chore: update releases #132

renovate · 2023-03-13T00:36:17Z

This PR contains the following updates:

Package	Update	Change
containerd/stargz-snapshotter	minor	`v0.15.1` -> `v0.16.1`
containers/crun	minor	`1.17` -> `1.18.2`
git://git.kernel.org/pub/scm/libs/libcap/libcap.git	minor	`2.70` -> `2.72`
git://sourceware.org/git/elfutils.git	minor	`0.191` -> `0.192`
google/gvisor	minor	`20241007.0` -> `20241104.0`
https://github.com/qemu/qemu.git	patch	`9.1.0` -> `9.1.1`
https://github.com/spinkube/containerd-shim-spin.git	minor	`v0.16.0` -> `v0.17.0`
https://gitlab.gnome.org/GNOME/glib.git	minor	`2.82.0` -> `2.83.0`
kata-containers/kata-containers	minor	`3.3.0` -> `3.10.1`
nvidia/libnvidia-container	minor	`v1.16.1` -> `v1.17.2`
nvidia/nvidia-container-toolkit	minor	`v1.16.1` -> `v1.17.2`
open-iscsi/open-isns	minor	`0.102` -> `0.103`
siderolabs/talos-metal-agent	patch	`v0.1.0-alpha.0` -> `v0.1.0-alpha.1`
tailscale/tailscale	patch	`1.76.0` -> `1.76.6`

Release Notes

containerd/stargz-snapshotter (containerd/stargz-snapshotter)

`v0.16.1`

Compare Source

Notable Changes

prevernt go version upgraded to 1.23 in go.mod (#1863)

`v0.16.0`

Compare Source

Notable Changes

Support for the latest CRI-O(>=v1.31.0) and Podman (>=v5.1.0) Additional Layer Store (#1673, #1674)
Fix log message in refnode.Lookup (#1595), thanks to @iain-macdonald
store: use OnForget API for checking if a node is reusable (#1808)
Support for containerd v2 (#1722), thanks to @apostasie
fs: Check connection only when image isn't fully cached (#1584)

containers/crun (containers/crun)

`v1.18.2`

Compare Source

cgroup, systemd: fix a regression when a configuration file includes only one default rule.

`v1.18.1`

Compare Source

cgroup: deprecate cgroup v1.
cgroup: fix regression setting up the devices cgroup on cgroup v1.
cgroup: fix regression and work again with the default Docker devices configuration on systemd.
linux: fix setting up user namespace when newuidmap/newgidmap are not available.

`v1.18`

Compare Source

cgroup: support running without a sub-cgroup with systemd. Use the d-bus API to set the container limits on the systemd scope itself. It allows running without a sub-cgroup when the systemd driver is used, the run.oci.systemd.subgroup annotation controls it. For now, a sub-cgroup is still created, but it might be changed in future.
cgroup: add support for the misc controller.
linux: fix running on kernel without user namespaces.
criu, restore: add lsm-profile option.
criu, restore: add lsm-mount-context option.
linux: add duplicate namespace detection.

google/gvisor (google/gvisor)

qemu/qemu (https://github.com/qemu/qemu.git)

`v9.1.1`

Compare Source

spinkube/containerd-shim-spin (https://github.com/spinkube/containerd-shim-spin.git)

`v0.17.0`

Compare Source

Added

Added component filtering based on env var SPIN_COMPONENTS_TO_RETAIN (#197)
Improved error hanlding in selective deployment (#229)

Changed

Turn off native unwinding from Wasmtime Config to avoid faulty libunwind detection errors (#215)
Updated the spin version to v3.0.0 (#230)

Fixed

FIxed CI errors due to old versions of Go and TinyGo and disk pressure (#217)

GNOME/glib (https://gitlab.gnome.org/GNOME/glib.git)

`v2.83.0`

Compare Source

Overview of changes in GLib 2.83.0, 2024-11-06

Update to Unicode 16.0.0; there may be bugs in linebreaking support, see #3518
(#3460, work by Philip Withnall)
Optimise UTF-8 validation of strings, including use of ifuncs to prevent
spurious warnings from sanitizers and valgrind (#3481, work by Christian
Hergert)
Fix a potential buffer overflow in GSocks4aProxy (#3461, work by
Michael Catanzaro)
Change the default value of -Dglib_debug from auto to enabled for
developers — distributions will almost certainly want to override it to
-Dglib_debug=disabled for package release builds though; see #3421
Revert per-instance locking changes in GCancellable as they introduced new
races (#3448)
Bump Meson dependency to 1.4.0 (!4244, work by Benjamin Gilbert)
Rename multiple g_unix_mount_*() APIs to g_unix_mount_entry_*() (#3492,
work by Jialu Zhou)
Add a new GFileMonitor backend for macOS and BSD: libinotify-kqueue (!3657,
work by Gleb Popov)
Add APIs for sync, async and finish function annotations to libgirepository
(!3746, work by Evan Welsh)
Bugs fixed:
- #3289 readlink -f fails in CI on macOS
- #3415 module-test-library and module-test-plugin tests fail on FreeBSD and
  muslc (Philip Withnall)
- #3417 Investigate trampoline performance implications in g_mutex_lock_impl()
  changes (Philip Withnall)
- #3421 Default value for glib_debug meson option (Philip Withnall)
- #3444 deprecation warnings when using gobjectnotifyqueue.c
- #3450 Should check for epoll_create1 rather than epoll_create (Philip
  Withnall)
- #3451 Gio.MenuModel docs have an outdated UI example (Philip Withnall)
- #3456 Test /unix-mounts/get-mount-entries fails unless libmount is enabled
  (Philip Withnall)
- #3458 scan-build CI job fails due to gvdb subproject not having meson.build
  (Philip Withnall)
- #3460 "404: Page not found" Error on "submitted as merge requests" Link
  (Philip Withnall)
- #3461 Buffer overflow in set_connect_msg() (Michael Catanzaro)
- #3464 g-ir-scanner fails silently on msys2 CI jobs (Philip Withnall)
- #3465 Avoid GError for control flow in GResources
- #3469 Unclear correctness of g_malloc() in pattern_coalesce() (Michael
  Catanzaro)
- #3470 Update to Unicode 16.0.0 (Philip Withnall)
- #3472 Overactive GVariantTypeInfo collection causes considerable overhead
  (Christian Hergert)
- #3477 Determine policy on 32-bit support (Philip Withnall)
- #3478 Incorrect Examples in GVariant Specification (Christian Hergert)
- #3480 glib/gvariant: incorrect use of G_ANALYZER_ANALYZING (Christian
  Hergert)
- #3481 Discussion: utf8 validation optimization (Christian Hergert)
- #3483 mainloop Unix FD test intermittently fails on Hurd (Philip Withnall)
- #3484 g_app_info_launch_default_for_uri no longer works on macOS
- #3486 GVariant inline allocation support broke i686/32-bit builds (Christian
  Hergert)
- #3488 glib does not properly detect gobject-introspection (Philip
  Withnall)
- #3489 Multicast cannot be joined on Mac OS on non-default interface
  (Nirbheek Chauhan)
- #3490 Meson: fix support for aarch64-w64-mingw32 (Windows on ARM64) (Carlo
  Bramini)
- #3492 Incorrect Documentation for g_unix_mount_get_mount_path Return Value
  Ownership (Jialu Zhou)
- #3500 AIX: build failure due to pollfd structure change (Parth Patel)
- #3502 Test regressions with tzdata 2024b (Rebecca N. Palmer)
- #3508 g_array_free and free_seg
- #3512 AIX: Undefined symbol related to ASAN Sanitizer
- !3657 Introduce a new GFileMonitor backend: libinotify-kqueue
- !3746 girepository: Add APIs for sync, async, and finish function
  annotations
- !3816 Update the wrap file for gi-docgen
- !4126 build: Enable -Wfloat-conversion and fix warnings
- !4176 tests: Expand tests for app launching via D-Bus
- !4196 refstring: add GEqualFunc for ref-counted strings
- !4202 simpleproxyresolver: Ignore host with scope id
- !4204 Fix minor issues found by static analysis, and add some additional
  code comments
- !4216 build: Post-release version bump
- !4218 Persian l10n
- !4219 tests: Run lint tests with detected bash
- !4223 Update Korean translation
- !4224 Update Catalan translation
- !4225 Update Czech translation
- !4226 Update Portuguese translation
- !4227 gspawn: close child_err_report_fd before exiting on error
- !4235 Update Ukrainian translation
- !4236 Cherry pick Polish and Brazilian Portuguese translations from
  glib-2-82 to main
- !4237 Update French translation
- !4239 Update Galician translations for main
- !4243 gresource: Convert docs to gi-docgen linking syntax
- !4244 build: Bump Meson dependency to 1.4.0
- !4245 resource: Add g_resource[s]_has_children and avoid a pointless
  allocation
- !4248 dir: Avoid some allocations
- !4252 gio: Fix overindented docstring of buffer argument
- !4253 Update Bulgarian translation
- !4254 Update British English translation (main)
- !4256 Updated Lithuanian translation
- !4257 Update Hungarian translation
- !4260 Collation keys are not encoded in UTF-8
- !4261 gsocket windows: check event before calling WSAEnumNetworkEvents
- !4262 Update Russian translation
- !4264 Update Danish translation
- !4267 Update Georgian translation
- !4268 subprojects: Update pcre2 to 10.44
- !4269 docs(glib): Fix link in string-utils ref
- !4272 gio: Add a query_exists vfunc to GFile
- !4277 tests: Add some explicit float → int casts
- !4278 GDBus: Don't log a message for G_DBUS_CONNECTION_FLAGS_CROSS_NAMESPACE
- !4286 glib/gvariant: avoid GVariantType copy for stack builders
- !4288 girepository: Make _blob_is_registered_type static inline
- !4290 glib/gbytes: save small byte buffers inline
- !4292 Fix incorrect use of assert/debug/check macros
- !4293 gvarianttypeinfo: reduce caching overhead
- !4294 gvarianttype: mark const functions as such
- !4295 gvariant: Avoid malloc/free in valid_format_string()
- !4296 glib/gvariant: use g_utf8_validate() for strlen
- !4297 glib/gvarianttype: g_variant_type_is_subtype_of() fastpath
- !4298 glib/gvariant: avoid g_renew() for definite tuples
- !4299 glib/gvariant: Avoid extraneous GBytes ref counting
- !4300 gpoll windows: use a threadpool when polling large number of fds
- !4301 glib/gvariant: Inline small gvariant data using C99 flexible arrays
- !4302 glib/gvariant: skip bitlock for g_variant_ref_sink()
- !4303 gbytes: Convert docs to gi-docgen linking syntax
- !4304 gutf8: Convert docs to gi-docgen linking syntax
- !4305 build: switch back to c_std=gnu99 pending ObjC fix
- !4307 ci: Re-enable fatal warnings for FreeBSD CI
- !4308 utils: Add g_steal_handle_id() to complement g_clear_handle_id()
- !4310 tests: FreeBSD doesn't use glibc
- !4311 tests: Move fake-document-portal subprocess inside dbus-appinfo test
- !4313 remove quadratic behavior in g_string_replace
- !4315 fuzzing: Add simple fuzz test for g_string_replace()
- !4318 CI: Use Visual Studio 2019 for the MSVC CI
- !4321 gvariant-core.c: Fix suffix alignment on 32-bit MSVC builds
- !4322 gvariant: Fix unused variables when G_DISABLE_ASSERT is defined
- !4323 gbytes: Add an assertion to placate static analysis
- !4326 gvarianttype: Add two missing (nullable) annotations and port docs to
  gi-docgen format
- !4327 gio/gdatainputstream: use memchr() when possible
- !4331 gir: Ignore function-inline and method-inline elements
- !4332 gstring: Fix a heap buffer overflow in the new g_string_replace() code
- !4334 fuzzing: Add input length limits on g_string_replace() test
- !4335 docs: Update CI platforms list and Visual Studio recommendation
- !4338 CI/MSYS2: Fix prefix for gobject-introspection
- !4339 Win32 cleanup: do not define STRICT
- !4340 gsocket: Fix #ifdef for defining g_socket_get_adapter_ipv4_addr()
- !4341 gio: Use g_steal_handle_id() with signal unsubscriptions
- !4342 CI: Add manual CI job for VS2019 ARM64 builds
- !4343 CI: Skip PCRE2 tests for now for 32-bit Visual Studio builds
- !4344 glib/gutf8: use ifunc to check for valgrind
- !4345 fuzzing: Add fuzz tests for GDataInputStream’s complex read methods
- !4346 gdate: Fix minor typo in documentation comment
- !4347 docs: Add Meson to the GSettings build integration
- !4348 gdatainputstream: Fix length return value on UTF-8 validation failure
- !4350 glib: Don't require GLIB_DOMAIN to be a NUL-terminated string
- !4351 Build fixes for building on Solaris & illumos
- !4352 gdatainputstream: Use memchr() for the multi-stop-char case too
- !4353 docs: Add CI runner maintainers to CODEOWNERS
- !4354 glib.supp: Suppress more _g_io_module_get_default_type leaks
- !4358 Add a CI job for Debian stable i386 (32-bit)
- !4359 tests: Use g_assert_*() rather than g_assert() in GDateTime tests
- !4365 fuzzing: Fix buffer overread error in the fuzz test itself
- !4366 glocalfile: Disable faccessat()-based query_exists on FreeBSD
- !4367 tests: Fix calls to deprecated API in unix-mounts tests
- !4373 macos: Remove extraneous space from type identifier
- !4374 thread: Force-limit thread name length
- !4375 Small improvements to g_on_error_stack_trace and g_on_error_query
- !4376 Enable GNetworkMonitorNetlink on FreeBSD
- !4377 gvariant: Introduce G_VARIANT_BUILDER_INIT_UNSET
- !4378 gio: Fix GFileEnumerator leaks in gio tools
- !4383 gtask: Fix comment for auto task naming via 'g_task_set_source_tag()'
Translation updates:
- Bulgarian (twlvnn kraftwerk)
- Catalan (Jordi Mas)
- Czech (AsciiWolf)
- Danish (Ask Hjorth Larsen)
- English (United Kingdom) (Bruce Cowan)
- French (Vincent Chatelain)
- Galician (Fran Diéguez)
- Georgian (NorwayFun)
- Hungarian (Balázs Úr)
- Korean (Changwoo Ryu)
- Lithuanian (Aurimas Černius)
- Persian (Danial Behzadi)
- Polish (Piotr Drąg)
- Portuguese (Hugo Carvalho)
- Portuguese (Brazil) (Rafael Fontenelle)
- Russian (jtux270)
- Ukrainian (Yuri Chornoivan)

`v2.82.2`

Compare Source

Overview of changes in GLib 2.82.2, 2024-10-17

Bugs fixed:
- #3480 glib/gvariant: incorrect use of G_ANALYZER_ANALYZING (Christian
  Hergert)
- #3489 Multicast cannot be joined on Mac OS on non-default interface
  (Nirbheek Chauhan)
- !4285 Update Catalan translation
- !4306 Backport !4291 “glib/gvariant: Fix check for G_ANALYZER_ANALYZING” to
  glib-2-82
- !4314 Backport !4312 “macos: Fix URL launcher” to glib-2-82
- !4325 Backport !4176 “gopenuriportal: Fix two memory leaks” to glib-2-82
- !4336 Backport !4333 “gio: Fix multicast iface selection on macOS” to
  glib-2-82
- !4349 Backport !4348 “gdatainputstream: Fix length return value on UTF-8
  validation failure“ to glib-2-82
Translation updates:
- Catalan (Jordi Mas)

`v2.82.1`

Compare Source

Overview of changes in GLib 2.82.1, 2024-09-19

Fix a potential buffer overflow in GSocks4aProxy (#3461, work by
Michael Catanzaro)
Bugs fixed:
- #3456 Test /unix-mounts/get-mount-entries fails unless libmount is enabled
  (Philip Withnall)
- #3461 Buffer overflow in set_connect_msg() (Michael Catanzaro)
- !4220 Backport !4217 “tests: Test against a sample mtab file in unix-mounts
  for getmntent()” to glib-2-82
- !4221 Backport !4219 “tests: Run lint tests with detected bash” to glib-2-82
- !4229 Update Polish translation for glib-2-82
- !4230 Update Czech translation [glib-2-82]
- !4231 Update Portuguese translation
- !4233 Update fa.po
- !4234 Update Brazilian Portuguese translation
- !4238 Backport !4237 “Update french translation” to glib-2-82
- !4240 Update Galician translations for glib-2-82
- !4241 Update German translation
- !4251 Update Bulgarian translation
- !4255 Update British English translation
- !4258 Update Hungarian translation
- !4259 Update Indonesian translation
- !4263 Updated Lithuanian translation
- !4265 Update Danish translation (2-82)
- !4270 Update Russian translation for 2-82
- !4271 Backport !4269 “docs(glib): Fix link in string-utils ref” to glib-2-82
- !4274 Update Georgian translation (glib-2-82)
- !4276 Backport !3965 “Move to Apple Silicon based runner” to glib-2-82
- !4282 Backport !4281 “gsocks4aproxy: Fix a single byte buffer overflow in
  connect messages” to glib-2-82
Translation updates:
- Bulgarian (twlvnn kraftwerk)
- Czech (AsciiWolf)
- Danish (Ask Hjorth Larsen)
- English (United Kingdom) (Bruce Cowan)
- French (Vincent Chatelain)
- Galician (Fran Diéguez)
- Georgian (NorwayFun)
- German (Tim Sabsch)
- Hungarian (Balázs Úr)
- Indonesian (Andika Triwidada)
- Lithuanian (Aurimas Černius)
- Persian (Danial Behzadi)
- Polish (Piotr Drąg)
- Portuguese (Hugo Carvalho)
- Portuguese (Brazil) (Rafael Fontenelle)
- Russian (jtux270)

kata-containers/kata-containers (kata-containers/kata-containers)

`v3.10.1`: Kata Containers 3.10.1

Compare Source

Survey

Please take the Kata Containers survey:

https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

how you use Kata Containers
what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

agent (on all its different flavours): quay.io/kata-containers/builders:agent-2b2d0f738-107265821-x86_64
Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-c99ba42d6-x86_64
QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-25c784c56-x86_64
tools: quay.io/kata-containers/builders:tools-c06bf2e3b-fefcf7cfa-322846b36-bc195d758-x86_64
virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

tools: Change PACKAGES var for cbl-mariner by @ms-mahuber in https://github.com/kata-containers/kata-containers/pull/10439
workflows: Ensure shim-v2 is built as the last asset by @fidencio in https://github.com/kata-containers/kata-containers/pull/10446
runtime: Failed to clean up resources when QEMU is terminated by @wtootw in https://github.com/kata-containers/kata-containers/pull/10208
Add a specific workflow for testing the CI, without messing up with the "nightly" weather by @fidencio in https://github.com/kata-containers/kata-containers/pull/10449
docs: Fix misspelling in CI documentation by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10438
tests: Add trap statement in kata doc script by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10452
workflows: devel: Follow-up on the manually triggered jobs by @fidencio in https://github.com/kata-containers/kata-containers/pull/10461
agent: Correct rustjail device filemode permission typo by @skaegi in https://github.com/kata-containers/kata-containers/pull/10463
release: Bump version to 3.10.1 by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10467
workflows: Possibly fix the release workflow by @fidencio in https://github.com/kata-containers/kata-containers/pull/10471

New Contributors

@wtootw made their first contribution in https://github.com/kata-containers/kata-containers/pull/10208

Full Changelog: kata-containers/kata-containers@3.10.0...3.10.1

`v3.10.0`: Kata Containers 3.10.0

Compare Source

Survey

Please take the Kata Containers survey:

https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

how you use Kata Containers
what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

agent (on all its different flavours): quay.io/kata-containers/builders:agent-2b2d0f738-107265821-x86_64
Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-c99ba42d6-x86_64
QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-25c784c56-x86_64
tools: quay.io/kata-containers/builders:tools-c06bf2e3b-fefcf7cfa-3dabe0f5f-bc195d758-x86_64
virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

gha: Increase timeout to run k8s tests on TDX by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10336
acrn: Drop support by @fidencio in https://github.com/kata-containers/kata-containers/pull/10239
kata-deploy: clean up and fix docs for k0s by @sprt in https://github.com/kata-containers/kata-containers/pull/10335
runtime-rs: fix the issue of using block_on by @lifupan in https://github.com/kata-containers/kata-containers/pull/10339
tests: Fix loop device handling for exec_host() by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10232
doc: Update the release process by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10337
tools.kata-webhook: Specify runtime class using configMap by @Bickor in https://github.com/kata-containers/kata-containers/pull/10329
Introduce cdi in runtime-rs by @Apokleos in https://github.com/kata-containers/kata-containers/pull/10146
ci: don't require sudo for yq if already installed by @pawelpros in https://github.com/kata-containers/kata-containers/pull/10311
runtime: add DAN support for VFIO network device in Go kata-runtime by @l8huang in https://github.com/kata-containers/kata-containers/pull/9977
tests: Improve k8s negative tests by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10328
ci: Reorder webhook deployment by @ldoktor in https://github.com/kata-containers/kata-containers/pull/10345
tests: Delete custom node debugger pod on EXIT by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10348
Some prepared work for sandbox api support by @lifupan in https://github.com/kata-containers/kata-containers/pull/10330
runtime-rs: Notify containerd when process exits by @lsc2001 in https://github.com/kata-containers/kata-containers/pull/10293
ci: Enable basic docker tests for runtime-rs by @lsc2001 in https://github.com/kata-containers/kata-containers/pull/10318
tests: Minor improvement k8s tests by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10346
agent: fix the issue of setup sandbox pidns by @lifupan in https://github.com/kata-containers/kata-containers/pull/10351
sandbox: refactor the sandbox init process by @lifupan in https://github.com/kata-containers/kata-containers/pull/10349
runtime-rs: Port TAP implementation from dragonball by @sidneychang in https://github.com/kata-containers/kata-containers/pull/10219
gha: Add ita_key as a github secret by @fidencio in https://github.com/kata-containers/kata-containers/pull/10357
docs: Remove qemu information not longer valid by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10342
ci:tdx: Use an ITA key for TDX by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10305
runtime-rs: Add Configurable Compilation for Dragonball in Runtime-rs by @sidneychang in https://github.com/kata-containers/kata-containers/pull/10312
tests: Add k8s-block-volume test to GHA CI by @sprt in https://github.com/kata-containers/kata-containers/pull/7165
genpolicy: validate create sandbox storages by @Redent0r in https://github.com/kata-containers/kata-containers/pull/10340
tests: Skip k8s-block-volume.bats for qemu-runtime-rs by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10374
metrics: Update fast footprint script to use grep by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10369
tests: k8s-policy-rc: remove default UID from YAML by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10370
k8s: tests: Re-enable empty-dirs tests for TDX / coco-qemu-dev by @fidencio in https://github.com/kata-containers/kata-containers/pull/10371
runtime-rs: add network device hotplugging to qemu-rs by @pmores in https://github.com/kata-containers/kata-containers/pull/10165
k8s:kbs: Add trap statement to clean up tmp files by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10375
ci.ocp: Sort images according to git by @ldoktor in https://github.com/kata-containers/kata-containers/pull/10134
osbuilder: Remove duplicated arch variable definition by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10381
CI: Select jobs by touched code by @ldoktor in https://github.com/kata-containers/kata-containers/pull/9637
gha: enable AUTO_GENERATE_POLICY where needed by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10376
tests: k8s: AUTO_GENERATE_POLICY=yes for local testing by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10384
build: Fix RPM build fail due to AGENT_POLICY by @emanuellima1 in https://github.com/kata-containers/kata-containers/pull/10389
image-builder: Remove unused variable by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10383
Support Confidential Sealed Secrets (as volume) by @ChengyuZhu6 in https://github.com/kata-containers/kata-containers/pull/10363
local-build: add ability to build rootfs-image-mariner by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10390
tools/osbuilder/tests: Add trap statement in test images script by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10388
Revert "agent:cdh: unittest for sealed secret as file" by @fidencio in https://github.com/kata-containers/kata-containers/pull/10404
ci: mariner: Use the image instead of the initrd by @fidencio in https://github.com/kata-containers/kata-containers/pull/10396
packaging: Remove unused variable in build kernel script by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10407
build: mariner: Remove the ability to build the marine initrd by @fidencio in https://github.com/kata-containers/kata-containers/pull/10397
Kbs deploy overlays update by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10401
agent:cdh: fix unit tests about sealed secret by @ChengyuZhu6 in https://github.com/kata-containers/kata-containers/pull/10406
kbs: ita: Ensure the proper image / image_tag is used for ITA by @fidencio in https://github.com/kata-containers/kata-containers/pull/10409
tools/osbuilder/tests: Remove egrep in test images script by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10415
ci: Install build dependencies for building agent-ctl with image pull. by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/10402
genpolicy: read binaryData value as String by @3u13r in https://github.com/kata-containers/kata-containers/pull/10426
ci: static_sandbox_resource_mgmt for cbl-mariner by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10416
tests: k8s-inotify.bats improvements by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10417
agent: config: Use rstest for unit tests by @stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10412
gha: Use a arch_to_golang variable to have uniformity by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10428
docs: Update CI documentation by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10430
runtime-rs: Use vCPU and memory values from config by @ananos in https://github.com/kata-containers/kata-containers/pull/10435
ci: add provenance attestation for agent artifact by @mkulke in https://github.com/kata-containers/kata-containers/pull/10433
ci: don't parse oci image for cached artifacts by @mkulke in https://github.com/kata-containers/kata-containers/pull/10437
kata-agent: fixing bug of unable setting hostname correctly. by @Apokleos in https://github.com/kata-containers/kata-containers/pull/10421
runtime-rs: support virtio-scsi device in qemu-rs by @pmores in https://github.com/kata-containers/kata-containers/pull/10420
release: Bump VERSION to 3.10.0 by @gkurz in https://github.com/kata-containers/kata-containers/pull/10443

New Contributors

@Bickor made their first contribution in https://github.com/kata-containers/kata-containers/pull/10329
@pawelpros made their first contribution in https://github.com/kata-containers/kata-containers/pull/10311
@lsc2001 made their first contribution in https://github.com/kata-containers/kata-containers/pull/10293

Full Changelog: kata-containers/kata-containers@3.9.0...3.10.0

`v3.9.0`: Kata Containers 3.9.0

Compare Source

Survey

Please take the Kata Containers survey:

https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

how you use Kata Containers
what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

agent (on all its different flavours): quay.io/kata-containers/builders:agent-2b2d0f738-107265821-x86_64
Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-c99ba42d6-x86_64
QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-25c784c56-x86_64
tools: quay.io/kata-containers/builders:tools-593cbb871-eb1227f47-1597f8ba0-69535e545-x86_64
virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

genpolicy: deny UpdateEphemeralMountsRequest by @Redent0r in https://github.com/kata-containers/kata-containers/pull/9911
metrics: Remove unused variable in openvino script by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10198
kata-deploy: Rework the logic a little bit by @fidencio in https://github.com/kata-containers/kata-containers/pull/10194
ci: commit-message-check: Take re-revert into consideration by @fidencio in https://github.com/kata-containers/kata-containers/pull/10196
agent: kill child process when console socket closed by @soulfy in https://github.com/kata-containers/kata-containers/pull/10141
Revert "tests: add image check before running coco tests" by @amshinde in https://github.com/kata-containers/kata-containers/pull/10207
tests: Fix k8s test issues on s390x by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10202
agent/config: Make CDH_API_TIMEOUT configurable by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10199
kata-manager: Avoid docker rate-limit by @fidencio in https://github.com/kata-containers/kata-containers/pull/10209
Upgrade to Cloud Hypervisor v41.0 by @likebreath in https://github.com/kata-containers/kata-containers/pull/10205
metrics: Add OpenVINO general information into README by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10201
stability: Add kubernetes parallel test by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10193
runtime: Allow machine_type in kata config for remote hypervisors by @squarti in https://github.com/kata-containers/kata-containers/pull/10212
runtime: check if cold_plug_vfio is enabled before create PhysicalEndpoint by @l8huang in https://github.com/kata-containers/kata-containers/pull/10210
ci: reinstate Mariner host and guest kernel by @sprt in https://github.com/kata-containers/kata-containers/pull/10037
gha: Add GHA workflow to run Kata CoCo stability tests by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10214
docs: Add oneDNN benchmark information to metrics README by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10221
genpolicy: add priorityClassName as a field in PodSpec interface by @Redent0r in https://github.com/kata-containers/kata-containers/pull/10160
agent: image-rs: check xattrs for image unpacking by @amshinde in https://github.com/kata-containers/kata-containers/pull/10224
metrics: Remove unused variable in oneDNN benchmark by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10228
agent: avoid policy.txt log without debug enabled by @danmihai1 in https://github.com/kata-containers/kata-containers/pull/10222
ci: Transition GARM tests to free runners, pt. III by @sprt in https://github.com/kata-containers/kata-containers/pull/10038
agent: Update image-rs to 02af65a by @fidencio in https://github.com/kata-containers/kata-containers/pull/10236
kata-deploy: helm: Add INSTALLATION_PREFIX by @fidencio in https://github.com/kata-containers/kata-containers/pull/10204
ci: Remove stdio tests by @fidencio in https://github.com/kata-containers/kata-containers/pull/10238
metrics: Remove metrics report for Kata Containers by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10247
agent:cdh: Refactor CDHClient usage and initialization by @ChengyuZhu6 in https://github.com/kata-containers/kata-containers/pull/10233
helm: Several fixes, including some reasonable re-work on kata-deploy.sh script by @fidencio in https://github.com/kata-containers/kata-containers/pull/10192
runtime: fix bad default machine_type for remote hypervisor by @squarti in https://github.com/kata-containers/kata-containers/pull/10250
runtime: Don't error out about SNP cert path on non SNP platforms by @fidencio in https://github.com/kata-containers/kata-containers/pull/10254
gha: Turn on KBS for qemu-coco-dev on s390x by @BbolroC in https://github.com/kata-containers/kata-containers/pull/10244
versions: Update firecracker version to 1.8.0 by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10229
tests: Enable k8s soak stability test for Kata CoCo CI by @GabyCT in https://github.com/kata-containers/kata-containers/pull/10237
genpolicy: support readonly hostpath by @Redent0r in https://github.com/kata-containers/kata-containers/pull/10251
ci: Add workflow to run kata-agent api tests using kata-agent-ctl by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/10263
ci: send SIGKILL to kill kata components by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/10255
ci: Enable kata agent API tests by @Sumynwa in https://github.com/kata-containers/kata-containers/pull/10270
genpolicy: add support for PodDisruptionBudget yaml by @Redent0r in [https://github.com/Purpose of this repo kata-containers/kata-containers#1

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/releases branch 2 times, most recently from 2fef753 to 73c13fa Compare March 13, 2023 21:49

renovate bot changed the title ~~chore: update dependency golang/go to v1.20.2~~ chore: update releases Mar 13, 2023

renovate bot changed the title ~~chore: update releases~~ chore: update dependency golang/go to v1.20.2 Mar 22, 2023

renovate bot force-pushed the renovate/releases branch 2 times, most recently from 6f8960d to 3b265e8 Compare March 23, 2023 19:01

renovate bot changed the title ~~chore: update dependency golang/go to v1.20.2~~ chore: update releases Mar 23, 2023

renovate bot force-pushed the renovate/releases branch 3 times, most recently from 8f4e4c0 to 42bbfc0 Compare March 30, 2023 12:42

renovate bot changed the title ~~chore: update releases~~ chore: update releases - autoclosed Mar 30, 2023

renovate bot closed this Mar 30, 2023

renovate bot deleted the renovate/releases branch March 30, 2023 16:30

renovate bot changed the title ~~chore: update releases - autoclosed~~ chore: update releases Mar 31, 2023

renovate bot reopened this Mar 31, 2023

renovate bot restored the renovate/releases branch March 31, 2023 17:33

renovate bot force-pushed the renovate/releases branch from 42bbfc0 to a90ac72 Compare March 31, 2023 17:34

renovate bot changed the title ~~chore: update releases~~ chore: update releases to v1.13.0 Mar 31, 2023

renovate bot force-pushed the renovate/releases branch 2 times, most recently from 511a9e2 to 8d9f658 Compare April 4, 2023 19:36

renovate bot changed the title ~~chore: update releases to v1.13.0~~ chore: update releases Apr 4, 2023

renovate bot force-pushed the renovate/releases branch 3 times, most recently from 930a1c5 to ceda90a Compare April 27, 2023 17:34

renovate bot changed the title ~~chore: update releases~~ chore: update releases to v1.13.1 Apr 27, 2023

renovate bot force-pushed the renovate/releases branch from ceda90a to 2cec27e Compare May 2, 2023 18:15

renovate bot changed the title ~~chore: update releases to v1.13.1~~ chore: update releases May 2, 2023

renovate bot force-pushed the renovate/releases branch 3 times, most recently from 68be8ef to bc4e990 Compare May 19, 2023 17:40

renovate bot force-pushed the renovate/releases branch 8 times, most recently from e361a71 to 979458d Compare October 26, 2024 08:35

renovate bot force-pushed the renovate/releases branch 5 times, most recently from 61e4551 to 4ff9fd3 Compare November 5, 2024 23:48

renovate bot force-pushed the renovate/releases branch 14 times, most recently from ede1bb1 to 80ed32d Compare November 13, 2024 13:46

renovate bot force-pushed the renovate/releases branch from 80ed32d to 48113c4 Compare November 14, 2024 08:48

chore: update releases

2c74203

renovate bot force-pushed the renovate/releases branch from 48113c4 to 2c74203 Compare November 16, 2024 08:19

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update releases #132

chore: update releases #132

renovate bot commented Mar 13, 2023 •

edited

Loading

chore: update releases #132

Are you sure you want to change the base?

chore: update releases #132

Conversation

renovate bot commented Mar 13, 2023 • edited Loading

Release Notes

Notable Changes

Notable Changes

Added

Changed

Fixed

Overview of changes in GLib 2.83.0, 2024-11-06

Overview of changes in GLib 2.82.2, 2024-10-17

Overview of changes in GLib 2.82.1, 2024-09-19

v3.10.1: Kata Containers 3.10.1

Survey

Libseccomp Notices

Kata Containers builder images

Installation

What's Changed

New Contributors

v3.10.0: Kata Containers 3.10.0

Survey

Libseccomp Notices

Kata Containers builder images

Installation

What's Changed

New Contributors

v3.9.0: Kata Containers 3.9.0

Survey

Libseccomp Notices

Kata Containers builder images

Installation

What's Changed

Configuration

renovate bot commented Mar 13, 2023 •

edited

Loading

`v3.10.1`: Kata Containers 3.10.1

`v3.10.0`: Kata Containers 3.10.0

`v3.9.0`: Kata Containers 3.9.0