Skip to content

Update module github.com/containerd/containerd to v2 - #24

Open
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github.com-containerd-containerd-2.x
Open

Update module github.com/containerd/containerd to v2#24
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/github.com-containerd-containerd-2.x

Conversation

@renovate

@renovate renovate Bot commented Nov 5, 2024 •
edited by gozer
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/containerd/containerd v1.7.3 → v2.3.4 age confidence

Release Notes

containerd/containerd (github.com/containerd/containerd)

v2.3.4: containerd 2.3.4

Compare Source

Welcome to the v2.3.4 release of containerd!

The fourth patch release for containerd 2.3 contains various fixes and updates.

Highlights
Container Runtime Interface (CRI)
  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#​13913)
  • Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI (#​13914)
  • Deprecate checkpoint restore in CreateContainer (#​13868)
  • Support non-UTF-8 binary environment variable values in CRI (#​13454)
  • Enable OCI runtime feature introspection for non-runc runtimes in CRI (#​13778)
  • Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#​13734)
  • Normalize sandbox image references in CRI to resolve images without domain prefixes (#​13759)
Node Resource Interface (NRI)
  • Emit deprecation warnings for plugins using deprecated NRI interfaces (#​13935)
Runtime
  • Enable log scrubbing by default on Windows (#​13904)
  • Fix memory leak in OOM watcher map when stopping container monitoring (#​13870)
  • Avoid orphaning shims on transient errors when loading process IDs (#​13857)
  • Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming (#​13803)
Snapshotters
  • Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata (#​13876)
Breaking
  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#​13913)
Deprecations
  • Deprecate checkpoint restore in CreateContainer (#​13868)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Samuel Karp
  • Maksym Pavlenko
  • Mike Brown
  • Akihiro Suda
  • Derek McGowan
  • Jordan Liggitt
  • Paweł Gronowski
  • Amir Alavi
  • Andrew Halaney
  • Bing Hongtao
  • Chris Henzie
  • Harshal Patel
  • Krisztian Litkey
  • Phil Estes
  • Wei Fu
  • ningmingxiao
Changes
35 commits

  • c1f5360ef Prepare release notes for v2.3.4
  • cri: disable restore in CreateContainer by default (#​13913)
    • 928c03c68 cri: disable restore in CreateContainer by default
  • nri,deprecation: record and emit warnings for NRI deprecations. (#​13935)
    • 5966e2edb nri,deprecation: emit warnings for old NRI plugins.
  • Set the default of runtimeFeatures.UserNamespacesHostNetwork to true (#​13914)
    • ab52c58f1 Set the default of runtimeFeatures.UserNamespacesHostNetwork to true
  • Use ScrubLogs by default on Windows (#​13904)
    • 0c255158a ctr: add --scrub-logs flag for Windows
    • 1c2b13dc9 cri/config: use ScrubLogs by default on Windows
  • snapshots/erofs: keep lowers stacked above a merged fsmeta (#​13876)
    • 0c511e068 snapshots/erofs: keep lowers stacked above a merged fsmeta
  • cri: deprecate restore in CreateContainer (#​13868)
    • dc98141df cri: deprecate restore in CreateContainer
  • internal/oom: Fix memory leak by removing watcher from map on Stop (#​13870)
    • 537d82d54 internal/oom: Fix memory leak by removing watcher from map on Stop
  • shim_load: Consider shim leaked only if we can't find pids (#​13857)
    • decf97a9c shim_load: Consider shim leaked only if we can't find pids
  • core/runtime/v2: Drop checkpointctl module dependency (#​13840)
    • 796f07dc8 core/runtime/v2: Drop checkpointctl module dependency
  • Handle []byte envvar value for CRI (#​13454)
    • 751fddddb Handle []byte envvar value
    • 0bce9060e update to v0.36.x kubernetes dependencies
  • fix(cri): introspect OCI runtime features for non-runc runtimes (#​13778)
    • 61a8f6f45 fix(cri): introspect OCI runtime features for non-runc runtimes
  • core/runtime/v2: Preserve protobuf shim response bytes (#​13803)
    • 1d28017be core/runtime/v2: Preserve protobuf shim response bytes
  • Disable checkpoint restore codepath when CRIU is not installed (#​13734)
    • 374091d67 github/workflows: install criu in node-e2e
    • db03e3968 cri: add enable_criu configuration option
    • dacd4c7d0 cri: validate CRIU availability and version early
  • ci: bound Go fuzzing by execution count (#​13785)
    • 890a9c86c ci: bound Go fuzzing by execution count
  • cri: auto-add prefix for pause image (#​13759)
    • 0b2f1d078 cri: auto-add prefix for pause image

Dependency Changes
  • k8s.io/api v0.36.0 -> v0.36.3
  • k8s.io/apimachinery v0.36.0 -> v0.36.3
  • k8s.io/client-go v0.36.0 -> v0.36.3
  • k8s.io/component-base v0.36.0 -> v0.36.3
  • k8s.io/cri-api v0.36.0 -> v0.36.3
  • k8s.io/cri-client v0.36.0 -> v0.36.3
  • k8s.io/cri-streaming v0.36.0 -> v0.36.3
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v2.3.3

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.3.3: containerd 2.3.3

Compare Source

Welcome to the v2.3.3 release of containerd!

The third patch release for containerd 2.3 contains various fixes and updates.

Highlights
  • Set SystemTemp environment variable on Windows so temp directory overrides work for SYSTEM services (#​13694)
Container Runtime Interface (CRI)
  • Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#​13697)
  • Reject CreateContainer calls when the target sandbox is not running (#​13668)
  • Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks (#​13645)
Image Distribution
  • Surface OCI error bodies in registry 403 responses by falling back to GET requests (#​13738)
Snapshotters
  • Align default 4K mkfs block size for EROFS across all platforms (#​13632)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Maksym Pavlenko
  • Samuel Karp
  • Chris Henzie
  • Phil Estes
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Austin Vazquez
  • Chris Crone
  • Derek McGowan
  • Maksim An
  • crawfordxx
  • cshung
  • lauralorenz
Changes
14 commits

  • Prepare release notes for v2.3.3 (#​13750)
  • CI: migrate Vagrant to Lima (#​13744)
  • remotes: surface OCI error body in registry 4xx responses (#​13738)
    • 457fba3a3 remotes: surface OCI error body on HEAD 403 via GET fallback
  • Update go to 1.26.5 (#​13732)
  • ci: pin fog-json to resolve gem conflict (#​13711)
    • 5be0495df ci: pin fog-json to resolve gem conflict
  • Fix nil pointer dereference in NRI GetIPs (#​13697)
    • 36c713971 Fix nil pointer dereference in NRI GetIPs
  • Set SystemTemp env var to config temp on Windows (#​13694)
    • 26dce170d Set SystemTemp env var to config temp on Windows
  • update runhcs to v0.15.0-rc.3 (#​13693)
  • Update to current setup-go version (#​13686)
    • 3e97edeb7 Update to current setup-go version
  • cri: reject CreateContainer when sandbox is not running (#​13668)
    • 8856b0f9c cri: reject CreateContainer when sandbox is not running
  • update runhcs to v0.15.0-rc.2 (#​13666)
  • test: fix flaky image timestamp check on coarse clocks (#​13643)
    • 168d56783 test: fix flaky image timestamp check on coarse clocks
  • Add defer in event of mid-function failures in RunPodSandbox to avoid mount leaks (#​13645)
    • d1db61db8 Add deferred call to ShutdownSandbox to avoid leaks
  • erofs: align default mkfs block size across platforms (#​13632)
    • 01b0f03f6 erofs: align default mkfs block size across platforms

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.3.2

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.3.2: containerd 2.3.2

Compare Source

Welcome to the v2.3.2 release of containerd!

The second patch release for containerd 2.3 contains various fixes
and updates including security patches.

Security Updates
Highlights
  • Fix a data race when reading shim logs on Windows (#​13522)
Image Distribution
  • Allow the last host to retry on transient network errors (#​13591)
Runtime
  • Fix container startup failures caused by concurrent task RPC timeouts during slow container creation (#​13512)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Samuel Karp
  • Chris Henzie
  • Akihiro Suda
  • Derek McGowan
  • Akhil Mohan
  • Austin Vazquez
  • Ben Cressey
  • Brian Goff
  • Maksym Pavlenko
  • Sebastiaan van Stijn
  • Sergey Kanzhelev
Changes
30 commits

  • Prepare release notes for v2.3.2 (#​13627)
    • fb8ca00b0 Prepare release notes for v2.3.2
    • 9c69960ba Merge commit from fork
    • 0f6251520 Merge commit from fork
    • 91d7471e2 cri: filter CDI annotations on checkpoint restore
    • 7c2e086bf Merge commit from fork
    • dae67765f cri: do not re-tag restored checkpoints
    • 94aa1e2c1 Merge commit from fork
    • 09599078f cri: make checkpoint restore robust to unexpected archive content
    • e1fdb8d22 Merge commit from fork
    • ff1d116ef Bound user-database file reads in openUserFile
    • d156e07cb Merge commit from fork
    • f99aad54a Do not propagate reserved labels from image configs
  • vendor: golang.org/x/crypto v0.53.0 (#​13608)
    • 0b9469501 [release/2.3] vendor: golang.org/x/crypto v0.53.0
  • resolver: retry on transient network errors (#​13591)
    • 983bbddc1 resolver: retry on transient network errors
  • update runc binary to v1.4.3 (#​13601)
  • update go to 1.26.4 (#​13580)
    • 8a49dfe85 update go to 1.26.4
    • 5aa6bb2b7 remove 1.26.2 from CI builds as it is not supported any longer due to the dependency
  • Configure udevd children-max for root-test (#​13568)
    • bfb8aebc0 Configure udevd children-max for root-test
  • core/runtime/v2: fix race on Windows deferredPipeConnection.c in Read (#​13522)
    • 62ceafff0 core/runtime/v2: fix race on Windows deferredPipeConnection.c in Read
  • runc-shim: don't hold the service lock across runc create (#​13512)
    • 9b0c0dc58 runc-shim: don't hold the service lock across runc create
  • contrib/checkpoint: increase timeouts to 30s (#​13459)
    • f588bc6fb contrib/checkpoint: increase timeouts to 30s

Dependency Changes
  • golang.org/x/crypto v0.49.0 -> v0.53.0
  • golang.org/x/mod v0.35.0 -> v0.36.0
  • golang.org/x/net v0.52.0 -> v0.55.0
  • golang.org/x/sync v0.20.0 -> v0.21.0
  • golang.org/x/sys v0.43.0 -> v0.46.0
  • golang.org/x/term v0.41.0 -> v0.44.0
  • golang.org/x/text v0.35.0 -> v0.38.0

Previous release can be found at v2.3.1

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.3.1: containerd 2.3.1

Compare Source

Welcome to the v2.3.1 release of containerd!

The first patch release for containerd 2.3 contains various fixes and improvements.

Security Updates
Highlights
  • Fix bug where failed gRPC plugins were not tolerated when starting listeners (#​13390)
Image Storage
  • Ensure metadata and mount plugin boltdb files are closed on server shutdown (#​13379)
Runtime
  • Fix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (#​13447)
  • Fix sandbox task API endpoints for non-runc runtimes and deprecate task fields in Runc options (#​13422)
  • Apply hardening to default seccomp socket policy by blocking AF_ALG (#​13409)
Snapshotters
  • Disable overlayfs "rebase" capability when running in user namespace (#​13394)
  • Fix transfer plugin error when EROFS differ is configured but mkfs.erofs is unavailable (#​13364)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Maksym Pavlenko
  • Akihiro Suda
  • Derek McGowan
  • Paweł Gronowski
  • Brian Goff
  • Austin Vazquez
  • LEI WANG
  • Samuel Karp
Changes
24 commits

  • Prepare release notes for v2.3.1 (#​13405)
  • oci: return explicit error for out-of-range USER values (#​13447)
    • a05ae7885 oci: return explicit error for out-of-range USER values
  • Prepare release notes for api/v1.11.1 (#​13444)
    • da7aef299 Prepare release notes for api/v1.11.1
  • Fix sandbox task API endpoints for non-runc runtimes (#​13422)
    • 5282d4e09 Wire task address and version fields
    • e44f5f9ec protos: include task API address to CreateTaskRequest
  • seccomp: Block AF_ALG in default socket policy (#​13409)
    • 4d80a31bf seccomp: Block AF_ALG in default socket policy
    • 2ed0d97b6 seccomp: Document socket rule scope and socketcall limitation
  • server: tolerate failed gRPC plugins when starting listeners (#​13390)
    • 3a88fdde0 server: tolerate failed gRPC plugins when starting listeners
  • overlay: disable "rebase" capability when running in UserNS (#​13394)
    • 2be0710b8 overlay: disable "rebase" capability when running in UserNS
  • Update Go to 1.26.3 (#​13374)
  • fix: close boltdb on metadata and mount plugin close (#​13379)
    • 1d601271a fix: close boltdb on metadata and mount plugin close
  • Fix optional EROFS differ setup in transfer plugin (#​13364)
    • d666d2e42 Refactor transfer unpack configuration setup
    • ccc3bd7b9 Fix optional transfer differ setup

Dependency Changes
  • github.com/containerd/containerd/api v1.11.0 -> v1.11.1

Previous release can be found at v2.3.0

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.3.0: containerd 2.3.0

Compare Source

Welcome to the v2.3.0 release of containerd!

The third minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with
the Kubernetes release schedule, with new minor releases about every 4 months. The
containerd 2.3 release is also the first annual LTS (Long Term Stable) release under
this new schedule, with support planned for at least two years. Direct upgrades
between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

Highlights
  • Add transfer types for container filesystem copy (#​13165)
  • Add option to inject trace ID to logs (#​13117)
  • Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#​13113)
  • Update plugin config migration to run on load (#​12608)
  • Update sandbox API to include spec field (#​12840)
Container Runtime Interface (CRI)
  • Allow containers to use user namespaces with host networking (#​12518)
  • Wire UpdatePodSandboxResources to Sandbox API (#​13118)
  • Unpack images with per-layer labels for specific runtime (#​12835)
  • Populate ImageId field in container status (#​12787)
  • Set annotations parameter in CreateSandbox request (#​12566)
  • Add background stats collector to calculate UsageNanoCores for containers and pod sandboxes (#​12629)
Image Distribution
  • Support zstd-wrapped EROFS layers (#​13185)
  • Add os.features support for EROFS native container images (#​13091)
  • Add EROFS layer media type (#​12567)
Image Storage
  • Add dmverity support to the erofs snapshotter (#​12502)
  • Use fsmount API to avoid PAGE_SIZE limit for erofs (#​12783)
Node Resource Interface (NRI)
Runtime
  • Add configured socket directory to shim bootstrap protocol (#​12785)
  • Introduce shim bootstrap protocol (#​12786)
  • Fix binary logging driver not blocking container start on failure (#​12595)
  • Use new filtered cgroups stats API (#​12901)
  • Update OOMKilled event handling (#​12714)
Snapshotters
  • Propagate parent chain ID and diff ID via labels during snapshot preparation (#​13071)
ctr development tool
  • Detect vendor in CDI specs to generate device IDs for --gpus in ctr (#​12839)
Breaking
  • Accumulate owners for OCI hook adjustments, disallowing commas in plugin names (containerd/nri#264)
Deprecations

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Maksym Pavlenko
  • Derek McGowan
  • Sebastiaan van Stijn
  • Krisztian Litkey
  • Samuel Karp
  • Wei Fu
  • Akihiro Suda
  • Phil Estes
  • Mike Brown
  • Markus Lehtonen
  • Hudson Zhu
  • Davanum Srinivas
  • Chris Henzie
  • Gao Xiang
  • Chengyu Zhu
  • Akhil Mohan
  • Kazuyoshi Kato
  • Sergey Kanzhelev
  • Austin Vazquez
  • ningmingxiao
  • Aadhar Agarwal
  • Andrew Halaney
  • Apurv Barve
  • Bing Hongtao
  • Brian Goff
  • Michael Zappa
  • Paweł Gronowski
  • Fabiano Fidêncio
  • Hasan Siddiqui
  • Jintao Zhang
  • Paulo Oliveira
  • Shiv Tyagi
  • Albin Kerouanton
  • Alex Lyn
  • Avinesh Singh
  • Danny Canter
  • Esteban Ginez
  • Henry Wang
  • Jin Dong
  • Jérôme Poulin
  • Laura Lorenz
  • Luke Hinds
  • Mark Dodgson
  • Sascha Grunert
  • Tianon Gravi
  • majianhan
  • qiuxue
  • Adrien Delorme
  • Alessio Biancalana
  • Alex Chernyakhovsky
  • Andrey Noskov
  • Andrey Smirnov
  • Annie Cherkaev
  • Antti Kervinen
  • Anuj Singh
  • Benjamin Elder
  • Bo Jiang
  • Cameron McDermott
  • Chris Adeniyi-Jones
  • Chris Chang
  • Chris Henderson
  • Cindy Li
  • CrazyMax
  • Eldon Stegall
  • Evan Lezar
  • Fletcher Woodruff
  • Gaurav Ghildiyal
  • Harsh Rawat
  • Hayato Kiwata
  • Joseph Zhang
  • Justin Chadwell
  • Kaleab Ayenew
  • Manuel de Brito Fontes
  • Mikhail Dmitrichenko
  • Mujib Ahasan
  • Neeraj Krishna Gopalakrishna
  • Pierluigi Lenoci
  • Ricardo Branco
  • Rob Murray
  • Rodrigo Campos
  • Sameer
  • Sameer Saeed
  • Sanil Khurana
  • Shachar Tal
  • Shaobao Feng
  • Shiming Zhang
  • Sreeram Venkitesh
  • Tariq Ibrahim
  • Tim Windelschmidt
  • Tõnis Tiigi
  • Wade Simmons
  • Weixie Cui
  • Will Jordan
  • William Myers
  • Yohei Yamamoto
  • You Binhao
  • Youfu Zhang
  • Yuanliang Zhang
  • delthas
  • guodong
  • jinda.ljd
  • jokemanfire
  • pandaWall
Dependency Changes
  • cyphar.com/go-pathrs v0.2.1 new
  • github.com/Microsoft/go-winio v0.6.2 -> ad3df93
  • github.com/Microsoft/hcsshim v0.14.0-rc.1 -> v0.15.0-rc.1
  • github.com/cenkalti/backoff/v5 v5.0.3 new
  • github.com/checkpoint-restore/checkpointctl v1.4.0 -> v1.5.0
  • github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.3
  • github.com/containerd/containerd/api v1.10.0 -> v1.11.0
  • github.com/containerd/continuity v0.4.5 -> v0.5.0
  • github.com/containerd/go-dmverity v0.1.0 new
  • github.com/containerd/imgcrypt/v2 v2.0.1 -> v2.0.2
  • github.com/containerd/nri v0.10.0 -> v0.12.0
  • github.com/containerd/platforms v1.0.0-rc.2 -> v1.0.0-rc.4
  • github.com/containerd/plugin v1.0.0 -> v1.1.0
  • github.com/containerd/ttrpc v1.2.7 -> v1.2.8
  • github.com/containerd/zfs/v2 v2.0.0-rc.0 -> v2.0.0
  • github.com/containernetworking/plugins v1.8.0 -> v1.9.1
  • github.com/coreos/go-systemd/v22 v22.6.0 -> v22.7.0
  • github.com/cyphar/filepath-securejoin v0.6.0 new
  • github.com/davecgh/go-spew v1.1.1 -> d8f796a
  • github.com/erofs/go-erofs v0.3.0 new
  • github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.4
  • github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.28.0
  • github.com/intel/goresctrl v0.10.0 -> v0.12.0
  • github.com/klauspost/compress v1.18.1 -> v1.18.5
  • github.com/moby/spdystream v0.5.0 -> v0.5.1
  • github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0
  • github.com/opencontainers/runtime-tools 0ea5ed0 -> edf4cb3
  • github.com/opencontainers/selinux v1.12.0 -> v1.13.1
  • github.com/pelletier/go-toml/v2 v2.2.4 -> v2.3.0
  • github.com/pmezard/go-difflib v1.0.0 -> 5d4384e
  • github.com/prometheus/common v0.66.1 -> v0.67.5
  • github.com/prometheus/procfs v0.16.1 -> v0.19.2
  • github.com/sirupsen/logrus v1.9.3 -> v1.9.4
  • github.com/tetratelabs/wazero v1.9.0 -> v1.11.0
  • go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
  • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.68.0
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.68.0
  • go.opentelemetry.io/otel v1.37.0 -> v1.43.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.43.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.43.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.43.0
  • go.opentelemetry.io/otel/metric v1.37.0 -> v1.43.0
  • go.opentelemetry.io/otel/sdk v1.37.0 -> v1.43.0
  • go.opentelemetry.io/otel/trace v1.37.0 -> v1.43.0
  • go.opentelemetry.io/proto/otlp v1.5.0 -> v1.10.0
  • go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
  • golang.org/x/crypto v0.41.0 -> v0.49.0
  • golang.org/x/mod v0.29.0 -> v0.35.0
  • golang.org/x/net v0.43.0 -> v0.52.0
  • golang.org/x/oauth2 v0.30.0 -> v0.35.0
  • golang.org/x/sync v0.17.0 -> v0.20.0
  • golang.org/x/sys v0.37.0 -> v0.43.0
  • golang.org/x/term v0.34.0 -> v0.41.0
  • golang.org/x/text v0.28.0 -> v0.35.0
  • golang.org/x/time v0.14.0 -> v0.15.0
  • google.golang.org/genproto/googleapis/api a7a43d2 -> 9d38bb4
  • google.golang.org/genproto/googleapis/rpc a7a43d2 -> 6f92a3b
  • google.golang.org/grpc v1.76.0 -> v1.80.0
  • google.golang.org/protobuf v1.36.10 -> f2248ac
  • k8s.io/api v0.34.1 -> v0.36.0
  • k8s.io/apimachinery v0.34.1 -> v0.36.0
  • k8s.io/client-go v0.34.1 -> v0.36.0
  • k8s.io/component-base v0.36.0 new
  • k8s.io/cri-api v0.34.1 -> v0.36.0
  • k8s.io/cri-client v0.36.0 new
  • k8s.io/cri-streaming v0.36.0 new
  • k8s.io/klog/v2 v2.130.1 -> v2.140.0
  • k8s.io/kube-openapi 5883c5e new
  • k8s.io/streaming v0.36.0 new
  • k8s.io/utils 4c0f3b2 -> 28399d8
  • sigs.k8s.io/json cfa47c3 -> 2d32026
  • sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2
  • tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0
  • tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v2.2.0

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.2.7: containerd 2.2.7

Compare Source

Welcome to the v2.2.7 release of containerd!

The seventh patch release for containerd 2.2 contains various fixes and updates.

Highlights
Container Runtime Interface (CRI)
  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#​13937)
  • Deprecate checkpoint restore in CreateContainer (#​13872)
  • Support non-UTF-8 binary environment variable values in CRI (#​13455)
  • Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#​13795)
  • Enable OCI runtime feature introspection for non-runc runtimes in CRI (#​13779)
Runtime
  • Enable log scrubbing by default on Windows (#​13882)
  • Fix mount manager activation error when activation already exists (#​13823)
Breaking
  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#​13937)
Deprecations
  • Deprecate checkpoint restore in CreateContainer (#​13872)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Samuel Karp
  • Jordan Liggitt
  • Akihiro Suda
  • Amir Alavi
  • Chris Henzie
  • Derek McGowan
  • Maksym Pavlenko
  • Mike Brown
  • Phil Estes
Changes
21 commits

  • 43f299db6 Prepare release notes for v2.2.7
  • cri: disable restore in CreateContainer by default (#​13937)
    • 5c3a47036 cri: disable restore in CreateContainer by default
  • Use ScrubLogs by default on Windows (#​13882)
    • 4c93ae6d5 ctr: add --scrub-logs flag for Windows
    • a124c7e35 cri/config: use ScrubLogs by default on Windows
  • cri: deprecate restore in CreateContainer (#​13872)
    • c59d041d8 cri: deprecate restore in CreateContainer
  • Handle []byte envvar value for CRI (#​13455)
    • 6cdc2ddce Handle []byte envvar value
    • a60898833 update to v0.34.x kubernetes dependencies
  • Fix mount manager activation error when already exists (#​13823)
    • 54ecff6ca core/mount: Fix mount manager activation error when already exists
  • Disable checkpoint restore codepath when CRIU is not installed (#​13795)
    • fd966ba29 github/workflows: install criu in node-e2e
    • 7d41b25c9 cri: add enable_criu configuration option
    • 48116fa59 cri: validate CRIU availability and version early
  • fix(cri): introspect OCI runtime features for non-runc runtimes (#​13779)
    • 6a3d14e8a fix(cri): introspect OCI runtime features for non-runc runtimes
  • ci: bound Go fuzzing by execution count (#​13786)
    • 424b714f0 ci: bound Go fuzzing by execution count

Dependency Changes
  • go.opentelemetry.io/otel v1.38.0 -> v1.41.0
  • go.opentelemetry.io/otel/metric v1.38.0 -> v1.41.0
  • go.opentelemetry.io/otel/trace v1.38.0 -> v1.41.0
  • google.golang.org/protobuf v1.36.10 -> f2248ac
  • k8s.io/api v0.34.1 -> v0.34.10
  • k8s.io/apimachinery v0.34.1 -> v0.34.10
  • k8s.io/client-go v0.34.1 -> v0.34.10
  • k8s.io/cri-api v0.34.1 -> v0.34.10

Previous release can be found at v2.2.6

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.2.6: containerd 2.2.6

Compare Source

Welcome to the v2.2.6 release of containerd!

The sixth patch release for containerd 2.2 contains various fixes and updates.

Highlights
Container Runtime Interface (CRI)
  • Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#​13696)
  • Reject CreateContainer calls when the target sandbox is not running (#​13669)
  • Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks (

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

This change is Reviewable

@renovate

renovate Bot commented Nov 5, 2024 •
edited
Loading

Copy link
Copy Markdown
Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 40 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.20 -> 1.24.3
github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.3
github.com/prometheus/client_golang v1.16.0 -> v1.23.2
github.com/urfave/cli/v2 v2.25.7 -> v2.27.7
github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 -> v0.0.0-20240806141605-e8a1dd7889d6
github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
github.com/Microsoft/hcsshim v0.10.0 -> v0.14.0-rc.1
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
github.com/containerd/cgroups/v3 v3.0.2 -> v3.1.0
github.com/containerd/continuity v0.4.1 -> v0.4.5
github.com/go-logr/logr v1.2.4 -> v1.4.3
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/golang/protobuf v1.5.3 -> v1.5.4
github.com/google/go-cmp v0.5.9 -> v0.7.0
github.com/google/uuid v1.3.1 -> v1.6.0
github.com/klauspost/compress v1.16.7 -> v1.18.1
github.com/moby/sys/mountinfo v0.6.2 -> v0.7.2
github.com/moby/sys/sequential v0.5.0 -> v0.6.0
github.com/moby/sys/signal v0.7.0 -> v0.7.1
github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.1
github.com/opencontainers/runc v1.1.9 -> v1.2.3
github.com/opencontainers/runtime-spec v1.1.0 -> v1.2.1
github.com/opencontainers/selinux v1.11.0 -> v1.12.0
github.com/prometheus/client_model v0.4.0 -> v0.6.2
github.com/prometheus/common v0.44.0 -> v0.66.1
github.com/prometheus/procfs v0.11.1 -> v0.16.1
github.com/stretchr/testify v1.8.4 -> v1.11.1
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 -> v0.0.0-20240521201337-686a1a2994c1
go.opentelemetry.io/otel v1.16.0 -> v1.37.0
go.opentelemetry.io/otel/metric v1.16.0 -> v1.37.0
golang.org/x/mod v0.12.0 -> v0.29.0
golang.org/x/net v0.14.0 -> v0.44.0
golang.org/x/sync v0.3.0 -> v0.17.0
golang.org/x/sys v0.11.0 -> v0.37.0
golang.org/x/text v0.12.0 -> v0.29.0
golang.org/x/time v0.3.0 -> v0.14.0
golang.org/x/tools v0.12.0 -> v0.37.0
google.golang.org/genproto v0.0.0-20230821184602-ccc8af3d0e93 -> v0.0.0-20231211222908-989df2bf70f3
google.golang.org/genproto/googleapis/rpc v0.0.0-20230821184602-ccc8af3d0e93 -> v0.0.0-20250804133106-a7a43d27e69b
google.golang.org/grpc v1.57.0 -> v1.76.0
google.golang.org/protobuf v1.31.0 -> v1.36.10

@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from b47cf29 to c429bab Compare November 17, 2024 17:12
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from c429bab to 140c46d Compare December 14, 2024 01:14
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 140c46d to 63d8ea6 Compare January 14, 2025 09:24
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 63d8ea6 to c2094e4 Compare February 28, 2025 23:29
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch 2 times, most recently from 3eb682a to 4719327 Compare March 17, 2025 20:23
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 4719327 to 88d4fca Compare April 8, 2025 12:57
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 88d4fca to 6762aee Compare April 17, 2025 21:50
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch 2 times, most recently from 69d3d3f to a69f47b Compare May 7, 2025 23:15
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from a69f47b to e8dc279 Compare May 20, 2025 20:40
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from e8dc279 to 6ce1f65 Compare June 12, 2025 16:13
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 6ce1f65 to 2a7facd Compare June 20, 2025 02:29
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 2a7facd to d7d1282 Compare July 30, 2025 19:58
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from d7d1282 to 323a1f6 Compare August 10, 2025 14:08
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 323a1f6 to 4edbd0e Compare October 9, 2025 10:11
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 4edbd0e to 4d3c060 Compare November 6, 2025 03:58
@renovate

renovate Bot commented Dec 15, 2025 •
edited
Loading

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 42 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.20 -> 1.26.3
github.com/containerd/typeurl/v2 v2.1.1 -> v2.2.3
github.com/prometheus/client_golang v1.16.0 -> v1.23.2
github.com/urfave/cli/v2 v2.25.7 -> v2.27.7
github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 -> v0.0.0-20240806141605-e8a1dd7889d6
github.com/Microsoft/go-winio v0.6.1 -> v0.6.3-0.20251027160822-ad3df93bed29
github.com/Microsoft/hcsshim v0.10.0 -> v0.15.0-rc.1
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
github.com/containerd/cgroups/v3 v3.0.2 -> v3.1.3
github.com/containerd/continuity v0.4.1 -> v0.5.0
github.com/containerd/ttrpc v1.2.2 -> v1.2.8
github.com/go-logr/logr v1.2.4 -> v1.4.3
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/golang/protobuf v1.5.3 -> v1.5.4
github.com/google/go-cmp v0.5.9 -> v0.7.0
github.com/google/uuid v1.3.1 -> v1.6.0
github.com/klauspost/compress v1.16.7 -> v1.18.5
github.com/moby/sys/mountinfo v0.6.2 -> v0.7.2
github.com/moby/sys/sequential v0.5.0 -> v0.6.0
github.com/moby/sys/signal v0.7.0 -> v0.7.1
github.com/opencontainers/image-spec v1.1.0-rc4 -> v1.1.1
github.com/opencontainers/runc v1.1.9 -> v1.3.3
github.com/opencontainers/runtime-spec v1.1.0 -> v1.3.0
github.com/opencontainers/selinux v1.11.0 -> v1.13.1
github.com/prometheus/client_model v0.4.0 -> v0.6.2
github.com/prometheus/common v0.44.0 -> v0.67.5
github.com/prometheus/procfs v0.11.1 -> v0.19.2
github.com/sirupsen/logrus v1.9.3 -> v1.9.4
github.com/stretchr/testify v1.8.4 -> v1.11.1
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 -> v0.0.0-20240521201337-686a1a2994c1
go.opentelemetry.io/otel v1.16.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.16.0 -> v1.43.0
golang.org/x/mod v0.12.0 -> v0.36.0
golang.org/x/net v0.14.0 -> v0.55.0
golang.org/x/sync v0.3.0 -> v0.21.0
golang.org/x/sys v0.11.0 -> v0.46.0
golang.org/x/text v0.12.0 -> v0.38.0
golang.org/x/time v0.3.0 -> v0.15.0
golang.org/x/tools v0.12.0 -> v0.45.0
google.golang.org/genproto v0.0.0-20230821184602-ccc8af3d0e93 -> v0.0.0-20231211222908-989df2bf70f3
google.golang.org/genproto/googleapis/rpc v0.0.0-20230821184602-ccc8af3d0e93 -> v0.0.0-20260406210006-6f92a3bedf2d
google.golang.org/grpc v1.57.0 -> v1.80.0
google.golang.org/protobuf v1.31.0 -> v1.36.12-0.20260120151049-f2248ac996af

@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 4d3c060 to a283d12 Compare December 18, 2025 18:45
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from a283d12 to 9ca8be7 Compare March 10, 2026 21:04
@renovate renovate Bot changed the title fix(deps): update module github.com/containerd/containerd to v2 Update module github.com/containerd/containerd to v2 Apr 8, 2026
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 9ca8be7 to 4d4ba22 Compare April 14, 2026 21:16
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 4d4ba22 to 19c2e5c Compare April 30, 2026 20:02
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 19c2e5c to 0aec4e2 Compare May 20, 2026 21:58
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 0aec4e2 to 3a46f61 Compare June 18, 2026 23:46
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 3a46f61 to a244211 Compare July 10, 2026 02:35
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch 3 times, most recently from 945755a to eb63c10 Compare August 15, 2026 05:07
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from eb63c10 to 9e7afb0 Compare August 17, 2026 02:11
@renovate
renovate Bot force-pushed the renovate/github.com-containerd-containerd-2.x branch from 9e7afb0 to 824153c Compare August 17, 2026 07:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants