build(deps): bump the containerd group across 1 directory with 7 updates

[dependabot]

Bumps the containerd group with 6 updates in the / directory:

Package	From	To
github.com/containerd/console	1.0.4	1.0.5
github.com/containerd/containerd/api	1.8.0	1.9.0
github.com/containerd/containerd/v2	2.0.4	2.1.4
github.com/containerd/go-cni	1.1.12	1.1.13
github.com/containerd/platforms	1.0.0-rc.1	1.0.0-rc.2
github.com/containerd/stargz-snapshotter	0.16.3	0.18.0

Updates github.com/containerd/console from 1.0.4 to 1.0.5

Release notes

Sourced from github.com/containerd/console's releases.

v1.0.5

What's Changed

• fix: add solaris to non-supported shim. by @​jperkin in containerd/console#84
• pty: add GetPtyFromFile as safer GetPty by @​cyphar in containerd/console#86

New Contributors

• @​jperkin made their first contribution in containerd/console#84
• @​cyphar made their first contribution in containerd/console#86

Full Changelog: containerd/console@v1.0.4...v1.0.5

Commits

• c8d9621 Merge pull request #86 from cyphar/newpty-from-file
• fa4de4c Merge pull request #84 from jperkin/fix-solaris
• c79e45e pty: add GetPtyFromFile as safer GetPty
• 12ba745 tc: make internal handlers take File interface
• 9dd67e1 gha: bump containerd/project-checks to v1.2.2
• 37ae7bb fix: add solaris to non-supported shim.
• See full diff in compare view

Updates github.com/containerd/containerd/api from 1.8.0 to 1.9.0

Release notes

Sourced from github.com/containerd/containerd/api's releases.

containerd API 1.9.0

Welcome to the api/v1.9.0 release of containerd!

The 10th release for the containerd 1.x API aligns with the containerd 2.1 release.

Highlights

• Add content create event (#11006)

Image Distribution

• Enable HTTP debug and trace for transfer based puller (#10762)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Maksym Pavlenko
• Akihiro Suda
• Davanum Srinivas
• Phil Estes
• Adrian Reber
• Jin Dong
• Philip Laine

Changes

• Prepare release notes for api/v1.9.0 (#11812)
  • 145175bf4 Prepare release notes for api/v1.9.0
• Add release notes for api v1.9.0-rc.0 (#11751)
  • c0ce618a1 Add release notes for api v1.9.0-rc.0
• Enable HTTP debug and trace for transfer based puller (#10762)
  • 17b6e1ef8 Allow streaming to client
  • 40eb2fdbb Fix protos
  • 1d436803d Add http debug fields to OCI registry protos
• Add content create event (#11006)
  • 752914b5b Add content create event to api
• bump golang.org/x/net from 0.33.0 to 0.37.0 (#11574)
  • 7fe5c4123 go.mod: golang.org/x/net v0.37.0
• Support container restore through CRI/Kubernetes (#10365)
  • 9e6beafd5 Support container restore through CRI/Kubernetes
• build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api (#11472)
  • 37fe1e8b4 build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api
• Bump to newer opencontainers/image-spec @ v1.1.1 (#11461)
  • d37ea6977 Bump to newer opencontainers/image-spec @ v1.1.1

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/api's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Minor releases are provided on a time basis with an initial cadence of 6 months. The next two containerd releases should have a target release date scheduled based on the current release cadence. Changes to the release cadence will not impact releases which are already scheduled.

The maintainers will maintain a roadmap and milestones for each release, however, features may be pushed to accommodate the release timeline. If your issue or feature

... (truncated)

Commits

• 9033738 Merge pull request #11812 from dmcgowan/prepare-api-v1.9.0
• 145175b Prepare release notes for api/v1.9.0
• 5a3bbca Merge pull request #11724 from swagatbora90/cri-image-transfer-doc-update
• 3a1c2db Merge pull request #11793 from fuweid/carry-on-11761
• a806c0a Merge pull request #11796 from containerd/dependabot/go_modules/golang-x-c9f3...
• 5dc29f0 core/runtime: should invoke shim binary
• 76d3ad5 Merge pull request #11798 from containerd/dependabot/github_actions/github/co...
• e5ef650 Revert "not set sandbox id when use podsandbox type"
• 1c70f23 integration: add testcase to recover ungroupable shim
• 00824bf Merge pull request #11792 from mikebrow/reducing-k8s-vendor-footprint-apimach...
• Additional commits viewable in compare view

Updates github.com/containerd/containerd/v2 from 2.0.4 to 2.1.4

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.1.4

Welcome to the v2.1.4 release of containerd!

The fourth patch release for containerd 2.1 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

• Fix containerd panic when sandbox extension is missing (#12076)
• Update status response to return stable order for runtime handlers (#12054)

Go client

• Fix lazy gRPC connection mode waiting for connect on client creation (#12079)

Image Distribution

• Fix resolve deadlock issue in docker fetcher open (#12127)

Image Storage

• Update erofs snapshotter to make immutable optional (#12091)
• Fix erofs filesystem UUID for tar-converted layers (#12058)

Runtime

• Fix close container io not closed when runtime create failed (#12009)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Phil Estes
• Eric Mountain
• Maksym Pavlenko
• Gao Xiang
• Kirtana Ashok
• ningmingxiao
• Akihiro Suda
• Austin Vazquez
• Paweł Gronowski
• Sebastiaan van Stijn
• Wei Fu
• jinda.ljd

Changes

... (truncated)

Commits

• 75cb2b7 Merge pull request #12159 from dmcgowan/prepare-v2.1.4
• 112e413 Add release notes for v2.1.4
• 341b254 Merge pull request #12127 from k8s-infra-cherrypick-robot/cherry-pick-12126-t...
• add2dcf Ensure fetcher always closes body and properly calls release
• 34a1cb1 fix(dockerFetcher): resolve deadlock issue in dockerFetcher open
• 1a989e4 Merge pull request #12115 from austinvazquez/cherry-pick-c5ad254a3a18ca2e318f...
• 82c4d68 ci: bump Go 1.23.11, 1.24.5
• 8dfd980 Merge pull request #12119 from kiashok/backport-windows-fixes-2.1
• 6cc2a8d Fix intermittent test failures on Windows CIs
• 6adc693 Remove WS2025 from CIs due to regression
• Additional commits viewable in compare view

Updates github.com/containerd/go-cni from 1.1.12 to 1.1.13

Release notes

Sourced from github.com/containerd/go-cni's releases.

v1.1.13

What's Changed

• Update CNI to v1.3.0 by @​keithmattix in containerd/go-cni#130

New Contributors

• @​keithmattix made their first contribution in containerd/go-cni#130

Full Changelog: containerd/go-cni@v1.1.12...v1.1.13

Commits

• 784f94e Merge pull request #130 from keithmattix/keithmattix/bump-cni
• fcc5217 Add Apache LICENSE to integration test dir
• 5ebeb4b Bump actions and dependencies to newer versions
• fa57f88 Update CNI to v1.3.0
• See full diff in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.1 to 1.0.0-rc.2

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.2

What's Changed

• Add WS2025 to Windows matcher and code optimizations by @​kiashok in containerd/platforms#24
• use windowsMatchComparer for OSVersion match order by @​mweibel in containerd/platforms#25

New Contributors

• @​mweibel made their first contribution in containerd/platforms#25

Full Changelog: containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.2

Commits

• 2e51fd9 Merge pull request #25 from helio/windows-os-version-sort
• 8c0d9f9 use windowsMatchComparer for OSVersion match order
• 2fec6c4 Merge pull request #24 from kiashok/add-ws2025
• 8447b0a Update ci.yml
• 4549974 Add WS2025 to Windows matcher and code optimizations
• See full diff in compare view

Updates github.com/containerd/stargz-snapshotter from 0.16.3 to 0.18.0

Release notes

Sourced from github.com/containerd/stargz-snapshotter's releases.

v0.18.0

Notable Changes

• Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
• Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
• Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
• Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
• Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
• Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
• Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
• Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
• Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
• Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
• Fixed lazy pulling failure on images with empty layers (#2137)
• Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
• Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
• Refactors and document fixes (#2112, #2150), thanks to @​wswsmao

v0.17.0

Notable Changes

• New features
  • Added support for FUSE passthourgh (#1868, #1870, #1874, #1876, #1881, #1923, #1987, #2012, #2045, #2068), thanks to @​wswsmao
  • Added support for detaching FUSE server as a separated processs (FUSE manager), thanks to @​wswsmao (#1892, #1912, #1905) and @​ilyee (#1892)
  • Expanded support for graceful restarting of Stargz Snapshotter (#2077)
  • Added arm64 KIND node image (ghcr.io/containerd/stargz-snapshotter:0.17.0-kind) (#1983)
• Fixes and changes
  • Set maximum filename length to 255 bytes (#2024), thanks to @​wswsmao
  • Fixed EOPNOTSUPP issue on getdents64 (#2063), thanks to @​wswsmao
  • Fixed TTLCache failed to release resources on exit (#2076)
  • Fixed the configuration and docs to prevent GC failures in CRI plugin (#1893)
  • Refactored blob manipulation logic to make it more modular (#1955), thanks to @​ChengyuZhu6
  • Fix zstd:chunked converter error on duplicated blobs (#1885), thanks to @​apostasie
• Document updates
  • Added docs about how to use Stargz Snapshotter on Lima (#1967)
  • Added docs about how to use Stargz Snapshotter with Transfer Service (#2084)
  • Improved legibility in docs/overview.md (#2061), thanks to @​soulshake
• CI updates
  • Added tests for wider configrations (FUSE passthrough and FUSE manager) (#2074, #2083, #1914)
  • Fixed dependabot's configuration to avoid CI failures in gomod PRs (#1920, #1941), thanks to @​djdongjin
  • Bump up containerd/project-checks to v1.2.2 (#2004), thanks to @​wswsmao
• Dependencies
  • Replace harshicorp/multierror with errors.Join (#1921), thanks to @​djdongjin
  • Bump up Kubernetes to v1.33 (#2078)
  • go.mod dependency updates (#1936, #1942), thanks to @​thaJeztah

For other changes, refer to the full diff: containerd/stargz-snapshotter@v0.16.3...v0.17.0

Commits

• d069a28 Merge pull request #2151 from ktock/prepare-v0.18.0
• 28f32ae Preapre for v0.18.0
• baee5d1 Merge pull request #2148 from wswsmao/main
• b919e72 ctr-remote: add wildcard support for prefetch-list option
• 8f3983e Merge pull request #2129 from wswsmao/monitor
• 3eb8ee2 Merge pull request #2150 from wswsmao/doc
• ec84d57 Merge pull request #2149 from ktock/dockerfile202510
• db260f8 fusemanager: fix typo
• e57ac7c Dockerfile: bump up dependencies
• e83587c Merge pull request #2147 from containerd/dependabot/go_modules/gomod-9d3bd425c7
• Additional commits viewable in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.16.3 to 0.18.0

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.18.0

Notable Changes

• Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
• Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
• Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
• Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
• Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
• Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
• Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
• Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
• Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
• Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
• Fixed lazy pulling failure on images with empty layers (#2137)
• Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
• Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
• Refactors and document fixes (#2112, #2150), thanks to @​wswsmao

v0.17.0

Notable Changes

• New features
  • Added support for FUSE passthourgh (#1868, #1870, #1874, #1876, #1881, #1923, #1987, #2012, #2045, #2068), thanks to @​wswsmao
  • Added support for detaching FUSE server as a separated processs (FUSE manager), thanks to @​wswsmao (#1892, #1912, #1905) and @​ilyee (#1892)
  • Expanded support for graceful restarting of Stargz Snapshotter (#2077)
  • Added arm64 KIND node image (ghcr.io/containerd/stargz-snapshotter:0.17.0-kind) (#1983)
• Fixes and changes
  • Set maximum filename length to 255 bytes (#2024), thanks to @​wswsmao
  • Fixed EOPNOTSUPP issue on getdents64 (#2063), thanks to @​wswsmao
  • Fixed TTLCache failed to release resources on exit (#2076)
  • Fixed the configuration and docs to prevent GC failures in CRI plugin (#1893)
  • Refactored blob manipulation logic to make it more modular (#1955), thanks to @​ChengyuZhu6
  • Fix zstd:chunked converter error on duplicated blobs (#1885), thanks to @​apostasie
• Document updates
  • Added docs about how to use Stargz Snapshotter on Lima (#1967)
  • Added docs about how to use Stargz Snapshotter with Transfer Service (#2084)
  • Improved legibility in docs/overview.md (#2061), thanks to @​soulshake
• CI updates
  • Added tests for wider configrations (FUSE passthrough and FUSE manager) (#2074, #2083, #1914)
  • Fixed dependabot's configuration to avoid CI failures in gomod PRs (#1920, #1941), thanks to @​djdongjin
  • Bump up containerd/project-checks to v1.2.2 (#2004), thanks to @​wswsmao
• Dependencies
  • Replace harshicorp/multierror with errors.Join (#1921), thanks to @​djdongjin
  • Bump up Kubernetes to v1.33 (#2078)
  • go.mod dependency updates (#1936, #1942), thanks to @​thaJeztah

For other changes, refer to the full diff: containerd/stargz-snapshotter@v0.16.3...v0.17.0

Commits

• d069a28 Merge pull request #2151 from ktock/prepare-v0.18.0
• 28f32ae Preapre for v0.18.0
• baee5d1 Merge pull request #2148 from wswsmao/main
• b919e72 ctr-remote: add wildcard support for prefetch-list option
• 8f3983e Merge pull request #2129 from wswsmao/monitor
• 3eb8ee2 Merge pull request #2150 from wswsmao/doc
• ec84d57 Merge pull request #2149 from ktock/dockerfile202510
• db260f8 fusemanager: fix typo
• e57ac7c Dockerfile: bump up dependencies
• e83587c Merge pull request #2147 from containerd/dependabot/go_modules/gomod-9d3bd425c7
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.