chore(deps): update module github.com/microsoft/hcsshim to v0.14.1

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/Microsoft/hcsshim	v0.12.2 → v0.14.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

Microsoft/hcsshim (github.com/Microsoft/hcsshim)

v0.14.1

Compare Source

What's Changed

fb5aa2e - Maksim An (2026-04-07): upgrade dependencies to fix CI
9a434d6 - Dawei Wei (2026-03-06): shim: skip SandboxPlatform validation when platform is not explicitly set (#​2620)
98d74bb - Cory Snider (2026-02-10): WCOW: restore support for client-mounted roots (#​2595)

Full Changelog: microsoft/hcsshim@v0.14.0...v0.14.1

v0.14.0

Compare Source

This is a non-rc v0.14.0 release, which is the same as https://github.com/microsoft/hcsshim/releases/tag/v0.14.0-rc.1

What's Changed

• Use multi-error for annotation processing by @​helsaawy in microsoft#2419
• Add rootfs.exe tool to merge tar image layers by @​helsaawy in microsoft#2424
• Support for querying disks based on LUN by @​ambarve in microsoft#2421
• Tool for extracting UtilityVM files from a container layer into a CIM by @​ambarve in microsoft#2423
• Add uvm:// mount support for LCOW by @​helsaawy in microsoft#2430
• Bump google.golang.org/grpc from 1.69.0 to 1.72.1 in /test by @​dependabot[bot] in microsoft#2432
• Bump golang.org/x/sync from 0.13.0 to 0.14.0 in /test by @​dependabot[bot] in microsoft#2433
• Store extraction error for LazyImageLayers by @​helsaawy in microsoft#2429
• Switch to golangci-lint v2 by @​helsaawy in microsoft#2440
• SecurityPolicy: Add leading and trailing checks for env variables by @​MahatiC in microsoft#2431
• Trim LCOW GetProperties response by @​helsaawy in microsoft#2458
• Swap EvalSymlinks with ResolvePath by @​helsaawy in microsoft#2455
• Bug: when searching for LinuxBootFiles by @​helsaawy in microsoft#2454
• Organize annotations; change annotation expansions by @​helsaawy in microsoft#2449
• Omnibus dependabot update by @​helsaawy in microsoft#2442
• lcow: disable virtio-vsock init by @​anmaxvl in microsoft#2461
• Initial support for verified CIMs by @​ambarve in microsoft#2448
• Move hcsshim/main to containerd v2.1.2 and update CIs to WS2025 by @​kiashok in microsoft#2425
• Validate runhcs sandbox isolation and platform by @​helsaawy in microsoft#2473
• log mkfs.ext4 stderr output by @​anmaxvl in microsoft#2474
• Bump golang.org/x/sys from 0.33.0 to 0.34.0 in /test by @​dependabot[bot] in microsoft#2480
• Remove WS2025 from CIs by @​kiashok in microsoft#2483
• Gcs sidecar framework by @​kiashok in microsoft#2422
• Support for importing verified block CIM layers by @​ambarve in microsoft#2456
• Warn on incomplete vNUMA setting, clarify field names by @​helsaawy in microsoft#2466
• Fix CUDA for non-privileged containers by @​helsaawy in microsoft#2492
• fixes to uvmboot by @​ambarve in microsoft#2494
• Bump actions/checkout from 4 to 5 by @​dependabot[bot] in microsoft#2499

Full Changelog: microsoft/hcsshim@v0.13.0...v0.14.0

v0.13.0

Compare Source

What's Changed

• Enable Windows UVM functional tests by @​jiechen0826 in microsoft#2338
• Add support for HCN v2 endpoint and add unit tests by @​katiewasnothere in microsoft#2343
• Skip HVSock_* flaky tests until they are fixed by @​jiechen0826 in microsoft#2365
• Fix duplicate artifact name in github CI by @​jiechen0826 in microsoft#2366
• Fix TestLCOW_IPv6_Assignment functional test by @​katiewasnothere in microsoft#2359
• Enabled Linux UVM tests to run on 1ES github runner pool by @​jiechen0826 in microsoft#2357
• Revert "Enabled Linux UVM tests to run on 1ES github runner pool" by @​jiechen0826 in microsoft#2378
• github-actions: update lint action by @​anmaxvl in microsoft#2379
• fix golangci-lint config by @​anmaxvl in microsoft#2387
• HvSocket support for containers by @​anmaxvl in microsoft#2353
• feature: cross-container named pipes by @​anmaxvl in microsoft#2358
• tooling: allow pause container to be run in privileged mode by @​anmaxvl in microsoft#2406
• Initial support for creating confidential windows UtilityVMs by @​ambarve in microsoft#2388
• Deps/crypto vulnFix golang.org/x/crypto vulnerability by @​helsaawy in microsoft#2416
• rego policy enforcer should use the same user parsing logic as GCS by @​anmaxvl in microsoft#2405

New Contributors

• @​jiechen0826 made their first contribution in microsoft#2338

Full Changelog: microsoft/hcsshim@v0.13.0-rc.3...v0.13.0

v0.12.9

Compare Source

What's Changed

• [release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by @​kiashok in microsoft#2301

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

Compare Source

What's Changed

• Fixing typo by @​ritikaguptams in microsoft#2289
• [release/0.12] Update containerd to v1.7.23 by @​dmcgowan in microsoft#2295

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

Compare Source

What's Changed

• [release/0.12] Update pkg versions in go.mod by @​kiashok in microsoft#2275
• [release/0.12] Update runc version to 1.1.14 by @​kiashok in microsoft#2271

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

Compare Source

What's Changed

• [release/0.12] Backport commits from hcsshim/main to update module versions by @​kiashok in microsoft#2237

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

v0.12.5

Compare Source

What's Changed

• [release/0.12] Adding state attribute to the HNSEndpoint struct to support hyperv co… by @​ritikaguptams in microsoft#2183
• [release/0.12] vendor: github.com/containerd/containerd v17.18 by @​thaJeztah in microsoft#2186
• [release/0.12] Backport networking commits for L1VH feature by @​princepereira in microsoft#2205

Full Changelog: microsoft/hcsshim@v0.12.4...v0.12.5

v0.12.4

Compare Source

What's Changed

• [release/0.12] Backport networking commits by @​kiashok in microsoft#2157

Full Changelog: microsoft/hcsshim@v0.12.3...v0.12.4

v0.12.3

Compare Source

What's Changed

• [release/0.12] Update go-winio to v0.6.2 by @​kiashok in microsoft#2114

Full Changelog: microsoft/hcsshim@v0.12.2...v0.12.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud