Skip to content

[pull] main from containerd:main#307

Open
pull[bot] wants to merge 813 commits intofahedouch:mainfrom
containerd:main
Open

[pull] main from containerd:main#307
pull[bot] wants to merge 813 commits intofahedouch:mainfrom
containerd:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented May 10, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull bot added the ⤵️ pull label May 10, 2025
dependabot bot and others added 29 commits December 2, 2025 22:02
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@1af3b93...8e8c483)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Add remote snapshot annotations and transfer unpack config
for stargz, soci, and fuse-overlayfs snapshotter plugins.

Signed-off-by: ChengyuZhu6 <hudson@cyzhu.com>
Add version detection to automatically select Transfer service (2.0+)
or legacy resolver methods (< 2.0) for better compatibility.

Signed-off-by: ChengyuZhu6 <hudson@cyzhu.com>
…tions/checkout-6.0.1

build(deps): bump actions/checkout from 6.0.0 to 6.0.1
fix: Improve namespace validation logic for update, inspect command
…_square

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>
docs/command-reference.md: fix nerdctl namespace anchors without blue…
Bumps the docker group with 1 update: [github.com/docker/cli](https://github.com/docker/cli).


Updates `github.com/docker/cli` from 29.1.1+incompatible to 29.1.2+incompatible
- [Commits](docker/cli@v29.1.1...v29.1.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.1.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
…-fd300ea992

build(deps): bump github.com/docker/cli from 29.1.1+incompatible to 29.1.2+incompatible in the docker group
Bumps [github.com/containerd/nydus-snapshotter](https://github.com/containerd/nydus-snapshotter) from 0.15.7 to 0.15.8.
- [Release notes](https://github.com/containerd/nydus-snapshotter/releases)
- [Commits](containerd/nydus-snapshotter@v0.15.7...v0.15.8)

---
updated-dependencies:
- dependency-name: github.com/containerd/nydus-snapshotter
  dependency-version: 0.15.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.10.1 to 1.10.2.
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps tonistiigi/xx from 1.8.0 to 1.9.0.

---
updated-dependencies:
- dependency-name: tonistiigi/xx
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…/xx-1.9.0

build(deps): bump tonistiigi/xx from 1.8.0 to 1.9.0
….com/spf13/cobra-1.10.2

build(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2
Updates tests to use nerdtest.Setup and the Tigron testing framework
as per issue #4613.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
In the current implementation, nerdctl compose command ignores tmpfs
configurations specified in the long syntax within the volumes section of
compose.yml [1].

[1] https://docs.docker.com/reference/compose-file/services/#long-syntax-6

> - `type`: The mount type. Either `volume`, `bind`, `tmpfs`, `image`, `npipe`, or `cluster`
> - `target`: The path in the container where the volume is mounted.
> - `read_only`: Flag to set the volume as read-only.
> - `tmpfs`: Configures additional tmpfs options:
>   - `size`: The size for the tmpfs mount in bytes (either numeric or as bytes unit).
>   - `mode`: The file mode for the tmpfs mount as Unix permission bits as an octal number. Introduced in Docker Compose version [2.14.0](https://docs.docker.com/compose/releases/release-notes/#2260).

This behavior has been reported in issue#4556.

Therefore, this commit modifies so that when tmpfs is specified using the
long syntax in the volumes section, tmpfs is created within the container.

Signed-off-by: Hayato Kiwata <haytok@amazon.co.jp>
Refactor container_list_test.go to use Tigron
….com/containerd/nydus-snapshotter-0.15.8

build(deps): bump github.com/containerd/nydus-snapshotter from 0.15.7 to 0.15.8
Updates tests to use nerdtest.Setup and the Tigron testing framework
as per issue #4613. Replaced base.Cmd with helpers.Command and
base.Assert with test.Expects. Also updated TestExecStdin to use
cmd.Feed instead of WithStdin.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Refactor container_exec_test.go to use Tigron
Bumps [github.com/containerd/nydus-snapshotter](https://github.com/containerd/nydus-snapshotter) from 0.15.8 to 0.15.9.
- [Release notes](https://github.com/containerd/nydus-snapshotter/releases)
- [Commits](containerd/nydus-snapshotter@v0.15.8...v0.15.9)

---
updated-dependencies:
- dependency-name: github.com/containerd/nydus-snapshotter
  dependency-version: 0.15.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/containernetworking/plugins/releases)
- [Commits](containernetworking/plugins@v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
  dependency-version: 1.9.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
….com/containernetworking/plugins-1.9.0

build(deps): bump github.com/containernetworking/plugins from 1.8.0 to 1.9.0
….com/containerd/nydus-snapshotter-0.15.9

build(deps): bump github.com/containerd/nydus-snapshotter from 0.15.8 to 0.15.9
Bumps the golang-x group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.45.0` | `0.46.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.48.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.38.0` | `0.39.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.37.0` | `0.38.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.31.0` | `0.32.0` |


Updates `golang.org/x/crypto` from 0.45.0 to 0.46.0
- [Commits](golang/crypto@v0.45.0...v0.46.0)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `golang.org/x/sys` from 0.38.0 to 0.39.0
- [Commits](golang/sys@v0.38.0...v0.39.0)

Updates `golang.org/x/term` from 0.37.0 to 0.38.0
- [Commits](golang/term@v0.37.0...v0.38.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sys
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/term
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
…-x-4da15cbbf9

build(deps): bump the golang-x group with 6 updates
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0057852...a783357)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot bot and others added 30 commits March 9, 2026 13:47
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@8d2750c...4d04d5d)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@c299e40...030e881)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…cker/setup-buildx-action-4.0.0

build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0
…cker/build-push-action-7.0.0

build(deps): bump docker/build-push-action from 6.19.2 to 7.0.0
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.1...v2.2.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
….com/containerd/containerd/v2-2.2.2

build(deps): bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2
…cker/metadata-action-6.0.0

build(deps): bump docker/metadata-action from 5.10.0 to 6.0.0
Fix issue 4793

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Dockerfile: runc: omit libpathrs
feature: show progress output during conversion
Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/containernetworking/plugins/releases)
- [Commits](containernetworking/plugins@v1.9.0...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: juannio <juaniorosas.99@gmail.com>
Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.78.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.79.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.3
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Bumps [actions/cache](https://github.com/actions/cache) from 5.0.3 to 5.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@cdf6c1f...6682284)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
….golang.org/grpc-1.79.3

build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3
…tions/cache-5.0.4

build(deps): bump actions/cache from 5.0.3 to 5.0.4
….com/containernetworking/plugins-1.9.1

build(deps): bump github.com/containernetworking/plugins from 1.9.0 to 1.9.1
… is removed

In the current implementation, when a container is started with the -p
option, a `sleep infinity` process is launched to reserve host ports.

The PID of this process is stored in
`/run/nerdctl/<namespace>/<container ID>/port-reserver.pid`.

When the container is removed, the following file and directory are
expected to be cleaned up.

- /run/nerdctl/<namespace>/<container ID>/port-reserver.pid
- /run/nerdctl/<namespace>/<container ID>/

However, currently they are not removed as shown below:

```
$ sudo nerdctl run -d --name nginx -p 81:80 nginx
ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919

$ ls /run/nerdctl/default/ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919
port-reserver.pid

$ sudo nerdctl rm -f nginx
nginx

$ ls /run/nerdctl/default/ca1552d394cd8efcc5adcff9434deb4f3ead569d168f6e31bea1ae965db8b919
port-reserver.pid
```

Therefore, this commit ensures that they are removed when the container is
removed.

Signed-off-by: Hayato Kiwata <dev@haytok.jp>
fix: clean up port-reserver.pid and the parent dir when the container…
…l-tests

test: refactor compose_pull_linux_test.go to use nerdtest/tigron
Bumps the docker group with 1 update: [github.com/docker/cli](https://github.com/docker/cli).


Updates `github.com/docker/cli` from 29.2.1+incompatible to 29.3.0+incompatible
- [Commits](docker/cli@v29.2.1...v29.3.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.3.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
add MAC, IPv4, IPv6 addresses to nework inspect
…-6bd6f1cba1

build(deps): bump github.com/docker/cli from 29.2.1+incompatible to 29.3.0+incompatible in the docker group
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.