cri-o: update to v1.33.0

Bumping cri-o to version v1.33.0-63-g87ce1c120, which comprises the following commits:

    b9bc2a2cd Upgrade netlink
    8d0965635 Downgrade otelgrpc
    bc9516250 build(deps): bump the gomod group across 1 directory with 20 updates
    e90924e83 Revert "temporarily enable debug symbols"
    6870ad334 test/ctr.bats: fix wrt new CPU units to weight conversion
    2491f8124 Mark v1.30 as EOL
    ba6a88448 fix prettier
    7cf556a6f update nixpkgs
    4450e698d Bump go version to 1.24.3
    f8084ff63 build(deps): bump github.com/go-chi/chi/v5 from 5.2.1 to 5.2.2
    ab7d879dc temporarily enable debug symbols
    1e751b490 fix deadlock when the container is in uninterruptible sleep
    cb2965f42 [revert] internal/oci: fix terminal resize race condition
    0d449e00e internal/oci: fix terminal resize race condition
    662474e9b fix verify command
    ebabdc929 unit tests fixup
    85665a6fe code fixup
    5944f40fc HighPerformanceHooks: Remove dead code ShouldCPUQuotaBeDisabled
    a22b5dad9 FreeBSD fixup
    ebee282d3 HighPerformanceHooks: Unit tests for Fix IRQ SMP affinity race
    c50e4e0de HighPerformanceHooks: Fix IRQ SMP affinity race conditions
    239f9ee61 install: drop outdated flatcar installation instructions
    bfe3b83cf increase timeout of critests
    5912f0483 change conmon install
    25b3dfb58 UpdateContainerStatus: fix error logging
    6062ff148 internal/hostport: fix linter warning
    b3f139431 Redo metaHostportManager construction, fix bug
    801383af3 Improve iptables error handling when there's no iptables binary
    0a0b33208 deps: bump to runc 1.3
    3f4b82fa6 Finish switching to opencontainers/cgroups
    dc3d6b6ec pass down apparmor errors
    608b8a0e9 Retry failed tests
    290edee86 sandbox: use created/stopped instead of infra container for readiness
    4996d1050 Extend checkpoint/restore test for container logs
    f52c04277 Add coverage report from integration tests
    6b20443c5 Fix `OS_RPM_NAME="$(rpmspec -q --qf '%{name}\n' "${OS_RPM_SPECFILE}" | head -1)"` exited with status 141. error
    eea79c782 Switch to v1.34.0 as development version of `main`
    a51c99a2c Decrease actual version
    aa52c9329 Add option to allow seccomp profiles for privileged containers
    4fc529bf8 Support multi architecture artifacts
    d94a8f37c Add signature verification for image volumes
    15bbcca97 build(deps): bump github.com/opencontainers/cgroups in the gomod group
    d063f8293 Add v1.33 to supported versions
    9b0142eb0 Update CNI plugins to v1.7.1
    aecad95c3 Improve timeout integration tests
    f499c0a96 Make metaHostportManager handle iptables vs nftables
    982c191d9 Add an nftables HostPortManager
    dda8739ea Move iptables HostPortManager code into its own file.
    beb362521 Move hostport conntrack cleanup to metaHostportManager
    dec4bda08 Move hostport IP family filtering to metaHostportManager
    b7731057a Remove hostport.PodPortMapping
    5db94b36b Revert "Squash MetaHostPortManager into HostPortManager"
    6fd9131eb New UpdatePodSandboxResources CRI API handler
    1a9acebff Fix build
    30d575118 build(deps): bump the gomod group across 1 directory with 25 updates
    479a8070c Fix GitHub actions CI test setup
    766a81efb Fix container_create_freebsd.go
    9660da25e remove runDir
    b5f51739e remove storageRoot
    e042f84b2 Remove mountLabel
    52b81926b Remove absentMountSourcesToReject
    5c9803b19 Remove bindMountPrefix
    569e8d3db Update nixpkgs
    2ac913d18 Support artifact mount sub paths
    6df6cfc6f Update linter and fix reports
    87ee7a4af Support `artifactType` OCI artifacts
    4ae753afe Fix lint CI
    dd38a1805 emit crio runtime config as part of CRI API's StatusResponse
    fd5db98e6 Add the option to disable/enable OCI Artifact mount
    68fe1936b Remove unused imports
    bb9223fc0 Add container_spec_memory_limit_bytes metric
    087e2ce46 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
    44d9073dd Disable pull-progress-timeout per default
    ab9acb6f9 Add support for CNAI models
    9cc9b0763 Add README for CI playbooks and remove cri-tools task
    fe4378b38 .golangci.yml: remove gofmt
    560bf28a1 .golangci.yml: remove some unused linters
    7ddf15274 .golangci.yml: remove legacy preset from exclusions
    8250128de internal/ociartifact: rename MarshalJSON -> ToJSON
    a904a4e0e test/mocks: regenerate
    8c3ce800f Run make mockgen
    310a66356 .golangci.yml: rm some unused exclusions
    c02c3a54d Run mockgen
    b5b96dfdf Refactor metrics descriptors
    012b6cde5 Increase pull-progress-timeout to `30s`
    d3f7cb491 Update nixpkgs
    6a4a3ee9b test
    7c4fbadc4 Add container stop signal feature (KEP-4960)
    a1f07bc4b Fix build
    3feb9ad31 build(deps): bump the gomod group across 1 directory with 6 updates
    a9a660579 Fix image status so that it can get artifact with canonical name and short name
    6b244a90a Switch to golangci-lint v2
    2fa08cfa2 Use `strings.SplitSeq` instead of `strings.Split`
    704932bc3 fix schema v1 images not resolve to image ID error
    f554c58ea Address linter complaint
    62aeb65ce Remove Krzysztof Wilczyński as maintainer
    19adbe020 Set default masked paths
    f5d0ff28e crio wipe should remove storage only once per reboot
    e429f75ee OCPNODE-3016: support mount OCI artifact
    64567e976 Fix comment location about error message
    f4cff283d build(deps): bump the gomod group with 2 updates
    fca4ea622 Add image volume subpath support
    db553b0be Use go version requirements from go.mod
    2dc6d0831 Add lint-fix target
    7f7d77ace build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27
    109872da3 Cleanup: ensure image volume path
    24452a56c build(deps): bump github.com/containers/common in the gomod group
    29c662a5b build(deps): bump the kubernetes group with 6 updates
    ab6bc86b8 Fix release notes download location
    c2f55509f Update debug flag
    a0ffef29a build(deps): bump github.com/containers/image/v5 in the gomod group
    25775fdb3 build(deps): bump the gomod group across 1 directory with 2 updates
    662f8cab6 Require go 1.24 for build
    512d33bc5 build(deps): bump the gomod group with 7 updates
    00a7117dc Improve artifact error logs
    9824edb9d build(deps): bump the gomod group with 5 updates
    3f1398477 build(deps): bump the gomod group with 3 updates
    3507a2a5b Update the release-notes tool to v0.18.0
    9e69a709f Update conmon to v2.1.13
    663066d99 build(deps): bump the gomod group across 1 directory with 2 updates
    754a1ed24 Add OCI artifact support
    e69571c34 Drop image status log message
    b638954fe Switch to go 1.24
    f46b83d3f build(deps): bump github.com/containerd/containerd in the gomod group
    826ef8052 build(deps): bump the gomod group across 1 directory with 5 updates
    c3363e0c3 add --extra-experimental-features nix-command flag to build-static target
    dfc2778ee build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5
    92fd877a0 Update golangci-lint config and fix reports
    8c9fa54ba Add validate method for sandbox
    32854c9d1 server: fix races in GetContainerEvents
    6fdd6b3bc Updating install docs
    0a81f1ef7 build(deps): bump the kubernetes group with 6 updates
    8287e4159 server: don't dereference Config.Linux if it is nil
    3c7337fb9 server: move createSandboxContainer and related functions to container_create.go
    7cdfc7938 server: factor out adding /dev/shm mount
    e533ab281 server: factor out adding sysfs mounts
    20b17df06 server: add no-op stub for makeOCIConfigurationRootless
    5035c19a0 server: factor out creating the security context
    286e7e24f internal/factory/container: add no-op stub for SpecAddDevices on FreeBSD
    7f104e5da internal/factory/container: make SpecAddNamespaces platform-specific
    68091febb internal/factory/container: make (*container).SelinuxLabel platform-specific
    29a85ace4 internal/linklogs: add stub for freebsd
    2f4bc00c2 internal/config/device: add stub for DevicesFromAnnotation
    2efa5b35f Fix context cancellation when image pull progress timeout is `0`
    10070a556 Fix build
    d9d5def74 build(deps): bump sigs.k8s.io/release-sdk in the kubernetes group
    29e76f138 Remove `exclude_graphdriver_devicemapper` build tag
    a4c67cc6c Fix: If cgroup manager is cgroupfs then allow conmon_cgroup to be empty
    dcfb01965 build(deps): bump google.golang.org/protobuf in the gomod group
    2193e6280 Update mocks
    864e43306 build(deps): bump the gomod group across 1 directory with 8 updates
    a961ed207 Mark v1.29 as EOL
    60c3697ac Fix typo in version_update_mask regex
    77f2041ea Change nixpkgs update to monthly
    4ceeaddaa Switch to golang native error joining and errgroup
    0b6a04bea test: add test coverage for LinkLogs malicious paths
    910f6e5d6 internal/linklogs: sanitize the directory path before using it
    d5ab7c46c build(deps): bump sigs.k8s.io/release-utils in the kubernetes group
    6dbfcec98 Downgrade github.com/cyphar/filepath-securejoin
    b27a733c8 Remove `LimitNOFILE` from systemd service file
    ecd3b6dce build(deps): bump the gomod group across 1 directory with 8 updates
    6b4fd0741 Add warning log for a process having an uninterruptible child.
    d19a9d641 Enable `wsl` and `nlreturn` linters
    0979d3497 Integrate native GitHub arm64 runners
    a371ae1c3 Log error when failing to update container status from exit file
    03472dd92 Enable linters and auto-fix
    630b608f0 Add documentation hint how to handle the versions
    6691836a5 Revert 'Add 1.33 to supported minor version'
    f67859446 watchdog: decouple CNI plugin initialization from CRI-O health checks
    e87f86c1b Switch to our log module for logging in iptables module
    1b06fc09d Add `release-1.33` to active prerelease version
    1f60a95cc internal/config/ociartifact/ociartifact: Do not hard-code 'sha256' in error message
    6dc287d45 vendor: downgrade github.com/cyphar/filepath-securejoin to v0.3.6
    db4ca1752 * : fix lint/vendor issues to update dependabot updates
    16289cad3 Update nixpkgs
    271146940 Fix klog-shim to close the bracket properly
    1005e0e32 build(deps): bump the gomod group across 1 directory with 17 updates
    05296551a Avoid using UpdateContainerStatus for ReopenContainerLog and add logs tests
    1a6765b73 Makefile: introduce GO_TEST for more flexible configuration
    a9e7d29b3 Improve `sync.Map` iterators with an implicit call
    807943105 Remove Fedora 39 content
    ddaed68a3 Makefile: fixes wrt crio.conf
    f5e6d6f7f Update nixpkgs to the latest HEAD commit
    78c45f865 Update nix release to v2.24.11
    458137a7a Update release-notes release to v0.17.11
    3b94f59b1 Update gosec release to v2.21.4
    a9aa6072f Update shfmt release to v3.10.0
    fbc3ce557 Update golangci-lint release to v1.63.4
    0fe4097af Update buildah release to v1.38.0
    72f95429a Update bats release to v1.11.1
    6da7ef28b Update containernetworking/plugins Go package release to v1.6.2
    3f0f86965 Update multiple dependencies to newer releases
    997e4fbd3 server: fix panic when default annotations are specified
    b473c6c04 Fetch latest containernetworking/plugins tag instead of v1.1.1
    6e0df0924 Update CRI-O version and add checks

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions