Bump github.com/containers/podman/v4 from 4.6.2 to 4.7.2

[dependabot]

Bumps github.com/containers/podman/v4 from 4.6.2 to 4.7.2.

Release notes

Sourced from github.com/containers/podman/v4's releases.

v4.7.2

Security

• Fixed GHSA-jq35-85cj-fj4p.

Bugfixes

• WSL: Fixed podman compose command.
• Fixed a bug in podman compose to try all configured providers before throwing an error (#20502).

v4.7.1

Bugfixes

• Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209).
• Fixed a regression in --env-file handling (#19565).
• Fixed a bug where podman inspect would fail when stat'ing a device failed.

API

• The network list compat API endpoint is now much faster (#20035).

v4.7.0

Security

• Now the io.containers.capabilities LABEL in an image can be an empty string.

Features

• New command set: podman farm [create,list,remove,update] has been created to "farm" out builds to machines running Podman for different architectures.
• New command: podman compose as a thin wrapper around an external compose provider such as docker-compose or podman-compose.
• FreeBSD: podman run --device is now supported.
• Linux: Add a new --module flag for Podman.
• Podmansh: Timeout is now configurable using the podmansh_timeout option in containers.conf.
• SELinux: Add support for confined users to create containers but restrict them from creating privileged containers.
• WSL: Registers shared socket bindings on Windows, to allow other WSL distributions easy remote access (#15190).
• WSL: Enabling user-mode-networking on older WSL2 generations will now detect an error with upgrade guidance.
• The podman build command now supports two new options: --layer-label and --cw.
• The podman kube generate command now supports generation of k8s DaemonSet kind (#18899).
• The podman kube generate and podman kube play commands now support the k8s TerminationGracePeriodSeconds field (RH BZ#2218061).
• The podman kube generate and podman kube play commands now support securityContext.procMount: Unmasked (#19881).
• The podman generate kube command now supports a --podman-only flag to allow podman-only reserved annotations to be used in the generated YAML file. These annotations cannot be used by Kubernetes.
• The podman kube generate now supports a --no-trunc flag that supports YAML files with annotations longer than 63 characters. Warning: if an annotation is longer than 63 chars, then the generated yaml file is not Kubernetes compatible.
• An infra name annotation io.podman.annotations.infra.name is added in the generated yaml when the pod create command has --infra-name set. This annotation can also be used with kube play when wanting to customize the infra container name (#18312).
• The syntax of --uidmap and --gidmap has been extended to lookup the parent user namespace and to extend default mappings (#18333).
• The podman kube commands now support the List kind (#19052).
• The podman kube play command now supports environment variables in kube.yaml (#15983).
• The podman push and podman manifest push commands now support the --force-compression optionto prevent reusing other blobs (#18860).
• The podman manifest push command now supports --add-compression to push with compressed variants.
• The podman manifest push command now honors the add_compression field from containers.conf if --add-compression is not set.
• The podman run and podman create --mount commands now support the ramfs type (#19659).
• When running under systemd (e.g., via Quadlet), Podman will extend the start timeout in 30 second steps up to a maximum of 5 minutes when pulling an image.
• The --add-host option now accepts the special string host-gateway instead of an IP Address, which will be mapped to the host IP address.
• The podman generate systemd command is deprecated. Use Quadlet for running containers and pods under systemd.
• The podman secret rm command now supports an --ignore option.
• The --env-file option now supports multiline variables (#18724).
• The --read-only-tmpfs flag now affects /dev and /dev/shm as well as /run, /tmp, /var/tmp (#12937).

... (truncated)

Changelog

Sourced from github.com/containers/podman/v4's changelog.

4.7.2

Security

• Fixed GHSA-jq35-85cj-fj4p.

Bugfixes

• WSL: Fixed podman compose command.
• Fixed a bug in podman compose to try all configured providers before throwing an error (#20502).

4.7.1

Bugfixes

• Fixed a bug involving non-English locales of Windows where machine installs using user-mode networking were rejected due to erroneous version detection (#20209).
• Fixed a regression in --env-file handling (#19565).
• Fixed a bug where podman inspect would fail when stat'ing a device failed.

API

• The network list compat API endpoint is now much faster (#20035).

4.7.0

Security

• Now the io.containers.capabilities LABEL in an image can be an empty string.

Features

• New command set: podman farm [create,list,remove,update] has been created to "farm" out builds to machines running Podman for different architectures.
• New command: podman compose as a thin wrapper around an external compose provider such as docker-compose or podman-compose.
• FreeBSD: podman run --device is now supported.
• Linux: Add a new --module flag for Podman.
• Podmansh: Timeout is now configurable using the podmansh_timeout option in containers.conf.
• SELinux: Add support for confined users to create containers but restrict them from creating privileged containers.
• WSL: Registers shared socket bindings on Windows, to allow other WSL distributions easy remote access (#15190).
• WSL: Enabling user-mode-networking on older WSL2 generations will now detect an error with upgrade guidance.
• The podman build command now supports two new options: --layer-label and --cw.
• The podman kube generate command now supports generation of k8s DaemonSet kind (#18899).
• The podman kube generate and podman kube play commands now support the k8s TerminationGracePeriodSeconds field (RH BZ#2218061).
• The podman kube generate and podman kube play commands now support securityContext.procMount: Unmasked (#19881).
• The podman generate kube command now supports a --podman-only flag to allow podman-only reserved annotations to be used in the generated YAML file. These annotations cannot be used by Kubernetes.
• The podman kube generate now supports a --no-trunc flag that supports YAML files with annotations longer than 63 characters. Warning: if an annotation is longer than 63 chars, then the generated yaml file is not Kubernetes compatible.
• An infra name annotation io.podman.annotations.infra.name is added in the generated yaml when the pod create command has --infra-name set. This annotation can also be used with kube play when wanting to customize the infra container name (#18312).
• The syntax of --uidmap and --gidmap has been extended to lookup the parent user namespace and to extend default mappings (#18333).
• The podman kube commands now support the List kind (#19052).
• The podman kube play command now supports environment variables in kube.yaml (#15983).
• The podman push and podman manifest push commands now support the --force-compression optionto prevent reusing other blobs (#18860).
• The podman manifest push command now supports --add-compression to push with compressed variants.
• The podman manifest push command now honors the add_compression field from containers.conf if --add-compression is not set.
• The podman run and podman create --mount commands now support the ramfs type (#19659).
• When running under systemd (e.g., via Quadlet), Podman will extend the start timeout in 30 second steps up to a maximum of 5 minutes when pulling an image.
• The --add-host option now accepts the special string host-gateway instead of an IP Address, which will be mapped to the host IP address.
• The podman generate systemd command is deprecated. Use Quadlet for running containers and pods under systemd.
• The podman secret rm command now supports an --ignore option.
• The --env-file option now supports multiline variables (#18724).
• The --read-only-tmpfs flag now affects /dev and /dev/shm as well as /run, /tmp, /var/tmp (#12937).

... (truncated)

Commits

• 750b4c3 v4.7.2
• 23d1d4b Update RELEASE_NOTES.md for v4.7.2
• 7f28527 Merge pull request #20512 from openshift-cherrypick-robot/cherry-pick-20508-t...
• 801ca64 Merge pull request #20509 from openshift-cherrypick-robot/cherry-pick-20501-t...
• 4efa973 compose: try all possible providers before throwing an error
• afb7d7e Merge pull request #20491 from vrothberg/cherry-pick-20478-to-v4.7
• bd86a52 Mask /sys/devices/virtual/powercap
• 0341384 fix: check wsl npipe when executing podman compose
• 85b5f57 Merge pull request #20341 from openshift-cherrypick-robot/cherry-pick-20340-t...
• d1cb93d rtd: implement v2 build file
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[navidys]

@dependabot rebase

[navidys]

@dependabot rebase