[master] MGMT-24702: CVE-2026-53488 Bump github.com/containerd/containerd to v1.7.33

[shay23bra]

Bump github.com/containerd/containerd replace directive from v1.7.29 to v1.7.33 to fix CVE-2026-53488.

Strategy Selection

✓ Successful Strategy: Replace directive update

Updated existing replace directive to point to fixed version.

https://redhat.atlassian.net/browse/MGMT-24702

---

This PR was automatically generated by the CVE Automation tool.
For questions or issues, reach out in #cve-automation.

Summary by CodeRabbit

• Chores
  • Updated a bundled container runtime dependency to a newer version, which may improve stability and compatibility.

[openshift-ci-robot]

@shay23bra: This pull request references MGMT-24702 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the vulnerability to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Bump github.com/containerd/containerd replace directive from v1.7.29 to v1.7.33 to fix CVE-2026-53488.

Strategy Selection

✓ Successful Strategy: Replace directive update

Updated existing replace directive to point to fixed version.

https://redhat.atlassian.net/browse/MGMT-24702

---

This PR was automatically generated by the CVE Automation tool.
For questions or issues, reach out in #cve-automation.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Caution

Review failed

An error occurred during the review process. Please try again later.

Walkthrough

This change updates the replace directive for github.com/containerd/containerd in go.mod, bumping the pinned version from v1.7.29 to v1.7.33.

Changes

Dependency update

Layer / File(s)	Summary
Update containerd replace directive go.mod	The replace directive for github.com/containerd/containerd is updated from v1.7.29 to v1.7.33.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Related PRs: None identified.

Suggested labels: dependencies

Suggested reviewers: None identified.

---

🐰 A tiny hop, a version bump so slight,
containerd climbs to thirty-three tonight,
one line in go.mod, quiet and neat,
a rabbit's nibble, small but complete.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

Warning

Tools execution failed with the following error:

Failed to run tools: 13 INTERNAL: Received RST_STREAM with code 2 (Internal server error)

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 48.82%. Comparing base (019fed0) to head (a0835dd).
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2204   +/-   ##
=======================================
  Coverage   48.82%   48.82%           
=======================================
  Files          20       20           
  Lines        4397     4397           
=======================================
  Hits         2147     2147           
  Misses       2026     2026           
  Partials      224      224           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[gamli75]

/retest-required

[gamli75]

/retest-required

[gamli75]

/retest-required

[gamli75]

/override ci/prow/edge-e2e-ai-operator-ztp

[gamli75]

/approve
/lgtm

[openshift-ci]

@gamli75: Overrode contexts on behalf of gamli75: ci/prow/edge-e2e-ai-operator-ztp

Details

In response to this:

/override ci/prow/edge-e2e-ai-operator-ztp

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@shay23bra: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: gamli75, shay23bra

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [gamli75]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment