/login from 3.0.0 to 3.0.1 (#​13964)
    • 59f415c7d6 build(deps): bump azure/login from 3.0.0 to 3.0.1
  • cri: trace image pull result attributes (#​13959)
    • 09997c13a4 cri: trace image pull result attributes
  • internal/cri/server: avoid debug log formatting for container spec (#​13972)
    • 30cd464708 internal/cri/server: avoid debug log formatting for container spec
  • build(deps): bump github.com/google/certtostore from 1.0.6 to 1.0.7 (#​13919)
    • f07b18490b build(deps): bump github.com/google/certtostore from 1.0.6 to 1.0.7
  • vendor: github.com/docker/go-events v0.1.0 (#​14064)
    • 5333ee0952 vendor: github.com/docker/go-events v0.1.0
  • chore(deps): go.opentelemetry.io/otel v1.46.0, contrib v0.71.0 (#​14058)
    • bfe115abe8 chore(deps): go.opentelemetry.io/otel v1.46.0, contrib v0.71.0
  • vendor: tags.cncf.io/container-device-interface 73444d1 (#​14060)
  • plugins: remove some stray logrus imports (#​14057)
    • b845501327 plugins: remove some stray logrus imports
  • snapshots/erofs: advertise the erofs OS feature from the snapshotter plugin (#​14012)
    • 988f113ab7 snapshots/erofs: test the advertised erofs feature platform
    • 5e083f8d43 erofs: advertise the erofs OS feature platform from the snapshotter
  • build(deps): bump github.com/prometheus/client_golang from 1.24.0 to 1.24.1 (#​13883)
    • 5e89a2c119 build(deps): bump github.com/prometheus/client_golang
  • Prepare api/v1.12.0-rc.0 release (#​14047)
  • update kubernetes to v1.37.0 (#​14051)
    • 67336d701d modifies criSignalToOCIStopSignal to remove the extra cri SIGNAL_ prefixes
    • 00ecad3d7a resolve lint issue upstreamcri.NewRemoteImageService() is deprecated
    • ee09726316 fix for cri api Signal_ to Signal_SIGNAL_
    • 52be09ef1c update kubernetes to v1.37.0
  • Pass tracing context from shim to runc and hooks (#​14036)
    • 0b4ed79573 integration: add e2e test to verify trace context propagation
    • 5c25750dd5 shim: propagate trace context to runc and OCI hooks
    • beb23bc68d vendor: add go.opentelemetry.io/contrib/propagators/envcar v0.70.0
  • runtime: make task.Delete API retriable (#​14020)
    • 24dc6900ec runtime: make task.Delete API retriable
  • vendor: google.golang.org/grpc v1.83.2 (#​14042)
    • 89ba8063e1 vendor: google.golang.org/grpc v1.83.2
  • vendor: tags.cncf.io/container-device-interface 0427870 (#​14043)
  • Shim mount handler protocol (#​14002)
    • fbd9f37c2d docs: document the transform suffix rule
    • aedbd24669 docs: document the shim mount capability
    • 1ff0c13859 runtime/v2: migrate early adopters of the deprecated annotation
    • d3cc320650 runtime/v2: propagate shim mount capabilities to sandbox members
    • e8963fc32b runtime/v2: negotiate mount capabilities from shim bootstrap
    • 0b641f0099 mount: honor a claimed transform as a chain suffix
    • 8ba69faf06 mount: extract activation planning
    • 00967ecf03 mount: add WithAllowTransform activate option
    • 6d9307f346 runtime/v2: decode the whole bootstrap result from JSON
    • 65b4eb916e vendor: use local api module and update vendored api
    • a72247425b api: add shim mount capabilities
    • 329998caa9 runtime/v2: remove the runtime-allow-mounts annotation
  • vendor: github.com/docker/go-metrics v0.1.0 (#​14041)
    • b44bea515c vendor: github.com/docker/go-metrics v0.1.0
  • chore(api): update github.com/sirupsen/logrus v1.10.2 (#​14037)
    • a28910b14f chore(api): update github.com/sirupsen/logrus v1.10.2
  • Update CI to include Go 1.27 (#​14033)
  • vendor: github.com/containerd/go-runc v1.2.1 (#​14038)
    • 704ca21342 vendor: github.com/containerd/go-runc v1.2.1
  • erofs: instrument warm up cache (#​13941)
    • 81c272b28d erofs: instrument the layer content cache and applies
  • Remove shim.Command form pkg (#​13991)
  • pkg/tracing: handle error and typed-nil Stringer attributes (#​14013)
    • 442969ef0e pkg/tracing: handle error and typed-nil Stringer attributes
  • docker fetcher: strip sensitive headers on descriptor URLs (#​12889)
    • 51cf999e92 core/remotes/docker: normalize descriptor URL origins
    • 5b3ce72589 core/remotes/docker: strip sensitive headers on desc.urls fetch
  • metadata: bound snapshotter Remove during garbage collection (#​13799)
    • a9d5caf7fc metadata: bound snapshotter Remove during garbage collection
  • build(deps): bump github.com/checkpoint-restore/checkpointctl from 1.5.0 to 1.6.0 (#​14009)
    • 64f05273e3 build(deps): bump github.com/checkpoint-restore/checkpointctl
  • build(deps): bump github.com/moby/sys/userns from 0.1.0 to 0.2.0 in the moby-sys group (#​14008)
    • 0880064dea build(deps): bump github.com/moby/sys/userns in the moby-sys group
  • build(deps): bump the k8s group across 1 directory with 2 updates (#​14007)
    • b86bc4be52 build(deps): bump the k8s group across 1 directory with 2 updates
  • Bump go-runc to 1.2.0 (#​14006)
  • vendor: tags.cncf.io/container-device-interface 05ae4b5 (#​14004)
  • build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2 (#​13965)
    • 0db88d7f83 build(deps): bump actions/attest-build-provenance from 4.1.1 to 4.2.2
  • internal/cri/server: remove remaining uses of k8s.io/utils (#​14003)
    • 10e82fac8d internal/cri/server: remove remaining uses of k8s.io/utils
  • vendor: github.com/sirupsen/logrus v1.10.1 (#​13294)
    • f511928a11 vendor: github.com/sirupsen/logrus v1.10.1
  • vendor: github.com/containerd/platforms v1.0.0-rc.5 (#​14001)
    • 0d797891bb vendor: github.com/containerd/platforms v1.0.0-rc.5
  • vendor: github.com/stretchr/testify v1.12.1 (#​13973)
    • c351cf4682 vendor: github.com/stretchr/testify v1.12.1
  • internal/cri/server/events: use testing/synctest (#​13997)
    • f7e8f30a05 internal/cri/server/events: use testing/synctest
  • pkg/shim: Report bootstrap API mismatch on startup (#​13910)
    • 85385a4c33 pkg/shim: Report bootstrap API mismatch on startup
  • internal/cri/bandwidth: remove dead code (#​13996)
    • fcb54dc5fa internal/cri/bandwidth: remove dead code
  • pkg/oci: resolve rootfs symlinks for user lookup (#​13818)
    • a8fc3a0172 pkg/oci: resolve rootfs symlinks for user lookup
  • Revert "add check on version of drop in configs" (#​13939)
    • c8da81e49b ensure that the final config version is the higest in the config list
    • a8ed546687 Revert "add check on version of drop in configs"
  • shim: use PublisherOpts when creating new publisher (#​13989)
  • script/setup: update critools to v1.36.0 (#​13992)
    • 920978fd61 script/setup: update critools to v1.36.0
  • build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 (#​13962)
    • da7420a420 build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2
  • update runhcs to v0.15.0-rc.4 (#​13984)
  • vendor: github.com/Microsoft/hcsshim v0.15.0-rc.4 (#​13985)
    • 972ef71c84 vendor: github.com/Microsoft/hcsshim v0.15.0-rc.4
    • 6e6518a155 vendor: go.opentelemetry.io/otel v1.45.0, go.opentelemetry.io/contrib v0.70.0
    • 9023b7eb12 vendor: google.golang.org/protobuf v1.36.12
    • ee2255275b vendor: google.golang.org/genproto/* 6ac0973
    • 389f75a955 vendor: google.golang.org/grpc v1.83.1
    • 444ecd0be0 vendor: github.com/go-logr/logr v1.4.4
    • 26c040fb40 vendor: github.com/felixge/httpsnoop v1.1.0
    • d1df90fb51 vendor: golang.org/x/mod v0.40.0
    • e994dd627a vendor: golang.org/x/net v0.58.0
    • 4fb52e086c vendor: golang.org/x/crypto v0.55.0
    • 99178d1e2e vendor: golang.org/x/text v0.41.0
    • f6b36c43af vendor: golang.org/x/mod v0.39.0
  • cri, nri: record resolved image name and digest in container metadata (#​13960)
    • 203578e2eb cri,nri: record resolved image name and digest in container metadata
    • 8c4ccd2984 build: bump github.com/containerd/nri
  • Export config in CRI plugin (#​13940)
  • runtime: invoke Shutdown after every task deletion (#​13958)
    • 402eb3166e runtime: invoke Shutdown after every task deletion
  • implement Windows support for the shim server (#​13948)
    • 3bb3d8b7c6 address copilot comments
    • 983dcf4987 [pkg/shim] Implement Windows-specific unimplemented methods
  • fix(runtime): apply load timeout to load shim (#​13954)
    • fd29ff1073 fix(runtime): bound shim loading with the load timeout
  • Update Go to 1.26.6 (#​13957)
  • cri: add tracing spans for image pull and sandbox setup paths (#​12628)
  • ctr: drain exec output before cleanup (#​13931)
    • 3778cc36f4 ctr: drain exec output before cleanup
  • snapshots/erofs: protect snapshot staging from cleanup (#​13932)
    • e940b5ac18 snapshots/erofs: protect snapshot staging from cleanup
  • build(deps): bump docker/login-action from 4.4.0 to 4.6.0 in the docker-actions group across 1 directory (#​13886)
    • 3dd83f6774 build(deps): bump docker/login-action
  • build(deps): bump the codeql-actions group with 3 updates (#​13922)
    • cd9113b9d5 build(deps): bump the codeql-actions group with 3 updates
  • build(deps): bump actions/stale from 10.4.0 to 11.0.0 (#​13923)
    • c013c7df4d build(deps): bump actions/stale from 10.4.0 to 11.0.0
  • nri,deprecation: record and emit warnings for NRI deprecations. (#​13916)
    • bf0111a9cc nri,deprecation: emit warnings for old NRI plugins.
  • Add more context to the shim delete error (#​13912)
    • 29058e6501 Add more context to the shim delete error
  • Remove dependency on github.com/opencontainers/runtime-tools (#​13519)
    • e01c004cc6 Remove dependency on github.com/opencontainers/runtime-tools
  • Set the default of runtimeFeatures.UserNamespacesHostNetwork to true (#​13162)
    • a909c305c4 Set the default of runtimeFeatures.UserNamespacesHostNetwork to true
  • docs: update erofs docs ([#​13907](https://redire

Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
    • Only on Sunday and Saturday (* * * * 0,6)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-project-automation github-project-automation Bot moved this to To Do in Planning Apr 10, 2025
@talos-bot talos-bot moved this from To Do to In Review in Planning Apr 10, 2025
@smira smira removed this from Planning Apr 10, 2025
@renovate
renovate Bot force-pushed the renovate/dependencies branch from de4b35e to a8e94ff Compare April 11, 2025 10:31
@renovate renovate Bot changed the title chore: update dependencies chore: update https://github.com/ipxe/ipxe.git digest to 96dfaa7 Apr 11, 2025
@renovate
renovate Bot force-pushed the renovate/dependencies branch 2 times, most recently from 9e0d121 to ebbde0a Compare April 11, 2025 15:53
@renovate renovate Bot changed the title chore: update https://github.com/ipxe/ipxe.git digest to 96dfaa7 chore: update dependencies Apr 16, 2025
@renovate
renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from e19318c to 3ddc30c Compare April 22, 2025 11:41
@renovate
renovate Bot force-pushed the renovate/dependencies branch 5 times, most recently from 2a77d21 to 8099bbf Compare April 28, 2025 09:46
@renovate
renovate Bot force-pushed the renovate/dependencies branch 8 times, most recently from 11ce95e to c2f1c85 Compare May 8, 2025 11:03
@renovate
renovate Bot force-pushed the renovate/dependencies branch 3 times, most recently from 123f70d to f268bfd Compare May 14, 2025 14:08
@renovate
renovate Bot force-pushed the renovate/dependencies branch 9 times, most recently from e1100e8 to 1b459c0 Compare June 3, 2025 13:47
@renovate
renovate Bot force-pushed the renovate/dependencies branch 8 times, most recently from ef1e851 to 703bc6b Compare June 12, 2025 15:18
@renovate
renovate Bot force-pushed the renovate/dependencies branch from 703bc6b to 58c9bbe Compare June 15, 2025 11:48
@renovate
renovate Bot force-pushed the renovate/dependencies branch 4 times, most recently from 763e3b4 to 39bd2e4 Compare June 27, 2025 17:00
Comment thread drbd/cocci-gen.Dockerfile Outdated
FROM ${TOOLS_IMG} AS tools

FROM docker.io/library/fedora:42 AS gen
FROM docker.io/library/fedora:45 AS gen

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this breaks cross-compilation (for me) in mysterious ways, so we can keep :42

Comment thread Pkgfile Outdated

# renovate: datasource=github-releases extractVersion=^v(?<version>.*)$ depName=hailo-ai/hailort-drivers
hailort_version: 4.23.0
hailort_version: 5.3.0

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this version is incompatible with the old one, let's keep 4.x

Comment thread Pkgfile Outdated
# NOTE: v4 requires autoconf-archive
# renovate: datasource=git-tags depName=https://gitlab.com/apparmor/apparmor.git
apparmor_version: v3.1.7
apparmor_version: v5.0.0

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we keep it at v3 for now

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants