containerd: update to v2.1.3

Bumping containerd to version v2.1.3-2-g41bb88c7e, which comprises the following commits:

    b74268f86 bugfix:close container io when runtime create failed
    7636bd5eb fix when multipart fetching and the server does not return content length
    627729341 Prepare release notes for v2.1.3
    3c5ede878 Update transfer supported platforms logic
    babacebad Fix fetch always adding range to requests
    fb752bc8e fix import for local transfer service
    f30be44ad Update fetcher errors to include full registry error
    f6d926314 Register remote errors for clients to access registry errors
    7c1813345 Decode grpc errors in the transfer client proxy
    63b9eae62 Prepare release notes for v2.1.2
    cff1feb28 *: properly shutdown non-groupable shims to prevent resource leaks
    2ce169aae ci: bump golang [1.23.10,1.24.4] in build and release
    70bcb9b55 Enable CIs to run on WS2022 and WS2025
    c71f77170 build(deps): bump google.golang.org/grpc from 1.72.0 to 1.72.2
    9b6c1949a Fetch image with default platform only in TestExportAndImportMultiLayer
    4bcea74de Update differ selection in transfer service to prefer default
    0c3cd8a99 Add debug log when transfer returns not implemented
    820e56765 Add more error details when unpack fails to extract
    480126f50 erofs-snapshotter: fix to work with wrapped errors
    d82921ff5 Enable DuplicationSuppressor in transfer service
    0bb25c3d6 ci: bump golang [1.23.9, 1.24.3] in build and release
    dd2ce49d0 Add symlink breakout test for overriden path
    ac8e84efc client:improve mount error message
    216667ba0 Prepare release notes for 2.1.1
    e1817a401 docs/snapshotters/erofs.md: a tip for improved performance
    2168cb92c erofs-differ: fix EROFS native image support
    444ca17cd update runhcs version to v0.13.0
    40575a15f cri:use debug level when receive exec process exited events
    0684f1c44 build(deps): bump github.com/Microsoft/hcsshim
    ac00b8e61 Revert "perf(applyNaive): avoid walking the tree for each file in the same directory"
    37d6c4236 Update removal version for deprecated registry config fields
    7fcbc3c46 core/runtime/v2: cleanup shim-cleanup logs
    e7be076d4 ctr:make sure containerd socket exist before create client
    c90524d5f .github: mark 2.1 releases as latest
    897f65cff Prepare release notes for v2.1.0
    ca36be282 Update api to v1.9.0
    e51f9c177 Update release for 2.1 release and next to releases
    a6db1c440 Update mailmap
    145175bf4 Prepare release notes for api/v1.9.0
    5dc29f0e7 core/runtime: should invoke shim binary
    e5ef65017 Revert "not set sandbox id when use podsandbox type"
    1c70f237c integration: add testcase to recover ungroupable shim
    51664ad32 build(deps): bump github/codeql-action from 3.28.16 to 3.28.17
    0d085bc53 build(deps): bump the golang-x group with 2 updates
    7360c739f Fix image inspect skip over missing content
    ddbd748a5 clones k8s apimachinery resource quantity for cri annotation parsing
    e2d6a7160 cri: put limiter out of config
    33ee060a3 Use Go 1.19 atomic wrappers everywhere
    9e67469fa clones k8s utils clock for cri server events to remove dependency
    5f3f84f56 removes use of klog from containerd repo
    4dfe4e8be Update runc binary to v1.3.0
    42937de92 cloning k8s apimachinery set utils no longer vendoring apimachinery
    bfd85405d clones k8s component-base logreduction for integration test
    8a08aebe1 removing/cloning vendor of kubelet pod label definitions
    3851bd540 fix unbound SKIP_TEST variable error
    9058ab4ae Revert "disable portmap test in ubuntu-22 to make CI happy"
    ee7189d1d Add retries for flaky Windows test
    d70d6245f Retry registry operations once on 50x on last host
    ca356e46e cri: add a ConcurrentDownloadLimiter
    a914597c0 fix: client pull: pass fetch performances options
    413702b7e fix comment
    89780188f dockerFetcher.open: show all parameters when pulling a layer
    e499939a4 build(deps): bump actions/attest-build-provenance from 2.2.3 to 2.3.0
    7fe090e9a build(deps): bump actions/download-artifact from 4.2.1 to 4.3.0
    105602db0 build(deps): bump google-github-actions/auth from 2.1.8 to 2.1.10
    b559084fb build(deps): bump github/codeql-action from 3.28.15 to 3.28.16
    b89733812 core/transfer/local: should not mark complete if it's not found
    0dcdc1ffa bump:update cni to v1.7.1
    7c03dd036 nri: add type conversion functions removed from NRI.
    f71c2c2d5 Prepare 2.1.0-rc.0 release
    61cbbaaba Update api to v1.9.0-rc.0
    f42ee3431 Update mailmap entries
    83ad3b55f code review fixes
    a196ee66a better race mgt
    ce73e1b3e docs: Run userns example in /tmp
    882b1903c docs: Fix typo in userns example
    b62339f39 docs: Fix typos to run userns with ctr
    72c8c7708 only keep one setting: concurrent_layer_fetch_buffer
    024775dab set dl options on resolver
    88116b191 remove max_dl_operations setting
    755a4ac6f update
    f9af08820 perf(pull): multipart layer fetch
    cdd7ec40d Support configuring custom media types for unpack
    17b6e1ef8 Allow streaming to client
    40eb2fdbb Fix protos
    bd8e6c727 Enable http debug and tracing for non local puller
    1d436803d Add http debug fields to OCI registry protos
    27e6c117d Move HTTP debug code to pkg
    c0ce618a1 Add release notes for api v1.9.0-rc.0
    d16ad8f5c fix: update containerd config dump to reflect plugin config migrations.
    f57727c42 Revert criserver metrics subsystem back to cri
    b694be29a Update CRI image service to pull using transfer service
    2f9734fa5 erofs-differ: support EROFS native image layers
    d52386ab9 Add check for rootfs type and only unmarshal relevant parts
    5dcdd5484 golangci-lint: add forbidigo rules to prevent regex.MustCompile
    147787449 use lazyregexp to compile regexes on first use
    fa0e50ccf implement lazyregexp package
    f512e3174 ctr shim: allow override to computed shim address
    21a6db1b3 Update CRI documentation to add information about Image Pull with Transfer Service
    4b4e6f7c6 not set sandbox id when use podsandbox type
    e511a384e Add warning message when using async mode
    89a8cd2fb Introduce no_sync option
    57c1cfa5f Update godoc for Bolt options
    2db2db3a8 Customzie BoltDB options in MetaStore
    c94a92f42 Expose boltdb configuration for metadata plugin
    98eded24b Move erofsutils to internal
    5d3a4d082 build(deps): bump softprops/action-gh-release from 2.2.1 to 2.2.2
    f815d0291 build(deps): bump google.golang.org/grpc from 1.71.1 to 1.72.0
    47afd3d1c Fix vagrant setup
    eb09e8d75 Add loong64 seccomp support
    568880ec3 erofsutils: MountsToLayer slight optimizations
    09f34d18b erofs-differ: implement fast differ with DiffDirChanges()
    b8649bd38 client: fix returned error in the defer function
    5cb77bc22 build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0
    01ff3b364 chore: fix broken links to https://docs.docker.com/registry
    40b0083c4 fix(docker pusher): if authorizing a cross-repo mount fails, fall back
    6f93c65f5 use go1.23.8 as the default go version
    5629e9fff update to go 1.24.2, 1.23.8
    d73880a9f build(deps): bump github.com/prometheus/client_golang
    fc23c4d61 build(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1
    76470adf7 build(deps): bump github.com/moby/sys/user in the moby-sys group
    97eb1cd46 change criService.runtimeHandlers slice to a map
    764dcf77a config: postpone planned v2.1 deprecations to v2.2
    499238a52 Remove deprecated dynamic library plugins
    9ca6a7ee0 Disable arm64 criu testing in GH Actions
    70db1bd00 disable portmap test in ubuntu-22 to make CI happy
    8e6c93b6b add option to skip tests in critest
    c1026d5bf Fixing install instructions for Windows
    752914b5b Add content create event to api
    81acabd95 release: use Ubuntu 22.04 (glibc 2.35)
    d9c889568 Remove the support for Schema 1 images
    74af78b34 cri,nri: allow plugins to inject devices using CDI.
    3251e2cc8 Prevent panic in Docker pusher.
    4857de853 Add cri.config.headers to auth requests
    10b4eb4a9 Add hosts.toml headers to auth requests
    5ae698235 Only add containerd as User-Agent when it's empty
    f87b2c1cd avoid import to testing pkg outside of tests
    be9ca11a1 fix call fmt.Errorf with wrong error
    eae1a6adc build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
    8db39a964 build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
    2a52260c7 build(deps): bump azure/login from 2.2.0 to 2.3.0
    2d3ff252d build(deps): bump github.com/containernetworking/cni from 1.2.3 to 1.3.0
    be602ea5c build(deps): bump the golang-x group with 2 updates
    3a5f04fdd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4
    a083b669c Set default differ for the default unpack config of transfer service
    1dbb7f2ae pkg/sys: improve GetLocalListener/CreateUnixSocket error message
    bca39a6f4 Add documentation for test for issue 10467
    713f753e5 Update release upgrade tests to test 1.7 and 2.0
    9d05ae03b Revert "Remove test for issue 10467"
    33dae72b9 build(deps): bump lycheeverse/lychee-action from 2.3.0 to 2.4.0
    c9b9f4a9a build(deps): bump crazy-max/ghaction-github-runtime from 3.0.0 to 3.1.0
    ead5c1ee6 cri:fix lost container exit events if they arrive before info is cached
    860260434 store extension when create sandbox in store
    cffb6d425 downgrade cni version in CI test
    07a23b6f4 use type textarea
    3ef9084d0 Create cri_kep.yaml
    450038a28 integration/client: add tests for TaskOptions is not empty
    7e5c5038a prefer task options for PluginInfo request
    ec3567d6b update taskOptions based on runtimeOptions when creating a task
    fe4703cde integration: check image volume snapshot after deleting pod
    d141d6c3d integration: run image volumes for linux platform only
    de833ebbb cri: enhance error handling for image volume
    be0ab6e93 cri: add volatile option to image volume mount if applicable
    d080d441d build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6
    7e7c3b0a8 build(deps): bump github.com/opencontainers/selinux
    3689dec42 build(deps): bump actions/download-artifact from 4.1.9 to 4.2.1
    cb6a82a92 build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2
    5b194505e build(deps): bump github/codeql-action from 3.28.11 to 3.28.13
    ce690b0a9 build(deps): bump actions/cache from 4.2.2 to 4.2.3
    aff7e4797 build(deps): bump github.com/containernetworking/plugins
    a3a66d1f2 Fix the panic caused by the failure of RunPodSandbox
    10fae41ad go.mod: tags.cncf.io/container-device-interface v1.0.1
    e7b4165ab *: CRIImageService should delete image synchronously
    42effa3b9 Mark `NetworkPluginBinDir` as DEPRECATED
    7f9ca1dcb update max container log line size json field
    71f593d4a Support multiple CNI plugin bin dirs
    7fe5c4123 go.mod: golang.org/x/net v0.37.0
    3e96f1a51 Update runc binary to v1.2.6
    6670d4153 build(deps): bump tags.cncf.io/container-device-interface
    14e94bcbf build(deps): bump github.com/containerd/imgcrypt/v2 from 2.0.0 to 2.0.1
    80e3fc4ce build(deps): bump golangci/golangci-lint-action from 6.5.0 to 6.5.2
    ec5d686b1 build(deps): bump the k8s group with 5 updates
    234a4411f build(deps): bump docker/login-action from 3.3.0 to 3.4.0
    c8effff1a Fix CI lint error
    7c522819d support to set  defer cleanup timeout to decrease ctx timeout
    53eec6c78 move host tlsconfig update to a separate function
    f702bf9fe [hosts] wrong explicitTLS value when dialTimeout is set
    8028a1d08 Bump github.com/go-jose/go-jose/v4 from v4.0.4 to v4.0.5
    ce055b530 Bump golang.org/x/text from 0.22.0 to 0.23.0
    e0aaed012 Bump golang.org/x/term from 0.29.0 to 0.30.0
    c4982bffc Add dial timeout field to hosts toml configuration
    94dd70f4f build(deps): bump the otel group with 8 updates
    85c04ab0e build(deps): bump the golang-x group with 3 updates
    12762891d Remove test for issue 10467
    5bbd3ed1b add k8s 1.32 and as tested containerd supported branches at the time of release
    93cc1e6eb Fix upgrade test runtime config
    531adbf06 config:fix config migrate lost timeout config
    de1341c20 validate uid/gid
    9e6beafd5 Support container restore through CRI/Kubernetes
    88faaac97 build(deps): bump containerd/project-checks from 1.2.1 to 1.2.2
    9f885ea4f build(deps): bump github/codeql-action from 3.28.10 to 3.28.11
    d7de182dd build(deps): bump actions/attest-build-provenance from 2.2.2 to 2.2.3
    75252f975 build(deps): bump github.com/prometheus/client_golang
    c37e48b07 build(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0
    700b98415 build(deps): bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6
    833d6bc8e Update release status for 2.1 to beta
    71cfe00ee Prepare release notes for v2.1.0-beta.n
    be8fe50f4 Update the upgrade test to handle 2.1
    06daffb4d integration: update TestUpgrade for 2.1
    405a952c6 add name in package version
    4f090fe77 update to go1.23.7 / go1.24.1
    b947e0566 fix: repeat args from sub-func call
    ee574e76e client: Respect `client.WithTimeout` option
    4357a7600 use shimCtx for fifo copy
    edd1cc50d docs: include note about unprivileged sysctls
    393ad5b11 e2e: use the shim bundled with containerd artifact
    f8f205382 Update runtime-spec to v1.2.1
    af5ff5a1f CVE-2025-22869: upgrade golang.org/x/crypto to v0.35.0
    3a5de731c erofs-snapshotter: clear IMMUTABLE_FL only for committed snapshots
    10f2b7fde CVE-2025-22868: upgrade golang.org/x/oauth2 to v0.27.0
    705518e58 ci: update GitHub Actions release runner to ubuntu-24.04
    971915797 erofs-snapshotter: force the use of loop devices for single-layer images
    69c0d7f60 build(deps): bump containerd/project-checks from 1.1.0 to 1.2.1
    37fe1e8b4 build(deps): bump golang.org/x/net from 0.23.0 to 0.33.0 in /api
    0eea93d68 build(deps): bump actions/cache from 4.2.1 to 4.2.2
    20fa1ca46 build(deps): bump actions/attest-build-provenance from 2.2.0 to 2.2.2
    9b0b67951 build(deps): bump docker/setup-buildx-action from 3.9.0 to 3.10.0
    86734729f build(deps): bump actions/download-artifact from 4.1.8 to 4.1.9
    001dfeb19 build(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0
    72ac5cad4 build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0
    d37ea6977 Bump to newer opencontainers/image-spec @ v1.1.1
    b477cf8e9 erofs-snapshotter: protect layer blobs with FS_IMMUTABLE_FL
    d8063c30d perf(applyNaive): avoid walking the tree for each file in the same directory
    e84e5a215 build(deps): bump go.etcd.io/bbolt from 1.3.11 to 1.4.0
    00cb73503 Swap to go.etcd.io/bbolt/errors for bbolt errors
    22d568fb5 Update CDI dependency to v0.8.1.
    f25f36c33 proxy: break up writes from the remote writer to avoid grpc limits
    51f063f07 Prefer runtime options for PluginInfo request
    d2b5653c1 build(deps): bump the k8s group across 1 directory with 6 updates
    76858ac8e Ignore defunct verifier procs in test
    268880bf5 [improve] prevent oom watcher depend on shim pkg.
    4e7484d3f CI: arm64-8core-32gb -> ubuntu-24.04-arm
    f3b6078f9 erofs-snapshotter: add fsverity support
    86cde823a build(deps): bump actions/cache from 4.2.0 to 4.2.1
    49257264f build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1
    125525d6c build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1
    0500dacf6 build(deps): bump github/codeql-action from 3.28.9 to 3.28.10
    71958731e move security profile to cri/sputil pkg
    b8a759f1f build(deps): bump golangci/golangci-lint-action from 6.3.2 to 6.5.0
    f23981281 build(deps): bump google.golang.org/grpc from 1.69.4 to 1.70.0
    a1e7457bc docs: add CRI Plugin Config runtime_path
    1ec10d9ae Add OCI/Image Volume Source support
    480e1039f move exclude-dirs to issues.exclude-dirs
    a502b7931 Clarify port handling in hosts toml
    44baada6a device mapper:fix sometimes blkdiscard doesn't have --version flags
    938775864 Update runc binary to v1.2.5
    326fbf074 build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.5
    6a01ad3e1 cri,nri: block NRI plugin sync. during event processing.
    df99aa321 update to go 1.24.0 / go1.23.6
    41eaa41c4 update golangci-lint to v1.64.2
    17acb356f build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5
    84e07f6b5 build(deps): bump the golang-x group with 3 updates
    6a08d70e6 build(deps): bump github/codeql-action from 3.28.8 to 3.28.9
    2f971ee2d build(deps): bump docker/setup-buildx-action from 3.8.0 to 3.9.0
    2b8a7f253 build(deps): bump lycheeverse/lychee-action from 2.2.0 to 2.3.0
    bdb8cb5a8 build(deps): bump golangci/golangci-lint-action from 6.2.0 to 6.3.2
    a1c540085 Support for importing layers in the block CIM format.
    b98378638 move the device after the options when using mkfs.ext4
    1fc497218 Fix privileged container sysfs can't be rw because pod is ro by default
    c51f5d26f perf(zstd): deactivate the low mem decoder
    b65f3875b build(deps): bump google-github-actions/upload-cloud-storage
    841ab361c build(deps): bump github/codeql-action from 3.28.6 to 3.28.8
    565b50dbb build(deps): bump google-github-actions/auth from 2.1.7 to 2.1.8
    2eb0aa6b9 nri: make OCI spec available on StopPodSandbox
    168c49e4d Fix state/root bug in shim sandbox controller
    3cdfc1003 core/remotes: Handle attestations in MakeRefKey
    e751b6bb1 core/images: Ignore attestations when traversing children
    83b65e52f Revert "Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG"
    0c986c332 build(deps): bump actions/attest-build-provenance from 2.1.0 to 2.2.0
    575239789 build(deps): bump actions/stale from 9.0.0 to 9.1.0
    48d09104d build(deps): bump github/codeql-action from 3.28.1 to 3.28.6
    6d1f6e75d Update upgrade section
    5f238fa82 Update to time based releases
    886d971f8 Update LTS definition and support horizon
    a6dc9905c client: add WithExtraDialOpts option
    69e82f9cd build(deps): bump the otel group across 1 directory with 8 updates
    53d6f3482 build(deps): bump golangci/golangci-lint-action from 6.1.1 to 6.2.0
    4b77d4e41 build(deps): bump softprops/action-gh-release from 2.2.0 to 2.2.1
    22e77720b build(deps): bump github/codeql-action from 3.27.9 to 3.28.1
    f572a6db9 build(deps): bump lycheeverse/lychee-action from 2.1.0 to 2.2.0
    36d3888cf build(deps): bump actions/upload-artifact from 4.4.3 to 4.6.0
    19c546c97 build(deps): bump github.com/tchap/go-patricia/v2 from 2.3.1 to 2.3.2
    460e5a2e2 build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.3
    157faf65c update to go1.23.5 / go1.22.11
    222308416 Remove noinline in apparmor SpecOpts
    2a4164ac8 Remove noinline in seccomp SpecOpts
    00fee4adb Transfer Service: enable remote snapshotters
    04f9e30db log: avoid using unsupported field by logrus
    bdc847f1e Remove deprecated WithCDIDevices in oci spec opts
    e20f7f4a2 Move CDI device spec out of the OCI package
    740c5d428 docs: fix some function names in comment
    b49df6af1 move FuzzCRIServer to go native fuzz
    6148dbdd7 Update platforms to latest rc
    2f15d6586 Add tests for EROFS snapshotter
    fd4caef78 Add EROFS snapshotter documentation
    2486d542a Introduce EROFS Snapshotter
    c73c8e5d5 Introduce EROFS differ
    fb44e37ff Remove confusing warning in cri runtime config migration
    6019bcdfb move FuzzContainerdImport to go native fuzz
    b7a117b46 Fix fuzz integration tests
    ffbe1b573 Use a order-only-prerequisite for mandir creation
    b81ace872 Update cimfs snapshotter & differ for new hcsshim interface
    58bd48ecf add some doc for shim reap orphan process
    09bf281ec fix go-cni race condition
    15d3bf9b2 Bump up otelttrpc to 0.1.0
    e1aeb37cd ci: fix the issue of config_file unset
    e65283321 make TestContainerCgroupWritable not parallel
    54ed595e1 update runc binary to v1.2.4
    79a42eedc ctr: `ctr images import --all-platforms`: fix unpack
    63f604728 Add snapshotter exports to unpack platform
    ef7fa43c9 build(deps): bump golang.org/x/sys in the golang-x group
    d156d3df9 Benchamrk chainID calculation in unpack
    00a11e91d downgrade go-difflib and go-spew to tagged releases
    95f45541e Avoid duplicated chain ID calculation in unpack
    e70977180 change metadata fuzz operations as const and slice instead of map
    a4e3218e8 change tmp dir creation in fuzz to t.TempDir
    ee6338188 bump up ttrpc to use its MD.Clone
    4f2f12be6 Bump seccomp version to be the same as one in runc repo
    a8c643cc5 change copyright from ADA Logics to containerd
    a55083007 Remove github.com/AdamKorcz/go-118-fuzz-build in go.mod
    2de103029 Move fuzz tests to go native fuzz [part1]
    bee64b2b9 Remove loop variable copies
    4a4a027f7 build(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1
    9fc711a8a Clarify Go client API guidance
    9bb31b706 build(deps): bump google.golang.org/grpc from 1.69.0 to 1.69.2
    f98d5fdb6 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.4 to 3.0.5
    1e3d10dc2 Make ovl idmap mounts read-only
    652e4d0b1 Add integ test to check tty leak
    26a156f4f Update golangci to 1.60.3
    aedb079bf fix master tty leak due to leaking init container object
    1363849b0 Add integration test
    7f3599f09 build(deps): bump golang.org/x/net from 0.30.0 to 0.33.0
    fa531f808 Update golangci-lint version in dev tools script
    2f37b9da3 build(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0
    dda702042 Enable Writable cgroups for unprivileged containers
    4e4537a87 build(deps): bump google.golang.org/grpc from 1.68.1 to 1.69.0
    f6e956c22 build(deps): bump github.com/containerd/imgcrypt/v2
    31e129856 build(deps): bump docker/setup-buildx-action from 3.7.1 to 3.8.0
    d29751424 build(deps): bump github/codeql-action from 3.27.6 to 3.27.9
    a172d2c11 build(deps): bump softprops/action-gh-release from 2.1.0 to 2.2.0
    47c4dba40 Unify default transport in docker resolver
    ef0e70922 Fix runtime platform loading in cri image plugin init
    aeb414021 build(deps): bump google.golang.org/grpc from 1.67.1 to 1.68.1
    23e014140 vendor: golang.org/x/crypto v0.31.0
    9b3d999bd vendor: golang.org/x/term v0.27.0
    1032fad27 vendor: golang.org/x/text v0.21.0
    6764e62cf vendor: golang.org/x/sync v0.10.0
    160676647 vendor: golang.org/x/sys v0.28.0
    981414521 update runc binary to v1.2.3
    ff0d99e02 Add multiple uid/gid mapping test cases to integration tests
    ec231cdcf Update ctr to support remapper labels with multiple uid/gid mapping entries
    8bbfb6528 Update snapshotter opts to support multiple uid/gid mapping entries
    8a030d653 Update overlay snapshotter to support multiple uid/gid mappings
    168ec21db Update idmapped mount to support multiple uid/gid mappings
    a11405975 Add RootPair() and serialization routines to userns idmap
    1f220b23e feat: update go-cni version for CNI STATUS
    d76f92f24 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
    927012243 build(deps): bump actions/cache from 4.1.2 to 4.2.0
    73864c520 build(deps): bump github/codeql-action from 3.27.5 to 3.27.6
    afee762fb build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
    11b78255d cmd: add syncfs option to ctr command
    e0459262b Remove After=local-fs.target from containerd.service
    6c7b1afe5 Log "container event discarded" as Info
    81780a5dd update to go1.23.4 / go1.22.10
    2c4c04032 internal/cri: should not apply IoOwner options
    4a664772e The task_dir successfully cleans when the file is absent.
    4c11d753c ctr pull unpack for default platform using transfer service
    6fdc35243 CI: update Fedora to 41
    0903f203f fix panic due to nil dereference cgroups v2
    b78c5c6ed docs: fix snapshots api import
    ed39dfa5d Add integration test for custom configuration
    8540fed77 complete cri grpc config migration
    59a2c3523 Add containerd community call to readme.
    17f7858b4 Update differ to handle zstd media types
    e9d560f1e Unsorted platform conditionals cleanup
    485020ca8 fix: loop variable capture issue
    ea9397793 build(deps): bump github/codeql-action from 3.27.4 to 3.27.5
    6c16f3490 build(deps): bump github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.4
    5c905fb6c build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
    662d64080 build(deps): bump the k8s group with 5 updates
    3961dc9c8 Publish attestation as release artifact
    288001f68 move rocky 9.4 to almalinux/9 in CI
    e24864e48 Clarify release for deprecated registry field removals
    34284c507 Add tests for CNI v2 loopback options
    a21b178f1 *: should align pipe's owner with init process
    f5b2c3a07 build(deps): bump github/codeql-action from 3.27.1 to 3.27.4
    be2c4504e build(deps): bump github.com/containerd/continuity from 0.4.4 to 0.4.5
    dd2d89167 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
    9a7bc5423 update runc binary to 1.2.2
    f8819df7c Update install-imgcrypt to allow change install repo
    f6e30e962 [defaults] Reorganize per-platform defaults
    9c7a403a2 [containerd-stress] Use platform-specific default address
    9e3ab2332 Move content events to metadata
    1b01f396d Revert "Disable vagrant strict dependency checking"
    6c1b699bf docs: update schema 1 deprecation information
    01c489141 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
    cebca6f87 build(deps): bump the golang-x group with 3 updates
    73ae1c66f build(deps): bump lycheeverse/lychee-action from 2.0.2 to 2.1.0
    4bd33276c build(deps): bump github/codeql-action from 3.27.0 to 3.27.1
    d32ed4a56 build(deps): bump actions/attest-build-provenance from 1.4.3 to 1.4.4
    d810c5759 build(deps): bump softprops/action-gh-release from 2.0.9 to 2.1.0
    91e4e0967 fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
    f9537ae12 fsverity_test.go: fix major/minor device number resolving
    8a8e50e6d fsverity_test.go: fix nil pointer dereference, fix test fail
    bcc3cc968 update to go1.23.3 / go1.22.9
    784116b7d Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
    c130d93c1 make ListContainerStats handle container that is removed before its sandbox
    a17001b42 build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0
    bc056a5c6 nri: report pod ips to the nri plugins
    a256f326c bump nri version to get PodIPs
    11b1353c1 fix: set the credentials even if not provided
    1617fd72e test: prevent segfault in imageverifier test
    2447936fc Fix runtimeoptions location in v2 migration
    0c2805a6e Report an error when cni confDir removed

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

0 files changed, 0 insertions, 0 deletions