Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>

…9372-to-release-1.33

[release-1.33] server: ensure CNI teardown prevents IP leaks with missing netns

We turn the logic for pulling artifacts vs images around to try pulling
the image first. Reason is that there are a bunch of error cases
(unauthorized registry access, disconnected environments or
ImageTagMirrorSet configurations) which are not covered by OCI
artifacts. To avoid regressing that behavior we now focus on pulling
images first before giving artifacts a try.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

…9367-to-release-1.33

[release-1.33] : OCI artifact: pull image before artifact

This change validates memory limits against current usage
from cgroup files instead of stale cAdvisor cache.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>

…9385-to-release-1.33

Signed-off-by: Ayato Tokubi <atokubi@redhat.com>

which could allow cadvisor to choose not to report network metrics

Signed-off-by: Peter Hunt <pehunt@redhat.com>

…9411-to-release-1.33

[release-1.33] inspect: add hostnetwork information

…9407-to-release-1.33

[release-1.33] Fix potential panic when crio fails to parse artifact's ref name.

Signed-off-by: Sunnatillo <sunnat.samadov@est.tech>

Signed-off-by: Kubernetes Release Robot <k8s-release-robot@users.noreply.github.com>
Signed-off-by: Sascha Grunert <sgrunert@redhat.com>

[release-1.33] Update nixpkgs

Bump version to 1.33.4