dilim/containerd
1
0
Fork 0
mirror of https://github.com/containerd/containerd.git synced 2026-08-13 17:07:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
16,091 Commits 29 Branches 315 Tags
94de254cbc3e8e9a8c690049c8494f52710a8d02
Commit Graph

798 Commits

Author SHA1 Message Date
Mike Brown
e54c86409c Merge pull request #11845 from containerd/dependabot/github_actions/lycheeverse/lychee-action-2.4.1 
build(deps): bump lycheeverse/lychee-action from 2.4.0 to 2.4.1
 2025-06-09 02:13:06 +00:00
Kirtana Ashok
2f1948a503 Enable CIs to run on WS2022 and WS2025 
Signed-off-by: Kirtana Ashok <kiashok@microsoft.com>
 2025-06-05 15:25:03 -07:00
dependabot[bot]
4dd2cd92c1 build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...05b42c6244)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-02 23:43:45 +00:00
dependabot[bot]
4a2c402230 build(deps): bump lycheeverse/lychee-action from 2.4.0 to 2.4.1 
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](1d97d84f0b...82202e5e9c)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-24 08:34:12 +00:00
Jin Dong
b9a29bdb99 ci: bump up go to 1.24.3 
Signed-off-by: Jin Dong <djdongjin95@gmail.com>
 2025-05-23 19:36:58 +00:00
Derek McGowan
f6ae79a0b6 Merge pull request #11834 from austinvazquez/bump-golang-versions-05062025-in-ci 
ci: bump golang [1.23.9, 1.24.3] in build and release
 2025-05-23 16:56:39 +00:00
dependabot[bot]
78e838c349 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.17 to 3.28.18.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](60168efe1c...ff0a06e83c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-19 23:38:19 +00:00
Austin Vazquez
fea77e15b5 ci: bump golang [1.23.9, 1.24.3] in build and release 
Signed-off-by: Austin Vazquez <austin.vazquez.dev@gmail.com>
 2025-05-11 20:57:35 -06:00
dependabot[bot]
51664ad32a build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.16 to 3.28.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](28deaeda66...60168efe1c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-05-06 00:27:08 +00:00
Akhil Mohan
9058ab4ae9 Revert "disable portmap test in ubuntu-22 to make CI happy" 
The kernel in the latest ubuntu 22.04 runner image has been updated to
6.8.0-1027-azure, which has the fix for the ipv6 MARK bug. The runner
image 20250427.1.0 with this has been now completely rolled out to
github actions runners. Hence reverting the change to disable the IPv6 test.

This reverts commit 70db1bd00f.

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2025-05-01 09:01:33 +05:30
Maksym Pavlenko
d6795ed1a6 Merge pull request #11765 from containerd/dependabot/github_actions/github/codeql-action-3.28.16 
build(deps): bump github/codeql-action from 3.28.15 to 3.28.16
 2025-04-30 19:21:59 +00:00
Maksym Pavlenko
b02ec03207 Merge pull request #11764 from containerd/dependabot/github_actions/actions/attest-build-provenance-2.3.0 
build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0
 2025-04-30 17:28:50 +00:00
Maksym Pavlenko
8d0dfd04bc Merge pull request #11766 from containerd/dependabot/github_actions/google-github-actions/auth-2.1.10 
build(deps): bump google-github-actions/auth from 2.1.8 to 2.1.10
 2025-04-30 17:28:04 +00:00
dependabot[bot]
e499939a4d build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0 
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2.2.3 to 2.3.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](c074443f1a...db473fddc0)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-29 10:55:42 +00:00
dependabot[bot]
7fe090e9ab build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.2.1 to 4.3.0.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](95815c38cf...d3f86a106a)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-29 00:58:42 +00:00
dependabot[bot]
105602db08 build(deps): bump google-github-actions/auth from 2.1.8 to 2.1.10 
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2.1.8 to 2.1.10.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](71f986410d...ba79af0395)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-version: 2.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-29 00:39:23 +00:00
dependabot[bot]
b559084fb1 build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.15 to 3.28.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](45775bd823...28deaeda66)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-29 00:33:55 +00:00
Phil Estes
7ba4415501 Merge pull request #11759 from ningmingxiao/fix_cni 
bump:update cni to v1.7.1
 2025-04-28 17:36:54 +00:00
ningmingxiao
0dcdc1ffa7 bump:update cni to v1.7.1 
Signed-off-by: ningmingxiao <ning.mingxiao@zte.com.cn>
 2025-04-27 12:25:28 +08:00
dependabot[bot]
5d3a4d082e build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2 
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](c95fe14893...da05d55257)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-22 15:33:41 +00:00
Maksym Pavlenko
47afd3d1cb Fix vagrant setup 
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
 2025-04-21 17:01:47 -07:00
Maksym Pavlenko
7d723371db Merge pull request #11705 from akhilerm/set-default-go-version-1.23 
ci: update go 1.24.2, 1.23.8
 2025-04-17 18:00:38 +00:00
Phil Estes
3e17f10d7e Merge pull request #11630 from containerd/dependabot/github_actions/crazy-max/ghaction-github-runtime-3.1.0 
build(deps): bump crazy-max/ghaction-github-runtime from 3.0.0 to 3.1.0
 2025-04-17 13:18:32 +00:00
Akhil Mohan
6f93c65f52 use go1.23.8 as the default go version 
use go1.23.8 as the default go version for running in CI and making
release binaries.

NOTE: This is done so that when release/2.1 branch cut happens the
2.1 release uses 1.23.x for building release binaries rather than
1.24.x. Once the 2.1 release is out, this will be reverted and
go1.24.x will be made the default in the main branch

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2025-04-17 11:49:44 +05:30
Akhil Mohan
5629e9fff7 update to go 1.24.2, 1.23.8 
- go1.23.8 (released 2025-04-01) includes security fixes to the net/http
  package, as well as bug fixes to the runtime and the go command.
  Ref: https://github.com/golang/go/issues?q=milestone%3AGo1.23.8+label%3ACherryPickApproved
- go1.24.2 (released 2025-04-01) includes security fixes to the net/http
  package, as well as bug fixes to the compiler, the runtime, the go
  command, and the crypto/tls, go/types, net/http, and testing packages.
  Ref: https://github.com/golang/go/issues?q=milestone%3AGo1.24.2+label%3ACherryPickApproved

Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
 2025-04-17 11:49:22 +05:30
Phil Estes
0fd97ba5f7 Merge pull request #11662 from containerd/dependabot/github_actions/azure/login-2.3.0 
build(deps): bump azure/login from 2.2.0 to 2.3.0
 2025-04-17 01:00:10 +00:00
Phil Estes
9ca6a7ee0a Disable arm64 criu testing in GH Actions 
Due to current 100% failure rate on arm64 with the current OS image, disable criu testing for now

Signed-off-by: Phil Estes <estesp@amazon.com>
 2025-04-16 17:09:27 -04:00
Akhil Mohan
70db1bd00f disable portmap test in ubuntu-22 to make CI happy 
Signed-off-by: Akhil Mohan <akhilerm@gmail.com>
(cherry picked from commit 338e0a1266)
 2025-04-16 16:23:41 -04:00
Akihiro Suda
81acabd956 release: use Ubuntu 22.04 (glibc 2.35) 
Upgrade to Ubuntu 22.04, as Ubuntu 20.04 is no longer supported.

EL8 (glibc 2.28) and EL9 (glibc 2.34) users may have to use static
binaries, Docker's RPMs, or their own builds.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2025-04-11 10:16:16 +09:00
dependabot[bot]
eae1a6adc8 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.13 to 3.28.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1b549b9259...45775bd823)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.28.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-08 01:02:20 +00:00
dependabot[bot]
2a52260c7f build(deps): bump azure/login from 2.2.0 to 2.3.0 
Bumps [azure/login](https://github.com/azure/login) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/azure/login/releases)
- [Commits](a65d910e8a...a457da9ea1)

---
updated-dependencies:
- dependency-name: azure/login
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-04-08 00:49:29 +00:00
dependabot[bot]
33dae72b9a build(deps): bump lycheeverse/lychee-action from 2.3.0 to 2.4.0 
Bumps [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/lycheeverse/lychee-action/releases)
- [Commits](f613c4a64e...1d97d84f0b)

---
updated-dependencies:
- dependency-name: lycheeverse/lychee-action
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-31 23:59:06 +00:00
dependabot[bot]
c9b9f4a9ab build(deps): bump crazy-max/ghaction-github-runtime from 3.0.0 to 3.1.0 
Bumps [crazy-max/ghaction-github-runtime](https://github.com/crazy-max/ghaction-github-runtime) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/crazy-max/ghaction-github-runtime/releases)
- [Commits](b3a9207c0e...3cb05d89e1)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-github-runtime
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-31 23:58:59 +00:00
yylt
cffb6d4250 downgrade cni version in CI test 
Signed-off-by: yang yang <yang8518296@163.com>
 2025-03-28 15:37:50 +08:00
Phil Estes
c8a8406ee5 Merge pull request #11595 from containerd/dependabot/github_actions/actions/download-artifact-4.2.1 
build(deps): bump actions/download-artifact from 4.1.9 to 4.2.1
 2025-03-25 17:43:03 +00:00
Phil Estes
25adaa4b30 Merge pull request #11592 from containerd/dependabot/github_actions/actions/cache-4.2.3 
build(deps): bump actions/cache from 4.2.2 to 4.2.3
 2025-03-25 16:26:08 +00:00
Phil Estes
e53785d79b Merge pull request #11593 from containerd/dependabot/github_actions/github/codeql-action-3.28.13 
build(deps): bump github/codeql-action from 3.28.11 to 3.28.13
 2025-03-25 16:24:53 +00:00
dependabot[bot]
3689dec42c build(deps): bump actions/download-artifact from 4.1.9 to 4.2.1 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.1.9 to 4.2.1.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](cc20338598...95815c38cf)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-25 01:06:26 +00:00
dependabot[bot]
cb6a82a921 build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 4.6.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](4cec3d8aa0...ea165f8d65)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-25 01:06:00 +00:00
dependabot[bot]
5b194505e8 build(deps): bump github/codeql-action from 3.28.11 to 3.28.13 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.11 to 3.28.13.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](6bb031afdd...1b549b9259)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-25 01:05:47 +00:00
dependabot[bot]
ce690b0a9d build(deps): bump actions/cache from 4.2.2 to 4.2.3 
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.2 to 4.2.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](d4323d4df1...5a3ec84eff)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-25 01:05:40 +00:00
Phil Estes
d20482fea0 Merge pull request #11552 from containerd/dependabot/github_actions/docker/login-action-3.4.0 
build(deps): bump docker/login-action from 3.3.0 to 3.4.0
 2025-03-20 18:39:20 +00:00
dependabot[bot]
80e3fc4cec build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.2 
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.5.0 to 6.5.2.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](2226d7cb06...55c2c1448f)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 21:27:13 +00:00
dependabot[bot]
234a4411f2 build(deps): bump docker/login-action from 3.3.0 to 3.4.0 
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.3.0 to 3.4.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](9780b0c442...74a5d14239)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-18 21:26:43 +00:00
Phil Estes
9b552d4415 Merge pull request #10365 from adrianreber/2024-06-19-restore-create-start 
Support container restore through CRI/Kubernetes
 2025-03-11 15:13:37 +00:00
Adrian Reber
9e6beafd53 Support container restore through CRI/Kubernetes 
This implements container restore as described in:

https://kubernetes.io/blog/2022/12/05/forensic-container-checkpointing-alpha/#restore-checkpointed-container-standalone

For detailed step by step instruction also see contrib/checkpoint/checkpoint-restore-cri-test.sh

The code changes are based on changes I have done in Podman around 2018
and CRI-O around 2020.

The history behind restoring container via CRI/Kubernetes probably
requires some explanation. The initial proposal to bring
checkpoint/restore to Kubernetes was looking at pod checkpoint and
restoring and the corresponding CRI changes.

https://github.com/kubernetes-sigs/cri-tools/pull/662
https://github.com/kubernetes/kubernetes/pull/97194

After discussing this topic for about two years another approach was
implemented as described in KEP-2008:

https://github.com/kubernetes/enhancements/issues/2008

"Forensic Container Checkpointing" allowed us to separate checkpointing
from restoring. For the "Forensic Container Checkpointing" it is enough
to create a checkpoint of the container. Restoring is not necessary as
the analysis of the checkpoint archive can happen without restoring the
container.

While thinking about a way to restore a container it was by coincidence
that we started to look into restoring containers in Kubernetes via
Create and Start. The way it was done in CRI-O is to figure out during
Create if the container image is a checkpoint image and if that is true
we are using another code path. The same was implemented now with this
change in containerd.

With this change it is possible to restore the container from a
checkpoint tar archive that is created during checkpointing via CRI.

To restore a container via Kubernetes we convert the tar archive to an
OCI image as described in the kubernetes.io blog post from above. Using
this OCI image it is possible to restore a container in Kubernetes.

At this point I think it should be doable to restore containers in
CRI-O and containerd no matter if they have been created by containerd or
CRI-O. The biggest difference is the container metadata and that can
be adapted during restore.

Open items:

 * It is not clear to me why restoring a container in containerd goes
   through task/Create(). But as the restore code already exists this
   change extended the existing code path to restore a container in
   task/Create() to also restore a container through the CRI via
   Create and Start.
 * Automatic image pulling. containerd does not pull images
   automatically if created via the CRI. There is an option in
   crictl to pull images before starting, but that uses the CRI
   image pull interface. It is still a separate pull and create
   operation. Restoring containers from an OCI image is a bit
   different. The checkpoint OCI image does not include the base
   image, but just a reference to the image (NAME@DIGEST).
   Using crictl with pulling will enable the pulling of the
   checkpoint image, but not of the base image the checkpoint is
   based on. So during preparation of the checkpoint containerd
   will automatically pull the base image, but I was not able how
   to pull an image blockingly in containerd. So there is a for
   loop waiting for the container image to appear in the internal
   store. I think this probably can be implemented better.

Anyway, this is a first step towards container restored in Kubernetes
when using containerd.

Signed-off-by: Adrian Reber <areber@redhat.com>
 2025-03-11 12:55:13 +01:00
Akihiro Suda
608eb517f0 Merge pull request #11526 from containerd/dependabot/github_actions/actions/attest-build-provenance-2.2.3 
build(deps): bump actions/attest-build-provenance from 2.2.2 to 2.2.3
 2025-03-11 05:56:37 +00:00
Akihiro Suda
f96e513f3d Merge pull request #11527 from containerd/dependabot/github_actions/github/codeql-action-3.28.11 
build(deps): bump github/codeql-action from 3.28.10 to 3.28.11
 2025-03-11 05:56:17 +00:00
dependabot[bot]
88faaac973 build(deps): bump containerd/project-checks from 1.2.1 to 1.2.2 
Bumps [containerd/project-checks](https://github.com/containerd/project-checks) from 1.2.1 to 1.2.2.
- [Commits](800740a80e...d7751f3c37)

---
updated-dependencies:
- dependency-name: containerd/project-checks
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 23:56:04 +00:00
dependabot[bot]
9f885ea4f5 build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.10 to 3.28.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b56ba49b26...6bb031afdd)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-03-10 23:56:01 +00:00