chore(deps): update module github.com/containerd/containerd to v1.7.33#220
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
Conversation
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.7.30→v1.7.33v1.7.29→v1.7.33Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
containerd/containerd (github.com/containerd/containerd)
v1.7.33: containerd 1.7.33Compare Source
Welcome to the v1.7.33 release of containerd!
The thirty-third patch release for containerd 1.7 contains various fixes
and updates including security patches.
Security Updates
containerd
go-jose
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
17 commits
7517e6737Prepare release notes for v1.7.33ab306518aMerge commit from forkd34cdafdaMerge commit from fork9ab2b7a89Bound user-database file reads in openBoundedUserFile1e9806f90Merge commit from fork4d8ba4d23Do not propagate reserved labels from image configs74c728c13update runc binary to v1.3.6947caa4b7update go to 1.26.4/1.25.11e884e964eConfigure udevd children-max for root-testb9e756888Clean up disk space in node e2e workflow4dfc1844eBump go-jose to v3.0.5 to address CVE-2026-34986Dependency Changes
Previous release can be found at v1.7.32
v1.7.32: containerd 1.7.32Compare Source
Welcome to the v1.7.32 release of containerd!
The thirty-second patch release for containerd 1.7 contains various fixes
and updates including a security patch.
containerd
Allow hosts.toml to contain only root-level fields without an explicit [host] section (#10028)
Fix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (#13450)
Apply hardening to block AF_ALG in default socket policy (#13406)
Support both "volatile" and "fsync=volatile" mount options for volatile snapshotter (#13299)
Set AppArmor abi conditionally to support versions < 3.0 (#13273)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
17 commits
bc87d865cPrepare release notes for v1.7.32503f47946oci: return explicit error for out-of-range USER valuese55b747d3seccomp: Block AF_ALG in default socket policy4627a65f8seccomp: Document socket rule scope and socketcall limitation24007441dFix error parsing hosts.toml without anyhosttree940733149Support both styles of volatile mount option2b732c892apparmor: Set abi conditionally0db1e143aAdd GitHub Action for k8s node e2e tests3223a75c2Update for latest updates to release tool1b30082ebUpdate release process after 1.7This release has no dependency changes
Previous release can be found at v1.7.31
v1.7.31: containerd 1.7.31Compare Source
Welcome to the v1.7.31 release of containerd!
The thirty-first patch release for containerd 1.7 contains various fixes
and updates including a security patch.
Security Updates
Highlights
Container Runtime Interface (CRI)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
37 commits
7d2662653Prepare release notes for v1.7.313f795c02aupdate github.com/moby/spdystream v0.5.17b1e1b17bupdate to Go 1.25.9, 1.26.2b673f2d42update golangci-lint to v2.9.0 with go1.26 supportd88d8513aremove windows/arm from cross builda763407b5Ignore warnings for golangci-lint bump03dcd8360ci: bump golangci from 6.5.2 to 7.0.0c08711218Update github.com/moby/spdystream v0.2.0->v0.5.0043548f6dSkip TestExportAndImportMultiLayer on s390xe99bd6050[release/1.7] update runc binary to v1.3.53a3103aafCODEOWNERS: mark Sam and Chris as owners for 1.79b4cfa271Ignore NOCHANGE error53e9e73f0ci: modprobe xt_comment on almalinux61c2733fdFix TOCTOU race bug in tar extractionf854c1890fix issue where cni del is never executed5c091d92eapparmor: explicitly set abi/3.0177ac10feintegration: Fix TestImageLoad() failure on CI56da43d0fupdate to go1.24.13, go1.25.75cb3cb9baci: bump go 1.24.12, 1.25.6b1fa03843fix: sanitize error before gRPC return to prevent credential leak in pod eventse2c93a42ccri: emit warning for concurrent CreateContainerDependency Changes
Previous release can be found at v1.7.30
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.