dependabot[bot]
fb80dbbf94
build(deps): bump github.com/pelletier/go-toml/v2 from 2.4.1 to 2.4.2
...
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml ) from 2.4.1 to 2.4.2.
- [Release notes](https://github.com/pelletier/go-toml/releases )
- [Commits](https://github.com/pelletier/go-toml/compare/v2.4.1...v2.4.2 )
---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
dependency-version: 2.4.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-25 19:37:24 +00:00
Maksym Pavlenko
9ffb2ed974
Merge pull request #13493 from containerd/dependabot/go_modules/github.com/mdlayher/vsock-1.3.0
...
build(deps): bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0
2026-06-25 15:20:42 +00:00
Maksym Pavlenko
a1030ad4db
Merge pull request #13527 from containerd/dependabot/go_modules/github.com/intel/goresctrl-0.13.0
...
build(deps): bump github.com/intel/goresctrl from 0.12.0 to 0.13.0
2026-06-25 15:20:00 +00:00
Maksym Pavlenko
a4e0f8d510
Merge pull request #13557 from containerd/dependabot/go_modules/moby-sys-eb8ba2dd7c
...
build(deps): bump github.com/moby/sys/sequential from 0.6.0 to 0.7.0 in the moby-sys group across 1 directory
2026-06-25 04:46:56 +00:00
dependabot[bot]
3fdb9abcab
build(deps): bump github.com/mdlayher/vsock from 1.2.1 to 1.3.0
...
Bumps [github.com/mdlayher/vsock](https://github.com/mdlayher/vsock ) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/mdlayher/vsock/releases )
- [Changelog](https://github.com/mdlayher/vsock/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mdlayher/vsock/compare/v1.2.1...v1.3.0 )
---
updated-dependencies:
- dependency-name: github.com/mdlayher/vsock
dependency-version: 1.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-24 21:32:37 -07:00
dependabot[bot]
787bb3da64
build(deps): bump github.com/intel/goresctrl from 0.12.0 to 0.13.0
...
Bumps [github.com/intel/goresctrl](https://github.com/intel/goresctrl ) from 0.12.0 to 0.13.0.
- [Release notes](https://github.com/intel/goresctrl/releases )
- [Commits](https://github.com/intel/goresctrl/compare/v0.12.0...v0.13.0 )
---
updated-dependencies:
- dependency-name: github.com/intel/goresctrl
dependency-version: 0.13.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-24 21:31:31 -07:00
dependabot[bot]
f407302bab
build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.1 to 2.4.1
...
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml ) from 2.3.1 to 2.4.1.
- [Release notes](https://github.com/pelletier/go-toml/releases )
- [Commits](https://github.com/pelletier/go-toml/compare/v2.3.1...v2.4.1 )
---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
dependency-version: 2.4.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 23:23:12 +00:00
dependabot[bot]
ef32a6c8ac
build(deps): bump github.com/moby/sys/sequential
...
Bumps the moby-sys group with 1 update in the / directory: [github.com/moby/sys/sequential](https://github.com/moby/sys ).
Updates `github.com/moby/sys/sequential` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/moby/sys/releases )
- [Commits](https://github.com/moby/sys/compare/signal/v0.6.0...signal/v0.7.0 )
---
updated-dependencies:
- dependency-name: github.com/moby/sys/sequential
dependency-version: 0.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: moby-sys
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-22 23:23:06 +00:00
Dr. Jan-Philip Gehrcke
d8f13bf4cc
pkg/archive/compression: use klauspost/compress/gzip for decode
...
Replace the stdlib compress/gzip decoder with klauspost's inflate.
Also see
https://github.com/containerd/containerd/issues/13559
Signed-off-by: Dr. Jan-Philip Gehrcke <jgehrcke@nvidia.com >
2026-06-15 14:34:15 -05:00
dependabot[bot]
de9dcf6aa6
build(deps): bump the otel group across 1 directory with 8 updates
...
Bumps the otel group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ) | `0.68.0` | `0.69.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go ) | `1.43.0` | `1.44.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.68.0...zpages/v0.69.0 )
Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...v1.44.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-version: 0.69.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
- dependency-name: go.opentelemetry.io/otel/trace
dependency-version: 1.44.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: otel
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-28 07:05:14 +00:00
Jordan Liggitt
ce39143249
Update typeurl/v2 to v2.3.0 to drop gogo dependency
...
Signed-off-by: Jordan Liggitt <liggitt@google.com >
2026-05-27 17:32:08 -04:00
Sergey Kanzhelev
7f10e9eb5f
do not hide linitng errors
...
Signed-off-by: Sergey Kanzhelev <S.Kanzhelev@live.com >
2026-05-19 17:29:18 -07:00
Samuel Karp
ae843af785
Merge pull request #13360 from mxpv/task
...
Fix sandbox task API endpoints for non-runc runtimes
2026-05-19 00:15:24 +00:00
Akihiro Suda
92532de0ff
Merge pull request #13345 from containerd/dependabot/go_modules/github.com/pelletier/go-toml/v2-2.3.1
...
build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1
2026-05-12 23:59:03 +00:00
Maksym Pavlenko
ac01ae5c27
protos: include task API address to CreateTaskRequest
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-05-07 14:56:18 -07:00
dependabot[bot]
67121b9ab6
build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1
...
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml ) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/pelletier/go-toml/releases )
- [Commits](https://github.com/pelletier/go-toml/compare/v2.3.0...v2.3.1 )
---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
dependency-version: 2.3.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-05 02:30:20 +00:00
dependabot[bot]
d30223f09f
build(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.18.5 to 1.18.6.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Commits](https://github.com/klauspost/compress/compare/v1.18.5...v1.18.6 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-version: 1.18.6
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-05 02:30:13 +00:00
Derek McGowan
c5ea950ef6
Update continuity to v0.5.0
...
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-28 17:56:34 -07:00
Derek McGowan
1dd95ac390
Update plugin with optimizations that improve startup time
...
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-28 17:28:45 -07:00
Samuel Karp
40d7588afc
Force-add NRI pkg/version/info/none file
...
This file is ignored by github.com/containerd/nri/.gitignore, but
required for building. The NRI repo does need to change, but until that
we can force-include the file.
Signed-off-by: Samuel Karp <samuelkarp@google.com >
2026-04-28 11:29:32 -07:00
Samuel Karp
efc8e12599
bump github.com/containerd/nri to v0.12.0
...
Signed-off-by: Samuel Karp <samuelkarp@google.com >
2026-04-28 10:45:05 -07:00
Chris Chang
5125a2af84
chore: update go-jose for CVE-2026-34986
...
Signed-off-by: Chris Chang <chrischang@microsoft.com >
2026-04-24 18:22:19 +00:00
Davanum Srinivas
c30f23452c
cri: use upstream Kubernetes modules
...
Switch the CRI integration layer from containerd's forked Kubernetes helpers
and clients to the upstream Kubernetes modules, and finalize the dependency
update to Kubernetes v0.36.0.
Replace the remaining internal helper copies with upstream packages:
- internal/cri/clock -> k8s.io/utils/clock
- internal/cri/executil -> upstream CRI exec helpers
- internal/cri/resourcequantity -> k8s.io/apimachinery/pkg/api/resource
- internal/cri/setutils -> k8s.io/apimachinery/pkg/util/sets
- internal/cri/types/labels.go -> internal/cri/labels
- integration/cri-api/pkg/apis/services.go -> k8s.io/cri-api/pkg/apis/services.go
Adopt the upstream CRI clients directly:
- add k8s.io/cri-client v0.36.0, k8s.io/cri-streaming v0.36.0, and
k8s.io/streaming v0.36.0 as direct dependencies
- promote k8s.io/utils to a direct dependency and pull in
k8s.io/component-base v0.36.0 indirectly
- keep integration/remote as a thin containerd adapter around cri-client,
because the integration tests still need the stream-shaped
GetContainerEvents RPC
Finalize the Kubernetes dependency update from v0.36.0-rc.0 to v0.36.0,
refresh vendor/, and drop the obsolete internal utility copies.
Also fix the protobuf MessageState mutex-copy vet failures exposed by the new
APIs and close the temporary integration CRI clients explicitly.
Signed-off-by: Davanum Srinivas <davanum@gmail.com >
2026-04-23 12:59:58 +02:00
dependabot[bot]
62e835ecb9
build(deps): bump github.com/erofs/go-erofs from 0.2.1 to 0.3.0
...
Bumps [github.com/erofs/go-erofs](https://github.com/erofs/go-erofs ) from 0.2.1 to 0.3.0.
- [Release notes](https://github.com/erofs/go-erofs/releases )
- [Commits](https://github.com/erofs/go-erofs/compare/v0.2.1...v0.3.0 )
---
updated-dependencies:
- dependency-name: github.com/erofs/go-erofs
dependency-version: 0.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-21 00:17:32 +00:00
Derek McGowan
3679372958
Update API to use latest beta tag
...
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-15 07:34:15 -07:00
Akihiro Suda
341401c1d5
Merge pull request #12785 from dmcgowan/pass-socket-address
...
Make shim socket directory use configured directory
2026-04-15 10:24:25 +00:00
Derek McGowan
d806373feb
Make shim socket directory use configured state
...
Send the socket directory from containerd to the shim. The shim still
decides where the socket goes but can use the environment variable
passed from containerd to ensure the socket is placed in the configured
directory with proper permission.
This is needed for some rootless cases which do not have permission to
the default state directory as currently set. The directory being
hardcoded by the shim means it is currently not possible to change the
location the shim will listen at.
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-15 00:21:18 -07:00
dependabot[bot]
a9e9580709
build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1
...
Bumps [github.com/erofs/go-erofs](https://github.com/erofs/go-erofs ) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/erofs/go-erofs/releases )
- [Commits](https://github.com/erofs/go-erofs/compare/v0.2.0...v0.2.1 )
---
updated-dependencies:
- dependency-name: github.com/erofs/go-erofs
dependency-version: 0.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-13 23:32:41 +00:00
Samuel Karp
d15a469274
update github.com/moby/spdystream v0.5.1
...
Signed-off-by: Samuel Karp <samuelkarp@google.com >
2026-04-13 10:48:34 -07:00
Derek McGowan
d11731c74f
Update vendored api to v1.11.0-beta.1
...
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-10 17:17:36 -07:00
Derek McGowan
74b465dcc6
Merge pull request #13208 from dmcgowan/update-bootstrap-log-levels
...
Update bootstrap API log level definition
2026-04-10 17:01:20 -07:00
Derek McGowan
2c102c6cbe
Update bootstrap API log level definition
...
Avoid using logrus concepts in the API, use slog style log levels with
integer values and 0 meaning the default "info" level.
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-10 15:23:34 -07:00
Maksym Pavlenko
d9772b5cf1
Merge pull request #13170 from containerd/dependabot/go_modules/github.com/Microsoft/hcsshim-0.15.0-rc.1
...
build(deps): bump github.com/Microsoft/hcsshim from 0.14.0-rc.1 to 0.15.0-rc.1
2026-04-09 19:40:44 +00:00
Derek McGowan
a755ca16e5
Merge pull request #12865 from dmcgowan/readonly-overlay-erofs-no-mount
...
Support reading readonly overlays without mounting
2026-04-09 18:37:15 +00:00
Maksym Pavlenko
b52893b246
Merge pull request #13165 from dmcgowan/add-transfer-copy-types
...
Add transfer types for container filesystem copy
2026-04-09 05:11:12 +00:00
Maksym Pavlenko
75afbe155a
Update vendor
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
9bf65dcf02
Use enums instead of strings for capabilities and log level
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
3fbdb132bf
Fix module path
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
0f55bdd49c
Fix extensions API and update tests
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
d957b1bf53
Use log level instead of debug flag
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
31d0bbbad7
Include containerd version when launching shim
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
f71c2e4211
Reformat and clean proto files
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
acb8c8ea1e
Update vendor
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
5ea993b48d
Pass runc options as a separate extension
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
Maksym Pavlenko
e72145b192
Update vendor
...
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com >
2026-04-08 08:29:28 -05:00
dependabot[bot]
affe09319d
build(deps): bump github.com/Microsoft/hcsshim
...
Bumps [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim ) from 0.14.0-rc.1 to 0.15.0-rc.1.
- [Release notes](https://github.com/Microsoft/hcsshim/releases )
- [Commits](https://github.com/Microsoft/hcsshim/compare/v0.14.0-rc.1...v0.15.0-rc.1 )
---
updated-dependencies:
- dependency-name: github.com/Microsoft/hcsshim
dependency-version: 0.15.0-rc.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-06 23:24:40 +00:00
Derek McGowan
121f3a21e4
Add transfer types for container filesystem copy
...
Add support for transfering data to and from a container filesystem.
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-06 11:42:01 -07:00
Derek McGowan
04b7b495f9
internal/fsview: add fsview package for reading snapshot mounts
...
Allows reading snapshot mounts without performing mounts. This is
valuable when the host cannot perform the mounts due to platform or
permissions.
Signed-off-by: Derek McGowan <derek@mcg.dev >
2026-04-04 22:37:37 -07:00
Maksym Pavlenko
6c885467a4
Merge pull request #13076 from SergeyKanzhelev/useLatest136
...
Use latest k8s 1.36
2026-04-03 02:27:23 +00:00
Fu Wei
1f0b0c442b
Merge pull request #13091 from erofs/os_features
...
Add `os.features` support for EROFS native container images
2026-04-01 23:14:34 +00:00