containerd 1.7.27
Welcome to the v1.7.27 release of containerd!
The twenty-seventh patch release for containerd 1.7 contains various fixes
and updates.
Highlights
- Fix integer overflow in User ID handling (GHSA-265r-hfxg-fhmg)
- Update image type checks to avoid unnecessary logs for attestations (#11538)
Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.
Contributors
- Jin Dong
- Akhil Mohan
- Derek McGowan
- Maksym Pavlenko
- Paweł Gronowski
- Phil Estes
- Akihiro Suda
- Craig Ingram
- Krisztian Litkey
- Samuel Karp
Changes
20 commits
05044ec0a
Merge commit from fork11504c3fc
validate uid/gid- Prepare release notes for v1.7.27 (#11540)
1be04be6c
Prepare release notes for v1.7.27
- Update image type checks to avoid unnecessary logs for attestations (#11538)
- update build to go1.23.7, test go1.24.1 (#11515)
a39863c9f
update build to go1.23.7, test go1.24.1
- Remove hashicorp/go-multierror dependency and fix CI (#11499)
- go.{mod,sum}: bump CDI deps to v0.8.1. (#11422)
5ba28f8dc
go.{mod,sum}: bump CDI deps to v0.8.1, re-vendor.
- CI: arm64-8core-32gb -> ubuntu-24.04-arm (#11437)
Dependency Changes
- github.com/intel/goresctrl v0.3.0 -> v0.5.0
- github.com/prometheus/client_golang v1.14.0 -> v1.16.0
- github.com/prometheus/common v0.37.0 -> v0.42.0
- github.com/prometheus/procfs v0.8.0 -> v0.10.1
- k8s.io/apimachinery v0.26.2 -> v0.27.4
- sigs.k8s.io/json f223a00ba0e2 -> bc3834ca7abd
- tags.cncf.io/container-device-interface v0.7.2 -> v0.8.1
- tags.cncf.io/container-device-interface/specs-go v0.7.0 -> v0.8.0
Previous release can be found at v1.7.26