Bump to c/storage v1.63.0 in c/image, c/image to v5.40

[TomSweeneyRedHat]

Bump c/storage to v1.63.0 in c/image, then bump c/image to v5.40.0

I'll follow up with a dev bump everywhere at the end of this process.

[Luap99]

you must update the go.mod from common as well, we require that the modules requirements are in sync.

[mtrmac]

@TomSweeneyRedHat go work sync && go work vendor && make vendor or repeat make vendor until stability.

[mtrmac]

@TomSweeneyRedHat (one more?) make vendor please.

[TomSweeneyRedHat]

There's no Vendor section in the Makefile. I went with go mod {tidy|vendor|verify} again. For the first time, it created a vendor directory in Image; I've included that. It also created a common/vendor prior; I'd not included it, but decided to now. Now it looks like there's more red....

[mtrmac]

There's no Vendor section in the Makefile

There’s one in the top level Makefile, not in image/Makefile.

[TomSweeneyRedHat]

DOH! I tried make vendor in c/storage, not so good there. It works better in the top level directory, trying again.

[mtrmac]

@TomSweeneyRedHat #861 seems to pass.

[TomSweeneyRedHat]

@mtrmac thanks for the other PR, that was very helpful. The big issue I had was doing make vedor in each project's subdirectory instead of up top. I've changed that, and removed the vendorerd directories. Fingers crossed.

[mtrmac]

Thanks!

@TomSweeneyRedHat when creating the GitHub release, please highlight that config file lookup behavior has changed and users should read containers-config(5).

[TomSweeneyRedHat]

@mtrmac I don't think we'll be making a release, only tags. @Luap99 thoughts?

[Luap99]

We will need a release for common so packit works. Long term we likely want an automation to create the release with a right tarball for debian packing #485