Skip to content

pr-tracker#1

Open
y-ykcir wants to merge 1 commit intomainfrom
pr-test
Open

pr-tracker#1
y-ykcir wants to merge 1 commit intomainfrom
pr-test

Conversation

@y-ykcir
Copy link
Copy Markdown
Owner

@y-ykcir y-ykcir commented Sep 25, 2025

No description provided.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Sep 25, 2025

/rerun test1

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #4

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #5

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Sep 25, 2025

/rerun test2

@github-actions
Copy link
Copy Markdown

⚠️ Unable to process the /rerun command: Permission check failed

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #6

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 7, 2025

/rerun
containerd api/v1.10.0-beta.0

https://ift.tt/4hKrEXq

Welcome to the api/v1.10.0-beta.0 release of containerd!

This is a pre-release of containerd

The 11th release for the containerd 1.x API aligns with the containerd 2.2 release.

Highlights

Add mount manager (#12063)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Wei Fu

Changes

6 commits

Prepare release notes for api/v1.10.0-beta.0 (#12346)

aa571f63c Prepare release notes for api/v1.10.0-beta.0

Add mount manager (#12063)

8db301086 Add mounts api service

67fbf9db9 Generate and vendor proto changes

c5097ac63 Add mount manager to protobuf services and types

Dependency Changes

This release has no dependency changes

Previous release can be found at api/v1.9.0

via Release notes from containerd https://ift.tt/SzM5pZg

October 08, 2025 at 04:47AM

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Oct 7, 2025

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #7

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 8, 2025

/rerun
containerd API 1.10.0-beta.1

https://ift.tt/noaES2l

Welcome to the api/v1.10.0-beta.1 release of containerd!

This is a pre-release of containerd

The 11th release for the containerd 1.x API aligns with the containerd 2.2 release.

Highlights

Add mount manager (#12063)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Wei Fu

Changes

6 commits

Prepare release notes for api/v1.10.0-beta.0 (#12346)

aa571f63c Prepare release notes for api/v1.10.0-beta.0

Add mount manager (#12063)

8db301086 Add mounts api service

67fbf9db9 Generate and vendor proto changes

c5097ac63 Add mount manager to protobuf services and types

Dependency Changes

This release has no dependency changes

Previous release can be found at api/v1.9.0

via Release notes from containerd https://ift.tt/SzM5pZg

October 08, 2025 at 08:35AM

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Oct 8, 2025

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📁 Reports have been generated but no PR was created (possibly no new changes).

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 10, 2025

/rerun
containerd 2.2.0-beta.1

https://ift.tt/HwkDRVo

Welcome to the v2.2.0-beta.1 release of containerd!

This is a pre-release of containerd

The second minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the second time-based released for containerd.

This is a beta release and some functionality is still under development.

Highlights

Add mount manager (#12063)

Add conf.d include in the default config (#12323)

Add support for back references in the garbage collector (#12025)

Go client

Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

Add referrers fetcher to remotes (#12309)

Tar unpack progress through transfer service (#11921)

Image Storage

Add snapshotter and differ for block CIMs (#12050)

Add tar index mode to erofs snapshotter (#11919)

Node Resource Interface (NRI)

Enable otel traces in NRI (#12082)

Add WASM plugin support (containerd/nri#121)

Runtime

Fix pidfd leak in UnshareAfterEnterUserns (#12167)

Deprecations

1.6 is EOL (#12348)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Phil Estes

Maksym Pavlenko

Krisztian Litkey

Akihiro Suda

Mike Brown

Wei Fu

Markus Lehtonen

Sebastiaan van Stijn

Samuel Karp

Austin Vazquez

ningmingxiao

yashsingh74

Jin Dong

Kirtana Ashok

Aadhar Agarwal

Chris Henzie

Etienne Champetier

Rodrigo Campos

Akhil Mohan

Gao Xiang

Sascha Grunert

Henry Wang

Aleksa Sarai

Eric Mountain

Keith Mattix II

Paweł Gronowski

Adrien Delorme

Apurv Barve

Enji Cooper

Kohei Tokunaga

Rehan Khan

Yang Yang

jokemanfire

Amit Barve

Andrew Halaney

Antonio Ojea

Brian Goff

Carlos Eduardo Arango Gutierrez

Chenyang Yan

Dawei Wei

Divya Rani

Fabiano Fidêncio

Iceber Gu

Jared Ledvina

Jonathan Perkin

Jose Fernandez

Karl Baumgartner

Osama Abdelkader

Radostin Stoyanov

Ruidong Cao

Sameer

Sergey Kanzhelev

Swagat Bora

Sylvain MOUQUET

Tom Wieczorek

Tycho Andersen

Tõnis Tiigi

Wuyue (Tony) Sun

jinda.ljd

tanhuaan

zounengren

Dependency Changes

dario.cat/mergo v1.0.1 -> v1.0.2

github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1

github.com/StackExchange/wmi cbe66965904d new

github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0

github.com/containerd/console v1.0.4 -> v1.0.5

github.com/containerd/containerd/api v1.9.0 -> v1.10.0-beta.1

github.com/containerd/go-cni v1.1.12 -> v1.1.13

github.com/containerd/nri v0.8.0 -> v0.10.0

github.com/containernetworking/plugins v1.7.1 -> v1.8.0

github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0

github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7

github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0

github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0

github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2

github.com/go-logr/logr v1.4.2 -> v1.4.3

github.com/go-ole/go-ole v1.2.6 new

github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8

github.com/google/certtostore v1.0.6 new

github.com/google/deck 105ad94aa8ae new

github.com/gorilla/websocket v1.5.0 -> e064f32e3674

github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0

github.com/hashicorp/errwrap v1.1.0 new

github.com/intel/goresctrl v0.8.0 -> v0.9.0

github.com/knqyf263/go-plugin v0.9.0 new

github.com/moby/sys/capability v0.4.0 new

github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee

github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2

github.com/prometheus/client_golang v1.22.0 -> v1.23.2

github.com/prometheus/client_model v0.6.1 -> v0.6.2

github.com/prometheus/common v0.62.0 -> v0.66.1

github.com/prometheus/procfs v0.15.1 -> v0.16.1

github.com/stretchr/testify v1.10.0 -> v1.11.1

github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3

github.com/tetratelabs/wazero v1.9.0 new

github.com/urfave/cli/v2 v2.27.6 -> v2.27.7

github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1

go.etcd.io/bbolt v1.4.0 -> v1.4.3

go.opentelemetry.io/otel v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0

go.uber.org/goleak v1.3.0 new

go.yaml.in/yaml/v2 v2.4.2 new

golang.org/x/crypto v0.36.0 -> v0.41.0

golang.org/x/mod v0.24.0 -> v0.28.0

golang.org/x/net v0.38.0 -> v0.43.0

golang.org/x/oauth2 v0.27.0 -> v0.30.0

golang.org/x/sync v0.14.0 -> v0.17.0

golang.org/x/sys v0.33.0 -> v0.36.0

golang.org/x/term v0.30.0 -> v0.34.0

golang.org/x/text v0.23.0 -> v0.28.0

golang.org/x/time v0.7.0 -> v0.9.0

google.golang.org/genproto/googleapis/api 56aae31c358a -> a7a43d27e69b

google.golang.org/genproto/googleapis/rpc 56aae31c358a -> a7a43d27e69b

google.golang.org/grpc v1.72.0 -> v1.76.0

google.golang.org/protobuf v1.36.6 -> v1.36.10

k8s.io/api v0.32.3 -> v0.34.1

k8s.io/apimachinery v0.32.3 -> v0.34.1

k8s.io/client-go v0.32.3 -> v0.34.1

k8s.io/cri-api v0.32.3 -> v0.34.1

k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397

sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8

sigs.k8s.io/randfill v1.0.0 new

sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new

sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v2.1.0

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/gwzboE2

October 11, 2025 at 02:17AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #8

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 22, 2025

/rerun
containerd 2.2.0-beta.2

https://ift.tt/GAyU6lX

Welcome to the v2.2.0-beta.2 release of containerd!

This is a pre-release of containerd

The second minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the second time-based released for containerd.

This is a beta release and some functionality is still under development.

Highlights

Update erofs snapshotter to use mount manager (#12333)

Add mount manager (#12063)

Add conf.d include in the default config (#12323)

Add support for back references in the garbage collector (#12025)

Go client

Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

Add referrers fetcher to remotes (#12309)

Tar unpack progress through transfer service (#11921)

Image Storage

Add snapshotter and differ for block CIMs (#12050)

Add tar index mode to erofs snapshotter (#11919)

Node Resource Interface (NRI)

Enable otel traces in NRI (#12082)

Add WASM plugin support (containerd/nri#121)

Runtime

Improve shim load time after restart by loading in parallel (#12142)

Fix pidfd leak in UnshareAfterEnterUserns (#12167)

Deprecations

1.6 is EOL (#12348)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Phil Estes

Maksym Pavlenko

Akihiro Suda

Krisztian Litkey

Mike Brown

Wei Fu

Markus Lehtonen

Sebastiaan van Stijn

Samuel Karp

ningmingxiao

Austin Vazquez

yashsingh74

Jin Dong

Chris Henzie

Gao Xiang

Kirtana Ashok

Aadhar Agarwal

Etienne Champetier

Rodrigo Campos

Akhil Mohan

Sascha Grunert

Henry Wang

Aleksa Sarai

Eric Mountain

Keith Mattix II

Paweł Gronowski

Adrien Delorme

Apurv Barve

Enji Cooper

Kohei Tokunaga

Max Jonas Werner

Rehan Khan

Tõnis Tiigi

Yang Yang

jinda.ljd

jokemanfire

Amit Barve

Andrew Halaney

Antonio Ojea

Brian Goff

Carlos Eduardo Arango Gutierrez

Chenyang Yan

Dawei Wei

Divya Rani

Fabiano Fidêncio

Iceber Gu

Jared Ledvina

Jonathan Perkin

Jose Fernandez

Karl Baumgartner

Osama Abdelkader

Radostin Stoyanov

Ruidong Cao

Sameer

Sergey Kanzhelev

Swagat Bora

Sylvain MOUQUET

Tom Wieczorek

Tycho Andersen

Ubuntu

Wuyue (Tony) Sun

suranmiao

tanhuaan

zounengren

Dependency Changes

dario.cat/mergo v1.0.1 -> v1.0.2

github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1

github.com/StackExchange/wmi cbe66965904d new

github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0

github.com/containerd/console v1.0.4 -> v1.0.5

github.com/containerd/containerd/api v1.9.0 -> v1.10.0-beta.1

github.com/containerd/go-cni v1.1.12 -> v1.1.13

github.com/containerd/nri v0.8.0 -> v0.10.0

github.com/containernetworking/plugins v1.7.1 -> v1.8.0

github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0

github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7

github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0

github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0

github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2

github.com/go-logr/logr v1.4.2 -> v1.4.3

github.com/go-ole/go-ole v1.2.6 new

github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8

github.com/google/certtostore v1.0.6 new

github.com/google/deck 105ad94aa8ae new

github.com/gorilla/websocket v1.5.0 -> e064f32e3674

github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0

github.com/hashicorp/errwrap v1.1.0 new

github.com/intel/goresctrl v0.8.0 -> v0.9.0

github.com/klauspost/compress v1.18.0 -> v1.18.1

github.com/knqyf263/go-plugin v0.9.0 new

github.com/moby/sys/capability v0.4.0 new

github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee

github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2

github.com/prometheus/client_golang v1.22.0 -> v1.23.2

github.com/prometheus/client_model v0.6.1 -> v0.6.2

github.com/prometheus/common v0.62.0 -> v0.66.1

github.com/prometheus/procfs v0.15.1 -> v0.16.1

github.com/stretchr/testify v1.10.0 -> v1.11.1

github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3

github.com/tetratelabs/wazero v1.9.0 new

github.com/urfave/cli/v2 v2.27.6 -> v2.27.7

github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1

go.etcd.io/bbolt v1.4.0 -> v1.4.3

go.opentelemetry.io/otel v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0

go.uber.org/goleak v1.3.0 new

go.yaml.in/yaml/v2 v2.4.2 new

golang.org/x/crypto v0.36.0 -> v0.41.0

golang.org/x/mod v0.24.0 -> v0.29.0

golang.org/x/net v0.38.0 -> v0.43.0

golang.org/x/oauth2 v0.27.0 -> v0.30.0

golang.org/x/sync v0.14.0 -> v0.17.0

golang.org/x/sys v0.33.0 -> v0.37.0

golang.org/x/term v0.30.0 -> v0.34.0

golang.org/x/text v0.23.0 -> v0.28.0

golang.org/x/time v0.7.0 -> v0.9.0

google.golang.org/genproto/googleapis/api 56aae31c358a -> a7a43d27e69b

google.golang.org/genproto/googleapis/rpc 56aae31c358a -> a7a43d27e69b

google.golang.org/grpc v1.72.0 -> v1.76.0

google.golang.org/protobuf v1.36.6 -> v1.36.10

k8s.io/api v0.32.3 -> v0.34.1

k8s.io/apimachinery v0.32.3 -> v0.34.1

k8s.io/client-go v0.32.3 -> v0.34.1

k8s.io/cri-api v0.32.3 -> v0.34.1

k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397

sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8

sigs.k8s.io/randfill v1.0.0 new

sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new

sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v2.1.0

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/dI1bTBv

October 22, 2025 at 11:04AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #9

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 24, 2025

/rerun
containerd API 1.10.0-rc.0

https://ift.tt/wA7sPge

Welcome to the api/v1.10.0-rc.0 release of containerd!

This is a pre-release of containerd

The 11th release for the containerd 1.x API aligns with the containerd 2.2 release.

Highlights

Add mount manager (#12063)

Image Distribution

Add parallel unpack support (#12332)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Henry Wang

Wei Fu

Changes

10 commits

Prepare release notes for api/v1.10.0-rc.0 (#12408)

fbc7848f2 Prepare release notes for api/v1.10.0-rc.0

Add parallel unpack support (#12332)

0198b87fc Implement parallel unpack

Prepare release notes for api/v1.10.0-beta.0 (#12346)

aa571f63c Prepare release notes for api/v1.10.0-beta.0

Add mount manager (#12063)

8db301086 Add mounts api service

67fbf9db9 Generate and vendor proto changes

c5097ac63 Add mount manager to protobuf services and types

Dependency Changes

This release has no dependency changes

Previous release can be found at api/v1.9.0

via Release notes from containerd https://ift.tt/XBYqc7U

October 25, 2025 at 06:54AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #10

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Oct 30, 2025

/rerun
containerd 2.2.0-rc.0

https://ift.tt/eiHqT4j

Welcome to the v2.2.0-rc.0 release of containerd!

This is a pre-release of containerd

The second minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the second time-based released for containerd.

Highlights

Add mount manager (#12063)

Add conf.d include in the default config (#12323)

Add support for back references in the garbage collector (#12025)

Container Runtime Interface (CRI)

Implement CRI ListPodSandboxMetrics (#10691)

Support image volume mount subpath (#11578)

Go client

Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

Add parallel unpack support (#12332)

Add referrers fetcher to remotes (#12309)

Tar unpack progress through transfer service (#11921)

Image Storage

Update erofs snapshotter to use mount manager (#12333)

Add snapshotter and differ for block CIMs (#12050)

Add tar index mode to erofs snapshotter (#11919)

Node Resource Interface (NRI)

Enable otel traces in NRI (#12082)

Add WASM plugin support (containerd/nri#121)

Runtime

Improve shim load time after restart by loading in parallel (#12142)

Fix pidfd leak in UnshareAfterEnterUserns (#12167)

Deprecations

Postpone v2.2 deprecation items to v2.3 (#12417)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Phil Estes

Akihiro Suda

Maksym Pavlenko

Krisztian Litkey

Wei Fu

Mike Brown

Markus Lehtonen

Sebastiaan van Stijn

Samuel Karp

ningmingxiao

Akhil Mohan

Austin Vazquez

yashsingh74

Gao Xiang

Jin Dong

Chris Henzie

Kirtana Ashok

Aadhar Agarwal

Etienne Champetier

Henry Wang

Rodrigo Campos

Sascha Grunert

Aleksa Sarai

Eric Mountain

Keith Mattix II

Paweł Gronowski

Tõnis Tiigi

Adrien Delorme

Apurv Barve

Enji Cooper

Kohei Tokunaga

Max Jonas Werner

Rehan Khan

Yang Yang

jinda.ljd

jokemanfire

Amit Barve

Andrew Halaney

Antonio Ojea

Brian Goff

Carlos Eduardo Arango Gutierrez

Chenyang Yan

Dawei Wei

Divya Rani

Evan Anderson

Fabiano Fidêncio

Iceber Gu

Jared Ledvina

Jonathan Perkin

Jose Fernandez

Karl Baumgartner

Osama Abdelkader

Radostin Stoyanov

Ruidong Cao

Sameer

Sergey Kanzhelev

Swagat Bora

Sylvain MOUQUET

Tom Wieczorek

Tycho Andersen

Ubuntu

Wuyue (Tony) Sun

suranmiao

tanhuaan

zounengren

Dependency Changes

dario.cat/mergo v1.0.1 -> v1.0.2

github.com/Microsoft/hcsshim v0.13.0-rc.3 -> v0.14.0-rc.1

github.com/StackExchange/wmi cbe66965904d new

github.com/checkpoint-restore/checkpointctl v1.3.0 -> v1.4.0

github.com/containerd/cgroups/v3 v3.0.5 -> v3.1.0

github.com/containerd/console v1.0.4 -> v1.0.5

github.com/containerd/containerd/api v1.9.0 -> v1.10.0-rc.0

github.com/containerd/go-cni v1.1.12 -> v1.1.13

github.com/containerd/nri v0.8.0 -> v0.10.0

github.com/containernetworking/plugins v1.7.1 -> v1.8.0

github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0

github.com/cpuguy83/go-md2man/v2 v2.0.5 -> v2.0.7

github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0

github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0

github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.2

github.com/go-logr/logr v1.4.2 -> v1.4.3

github.com/go-ole/go-ole v1.2.6 new

github.com/golang/groupcache 41bb18bfe9da -> 2c02b8208cf8

github.com/google/certtostore v1.0.6 new

github.com/google/deck 105ad94aa8ae new

github.com/gorilla/websocket v1.5.0 -> e064f32e3674

github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 -> v1.1.0

github.com/hashicorp/errwrap v1.1.0 new

github.com/intel/goresctrl v0.8.0 -> v0.9.0

github.com/klauspost/compress v1.18.0 -> v1.18.1

github.com/knqyf263/go-plugin v0.9.0 new

github.com/moby/sys/capability v0.4.0 new

github.com/modern-go/reflect2 v1.0.2 -> 35a7c28c31ee

github.com/opencontainers/runtime-tools 2e043c6bd626 -> 0ea5ed0382a2

github.com/prometheus/client_golang v1.22.0 -> v1.23.2

github.com/prometheus/client_model v0.6.1 -> v0.6.2

github.com/prometheus/common v0.62.0 -> v0.66.1

github.com/prometheus/procfs v0.15.1 -> v0.16.1

github.com/stretchr/testify v1.10.0 -> v1.11.1

github.com/tchap/go-patricia/v2 v2.3.2 -> v2.3.3

github.com/tetratelabs/wazero v1.9.0 new

github.com/urfave/cli/v2 v2.27.6 -> v2.27.7

github.com/vishvananda/netlink 0e7078ed04c8 -> v1.3.1

go.etcd.io/bbolt v1.4.0 -> v1.4.3

go.opentelemetry.io/otel v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/metric v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/sdk v1.35.0 -> v1.37.0

go.opentelemetry.io/otel/trace v1.35.0 -> v1.37.0

go.uber.org/goleak v1.3.0 new

go.yaml.in/yaml/v2 v2.4.2 new

golang.org/x/crypto v0.36.0 -> v0.41.0

golang.org/x/mod v0.24.0 -> v0.29.0

golang.org/x/net v0.38.0 -> v0.43.0

golang.org/x/oauth2 v0.27.0 -> v0.30.0

golang.org/x/sync v0.14.0 -> v0.17.0

golang.org/x/sys v0.33.0 -> v0.37.0

golang.org/x/term v0.30.0 -> v0.34.0

golang.org/x/text v0.23.0 -> v0.28.0

golang.org/x/time v0.7.0 -> v0.14.0

google.golang.org/genproto/googleapis/api 56aae31c358a -> a7a43d27e69b

google.golang.org/genproto/googleapis/rpc 56aae31c358a -> a7a43d27e69b

google.golang.org/grpc v1.72.0 -> v1.76.0

google.golang.org/protobuf v1.36.6 -> v1.36.10

k8s.io/api v0.32.3 -> v0.34.1

k8s.io/apimachinery v0.32.3 -> v0.34.1

k8s.io/client-go v0.32.3 -> v0.34.1

k8s.io/cri-api v0.32.3 -> v0.34.1

k8s.io/utils 3ea5e8cea738 -> 4c0f3b243397

sigs.k8s.io/json 9aa6b5e7a4b3 -> cfa47c3a1cc8

sigs.k8s.io/randfill v1.0.0 new

sigs.k8s.io/structured-merge-diff/v6 v6.3.0 new

sigs.k8s.io/yaml v1.4.0 -> v1.6.0

Previous release can be found at v2.1.0

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/mah3Zqr

October 30, 2025 at 01:03PM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #11

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Mar 17, 2026

/rerun
containerd API 1.11.0-beta.0

https://ift.tt/QZrRTEt

Welcome to the api/v1.11.0-beta.0 release of containerd!

This is a pre-release of containerd

The 12th release for the containerd 1.x API aligns with the containerd 2.3 release.

Highlights

Update sandbox API to include spec field (#12840)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Derek McGowan

Sebastiaan van Stijn

Wei Fu

Changes

18 commits

Prepare release notes for api/v1.11.0-beta.0 (#13045)

aac6b5348 Prepare release notes for api/v1.11.0-beta.0

api: regenerate and re-vendor protos (#12913)

4b4eb6715 api: regenerate and re-vendor protos

Remove Container field from sandbox metadata (#12840)

8ccf18724 Update sandbox API to include spec field

Use buf to format proto files (#12841)

ca1c5b2d3 Reformat and revendor proto files

2a87c9d7d Add .editorconfig for proto files

Generate api/next.txtpb and name module (#12815)

472e0a8e7 Generate next.txtpb to replace next.pb.txt

f58dbbda0 Add buf.build repository name for publishing API

Migrate from protobuild to buf (#12762)

dac9721fa Drop outdated pb.txt files

6a6283193 Update pb files

57782b717 Move buf configuration under api/

39991b661 Use relative import intead of GOPATH style imports

eb586b5ef Regenerate proto files

Dependency Changes

This release has no dependency changes

Previous release can be found at api/v1.10.0

via Release notes from containerd https://ift.tt/Da5xCdr

March 18, 2026 at 01:48AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #23

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Mar 18, 2026

/rerun
containerd 2.3.0-beta.0

https://ift.tt/GZPEUea

Welcome to the v2.3.0-beta.0 release of containerd!

This is a pre-release of containerd

The third minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with

the Kubernetes release schedule, with new minor releases about every 4 months. The

containerd 2.3 release is also the first annual LTS (Long Term Stable) release under

this new schedule, with support planned for at least two years. Direct upgrades

between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

This is a beta release and some functionality is still under development.

Highlights

Update plugin config migration to run on load (#12608)

Detect vendor in cdi specs to generate device IDs for --gpus (#12839)

Update sandbox API to include spec field (#12840)

Container Runtime Interface (CRI)

Unpack images with per-layer labels for specific runtime (#12835)

Populate ImageId field in container status (#12787)

Set annotations parameter in CreateSandbox request (#12566)

Image Distribution

Add EROFS layer media type (#12567)

Image Storage

Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

Node Resource Interface (NRI)

Pass container user (uid, gids) to plugins (#12769)

Pass seccomp policy to plugins (#12768)

Pass any POSIX rlimits to plugins (#12765)

Pass extended container status to NRI. (#12770)

Pass injected CDI devices to plugins (#12767)

Pass linux sysctl to plugins (#12766)

Runtime

Use new filtered cgroups stats API (#12901)

Update OOMKilled event handling (#12714)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Sebastiaan van Stijn

Krisztian Litkey

Wei Fu

Derek McGowan

Phil Estes

Akihiro Suda

Markus Lehtonen

Mike Brown

Samuel Karp

Akhil Mohan

Davanum Srinivas

Kazuyoshi Kato

ningmingxiao

Aadhar Agarwal

Andrew Halaney

Gao Xiang

Michael Zappa

Paweł Gronowski

Fabiano Fidêncio

Paulo Oliveira

Shiv Tyagi

Austin Vazquez

Avinesh Singh

ChengyuZhu6

Chris Henzie

Jin Dong

Jérôme Poulin

Luke Hinds

Sascha Grunert

majianhan

Adrien Delorme

Albin Kerouanton

Alex Chernyakhovsky

Andrey Noskov

Anuj Singh

Apurv Barve

Brian Goff

Champ-Goblem

Chris Adeniyi-Jones

Cindia-blue

CrazyMax

Danny Canter

Evan Lezar

Gaurav Ghildiyal

Harsh Rawat

Hayato Kiwata

Kal

Manuel de Brito Fontes

Neeraj Krishna Gopalakrishna

Rodrigo Campos

Shachar Tal

Shaobao Feng

Shiming Zhang

Tariq Ibrahim

Tim Windelschmidt

Tõnis Tiigi

Wade Simmons

Yohei Yamamoto

You Binhao

Youfu Zhang

bo.jiang

chris-henderson-alation

jinda.ljd

qiuxue

Dependency Changes

cyphar.com/go-pathrs v0.2.1 new

github.com/cenkalti/backoff/v5 v5.0.3 new

github.com/checkpoint-restore/checkpointctl v1.4.0 -> v1.5.0

github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.3

github.com/containerd/containerd/api v1.10.0 -> v1.11.0-beta.0

github.com/containerd/imgcrypt/v2 v2.0.1 -> v2.0.2

github.com/containerd/nri v0.10.0 -> v0.11.0

github.com/containerd/ttrpc v1.2.7 -> v1.2.8

github.com/containerd/zfs/v2 v2.0.0-rc.0 -> v2.0.0

github.com/containernetworking/plugins v1.8.0 -> v1.9.1

github.com/coreos/go-systemd/v22 v22.6.0 -> v22.7.0

github.com/cyphar/filepath-securejoin v0.6.0 new

github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3

github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.28.0

github.com/intel/goresctrl v0.10.0 -> v0.12.0

github.com/klauspost/compress v1.18.1 -> v1.18.4

github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0

github.com/opencontainers/runtime-tools 0ea5ed0382a2 -> edf4cb3d2116

github.com/opencontainers/selinux v1.12.0 -> v1.13.1

github.com/pmezard/go-difflib v1.0.0 -> 5d4384ee4fb2

github.com/prometheus/procfs v0.16.1 -> v0.17.0

github.com/sirupsen/logrus v1.9.3 -> v1.9.4

github.com/tetratelabs/wazero v1.9.0 -> v1.10.1

go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1

go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.64.0

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.64.0

go.opentelemetry.io/otel v1.37.0 -> v1.42.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.39.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.39.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.39.0

go.opentelemetry.io/otel/metric v1.37.0 -> v1.42.0

go.opentelemetry.io/otel/sdk v1.37.0 -> v1.42.0

go.opentelemetry.io/otel/trace v1.37.0 -> v1.42.0

go.opentelemetry.io/proto/otlp v1.5.0 -> v1.9.0

go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3

golang.org/x/crypto v0.41.0 -> v0.48.0

golang.org/x/mod v0.29.0 -> v0.34.0

golang.org/x/net v0.43.0 -> v0.51.0

golang.org/x/oauth2 v0.30.0 -> v0.35.0

golang.org/x/sync v0.17.0 -> v0.20.0

golang.org/x/sys v0.37.0 -> v0.42.0

golang.org/x/term v0.34.0 -> v0.40.0

golang.org/x/text v0.28.0 -> v0.34.0

golang.org/x/time v0.14.0 -> v0.15.0

google.golang.org/genproto/googleapis/api a7a43d27e69b -> 4cfbd4190f57

google.golang.org/genproto/googleapis/rpc a7a43d27e69b -> 4cfbd4190f57

google.golang.org/grpc v1.76.0 -> v1.79.2

google.golang.org/protobuf v1.36.10 -> v1.36.11

k8s.io/api v0.34.1 -> v0.35.2

k8s.io/apimachinery v0.34.1 -> v0.35.2

k8s.io/client-go v0.34.1 -> v0.35.2

k8s.io/cri-api v0.34.1 -> v0.35.2

k8s.io/klog/v2 v2.130.1 -> v2.140.0

k8s.io/kube-openapi 589584f1c912 new

k8s.io/utils 4c0f3b243397 -> bc988d571ff4

sigs.k8s.io/json cfa47c3a1cc8 -> 2d320260d730

tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0

tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v2.2.0

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/Da5xCdr

March 18, 2026 at 01:34PM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #24

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 11, 2026

/rerun
containerd API 1.11.0-beta.1

https://ift.tt/krEqIxN

Welcome to the api/v1.11.0-beta.1 release of containerd!

This is a pre-release of containerd

The 12th release for the containerd 1.x API aligns with the containerd 2.3 release.

Highlights

Add transfer types for container filesystem copy (#13165)

Introduce shim bootstrap protocol (#12786)

Update sandbox API to include spec field (#12840)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Derek McGowan

Wei Fu

Gao Xiang

Sebastiaan van Stijn

Changes

41 commits

Update bootstrap API log level definition (#13208)

2c102c6cb Update bootstrap API log level definition

Add transfer types for container filesystem copy (#13165)

121f3a21e Add transfer types for container filesystem copy

Introduce shim bootstrap protocol (#12786)

16b7ce254 Address code review suggestions

9bf65dcf0 Use enums instead of strings for capabilities and log level

9dc864fd0 Switch to proto instead of json

3fbdb132b Fix module path

1852a4758 Remove testify dependency from api

0f55bdd49 Fix extensions API and update tests

d957b1bf5 Use log level instead of debug flag

31d0bbbad Include containerd version when launching shim

f71c2e421 Reformat and clean proto files

9e9a095fe Read spec annotations from file

3831fc806 Fix reading from stdin

5ea993b48 Pass runc options as a separate extension

e72145b19 Update vendor

790b0ead7 Implement shim bootstrap protocol

Add os.features support for EROFS native container images (#13091)

146930e91 api: add os_features to api/types/platform.proto

build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api (#13099)

d323efc2b build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api

Prepare release notes for api/v1.11.0-beta.0 (#13045)

aac6b5348 Prepare release notes for api/v1.11.0-beta.0

api: regenerate and re-vendor protos (#12913)

4b4eb6715 api: regenerate and re-vendor protos

Remove Container field from sandbox metadata (#12840)

8ccf18724 Update sandbox API to include spec field

Use buf to format proto files (#12841)

ca1c5b2d3 Reformat and revendor proto files

2a87c9d7d Add .editorconfig for proto files

Generate api/next.txtpb and name module (#12815)

472e0a8e7 Generate next.txtpb to replace next.pb.txt

f58dbbda0 Add buf.build repository name for publishing API

Migrate from protobuild to buf (#12762)

dac9721fa Drop outdated pb.txt files

6a6283193 Update pb files

57782b717 Move buf configuration under api/

39991b661 Use relative import intead of GOPATH style imports

eb586b5ef Regenerate proto files

Dependency Changes

golang.org/x/net v0.38.0 -> v0.48.0

golang.org/x/sys v0.31.0 -> v0.39.0

golang.org/x/text v0.23.0 -> v0.32.0

google.golang.org/genproto/googleapis/rpc c3f982113cda -> ff82c1b0f217

google.golang.org/grpc v1.59.0 -> v1.79.3

google.golang.org/protobuf v1.33.0 -> v1.36.10

Previous release can be found at api/v1.10.0

via Release notes from containerd https://ift.tt/9I2kCY7

April 11, 2026 at 08:06AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #25

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 11, 2026

/rerun
containerd 2.3.0-beta.1

https://ift.tt/gUiqXIB

Welcome to the v2.3.0-beta.1 release of containerd!

This is a pre-release of containerd

The third minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with

the Kubernetes release schedule, with new minor releases about every 4 months. The

containerd 2.3 release is also the first annual LTS (Long Term Stable) release under

this new schedule, with support planned for at least two years. Direct upgrades

between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

This is a beta release and some functionality is still under development.

Highlights

Add transfer types for container filesystem copy (#13165)

Introduce shim bootstrap protocol (#12786)

tracing: add option to inject trace ID into logrus fields (#13117)

Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#13113)

Update plugin config migration to run on load (#12608)

Detect vendor in cdi specs to generate device IDs for --gpus (#12839)

Update sandbox API to include spec field (#12840)

Container Runtime Interface (CRI)

feat: Allow containers to use both host network and user namespace (#12518)

Unpack images with per-layer labels for specific runtime (#12835)

Populate ImageId field in container status (#12787)

Set annotations parameter in CreateSandbox request (#12566)

Image Distribution

Add EROFS layer media type (#12567)

Image Storage

Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

Node Resource Interface (NRI)

Pass container user (uid, gids) to plugins (#12769)

Pass seccomp policy to plugins (#12768)

Pass any POSIX rlimits to plugins (#12765)

Pass extended container status to NRI. (#12770)

Pass injected CDI devices to plugins (#12767)

Pass linux sysctl to plugins (#12766)

Runtime

Fix binary logging driver not blocking container start on failure (#12595)

Use new filtered cgroups stats API (#12901)

Update OOMKilled event handling (#12714)

Snapshotters

Propagate parent chain ID and diff ID via labels during snapshot preparation (#13071)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Sebastiaan van Stijn

Derek McGowan

Krisztian Litkey

Wei Fu

Phil Estes

Akihiro Suda

Samuel Karp

Markus Lehtonen

Mike Brown

Davanum Srinivas

Akhil Mohan

Gao Xiang

ChengyuZhu6

Hudson Zhu

Kazuyoshi Kato

Chris Henzie

Sergey Kanzhelev

ningmingxiao

Aadhar Agarwal

Andrew Halaney

HirazawaUi

Michael Zappa

Paweł Gronowski

Apurv Barve

Brian Goff

Fabiano Fidêncio

Hasan Siddiqui

Jintao Zhang

Paulo Oliveira

Shiv Tyagi

Austin Vazquez

Avinesh Singh

Esteban Ginez

Henry Wang

Jin Dong

Jérôme Poulin

Luke Hinds

Sascha Grunert

majianhan

Adrien Delorme

Albin Kerouanton

Alex Chernyakhovsky

Andrey Noskov

Andrey Smirnov

Annie Cherkaev

Anuj Singh

Champ-Goblem

Chris Adeniyi-Jones

Cindia-blue

CrazyMax

Danny Canter

Evan Lezar

Fletcher Woodruff

Gaurav Ghildiyal

Harsh Rawat

Hayato Kiwata

Joseph Zhang

Justin Chadwell

Kal

Manuel de Brito Fontes

Neeraj Krishna Gopalakrishna

Pierluigi Lenoci

Ricardo Branco

Rob Murray

Rodrigo Campos

Shachar Tal

Shaobao Feng

Shiming Zhang

Tariq Ibrahim

Tim Windelschmidt

Tõnis Tiigi

Wade Simmons

Weixie Cui

Will Jordan

Yohei Yamamoto

You Binhao

Youfu Zhang

bo.jiang

chris-henderson-alation

jinda.ljd

qiuxue

Dependency Changes

cyphar.com/go-pathrs v0.2.1 new

github.com/Microsoft/go-winio v0.6.2 -> ad3df93bed29

github.com/Microsoft/hcsshim v0.14.0-rc.1 -> v0.15.0-rc.1

github.com/cenkalti/backoff/v5 v5.0.3 new

github.com/checkpoint-restore/checkpointctl v1.4.0 -> v1.5.0

github.com/containerd/cgroups/v3 v3.1.0 -> v3.1.3

github.com/containerd/containerd/api v1.10.0 -> v1.11.0-beta.1

github.com/containerd/go-dmverity e097b6cc4a33 new

github.com/containerd/imgcrypt/v2 v2.0.1 -> v2.0.2

github.com/containerd/nri v0.10.0 -> v0.11.0

github.com/containerd/platforms v1.0.0-rc.2 -> v1.0.0-rc.4

github.com/containerd/ttrpc v1.2.7 -> v1.2.8

github.com/containerd/zfs/v2 v2.0.0-rc.0 -> v2.0.0

github.com/containernetworking/plugins v1.8.0 -> v1.9.1

github.com/coreos/go-systemd/v22 v22.6.0 -> v22.7.0

github.com/cyphar/filepath-securejoin v0.6.0 new

github.com/davecgh/go-spew v1.1.1 -> d8f796af33cc

github.com/erofs/go-erofs v0.2.0 new

github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3

github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.1 -> v2.28.0

github.com/intel/goresctrl v0.10.0 -> v0.12.0

github.com/klauspost/compress v1.18.1 -> v1.18.5

github.com/opencontainers/runtime-spec v1.2.1 -> v1.3.0

github.com/opencontainers/runtime-tools 0ea5ed0382a2 -> edf4cb3d2116

github.com/opencontainers/selinux v1.12.0 -> v1.13.1

github.com/pelletier/go-toml/v2 v2.2.4 -> v2.3.0

github.com/pmezard/go-difflib v1.0.0 -> 5d4384ee4fb2

github.com/prometheus/procfs v0.16.1 -> v0.17.0

github.com/sirupsen/logrus v1.9.3 -> v1.9.4

github.com/tetratelabs/wazero v1.9.0 -> v1.10.1

go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1

go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 -> v0.67.0

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.60.0 -> v0.67.0

go.opentelemetry.io/otel v1.37.0 -> v1.43.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.35.0 -> v1.43.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.35.0 -> v1.43.0

go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.35.0 -> v1.43.0

go.opentelemetry.io/otel/metric v1.37.0 -> v1.43.0

go.opentelemetry.io/otel/sdk v1.37.0 -> v1.43.0

go.opentelemetry.io/otel/trace v1.37.0 -> v1.43.0

go.opentelemetry.io/proto/otlp v1.5.0 -> v1.10.0

go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3

golang.org/x/crypto v0.41.0 -> v0.49.0

golang.org/x/mod v0.29.0 -> v0.34.0

golang.org/x/net v0.43.0 -> v0.52.0

golang.org/x/oauth2 v0.30.0 -> v0.35.0

golang.org/x/sync v0.17.0 -> v0.20.0

golang.org/x/sys v0.37.0 -> v0.42.0

golang.org/x/term v0.34.0 -> v0.41.0

golang.org/x/text v0.28.0 -> v0.35.0

golang.org/x/time v0.14.0 -> v0.15.0

google.golang.org/genproto/googleapis/api a7a43d27e69b -> 9d38bb4040a9

google.golang.org/genproto/googleapis/rpc a7a43d27e69b -> 9d38bb4040a9

google.golang.org/grpc v1.76.0 -> v1.80.0

google.golang.org/protobuf v1.36.10 -> f2248ac996af

k8s.io/api v0.34.1 -> v0.36.0-rc.0

k8s.io/apimachinery v0.34.1 -> v0.36.0-rc.0

k8s.io/client-go v0.34.1 -> v0.36.0-rc.0

k8s.io/cri-api v0.34.1 -> v0.36.0-rc.0

k8s.io/cri-streaming v0.36.0-rc.0 new

k8s.io/klog/v2 v2.130.1 -> v2.140.0

k8s.io/kube-openapi 5883c5ee87b9 new

k8s.io/streaming v0.36.0-rc.0 new

k8s.io/utils 4c0f3b243397 -> 28399d86e0b5

sigs.k8s.io/json cfa47c3a1cc8 -> 2d320260d730

sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2

tags.cncf.io/container-device-interface v1.0.1 -> v1.1.0

tags.cncf.io/container-device-interface/specs-go v1.0.0 -> v1.1.0

Previous release can be found at v2.2.0

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/9I2kCY7

April 11, 2026 at 11:32AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #26

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 14, 2026

/rerun
containerd 1.7.31

https://ift.tt/weir6Lj

Welcome to the v1.7.31 release of containerd!

The thirty-first patch release for containerd 1.7 contains various fixes

and updates including a security patch.

Security Updates

spdystream

CVE-2026-35469

Highlights

Container Runtime Interface (CRI)

Fix CNI issue where DEL is never executed after a restart (#12931)

Sanitize error before gRPC return to prevent possible credential leak in pod events (#12805)

Improve error message and add warning when concurrent container creation is detected (#12744)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp

Maksym Pavlenko

Akhil Mohan

Phil Estes

Sebastiaan van Stijn

Wei Fu

Akihiro Suda

Alex Chernyakhovsky

Chris Henzie

Michael Zappa

Ricardo Branco

Shachar Tal

ningmingxiao

yashsingh74

Changes

37 commits

Prepare release notes for v1.7.31 (#13221)

7d2662653 Prepare release notes for v1.7.31

update github.com/moby/spdystream v0.5.1 (#13220)

3f795c02a update github.com/moby/spdystream v0.5.1

update to Go 1.25.9, 1.26.2 (#13200)

7b1e1b17b update to Go 1.25.9, 1.26.2

b673f2d42 update golangci-lint to v2.9.0 with go1.26 support

d88d8513a remove windows/arm from cross build

a763407b5 Ignore warnings for golangci-lint bump

03dcd8360 ci: bump golangci from 6.5.2 to 7.0.0

Update github.com/moby/spdystream v0.2.0->v0.5.0 (#13176)

c08711218 Update github.com/moby/spdystream v0.2.0->v0.5.0

Skip TestExportAndImportMultiLayer on s390x (#13152)

043548f6d Skip TestExportAndImportMultiLayer on s390x

update runc binary to v1.3.5 (#13059)

e99bd6050 [release/1.7] update runc binary to v1.3.5

CODEOWNERS: mark Sam and Chris as owners for 1.7 (#13069)

3a3103aaf CODEOWNERS: mark Sam and Chris as owners for 1.7

Fix vagrant on CI (#13064)

9b4cfa271 Ignore NOCHANGE error

ci: modprobe xt_comment on almalinux (#12959)

53e9e73f0 ci: modprobe xt_comment on almalinux

Fix TOCTOU race bug in tar extraction (#12970)

61c2733fd Fix TOCTOU race bug in tar extraction

Fix CNI issue where CNI DEL is never executed (#12931)

f854c1890 fix issue where cni del is never executed

apparmor: explicitly set abi/3.0 (#12899)

5c091d92e apparmor: explicitly set abi/3.0

backport: integration: Fix TestImageLoad() failure on CI (#12908)

177ac10fe integration: Fix TestImageLoad() failure on CI

update to go1.24.13, go1.25.7 (#12873)

56da43d0f update to go1.24.13, go1.25.7

5cb3cb9ba ci: bump go 1.24.12, 1.25.6

fix: sanitize error before gRPC return to prevent credential leak in pod events (#12805)

b1fa03843 fix: sanitize error before gRPC return to prevent credential leak in pod events

cri: emit warning for concurrent CreateContainer (#12744)

e2c93a42c cri: emit warning for concurrent CreateContainer

Dependency Changes

github.com/moby/spdystream v0.2.0 -> v0.5.1

Previous release can be found at v1.7.30

via Release notes from containerd https://ift.tt/tkhdfve

April 15, 2026 at 01:01AM

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 14, 2026

/rerun
containerd 2.0.8

https://ift.tt/8N5GOoW

Welcome to the v2.0.8 release of containerd!

The eighth patch release for containerd 2.0 includes various bug fixes and updates, including a security fix.

Security Updates

spdystream

CVE-2026-35469

Highlights

Container Runtime Interface (CRI)

Sanitize error before gRPC return to prevent possible credential leak in pod events (#13181)

Fix CNI issue where DEL is never executed after a restart (#13179)

Runtime

Update selinux to v1.13.1 (#13193)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp

Michael Zappa

Akhil Mohan

Laura Lorenz

Phil Estes

Aadhar Agarwal

Andrey Noskov

Chris Henzie

Davanum Srinivas

Maksym Pavlenko

Rodrigo Campos

Sebastiaan van Stijn

ningmingxiao

yashsingh74

Changes

32 commits

Prepare release notes for v2.0.8 (missed line) (#13235)

c07b94f19 Prepare release notes for v2.0.8 (missed line)

Prepare release notes for v2.0.8 (#13222)

c54b69f1a Prepare release notes for v2.0.8

update github.com/moby/spdystream v0.5.1 (#13219)

fde1480df update github.com/moby/spdystream v0.5.1

update to Go 1.25.9, 1.26.2 (#13199)

5b2eee8a2 update to Go 1.25.9, 1.26.2

c579db16e update golangci-lint to v2.9.0 with go1.26 support

185ddcfd0 remove windows/arm from cross build

8538158df Ignore warnings for golangci-lint bump

1cff32695 ci: bump golangci from 6.5.2 to 7.0.0

Updating selinux to v1.13.1 (#13193)

2e02b8bb3 Skip github.com/cyphar/filepath-securejoin license checks

e71fc560b Updating selinux to v1.13.1

fix: sanitize error before gRPC return to prevent credential leak in pod events (#13181)

868869eb9 fix: sanitize error before gRPC return to prevent credential leak in pod events

40632e4f2 fix: redact all query parameters in CRI error logs

CODEOWNERS: mark Sam and Chris as owners for 2.0 (#13174)

85c3b2b02 CODEOWNERS: mark Sam and Chris as owners for 2.0

Update github.com/moby/spdystream v0.4.0->v0.5.0 (#13182)

902d804c9 Update github.com/moby/spdystream v0.4.0->v0.5.0

Fix CNI issue where CNI DEL is never executed (#13179)

e92d7b131 make linter happy in release

12fc0e6ca add integration test for cni result nil

8d912c6a2 address comment

742f8b8f6 fix issue where cni del is never executed

Cherry-picks to fix CI (#13175)

f24653597 Ignore NOCHANGE error

9c656fab4 ci: update CIFuzz actions to support Ubuntu 24.04

c71c4a091 integration: Fix TestImageLoad() failure on CI

bfee29999 ci: modprobe xt_comment on almalinux

Dependency Changes

github.com/cyphar/filepath-securejoin v0.5.1 new

github.com/moby/spdystream v0.4.0 -> v0.5.1

github.com/opencontainers/selinux v1.11.1 -> v1.13.1

Previous release can be found at v2.0.7

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/tkhdfve

April 15, 2026 at 01:20AM

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 14, 2026

/rerun
containerd 2.1.7

https://ift.tt/JswP40S

Welcome to the v2.1.7 release of containerd!

The seventh patch release for containerd 2.1 contains various fixes

and updates including a security patch.

Security Updates

spdystream

CVE-2026-35469

Highlights

Container Runtime Interface (CRI)

Preserve host cgroup mount options for privileged containers (#13119)

Fix image volumes when using user namespaces in CRI (#12894)

Fix issue where CNI DEL was never executed after a restart (#12930)

Hardening: sanitize errors before returning via gRPC to prevent possible credential leaks in pod events (#12803)

Enable options for pulling encrypted images in CRI (#12713)

Image Distribution

Fix possible panic from WithMediaTypeKeyPrefix (#13135)

Runtime

Update runc binary to v1.3.5 (#13060)

Hardening: fix possible TOCTOU race bug in tar extraction (#12969)

Fix unintended dropping of mount flags for read-only bind-mounts in user namespaces (#12943)

Explicitly set AppArmor ABI to 3.0 (#12898)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

yashsingh74

Samuel Karp

Maksym Pavlenko

Phil Estes

Wei Fu

Akhil Mohan

Chris Henzie

Sebastiaan van Stijn

Akihiro Suda

Rodrigo Campos

user.email

Aadhar Agarwal

Alex Chernyakhovsky

Chris Adeniyi-Jones

Derek McGowan

Justin Alvarez

Michael Zappa

Ricardo Branco

Shachar Tal

Tõnis Tiigi

ningmingxiao

Changes

67 commits

Prepare release notes for v2.1.7 (#13223)

3a06b6847 Prepare release notes for v2.1.7

update github.com/moby/spdystream v0.5.1 (#13218)

82910b8c1 update github.com/moby/spdystream v0.5.1

update to Go 1.25.9, 1.26.2 (#13189)

295bdbbff update to Go 1.25.9, 1.26.2

Skip TestExportAndImportMultiLayer on s390x (#13153)

8d0c87494 Skip TestExportAndImportMultiLayer on s390x

Fix possible panic from WithMediaTypeKeyPrefix (#13135)

fe316cc1f remotes: fix possible panic from WithMediaTypeKeyPrefix

Preserve cgroup mount options for privileged containers (#13119)

c5ee417ab Add integration test for privileged container cgroup mounts

a5d5a70ed Forward RUNC_FLAVOR env var down to integration tests

515c7f98d Preserve host cgroup mount options for privileged containers

ffd9b61c9 Move cgroup namespace placement higher in spec builder

update runc binary to v1.3.5 (#13060)

2f025ff8e [release/2.1] update runc binary to v1.3.5

Fix vagrant on CI (#13065)

f198b7f87 Ignore NOCHANGE error

Fix TOCTOU race bug in tar extraction (#12969)

aecfb3dc6 Fix TOCTOU race bug in tar extraction

update to go1.25.8, test go1.26.1 (#13013)

b71360b59 update to go1.25.8, test go1.26.1

ec7320b8b update golangci-lint to v2.9.0 with go1.26 support

01606226e remove windows/arm from cross build

e082c2e05 ci: build/test go1.26.0

update golangci-lint to v2.1.5 (#13012)

f9528d2d9 build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.2.0

de0d60a17 build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0

1b240d0e0 build(deps): bump golangci/golangci-lint-action from 6.5.2 to 8.0.0

67ec314fa ci: bump golangci from 6.5.2 to 7.0.0

7fe19a6b2 Disable ST1003: struct field Uid should be UID (staticcheck)

88470c519 Disable QF1003: could use tagged switch on base (staticcheck)

1ea353741 fix: Used nolint to ignore the static checks

f6ddff11b fix: ST1001: should not use dot imports (staticcheck)

4ed50edce fix: ST1019: removed the duplicate imports

808c623d1 fix: QF1012: Use of fmt.Fprintln(...)

e98bc32cd fix: QF1001: could apply De Morgan's law (staticcheck)

cebb3583e fix: ST1005: error strings should not end with punctuation or newlines

1852b5d07 fix: QF1004: strings.ReplaceAll instead (staticcheck)

9b0b270cd fix: QF1002: could use tagged switch on host (staticcheck)

cri: Fix image volumes with user namespaces (#12894)

8d5351929 cri: Fix image volumes with user namespaces

ci: modprobe xt_comment on almalinux (#12958)

37a98b239 ci: modprobe xt_comment on almalinux

core/mount: fix getUnprivilegedMountFlags iterating over indices instead of values (#12943)

74e575ce8 core/mount: add test for getUnprivilegedMountFlags

c62466642 core/mount: fix getUnprivilegedMountFlags iterating over indices instead of values

Fix CNI issue where CNI DEL is never executed (#12930)

9710aed4a fix issue where cni del is never executed

apparmor: explicitly set abi/3.0 (#12898)

735fcb316 apparmor: explicitly set abi/3.0

integration: Fix TestImageLoad() failure on CI (#12907)

51a63212f integration: Fix TestImageLoad() failure on CI

update to go1.24.13, go1.25.7 (#12872)

e13f28dbd update to go1.24.13, go1.25.7

c0f18dd59 ci: bump go 1.24.12, 1.25.6

fix: sanitize error before gRPC return to prevent credential leak in pod events (#12803)

b65f34e15 fix: sanitize error before gRPC return to prevent credential leak in pod events

build(deps): bump google.golang.org/grpc from 1.72.2 to 1.78.0 (#12750)

2e5ab3f84 build(deps): bump google.golang.org/grpc from 1.72.2 to 1.78.0

cri: emit warning for concurrent CreateContainer (#12743)

5ef24ddd2 cri: emit warning for concurrent CreateContainer

cri: move noisy CDI logs to debug level (#12716)

6acd41e02 cri: move noisy CDI logs to debug level

Uncomment call to add options for pulling encrypted images (#12713)

3477d705d Reinstate image decryption

Dependency Changes

github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.3

github.com/moby/spdystream v0.5.0 -> v0.5.1

github.com/stretchr/testify v1.10.0 -> v1.11.1

go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1

go.opentelemetry.io/otel v1.35.0 -> v1.38.0

go.opentelemetry.io/otel/metric v1.35.0 -> v1.38.0

go.opentelemetry.io/otel/sdk v1.35.0 -> v1.38.0

go.opentelemetry.io/otel/trace v1.35.0 -> v1.38.0

golang.org/x/oauth2 v0.27.0 -> v0.32.0

google.golang.org/genproto/googleapis/api 56aae31c358a -> ab9386a59fda

google.golang.org/genproto/googleapis/rpc 56aae31c358a -> ab9386a59fda

google.golang.org/grpc v1.72.2 -> v1.78.0

google.golang.org/protobuf v1.36.7 -> v1.36.10

Previous release can be found at v2.1.6

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/tkhdfve

April 15, 2026 at 01:10AM

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 14, 2026

/rerun
containerd 2.2.3

https://ift.tt/c4165rC

Welcome to the v2.2.3 release of containerd!

The third patch release for containerd 2.2 contains various fixes

and updates including a security patch.

Security Updates

spdystream

CVE-2026-35469

Highlights

Container Runtime Interface (CRI)

Preserve cgroup mount options for privileged containers (#13120)

Ensure UpdatePodSandbox returns Unimplemented instead of a generic error (#13023)

Go client

Handle absolute symlinks in rootfs user lookup to fix regressions when using Go 1.24 (#13015)

Image Distribution

Enable mount manager in diff walking to fix layer extraction errors with some snapshotters (e.g., EROFS) (#13198)

Apply hardening to prevent TOCTOU race during tar extraction (#12971)

Runtime

Restore support for client-mounted roots in Windows containers using process isolation (#13195)

Update runc to v1.3.5 (#13061)

Apply absolute symlink resolution to /etc/group in OCI spec to fix lookups on NixOS-style systems (#13019)

Handle absolute symlinks in rootfs user lookup to fix regressions when using Go 1.24 (#13015)

Snapshotters

Fix bug that caused whiteouts to be ignored when parallel unpack was used (#13125)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp

Sebastiaan van Stijn

Maksym Pavlenko

Chris Henzie

Derek McGowan

Paulo Oliveira

Henry Wang

Phil Estes

Wei Fu

Akihiro Suda

Gao Xiang

Ricardo Branco

Shachar Tal

Changes

40 commits

Prepare release notes for v2.2.3 (#13224)

8a0f4ed5d Prepare release notes for v2.2.3

update github.com/moby/spdystream v0.5.1 (#13217)

31bd34a06 update github.com/moby/spdystream v0.5.1

vendor: github.com/klauspost/compress v1.18.5 (#13197)

1336f6c45 vendor: github.com/klauspost/compress v1.18.5

diff/walking: enable mount manager (#13198)

409f75be8 diff/walking: enable mount manager

update runhcs to v0.14.1 (#13195)

3f33146c1 update runhcs to v0.14.1

vendor: github.com/Microsoft/hcsshim v0.14.1 (#13196)

8bd1b74e5 vendor: github.com/Microsoft/hcsshim v0.14.1

c6b0be8e1 vendor: github.com/Microsoft/hcsshim v0.14.0

update to Go 1.25.9, 1.26.2 (#13190)

2ecde8cfe update to Go 1.25.9, 1.26.2

Skip TestExportAndImportMultiLayer on s390x (#13154)

be554f478 Skip TestExportAndImportMultiLayer on s390x

Tweak mount info for overlayfs in case of parallel unpack (#13125)

660de195b Tweak mount info for overlayfs in case of parallel unpack

bc9274a4b Add integration test for issue 13030

Preserve cgroup mount options for privileged containers (#13120)

c387890b5 Add integration test for privileged container cgroup mounts

047a335a6 Forward RUNC_FLAVOR env var down to integration tests

9b2d72ee0 Preserve host cgroup mount options for privileged containers

5b66cd6a0 Move cgroup namespace placement higher in spec builder

update runc binary to v1.3.5 (#13061)

584205c2f [release/2.2] update runc binary to v1.3.5

Fix vagrant on CI (#13066)

77c6886df Ignore NOCHANGE error

Fix TOCTOU race bug in tar extraction (#12971)

fbed68b8f Fix TOCTOU race bug in tar extraction

cri: UpdatePodSandbox should return Unimplemented (#13023)

a83510103 cri: UpdatePodSandbox should return Unimplemented

fix(oci): apply absolute symlink resolution to /etc/group (#13019)

ee4179e52 fix(oci): apply absolute symlink resolution to /etc/group

fix(oci): handle absolute symlinks in rootfs user lookup (#13015)

fd061b848 test(oci): use fstest and mock fs for better symlink coverage

5d44d2c22 fix(oci): handle absolute symlinks in rootfs user lookup

update to go1.25.8, test go1.26.1 (#13011)

00c776f07 update to go1.25.8, test go1.26.1

Dependency Changes

github.com/Microsoft/hcsshim v0.14.0-rc.1 -> v0.14.1

github.com/klauspost/compress v1.18.1 -> v1.18.5

github.com/moby/spdystream v0.5.0 -> v0.5.1

Previous release can be found at v2.2.2

Which file should I download?

containerd---.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).

containerd-static---.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc

and CNI plugins from their official sites too.

See also the Getting Started documentation.

via Release notes from containerd https://ift.tt/tkhdfve

April 15, 2026 at 01:38AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #27

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #28

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #29

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #30

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 15, 2026

/rerun
containerd API 1.11.0-beta.2

https://ift.tt/vlA6d4k

Welcome to the api/v1.11.0-beta.2 release of containerd!

This is a pre-release of containerd

The 12th release for the containerd 1.x API aligns with the containerd 2.3 release.

Highlights

Add transfer types for container filesystem copy (#13165)

Introduce shim bootstrap protocol (#12786)

Update sandbox API to include spec field (#12840)

Runtime

Add configured socket directory to shim bootstrap protocol (#12785)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Derek McGowan

Wei Fu

Akihiro Suda

Gao Xiang

Sebastiaan van Stijn

Changes

43 commits

Make shim socket directory use configured directory (#12785)

d806373fe Make shim socket directory use configured state

Update bootstrap API log level definition (#13208)

2c102c6cb Update bootstrap API log level definition

Add transfer types for container filesystem copy (#13165)

121f3a21e Add transfer types for container filesystem copy

Introduce shim bootstrap protocol (#12786)

16b7ce254 Address code review suggestions

9bf65dcf0 Use enums instead of strings for capabilities and log level

9dc864fd0 Switch to proto instead of json

3fbdb132b Fix module path

1852a4758 Remove testify dependency from api

0f55bdd49 Fix extensions API and update tests

d957b1bf5 Use log level instead of debug flag

31d0bbbad Include containerd version when launching shim

f71c2e421 Reformat and clean proto files

9e9a095fe Read spec annotations from file

3831fc806 Fix reading from stdin

5ea993b48 Pass runc options as a separate extension

e72145b19 Update vendor

790b0ead7 Implement shim bootstrap protocol

Add os.features support for EROFS native container images (#13091)

146930e91 api: add os_features to api/types/platform.proto

build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api (#13099)

d323efc2b build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api

Prepare release notes for api/v1.11.0-beta.0 (#13045)

aac6b5348 Prepare release notes for api/v1.11.0-beta.0

api: regenerate and re-vendor protos (#12913)

4b4eb6715 api: regenerate and re-vendor protos

Remove Container field from sandbox metadata (#12840)

8ccf18724 Update sandbox API to include spec field

Use buf to format proto files (#12841)

ca1c5b2d3 Reformat and revendor proto files

2a87c9d7d Add .editorconfig for proto files

Generate api/next.txtpb and name module (#12815)

472e0a8e7 Generate next.txtpb to replace next.pb.txt

f58dbbda0 Add buf.build repository name for publishing API

Migrate from protobuild to buf (#12762)

dac9721fa Drop outdated pb.txt files

6a6283193 Update pb files

57782b717 Move buf configuration under api/

39991b661 Use relative import intead of GOPATH style imports

eb586b5ef Regenerate proto files

Dependency Changes

golang.org/x/net v0.38.0 -> v0.48.0

golang.org/x/sys v0.31.0 -> v0.39.0

golang.org/x/text v0.23.0 -> v0.32.0

google.golang.org/genproto/googleapis/rpc c3f982113cda -> ff82c1b0f217

google.golang.org/grpc v1.59.0 -> v1.79.3

google.golang.org/protobuf v1.33.0 -> v1.36.10

Previous release can be found at api/v1.10.0

via Release notes from containerd https://ift.tt/tkhdfve

April 15, 2026 at 10:30PM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #31

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

@y-ykcir
Copy link
Copy Markdown
Owner Author

y-ykcir commented Apr 17, 2026

/rerun
containerd 2.3.0-beta.2

https://ift.tt/raMxZY2

Welcome to the v2.3.0-beta.2 release of containerd!

This is a pre-release of containerd

The third minor release of containerd 2.x focuses on continued stability alongside

new features and improvements. This is the third time-based release for containerd.

Starting with containerd 2.3, the project has moved to release cadence aligned with

the Kubernetes release schedule, with new minor releases about every 4 months. The

containerd 2.3 release is also the first annual LTS (Long Term Stable) release under

this new schedule, with support planned for at least two years. Direct upgrades

between sequential LTS releases (e.g., 1.7 to 2.3) will be tested and supported.

This is a beta release and some functionality is still under development.

Highlights

Add transfer types for container filesystem copy (#13165)

Introduce shim bootstrap protocol (#12786)

Add option to inject trace ID to logs (#13117)

Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#13113)

Update plugin config migration to run on load (#12608)

Detect vendor in cdi specs to generate device IDs for --gpus (#12839)

Update sandbox API to include spec field (#12840)

Container Runtime Interface (CRI)

Allow containers to use user namespaces with host networking (#12518)

Unpack images with per-layer labels for specific runtime (#12835)

Populate ImageId field in container status (#12787)

Set annotations parameter in CreateSandbox request (#12566)

Image Distribution

Support zstd-wrapped EROFS layers (#13185)

Add EROFS layer media type (#12567)

Image Storage

Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

Node Resource Interface (NRI)

Pass container user (uid, gids) to plugins (#12769)

Pass seccomp policy to plugins (#12768)

Pass any POSIX rlimits to plugins (#12765)

Pass extended container status to NRI. (#12770)

Pass injected CDI devices to plugins (#12767)

Pass linux sysctl to plugins (#12766)

Runtime

Add configured socket directory to shim bootstrap protocol (#12785)

Fix binary logging driver not blocking container start on failure (#12595)

Use new filtered cgroups stats API (#12901)

Update OOMKilled event handling (#12714)

Snapshotters

Propagate parent chain ID and diff ID via labels during snapshot preparation (#13071)

Please try out the release binaries and report any issues at

https://github.com/containerd/containerd/issues.

Contributors

Maksym Pavlenko

Derek McGowan

Sebastiaan van Stijn

Krisztian Litkey

Wei Fu

Samuel Karp

Akihiro Suda

Phil Estes

Markus Lehtonen

Mike Brown

Davanum Srinivas

Gao Xiang

ChengyuZhu6

Akhil Mohan

Chris Henzie

Hudson Zhu

Kazuyoshi Kato

Sergey Kanzhelev

ningmingxiao

Aadhar Agarwal

Andrew Halaney

Apurv Barve

HirazawaUi

Michael Zappa

Paweł Gronowski

Brian Goff

Fabiano Fidêncio

Hasan Siddiqui

Jintao Zhang

Paulo Oliveira

Shiv Tyagi

Austin Vazquez

Avinesh Singh

Esteban Ginez

Henry Wang

Jin Dong

Jérôme Poulin

Luke Hinds

Sascha Grunert

majianhan

markdodgson

Adrien Delorme

Albin Kerouanton

Alex Chernyakhovsky

Andrey Noskov

Andrey Smirnov

Annie Cherkaev

Anuj Singh

Champ-Goblem

Chris Adeniyi-Jones

Cindia-blue

CrazyMax

Danny Canter

Evan Lezar

Fletcher Woodruff

Gaurav Ghildiyal

Harsh Rawat

Hayato Kiwata

Joseph Zhang

Justin Chadwell

Kal

Manuel de Brito Fontes

Neeraj Krishna Gopalakrishna

Pierluigi Lenoci

Ricardo Branco

Rob Murray

Rodrigo Campos

Shachar Tal

Shaobao Feng

Shiming Zhang

Tariq Ibrahim

Tim Windelschmidt

Tõnis Tiigi

Wade Simmons

Weixie Cui

Will Jordan

Yohei Yamamoto

You Binhao

Youfu Zhang

apurv15

bo.jiang

chris-henderson-alation

jinda.ljd

qiuxue

Changes

758 commits

Prepare v2.3.0-beta.2 release (#13239)

367937295 Update API to use latest beta tag

Parameterize K8s version in node-e2e workflow (#13234)

270916ad1 Parameterize K8s version in node-e2e workflow

Add check for status code for GET requests (#12262)

bf5fe06f8 Use len for stripping http://

2e856be03 Check for error status code on response to a get request

Add support for conditional gc references in metadata (#12398)

046421ab7 Breakout arguments to sendLabelRefs in gc

bd02dc1d7 Add support for conditional gc references in metadata

build(deps): bump actions/cache from 5.0.4 to 5.0.5 (#13227)

34884e99d build(deps): bump actions/cache from 5.0.4 to 5.0.5

Make shim socket directory use configured directory (#12785)

e07a1aa49 Add configuration for socket directory to the shim manager

59c3464a0 Remove the unnecessary mkdir on the default state directory

d806373fe Make shim socket directory use configured state

ctr: add EROFS image conversion support (#12555)

64a2e62b5 erofs: wire os.features into conversion and selection

b320d3c85 ctr: add EROFS image conversion support

snapshotter/erofs: avoid using overlay if fsmerge is enabled and no upperdir (#13213)

3b357da49 snapshotter/erofs: avoid using overlay if fsmerge is enabled and no upperdir

build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0 (#13225)

a9acbcaae build(deps): bump softprops/action-gh-release from 2.6.1 to 3.0.0

build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1 (#13232)

a9e958070 build(deps): bump github.com/erofs/go-erofs from 0.2.0 to 0.2.1

build(deps): bump actions/github-script from 8.0.0 to 9.0.0 (#13226)

54bb41881 build(deps): bump actions/github-script from 8.0.0 to 9.0.0

build(deps): bump the golang-x group with 2 updates (#13228)

ef692c986 build(deps): bump the golang-x group with 2 updates

update github.com/moby/spdystream v0.5.1 (#13215)

d15a46927 update github.com/moby/spdystream v0.5.1

erofs-differ: support zstd-wrapped EROFS layers (#13185)

b9445fb9e erofs-differ: support zstd-wrapped EROFS layers

core/remotes/docker: use SystemCertPool on Windows (#13128)

dc609cf4b core/remotes/docker: use SystemCertPool on Windows

update runhcs to v0.15.0-rc.1 (#13211)

915fd256a update runhcs to v0.15.0-rc.1

For Exec format error on Windows, compile cri-integration.test binary with .exe suffix (#13210)

d8906ac6c Update Makefile

c41939a4c For Exec format error on Windows, compile cri-integration.test binary with .exe suffix

build(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#13168)

244d59f79 build(deps): bump docker/login-action from 4.0.0 to 4.1.0

Prepare v2.3.0 beta.1 release (#13209)

d11731c74 Update vendored api to v1.11.0-beta.1

c6f83d3bc Update mailmap for Chris Henzie

Update bootstrap API log level definition (#13208)

2c102c6cb Update bootstrap API log level definition

Bump cri-api to v0.36.0-rc.0 (#13207)

a6311a163 Bump cri-api to v0.36.0-rc.0

Make utils.sh nounset-safe by never expanding unset CGROUP_DRIVER on Windows (#13205)

743210e40 Make utils.sh nounset-safe by never expanding unset CGROUP_DRIVER on Windows.

fix(windows): verify pipe readiness before returning shim address (#13202)

01e5fa616 fix: address review feedback on awaitPipeReady

1e98ebaf0 fix(windows): verify pipe readiness before returning shim address

Document shim bootstrap behavior (#13192)

fcb23002b Document shim bootstrap protocol behavior

Temporarily disable uploading logs to GCP for windows periodic tests until GCP credentials are renewed (#13173)

6ba507ba7 Temporarily disable windows periodic tests until GCP credentials are renewed.

build(deps): bump github.com/Microsoft/hcsshim from 0.14.0-rc.1 to 0.15.0-rc.1 (#13170)

affe09319 build(deps): bump github.com/Microsoft/hcsshim

Support reading readonly overlays without mounting (#12865)

c61c4e8da pkg/oci: update fs error handling to use errors.Is

30951c6f0 Add overlay symlink resolution using ReadLinkFS

21d666cfb Update fsview to allow type registration

a77c757f1 internal/fsview: update overlay to handle file replacing directory

2fe15d7c8 internal/fsview: add support for suffixes in formatted mounts

a5df2782d pkg/oci: remove darwin guards from user/group spec opts

f384d2eb6 pkg/oci: update OCI with user to try mount for Darwin

c1eb9430a pkg/oci: update OCI spec generation to use fsview if available

04b7b495f internal/fsview: add fsview package for reading snapshot mounts

diff/walking: enable mount manager (#13186)

47cfd1138 diff/walking: enable mount manager

Add transfer types for container filesystem copy (#13165)

121f3a21e Add transfer types for container filesystem copy

build(deps): bump the otel group with 6 updates (#13169)

69f3860f4 build(deps): bump the otel group with 6 updates

Introduce shim bootstrap protocol (#12786)

75afbe155 Update vendor

16b7ce254 Address code review suggestions

45b7de283 Limit amount of bytes read from stdin

3c0e8a55b Update comments wording about when to deprecate and remove the old path

9bf65dcf0 Use enums instead of strings for capabilities and log level

9dc864fd0 Switch to proto instead of json

73edc8045 Format code after cherry pick

243cab594 Deprecate old pkg/shim interfaces

3fbdb132b Fix module path

1852a4758 Remove testify dependency from api

eea1fa651 Do not fail when failed to parse log level

281fb85a9 Fix Makefile

2005e01f0 Run tests from api

0f55bdd49 Fix extensions API and update tests

58022a748 Parse log level when starting shim instance

d957b1bf5 Use log level instead of debug flag

31d0bbbad Include containerd version when launching shim

f71c2e421 Reformat and clean proto files

b7ef291ed Provide bootstrap params when launching shims

acb8c8ea1 Update vendor

9e9a095fe Read spec annotations from file

fa02acee2 Generate shim CLI flags under Command

fc8062f37 Rename CommandConfig field to better reflect their purpose

3831fc806 Fix reading from stdin

5ea993b48 Pass runc options as a separate extension

e72145b19 Update vendor

7f39b2d93 Update shim to support new bootstrap api

790b0ead7 Implement shim bootstrap protocol

Bump Go to 1.26.2 (#13177)

8b396c768 Bump Go to 1.26.2

Add registry host namespace query parameter to mirror push requests (#12206)

e95b75305 Add namespace to push requests

releases: revive 2.0 (#13158)

a3ac81ff9 releases: revive 2.0

replace one more k8s.io/apimachinery/ reference (#13157)

1615e07bb replace one more k8s.io/apimachinery/ reference

integration/images: add s390x builds for volume test images (#13166)

72919fbd6 integration/images: add s390x builds for volume test images

Fix binary logging driver not blocking container start on failure (#12595)

cf772973c process/io: ignore SIGTERM exit in cancel() to fix flaky test

22e6e1541 Add binary-v2 logging readiness scheme

content: use descriptor digest algorithm instead of assuming sha256 (#13036)

2a14c4254 pkg/oci: fix fake image digest computation in tests

9423378f6 content: use descriptor digest algorithm instead of assuming sha256

Move runtime v2 docs to ./docs (#13163)

169e00038 Move runtime v2 docs to ./docs

Honor stderrthreshold when logtostderr is enabled (#13132)

2a69c0d2c Honor stderrthreshold when logtostderr is enabled

script/setup: update runc binary to v1.4.2 (#13155)

143c566fc update runc binary to v1.4.2

pause image 3.10.1 -> 3.10.2 for add Windows Server 2025 (ltsc2025) s… (#13156)

05d3b3158 pause image 3.10.1 -> 3.10.2 for add Windows Server 2025 (ltsc2025) support

Use latest k8s 1.36 (#13076)

1fc92e63d switch from internal/cri/streamingserver to k8s.io/cri-streaming

1b67e7854 switch from k8s.io/apimachinery/pkg/util/httpstream to k8s.io/streaming/pkg/httpstream

Skip TestExportAndImportMultiLayer on s390x (#13149)

2b7085767 Skip TestExportAndImportMultiLayer on s390x

fix: handle nil spec for hostNetwork containers (#13131)

b32cecd31 fix: handle nil spec for hostNetwork containers

Add os.features support for EROFS native container images (#13091)

940076477 client/image: check if the snapshotter supports forcely if os.feature is set

f8367b8ad client: remove toPlatforms()

cb93966b9 transfer: Default to the EROFS snapshotter and differ for EROFS images

146930e91 api: add os_features to api/types/platform.proto

56a6fdbe5 Update github.com/containerd/platforms to v1.0.0-rc.4

build(deps): bump github/codeql-action from 4.33.0 to 4.35.1 (#13141)

1be404a95 build(deps): bump github/codeql-action from 4.33.0 to 4.35.1

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.0 (#13142)

44f01d4e7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.0

build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 (#12962)

12cbacee6 build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0

build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0 (#12964)

77a623118 build(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0

Add dmverity support to the erofs snapshotter using go-dmverity (#12502)

50f5461fb Add dmverity support to the erofs snapshotter using veritysetup-go

Bump Go to 1.26.0 (#13090)

0130ae9aa Bump Go to 1.26.0

Update crun version to 1.27 and enable in mount options test (#13144)

9f62f84c5 Update crun version to 1.27 and enable in mount options test

core/remotes: MakeRefKey: update godoc and change Warn to Debug logs (#13134)

55f622c76 core/remotes: MakeRefKey: update godoc and change Warn to Debug logs

tracing: add option to inject trace ID into logrus fields (#13117)

10c30fb74 tracing: add option to inject trace ID into logrus fields

build(deps): bump azure/CLI from 2.2.0 to 3.0.0 (#13140)

0ffd99a0e build(deps): bump azure/CLI from 2.2.0 to 3.0.0

build(deps): bump azure/login from 2.3.0 to 3.0.0 (#13105)

5f813b59c build(deps): bump azure/login from 2.3.0 to 3.0.0

build(deps): bump actions/cache from 5.0.3 to 5.0.4 (#13106)

3248957cf build(deps): bump actions/cache from 5.0.3 to 5.0.4

cri: mirror cadvisor UsageNanoCores semantics (#13138)

66a1d3a60 cri: mirror cadvisor UsageNanoCores semantics

fix: hide go-cmp library from the non-test code path (#12175)

ea945443a fix: hide go-cmp library from the non-test code path

feat: Allow containers to use both host network and user namespace (#12518)

339b0cc17 add integration test

7d7c56357 add unit tests

93cf5418b Allow user namespace with hostNetwork in container

allow to pass multiple extra arguments to critest (#13114)

7ea6bb604 allow to pass multiple extra arguments to critest

Tweak mount info for overlayfs in case of parallel unpack (#13115)

3382fb716 Tweak mount info for overlayfs in case of parallel unpack

68e128cf0 Add integration test for issue 13030

fix: avoid content storage pollution by limiting the fallback on ref resolution (#13017)

9b7fa6131 fix:avoid content storage pollution by limiting the fallback on ref resolution

chore: Add explicit digest requirement to docker pusher (#12861)

4f35b756e chore: Add explicit digest requirement to docker pusher

Fix send stream data with EOF (#12968)

da5e548ef Add fix for send stream encountering EOF with data

cd15c253d Add test for streaming EOF with data

core/mount: Reject X-containerd.* options before kernel mount (#12557)

6f7bb4862 core/mount: Filter X-containerd.* options before kernel mount

Wire UpdatePodSandboxResources to Sandbox API (#13118)

33db836a8 Wire UpdatePodSandboxResources to Sandbox API

e6c7f3723 Add unit tests for CRI resource updates

Propagate OpenTelemetry traces in outgoing RPCs from plugin clients (#13113)

dc5806cd9 Propagate OpenTelemetry traces in outgoing RPCs from plugin clients

Preserve cgroup mount options for privileged containers (#12952)

0eef29a1a Add integration test for privileged container cgroup mounts

d2f67d399 Forward RUNC_FLAVOR env var down to integration tests

f84ddfa4f Preserve host cgroup mount options for privileged containers

e15141a1f Move cgroup namespace placement higher in spec builder

build(deps): bump the k8s group with 3 updates (#13107)

46bd9a75c build(deps): bump the k8s group with 3 updates

build(deps): bump the otel group across 1 directory with 5 updates (#13109)

ca88ae583 build(deps): bump the otel group across 1 directory with 5 updates

build(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 (#13110)

68ba0d02c build(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5

build(deps): bump github.com/containerd/platforms from 1.0.0-rc.2 to 1.0.0-rc.3 (#13108)

b39efcb82 build(deps): bump github.com/containerd/platforms

transfer: fix the differ selection if differ is "" (#13080)

dc9cb1dfd transfer: fix the differ selection if differ is ""

Propagate parent chain ID and diff ID via labels during snapshot preparation (#13071)

ca7461cbe Propagate diff ID and parent chain ID via labels in Prepare RPC

runc-shim: fix exec PID error message and fmt verb (#13088)

ee7441ddf runc-shim: fix exec PID error message and fmt verb

build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api (#13099)

d323efc2b build(deps): bump google.golang.org/grpc from 1.59.0 to 1.79.3 in /api

Add section about AI and automation in contributor's guide (#13092)

ac4806383 Add section about AI and automation in contributor's guide

build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 (#13098)

6d31c1875 build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3

script/setup: update critools to v1.35.0 (#13093)

c873059d0 script/setup: update critools to v1.35.0

fix linter issues (#13089)

27f0b1293 fix linter issues

readme: remove announcement for 2.0 (#13073)

56288d42b readme: remove announcement for 2.0

releases: clarify extended support for 1.7 (#13067)

7eedcb4d9 releases: clarify extended support for 1.7

update runc binary to v1.4.1 (#13057)

a865de1b4 update runc binary to v1.4.1

Fix vagrant on CI (#13055)

85dedefa0 Ignore NOCHANGE error

Prepare release notes for v2.3.0-beta.0 (#13048)

86d41cdd1 Prepare release notes for v2.3.0-beta.0

93ee55d86 Update api version to use v1.11.0-beta.0

34a6756fa Update mailmap before release

pkg/shim: Fix NewSocket directory permissions (#12960)

8f44dc45e pkg/shim: Remove Darwin-specific socket permissions

910631704 pkg/shim: Fix NewSocket directory permissions

31c630726 pkg/shim: Add unit tests

build(deps): bump github.com/containernetworking/plugins from 1.9.0 to 1.9.1 (#13042)

8c1fe6744 build(deps): bump github.com/containernetworking/plugins

build(deps): bump github.com/intel/goresctrl from 0.11.0 to 0.12.0 (#13043)

4bcb190bf build(deps): bump github.com/intel/goresctrl from 0.11.0 to 0.12.0

Prepare release notes for api/v1.11.0-beta.0 (#13045)

aac6b5348 Prepare release notes for api/v1.11.0-beta.0

Permission denied when attempting os.Chmod the config.Root during server startup (#12521)

713d21281 containerd operating without root permissions receives a permissions denied error

golangci-lint: enable modernize linter, and fix modernize for other GOOS (#13047)

6b58f1344 replace some uses of interface{} in (go)docs

bded42c57 golangci-lint: enable modernize linter

a5cfa74d5 integration: modernize: omitzero

22fd63994 *: modernize: stringscutprefix

860d97854 plugins: modernize: plusbuild

9bdcacc45 *: modernize: waitgroup

24012ef8f *: modernize: stringscut, stringsseq, slicescontains, fmtappendf

4dd7c13ac *: modernize: stringscut, stringsseq

49a524969 internal/cri/nri: modernize: mapsloop

1ed2b15c0 *: modernize: minmax

8fcf3a3cf *: modernize: rangeint

9ee303d70 *: modernize: any

33dfe461c internal: modernize: any

a122afe13 cmd: modernize: any

5ccb35662 plugins: modernize: any

73c96c54e pkg: modernize: any

build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 (#13040)

f1771b336 build(deps): bump actions/download-artifact from 8.0.0 to 8.0.1

build(deps): bump golang.org/x/mod from 0.33.0 to 0.34.0 in the golang-x group (#13038)

e1cb8b372 build(deps): bump golang.org/x/mod in the golang-x group

internal/cri/setutils: remove unused, deprecated utils (#13031)

177241be5 internal/cri/setutils: remove unused, deprecated utils

be7846652 internal/cri/util: replace uses of deprecated String set

build(deps): bump github/codeql-action from 4.32.6 to 4.33.0 (#13039)

44474600b build(deps): bump github/codeql-action from 4.32.6 to 4.33.0

build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 (#13041)

b5dba0fbc build(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1

*: modernize code (#13022)

c2da6482e core: go fix "inline"

9f016e381 core: modernize: omitzero

a499b17f2 *: modernize: stringscutprefix

fc3165188 core: modernize: stringsbuilder

9a46e30a2 internal: modernize: slicessort

16e340f32 *: modernize: plusbuild

2fd5da21e *: modernize: waitgroup

78f40c714 integration: modernize: any

26c2ae590 internal: modernize: any

828c2119e pkg: modernize: any

4b6cc97c4 plugins: modernize: any

92b0b289e core: modernize: any

29030ff92 cmd: modernize: any

ff8a70cc0 client: modernize: any

cd3d63d91 *: modernize: fmtappendf

18c74abd5 *: modernize: slicescontains

1754af311 *: modernize: stringsseq

b050f47ef *: modernize: testingcontext

0ecd8f43e core: modernize: stringscut

09f7154db *: modernize: mapsloop

bc5681028 client: modernize: mapsloop

656c48f0e internal: modernize: mapsloop

7bea4fa95 core: modernize: mapsloop

5dd377a6a pkg: modernize: mapsloop

0d0e77640 internal: modernize: minmax

73e83de4b *: modernize: rangeint

3723a6709 core: modernize: rangeint

b35d9ea92 plugins: modernize: rangeint

96326ad1f internal: modernize: rangeint

335422129 pkg: modernize: rangeint

fix: correct typos found by codespell (#13018)

aa600f65d fix: correct typos found by codespell

nri: add dependency on internal tracing plugin (#12947)

3e9f21c43 nri: add dependency on internal tracing plugin

Update EROFS snapshotter documentation (#13029)

255ed2c18 snapshots/erofs: Update EROFS snapshotter documentation

Avoid ineffective chown on create snapshot when in erofs snapshotter (#13028)

b2eeb8635 snapshotter/erofs: avoid ineffective chown on create snapshot when in block mode

core/remotes/docker: include "method" and "url" in logs, and sanitize URLs in logs/errors (#12859)

642be181d core/remotes/docker: include "method" and "url" in logs

64cc8cdec core/remotes/docker: add request.sanitizedURL for logging and errors

build(deps): bump crazy-max/ghaction-github-runtime from 3.1.0 to 4.0.0 (#12965)

5d6032f8a build(deps): bump crazy-max/ghaction-github-runtime from 3.1.0 to 4.0.0

Update plugin config migration to run on load (#12608)

0d7fee062 Update plugin config migration to run on load

fix(oci): apply absolute symlink resolution to /etc/group (#12925)

fc406dbc5 fix(oci): apply absolute symlink resolution to /etc/group

build(deps): bump the k8s group across 1 directory with 4 updates (#13003)

c8039838e build(deps): bump the k8s group across 1 directory with 4 updates

build(deps): bump github/codeql-action from 4.32.5 to 4.32.6 (#13001)

78777c33a build(deps): bump github/codeql-action from 4.32.5 to 4.32.6

build(deps): bump the golang-x group with 3 updates (#13002)

f6957abcb build(deps): bump the golang-x group with 3 updates

build(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#13000)

b77ab0238 build(deps): bump docker/login-action from 3.7.0 to 4.0.0

build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2 (#13004)

8e13c9df6 build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.2

deprecations: delay to 2.4 per Upgrade Path rules (#13009)

b0eb3e51b deprecations: delay to 2.4 per Upgrade Path rules

docs: update outdated content fetch help text (#13016)

01d094d66 docs: update outdated content fetch help text

update to go1.25.8, test go1.26.1 (#12985)

38b3e4c4a update to go1.25.8, test go1.26.1

build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#12999)

0a3d8ba54 build(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0

streaming io: fix connection residual after stream closed (#10458)

b84751126 streaming io: fix connection residual after stream closed

fix migrated cri image config when using registry (#12617)

1d77b68f0 set default config_path in plugin init

Update ttrpc to v1.2.8 (#12977)

d6808b71a Update ttrpc to v1.2.8

Introduce Windows Arm64 build in CI workflow (#12974)

62f479a53 Introduce Windows Arm64 build in CI workflow

build(deps): bump github/codeql-action from 4.32.4 to 4.32.5 (#12966)

44b885251 build(deps): bump github/codeql-action from 4.32.4 to 4.32.5

Fix TOCTOU race bug in tar extraction (#12961)

ba50a5645 Fix TOCTOU race bug in tar extraction

release: update per 2026 proposal (#12830)

988c06f3c release: update per 2026 proposal

build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 (#12967)

fa804247e build(deps): bump actions/download-artifact from 7.0.0 to 8.0.0

build(deps): bump github/codeql-action from 4.32.3 to 4.32.4 (#12934)

8384fb8db build(deps): bump github/codeql-action from 4.32.3 to 4.32.4

ci: modprobe xt_comment on almalinux (#12950)

428749270 ci: modprobe xt_comment on almalinux

ci: fix critools version used in windows tests (#12845)

6464c7a2c ci: use common cri-tools version for windows tests

core/mount: fix getUnprivilegedMountFlags iterating over indices instead of values (#12941)

1466c5319 core/mount: add test for getUnprivilegedMountFlags

5d3b3447c core/mount: fix getUnprivilegedMountFlags iterating over indices instead of values

Use new filtered cgroups stats API (#12901)

d7d7b10f9 Use new filtered cgroup stats API

build(deps): bump actions/stale from 10.1.1 to 10.2.0 (#12935)

4f2b8e455 build(deps): bump actions/stale from 10.1.1 to 10.2.0

Unpack images with per-layer labels for specific runtime (#12835)

871d58ca8 cri: unpack images with per-layer labels for runtime-specific snapshotters

api: regenerate and re-vendor protos (#12913)

4b4eb6715 api: regenerate and re-vendor protos

fix: propagate context deadline exceeded error properly (#12821)

f078cebbd fix: propagate context deadline exceeded error properly

cri: propagate runtime-specific snapshotters to image service (#12836)

e9622481f cri: propagate runtime-specific snapshotters to image service

Makefile: assorted cleanups (#12916)

d63c1dd1f Makefile: use "-C" flag, and evaluate once

43cf58a28 Makefile: fix indentation

1f0f18f92 Makefile: remove redundant grep for vendor, integration

7ffccac5c Makefile: remove trailing slash from ROOTDIR

Make linter for release branches happy (#12928)

ce1c42baa make linter happy in release

Remove image service dependency from podsandbox controller (#12849)

151f82e57 Fix ambiguous selector c.Config

842528d86 Move pause container pulling to CRI

dc897c5b2 Remove LocalResolve dependency from Controller

01a85de2c Fetch image from containerd store instead of CRI in-memory store

13e791ef8 Remove GetImage dependency from Controller

Fix CNI issue where CNI DEL is never executed (#12923)

96dee5f64 add integration test for cni result nil

1092b85a8 address comment

0b8471953 fix issue where cni del is never executed

Detect vendor in cdi specs to generate device IDs for --gpus (#12839)

090def056 Remove vendor lister and update tests

7035fe813 Add unit tests for gpuDeviceNames anddetectGPUVendor

ab1a24989 Detect vendor in cdi specs to generate deviceIDs for --gpus

cmd: fix inconsistencies in command-line flags, and add missing --version flags (#12868)

e5ae0a882 cmd/shim: containerd-shim-runc-v2: add long-form '--version' flag

0edde8fde cmd/containerd-stress: enable '--version' flag

5fde7662f cmd/*: don't print default value for '--help' and '--version'

add check on version of drop in configs (#12891)

d40192b64 assert exact error while loading drop in config

21248d007 add check on version of drop in configs

Don't bail out if no image verifiers available (#12893)

634401d24 Don't bail out if no image verifiers available

cmd/protoc-gen-go-fieldpath: add support for optional fields (#12915)

5ef537b38 cmd/protoc-gen-go-fieldpath: add support for optional fields

contrib/apparmor: fix /proc/sys rule (#12904)

509882742 contrib/apparmor: fix /proc/sys rule

Remove Container field from sandbox metadata (#12840)

58c5ab444 Update proto

528a2bada Add lifecycle workaround to NRI

7474a0b2b Fix fetching sandbox metadata

8ccf18724 Update sandbox API to include spec field

41f92ec37 Remove sandbox Container field from metadata

ci: add build/test go1.26.0, drop go1.24 (#12844)

1f84d27c3 update golangci-lint to v2.9.0 with go1.26 support

e4320e6cf remove windows/arm from cross build

9a0c5f1f0 ci: build/test go1.26.0

contrib/apparmor: remove non-matching rules for /proc/mem, /proc/kmem (#12905)

f45a70121 contrib/apparmor: remove non-matching rules for /proc/mem, /proc/kmem

build(deps): bump github/codeql-action from 4.32.2 to 4.32.3 (#12910)

0737b36c7 build(deps): bump github/codeql-action from 4.32.2 to 4.32.3

build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1 (#12912)

968dccdfc build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.1

build(deps): bump github.com/containerd/cgroups/v3 from 3.1.2 to 3.1.3 (#12911)

ddeef9938 build(deps): bump github.com/containerd/cgroups/v3 from 3.1.2 to 3.1.3

install-dev-tools: update protoc-gen-go-ttrpc to v1.2.7 (#12914)

102bf8626 install-dev-tools: update protoc-gen-go-ttrpc to v1.2.7

Fix dupwords (#12909)

3c64bf76d docs: fix dupword

912a34ad0 script/test: fix dupword

ebb6908bf integration: fix dupword

integration: Fix TestImageLoad() failure on CI (#12903)

fafbfcb8c integration: Fix TestImageLoad() failure on CI

build(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 (#12879)

a46ab1811 build(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4

build(deps): bump the golang-x group with 2 updates (#12878)

4514f47be build(deps): bump the golang-x group with 2 updates

cri: Fix image volumes with user namespaces (#12816)

db9546b6d cri: Fix image volumes with user namespaces

build(deps): bump github/codeql-action from 4.32.1 to 4.32.2 (#12880)

7505e768d build(deps): bump github/codeql-action from 4.32.1 to 4.32.2

build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0 (#12823)

cf9b7d4fb build(deps): bump actions/attest-build-provenance from 3.1.0 to 3.2.0

apparmor: explicitly set abi/3.0 (#12864)

a6f03a7d5 apparmor: explicitly set abi/3.0

contrib/Dockerfile: remove proto3 (protobuf) stage (#12866)

8ad06b278 contrib/Dockerfile: remove proto3 (protobuf) stage

update to go1.24.13, go1.25.7 (#12869)

1551986af update to go1.24.13, go1.25.7

build(deps): bump github.com/checkpoint-restore/checkpointctl from 1.4.0 to 1.5.0 (#12825)

3aac3eaef build(deps): bump github.com/checkpoint-restore/checkpointctl

Use buf to format proto files (#12841)

ca1c5b2d3 Reformat and revendor proto files

2a87c9d7d Add .editorconfig for proto files

3defa1229 Use buf to format proto files

cri: use mount manager when image has volumes (#12847)

eeb50b0e9 cri: use mount manager when image has volumes

script/critest.sh: always skip OOMKilled on systemd cgroup (#12819)

c3ba452cf script/critest.sh: always skip OOMKilled on systemd cgroup

build(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#12852)

3f32d77ee build(deps): bump docker/login-action from 3.6.0 to 3.7.0

build(deps): bump github/codeql-action from 4.31.10 to 4.32.1 (#12850)

e00bd606d build(deps): bump github/codeql-action from 4.31.10 to 4.32.1

build(deps): bump actions/cache from 5.0.2 to 5.0.3 (#12851)

0be2e1b50 build(deps): bump actions/cache from 5.0.2 to 5.0.3

build(deps): bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#12854)

74b21a939 build(deps): bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0

pkg/sys: Create user namespace as the container's initial user namesp… (#12317)

59cc4cc49 pkg/sys: Let more environments create user namespace as the initial user

42ce92b22 pkg/sys: Create user namespace as the container's initial user namespace user

ci: add retry logic for Fedora Vagrant box download (#12856)

e1ab55296 ci: add retry logic for Fedora Vagrant box download

ci: set fetch-depth for containerd to 0 for version parsing (#12855)

3f133acd4 set fetch-depth for containerd to 0 for version parsing

ci: bump go 1.24.12, 1.25.6 (#12843)

bde3deac7 ci: bump go 1.24.12, 1.25.6

Fix ctr image mount failing with no such device (#12581)

776e50aa2 core/mount/manager: fix bind mount missing rbind option

d2593b647 core/mount/manager: add tests for WithTemporary option

erofs: Log mkfs command at Debug level (#12826)

220108e1c erofs: Log mkfs command at Debug level

CI: add almalinux/10 (#12827)

ff0c2d172 CI: add almalinux/10

.github: re-enable windows image pull/list tests (#12818)

ce9f3ad8e .github: re-enable windows image pull/list tests

Populate ImageId field in container status (#12787)

2470af56e Update TestToCRIContainer test

b8c76199d cri: populate ImageId field in container status

Generate api/next.txtpb and name module (#12815)

472e0a8e7 Generate next.txtpb to replace next.pb.txt

f58dbbda0 Add buf.build repository name for publishing API

Fix go mod replace and sync with latest api changes (#12789)

992597bfe Fix TTRPC prefix

8c782cd19 Revendor latest api changes

c895e1ed4 Remove check-api-descriptors target

ce045ca2f Fix go mod replace

stability: multipart fetch pool (#12205)

e86523ecd multipart fetch stability fixes

erofs-differ: use same UUID append style in tar index mode as tar conversion mode (#12782)

52a92e83f erofs-differ: use same UUID append style in tar index mode as tar conversion mode

erofs: Move immutable file handling before storage.Remove (#12807)

cf7cb3c35 erofs: Move immutable file handling before storage.Remove

fix: sanitize error before gRPC return to prevent credential leak in pod events (#12801)

7b11d6cae fix: sanitize error before gRPC return to prevent credential leak in pod events

build(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 (#12797)

92955bf4c build(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3

build(deps): bump actions/cache from 5.0.1 to 5.0.2 (#12798)

7a0c8d906 build(deps): bump actions/cache from 5.0.1 to 5.0.2

build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4 (#12799)

94de254cb build(deps): bump github.com/sirupsen/logrus from 1.9.3 to 1.9.4

Use fsmount API to avoid PAGE_SIZE limit for erofs (#12783)

f873e4d3c plugins/mount/erofs: use fsmount API to avoid PAGE_SIZE limit

fix: typo in comment (#12795)

e066861ac fix: typo in comment

cri/podsandbox: reduce dependencies to internal CRI APIs (#12773)

7ef50accc Reduce ImageService interface dependencies

fix(oci): handle absolute symlinks in rootfs user lookup (#12732)

9bbb1309f test(oci): use fstest and mock fs for better symlink coverage

85b5418ef fix(oci): handle absolute symlinks in rootfs user lookup

command: show help and exit on unknown positional arguments (#12748)

677e991bb command: show help and exit on unknown positional arguments

content: ensure root directory exists before checking fs-verity support (#12416)

5f0f0dcaa content: ensure root directory exists before checking fs-verity support

snapshotservice: add WithParent handling for Commit + tests (#12755)

01fa05731 Add Parent option handling in Commit method and tests

Pass container user (uid, gids) to plugins (#12769)

b0bd04b04 cri,nri: pass container user (uid, gids) to plugins.

cri: fix create container panic if originalAnnotations is nil (#12763)

9018c75d5 cri: fix create container panic if originalAnnotations is nil when restore container

Detect breaking API changes in proto files (#12776)

1b4f588f3 Detect breaking API changes in protos

build(deps): bump the golang-x group with 2 updates (#12778)

ddb6b166e build(deps): bump the golang-x group with 2 updates

build(deps): bump github/codeql-action from 4.31.9 to 4.31.10 (#12779)

ac70789ec build(deps): bump github/codeql-action from 4.31.9 to 4.31.10

Pass seccomp policy to plugins (#12768)

cfec4b30a cri,nri: pass seccomp policy to plugins.

cri,nri: pass any POSIX rlimits to plugins. (#12765)

7b85525cf cri,nri: pass any POSIX rlimits to plugins.

cri: fix checkpoint failed with short id (#12758)

0dc958229 cri: fix checkpoint failed with short id

Pass extended container status to NRI. (#12770)

695c91324 cri,nri: pass extended container status to NRI.

Remove protoc dependency from BUILDING.md (#12771)

19f39fee6 Remove protoc dependency from BUILDING.md

Pass injected CDI devices to plugins (#12767)

98a2e8876 cri,nri: pass injected CDI devices to plugins.

cri,nri: pass linux sysctl to plugins. (#12766)

250388dcd cri,nri: pass linux sysctl to plugins.

Migrate from protobuild to buf (#12762)

f87550d06 Install buf from install-dev-tools

dac9721fa Drop outdated pb.txt files

6a6283193 Update pb files

57782b717 Move buf configuration under api/

248ee80fa Remove GOPATH workaround from Makefile

39991b661 Use relative import intead of GOPATH style imports

edb3e0869 Remove protobuf

aca62ae10 Install buf on demand via go install

eb586b5ef Regenerate proto files

e63f1d3ab Use buf to generate proto code

Add erofs idmap support (#12433)

9b50650d5 snapshots/erofs: Support idmap mounts

552500360 core/mount/*linux: Do idmap bind mounts as private and recursive

44751e28b core/mount: Don't apply uidmap/gidmap during ro instrospection

Tracing: add spans in task/metadata and sandbox paths (#12737)

fb295b9d4 Tracing: add spans in task/metadata and sandbox paths

UpdatePodSandboxResources CRI API handler (#11406)

de5b622bd Persist pod sandbox resource updates

ffd3691c9 Implement UpdatePodSandboxResources CRI API handler

Update OOMKilled event handling (#12714)

016f4a636 *: move new oom package into internal

bdff34ef6 *: skip critest OOMKilled testcase for systemd cgroup

cbb1b13a8 cri-integration: add stress test for TestOOMEventMonitor

aa3c50792 internal/cri/server: check if OOM event occurred before update status

8ac7e3c06 cmd/containerd-shim-runc-v2: use experimental OOM package

21707e6c3 cmd/containerd-shim-runc-v2: add experimental OOM package

Fix ST1005 lint violations: lowercase error strings (#12666)

d6ee6f69b Fix ST1005 lint violations: lowercase error strings

Simplify/Cleanup unit tests (#12746)

253fbe756 Cleanup unit tests

doc: add k8s 1.35 to support matrix (#12749)

b5ee44fe8 add k8s 1.35 to support matrix

Add EROFS layer media type (#12567)

36f8999b9 images: add EROFS layer media type

cri: update log level to warn for CNI load failure during CRI init (#12709)

b66f92f59 cri: update log level to warn for CNI load failure during init

simplify selinux dependency in client (#12702)

6faacd8c7 simplify selinux dependency in client

Set annotations parameter in CreateSandbox request (#12566)

53e696d62 set annotations parameter in CreateSandbox request

build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#12722)

ddc35aca2 build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0

build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 (#12723)

4d7ce1746 build(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0

build(deps): bump github/codeql-action from 4.31.8 to 4.31.9 (#12724)

b3fdd83a9 build(deps): bump github/codeql-action from 4.31.8 to 4.31.9

build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0 (#12736)

e7ba3c35c build(deps): bump google.golang.org/grpc from 1.77.0 to 1.78.0

Add support for EROFS fsmerge feature (#12374)

9a7500a97 Add support for EROFS fsmerge feature

pkg/oci: add WithUmask for SpecOpts (#12719)

01fd590a7 pkg/oci: add WithUmask for SpecOpts

cri: emit warning for concurrent CreateContainer (#12695)

c94b42332 cri: emit warning for concurrent CreateContainer

Drop skip for [Feature:ResourceMetrics] in node e2e tests (#12720)

b58f6579c Drop skip for [Feature:ResourceMetrics] in node e2e tests

cri: Use the runtimeHandler parameter in PullImage (#12710)

b8ae0412f cri: Use the runtimeHandler parameter in PullImage

Ensure ListMetricDescriptors gets tested with latest k/k (#12704)

a31236b4d cri: populate Network.Interfaces in PodSandboxStats on Linux

635b30143 Ensure ListMetricDescriptors gets tested with latest k/k

cri: deprecate enable_cdi, treat disabled CDI an error for injection requests. (#12675)

ec8933999 cri: treat disabled CDI an error for injection requests.

c49379c38 cri: deprecate the enable_cdi config option.

cri: move noisy CDI logs to debug level (#12715)

f2ad3aedb cri: move noisy CDI logs to debug level

Uncomment call to add options for pulling encrypted images (#12705)

c0052e1c6 Reinstate image decryption

cri,nri: bump NRI dependencies to v0.11.0 (#12699)

6936558df cri,nri: pass any linux security profile to plugins.

f202a6989 cri,nri: pass any linux RDT constraints to plugins.

eb616d8ca cri,nri: pass any linux net devices to plugins.

239f69aa0 cri,nri: pass any linux scheduler attributes to plugins.

8e143b2ea cri,nri: pass any linux I/O priority to plugins.

d674423d3 go.{mod,sum}: bump NRI deps to v0.11.0, re-vendor.

Fix typo in README.md for shim author section (#12694)

5b184601d Fix typo in README.md for shim author section

pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const (#12605)

0d27fceee pkg/tracing: HTTPStatusCodeAttributes: remove use of deprecated SemConv const

build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 (#12690)

6879e7e52 build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11

build(deps): bump github/codeql-action from 4.31.7 to 4.31.8 (#12689)

9322000b9 build(deps): bump github/codeql-action from 4.31.7 to 4.31.8

build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0 (#12692)

87e014471 build(deps): bump actions/download-artifact from 6.0.0 to 7.0.0

build(deps): bump the k8s group with 3 updates (#12687)

026d074b1 build(deps): bump the k8s group with 3 updates

build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#12691)

e191976e0 build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0

build(deps): bump actions/cache from 4.3.0 to 5.0.1 (#12686)

92c36c22d build(deps): bump actions/cache from 4.3.0 to 5.0.1

go.{mod,sum}: bump CDI deps to v1.1.0. (#12663)

19765c9b7 go.{mod,sum} bump CDI deps to v1.1.0.

build(deps): bump github.com/intel/goresctrl from 0.10.0 to 0.11.0 (#12657)

2900a8134 build(deps): bump github.com/intel/goresctrl from 0.10.0 to 0.11.0

build(deps): bump github.com/containernetworking/plugins from 1.8.0 to 1.9.0 (#12656)

90cf47eb8 build(deps): bump github.com/containernetworking/plugins

cri: Add background stats collector to calculate UsageNanoCores (#12629)

28f75119b cri: simplify network stats to only add Timestamp field

218ef1613 Removed the circular dependency

7e5809bcf stats_collection_period -> stats_collect_period

9d5ee6501 cri: Add background stats collector to calculate UsageNanoCores

build(deps): bump the otel group across 1 directory with 8 updates (#12647)

8ab6ef83b build(deps): bump the otel group across 1 directory with 8 updates

build(deps): bump the golang-x group with 3 updates (#12644)

5c392ae92 build(deps): bump the golang-x group with 3 updates

Prevents triggering of an inactive issue/PR check for forked repository. (#12592)

80dc40543 [CI] Prevents triggering of an inactive issue/PR check for forked repository.

build(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#12642)

ca0637f16 build(deps): bump github/codeql-action from 4.31.6 to 4.31.7

build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.2.0 (#12643)

7053b5cd1 build(deps): bump golangci/golangci-lint-action from 9.0.0 to 9.2.0

build(deps): bump actions/stale from 10.1.0 to 10.1.1 (#12645)

e72ce6215 build(deps): bump actions/stale from 10.1.0 to 10.1.1

build(deps): bump actions/checkout from 6.0.0 to 6.0.1 (#12646)

b0946006f build(deps): bump actions/checkout from 6.0.0 to 6.0.1

go.mod: remove exclude rules (#12649)

216e43e89 go.mod: remove exclude rules

build(deps): bump github.com/containerd/zfs/v2 from 2.0.0-rc.0 to 2.0.0 (#12641)

fb8c01ded build(deps): bump github.com/containerd/zfs/v2 from 2.0.0-rc.0 to 2.0.0

vendor: go.opentelemetry.io/otel/exporters v1.38.0, go.opentelemetry.io/contrib v0.63.0 (#12604)

a0fa92530 vendor: go.opentelemetry.io/contrib v0.63.0

2d5a8cc71 vendor: go.opentelemetry.io/otel/exporters v1.38.0

add some log if blob is skipped to download (#12140)

508f8cac6 add some log if blob is skipped to download

ci: update CIFuzz actions to support Ubuntu 24.04 (#12631)

d958fb2a2 ci: update CIFuzz actions to support Ubuntu 24.04

fix: refactor ListPodSandboxMetrics (#12594)

398154199 fix: refactor ListPodSandboxMetrics

build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0 (#12610)

fbb53684f build(deps): bump softprops/action-gh-release from 2.4.2 to 2.5.0

ci: bump Go 1.24.11, 1.25.5 (#12615)

127b16357 ci: bump Go 1.24.11, 1.25.5

65ad60ed9 ci: bump Go 1.24.10, 1.25.4

build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2 (#12609)

38e90c471 build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2

build(deps): bump github/codeql-action from 4.31.5 to 4.31.6 (#12611)

37f18854c build(deps): bump github/codeql-action from 4.31.5 to 4.31.6

Map ctr --gpus requests to NVIDIA CDI device requests (#12537)

f5cd8d56f Map ctr --gpus requests to NVIDIA CDI device requests

core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor (#12606)

459a95287 core/runtime/v2: remove uses of otelgrpc.UnaryClientInterceptor

build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0 (#12601)

8fcb918d0 build(deps): bump golang.org/x/crypto from 0.43.0 to 0.45.0

runc: Update runc binary to v1.4.0 (#12603)

fbb42c2a4 runc: Update runc binary to v1.4.0

Avoid using redundant loop devices to run mkfs for mount manager tests. (#12545)

190ed6b67 Avoid using redundant loop devices to run mkfs for mount manager tests.

build(deps): bump github.com/opencontainers/selinux from 1.12.0 to 1.13.1 (#12528)

72b218ee7 build(deps): bump github.com/opencontainers/selinux

cri/nri: short-circuit nil adjustment. (#12574)

3a717c175 cri/nri: short-circuit nil adjustment.

build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (#12571)

dfb8bffb9 build(deps): bump actions/checkout from 5.0.1 to 6.0.0

build(deps): bump github/codeql-action from 4.31.3 to 4.31.5 (#12572)

5a104b967 build(deps): bump github/codeql-action from 4.31.3 to 4.31.5

ci(release): set GO_VERSION in Dockerfile (#12583)

0eac0eeb1 ci(release): set GO_VERSION in Dockerfile

bump containerd/cgroups to v3.1.2 (#12579)

9d357f5b9 bump containerd/cgroups to v3.1.2

.github: skip 5 critest cases for window-2022 (#12578)

13912cf3b .github: skip 5 critest cases in window CI pipeline

ci: use GitHub source for erofs-utils to fix network flakiness (#12573)

c1089f6ed ci: use GitHub source for erofs-utils

core/mount.test: should not call removeLoop when set autoclear (#12561)

a5c84021c core/mount: should not call removeLoop when set autoclear

build(deps): bump the golang-x group across 1 directory with 3 updates (#12524)

dfc2e35b1 build(deps): bump the golang-x group across 1 directory with 3 updates

build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2 (#12500)

e155f0a4b build(deps): bump softprops/action-gh-release from 2.4.1 to 2.4.2

build(deps): bump the k8s group with 3 updates (#12527)

f2771359f build(deps): bump the k8s group with 3 updates

fix: redact all query parameters in CRI error logs (#12491)

3e2cee2bf fix: redact all query parameters in CRI error logs

build(deps): bump github.com/containerd/cgroups/v3 from 3.1.0 to 3.1.1 (#12465)

13b1f4371 build(deps): bump github.com/containerd/cgroups/v3 from 3.1.0 to 3.1.1

build(deps): bump actions/checkout from 5.0.0 to 5.0.1 (#12525)

83a5208a6 build(deps): bump actions/checkout from 5.0.0 to 5.0.1

build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0 (#12530)

fb92a97d4 build(deps): bump google.golang.org/grpc from 1.76.0 to 1.77.0

build(deps): bump github/codeql-action from 4.31.2 to 4.31.3 (#12526)

0cf656ab9 build(deps): bump github/codeql-action from 4.31.2 to 4.31.3

Revert "Implement io.ReaderAt on docker fetch reader" (#12529)

3c9a0bd31 Revert "Implement io.ReaderAt on docker fetch reader"

ctr run: dump OCI config to a file (#12531)

3b899aa11 ctr run: dump OCI config to a file

ctr: allow rlimit-nofile override (#12532)

ee1f94e4d ctr: allow rlimit-nofile override

Fix image defaults on Darwin to usable configuration (#12533)

c2b22d6bd Update the ctr pull defaults when using the transfer service

487d77ff5 Fix transfer unpack defaults on darwin

497f896d6 Update default differs on darwin

49888e001 Use default writable size in erofs snapshotter for non-Linux hosts

01b4c8102 Update default erofs block size on macOS during erofs diff

build(deps): bump github.com/containerd/imgcrypt/v2 from 2.0.1 to 2.0.2 (#12499)

62e71af73 build(deps): bump github.com/containerd/imgcrypt/v2 from 2.0.1 to 2.0.2

build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 (#12501)

7f5d9c25b build(deps): bump golangci/golangci-lint-action from 8.0.0 to 9.0.0

Update RELEASES.md to set 2.0 to EOL (#12505)

3e0af7de2 Update RELEASES.md to set 2.0 to EOL

remotes: fix possible panic from WithMediaTypeKeyPrefix (#12508)

720db2874 remotes: fix possible panic from WithMediaTypeKeyPrefix

Fix nil pointer dereference in container spec memory metrics (#12492)

6b82f034d Fix nil pointer dereference in container spec memory metrics

Changes from containerd/go-dmverity

24 commits

tiny fix: fix link in README (containerd/go-dmverity#8)

a7f1a09 tiny fix: fix link in README

build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 in the golang-x group (containerd/go-dmverity#7)

fba2650 build(deps): bump golang.org/x/sys in the golang-x group

build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (containerd/go-dmverity#3)

8ac0910 build(deps): bump actions/setup-go from 6.0.0 to 6.1.0

build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (containerd/go-dmverity#1)

a2cd4df build(deps): bump actions/checkout from 5.0.1 to 6.0.0

build(deps): bump golang.org/x/sys from 0.27.0 to 0.38.0 in the golang-x group (containerd/go-dmverity#2)

d6426d9 build(deps): bump golang.org/x/sys in the golang-x group

fix CI workflow and lint issues (containerd/go-dmverity#5)

61a2dbc fix: resolve lint issues in verity

0876d0c ci: correct project job checkout step

fix CI workflow and lint issues (containerd/go-dmverity#5)

aaacf1e Align project with containerd sub-project requirements

build(deps): bump golangci/golangci-lint-action from 6.1.1 to 9.1.0 (containerd/go-dmverity#4)

7ba11d8 verity: extract verity operations to pkg

build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 (containerd/go-dmverity#3)

19ed941 dm: implement dm-verity signature verification

build(deps): bump golang.org/x/sys from 0.27.0 to 0.38.0 in the golang-x group (containerd/go-dmverity#2)

dab1114 verity: add API to get hash tree storage size

build(deps): bump actions/checkout from 5.0.1 to 6.0.0 (containerd/go-dmverity#1)

687f68c add ci

110acc0 init veritysetup-go

Changes from containerd/nri

79 commits

adaptation: allow compiling out WASM support altogether. (containerd/nri#253)

ab88fe6 adaptation: allow compiling out WASM support altogether.

Support direct editing of the intelRdt config (containerd/nri#215)

8c0c9f6 Implement removal of RDT

dfbae8a plugins: add sample rdt plugin

d05dd81 pkg/adaptation: support new RDT fields

725289b pkg/runtime-tools/generate: support new RDT fields

a7832a2 api: add rdt

update wazero/wazero version to v1.10.1 (containerd/nri#252)

9eb9a0f update tetratelabs/wazero version to v1.10.1

support specifying a custom NRI socket path (containerd/nri#249)

2df6565 [plugins] support specifying a custom NRI socket path

pkg/api: add OptionalRepeatedString type (containerd/nri#212)

687c1a6 pkg/api: add OptionalRepeatedString type

api,adaptation,generate: allow setting kernel scheduling policy attributes. (containerd/nri#160)

6a371ac device-injector: add scheduling policy adjustment.

e06369e api,adaptation,generate: allow setting scheduler attributes.

device-injector: always log injection summary. (containerd/nri#246)

14cc2e2 device-injector: always log injection summary.

api,adaptation,generate: allow adjusting linux net devices (containerd/nri#157)

5145c92 device-injector: add network device injection.

8a03823 api,adaptation,generate: allow adjusting linux net devices.

Add support for sysctl adjustment (containerd/nri#248)

914fbf3 default-validator: restrict sysctl adjustment

a418956 api: apply sysctl adjustments

8705f9b api: add sysctl container adjustment

feat: Make logger a configurable struct member for stub (containerd/nri#239)

08a891a feat: Make logger a configurable struct member for stub

Drop dependency on opencontainers/runtime-tools (containerd/nri#247)

5e5c2be Drop dependency on opencontainers/runtime-tools

deps: bump runtime-spec to v1.3.0. (containerd/nri#243)

29c5811 (v0.1.0) examples: lock NRI, runtime spec deps.

d812952 v010-adapter: lock NRI, runtime spec and tools deps.

7dd7c7f api,runtime-tools: adjust for runtime-spec v1.3.0.

5d5d4c4 go.{mod,sum}: update runtime-tools, runtime-spec to v1.3.0.

adaptation: ensure sync'ed plugins are fully registered in tests. (containerd/nri#234)

c840397 adaptation: ensure sync'ed plugins are fully registered in tests.

Fix wasm example (containerd/nri#237)

44b2861 Fix wasm example

Makefile: build proto files unconditionally (containerd/nri#229)

d99f960 Fix dockerized proto build

9623748 Makefile: build proto files unconditionally

25d9391 build: ensure we use correct version of protoc and its deps.

adaptation: test with populated initial resources. (containerd/nri#231)

b6b98b5 adaptation: test with populated initial resources.

Install protoc locally in the source tree (containerd/nri#232)

2394daa Install protoc locally in the source tree

plugins/logger: fix default event subscription mask. (containerd/nri#158)

33b1db1 logger: fix default event subscription mask.

extract memory and CPU resource helpers (containerd/nri#210)

7afb32a extract memory and CPU resource helpers

api: expose container user/group ID to plugins. (containerd/nri#230)

22aeb46 docs: update README with container uid/gid info.

71b0335 api,adaptation: add container uid/gid info.

contrib: add example for enabling per-container RDT monitoring (containerd/nri#228)

91fbf06 contrib: add example for enabling per-container RDT monitoring

ci: enable image signing (containerd/nri#224)

fb54916 ci: enable image signing

golangci: disable QF1008 from staticcheck linter (containerd/nri#226)

0b3b577 golangci: disable QF1008 from staticcheck linter

ci: bump golangci-lint to v2.4 (containerd/nri#225)

9787127 Bump golangci-lint to v2.4

1a50ff5 Add nolint directives

00fa1a1 Add and fix comments for exported types

ac21da7 pkg/api/seccomp: add comments for exported functions

3aff986 pkg/runtime-tools/generate: remove embedded field "Generator"

c0c4bb6 pkg/api/validate: add comments for exported methods

[c0ba9da](h

via Release notes from containerd https://ift.tt/Ns1Rh5d

April 18, 2026 at 02:15AM

@github-actions
Copy link
Copy Markdown

✅ Containerd release analysis completed successfully!

📊 Analysis included prerelease versions, reports have been generated, and notifications have been sent.
📋 Pull Request created: #32

Please review the generated analysis reports in the PR and merge when satisfied.

📋 View the workflow run for execution logs.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant