containerd 1.5.14

Welcome to the v1.5.14 release of containerd!

The fourteenth patch release for containerd 1.5 includes various fixes and updates
along with an updated version of runc.

Notable Updates

• Fix WWW-Authenticate parsing to allow empty quoted string (#7132)
• Update oci.WithDefaultUnixDevices(): remove tun/tap from the default devices (#7267)
• Fix createTarFile: make xattr EPERM non-fatal (#7449)
• Fix dockerPusher to handle abort correctly (#7467)
• Migrate from k8s.gcr.io to registry.k8s.io (#7550)
• Fix CRI: PodSandboxStatus should tolerate missing task (#7552)
• Fix io.containerd.runc.v1: Stats() shouldn't assume s.container is non-nil (#7556)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Kazuyoshi Kato
• Sebastiaan van Stijn
• Samuel Karp
• Phil Estes
• Maksym Pavlenko
• Akihiro Suda
• Derek McGowan
• Wei Fu
• Baoshuo
• Benjamin Elder
• Brian Goff
• Daniel Canter
• Gabriel Adrian Samfira
• Iceber Gu
• Kohei Tokunaga
• Mike Brown
• Paco Xu
• Ye Sijun
• rongfu.leng

Changes

56 commits

• [release/1.5] Prepare release notes for 1.5.14 (#7572)
  • ed672fe1c Prepare release notes for 1.5.14
  • 5150b97dd Update mailmap
• [release/1.5] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 (#7476)
  • f109930d5 fix install cni script
  • 1fea434b7 [release/1.5] sync gha with release/1.6 branch
  • a6672294a [release/1.5] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
  • 1c1045d79 [release/1.5] update golangci-lint to v1.49.0
  • 03d7e8e49 Fix linter warnings
  • e6de4d6ef [release/1.5] gofmt with go1.19
  • 699a1f90e Do not use go get to install executables
  • c24d508c9 update gotestsum to v1.7.0
  • 79f119b43 update gotestsum to current master
  • 4806c2400 Update gotestsum to add timestamps to junit output
• [release/1.5] cri: PodSandboxStatus should tolerate missing task (#7552)
  • 60dec1391 cri: PodSandboxStatus should tolerate missing task
• [release/1.5] Stats() shouldn't assume s.container is non-nil (#7556)
  • 208615ca7 [release/1.5] Stats() shouldn't assume s.container is non-nil
• [release/1.5] migrate from k8s.gcr.io to registry.k8s.io (#7550)
  • a34a30b52 migrate from k8s.gcr.io to registry.k8s.io
• [release/1.5] vendor: golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f (#7515)
  • ac382a74d [release/1.5] vendor: golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f
• [release/1.5] cherry-pick: remotes: fix dockerPusher to handle abort correctly (#7467)
  • 2fe813d36 remotes: fix dockerPusher to handle abort correctly
• [release/1.5] cherry-pick: make xattr EPERM non-fatal in createTarFile (#7449)
  • f94332ee5 make xattr EPERM non-fatal in createTarFile
• [release/1.5] .zuul: remove the zuul because it is offline (#7428)
  • 0e11ab933 remove stray .zuul.yaml
  • 83ea10446 .zuul: remove the zuul because it is offline
• [release/1.5 backport] update runc binary to v1.1.4 (#7332)
  • 4593d187a update runc binary to v1.1.4
• [release/1.5] ci: remove GOPROXY environment variable due to https://github.com/go-… (#7300)
  • d3d97cce3 ci: remove GOPROXY environment variable due to go-yaml/yaml#887
• [release 1.5 backport] Fix cleanup in critest (#7275)
  • c2ace6ebc Fix cleanup in critest
• [release/1.5 backport] oci: WithDefaultUnixDevices(): remove tun/tap from the default devices (#7267)
  • 9bdd52b3a oci: WithDefaultUnixDevices(): remove tun/tap from the default devices
• [release/1.5] release workflow: increase timeout to 30 minutes (#7262)
  • 401af14ea release workflow: increase timeout to 30 minutes
• [release/1.5] backport: update GitHub Actions runners to macos-12 (#7248)
  • 792ead0cf Update Vagrant CI to macos-12
  • 07e037f09 chore: bump macos runner version
• [release/1.5] gha: make release workflow work in forks (#7239)
  • 7e7eb6793 gha: make release workflow work in forks
• [release/1.5] Update golang to 1.17.13 (#7245)
  • 9a116ee4f Update golang to 1.17.13
• [release/1.5] update golang to 1.17.12 (#7161)
  • e91e39347 [release/1.5] update golang to 1.17.12
• [release/1.5] Downgrade MinGW to version 10.2.0 (#7134)
  • 46933650b [release/1.5] Downgrade MinGW to version 10.2.0
• [release/1.5] Fix WWW-Authenticate parsing (#7132)
  • 8ae864ae9 [release/1.5] Fix WWW-Authenticate parsing
• [release/1.5] ctr: fix label args used in NewContainer (#7071)
  • febb0e82d ctr: fix label args used in NewContainer
• [release/1.5] update runc binary to v1.1.3 (#7035)
  • e549139d3 update runc binary to v1.1.3

Dependency Changes

• golang.org/x/sys 33da011f77ad -> 8c9f86f7a55f

Previous release can be found at v1.5.13