Skip to content

[pull] main from containerd:main#307

Open
pull[bot] wants to merge 1063 commits into
fahedouch:mainfrom
containerd:main
Open

[pull] main from containerd:main#307
pull[bot] wants to merge 1063 commits into
fahedouch:mainfrom
containerd:main

Conversation

@pull

@pull pull Bot commented May 10, 2025

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

@pull pull Bot added the ⤵️ pull label May 10, 2025
dependabot Bot and others added 29 commits March 30, 2026 22:54
Bumps the docker group with 1 update: [github.com/docker/cli](https://github.com/docker/cli).


Updates `github.com/docker/cli` from 29.2.1+incompatible to 29.3.0+incompatible
- [Commits](docker/cli@v29.2.1...v29.3.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.3.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.2.4 to 2.3.0.
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.2.4...v2.3.0)

---
updated-dependencies:
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
add MAC, IPv4, IPv6 addresses to nework inspect
…-6bd6f1cba1

build(deps): bump github.com/docker/cli from 29.2.1+incompatible to 29.3.0+incompatible in the docker group
…tions/setup-go-6.4.0

build(deps): bump actions/setup-go from 6.3.0 to 6.4.0
….com/pelletier/go-toml/v2-2.3.0

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.3.0
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Joonsoo Won <wonjs0116@gmail.com>
test: remove a new line from containerID for correct test execution
See issue 4746

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
See issue 4782

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
See issue 4789

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
…t_linux_test.go

test: refactor container_inspect_linux_test.go to use Tigron
CI: update Go (1.26); mark several tests flaky
Bumps the golang-x group with 1 update in the / directory: [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `golang.org/x/crypto` from 0.48.0 to 0.49.0
- [Commits](golang/crypto@v0.48.0...v0.49.0)

Updates `golang.org/x/net` from 0.50.0 to 0.51.0
- [Commits](golang/net@v0.50.0...v0.51.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `golang.org/x/term` from 0.40.0 to 0.41.0
- [Commits](golang/term@v0.40.0...v0.41.0)

Updates `golang.org/x/text` from 0.34.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.34.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/term
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.18.4 to 1.18.5.
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.4...v1.18.5)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Siddhesh Suryawanshi <siddheshsuryawanshi@ibm.com>
…tworkSettings

follow-up: #4811

Signed-off-by: Hayato Kiwata <dev@haytok.jp>
…-x-6e7e6ca9b9

build(deps): bump the golang-x group across 1 directory with 6 updates
Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.18.0 to 1.19.0.
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@b45d80f...4907a6d)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps the stargz group with 3 updates: [github.com/containerd/stargz-snapshotter](https://github.com/containerd/stargz-snapshotter), [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) and [github.com/containerd/stargz-snapshotter/ipfs](https://github.com/containerd/stargz-snapshotter).


Updates `github.com/containerd/stargz-snapshotter` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.18.1...v0.18.2)

Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.18.1...v0.18.2)

Updates `github.com/containerd/stargz-snapshotter/ipfs` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.18.1...v0.18.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/stargz-snapshotter
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: stargz
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: stargz
- dependency-name: github.com/containerd/stargz-snapshotter/ipfs
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: stargz
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](go-jose/go-jose@v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
…-c5d5485eb8

build(deps): bump the stargz group across 1 directory with 3 updates
Bumps the golang-x group with 1 update: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.51.0 to 0.52.0
- [Commits](golang/net@v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
…-x-4a495664a9

build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 in the golang-x group across 1 directory
…cker/login-action-4.1.0

build(deps): bump docker/login-action from 4.0.0 to 4.1.0
….com/go-jose/go-jose/v4-4.1.4

build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
AkihiroSuda and others added 30 commits June 2, 2026 00:23
…_test_4613

Refactor compose_run_linux_test
…linux_test.go

test: refactor container_run_restart_linux_test.go to use Tigron
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...df4cb1c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) from 1.15.0 to 1.15.1.
- [Release notes](https://github.com/opencontainers/selinux/releases)
- [Commits](opencontainers/selinux@v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Ofek Lev <ofekmeister@gmail.com>
Bumps the docker group with 2 updates: [github.com/docker/cli](https://github.com/docker/cli) and [github.com/moby/moby/v2](https://github.com/moby/moby).


Updates `github.com/docker/cli` from 29.5.2+incompatible to 29.5.3+incompatible
- [Commits](docker/cli@v29.5.2...v29.5.3)

Updates `github.com/moby/moby/v2` from 2.0.0-beta.15 to 2.0.0-beta.16
- [Release notes](https://github.com/moby/moby/releases)
- [Commits](moby/moby@v2.0.0-beta.15...v2.0.0-beta.16)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.3+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
- dependency-name: github.com/moby/moby/v2
  dependency-version: 2.0.0-beta.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: docker
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: immanuwell <pchpr.00@list.ru>
Signed-off-by: immanuwell <pchpr.00@list.ru>
…patibility

In the current implementation, when specifying `/` as the destination of the
`-v` option in the nerdctl run command, the following error occurs but the
container is created.

```bash
> sudo nerdctl run -d --name nginx -v ./:/ nginx
FATA[0000] failed to create shim task: OCI runtime create failed: runc create failed: unable to start container process: error during container init: unable to apply apparmor profile: apparmor failed to apply profile: open /proc/thread-self/attr/exec: no such file or directory

> sudo nerdctl ps -a
CONTAINER ID    IMAGE                             COMMAND                   CREATED          STATUS     PORTS    NAMES
0f880e0e68f8    docker.io/library/nginx:latest    "/docker-entrypoint.…"    5 seconds ago    Created             nginx
```

However, in the same situation, Docker fails to create the container.

```bash
$ docker run -d --name stop -v ./:/ nginx
docker: Error response from daemon: invalid volume specification: '/Users/haytok/workspace:/': invalid mount config for type "bind": invalid specification: destination can't be '/'

$ docker ps -a
CONTAINER ID   IMAGE     COMMAND   CREATED   STATUS    PORTS     NAMES
```

Therefore, this commit fixes the behavior so that the container creation
fails when `/` is specified as the destination of the `-v` option for
compatibility with Docker.

Signed-off-by: Hayato Kiwata <dev@haytok.jp>
…-0dd8a76685

build(deps): bump the docker group with 2 updates
….com/opencontainers/selinux-1.15.1

build(deps): bump github.com/opencontainers/selinux from 1.15.0 to 1.15.1
…tions/checkout-6.0.3

build(deps): bump actions/checkout from 6.0.2 to 6.0.3
Update Windows installation section in README.md
When a container has a large number of volume mounts, storing the
marshaled JSON metadata inside a containerd label (`nerdctl/mounts`)
exceeds the 4096-byte protocol buffer limit, causing container
creation to fail.

The current patch addresses this by storing all mounts individually as
separate key value pairs to avoid any buffer limit and is returned as a
JSON string while fetching mount metadata

Unit tests have been added accordingly

Signed-off-by: Naveen <snaveenbharath2005@gmail.com>
formatter: make ellipsis unicode safe
…syslog-test

refactor: migrate container_run_log_driver_syslog_test.go to nerdtest.Setup
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
fix(container): chunk mounts metadata to prevent max label size crash
Migrate TestCreateWithLabel, TestCreateWithMACAddress,
TestCreateWithTty, and TestCreateFromOCIArchive from
testutil.NewBase to the Tigron-based nerdtest.Setup pattern.

Also fix TestUsernsMappingCreateCmd which called nerdtest.Setup()
without using its return value; now uses the returned *test.Case
directly.

Helper function removeUsernsConfig updated to accept tig.T instead
of *testing.T to align with the rest of the Tigron-based test
infrastructure.

Part of #4613.

Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
With -t, the container's output goes through a pseudoTTY. Attaching
via "start -a" does not reliably forward PTY output through Tigron's
subprocess pipe, causing the stty check to fail on certain containerd
versions (e.g. v1.7.30).

Match the original test's approach: start the container without -a,
then read its output via "nerdctl logs" which goes through the log
driver and is always available after the container exits.

Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
Replace hardcoded exit code literals (0, 1) in Tigron test.Expected
structs with the named constants from the expect package:
ExitCodeSuccess, ExitCodeGenericFail.

Existing ExitCodeNoCheck usages were already correct.

Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
Capture the start -a output and assert the passed MAC is absent for the
none-network case, instead of only checking the exit code.

Use data.Temp().Save for the Dockerfile instead of os.WriteFile, and drop
the manual builder prune --all --force which the Build requirement
deliberately omits to keep build tests parallelizable.

Signed-off-by: Ogulcan Aydogan <ogulcanaydogan@hotmail.com>
CI: replace Vagrant with Lima for FreeBSD tests
Bumps the golang-x group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.52.0` | `0.53.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.21.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.45.0` | `0.46.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.43.0` | `0.44.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.37.0` | `0.38.0` |


Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0
- [Commits](golang/crypto@v0.52.0...v0.53.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `golang.org/x/sys` from 0.45.0 to 0.46.0
- [Commits](golang/sys@v0.45.0...v0.46.0)

Updates `golang.org/x/term` from 0.43.0 to 0.44.0
- [Commits](golang/term@v0.43.0...v0.44.0)

Updates `golang.org/x/text` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.37.0...v0.38.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
- dependency-name: golang.org/x/text
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
…-x-134f60b9f7

build(deps): bump the golang-x group with 5 updates
…create-linux-tigron

refactor: migrate container_create_linux_test.go to nerdtest.Setup
Bumps the golang-x group with 1 update: [golang.org/x/net](https://github.com/golang/net).


Updates `golang.org/x/net` from 0.55.0 to 0.56.0
- [Commits](golang/net@v0.55.0...v0.56.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x
...

Signed-off-by: dependabot[bot] <support@github.com>
fix: reject `/` as the `-v` destination in nerdctl run for Docker com…
…-x-326ae5767f

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 in the golang-x group
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.