Commit Graph
1098 Commits
Author SHA1 Message Date
dependabot[bot] fb80dbbf94 build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.1 to 2.4.2
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](https://github.com/pelletier/go-toml/compare/v2.4.1...v2.4.2)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-25 19:37:24 +00:00
Maksym Pavlenko 9ffb2ed974 Merge pull request #13493 from containerd/dependabot/go_modules/github.com/mdlayher/vsock-1.3.0
build(deps): bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0
2026-06-25 15:20:42 +00:00
Maksym Pavlenko a1030ad4db Merge pull request #13527 from containerd/dependabot/go_modules/github.com/intel/goresctrl-0.13.0
build(deps): bump github.com/intel/goresctrl from 0.12.0 to 0.13.0
2026-06-25 15:20:00 +00:00
Maksym Pavlenko a4e0f8d510 Merge pull request #13557 from containerd/dependabot/go_modules/moby-sys-eb8ba2dd7c
build(deps): bump github.com/moby/sys/sequential from 0.6.0 to 0.7.0 in the moby-sys group across 1 directory
2026-06-25 04:46:56 +00:00
dependabot[bot] 3fdb9abcab build(deps): bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0
Bumps [github.com/mdlayher/vsock](https://github.com/mdlayher/vsock) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/mdlayher/vsock/releases)
- [Changelog](https://github.com/mdlayher/vsock/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mdlayher/vsock/compare/v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/mdlayher/vsock
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-24 21:32:37 -07:00
dependabot[bot] 787bb3da64 build(deps): bump github.com/intel/goresctrl from 0.12.0 to 0.13.0
Bumps [github.com/intel/goresctrl](https://github.com/intel/goresctrl) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/intel/goresctrl/releases)
- [Commits](https://github.com/intel/goresctrl/compare/v0.12.0...v0.13.0)

---
updated-dependencies:
- dependency-name: github.com/intel/goresctrl
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-24 21:31:31 -07:00
dependabot[bot] f407302bab build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.1
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.3.1 to 2.4.1.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](https://github.com/pelletier/go-toml/compare/v2.3.1...v2.4.1)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 23:23:12 +00:00
dependabot[bot] ef32a6c8ac build(deps): bump github.com/moby/sys/sequential
Bumps the moby-sys group with 1 update in the / directory: [github.com/moby/sys/sequential](https://github.com/moby/sys).


Updates `github.com/moby/sys/sequential` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](https://github.com/moby/sys/compare/signal/v0.6.0...signal/v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/moby/sys/sequential
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: moby-sys
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-22 23:23:06 +00:00
Dr. Jan-Philip Gehrcke d8f13bf4cc pkg/archive/compression: use klauspost/compress/gzip for decode
Replace the stdlib compress/gzip decoder with klauspost's inflate.
Also see
https://github.com/containerd/containerd/issues/13559

Signed-off-by: Dr. Jan-Philip Gehrcke <jgehrcke@nvidia.com>
2026-06-15 14:34:15 -05:00
dependabot[bot] de9dcf6aa6 build(deps): bump the otel group across 1 directory with 8 updates
Bumps the otel group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |



Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0)

Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: otel
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-28 07:05:14 +00:00
Jordan Liggitt ce39143249 Update typeurl/v2 to v2.3.0 to drop gogo dependency
Signed-off-by: Jordan Liggitt <liggitt@google.com>
2026-05-27 17:32:08 -04:00
Sergey Kanzhelev 7f10e9eb5f do not hide linitng errors
Signed-off-by: Sergey Kanzhelev <S.Kanzhelev@live.com>
2026-05-19 17:29:18 -07:00
Samuel Karp ae843af785 Merge pull request #13360 from mxpv/task
Fix sandbox task API endpoints for non-runc runtimes
2026-05-19 00:15:24 +00:00
Akihiro Suda 92532de0ff Merge pull request #13345 from containerd/dependabot/go_modules/github.com/pelletier/go-toml/v2-2.3.1
build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1
2026-05-12 23:59:03 +00:00
Maksym Pavlenko ac01ae5c27 protos: include task API address to CreateTaskRequest
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-05-07 14:56:18 -07:00
dependabot[bot] 67121b9ab6 build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](https://github.com/pelletier/go-toml/compare/v2.3.0...v2.3.1)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-05 02:30:20 +00:00
dependabot[bot] d30223f09f build(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.5 to 1.18.6.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-05 02:30:13 +00:00
Derek McGowan c5ea950ef6 Update continuity to v0.5.0
Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-28 17:56:34 -07:00
Derek McGowan 1dd95ac390 Update plugin with optimizations that improve startup time
Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-28 17:28:45 -07:00
Samuel Karp 40d7588afc Force-add NRI pkg/version/info/none file
This file is ignored by github.com/containerd/nri/.gitignore, but
required for building. The NRI repo does need to change, but until that
we can force-include the file.

Signed-off-by: Samuel Karp <samuelkarp@google.com>
2026-04-28 11:29:32 -07:00
Samuel Karp efc8e12599 bump github.com/containerd/nri to v0.12.0
Signed-off-by: Samuel Karp <samuelkarp@google.com>
2026-04-28 10:45:05 -07:00
Chris Chang 5125a2af84 chore: update go-jose for CVE-2026-34986
Signed-off-by: Chris Chang <chrischang@microsoft.com>
2026-04-24 18:22:19 +00:00
Davanum Srinivas c30f23452c cri: use upstream Kubernetes modules
Switch the CRI integration layer from containerd's forked Kubernetes helpers
and clients to the upstream Kubernetes modules, and finalize the dependency
update to Kubernetes v0.36.0.

Replace the remaining internal helper copies with upstream packages:
- internal/cri/clock -> k8s.io/utils/clock
- internal/cri/executil -> upstream CRI exec helpers
- internal/cri/resourcequantity -> k8s.io/apimachinery/pkg/api/resource
- internal/cri/setutils -> k8s.io/apimachinery/pkg/util/sets
- internal/cri/types/labels.go -> internal/cri/labels
- integration/cri-api/pkg/apis/services.go -> k8s.io/cri-api/pkg/apis/services.go

Adopt the upstream CRI clients directly:
- add k8s.io/cri-client v0.36.0, k8s.io/cri-streaming v0.36.0, and
  k8s.io/streaming v0.36.0 as direct dependencies
- promote k8s.io/utils to a direct dependency and pull in
  k8s.io/component-base v0.36.0 indirectly
- keep integration/remote as a thin containerd adapter around cri-client,
  because the integration tests still need the stream-shaped
  GetContainerEvents RPC

Finalize the Kubernetes dependency update from v0.36.0-rc.0 to v0.36.0,
refresh vendor/, and drop the obsolete internal utility copies.

Also fix the protobuf MessageState mutex-copy vet failures exposed by the new
APIs and close the temporary integration CRI clients explicitly.

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
2026-04-23 12:59:58 +02:00
dependabot[bot] 62e835ecb9 build(deps): bump github.com/erofs/go-erofs from 0.2.1 to 0.3.0
Bumps [github.com/erofs/go-erofs](https://github.com/erofs/go-erofs) from 0.2.1 to 0.3.0.
- [Release notes](https://github.com/erofs/go-erofs/releases)
- [Commits](https://github.com/erofs/go-erofs/compare/v0.2.1...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/erofs/go-erofs
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-21 00:17:32 +00:00
Derek McGowan 3679372958 Update API to use latest beta tag
Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-15 07:34:15 -07:00
Akihiro Suda 341401c1d5 Merge pull request #12785 from dmcgowan/pass-socket-address
Make shim socket directory use configured directory
2026-04-15 10:24:25 +00:00
Derek McGowan d806373feb Make shim socket directory use configured state
Send the socket directory from containerd to the shim. The shim still
decides where the socket goes but can use the environment variable
passed from containerd to ensure the socket is placed in the configured
directory with proper permission.

This is needed for some rootless cases which do not have permission to
the default state directory as currently set. The directory being
hardcoded by the shim means it is currently not possible to change the
location the shim will listen at.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-15 00:21:18 -07:00
dependabot[bot] a9e9580709 build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1
Bumps [github.com/erofs/go-erofs](https://github.com/erofs/go-erofs) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/erofs/go-erofs/releases)
- [Commits](https://github.com/erofs/go-erofs/compare/v0.2.0...v0.2.1)

---
updated-dependencies:
- dependency-name: github.com/erofs/go-erofs
  dependency-version: 0.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-13 23:32:41 +00:00
Samuel Karp d15a469274 update github.com/moby/spdystream v0.5.1
Signed-off-by: Samuel Karp <samuelkarp@google.com>
2026-04-13 10:48:34 -07:00
Derek McGowan d11731c74f Update vendored api to v1.11.0-beta.1
Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-10 17:17:36 -07:00
Derek McGowan 74b465dcc6 Merge pull request #13208 from dmcgowan/update-bootstrap-log-levels
Update bootstrap API log level definition
2026-04-10 17:01:20 -07:00
Derek McGowan 2c102c6cbe Update bootstrap API log level definition
Avoid using logrus concepts in the API, use slog style log levels with
integer values and 0 meaning the default "info" level.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-10 15:23:34 -07:00
Maksym Pavlenko d9772b5cf1 Merge pull request #13170 from containerd/dependabot/go_modules/github.com/Microsoft/hcsshim-0.15.0-rc.1
build(deps): bump github.com/Microsoft/hcsshim from 0.14.0-rc.1 to 0.15.0-rc.1
2026-04-09 19:40:44 +00:00
Derek McGowan a755ca16e5 Merge pull request #12865 from dmcgowan/readonly-overlay-erofs-no-mount
Support reading readonly overlays without mounting
2026-04-09 18:37:15 +00:00
Maksym Pavlenko b52893b246 Merge pull request #13165 from dmcgowan/add-transfer-copy-types
Add transfer types for container filesystem copy
2026-04-09 05:11:12 +00:00
Maksym Pavlenko 75afbe155a Update vendor
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko 9bf65dcf02 Use enums instead of strings for capabilities and log level
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko 3fbdb132bf Fix module path
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko 0f55bdd49c Fix extensions API and update tests
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko d957b1bf53 Use log level instead of debug flag
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko 31d0bbbad7 Include containerd version when launching shim
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko f71c2e4211 Reformat and clean proto files
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko acb8c8ea1e Update vendor
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko 5ea993b48d Pass runc options as a separate extension
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
Maksym Pavlenko e72145b192 Update vendor
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
2026-04-08 08:29:28 -05:00
dependabot[bot] affe09319d build(deps): bump github.com/Microsoft/hcsshim
Bumps [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) from 0.14.0-rc.1 to 0.15.0-rc.1.
- [Release notes](https://github.com/Microsoft/hcsshim/releases)
- [Commits](https://github.com/Microsoft/hcsshim/compare/v0.14.0-rc.1...v0.15.0-rc.1)

---
updated-dependencies:
- dependency-name: github.com/Microsoft/hcsshim
  dependency-version: 0.15.0-rc.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-06 23:24:40 +00:00
Derek McGowan 121f3a21e4 Add transfer types for container filesystem copy
Add support for transfering data to and from a container filesystem.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-06 11:42:01 -07:00
Derek McGowan 04b7b495f9 internal/fsview: add fsview package for reading snapshot mounts
Allows reading snapshot mounts without performing mounts. This is
valuable when the host cannot perform the mounts due to platform or
permissions.

Signed-off-by: Derek McGowan <derek@mcg.dev>
2026-04-04 22:37:37 -07:00
Maksym Pavlenko 6c885467a4 Merge pull request #13076 from SergeyKanzhelev/useLatest136
Use latest k8s 1.36
2026-04-03 02:27:23 +00:00
Fu Wei 1f0b0c442b Merge pull request #13091 from erofs/os_features
Add `os.features` support for EROFS native container images
2026-04-01 23:14:34 +00:00