chore(deps): update kubernetes-cri-tools (patch)

[renovate]

This PR contains the following updates:

Package	Update	Change
kubernetes-cri-tools	patch	1.34.0-5.azl3 → 1.34.0-8.azl3
kubernetes-cri-tools	patch	1.34.0-ubuntu24.04u7 → 1.34.0-ubuntu24.04u8
kubernetes-cri-tools	patch	1.34.0-ubuntu22.04u7 → 1.34.0-ubuntu22.04u8
kubernetes-cri-tools	patch	1.34.0-ubuntu20.04u7 → 1.34.0-ubuntu20.04u8

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the pinned kubernetes-cri-tools package versions across supported OS targets in the shared components registry.

Changes:

• Bump kubernetes-cri-tools on Ubuntu (20.04/22.04/24.04) from u7 to u8.
• Bump kubernetes-cri-tools on Azure Linux 3.0 from 1.34.0-5.azl3 to 1.34.0-8.azl3.

[github-actions]

Windows Unit Test Results

  3 files   12 suites   49s ⏱️
389 tests 389 ✅ 0 💤 0 ❌
392 runs  392 ✅ 0 💤 0 ❌

Results for commit 70121f7.

[aks-node-assistant]

Clawpilot AgentBaker Linux gate detective

• Run: https://msazure.visualstudio.com/CloudNativeCompute/_build/results?buildId=174811911
• Failed job/stage/task: build2204arm64gen2containerd / Test, Scan, and Cleanup
• Detective summary: Ubuntu 22.04 ARM64 Gen2 containerd Test/Scan reported CIS regressions detected (1), matching recurring rule 6.1.3.1 pass-to-fail. Classification: VHD/CIS compliance regression signal. Confidence: medium-high. Strongest alternative: PR-caused kubernetes-cri-tools bump, less likely because this recurring CIS signature spans unrelated PRs and has repair item #39004382. Recommended owner/action: Linux VHD/CIS owner continue repair item #39004382 and inspect CIS artifacts.
• Signature: linux-vhd-prgate-cis-ubuntu2204-arm64-gen2-containerd-6131-pass-fail
• Evidence links: run, timeline/logs, wiki signature

[aks-node-assistant]

🤖 AgentBaker Linux Gate Detective

Run: Build 174811911 — PR #9108 chore(deps): update kubernetes-cri-tools
Failed: build stage → job build2204arm64gen2containerd → task Test, Scan, and Cleanup
Signature: linux-vhd-prgate-cis-ubuntu2204-arm64-gen2-containerd-6131-pass-fail
Status: Known recurring flake — Repair item #39004382 open

Three-level RCA

1. Surface: CIS rule 6.1.3.1 changed pass→fail in Ubuntu 22.04 ARM64 Gen2 containerd scan (task log: CIS regressions detected: 1 / 6.1.3.1|pass->fail)
2. Corroboration: Simultaneous identical failure on unrelated PR chore(deps): update node-exporter-kubernetes (patch) #9109 (build 174821806) — two independent builds confirm baseline drift, not PR code
3. Challenge: Component update in this PR could alter filesystem hardening; rejected — this PR only updates kubernetes-cri-tools with no VHD content overlap

Confidence: High — 9 distinct build IDs; both today's builds are dep-update bots with zero overlapping VHD file changes
Action: Safe to re-run gate; repair item #39004382 tracks fix
Wiki: =%2FAKS%2FSIGs%20and%20Teams%2FAKS%20Components%2FSIG%3A%20Node%20Lifecycle%2FAI%20Agent%20Knowledge%2FAgentBaker%20Gate%20PR%20Pipeline%20Flakiness%2FItems%20With%20Repair%20Items