build(deps): bump the containerd group across 1 directory with 8 updates

[dependabot]

Bumps the containerd group with 5 updates in the / directory:

Package	From	To
github.com/containerd/console	1.0.4	1.0.5
github.com/containerd/containerd/api	1.8.0	1.10.0
github.com/containerd/containerd/v2	2.0.4	2.2.0
github.com/containerd/imgcrypt/v2	2.0.1	2.0.2
github.com/containerd/stargz-snapshotter	0.16.3	0.18.1

Updates github.com/containerd/console from 1.0.4 to 1.0.5

Release notes

Sourced from github.com/containerd/console's releases.

v1.0.5

What's Changed

• fix: add solaris to non-supported shim. by @​jperkin in containerd/console#84
• pty: add GetPtyFromFile as safer GetPty by @​cyphar in containerd/console#86

New Contributors

• @​jperkin made their first contribution in containerd/console#84
• @​cyphar made their first contribution in containerd/console#86

Full Changelog: containerd/console@v1.0.4...v1.0.5

Commits

• c8d9621 Merge pull request #86 from cyphar/newpty-from-file
• fa4de4c Merge pull request #84 from jperkin/fix-solaris
• c79e45e pty: add GetPtyFromFile as safer GetPty
• 12ba745 tc: make internal handlers take File interface
• 9dd67e1 gha: bump containerd/project-checks to v1.2.2
• 37ae7bb fix: add solaris to non-supported shim.
• See full diff in compare view

Updates github.com/containerd/containerd/api from 1.8.0 to 1.10.0

Release notes

Sourced from github.com/containerd/containerd/api's releases.

containerd API 1.10.0

Welcome to the api/v1.10.0 release of containerd!

The 11th release for the containerd 1.x API aligns with the containerd 2.2 release.

Highlights

• Add mount manager

  The mount manager is a new service that provides lifecycle management for filesystem mounts to support more advanced use cases, such as:

  • Device formatting to create formatted filesystems (xfs, ext4) on-demand
  • Mount activation to prepare devices such as loopbacks or network fileystems
  • Mount transformation to allow mount arguments to be filled in dynamically from previous mounts
  • Garbage collection of mounts to ensure temporary mounts are never leaked (#12063)

Image Distribution

• Parallel Unpack

  Adds support for unpacking layers in parallel during pull operations. This feature is supported with overlayfs and EROFS snapshotters. (#12332)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Henry Wang
• Phil Estes
• Wei Fu

Changes

• Prepare release notes for api/v1.10.0 (#12472)
  • 69c855bb5 Prepare release notes for api/v1.10.0
• api/go.mod: golang.org/x/net v0.38.0 (#12430)
  • 4c7b94fce api/go.mod: golang.org/x/net v0.38.0
• Prepare release notes for api/v1.10.0-rc.0 (#12408)
  • fbc7848f2 Prepare release notes for api/v1.10.0-rc.0
• Add parallel unpack support (#12332)
  • 0198b87fc Implement parallel unpack
• Prepare release notes for api/v1.10.0-beta.0 (#12346)
  • aa571f63c Prepare release notes for api/v1.10.0-beta.0
• Add mount manager (#12063)
  • 8db301086 Add mounts api service
  • 67fbf9db9 Generate and vendor proto changes

... (truncated)

Commits

• 8b34ce3 Merge pull request #12472 from dmcgowan/prepare-api-v1.10.0
• 6cadeac Merge pull request #12475 from ningmingxiao/update_runc
• 8c98030 runc: Update runc binary to v1.3.3
• f5d82c5 Merge pull request #12469 from austinvazquez/update-binaries-job-images
• 69c855b Prepare release notes for api/v1.10.0
• f72025d Update GHA runners to use latest images for basic binaries build
• c32c421 Merge pull request #12464 from austinvazquez/bump-go-1.24.9
• 7510132 Merge pull request #12460 from containerd/dependabot/github_actions/github/co...
• acbaa8a ci: bump Go 1.24.9, 1.25.3
• 5ba8239 Merge pull request #12461 from containerd/dependabot/github_actions/lycheever...
• Additional commits viewable in compare view

Updates github.com/containerd/containerd/v2 from 2.0.4 to 2.2.0

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.2.0

Welcome to the v2.2.0 release of containerd!

The second minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the second time-based released for containerd.

Highlights

• Add mount manager (#12063)

  The mount manager is a new service that provides lifecycle management for filesystem mounts to support more advanced use cases, such as:

  • Device formatting to create formatted filesystems (xfs, ext4) on-demand
  • Mount activation to prepare devices such as loopbacks or network fileystems
  • Mount transformation to allow mount arguments to be filled in dynamically from previous mounts
  • Garbage collection of mounts to ensure temporary mounts are never leaked

• Add conf.d include in the default config (#12323)

• Add support for back references in the garbage collector (#12025)

Container Runtime Interface (CRI)

• Pod Sandbox Metrics (#10691)

  Full implementation of Kubernetes CRI pod-level metrics API

  • ListPodSandboxMetrics: Query metrics for running pods/sandboxes
  • ListMetricsDescriptors: Discover available metrics and their descriptions

• Support image volume mount subpath (#11578)

Go client

• Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

• Parallel Unpack (#12332)

  Adds support for unpacking layers in parallel during pull operations. This feature is supported with overlayfs and EROFS snapshotters.

• OCI Referrers Support (#12309)

  Adds new referrers fetcher to remote registry interface using the new referrers endpoint added in OCI distribution-spec 1.1

• Tar unpack progress through transfer service (#11921)

Image Storage

• EROFS enhancements using mount manager (#12333)

  Improvements to EROFS snapshotter using the new mount manager service

  • Quota Support: Support for sized block devices as the upper layer for overlayfs
  • Mount Lifecycle: Loopback setup, block device creation, and overlayfs argument formatting is moved to the mount manager to be performed on-demand or within the runtime.

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Minor releases are provided on a time basis with an initial cadence of 6 months. The next two containerd releases should have a target release date scheduled based on the current release cadence. Changes to the release cadence will not impact releases which are already scheduled.

The maintainers will maintain a roadmap and milestones for each release, however, features may be pushed to accommodate the release timeline. If your issue or feature

... (truncated)

Commits

• 1c4457e Merge pull request #12473 from dmcgowan/prepare-v2.2.0
• 8eaa0b5 Prepare release notes for v2.2.0
• 8885b1b Make v2.2.0 the latest release
• d77d3bc Update releases file
• 491f773 Update api version to v1.10.0
• 1ea370e Update platforms version to latest
• 7c59e8e Merge commit from fork
• 083b53c Merge commit from fork
• 3eea45b Merge pull request #12485 from erofs/erofs-fixes
• 77644a1 Update EROFS snapshotter documentation
• Additional commits viewable in compare view

Updates github.com/containerd/go-cni from 1.1.12 to 1.1.13

Release notes

Sourced from github.com/containerd/go-cni's releases.

v1.1.13

What's Changed

• Update CNI to v1.3.0 by @​keithmattix in containerd/go-cni#130

New Contributors

• @​keithmattix made their first contribution in containerd/go-cni#130

Full Changelog: containerd/go-cni@v1.1.12...v1.1.13

Commits

• 784f94e Merge pull request #130 from keithmattix/keithmattix/bump-cni
• fcc5217 Add Apache LICENSE to integration test dir
• 5ebeb4b Bump actions and dependencies to newer versions
• fa57f88 Update CNI to v1.3.0
• See full diff in compare view

Updates github.com/containerd/imgcrypt/v2 from 2.0.1 to 2.0.2

Release notes

Sourced from github.com/containerd/imgcrypt/v2's releases.

imgcrypt v2.0.2

v2.0.2:

• Updated various dependencies
• Fixed an error message to start with small letter

Full Changelog: containerd/imgcrypt@v2.0.1...v2.0.2

Commits

• 6892f4d go.mod: github.com/containerd/containerd/v2 v2.0.7
• 4bb7514 build(deps): bump github.com/containerd/containerd/v2
• 7a5a14c ci: Upgrade to golangci-lint v2.4.0
• 9a16ab3 Start error message with non-capitalized letter
• d9809a7 Merge pull request #183 from containerd/dependabot/go_modules/cmd/github.com/...
• 05f86fe build(deps): bump github.com/containerd/containerd/v2 in /cmd
• 775f5bc Merge pull request #182 from containerd/dependabot/go_modules/golang.org/x/ne...
• 4b96783 build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0
• e353f0f Merge pull request #180 from containerd/dependabot/go_modules/cmd/golang.org/...
• ef5ba82 build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /cmd
• See full diff in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.1 to 1.0.0-rc.2

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.2

What's Changed

• Add WS2025 to Windows matcher and code optimizations by @​kiashok in containerd/platforms#24
• use windowsMatchComparer for OSVersion match order by @​mweibel in containerd/platforms#25

New Contributors

• @​mweibel made their first contribution in containerd/platforms#25

Full Changelog: containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.2

Commits

• 2e51fd9 Merge pull request #25 from helio/windows-os-version-sort
• 8c0d9f9 use windowsMatchComparer for OSVersion match order
• 2fec6c4 Merge pull request #24 from kiashok/add-ws2025
• 8447b0a Update ci.yml
• 4549974 Add WS2025 to Windows matcher and code optimizations
• See full diff in compare view

Updates github.com/containerd/stargz-snapshotter from 0.16.3 to 0.18.1

Release notes

Sourced from github.com/containerd/stargz-snapshotter's releases.

v0.18.1

Notable Changes

• Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
• Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

• Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
• Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
• Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
• Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
• Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
• Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
• Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
• Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
• Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
• Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
• Fixed lazy pulling failure on images with empty layers (#2137)
• Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
• Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
• Refactors and document fixes (#2112, #2150), thanks to @​wswsmao

v0.17.0

Notable Changes

• New features
  • Added support for FUSE passthourgh (#1868, #1870, #1874, #1876, #1881, #1923, #1987, #2012, #2045, #2068), thanks to @​wswsmao
  • Added support for detaching FUSE server as a separated processs (FUSE manager), thanks to @​wswsmao (#1892, #1912, #1905) and @​ilyee (#1892)
  • Expanded support for graceful restarting of Stargz Snapshotter (#2077)
  • Added arm64 KIND node image (ghcr.io/containerd/stargz-snapshotter:0.17.0-kind) (#1983)
• Fixes and changes
  • Set maximum filename length to 255 bytes (#2024), thanks to @​wswsmao
  • Fixed EOPNOTSUPP issue on getdents64 (#2063), thanks to @​wswsmao
  • Fixed TTLCache failed to release resources on exit (#2076)
  • Fixed the configuration and docs to prevent GC failures in CRI plugin (#1893)
  • Refactored blob manipulation logic to make it more modular (#1955), thanks to @​ChengyuZhu6
  • Fix zstd:chunked converter error on duplicated blobs (#1885), thanks to @​apostasie
• Document updates
  • Added docs about how to use Stargz Snapshotter on Lima (#1967)
  • Added docs about how to use Stargz Snapshotter with Transfer Service (#2084)
  • Improved legibility in docs/overview.md (#2061), thanks to @​soulshake
• CI updates
  • Added tests for wider configrations (FUSE passthrough and FUSE manager) (#2074, #2083, #1914)
  • Fixed dependabot's configuration to avoid CI failures in gomod PRs (#1920, #1941), thanks to @​djdongjin
  • Bump up containerd/project-checks to v1.2.2 (#2004), thanks to @​wswsmao
• Dependencies

... (truncated)

Commits

• 60de78b Merge pull request #2167 from ktock/prepare-v0.18.1
• d676264 Prepare for v0.18.1
• b53f30b Merge pull request #2164 from containerd/dependabot/go_modules/gomod-30043e7df9
• 9f66f8d Merge pull request #2165 from AkihiroSuda/containerd-2.1.5
• 7a0b484 Dockerfile: update runc (1.3.3)
• abedc76 Dockerfile: update containerd (2.1.5)
• 0caa3c2 go.mod: github.com/containerd/containerd/v2 v2.1.5
• 1274e2a build(deps): bump github.com/docker/cli
• dca1521 Merge pull request #2162 from ktock/golangci-lint-2.6
• 7c03a01 Fix golangci-lint "misspell" error
• Additional commits viewable in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.16.3 to 0.18.1

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.18.1

Notable Changes

• Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
• Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

• Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
• Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
• Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
• Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
• Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
• Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
• Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
• Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
• Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
• Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
• Fixed lazy pulling failure on images with empty layers (#2137)
• Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
• Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
• Refactors and document fixes (#2112, #2150), thanks to @​wswsmao

v0.17.0

Notable Changes

• New features
  • Added support for FUSE passthourgh (#1868, #1870, #1874, #1876, #1881, #1923, #1987, #2012, #2045, #2068), thanks to @​wswsmao
  • Added support for detaching FUSE server as a separated processs (FUSE manager), thanks to @​wswsmao (#1892, #1912, #1905) and @​ilyee (#1892)
  • Expanded support for graceful restarting of Stargz Snapshotter (#2077)
  • Added arm64 KIND node image (ghcr.io/containerd/stargz-snapshotter:0.17.0-kind) (#1983)
• Fixes and changes
  • Set maximum filename length to 255 bytes (#2024), thanks to @​wswsmao
  • Fixed EOPNOTSUPP issue on getdents64 (#2063), thanks to @​wswsmao
  • Fixed TTLCache failed to release resources on exit (#2076)
  • Fixed the configuration and docs to prevent GC failures in CRI plugin (#1893)
  • Refactored blob manipulation logic to make it more modular (#1955), thanks to @​ChengyuZhu6
  • Fix zstd:chunked converter error on duplicated blobs (#1885), thanks to @​apostasie
• Document updates
  • Added docs about how to use Stargz Snapshotter on Lima (#1967)
  • Added docs about how to use Stargz Snapshotter with Transfer Service (#2084)
  • Improved legibility in docs/overview.md (#2061), thanks to @​soulshake
• CI updates
  • Added tests for wider configrations (FUSE passthrough and FUSE manager) (#2074, #2083, #1914)
  • Fixed dependabot's configuration to avoid CI failures in gomod PRs (#1920, #1941), thanks to @​djdongjin
  • Bump up containerd/project-checks to v1.2.2 (#2004), thanks to @​wswsmao
• Dependencies

... (truncated)

Commits

• 60de78b Merge pull request #2167 from ktock/prepare-v0.18.1
• d676264 Prepare for v0.18.1
• b53f30b Merge pull request #2164 from containerd/dependabot/go_modules/gomod-30043e7df9
• 9f66f8d Merge pull request #2165 from AkihiroSuda/containerd-2.1.5
• 7a0b484 Dockerfile: update runc (1.3.3)
• abedc76 Dockerfile: update containerd (2.1.5)
• 0caa3c2 go.mod: github.com/containerd/containerd/v2 v2.1.5
• 1274e2a build(deps): bump github.com/docker/cli
• dca1521 Merge pull request #2162 from ktock/golangci-lint-2.6
• 7c03a01 Fix golangci-lint "misspell" error
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions