containerd 1.6.37

Welcome to the v1.6.37 release of containerd!

The thirty-seventh patch release for containerd 1.6 contains various fixes
and updates.

Highlights

• Update runc binary to v1.2.5 (#11396)
• Fix the race condition during GC of snapshots when client retries (#10764)

Container Runtime Interface (CRI)

• Update the container exit log to info level (#11008)
• Handle teardown failure to avoid blocking cleanup (#10778)
• Add check for CNI plugins before tearing down pod network (#10766)

Runtime

• Fix console TTY leak in runc shim (#11359)
• Fix panic due to nil dereference cgroups v2 (#11100)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Phil Estes
• Akihiro Suda
• Maksym Pavlenko
• Akhil Mohan
• Austin Vazquez
• Derek McGowan
• Samuel Karp
• Henry Wang
• Jin Dong
• Jing Xu
• Sebastiaan van Stijn
• Wei Fu
• Benjamin Peterson
• Kazuyoshi Kato
• Saket Jajoo
• Sameer
• Zou Nengren
• bo.jiang
• jinda.ljd
• ningmingxiao

Changes

59 commits

• Prepare release notes for v1.6.37 (#11429)
  • 16ba72ad9 Prepare release notes for v1.6.37
• Fix console TTY leak in runc shim (#11359)
  • 3e6f219d7 Add integ test to check tty leak
  • bc20f7457 fix master tty leak due to leaking init container object
• Update install-imgcrypt to allow change install repo (#11418)
  • cbd44298c Update install-imgcrypt to allow change install repo
• Update runc binary to v1.2.5 (#11396)
  • 9918dc4e3 Update runc binary to v1.2.5
• Update vagrant host OS to fix Vagrant CI runs (#11348)
  • d92457c71 Remove vagrant scp from the install list
• update runc binary to v1.2.4 (#11237)
  • 315a23dd9 update runc binary to v1.2.4
• update runc binary to v1.2.3 (#11144)
  • 79f6df6f4 update runc binary to v1.2.3
• update build to go1.22.10, test go1.23.4 (#11112)
  • bf89950f5 update build to go1.22.10, test go1.23.4
• Fix panic due to nil dereference cgroups v2 (#11100)
  • db096794f fix panic due to nil dereference cgroups v2
• Add almalinux/9 in CI (#11055)
  • 3a0f138b0 add almalinux/9 in CI
• Update the container exit log to info level (#11008)
  • aca1ca440 add info of exited event
• update runc binary to 1.2.2 (#11028)
  • 4eaef56a2 update runc binary to 1.2.2
• Revert "Disable vagrant strict dependency checking" (#11010)
  • f42035a21 Revert "Disable vagrant strict dependency checking"
• update build to go1.22.9, test go1.23.3 (#10975)
  • 20958cbb0 update build to go1.22.9, test go1.23.3
• backport: Disable vagrant strict dependency checking (#10966)
  • edb3df5ab Disable vagrant strict dependency checking
• Update critools-version to 1.29 (#10929)
  • 9eca374a4 Update critools-version to 1.29 in release 1.6
• update runc binary to 1.2.1 (#10941)
  • 6134f736d update runc binary to 1.2.1
• services/snapshots: include name of snapshotter in debug logs (#10932)
  • 4e54972f0 services/snapshots: include name of snapshotter in debug logs
• Make TestContainerPids more resilient (#10937)
  • d7c7a12f3 Make TestContainerPids more resilient
• Add After=dbus.service to containerd.service (#10860)
  • e6d8e5e9c Add After=dbus.service to containerd.service
• Handle teardown failure to avoid blocking cleanup (#10778)
  • b1f8b03e7 Handle teardown failure to avoid blocking cleanup
• Switch from actuated.dev to GH Action runners for arm64 (#10823)
  • ba411483a Switch from actuated.dev to GH Action runners for arm64
  • 8c58f78c2 Update github actions ci to run on forks
• bump golangci/golangci-lint-action from 4 to 6 (#10819)
  • e4211a530 bump golangci/golangci-lint-action from 4 to 6
• update to go1.23.2,go1.22.8 (#10809)
  • 1ca261fe4 update to go1.23.2,go1.22.8
• Update runner images to macOS13 (#10784)
  • 1c96f2391 Update runner images to macOS13
• Bump crun to 1.16.1 (#10775)
  • 1ba7381cf Bump crun to 1.16
  • afc84d092 CI: bump up crun to 1.15
• Fix the race condition during GC of snapshots when client retries (#10764)
  • 74951d6cf Fix the race condition during GC of snapshots when client retries
• Add check for CNI plugins before tearing down pod network (#10766)
  • ca6516ee8 [release/1.6] Add check for CNI plugins before tearing down pod network

Dependency Changes

This release has no dependency changes

Previous release can be found at v1.6.36