Skip to content

chore(deps): update dependency cri-o/cri-o to v1.29.0

Yellowhat requested to merge renovate/cri-o-cri-o-1.x into main

This MR contains the following updates:

Package Update Change
cri-o/cri-o minor v1.28.2 -> v1.29.0

⚠ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cri-o/cri-o (cri-o/cri-o)

v1.29.0

Compare Source

CRI-O v1.29.0

The release notes have been generated for the commit range v1.28.0...v1.29.0 on Thu, 21 Dec 2023 18:27:44 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.29.0.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/v1.29.0 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/v1.29.0 \
    --signature cri-o.amd64.v1.29.0.tar.gz.sig \
    --certificate cri-o.amd64.v1.29.0.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.29.0.tar.gz
> bom validate -e cri-o.amd64.v1.29.0.tar.gz.spdx -d cri-o

Changelog since v1.28.0

Changes by Kind
Dependency-Change
Ci
Deprecation
  • Mark io.kubernetes.cri-o.userns-mode annotation, uid_mappings and gid_mappings configuration options as deprecated. They will be replaced with Kubernetes native user namespace support in the future. (#​7592, @​haircommander)
  • Mark selinux option as deprecated. In the future, CRI-O will use the selinux status of the host to enable SELinux separation in pods (#​7593, @​haircommander)
  • Removed crio-status binary in favor of the crio status subcommand. Fixed the help output of crio status. (#​7440, @​saschagrunert)
API Change
  • Added more file system information in ImageFsInfo as part of the garbage collection KEP. (#​7269, @​kannon92)
Feature
Documentation
Bug or Regression
  • Clean up container checkpoint directory after export (#​7355, @​rst0git)
  • Fix a bug in cpuset load balancing where cpusets flip between load balanced and not due to an ordering issue. (#​7208, @​haircommander)
  • Fix a bug where CRI-O would override a Bidirectional mount in favor of a HostToContainer if the mount contained the host's container storage (#​7408, @​haircommander)
  • Fixed image name consistency for more predictable behavior with pinned images. (#​7299, @​sohankunkerkar)
  • No longer set inactive-or-failed collect mode property, which fixes a race with container that OOM kill. As a result, users should upgrade to runc 1.1.8 or crun 1.9 (#​7374, @​haircommander)
  • Update systemd install path for coreos based distribution (fedora coreos & rhcos) (#​6668, @​hasan4791)
  • Usage text for CLI flags --read-only, --bind-mount-prefix, --no-pivot, and --internal-wipe no longer display an erroneous placeholder value following the flag (#​6315, @​alebcay)
  • Validate pod namespace and uid before creation. (#​7353, @​saschagrunert)
Other (Cleanup or Flake)
  • CRI-O does not vendor the main kubernetes repository any more. (#​6953, @​saschagrunert)
  • If a filter is specified in the ListImages CRI method, it is now interpreted the same way image names in the ImageStatus methods are. (#​7336, @​mtrmac)
  • The PullImage operation no longer accepts image ID values/prefixes, relevant in extremely rare configurations with default_transport set to a transport which accesses local files. (#​7392, @​mtrmac)
  • The semantics of the pause_image config option has been clarified, and invalid values are rejected at daemon start and reload. (#​7358, @​mtrmac)
  • Warn users on container creation when trying to use noNewPrivileges on privileged or CAP_SYS_ADMIN. (#​7493, @​saschagrunert)
Uncategorized
  • Add pod annotations to RuntimeConfig (#​7342, @​LenkaSeg)
  • Add support to split filesystem using imagestore (#​7238, @​flouthoc)
  • Allow the io.kubernetes.cri-o.Devices annotation in the default runtime class, which along with AllowedDevices containing /dev/fuse by default, gives containers in the default runtime class optional access to /dev/fuse (#​7522, @​haircommander)
  • Fix a bug where the cgroup crun configures is different than that CRI-O sets load balancing/cpu quota on (#​7373, @​haircommander)
  • Update pids_limit field to be -1 by default. Even though it's deprecated, having -1 is correctly interpreted by runc as unlimited, as the original intent of the 0 value was meant to be. (#​7503, @​haircommander)

Dependencies

Added
  • cloud.google.com/go/dataproc/v2: v2.3.0
  • cloud.google.com/go/profiler: v0.4.0
  • code.cloudfoundry.org/bytefmt: 5bb3c17
  • github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v0.4.1
  • github.com/DataDog/appsec-internal-go: v1.0.0
  • github.com/DataDog/datadog-agent/pkg/obfuscate: v0.48.1
  • github.com/DataDog/datadog-agent/pkg/remoteconfig/state: v0.48.1
  • github.com/DataDog/datadog-go/v5: v5.3.0
  • github.com/DataDog/go-libddwaf: v1.5.0
  • github.com/DataDog/go-tuf: v1.0.2-0.5.2
  • github.com/DataDog/sketches-go: v1.4.3
  • github.com/aead/serpent: fba1697
  • github.com/agext/levenshtein: v1.2.3
  • github.com/anchore/go-struct-converter: c68fdcf
  • github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.11.56
  • github.com/buildkite/interpolate: 07f35b4
  • github.com/bytedance/sonic: v1.10.1
  • github.com/cavaliergopher/cpio: v1.0.1
  • github.com/checkpoint-restore/go-criu/v7: v7.0.0
  • github.com/chenzhuoyu/base64x: 296ad89
  • github.com/chenzhuoyu/iasm: v0.9.0
  • github.com/chromedp/cdproto: 3cf4e6d
  • github.com/chromedp/chromedp: v0.9.2
  • github.com/chromedp/sysutil: v1.0.0
  • github.com/cockroachdb/apd/v3: v3.2.1
  • github.com/codahale/rfc6979: 6a90f24
  • github.com/containerd/fuse-overlayfs-snapshotter: v1.0.2
  • github.com/containerd/log: v0.1.0
  • github.com/containerd/nydus-snapshotter: v0.8.2
  • github.com/containerd/stargz-snapshotter: v0.14.3
  • github.com/containers/gvisor-tap-vsock: v0.7.1
  • github.com/containers/luksy: b5a7f79
  • github.com/distribution/reference: v0.5.0
  • github.com/docker/spdystream: 449fdfc
  • github.com/ebitengine/purego: v0.5.0
  • github.com/form3tech-oss/jwt-go: v3.2.2+incompatible
  • github.com/gin-contrib/sse: v0.1.0
  • github.com/gin-gonic/gin: v1.9.1
  • github.com/gobwas/httphead: v0.1.0
  • github.com/gobwas/pool: v0.2.1
  • github.com/gobwas/ws: v1.2.1
  • github.com/gofrs/flock: v0.8.1
  • github.com/golang-jwt/jwt/v5: v5.0.0
  • github.com/google/go-github/v55: v55.0.0
  • github.com/google/go-github/v56: v56.0.0
  • github.com/googleapis/gnostic: v0.4.1
  • github.com/gowebpki/jcs: v1.0.1
  • github.com/hanwen/go-fuse/v2: v2.2.0
  • github.com/hugelgupf/p9: 54f5c55
  • github.com/intel-go/cpuid: 5747e5c
  • github.com/kata-containers/kata-containers/src/runtime: c7c7632
  • github.com/lestrrat-go/httprc: v1.0.4
  • github.com/lestrrat-go/jwx/v2: v2.0.16
  • github.com/letsencrypt/borp: 6cc6ce5
  • github.com/letsencrypt/validator/v10: a0c7dfc
  • github.com/lufia/plan9stats: 39d0f17
  • github.com/matttproud/golang_protobuf_extensions/v2: v2.0.0
  • github.com/mdlayher/socket: v0.4.1
  • github.com/mdlayher/vsock: v1.2.1
  • github.com/mitchellh/hashstructure/v2: v2.0.2
  • github.com/moby/buildkit: v0.12.3
  • github.com/moby/sys/mount: v0.3.3
  • github.com/oleiade/reflections: v1.0.1
  • github.com/otiai10/copy: v1.14.0
  • github.com/outcaste-io/ristretto: v0.2.3
  • github.com/package-url/packageurl-go: 8907843
  • github.com/pbnjay/memory: 7b4eea6
  • github.com/pkg/profile: v1.5.0
  • github.com/power-devops/perfstat: 5aafc22
  • github.com/poy/onpar: v1.1.2
  • github.com/puzpuzpuz/xsync/v2: v2.5.1
  • github.com/sagikazarmark/locafero: v0.3.0
  • github.com/sagikazarmark/slog-shim: v0.1.0
  • github.com/segmentio/asm: v1.2.0
  • github.com/serialx/hashring: 8b29126
  • github.com/shirou/gopsutil/v3: v3.23.10
  • github.com/shoenig/go-m1cpu: v0.1.6
  • github.com/sourcegraph/conc: v0.3.0
  • github.com/spdx/tools-golang: v0.5.1
  • github.com/tklauser/go-sysconf: v0.3.12
  • github.com/tklauser/numcpus: v0.6.1
  • github.com/tonistiigi/fsutil: 36ef4d8
  • github.com/tonistiigi/go-actions-cache: 0bdeb6e
  • github.com/tonistiigi/go-archvariant: v1.0.0
  • github.com/tonistiigi/units: 6950e57
  • github.com/tonistiigi/vt100: f9a4f7e
  • github.com/twitchyliquid64/golang-asm: v0.15.1
  • github.com/u-root/uio: 3e8cd9d
  • github.com/ugorji/go/codec: v1.2.11
  • github.com/yusufpapurcu/wmi: v1.2.3
  • gitlab.com/nvidia/cloud-native/go-nvlib: 47893b1
  • go.etcd.io/etcd: dd1b699
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace: v0.40.0
  • go.opentelemetry.io/otel/exporters/jaeger: v1.14.0
  • go4.org/intern: 6c62f75
  • go4.org/unsafe/assume-no-moving-gc: e7c30c7
  • golang.org/x/arch: v0.5.0
  • gopkg.in/DataDog/dd-trace-go.v1: v1.56.1
  • gopkg.in/cheggaaa/pb.v1: v1.0.25
  • inet.af/netaddr: b8eac61
  • k8s.io/api: v0.29.0
  • k8s.io/apimachinery: v0.29.0
  • k8s.io/apiserver: v0.29.0
  • k8s.io/client-go: v0.29.0
  • k8s.io/code-generator: v0.19.7
  • k8s.io/component-base: v0.29.0
  • k8s.io/cri-api: v0.29.0
  • k8s.io/kms: v0.29.0
  • k8s.io/kubelet: v0.29.0
  • kernel.org/pub/linux/libs/security/libcap/cap: v1.2.67
  • kernel.org/pub/linux/libs/security/libcap/psx: v1.2.67
  • tags.cncf.io/container-device-interface/specs-go: v0.6.0
  • tags.cncf.io/container-device-interface: v0.6.2
  • zenhack.net/go/util: 744d2d6
Changed
Removed
  • bitbucket.org/bertimus9/systemstat: v0.5.0
  • cloud.google.com/go/apikeys: v0.6.0
  • cloud.google.com/go/dataproc: v1.12.0
  • cloud.google.com/go/gaming: v1.9.0
  • cloud.google.com/go/grafeas: v0.2.0
  • cloud.google.com/go/recaptchaenterprise: v1.3.1
  • cloud.google.com/go/servicecontrol: v1.11.1
  • cloud.google.com/go/servicemanagement: v1.8.0
  • cloud.google.com/go/serviceusage: v1.6.0
  • cloud.google.com/go/vision: v1.2.0
  • gioui.org: 57750fc
  • git.sr.ht/~sbinet/gg: v0.3.1
  • github.com/Azure/go-autorest/autorest/to: v0.4.0
  • github.com/Azure/go-autorest/autorest/validation: v0.3.1
  • github.com/GoogleCloudPlatform/k8s-cloud-provider: f118173
  • github.com/JeffAshton/win_pdh: 76bb4ee
  • github.com/JohnCGriffin/overflow: 46fa312
  • github.com/MakeNowJust/heredoc: v1.0.0
  • github.com/a8m/tree: 10a5fd5
  • github.com/ajstarks/deck/generate: c3f852c
  • github.com/ajstarks/deck: 30c9fc6
  • github.com/ajstarks/svgo: 1546f12
  • github.com/apache/arrow/go/v10: v10.0.1
  • github.com/apache/arrow/go/v11: v11.0.0
  • github.com/apache/thrift: v0.16.0
  • github.com/armon/go-metrics: f0300d1
  • github.com/armon/go-radix: 7fddfc3
  • github.com/beeker1121/goque: d618510
  • github.com/bketelsen/crypt: 5cbc8cc
  • github.com/boombuler/barcode: v1.0.1
  • github.com/cavaliercoder/go-cpio: 925f952
  • github.com/chai2010/gettext-go: v1.0.2
  • github.com/checkpoint-restore/go-criu/v6: v6.3.0
  • github.com/cockroachdb/apd/v2: v2.0.2
  • github.com/container-storage-interface/spec: v1.8.0
  • github.com/coredns/caddy: v1.1.1
  • github.com/coredns/corefile-migration: v1.0.20
  • github.com/daviddengcn/go-colortext: v1.0.0
  • github.com/dougm/pretty: 2ee9d74
  • github.com/euank/go-kmsg-parser: v2.0.0+incompatible
  • github.com/exponent-io/jsonpath: d6023ce
  • github.com/facebookgo/clock: 600d898
  • github.com/facebookgo/limitgroup: 6abd8d7
  • github.com/facebookgo/muster: fd3d795
  • github.com/fatih/camelcase: v1.0.0
  • github.com/flynn/go-docopt: f6dd2eb
  • github.com/flynn/go-shlex: 3f9db97
  • github.com/fogleman/gg: v1.3.0
  • github.com/fvbommel/sortorder: v1.1.0
  • github.com/go-errors/errors: v1.4.2
  • github.com/go-fonts/dejavu: v0.1.0
  • github.com/go-fonts/latin-modern: v0.2.0
  • github.com/go-fonts/liberation: v0.2.0
  • github.com/go-fonts/stix: v0.1.0
  • github.com/go-gorp/gorp/v3: v3.0.2
  • github.com/go-latex/latex: c0d11ff
  • github.com/go-logr/zapr: v1.2.3
  • github.com/go-pdf/fpdf: v0.6.0
  • github.com/go-redis/redis/v8: v8.11.5
  • github.com/gofrs/uuid: v4.4.0+incompatible
  • github.com/golang/freetype: e2365df
  • github.com/golangplus/bytes: v1.0.0
  • github.com/golangplus/fmt: v1.0.0
  • github.com/golangplus/testing: v1.0.0
  • github.com/google/cadvisor: v0.47.3
  • github.com/google/flatbuffers: v2.0.8+incompatible
  • github.com/google/gnostic: v0.5.7-v3refs
  • github.com/google/go-github/v53: v53.2.0
  • github.com/google/martian/v3: v3.3.2
  • github.com/googleapis/go-type-adapters: v1.0.0
  • github.com/googleapis/google-cloud-go-testing: bcd43fb
  • github.com/hashicorp/consul/api: v1.1.0
  • github.com/hashicorp/consul/sdk: v0.1.1
  • github.com/hashicorp/go-msgpack: v0.5.3
  • github.com/hashicorp/go-syslog: v1.0.0
  • github.com/hashicorp/go-uuid: v1.0.1
  • github.com/hashicorp/go.net: v0.0.1
  • github.com/hashicorp/logutils: v1.0.0
  • github.com/hashicorp/mdns: v1.0.0
  • github.com/hashicorp/memberlist: v0.1.3
  • github.com/hashicorp/serf: v0.8.2
  • github.com/honeycombio/beeline-go: v1.10.0
  • github.com/honeycombio/libhoney-go: v1.16.0
  • github.com/iancoleman/strcase: v0.2.0
  • github.com/ishidawataru/sctp: 7c296d4
  • github.com/jmespath/go-jmespath/internal/testify: v1.5.1
  • github.com/jung-kurt/gofpdf: 24315ac
  • github.com/kballard/go-shellquote: 95032a8
  • github.com/klauspost/asmfmt: v1.3.2
  • github.com/libopenstorage/openstorage: v1.0.0
  • github.com/liggitt/tabwriter: 89fcab3
  • github.com/lithammer/dedent: v1.1.0
  • github.com/lyft/protoc-gen-star: v0.6.1
  • github.com/minio/asm2plan9s: cdd7644
  • github.com/minio/c2goasm: 36a3d3b
  • github.com/mitchellh/cli: v1.0.0
  • github.com/mitchellh/go-testing-interface: v1.0.0
  • github.com/mitchellh/gox: v0.4.0
  • github.com/mitchellh/iochan: v1.0.0
  • github.com/moby/ipvs: v1.1.0
  • github.com/modocache/gover: b58185e
  • github.com/mohae/deepcopy: 491d360
  • github.com/monochromegane/go-gitignore: 205db1a
  • github.com/pascaldekloe/goe: 57f6aae
  • github.com/phpdave11/gofpdf: v1.4.2
  • github.com/phpdave11/gofpdi: v1.0.13
  • github.com/pkg/diff: 20ebb0f
  • github.com/posener/complete: v1.1.1
  • github.com/rasky/go-xdr: 4930550
  • github.com/remyoudompheng/bigfft: eec4a21
  • github.com/robfig/cron/v3: v3.0.1
  • github.com/rubiojr/go-vhd: 02e2102
  • github.com/ruudk/golang-pdf417: a7e3863
  • github.com/ryanuber/columnize: 9b3edd6
  • github.com/sean-/seed: e2103e2
  • github.com/vmihailenco/msgpack/v5: v5.3.5
  • github.com/vmihailenco/tagparser/v2: v2.0.0
  • github.com/vmware/govmomi: v0.30.0
  • github.com/vmware/vmw-guestinfo: 25eff15
  • github.com/xhit/go-str2duration: v1.2.0
  • github.com/zeebo/assert: v1.3.0
  • github.com/zeebo/xxh3: v1.0.2
  • go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful: v0.35.0
  • go.opentelemetry.io/contrib/propagators/b3: v1.10.0
  • go.starlark.net: a134d8f
  • gonum.org/v1/gonum: v0.11.0
  • gonum.org/v1/netlib: 8cb4219
  • gonum.org/v1/plot: v0.10.1
  • gopkg.in/alexcesaro/statsd.v2: v2.0.0
  • gopkg.in/gcfg.v1: v1.2.3
  • k8s.io/kubernetes/staging/src/k8s.io/api: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/apiextensions-apiserver: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/apimachinery: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/apiserver: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/cli-runtime: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/client-go: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/cloud-provider: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/cluster-bootstrap: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/code-generator: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/component-base: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/component-helpers: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/controller-manager: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/cri-api: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/csi-translation-lib: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/dynamic-resource-allocation: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/endpointslice: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kms: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kube-aggregator: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kube-controller-manager: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kube-proxy: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kube-scheduler: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kubectl: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/kubelet: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/legacy-cloud-providers: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/metrics: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/mount-utils: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/pod-security-admission: 855e7c4
  • k8s.io/kubernetes/staging/src/k8s.io/sample-apiserver: 855e7c4
  • k8s.io/system-validators: v1.8.0
  • lukechampine.com/uint128: v1.2.0
  • modernc.org/cc/v3: v3.36.3
  • modernc.org/ccgo/v3: v3.16.9
  • modernc.org/ccorpus: v1.11.6
  • modernc.org/httpfs: v1.0.6
  • modernc.org/libc: v1.17.1
  • modernc.org/mathutil: v1.5.0
  • modernc.org/memory: v1.2.1
  • modernc.org/opt: v0.1.3
  • modernc.org/sqlite: v1.18.1
  • modernc.org/strutil: v1.1.3
  • modernc.org/tcl: v1.13.1
  • modernc.org/token: v1.0.0
  • modernc.org/z: v1.5.1
  • rsc.io/pdf: v0.1.1
  • sigs.k8s.io/kustomize/api: 6ce0bf3
  • sigs.k8s.io/kustomize/cmd/config: v0.11.2
  • sigs.k8s.io/kustomize/kustomize/v5: 6ce0bf3
  • sigs.k8s.io/kustomize/kyaml: 6ce0bf3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports