Commit 2e9d22f
authored
![elastic-renovate-prod[bot]](https://avatars.githubusercontent.com/in/937301?v=4&size=40){kind=avatar}
chore(deps): update containerd (8.19) (#8372)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/containerd/containerd/v2](https://redirect.github.com/containerd/containerd)
| `v2.3.4` → `v2.3.5` |
|
|
|
[github.com/containerd/log](https://redirect.github.com/containerd/log)
| `v0.1.0` → `v0.2.0` |
|
|
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>containerd/containerd
(github.com/containerd/containerd/v2)</summary>
###
[`v2.3.5`](https://redirect.github.com/containerd/containerd/releases/tag/v2.3.5):
containerd 2.3.5
Welcome to the v2.3.5 release of containerd!
The fifth patch release for containerd 2.3 contains various fixes
and updates including security patches.
##### Security Updates
- **containerd**
-
[**CVE-2026-53495**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-7jxh-36q5-gcqv)
-
[**GHSA-rp3h-jf77-q9p4**](https://redirect.github.com/containerd/containerd/security/advisories/GHSA-rp3h-jf77-q9p4)
##### Highlights
##### Image Distribution
- Apply hardening to strip sensitive authentication headers when
fetching descriptor URLs
([#​14030](https://redirect.github.com/containerd/containerd/pull/14030))
##### Runtime
- Avoid hangs and data races when streaming container standard I/O in
CRI
([#​14094](https://redirect.github.com/containerd/containerd/pull/14094))
- Fix missing error messages in OpenTelemetry trace attributes
([#​14049](https://redirect.github.com/containerd/containerd/pull/14049))
- Fix user and group lookup failures in container rootfs containing
symlinked /etc/passwd or /etc/group
([#​13999](https://redirect.github.com/containerd/containerd/pull/13999))
- Fix configuration loading error when drop-in configuration files have
a higher version than the root configuration
([#​13995](https://redirect.github.com/containerd/containerd/pull/13995))
- Avoid containerd startup hangs when loading shims
([#​13983](https://redirect.github.com/containerd/containerd/pull/13983))
- Add context to error when shim delete times out
([#​13921](https://redirect.github.com/containerd/containerd/pull/13921))
- Fix Windows Server 2022 container compatibility on host builds newer
than the latest LTSC
([containerd/platforms#34](https://redirect.github.com/containerd/platforms/pull/34))
##### Snapshotters
- Fix unpack failure for EROFS images containing the erofs OS feature
([#​14062](https://redirect.github.com/containerd/containerd/pull/14062))
Please try out the release binaries and report any issues at
<https://github.com/containerd/containerd/issues>.
##### Contributors
- Phil Estes
- Samuel Karp
- Derek McGowan
- Sebastiaan van Stijn
- Akhil Mohan
- Maksym Pavlenko
- Wei Fu
- Oleh Konko
- Austin Vazquez
- Jing Chen
- Martín Fernández
- Paco Xu
- XlabAI
- Yuanliang Zhang
##### Changes
<details><summary>33 commits</summary>
<p>
-
[`934efa5e0`](https://redirect.github.com/containerd/containerd/commit/934efa5e09193139c810bcab1fb5ca547dbb6b90)
Prepare release notes for v2.3.5
-
[`be419b070`](https://redirect.github.com/containerd/containerd/commit/be419b070c178548c8e384d8bc3c8fe0ad6f154a)
Merge commit from fork
-
[`9ec55f024`](https://redirect.github.com/containerd/containerd/commit/9ec55f024041d0641f6d79841e45c8781141ddaa)
cri: cancel ExecSync IO drain on context cancellation
-
[`84ea25bc1`](https://redirect.github.com/containerd/containerd/commit/84ea25bc1d7e9f71390ce9d647dbdec4408c05bc)
Merge commit from fork
-
[`c53577965`](https://redirect.github.com/containerd/containerd/commit/c535779652bc8d541328a36ba598088c09819b97)
archive: skip redundant opaque whiteout walks
- Fix data races and a deadlock in the byte stream helpers
([#​14094](https://redirect.github.com/containerd/containerd/pull/14094))
-
[`9f6be869c`](https://redirect.github.com/containerd/containerd/commit/9f6be869c8a6144dc66befde081d6e262b7c4c7d)
Fix data races and a deadlock in the byte stream helpers
- plugins: remove some stray logrus imports
([#​14063](https://redirect.github.com/containerd/containerd/pull/14063))
-
[`6c59399bf`](https://redirect.github.com/containerd/containerd/commit/6c59399bf07df45110770dbe28710e2e65c3e8c6)
plugins: remove some stray logrus imports
- snapshots/erofs: advertise the erofs OS feature from the snapshotter
plugin
([#​14062](https://redirect.github.com/containerd/containerd/pull/14062))
-
[`f65732115`](https://redirect.github.com/containerd/containerd/commit/f65732115d1319a62fd35dc694d5fbe3045594f7)
snapshots/erofs: test the advertised erofs feature platform
-
[`5ffc2bbda`](https://redirect.github.com/containerd/containerd/commit/5ffc2bbda2a878f87b56ffa2496157f3b814fbc1)
erofs: advertise the erofs OS feature platform from the snapshotter
- update runc to v1.5.1
([#​14059](https://redirect.github.com/containerd/containerd/pull/14059))
-
[`af445ea0a`](https://redirect.github.com/containerd/containerd/commit/af445ea0afd99c4925e5aa2c01a3210146675e2d)
update runc to v1.5.1
-
[`c077e43bd`](https://redirect.github.com/containerd/containerd/commit/c077e43bd7f2fe75284e10974cec0ff82d38024a)
update runc to v1.5.0
- vendor: github.com/containerd/platforms v1.0.0-rc.5
([#​14048](https://redirect.github.com/containerd/containerd/pull/14048))
-
[`676a64cad`](https://redirect.github.com/containerd/containerd/commit/676a64cad58b76448d3978bc5c7c663c97f99656)
vendor: github.com/containerd/platforms v1.0.0-rc.5
- pkg/tracing: handle error and typed-nil Stringer attributes
([#​14049](https://redirect.github.com/containerd/containerd/pull/14049))
-
[`c7ffd8b00`](https://redirect.github.com/containerd/containerd/commit/c7ffd8b006b52ee329757d71430193e91b16b09d)
pkg/tracing: handle error and typed-nil Stringer attributes
- docker fetcher: strip sensitive headers on descriptor URLs
([#​14030](https://redirect.github.com/containerd/containerd/pull/14030))
-
[`58fb846d5`](https://redirect.github.com/containerd/containerd/commit/58fb846d53f212330dc6be8f0b13fdf550a741dd)
core/remotes/docker: normalize descriptor URL origins
-
[`c7625a1ff`](https://redirect.github.com/containerd/containerd/commit/c7625a1ff2826ee58fe5d8924f5612213aefa109)
core/remotes/docker: strip sensitive headers on desc.urls fetch
- update runhcs to v0.15.0-rc.4
([#​13990](https://redirect.github.com/containerd/containerd/pull/13990))
-
[`6fbb92c33`](https://redirect.github.com/containerd/containerd/commit/6fbb92c33c58952735577e8943adc39a8528b888)
update runhcs to v0.15.0-rc.4
- pkg/oci: resolve rootfs symlinks for user lookup
([#​13999](https://redirect.github.com/containerd/containerd/pull/13999))
-
[`53bf030ea`](https://redirect.github.com/containerd/containerd/commit/53bf030ea230c8c6c7b2a74f49b4860950b1af93)
pkg/oci: resolve rootfs symlinks for user lookup
- Revert "add check on version of drop in configs"
([#​13995](https://redirect.github.com/containerd/containerd/pull/13995))
-
[`7790c4c21`](https://redirect.github.com/containerd/containerd/commit/7790c4c2108ff6667e6a222cb3c9a7a02bc459ec)
ensure that the final config version is the higest in the config list
-
[`1125b053f`](https://redirect.github.com/containerd/containerd/commit/1125b053f59ed3d4cacc07d1b6cb9e4da17d7fc7)
Revert "add check on version of drop in configs"
- fix(runtime): apply load timeout to load shim
([#​13983](https://redirect.github.com/containerd/containerd/pull/13983))
-
[`460c47b28`](https://redirect.github.com/containerd/containerd/commit/460c47b28dbc0f7ef463c94129489532fd708290)
fix(runtime): bound shim loading with the load timeout
- Add more context to the shim delete error
([#​13921](https://redirect.github.com/containerd/containerd/pull/13921))
-
[`7f97bc122`](https://redirect.github.com/containerd/containerd/commit/7f97bc1220b50dab542a88b39b09e7ac78ffda42)
Add more context to the shim delete error
</p>
</details>
##### Changes from containerd/platforms
<details><summary>2 commits</summary>
<p>
- Fix WS2022 compat on hosts past the latest LTSC
([containerd/platforms#34](https://redirect.github.com/containerd/platforms/pull/34))
-
[`bacc690`](https://redirect.github.com/containerd/platforms/commit/bacc69061152115965f5b17fa59dc4e051ba8dc3)
Fix WS2022 compat on hosts past the latest LTSC
</p>
</details>
##### Dependency Changes
- **github.com/containerd/platforms** v1.0.0-rc.4 -> v1.0.0-rc.5
Previous release can be found at
[v2.3.4](https://redirect.github.com/containerd/containerd/releases/tag/v2.3.4)
##### Which file should I download?
- `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically
linked with glibc 2.35 (Ubuntu 22.04).
- `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked.
Expected to be used on Linux distributions that do not use glibc >=
2.35. Not position-independent.
In addition to containerd, typically you will have to install
[runc](https://redirect.github.com/opencontainers/runc/releases)
and [CNI
plugins](https://redirect.github.com/containernetworking/plugins/releases)
from their official sites too.
See also the [Getting
Started](https://redirect.github.com/containerd/containerd/blob/main/docs/getting-started.md)
documentation.
</details>
<details>
<summary>containerd/log (github.com/containerd/log)</summary>
###
[`v0.2.0`](https://redirect.github.com/containerd/log/releases/tag/v0.2.0)
[Compare
Source](https://redirect.github.com/containerd/log/compare/v0.1.0...v0.2.0)
#### What's Changed
- Update GitHub Actions packages and runners by
[@​austinvazquez](https://redirect.github.com/austinvazquez) in
[#​3](https://redirect.github.com/containerd/log/pull/3)
- Update project-checks to v1.2.2 to unblock CI by
[@​austinvazquez](https://redirect.github.com/austinvazquez) in
[#​6](https://redirect.github.com/containerd/log/pull/6)
- build(deps): bump actions/setup-go from 5 to 6 in /.github/workflows
by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​9](https://redirect.github.com/containerd/log/pull/9)
- ci: update golangci-lint to v2.1.6 by
[@​austinvazquez](https://redirect.github.com/austinvazquez) in
[#​5](https://redirect.github.com/containerd/log/pull/5)
- ci: update github actions runner images to latest by
[@​austinvazquez](https://redirect.github.com/austinvazquez) in
[#​4](https://redirect.github.com/containerd/log/pull/4)
- build(deps): bump actions/checkout from 4 to 6 in /.github/workflows
by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​11](https://redirect.github.com/containerd/log/pull/11)
- build(deps): bump golangci/golangci-lint-action from 8 to 9 in
/.github/workflows by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​10](https://redirect.github.com/containerd/log/pull/10)
- chore(deps): bump github.com/sirupsen/logrus v1.9.4 by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​15](https://redirect.github.com/containerd/log/pull/15)
- Add support for using slog for log output by
[@​dmcgowan](https://redirect.github.com/dmcgowan) in
[#​12](https://redirect.github.com/containerd/log/pull/12)
- build(deps): bump actions/setup-go from 6 to 7 in /.github/workflows
by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​19](https://redirect.github.com/containerd/log/pull/19)
- ci: test against module, oldstable, and stable Go versions, update
golangci-lint go v2.12, update minimum go to v1.21 by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​20](https://redirect.github.com/containerd/log/pull/20)
- chore(deps): bump github.com/sirupsen/logrus v1.10.0 by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​16](https://redirect.github.com/containerd/log/pull/16)
- vendor: github.com/sirupsen/logrus v1.10.1 by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​23](https://redirect.github.com/containerd/log/pull/23)
- ci: update actions and golangci-lint for go1.27, pin actions by sha by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​26](https://redirect.github.com/containerd/log/pull/26)
- log: allow SetLevel to accept Level values by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​22](https://redirect.github.com/containerd/log/pull/22)
- chore(deps): github.com/sirupsen/logrus v1.10.2 by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​27](https://redirect.github.com/containerd/log/pull/27)
- slog: rewrite level synchronization with Logrus by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​21](https://redirect.github.com/containerd/log/pull/21)
- migrate containerd/pkg/tracing by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​24](https://redirect.github.com/containerd/log/pull/24)
- otel: avoid span lookup for entries without context by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​28](https://redirect.github.com/containerd/log/pull/28)
- otel: add options to configure log level and span error status
(WithLevel, WithErrorStatusLevel) by
[@​thaJeztah](https://redirect.github.com/thaJeztah) in
[#​25](https://redirect.github.com/containerd/log/pull/25)
#### New Contributors
- [@​austinvazquez](https://redirect.github.com/austinvazquez)
made their first contribution in
[#​3](https://redirect.github.com/containerd/log/pull/3)
- [@​dependabot](https://redirect.github.com/dependabot)\[bot]
made their first contribution in
[#​9](https://redirect.github.com/containerd/log/pull/9)
- [@​thaJeztah](https://redirect.github.com/thaJeztah) made their
first contribution in
[#​15](https://redirect.github.com/containerd/log/pull/15)
**Full Changelog**:
<containerd/log@v0.1.0...v0.2.0>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday
through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no
schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTkuMCIsInRhcmdldEJyYW5jaCI6IjguMTkiLCJsYWJlbHMiOlsiVGVhbTpTZWN1cml0eS1DbG91ZCBTZXJ2aWNlcyIsImJhY2twb3J0LXNraXAiLCJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSIsInJlbm92YXRlLWF1dG8tYXBwcm92ZSJdfQ==-->
Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>1 parent 1425289 commit 2e9d22f
2 files changed
Lines changed: 6 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
139 | 139 | | |
140 | 140 | | |
141 | 141 | | |
142 | | - | |
| 142 | + | |
143 | 143 | | |
144 | 144 | | |
145 | | - | |
| 145 | + | |
146 | 146 | | |
147 | 147 | | |
148 | 148 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
332 | 332 | | |
333 | 333 | | |
334 | 334 | | |
335 | | - | |
336 | | - | |
| 335 | + | |
| 336 | + | |
337 | 337 | | |
338 | 338 | | |
339 | 339 | | |
| |||
342 | 342 | | |
343 | 343 | | |
344 | 344 | | |
345 | | - | |
346 | | - | |
| 345 | + | |
| 346 | + | |
347 | 347 | | |
348 | 348 | | |
349 | 349 | | |
| |||
0 commit comments