Skip to content

fix(deps): update module github.com/containerd/containerd to v1.7.2#1148

Merged
mtardy merged 1 commit into
mainfrom
renovate/github.com-containerd-containerd-1.7.x
Jun 27, 2023
Merged

fix(deps): update module github.com/containerd/containerd to v1.7.2#1148
mtardy merged 1 commit into
mainfrom
renovate/github.com-containerd-containerd-1.7.x

Conversation

@cilium-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/containerd/containerd require patch v1.7.0 -> v1.7.2

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

containerd/containerd (github.com/containerd/containerd)

v1.7.2: containerd 1.7.2

Compare Source

Welcome to the v1.7.2 release of containerd!

The second patch release for containerd 1.7 includes enhancements to CRI sandbox mode,
Windows snapshot mounting support, and CRI and container IO bug fixes.

CRI/Sandbox Updates
  • Publish sandbox events (#​8613)
  • Make stats respect sandbox's platform (#​8604)
Other Notable Updates
  • Mount snapshots on Windows (#​8616)
  • Notify readiness when registered plugins are ready (#​8584)
  • Fix cio.Cancel() should close pipes (#​8624)
  • CDI: Use CRI Config.CDIDevices field for CDI injection (#​8519)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Gabriel Adrian Samfira
  • Derek McGowan
  • Paul "TBBle" Hampson
  • Maksym Pavlenko
  • Phil Estes
  • Austin Vazquez
  • Akihiro Suda
  • Kazuyoshi Kato
  • Danny Canter
  • Samuel Karp
  • Sebastiaan van Stijn
  • Ed Bartosh
  • Henry Wang
  • Hsing-Yu (David) Chen
  • Jan Dubois
  • Mike Brown
  • Wei Fu
  • helen
Changes
59 commits

  • [release/1.7] Prepare release notes for v1.7.2 (#​8629)
    • 0e41daaea [release/1.7] Prepare release notes for v1.7.2
  • [1.7 backport] Fix panic when remote differ returns empty result (#​8631)
    • e134b6393 Fix panic when remote differ returns empty result
  • [release/1.7 backport] Mount snapshots on Windows (#​8616)
    • 313c226b8 Update continuity to a tagged version
    • 8dd16285a UnmountAll is a no-op for missing mount points
    • acff3eefa Improve error messages and remove check
    • b4dd3bf4e Make ReadOnly() available on all platforms
    • 08d8baf3f Increase integration test tmieout to 20m
    • 1f0dbd011 Remove bind code path in mount()
    • 8f37b1c63 Remove "bind" code path from diff
    • 9139208b3 Properly mount base layers
    • e61e7b312 Skip parent layer options on bind mounts
    • e4307926f Add ReadOnly() function
    • 0277b9b01 Remove escalated privileges
    • d5c18dfb7 Use DefaultSnapshotter
    • 853179366 use t.Fatal if we cannot enable process privileges
    • 5b3ee413f Update continuity
    • 375172604 Fix go.mod, simplify boolean logic, add logging
    • 600abd137 Ignore ERROR_NOT_FOUND error when removing mount
    • df7295dcd Update continuity, go-winio and hcsshim
    • 0db78c482 Remove unused function
    • 219058766 Grant needed privileges for snapshotter tests
    • 96fbe5bc8 Fix layer comparison and enable read-only checks
    • 279e0d3c9 Use bind filer for mounts
    • 93e94da40 Enable TestSnapshotterClient on Windows
    • 3a3da693a Run Windows snapshotter through the test suite
    • e7b62322f Fix misspelling of 'Native' as 'Naive'
    • e1f999a18 Add paired 'mount' log for 'unmount'
    • 5788d6e52 Don't use all-upper-case filenames in snapshot tests
    • 3cdcb2f10 Skip tests that do not apply to WCOW on Windows
    • b0968b8bb Ensure mounts are unmounted before leaving the test
    • b57424851 Unify testutil.Unmount on Windows and Unix
    • b9a8aad45 Implement Windows mounting for bind and windows-layer mounts
    • 1a64ee183 Implement WCOW parentless active snapshots and view snapshots
  • [release/1.7] fix: cio.Cancel() should close the pipes (#​8624)
    • 99582fb1a fix: cio.Cancel() should close the pipes
  • [release/1.7 backport] remotes/docker: ResolverOptions: fix deprecation comments (#​8621)
    • eeda70fb0 remotes/docker: ResolverOptions: fix deprecation comments
  • [release/1.7] Publish sandbox events (#​8613)
  • [release/1.7] notify readiness when registered plugins are ready (#​8584)
    • 2c38cad77 notify readiness when registered plugins are ready
  • [release/1.7] Backport CRI sandbox server stats changes (#​8604)
    • 7851b0a9f CRI: Make stats respect sandbox's platform
    • 8d7c340ca [sbserver] handle missing cpu stats
    • d08b2a088 [sbserver] Refactor usageNanoCores be to used for all OSes
  • [release/1.7] Cherry-pick: Update volume-ownership image with latest hashes (#​8574)
    • 08de6e7b8 Update volume-ownership image with latest hashes
  • [release/1.7] CDI: Use CRI Config.CDIDevices field for CDI injection (#​8519)
    • 6a5e54c15 Get CDI devices from CRI Config.CDIDevices field
  • [release/1.7 backport] snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility (#​8510)
    • 9e60300ea snapshots/testsuite: Rename: fix fuse-overlayfs incompatibility

Changes from containerd/continuity
31 commits

  • Fall back to Copyfile when Clonefile detects a cross-device request (#​225)
    • 7df79f5 Fall back to Copyfile when Clonefile detects a cross-device request
  • Support darwin clonefile (#​223)
  • Update golang.org/x/sys to v0.1.0 (#​222)
    • 2db84b9 Update golang.org/x/sys to v0.1.0
  • Enable tests for all platforms (#​220)
  • Add more Windows metadata files (#​219)
    • cdfbe61 Add more Windows metadata files
  • atomicWriteFile: file defer close (#​213)
    • 9eb2a49 atomicWriteFile: file defer close
  • Update GitHub Actions runner images (#​216)
    • ad9c903 Update GitHub Actions runner images
  • Add CodeQL security scan workflow (#​215)
    • c8de034 Add CodeQL security scan workflow
  • Add Go 1.20 support to CI (#​214)
    • be62cc1 Add Go 1.20 support to CI
  • Add paths to windows metadataFiles (#​212)
    • 68f7b34 Add paths to windows metadataFiles
  • Remove references to io/ioutil package (#​211)
    • e22f001 Remove references to io/ioutil package
  • Update GitHub actions CI workflow (#​210)
    • 1c3fa33 Update GitHub actions CI workflow
  • format code with gofumpt (#​209)
  • Correctly ignore error wrapping ErrNotSupported (#​207)
    • 1ee38b5 Correctly ignore error wrapping ErrNotSupported

Dependency Changes
  • github.com/containerd/continuity v0.3.0 -> v0.4.1

Previous release can be found at v1.7.1

v1.7.1: containerd 1.7.1

Compare Source

Welcome to the v1.7.1 release of containerd!

The first patch release for containerd 1.7 includes many fixes to CRI
sandbox mode, various other fixes, runc update, and important fixes in
core dependencies such as ttrpc and typeurl.

CRI/Sandbox Updates
  • Throw not supported error when UID or GID mappings provided (#​8211)
  • Cleanup shim on start failure (#​8282)
  • Fix premature close of CRI service when there are no CNI configuration monitors (#​8282)
  • Avoid UID lookup from mount on Darwin (#​8314)
  • Keep Linux mounts for Linux sandboxes on non-Linux hosts (#​8331)
  • Add noexec,nodev,nosuid to /etc/resolv.conf bind mount (#​8336)
  • Remove entry for container from container store on error (#​8457)
  • Fix unmarshal in container metrics (#​8472)
Other Notable Updates
  • Use readonly for temporary mounts (#​8300 #​8358)
  • Fix skip docker manifest option on image exporter (#​8344)
  • Update runc binary to v1.1.7 (#​8451)
  • Fix runtime path task option (#​8453)
  • Fix panic from nil checkpoint options (#​8475)
  • Fix transfer service configuration options (#​8491)
  • Fix server-side goroutine leak on receive message error (ttrpc#​141)
  • Fix panic caused by race to close send channel (ttrpc#​140)
  • Fix unmarshal to return non-nil object when nil value (ttrpc#​140)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Derek McGowan
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Iceber Gu
  • Phil Estes
  • Maksym Pavlenko
  • Wei Fu
  • Danny Canter
  • Kirtana Ashok
  • Rodrigo Campos
  • Samuel Karp
  • Vinayak Goyal
  • Austin Vazquez
  • Justin Chadwell
  • Kazuyoshi Kato
  • Brad Davidson
  • Djordje Lukic
  • Ethan Lowman
  • Laura Brehm
  • Michael Crosby
Changes
68 commits

  • [release/1.7] Prepare release notes for v1.7.1 (#​8501)
  • [release/1.7] Update ttrpc v1.2.2 (#​8499)
  • [release/1.7] runtime/shim: fix the nil checkpoint options (#​8475)
    • 3ef5b689a runtime/shim: fix the nil checkpoint options
  • [release/1.7] bump typeurl to v2.1.1 (#​8495)
  • [release/1.7] Transfer service backports (#​8491)
    • 35e86f96c [transfer] avoid setting limiters when max is 0
    • f7233811f Update transfer configuration
    • 4510eac00 Fix image pulling with Transfer service
  • [release/1.7]Update hcsshim tag to v0.10.0-rc.8 (#​8480)
    • aaa65e8c1 Update hcsshim tag to v0.10.0-rc.8
  • [release/1.7] cri: Fix umarshal metrics (#​8472)
    • 95ef67e19 Fix umarshal metrics for CRI server
  • [release/1.7 backport] update go to go1.20.4, go1.19.9 (#​8471)
  • [release/1.7] fix the task setting the runtime path (#​8453)
    • c0e128624 skip TestContainerStartWithAbsRuntimePath if the runtime is v1
    • aa3c63c15 integration: add container start test using abs runtime path
    • d2d9eedb1 WithRuntimePath uses the TaskInfo.RuntimePath field
  • [release/1.7] Remove entry for container from container store on error (#​8457)
    • 6b3ae0129 Remove entry for container from container store on error
  • [release/1.7 backport] update runc binary to v1.1.7 (#​8451)
  • [release/1.7] cri: Vendor v0.27.1 (#​8444)
  • [release/1.7 backport] oci: partially restore comment on read-only mounts for uid/gid uses (#​8404)
    • 1bbf98e53 oci: partially restore comment on read-only mounts for uid/gid uses
  • [release/1.7] Fix argsEscaped tests (#​8405)
  • [release/1.7] Throw an error if the kubelet requests mounts with uid/gid mappings (#​8211)
    • 7de8629be cri: Throw an error if idmap mounts is requested
    • 75ac7e0d8 cri: Vendor v0.27.0-beta.0 for mounts uid/gid mappings
  • [release/1.7] go.mod: remove redundant replace, and some cleaning-up (#​8396)
    • 8f6e86fec go.mod: add comment explaining go-fuzz-headers replace rule
    • 1ece0cb50 go.mod: remove replace for github.com/opencontainers/runtime-tools
    • e9f962187 go.mod: integration: use non-pre-release of containerd
    • 84393b005 go.mod: integration: move indirect dependencies to the right group
  • [release/1.7 backport] update runc binary to v1.1.6 (#​8386)
  • [release/1.7 backport] oci: Use WithReadonlyTempMount when adding users/groups (#​8358)
    • 54d12b872 oci: Use WithReadonlyTempMount when adding users/groups
  • [release/1.7 backport] update go to go1.20.3, go1.19.8 (#​8354)
  • [release/1.7] archive: consistently respect value of WithSkipDockerManifest (#​8344)
    • 1d6641b7c export: add test for WithSkipDockerManifest
    • 0e0d84f6b archive: consistently respect value of WithSkipDockerManifest
  • [release/1.7] Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind. (#​8336)
    • 9b4935d86 Update sbserver to add noexec nodev and nosuid to /etc/resolv.conf mount bind.
    • 5e953cfa6 Test to ensure nosuid,nodev,noexec are set on /etc/reolv.conf mount.
    • 0aad93f08 Add noexec nodev and nosuid to sandbox /etc/resolv.conf mount bind.
  • [release/1.7] ctr/tasks: fix unmarshal the task metrics for cgroups v1 (#​8335)
    • 1a64f1b43 ctr/tasks: fix unmarshal the task metrics for cgroups v1
  • [release/1.7] Keep linux mounts for linux sandboxes on Windows/Darwin (#​8331)
    • 17c52a26d Keep linux mounts for linux sandboxes on Windows/Darwin
  • [release/1.7] update runc binary to v1.1.5 (#​8325)
    • d81fc15af update runc binary to v1.1.5
    • 755efbe64 go.mod: github.com/opencontainers/runc v1.1.5
  • [backport 1.7] Defer uid lookups on Darwin (#​8314)
  • [release/1.7 backport] Add WithReadonlyTempMount to create readonly temporary mounts (#​8300)
    • b7d87b190 Add WithReadonlyTempMount to create readonly temporary mounts
  • [release/1.7] Backport Sandbox/CRI fixes (#​8282)
    • 1c1b6bcb2 CRI: Don't always close netConfMonitor channel
    • cf2e454bf Sandbox: Correct/add some fields to Status()
    • ce68e8e0d Sandbox: Cleanup shim on Start failure

Changes from containerd/ttrpc
8 commits

  • First process the pending messages in recv channel (#​144)
    • c51165f First process the pending messages in recv channel
  • Add recvClose channel to stream (#​140)
    • 471297e Add recvClose channel to stream
  • Unwrap IO errors in server connection error handling (#​141)
    • 9599fad Unwrap io errors in server connection receive error handling
  • Update GitHub actions CI workflow (#​124)
    • c7b5a32 Update GitHub actions CI workflow

Dependency Changes
  • github.com/Microsoft/go-winio v0.6.0 -> v0.6.1
  • github.com/Microsoft/hcsshim v0.10.0-rc.7 -> v0.10.0-rc.8
  • github.com/containerd/ttrpc v1.2.1 -> v1.2.2
  • github.com/containerd/typeurl/v2 v2.1.0 -> v2.1.1
  • github.com/golang/protobuf v1.5.2 -> v1.5.3
  • github.com/opencontainers/runc v1.1.4 -> v1.1.5
  • github.com/opencontainers/runtime-tools 946c877 -> 2e043c6
  • golang.org/x/mod v0.7.0 -> v0.9.0
  • golang.org/x/net v0.7.0 -> v0.8.0
  • golang.org/x/sys v0.6.0 -> v0.7.0
  • golang.org/x/term v0.5.0 -> v0.6.0
  • golang.org/x/text v0.7.0 -> v0.8.0
  • golang.org/x/tools v0.5.0 -> v0.7.0
  • google.golang.org/protobuf v1.28.1 -> v1.29.1
  • k8s.io/cri-api v0.26.2 -> v0.27.1

Previous release can be found at v1.7.0


Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>
@cilium-renovate
cilium-renovate Bot requested a review from a team as a code owner June 27, 2023 15:58
@cilium-renovate
cilium-renovate Bot requested a review from tixxdz June 27, 2023 15:58
@cilium-renovate cilium-renovate Bot added kind/enhancement This improves or streamlines existing functionality release-blocker This PR or issue is blocking the next release. labels Jun 27, 2023
@mtardy
mtardy merged commit a55cdb1 into main Jun 27, 2023
@mtardy
mtardy deleted the renovate/github.com-containerd-containerd-1.7.x branch June 27, 2023 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/enhancement This improves or streamlines existing functionality release-blocker This PR or issue is blocking the next release.

1 participant