Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 21, 2025

Bumps github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1.

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.1.1

Welcome to the v2.1.1 release of containerd!

The first patch release for containerd 2.1 fixes a critical vulnernability (CVE-2025-47290) which was first introduced in 2.1.0. See the Github Advisory for more details. This release also contains a few smaller updates and bux fixes.

Highlights

Image Storage

  • Fix erofs media type handling (#11855)

Runtime

  • Reduce shim cleanup log level and add more context (#11831)

Deprecations

  • Update removal version for deprecated registry config fields (#11835)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Akihiro Suda
  • Samuel Karp
  • Derek McGowan
  • Gao Xiang
  • Akhil Mohan
  • Chris Henzie
  • Phil Estes
  • Sebastiaan van Stijn
  • ningmingxiao

Changes

  • cb1076646 Merge commit from fork
  • 216667ba0 Prepare release notes for 2.1.1
  • ac00b8e61 Revert "perf(applyNaive): avoid walking the tree for each file in the same directory"
  • build(deps): bump github.com/Microsoft/hcsshim (#11847)
    • 444ca17cd update runhcs version to v0.13.0
    • 0684f1c44 build(deps): bump github.com/Microsoft/hcsshim
  • Fix erofs media type handling (#11855)
    • e1817a401 docs/snapshotters/erofs.md: a tip for improved performance
    • 2168cb92c erofs-differ: fix EROFS native image support
  • Reduce shim cleanup log level and add more context (#11831)

... (truncated)

Commits
  • cb10766 Merge commit from fork
  • 216667b Prepare release notes for 2.1.1
  • c6f9835 Merge pull request #11847 from akhilerm/2.1-hcsshim-update
  • 837aef0 Merge pull request #11855 from k8s-infra-cherrypick-robot/cherry-pick-11851-t...
  • e1817a4 docs/snapshotters/erofs.md: a tip for improved performance
  • 2168cb9 erofs-differ: fix EROFS native image support
  • 444ca17 update runhcs version to v0.13.0
  • 0684f1c build(deps): bump github.com/Microsoft/hcsshim
  • ac00b8e Revert "perf(applyNaive): avoid walking the tree for each file in the same di...
  • dc795bf Merge pull request #11831 from k8s-infra-cherrypick-robot/cherry-pick-11815-t...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.1.0 to 2.1.1.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.1.0...v2.1.1)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 21, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 21, 2025 09:41
@dependabot dependabot bot requested review from ndeloof and glours May 21, 2025 09:41
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 21, 2025
@glours glours merged commit 5c74f07 into main May 21, 2025
27 checks passed
@glours glours deleted the dependabot/go_modules/github.com/containerd/containerd/v2-2.1.1 branch May 21, 2025 10:04
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request May 26, 2025
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [docker/compose](https://github.com/docker/compose) | patch | `v2.36.1` -> `v2.36.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>docker/compose (docker/compose)</summary>

### [`v2.36.2`](https://github.com/docker/compose/releases/tag/v2.36.2)

[Compare Source](docker/compose@v2.36.1...v2.36.2)

#### What's Changed

##### 🐛 Fixes

-   Run ContainerStart sequentially by [@&#8203;ndeloof](https://github.com/ndeloof) in docker/compose#12851
-   Only use attestation when building image outside the development inner loop by [@&#8203;glours](https://github.com/glours) in docker/compose#12853
-   Report error (re)creating container by [@&#8203;ndeloof](https://github.com/ndeloof) in docker/compose#12859
-   Fix `up --build` with additional_context dependency by [@&#8203;ndeloof](https://github.com/ndeloof) in docker/compose#12863

##### 🔧  Internal

-   Add example provider implementation by [@&#8203;ndeloof](https://github.com/ndeloof) in docker/compose#12848
-   Add `up --build` e2e test by [@&#8203;ndeloof](https://github.com/ndeloof) in docker/compose#12864

##### ⚙️ Dependencies

-   Build(deps): bump github.com/containerd/containerd/v2 from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://github.com/dependabot) in docker/compose#12857
-   Bump compose-go to v2.6.4 by [@&#8203;glours](https://github.com/glours) in docker/compose#12867
-   Bump buildkit v0.22.0 and buildx v0.24.0 by [@&#8203;glours](https://github.com/glours) in docker/compose#12868

**Full Changelog**: docker/compose@v2.36.1...v2.36.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4yNi4xIiwidXBkYXRlZEluVmVyIjoiNDAuMjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90Il19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant