Skip to content

build(deps): bump the containerd group with 9 updates - #248

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/containerd-2cde9c0cd1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/containerd-2cde9c0cd1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the containerd group with 9 updates:

Package From To
github.com/containerd/console 1.0.4 1.0.5
github.com/containerd/containerd/api 1.8.0 1.12.0
github.com/containerd/continuity 0.4.5 0.5.0
github.com/containerd/go-cni 1.1.12 1.1.14
github.com/containerd/imgcrypt/v2 2.0.1 2.0.3
github.com/containerd/log 0.1.0 0.2.0
github.com/containerd/platforms 1.0.0-rc.1 1.0.0-rc.4
github.com/containerd/stargz-snapshotter/estargz 0.16.3 0.19.0
github.com/containerd/typeurl/v2 2.2.3 2.3.0

Updates github.com/containerd/console from 1.0.4 to 1.0.5

Release notes

Sourced from github.com/containerd/console's releases.

v1.0.5

What's Changed

New Contributors

Full Changelog: containerd/console@v1.0.4...v1.0.5

Commits
  • c8d9621 Merge pull request #86 from cyphar/newpty-from-file
  • fa4de4c Merge pull request #84 from jperkin/fix-solaris
  • c79e45e pty: add GetPtyFromFile as safer GetPty
  • 12ba745 tc: make internal handlers take File interface
  • 9dd67e1 gha: bump containerd/project-checks to v1.2.2
  • 37ae7bb fix: add solaris to non-supported shim.
  • See full diff in compare view

Updates github.com/containerd/containerd/api from 1.8.0 to 1.12.0

Release notes

Sourced from github.com/containerd/containerd/api's releases.

containerd API 1.12.0

Welcome to the api/v1.12.0 release of containerd!

The 13th release for the containerd 1.x API aligns with the containerd 2.4 release.

Highlights

Image Storage

  • Include media type in content create events (#13833)

Runtime

  • Add UpdateSandbox RPC to propagate sandbox controller updates to the shim (#14105)
  • Allow specifying parent checkpoint directory when checkpointing with runc (#13699)

Deprecations

  • Deprecate containerd.io/runtime-allow-mounts shim annotation in favor of MountCapabilities bootstrap extension (#14002)
  • Deprecate task API address and version fields in runc options and move to CreateTaskRequest (#13360)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Maksym Pavlenko
  • Wei Fu
  • Jordan Liggitt
  • Samuel Karp
  • Kohei Tokunaga
  • Philip Laine
  • Sebastiaan van Stijn
  • Sergey Kanzhelev

Changes

  • sandbox: wire Controller.Update through to the shim (#14105)
    • 2ea4ddb32f sandbox: add UpdateSandbox RPC and forward Controller.Update to the shim
  • Prepare api/v1.12.0-rc.0 release (#14047)
  • Shim mount handler protocol (#14002)
  • chore(api): update github.com/sirupsen/logrus v1.10.2 (#14037)
    • a28910b14f chore(api): update github.com/sirupsen/logrus v1.10.2
  • Prepare release notes for api/v1.12.0-beta.0 (#13899)
    • 0ff04dc3f7 Prepare release notes for api/v1.12.0-beta.0

... (truncated)

Commits
  • c6d0192 Merge pull request #14170 from samuelkarp/prepare-api-v1.12.0
  • 5c4ea21 Prepare release notes for api/v1.12.0
  • 610d8d8 Merge pull request #14166 from samuelkarp/deprecations-and-removals-for-2.4
  • 531b3a3 tracing: remove deprecated tracing config options
  • ca8579a tracing: add tests for otlp exporter and env vars
  • ee024b7 tracing: remove deprecated otlp configs
  • f7c654f cri: remove deprecated cni bin_dir
  • 4f7de25 cri: remove enable_cdi config option
  • 830b48d cri: delay registry config removal to 2.7
  • c0c4c4a Merge pull request #14115 from dmcgowan/prepare-v2.4.0-rc
  • Additional commits viewable in compare view

Updates github.com/containerd/continuity from 0.4.5 to 0.5.0

Release notes

Sourced from github.com/containerd/continuity's releases.

v0.5.0

What's Changed

New Contributors

Full Changelog: containerd/continuity@v0.4.5...v0.5.0

Commits
  • ed9828d Merge pull request #274 from jellor/handle-no-xattr
  • 9a4a220 Merge pull request #269 from eldondev/main
  • fcfd613 fs: handle ENOTSUP error in compareCapabilities function
  • 8c2afd9 Merge pull request #283 from containerd/dependabot/github_actions/github/code...
  • 42ba1ba build(deps): bump github/codeql-action from 4.35.1 to 4.35.2
  • 9426626 Merge pull request #276 from dcantah/linux-cp-sparse-aware
  • 49d1748 Merge pull request #280 from dmcgowan/add-ext4-library
  • 3b6686d Merge pull request #282 from containerd/dependabot/github_actions/github/code...
  • 27d93b0 build(deps): bump github/codeql-action from 3.35.1 to 4.35.1
  • a424ba1 Linux: Make copyFile sparse aware
  • Additional commits viewable in compare view

Updates github.com/containerd/go-cni from 1.1.12 to 1.1.14

Release notes

Sourced from github.com/containerd/go-cni's releases.

v1.1.14

What's Changed

New Contributors

Full Changelog: containerd/go-cni@v1.1.13...v1.1.14

v1.1.13

What's Changed

New Contributors

Full Changelog: containerd/go-cni@v1.1.12...v1.1.13

Commits
  • 8c8d2ad Merge pull request #132 from jipperinbham/feat/otel-tracing
  • 72f1253 Document cni.Setup span
  • 868ee13 Instrument CNI interface with OpenTelemetry tracing
  • 3dbce1d Merge pull request #134 from containerd/dependabot/go_modules/integration/git...
  • 758a3ab Merge pull request #138 from arpitjain099/chore/declare-workflow-perms
  • 871cf73 ci: declare workflow-level contents: read on 1 workflow
  • c3cfd3d Bump github.com/sirupsen/logrus from 1.7.0 to 1.8.3 in /integration
  • 784f94e Merge pull request #130 from keithmattix/keithmattix/bump-cni
  • fcc5217 Add Apache LICENSE to integration test dir
  • 5ebeb4b Bump actions and dependencies to newer versions
  • Additional commits viewable in compare view

Updates github.com/containerd/imgcrypt/v2 from 2.0.1 to 2.0.3

Release notes

Sourced from github.com/containerd/imgcrypt/v2's releases.

imgcrypt v2.0.3

v2.0.3:

  • Updated various dependencies
  • Fixed an error message to start with small letter

Full Changelog: containerd/imgcrypt@v2.0.2...v2.0.3

imgcrypt v2.0.2

v2.0.2:

  • Updated various dependencies
  • Fixed an error message to start with small letter

Full Changelog: containerd/imgcrypt@v2.0.1...v2.0.2

Changelog

Sourced from github.com/containerd/imgcrypt/v2's changelog.

v2.0.3:

  • Updated various dependencies
  • ctr-enc: Synchronize with more recent version of ctr from containerd v2.3.0
  • tests: Use container images from quai rather than docker hub
  • tests: Set OCICRYPT_CONFIG=internal when starting containerd
  • tests: Use remove_all_snapshots in local keys tests to clear cache

v2.0.2:

  • Updated various dependencies
  • Fixed an error message to start with small letter
Commits
  • 3cd2892 CHANGES: Update for v2.0.3
  • a958462 build(deps): bump github.com/cloudflare/circl from 1.6.2 to 1.6.3
  • f1e4947 build(deps): Update ocicrypt to v1.3.2
  • 6a20c07 CI: Upgrade to gloangci-lint v2.12.2
  • 4fe116f ctr-enc: Synchronize with more recent version of ctr from containerd v2.3.0
  • b6aeb69 tests: Use remove_all_snapshots in local keys tests to clear cache
  • 1d572d4 tests: Move code into new function remove_all_snapshots
  • ab1ad23 tests: Set OCICRYPT_CONFIG=internal when starting containerd
  • 0d13d6a build(deps): Update to ocicrypt v1.3.1
  • 5a7adf7 build(deps): bump golang.org/x/net from 0.54.0 to 0.55.0
  • Additional commits viewable in compare view

Updates github.com/containerd/log from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/containerd/log's releases.

v0.2.0

What's Changed

New Contributors

Full Changelog: containerd/log@v0.1.0...v0.2.0

Commits
  • 8b5d653 Merge pull request #25 from thaJeztah/integrate_tracing_improve
  • 65e60ca otel: add option to set span error status
  • 9c0b6a4 otel: add option to configure log level
  • 6fcf9c1 Merge pull request #28 from thaJeztah/handle_nil_contexts
  • 2b5e7c3 otel: avoid span lookup for entries without context
  • 4ec26d0 Merge pull request #24 from thaJeztah/integrate_tracing
  • dd120bd Merge pull request #21 from thaJeztah/rewrite_slog
  • dd21ae6 Merge pull request #27 from thaJeztah/bump_logrus
  • 18f2de6 log: accept slog-compatible levels in SetLevel
  • c474254 slog: improve bridge test coverage
  • Additional commits viewable in compare view

Updates github.com/containerd/platforms from 1.0.0-rc.1 to 1.0.0-rc.4

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.4

What's Changed

Full Changelog: containerd/platforms@v1.0.0-rc.3...v1.0.0-rc.4

v1.0.0-rc.3

What's Changed

Full Changelog: containerd/platforms@v1.0.0-rc.2...v1.0.0-rc.3

v1.0.0-rc.2

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.2

Commits
  • 09756f5 Merge pull request #33 from dmcgowan/only-os
  • 3a284c1 Merge pull request #31 from dmcgowan/windows-strip-features
  • 1e75776 Merge pull request #30 from thaJeztah/platforms_refactor
  • adbf321 Strip the win32k when comparing windows platforms
  • 27058a1 Add OnlyOS function allow matching any architecture
  • d028ee3 ParseAll: refactor
  • 8f5e31a FormatAll: use a string-builder for formatting os-options
  • 0165130 modernize --fix
  • f453a3a go.mod: bump minimum go version to go1.24
  • 042728d add benchmark for Parse, FormatAll
  • Additional commits viewable in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.16.3 to 0.19.0

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.19.0

Security Updates

  • CVE-2026-71482
  • CVE-2026-77395
    • To mitigate this issue, v0.19.0 requires a configuration change to the CRI setting. Specifically, the --image-service-endpoint=unix:///run/containerd-stargz-grpc/containerd-stargz-grpc.sock flag needs to be specified on kubelet. Refer to kubelet configuration section in docs/overview.md for details.

Notable Changes

  • estargz: Fix encoder panic in go 1.27 by emitting footer manually (#2333)
  • ctr-remote i optimize: GPU: migrate to CDI (#2334)
  • fs: add ns query parameter to mirror requests per OCI distribution spec (#2363), thanks to @​simonepri
  • fusemanager: Add a dedicated metrics endpoint (#2356), thanks to @​mironovgh
  • estargz: add --estargz-parallelism to control build parallelism (#2341), thanks to @​simonepri
  • Reset instead of dropping registry traffic in integration tests (#2362), thanks to @​kzys
  • Build the k3s node image with make image (#2361), thanks to @​kzys
  • simplify waiter implementation in fs (#2270), thanks to @​wswsmao
  • estargz: fix panic in GzipDecompressor.ParseFooter on empty Extra field (#2256), thanks to @​kylos101
  • go.mod remove excludes that are no longer needed (#2254), thanks to @​thaJeztah
  • estargz: deprecate errorutil in favor of native errors.Join (#2247), thanks to @​thaJeztah
  • estargz: Build: replace golang.org/x/sync with WaitGroup.Go (go1.25) (#2249), thanks to @​thaJeztah
  • modernize some code (#2248), thanks to @​thaJeztah

v0.18.2

Notable Changes

  • Fixed restart failure when kubeconfig-based authentication is enabled (#2217)
  • Fixed the filesystem to display ".." and "." entries in directories (#2188)
  • Allowed asynchronous prefetch via configurable threshold (#2216), thanks to @​wswsmao
  • Allowed configuring the global request timeout duration (#2215), thanks to @​wswsmao
  • Allowed optionally adding log file access information on first access (#2205), thanks to @​wswsmao
  • Fixed ctr-remote's "-t" flag's not defined error when optimizing an image (#2186), thanks to @​bettermultiply
  • Fixed ctr-remote's "--reuse" flag being ignored when "--no-optimize" is set (#2206), thanks to @​wswsmao
  • Fixed passthrough mode to ensure closing fds (#2226), thanks to @​luochenglcs
  • Fixed incorrect variable assign in the estargz lib (#2222), thanks to @​bettermultiply
  • Fixed errors in k3s CI (#2207), thanks to @​wswsmao

v0.18.1

Notable Changes

  • Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
  • Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

  • Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
  • Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
  • Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy

... (truncated)

Commits
  • 1bcc28b Merge pull request #2407 from ktock/prepare-0.19.0
  • ae2958c Prepare for v0.19.0
  • 543a9b0 CI: fix TTY error of docker exec
  • 14cc201 fix go.mod with make vendor
  • 43f2fe6 CI: fix flakiness of CRIValidationContainerd
  • 23cdd04 Merge commit from fork
  • 6bc91be Merge commit from fork
  • d299bec docs: add kubelet configuration sections
  • b008eee ctr-remote: call verifier before pulling an image
  • a7df9a0 estargz: add a test for cyclic hardlink
  • Additional commits viewable in compare view

Updates github.com/containerd/typeurl/v2 from 2.2.3 to 2.3.0

Release notes

Sourced from github.com/containerd/typeurl/v2's releases.

v2.3.0

What's Changed

Full Changelog: containerd/typeurl@v2.2.2...v2.3.0

Commits
  • 125f779 Merge pull request #53 from cpuguy83/main_fix_json
  • 75963df Fix unmarshalling of registered types
  • a1e63f0 Merge pull request #51 from dmcgowan/remove-gogo-proto
  • 073c67d Remove gogo protobuf support
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the containerd group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/console](https://github.com/containerd/console) | `1.0.4` | `1.0.5` |
| [github.com/containerd/containerd/api](https://github.com/containerd/containerd) | `1.8.0` | `1.12.0` |
| [github.com/containerd/continuity](https://github.com/containerd/continuity) | `0.4.5` | `0.5.0` |
| [github.com/containerd/go-cni](https://github.com/containerd/go-cni) | `1.1.12` | `1.1.14` |
| [github.com/containerd/imgcrypt/v2](https://github.com/containerd/imgcrypt) | `2.0.1` | `2.0.3` |
| [github.com/containerd/log](https://github.com/containerd/log) | `0.1.0` | `0.2.0` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.1` | `1.0.0-rc.4` |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.16.3` | `0.19.0` |
| [github.com/containerd/typeurl/v2](https://github.com/containerd/typeurl) | `2.2.3` | `2.3.0` |


Updates `github.com/containerd/console` from 1.0.4 to 1.0.5
- [Release notes](https://github.com/containerd/console/releases)
- [Commits](containerd/console@v1.0.4...v1.0.5)

Updates `github.com/containerd/containerd/api` from 1.8.0 to 1.12.0
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@api/v1.8.0...api/v1.12.0)

Updates `github.com/containerd/continuity` from 0.4.5 to 0.5.0
- [Release notes](https://github.com/containerd/continuity/releases)
- [Commits](containerd/continuity@v0.4.5...v0.5.0)

Updates `github.com/containerd/go-cni` from 1.1.12 to 1.1.14
- [Release notes](https://github.com/containerd/go-cni/releases)
- [Commits](containerd/go-cni@v1.1.12...v1.1.14)

Updates `github.com/containerd/imgcrypt/v2` from 2.0.1 to 2.0.3
- [Release notes](https://github.com/containerd/imgcrypt/releases)
- [Changelog](https://github.com/containerd/imgcrypt/blob/main/CHANGES)
- [Commits](containerd/imgcrypt@v2.0.1...v2.0.3)

Updates `github.com/containerd/log` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/containerd/log/releases)
- [Commits](containerd/log@v0.1.0...v0.2.0)

Updates `github.com/containerd/platforms` from 1.0.0-rc.1 to 1.0.0-rc.4
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.4)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.16.3 to 0.19.0
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.16.3...v0.19.0)

Updates `github.com/containerd/typeurl/v2` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/containerd/typeurl/releases)
- [Commits](containerd/typeurl@v2.2.3...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/console
  dependency-version: 1.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: containerd
- dependency-name: github.com/containerd/containerd/api
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: containerd
- dependency-name: github.com/containerd/continuity
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: containerd
- dependency-name: github.com/containerd/go-cni
  dependency-version: 1.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: containerd
- dependency-name: github.com/containerd/imgcrypt/v2
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: containerd
- dependency-name: github.com/containerd/log
  dependency-version: 0.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: containerd
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: containerd
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: containerd
- dependency-name: github.com/containerd/typeurl/v2
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: containerd
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants