Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update all rthook go dependencies main (main) (patch) #2991

Merged
merged 1 commit into from
Oct 15, 2024

Conversation

cilium-renovate[bot]
Copy link
Contributor

@cilium-renovate cilium-renovate bot commented Oct 11, 2024

This PR contains the following updates:

Package Type Update Change
github.com/containerd/containerd require patch v1.7.22 -> v1.7.23
github.com/opencontainers/runc require patch v1.1.14 -> v1.1.15

Release Notes

containerd/containerd (github.com/containerd/containerd)

v1.7.23: containerd 1.7.23

Compare Source

Welcome to the v1.7.23 release of containerd!

The twenty-third patch release for containerd 1.7 contains various fixes
and updates.

Highlights
Container Runtime Interface (CRI)
  • Add check for CNI plugins before tearing down pod network (#​10767)
Image Distribution
  • Fix the race condition during GC of snapshots when client retries (#​10763)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Derek McGowan
  • Austin Vazquez
  • Phil Estes
  • Akihiro Suda
  • Samuel Karp
  • Maksym Pavlenko
  • Kern Walster
  • Kir Kolyshkin
  • Saket Jajoo
  • Sameer
  • Wei Fu
  • Zou Nengren
  • bo.jiang
Changes
37 commits

  • Prepare release notes for v1.7.23 (#​10802)
    • 921f554af Prepare release notes for v1.7.23
  • Revert "update runc binary to 1.1.15" (#​10826)
    • 8f16d6588 Revert "update runc binary to 1.1.15"
  • Switch from actuated.dev to GH Action runners for arm64 (#​10822)
    • 41e8f24cd Switch from actuated.dev to GH Action runners for arm64
    • dd811f224 Update github actions ci to run on forks
  • bump golangci/golangci-lint-action from 4 to 6 (#​10813)
    • 284484af4 bump golangci/golangci-lint-action from 4 to 6
  • update to go1.23.2,go1.22.8 (#​10808)
  • prow: allow ENABLE_CRI_SANDBOXES to be configured (#​10801)
    • ae11176fa prow: allow ENABLE_CRI_SANDBOXES to be configured
  • TestNewBinaryIOCleanup: fix a comment, minor rewrite (#​10776)
    • 7fd794a7c TestNewBinaryIOCleanup: fix a comment, minor rewrite
  • Add errdefs aliases (#​10792)
  • Update runc binary to 1.1.15 (#​10794)
  • Update runner images to macOS13 (#​10783)
  • Allow proxy plugins to have capabilities (#​10731)
    • 950740390 Allow proxy plugins to have capabilities
  • Bump crun to 1.16.1 (#​10774)
  • Fix the race condition during GC of snapshots when client retries (#​10763)
    • cb5e6a01a Fix the race condition during GC of snapshots when client retries
  • Add check for CNI plugins before tearing down pod network (#​10767)
    • 278bd0f72 [release/1.7] Add check for CNI plugins before tearing down pod network
  • Revert errdefs package migration (#​10712)
    • 18403239e Synchronize 1.7 error package with errdefs
    • d8d27205b Revert "migrate errdefs package to github.com/containerd/errdefs module"
    • e82d201b3 Revert "replace uses of github.com/containerd/containerd/errdefs"
    • 51939238f Revert "errdefs: denote deprecation as a godoc comment"
    • ae80077e8 Revert "golangci-lint: enable depguard for packages that moved"
    • 32675f983 Revert "remove imports of errdefs package"

Changes from containerd/errdefs
29 commits

Dependency Changes
  • github.com/containerd/errdefs v0.1.0 -> v0.3.0

Previous release can be found at v1.7.22

opencontainers/runc (github.com/opencontainers/runc)

v1.1.15: -- "How, dear sir, did you cross the flood? By not stopping, friend, and by not straining I crossed the flood."

Compare Source

This is the fifteenth patch release in the 1.1.z release branch of runc.
It fixes a few issues with seccomp, leaked mounts, and system performance.

  • The -ENOSYS seccomp stub is now always generated for the native
    architecture that runc is running on. This is needed to work around some
    arguably specification-incompliant behaviour from Docker on architectures
    such as ppc64le, where the allowed architecture list is set to null. This
    ensures that we always generate at least one -ENOSYS stub for the native
    architecture even with these weird configs. (#​4391)
  • On a system with older kernel, reading /proc/self/mountinfo may skip some
    entries, as a consequence runc may not properly set mount propagation,
    causing container mounts leak onto the host mount namespace. (#​2404, #​4425)
  • In order to fix performance issues in the "lightweight" bindfd protection
    against [CVE-2019-5736], the temporary ro bind-mount of /proc/self/exe
    has been removed. runc now creates a binary copy in all cases. (#​4392, #​2532)
Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.


Thanks to all of the contributors who made this release possible:


Configuration

📅 Schedule: Branch creation - "on monday and friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@cilium-renovate cilium-renovate bot requested a review from a team as a code owner October 11, 2024 10:19
@cilium-renovate cilium-renovate bot added release-blocker This PR or issue is blocking the next release. release-note/dependency This PR updates one or multiple dependencies labels Oct 11, 2024
Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>
@cilium-renovate cilium-renovate bot force-pushed the renovate/main-patch-all-rthook-go-deps-main branch from 3b1c2df to c747c33 Compare October 15, 2024 09:13
@cilium-renovate cilium-renovate bot changed the title fix(deps): update module github.com/opencontainers/runc to v1.1.15 (main) fix(deps): update all rthook go dependencies main (main) (patch) Oct 15, 2024
@cilium-renovate
Copy link
Contributor Author

ℹ Artifact update notice

File name: contrib/tetragon-rthooks/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/containerd/errdefs v0.1.0 -> v0.3.0

@mtardy mtardy merged commit 1dac96a into main Oct 15, 2024
44 checks passed
@mtardy mtardy deleted the renovate/main-patch-all-rthook-go-deps-main branch October 15, 2024 10:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
release-blocker This PR or issue is blocking the next release. release-note/dependency This PR updates one or multiple dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant