chore(deps): update module github.com/containerd/containerd to v2#805
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
Conversation
Reviewer's guide (collapsed on small PRs)Reviewer's GuideUpdates the Go module dependency from containerd v1.7 to the new v2 major version (v2.3.0) using the v2 module path, without any other code changes in this repository. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
Hey - I've left some high level feedback:
- Since containerd v2 uses a new module path (
github.com/containerd/containerd/v2), make sure all code imports and any referenced APIs are updated to the v2 path and semantics rather than just changing the go.mod requirement. - After switching to
github.com/containerd/containerd/v2 v2.3.0, rungo mod tidyto remove any stale v1.x references and ensure the module graph is consistent.
Prompt for AI Agents
Please address the comments from this code review:
## Overall Comments
- Since containerd v2 uses a new module path (`github.com/containerd/containerd/v2`), make sure all code imports and any referenced APIs are updated to the v2 path and semantics rather than just changing the go.mod requirement.
- After switching to `github.com/containerd/containerd/v2 v2.3.0`, run `go mod tidy` to remove any stale v1.x references and ensure the module graph is consistent.Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/release/2.y.z/github.com-containerd-containerd-2.x
branch
from
9ed9dd1 to
64bc1d8
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.7.31→v2.3.1Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
containerd/containerd (github.com/containerd/containerd)
v2.3.1: containerd 2.3.1Compare Source
Welcome to the v2.3.1 release of containerd!
The first patch release for containerd 2.3 contains various fixes and improvements.
Security Updates
Highlights
Image Storage
Runtime
Snapshotters
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
24 commits
58af96519Prepare release notes for v2.3.18f0b3ca83Update api to v1.11.1a05ae7885oci: return explicit error for out-of-range USER valuesda7aef299Prepare release notes for api/v1.11.15282d4e09Wire task address and version fieldse44f5f9ecprotos: include task API address to CreateTaskRequest4d80a31bfseccomp: Block AF_ALG in default socket policy2ed0d97b6seccomp: Document socket rule scope and socketcall limitation3a88fdde0server: tolerate failed gRPC plugins when starting listeners2be0710b8overlay: disable "rebase" capability when running in UserNS3b199c22bUpdate Go to 1.26.31d601271afix: close boltdb on metadata and mount plugin closed666d2e42Refactor transfer unpack configuration setupccc3bd7b9Fix optional transfer differ setupDependency Changes
Previous release can be found at v2.3.0
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
v2.3.0: containerd 2.3.0Compare Source
Welcome to the v2.3.0 release of containerd!
The third minor release of containerd 2.x focuses on continued stability alongside
new features and improvements. This is the third time-based release for containerd.
Starting with containerd 2.3, the project has moved to release cadence aligned with
the Kubernetes release schedule, with new minor releases about every 4 months. The
containerd 2.3 release is also the first annual LTS (Long Term Stable) release under
this new schedule, with support planned for at least two years. Direct upgrades
between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.
Highlights
Container Runtime Interface (CRI)
Image Distribution
Image Storage
Node Resource Interface (NRI)
Runtime
Snapshotters
ctr development tool
Breaking
Deprecations
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Dependency Changes
ad3df93d8f796a0ea5ed0->edf4cb35d4384ea7a43d2->9d38bb4a7a43d2->6f92a3bf2248ac5883c5enew4c0f3b2->28399d8cfa47c3->2d32026Previous release can be found at v2.2.0
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
v2.2.4: containerd 2.2.4Compare Source
Welcome to the v2.2.4 release of containerd!
The fourth patch release for containerd 2.2 contains various fixes
and updates including security patches.
containerd
go-jose
Use mount manager during image volume processing to support snapshotters that require writable block volumes (e.g., EROFS) (#13242)
Fix handling of out-of-range USER values in OCI spec to avoid unexpected username/group lookups (#13448)
Apply hardening to block AF_ALG in default socket policy (#13408)
Fix bugs in sandbox service affecting sandbox creation configuration and event publishing (#13266)
Set AppArmor abi conditionally to support versions < 3.0 (#13275)
Disable overlay "rebase" capability when running in a user namespace to fix layer extraction failures (#13393)
Support both "volatile" and "fsync=volatile" mount options for volatile snapshotter (#13296)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
21 commits
d20c6267boci: return explicit error for out-of-range USER valuesdb34dc4b4seccomp: Block AF_ALG in default socket policy214b141eeseccomp: Document socket rule scope and socketcall limitationc2b1856faupdate Go to 1.25.10, 1.26.363874d262overlay: disable "rebase" capability when running in UserNS2c7d48acfSupport both styles of volatile mount option80311db63chore: update go-jose for CVE-2026-34986caa29a741sandbox: forward Create fields, fix event topics5ab0a1206apparmor: Set abi conditionallyf9c34f7b1Parameterize K8s version in node-e2e workflow39dc2a475cri: use mount manager when image has volumesPrevious release can be found at v2.2.3
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
v2.2.3: containerd 2.2.3Compare Source
Welcome to the v2.2.3 release of containerd!
The third patch release for containerd 2.2 contains various fixes
and updates including a security patch.
Security Updates
Highlights
Container Runtime Interface (CRI)
Go client
Image Distribution
Runtime
Snapshotters
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
40 commits
8a0f4ed5dPrepare release notes for v2.2.331bd34a06update github.com/moby/spdystream v0.5.11336f6c45vendor: github.com/klauspost/compress v1.18.5409f75be8diff/walking: enable mount manager3f33146c1update runhcs to v0.14.18bd1b74e5vendor: github.com/Microsoft/hcsshim v0.14.1c6b0be8e1vendor: github.com/Microsoft/hcsshim v0.14.02ecde8cfeupdate to Go 1.25.9, 1.26.2be554f478Skip TestExportAndImportMultiLayer on s390x660de195bTweak mount info for overlayfs in case of parallel unpackbc9274a4bAdd integration test for issue 13030c387890b5Add integration test for privileged container cgroup mounts047a335a6Forward RUNC_FLAVOR env var down to integration tests9b2d72ee0Preserve host cgroup mount options for privileged containers5b66cd6a0Move cgroup namespace placement higher in spec builder584205c2f[release/2.2] update runc binary to v1.3.577c6886dfIgnore NOCHANGE errorfbed68b8fFix TOCTOU race bug in tar extractiona83510103cri: UpdatePodSandbox should return Unimplementedee4179e52fix(oci): apply absolute symlink resolution to /etc/groupfd061b848test(oci): use fstest and mock fs for better symlink coverage5d44d2c22fix(oci): handle absolute symlinks in rootfs user lookup00c776f07update to go1.25.8, test go1.26.1Dependency Changes
Previous release can be found at v2.2.2
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
v2.2.2: containerd 2.2.2Compare Source
Welcome to the v2.2.2 release of containerd!
The second patch release for containerd 2.2 contains various fixes and improvements.
Highlights
Container Runtime Interface (CRI)
Runtime
ctr development tool
ctr image mountfailing with "no such device" (#12831)Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
48 commits
7e6ecf434Prepare release notes for v2.2.2a20dead7cset default config_path in plugin inita5f83d8c2cri: unpack images with per-layer labels for runtime-specific snapshotters68855cb0bci: modprobe xt_comment on almalinuxef7a8beb3core/mount: add test for getUnprivilegedMountFlags07b2cc07ecore/mount: fix getUnprivilegedMountFlags iterating over indices instead of values54101116fadd integration test for cni result nild44c4384eaddress commentf1835270bfix issue where cni del is never executed6c05047b4apparmor: explicitly set abi/3.05dbf1b915update golangci-lint to v2.9.0 with go1.26 support8ec695eberemove windows/arm from cross buildb9c22a6e3ci: build/test go1.26.009b876a81integration: Fix TestImageLoad() failure on CI172ba65b6cri: Fix image volumes with user namespacesb4240ef87update to go1.24.13, go1.25.794dbfaea7ci: bump go 1.24.12, 1.25.6e46a7a286set fetch-depth for containerd to 0 for version parsingctr image mountfailing with "no such device" (#12831)1d7908273core/mount/manager: fix bind mount missing rbind option3d509bcd3core/mount/manager: add tests for WithTemporary optioncb3ae2119fix: sanitize error before gRPC return to prevent credential leak in pod events533a2552ebuild(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0b120237fbbuild(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.04be4e5156Fix nil pointer dereference in container spec memory metricsa76eb698acri: emit warning for concurrent CreateContainer3d2e188b1cri: Use the runtimeHandler parameter in PullImage633057382cri: move noisy CDI logs to debug level8a7409e2eReinstate image decryptionDependency Changes
a7a43d2->ab9386aa7a43d2->ab9386aPrevious release can be found at v2.2.1
Which file should I download?
containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.
See also the Getting Started documentation.
v2.2.1: containerd 2.2.1Compare Source
Welcome to the v2.2.1 release of containerd!
The first patch release for containerd 2.2 contains various fixes and improvements.
Highlights
Container Runtime Interface (CRI)
Image Distribution
Runtime
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
Changes
53 commits
f6bae1f88Prepare release notes for v2.2.1c22cf5d49cri,nri: pass any linux security profile to plugins.d7532de75cri,nri: pass any linux RDT constraints to plugins.ef36e6181cri,nri: pass any linux net devices to plugins.d56faf426cri,nri: pass any linux scheduler attributes to plugins.e1824d261cri,nri: pass any linux I/O priority to plugins.01d5490aego.{mod,sum}: bump NRI deps to v0.11.0, re-vendor.58d23ab63pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const05ccbb3a7cri/nri: short-circuit nil adjustment.c166a577dgo.{mod,sum} bump CDI deps to v1.1.0.73a08aa00go.mod: remove exclude rulescee08c8afbuild(deps): bump github.cConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.