CRI-O v1.24.0
The release notes have been generated for the commit range
v1.23.0…2858bf7 on Thu, 30 Jun 2022 10:16:17 UTC.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
To verify the artifact signatures via cosign, run:
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.2858bf76550f8c4b8195f19628ff91493e32c118.tar.gz \
--signature cri-o.amd64.2858bf76550f8c4b8195f19628ff91493e32c118.tar.gz.sig \
--certificate cri-o.amd64.2858bf76550f8c4b8195f19628ff91493e32c118.tar.gz.cert
To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:
> tar xfz cri-o.amd64.2858bf76550f8c4b8195f19628ff91493e32c118.tar.gz
> bom validate -e cri-o.amd64.2858bf76550f8c4b8195f19628ff91493e32c118.tar.gz.spdx -d cri-o
Changelog since v1.23.0
Changes by Kind
Dependency-Change
- Fix a panic caused by using the improper Result structure version when setting up CNI plugins (#5949, @haircommander)
- Updated cri-tools to v1.24.2. (#5906, @saschagrunert)
- Updated golang dependencies (#5917, @saschagrunert)
Other
- Introduce the following metrics:
crio_operations_total, crio_operations_latency_seconds_total, crio_operations_latency_seconds,
crio_operations_errors_total, crio_image_pulls_bytes_total,
crio_image_pulls_skipped_bytes_total,
crio_image_pulls_success_total, crio_image_pulls_failure_total,
crio_image_layer_reuse_total, crio_containers_oom_count_total
while marking metric names that do not follow prometheus best practices as Deprecated in Prometheus metric help text. (#5487, @swghosh)
Deprecation
- Deprecate
conmon
, conmon-cgroup
, and conmon-env
config options in favor of runtime handler specific fields monitor-path
, monitor-cgroup
, and monitor-env
(#5823, @haircommander)
- Mark –pids-limit and –log-size-max options as deprecated, as well as set the default pids-limit to unlimited. Users should migrate to using the Kubelet’s flags –pod-pids-limit and –container-log-max-size respectively. (#5831, @haircommander)
API Change
- Block containers without CAP_SYS_ADMIN on
unshare
syscall in the default seccomp profile, to better contain unprivileged container processes. (#5788, @haircommander)
- Enable
--seccomp-use-default-when-empty
/seccomp_use_default_when_empty
by default.
This is a premature step before the graduation of the seccompDefault
feature planned for
Kubernetes v1.25. We now use the runtime/default
profile for every workload specifying
none (empty) in the pod manifest. (#5587, @saschagrunert)
Feature
- Add
allowed_devices
field to config, allowing admins to specify which devices are allowed to be specified in the “io.kubernetes.cri-o.Devices” allowed_annotation. The default for this config field is [/dev/fuse] (#5551, @haircommander)
- Add experimental support for conmonrs, a redesign of conmon in rust. It should not be used in production. (#5839, @haircommander)
- Add functionality to use taskset to spawn new commands cri-o runs. Now, if InfraCtrCPUSet is called, all newly spawned commands will be placed in the InfraCtrCPUSet (as it’s expected to be set to the reserved CPU set that system commands should run on). (#5514, @haircommander)
- Add pause and unpause to the CRI-O HTTP API, allowing programs with access to the crio.sock to pause containers (#5797, @jwcesign)
- Added more verbose output to version information.
Added new
crio version -v,--verbose
flag to additionally list all compiled dependencies. (#5750, @saschagrunert)
- Automatically
chcon
and restorecon
on get script for SELinux enabled distributions. (#5711, @saschagrunert)
- Implement CDI device injection: extract the names of requested CDI devices and update
the OCI Spec according to the corresponding CDI device specifications. Please refer to
https://github.com/container-orchestrated-devices/container-device-interface for more
info about CDI. (#5571, @klihub)
- Updated CNI plugins to v1.1.1. (#5766, @saschagrunert)
- Updated
get
script to verify the SBOM if the bom tool is available in $PATH
. (#5992, @saschagrunert)
- Use default umask
0o022
if CRI-O runs under a different umask value. (#5904, @saschagrunert)
- We now provide a bill of materials for the static binary bundle. (#5988, @saschagrunert)
- We now sign the static binary bundle via sigstore signatures. This also includes support for the get script. (#5975, @saschagrunert)
Bug or Regression
- Add
monitor_exec_cgroup
to the configuration’s runtime handler struct. This allows an admin to specify which cgroup the monitor for exec sync requests runs in (defaults to that of CRI-O). (#5837, @donpenney)
- Conmon now always writes its logs to syslog, instead of only when the cgroup manager is cgroupfs (#3773, @haircommander)
- Crio no longer requires the conntrack binary (#5811, @aojea)
- Fix CVE-2022-27652 by dropping and refusing to add any inheritable capabilities (#5769, @haircommander)
- Fix a bug where CRI-O would leak a log file if a container failed to be created and the pod hadn’t yet been cleaned up. (#5800, @haircommander)
- Fix a bug where a pod given a host IPC or network namespace could configure sysctls on the host (#5610, @haircommander)
- Fix a bug where child processes of containers in the host’s PID namespace appear to leak after the child exits (#5895, @haircommander)
- Fix a bug where invalid default_sysctls could be specified, leading to an error like “Failed to configure sysctls after unshare: No such file or directory” (#5673, @haircommander)
- Fix a bug where memory swap values were specified even if the memory swap cgroup is not enabled (#5539, @haircommander)
- Fix a bug where situations of excessive load on nodes causes containers to never actually start (#5590, @haircommander)
- Fix a potential crash caused by a log message NULL-pointer dereference. (#5579, @klihub)
- Fix a rare deadlock while communicating to systemd (RHBZ 2082344) (#5922, @kolyshkin)
- Fix a segfault when multiple container stops come in for the same container (#5756, @haircommander)
- Fix an issue where protobuf panics when serializing ListContainer and ListPodSandbox calls (#5606, @haircommander)
- Fix bug where
ip a
reports Error: Peer netns reference is invalid
(#5529, @haircommander)
- Fix crypto-profile bind within RHEL based containers. (#5555, @rphillips)
- Fix filesystem stats on zfs driver. (#5821, @cnfatal)
- Fix vm containers couldn’t restore after cri-o restart (#5574, @gozssky)
- Fix zsh completion generation. (#5586, @klihub)
- Fixed
get
script pointing to main
instead of master
for retrieving the latest revision. (#5707, @saschagrunert)
- Fixed
io.kubernetes.cri-o.TrySkipVolumeSELinuxLabel
annotation usage with the OpenShift MCS. (#5775, @manuelluis)
- Fixed possible runtime panic on pod sandbox stats retrieval. (#5588, @saschagrunert)
- Forbid AppArmor profiles with the name
localhost/
. (#5655, @saschagrunert)
- Internal pod and container creation timeouts now account for changes in
runtime-request-timeout
in the Kubelet (#5783, @haircommander)
- Libcni: handle empty version when parsing version (https://github.com/containernetworking/cni/pull/893). Without this, Delete failed for empty-version configs, which was a regression from v0.8.0. (#5830, @aojea)
Uncategorized
- Changes default config output to comment default values instead of omitting them (#5007, @wgahnagl)
- Disable systemd-mode cgroup detection if /sys/fs/cgroup is bind mounted from the host (#5778, @harche)
- Fix 386 builds within CI (#5813, @rphillips)
- Inherits storage configs from storage.conf if crio config does not set. (#5520, @QiWang19)
- Update go to 1.17 in go.mod (#5577, @QiWang19)
- Updated default pause image to point to new location
registry.k8s.io/pause:3.6
(#5777, @ameukam)
Dependencies
Added
- 4d63.com/gochecknoglobals: v0.1.0
- bitbucket.org/creachadair/shell: v0.0.6
- bou.ke/monkey: v1.0.2
- capnproto.org/go/capnp/v3: v3.0.0-alpha.3
- cloud.google.com/go/compute: v1.6.1
- cloud.google.com/go/containeranalysis: v0.3.0
- cloud.google.com/go/errorreporting: v0.2.0
- cloud.google.com/go/grafeas: v0.1.0
- cloud.google.com/go/iam: v0.3.0
- cloud.google.com/go/kms: v1.4.0
- cloud.google.com/go/monitoring: v1.1.0
- cloud.google.com/go/secretmanager: v1.0.0
- cloud.google.com/go/security: v1.1.1
- cloud.google.com/go/spanner: v1.25.0
- cloud.google.com/go/trace: v1.0.0
- code.gitea.io/sdk/gitea: v0.11.3
- contrib.go.opencensus.io/exporter/aws: c478e41
- contrib.go.opencensus.io/exporter/ocagent: 05415f1
- contrib.go.opencensus.io/exporter/prometheus: v0.4.0
- contrib.go.opencensus.io/exporter/stackdriver: v0.13.10
- contrib.go.opencensus.io/exporter/zipkin: v0.1.2
- contrib.go.opencensus.io/integrations/ocsql: v0.1.7
- contrib.go.opencensus.io/resource: v0.1.1
- cuelang.org/go: v0.4.3
- filippo.io/edwards25519: v1.0.0-rc.1
- github.com/AdaLogics/go-fuzz-headers: f7be0cb
- github.com/Antonboom/errname: v0.1.5
- github.com/Antonboom/nilnil: v0.1.0
- github.com/Azure/azure-amqp-common-go/v2: v2.1.0
- github.com/Azure/azure-amqp-common-go/v3: v3.2.2
- github.com/Azure/azure-pipeline-go: v0.2.3
- github.com/Azure/azure-service-bus-go: v0.11.5
- github.com/Azure/azure-storage-blob-go: v0.14.0
- github.com/Azure/go-amqp: v0.16.4
- github.com/Azure/go-autorest/autorest/azure/auth: v0.5.11
- github.com/Azure/go-autorest/autorest/azure/cli: v0.4.5
- github.com/DataDog/datadog-go: v3.2.0+incompatible
- github.com/Djarvur/go-err113: aea10b5
- github.com/GoogleCloudPlatform/cloudsql-proxy: v1.27.0
- github.com/Knetic/govaluate: 9aa4983
- github.com/Masterminds/goutils: v1.1.1
- github.com/Masterminds/semver/v3: v3.1.1
- github.com/Masterminds/semver: v1.5.0
- github.com/Masterminds/sprig/v3: v3.2.2
- github.com/Masterminds/sprig: v2.22.0+incompatible
- github.com/PaesslerAG/gval: v1.0.0
- github.com/PaesslerAG/jsonpath: v0.1.1
- github.com/ProtonMail/go-crypto: a948124
- github.com/ReneKroon/ttlcache/v2: v2.11.0
- github.com/Shopify/sarama: v1.19.0
- github.com/Shopify/toxiproxy: v2.1.4+incompatible
- github.com/ThalesIgnite/crypto11: v1.2.5
- github.com/VividCortex/gohistogram: v1.0.0
- github.com/acomagu/bufpipe: v1.0.3
- github.com/afex/hystrix-go: fa1af6a
- github.com/agnivade/levenshtein: v1.0.1
- github.com/alecthomas/kingpin: v2.2.6+incompatible
- github.com/alexkohler/prealloc: v1.0.0
- github.com/andreyvit/diff: c7f18ee
- github.com/aokoli/goutils: v1.0.1
- github.com/apache/beam: v2.32.0+incompatible
- github.com/apache/thrift: v0.13.0
- github.com/apex/log: v1.1.4
- github.com/apex/logs: v0.0.4
- github.com/aphistic/golf: 02c07f1
- github.com/aphistic/sweet: v0.2.0
- github.com/aryann/difflib: e206f87
- github.com/ashanbrown/forbidigo: v1.2.0
- github.com/ashanbrown/makezero: b626158
- github.com/aws/aws-lambda-go: v1.13.3
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.0.0
- github.com/aws/aws-sdk-go-v2/config: v1.14.0
- github.com/aws/aws-sdk-go-v2/credentials: v1.9.0
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.11.0
- github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.7.1
- github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.5
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.3.0
- github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.6
- github.com/aws/aws-sdk-go-v2/service/ecr: v1.15.0
- github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.12.0
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.5.0
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.8.0
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.9.0
- github.com/aws/aws-sdk-go-v2/service/kms: v1.10.0
- github.com/aws/aws-sdk-go-v2/service/s3: v1.19.0
- github.com/aws/aws-sdk-go-v2/service/secretsmanager: v1.10.0
- github.com/aws/aws-sdk-go-v2/service/sns: v1.11.0
- github.com/aws/aws-sdk-go-v2/service/sqs: v1.12.0
- github.com/aws/aws-sdk-go-v2/service/ssm: v1.15.0
- github.com/aws/aws-sdk-go-v2/service/sso: v1.10.0
- github.com/aws/aws-sdk-go-v2/service/sts: v1.15.0
- github.com/aws/aws-sdk-go-v2: v1.16.4
- github.com/aws/smithy-go: v1.11.2
- github.com/awslabs/amazon-ecr-credential-helper/ecr-login: 396b203
- github.com/aybabtme/rgbterm: cc83f3b
- github.com/beeker1121/goque: d618510
- github.com/beevik/etree: v1.1.0
- github.com/bkielbasa/cyclop: v1.2.0
- github.com/blakesmith/ar: 809d437
- github.com/blang/semver/v4: v4.0.0
- github.com/blendle/zapdriver: v1.3.1
- github.com/blizzy78/varnamelen: v0.3.0
- github.com/bradfitz/gomemcache: a41fca8
- github.com/bradleyfalzon/ghinstallation/v2: v2.0.3
- github.com/breml/bidichk: v0.1.1
- github.com/butuzov/ireturn: v0.1.1
- github.com/bytecodealliance/wasmtime-go: v0.33.1
- github.com/caarlos0/ctrlc: v1.0.0
- github.com/campoy/unique: 88950e5
- github.com/casbin/casbin/v2: v2.1.2
- github.com/cavaliercoder/badio: ce52801
- github.com/cavaliercoder/go-cpio: 925f952
- github.com/cavaliercoder/go-rpm: 8cb9fd9
- github.com/cenkalti/backoff/v3: v3.2.2
- github.com/cenkalti/backoff: v2.2.1+incompatible
- github.com/charithe/durationcheck: v0.0.9
- github.com/chavacava/garif: e8a0a40
- github.com/chrismellard/docker-credential-acr-env: fe33c00
- github.com/circonus-labs/circonus-gometrics: v2.3.1+incompatible
- github.com/circonus-labs/circonusllhist: v0.1.3
- github.com/clbanning/x2j: 8252494
- github.com/cockroachdb/apd/v2: v2.0.1
- github.com/cockroachdb/apd: v1.1.0
- github.com/codahale/hdrhistogram: 3a0bb77
- github.com/codahale/rfc6979: 6a90f24
- github.com/common-nighthawk/go-figure: 734e95f
- github.com/containers/conmon-rs: 836ba11
- github.com/containers/podman/v4: v4.1.1
- github.com/coreos/go-oidc/v3: v3.1.0
- github.com/cyberphone/json-canonicalization: dc406ce
- github.com/daixiang0/gci: v0.2.9
- github.com/denis-tingajkin/go-header: v0.4.2
- github.com/denisenkom/go-mssqldb: v0.11.0
- github.com/devigned/tab: v0.1.1
- github.com/dgraph-io/badger/v3: v3.2103.2
- github.com/dgraph-io/ristretto: v0.1.0
- github.com/dgryski/go-farm: a6ae236
- github.com/dgryski/go-gk: a69029f
- github.com/dgryski/go-rendezvous: 9f7001d
- github.com/dimchansky/utfbom: v1.1.1
- github.com/dvyukov/go-fuzz: 4980593
- github.com/eapache/go-resiliency: v1.1.0
- github.com/eapache/go-xerial-snappy: 776d571
- github.com/eapache/queue: v1.1.0
- github.com/edsrzf/mmap-go: v1.0.0
- github.com/eggsampler/acme/v3: v3.2.1
- github.com/emicklei/proto: v1.6.15
- github.com/esimonov/ifshort: v1.0.3
- github.com/ettle/strcase: v0.1.1
- github.com/evanphx/json-patch/v5: v5.6.0
- github.com/facebookgo/clock: 600d898
- github.com/facebookgo/limitgroup: 6abd8d7
- github.com/facebookgo/muster: fd3d795
- github.com/fatih/structs: v1.1.0
- github.com/fatih/structtag: v1.2.0
- github.com/flynn/go-docopt: f6dd2eb
- github.com/fortytw2/leaktest: v1.3.0
- github.com/foxcpp/go-mockdns: fb145fc
- github.com/franela/goblin: c9ffbef
- github.com/franela/goreq: bcd34c9
- github.com/fullstorydev/grpcurl: v1.8.2
- github.com/fzipp/gocyclo: v0.3.1
- github.com/gin-contrib/sse: v0.1.0
- github.com/gin-gonic/gin: v1.7.3
- github.com/globalsign/mgo: eeefdec
- github.com/go-asn1-ber/asn1-ber: v1.3.1
- github.com/go-chi/chi: v4.1.2+incompatible
- github.com/go-gorp/gorp/v3: v3.0.2
- github.com/go-ldap/ldap/v3: v3.1.10
- github.com/go-logr/stdr: v1.2.2
- github.com/go-openapi/analysis: v0.21.2
- github.com/go-openapi/errors: v0.20.2
- github.com/go-openapi/loads: v0.21.1
- github.com/go-openapi/runtime: v0.24.1
- github.com/go-openapi/spec: v0.20.4
- github.com/go-openapi/strfmt: v0.21.2
- github.com/go-openapi/validate: v0.21.0
- github.com/go-piv/piv-go: v1.9.0
- github.com/go-playground/assert/v2: v2.0.1
- github.com/go-playground/locales: v0.14.0
- github.com/go-playground/universal-translator: v0.18.0
- github.com/go-playground/validator/v10: v10.10.0
- github.com/go-redis/redis/v8: v8.11.4
- github.com/go-redis/redis: v6.15.9+incompatible
- github.com/go-rod/rod: v0.106.1
- github.com/go-test/deep: v1.0.8
- github.com/gobuffalo/attrs: a9411de
- github.com/gobuffalo/depgen: v0.1.0
- github.com/gobuffalo/envy: v1.7.0
- github.com/gobuffalo/flect: v0.2.4
- github.com/gobuffalo/genny: v0.1.1
- github.com/gobuffalo/gitgen: cc08618
- github.com/gobuffalo/gogen: v0.1.1
- github.com/gobuffalo/logger: 86e12af
- github.com/gobuffalo/mapi: v1.0.2
- github.com/gobuffalo/packd: v0.1.0
- github.com/gobuffalo/packr/v2: v2.2.0
- github.com/gobuffalo/syncx: 33c2958
- github.com/gobwas/httphead: 2c6c146
- github.com/gobwas/pool: v0.2.0
- github.com/gobwas/ws: v1.0.2
- github.com/golang-jwt/jwt/v4: v4.3.0
- github.com/golang-jwt/jwt: v3.2.2+incompatible
- github.com/golang-sql/civil: cb61b32
- github.com/google/certificate-transparency-go: v1.1.2
- github.com/google/flatbuffers: v1.12.1
- github.com/google/gnostic: v0.5.7-v3refs
- github.com/google/go-containerregistry/pkg/authn/k8schain: f1b065c
- github.com/google/go-containerregistry/pkg/authn/kubernetes: bfe2ffc
- github.com/google/go-github/v27: v27.0.6
- github.com/google/go-github/v28: v28.1.1
- github.com/google/go-github/v39: v39.2.0
- github.com/google/go-github/v42: v42.0.0
- github.com/google/go-github/v45: v45.1.0
- github.com/google/go-licenses: ce1d916
- github.com/google/go-replayers/grpcreplay: v1.1.0
- github.com/google/go-replayers/httpreplay: v1.0.0
- github.com/google/licenseclassifier: bb04aff
- github.com/google/mako: 122f8dc
- github.com/google/rpmpack: dc539ef
- github.com/google/subcommands: v1.0.1
- github.com/google/trillian: v1.4.0
- github.com/google/wire: v0.5.0
- github.com/googleapis/gax-go: v2.0.2+incompatible
- github.com/googleapis/go-type-adapters: v1.0.0
- github.com/googleapis/google-cloud-go-testing: bcd43fb
- github.com/gookit/color: v1.4.2
- github.com/gordonklaus/ineffassign: 2e10b26
- github.com/goreleaser/goreleaser: v0.134.0
- github.com/goreleaser/nfpm: v1.2.1
- github.com/gorhill/cronexpr: 88b0669
- github.com/gorilla/context: v1.1.1
- github.com/gostaticanalysis/comment: v1.4.2
- github.com/gostaticanalysis/forcetypeassert: 01d4955
- github.com/gostaticanalysis/nilerr: v0.1.1
- github.com/gostaticanalysis/testutil: v0.4.0
- github.com/grpc-ecosystem/grpc-gateway/v2: v2.7.0
- github.com/hanwen/go-fuse/v2: v2.1.0
- github.com/hanwen/go-fuse: v1.0.0
- github.com/hanyuancheung/etcd/v3: af9bd28
- github.com/hashicorp/go-kms-wrapping/entropy: v0.1.0
- github.com/hashicorp/go-plugin: v1.4.4
- github.com/hashicorp/go-secure-stdlib/base62: v0.1.1
- github.com/hashicorp/go-secure-stdlib/mlock: v0.1.2
- github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.5
- github.com/hashicorp/go-secure-stdlib/password: v0.1.1
- github.com/hashicorp/go-secure-stdlib/strutil: v0.1.2
- github.com/hashicorp/go-secure-stdlib/tlsutil: v0.1.1
- github.com/hashicorp/go-version: v1.5.0
- github.com/hashicorp/vault/api: v1.5.0
- github.com/hashicorp/vault/sdk: v0.5.0
- github.com/hashicorp/yamux: 0bc27b2
- github.com/honeycombio/beeline-go: v1.1.1
- github.com/honeycombio/libhoney-go: v1.15.2
- github.com/howeyc/gopass: 7cb4b85
- github.com/huandu/xstrings: v1.3.2
- github.com/hudl/fargo: v1.3.0
- github.com/iancoleman/strcase: v0.2.0
- github.com/in-toto/in-toto-golang: af1f9fb
- github.com/influxdata/influxdb1-client: 8bf82d3
- github.com/influxdata/tdigest: a7d76c6
- github.com/jarcoal/httpmock: v1.0.5
- github.com/jedisct1/go-minisign: 1c139d1
- github.com/jgautheron/goconst: v1.5.1
- github.com/jhump/protoreflect: v1.9.0
- github.com/jmhodges/clock: 880ee4c
- github.com/joho/godotenv: v1.3.0
- github.com/josharian/txtarfs: 0702f00
- github.com/juju/ratelimit: v1.0.1
- github.com/julz/importas: 841f0c0
- github.com/k0kubun/colorstring: 9440f19
- github.com/kelseyhightower/envconfig: v1.4.0
- github.com/kulti/thelper: v0.4.0
- github.com/kunwardeep/paralleltest: v1.0.3
- github.com/kylelemons/godebug: v1.1.0
- github.com/kyoh86/exportloopref: v0.1.8
- github.com/ldez/gomoddirectives: v0.2.2
- github.com/ldez/tagliatelle: v0.2.0
- github.com/leodido/go-urn: v1.2.1
- github.com/letsencrypt/boulder: b23ab96
- github.com/letsencrypt/challtestsrv: v1.2.1
- github.com/letsencrypt/pkcs11key/v4: v4.0.0
- github.com/lightstep/lightstep-tracer-common/golang/gogo: bc2310a
- github.com/lightstep/lightstep-tracer-go: v0.18.1
- github.com/linuxkit/virtsock: f8cee7d
- github.com/lufia/plan9stats: 39d0f17
- github.com/lyft/protoc-gen-star: v0.5.3
- github.com/lyft/protoc-gen-validate: v0.0.13
- github.com/markbates/oncer: bf2de49
- github.com/markbates/safe: v1.0.1
- github.com/matryer/is: v1.4.0
- github.com/mattn/go-ieproxy: v0.0.1
- github.com/mattn/go-zglob: v0.0.1
- github.com/mbilski/exhaustivestruct: v1.2.0
- github.com/mediocregopher/radix/v4: v4.0.0
- github.com/mgechev/dots: e955255
- github.com/mgechev/revive: v1.1.2
- github.com/mgutz/ansi: 9520e82
- github.com/mitchellh/copystructure: v1.2.0
- github.com/mitchellh/reflectwalk: v1.0.2
- github.com/mndrix/tap-go: 629fa40
- github.com/moby/sys/signal: v0.6.0
- github.com/montanaflynn/stats: 1bf9dbc
- github.com/moricho/tparallel: v0.2.1
- github.com/mozilla/scribe: fb71baf
- github.com/mpvl/unique: cbe035f
- github.com/mwitkow/go-proto-validators: v0.2.0
- github.com/nats-io/jwt: v0.3.2
- github.com/nats-io/nats-server/v2: v2.1.2
- github.com/nats-io/nats.go: v1.9.1
- github.com/nats-io/nkeys: v0.1.3
- github.com/nats-io/nuid: v1.0.1
- github.com/networkplumbing/go-nft: v0.2.0
- github.com/nishanths/exhaustive: v0.2.3
- github.com/nishanths/predeclared: v0.2.1
- github.com/oklog/oklog: v0.3.2
- github.com/oklog/run: v1.1.0
- github.com/onsi/ginkgo/v2: v2.1.4
- github.com/op/go-logging: 970db52
- github.com/open-policy-agent/opa: v0.35.0
- github.com/opentracing-contrib/go-observer: a52f234
- github.com/opentracing/basictracer-go: v1.0.0
- github.com/openzipkin-contrib/zipkin-go-opentracing: v0.4.5
- github.com/openzipkin/zipkin-go: v0.3.0
- github.com/otiai10/copy: v1.2.0
- github.com/otiai10/curr: v1.0.0
- github.com/otiai10/mint: v1.3.1
- github.com/package-url/packageurl-go: d704593
- github.com/pact-foundation/pact-go: v1.0.4
- github.com/pelletier/go-toml/v2: v2.0.1
- github.com/performancecopilot/speed: v3.0.0+incompatible
- github.com/peterh/liner: bf27d3b
- github.com/philhofer/fwd: v1.1.1
- github.com/pierrec/lz4: v2.6.1+incompatible
- github.com/pkg/browser: 681adbf
- github.com/pkg/profile: v1.2.1
- github.com/polyfloyd/go-errorlint: 910bb79
- github.com/power-devops/perfstat: 5aafc22
- github.com/proglottis/gpgme: v0.1.1
- github.com/prometheus/statsd_exporter: v0.21.0
- github.com/protocolbuffers/txtpbfmt: f6a6b3f
- github.com/pseudomuto/protoc-gen-doc: v1.5.0
- github.com/pseudomuto/protokit: v0.2.0
- github.com/quasilyte/go-ruleguard/dsl: v0.3.10
- github.com/quasilyte/go-ruleguard/rules: 545e0d2
- github.com/quasilyte/go-ruleguard: v0.3.13
- github.com/quasilyte/regex/syntax: 30656e2
- github.com/qur/ar: 282534b
- github.com/rcrowley/go-metrics: cf1acfc
- github.com/rs/cors: v1.8.2
- github.com/ryanrolds/sqlclosecheck: v0.3.0
- github.com/ryanuber/go-glob: v1.0.0
- github.com/sagikazarmark/crypt: v0.6.0
- github.com/samuel/go-zookeeper: 2cc03de
- github.com/sanposhiho/wastedassign/v2: v2.0.6
- github.com/sassoftware/go-rpmutils: v0.1.1
- github.com/sassoftware/relic: dfb082b
- github.com/sebdah/goldie/v2: v2.5.3
- github.com/secure-systems-lab/go-securesystemslib: v0.4.0
- github.com/securego/gosec/v2: v2.9.1
- github.com/segmentio/ksuid: v1.0.4
- github.com/shazow/go-diff: b6b7b67
- github.com/shibumi/go-pathspec: v1.3.0
- github.com/shopspring/decimal: v1.2.0
- github.com/shurcooL/githubv4: a14260e
- github.com/shurcooL/graphql: 18c5c31
- github.com/sigstore/cosign: v1.9.0
- github.com/sigstore/fulcio: 86a2036
- github.com/sigstore/rekor: 23f5834
- github.com/sigstore/sigstore: 3d41663
- github.com/sivchari/tenv: v1.4.7
- github.com/skratchdot/open-golang: eef8423
- github.com/smallstep/assert: 82e2b9b
- github.com/smartystreets/go-aws-auth: 0c1422d
- github.com/smartystreets/gunit: v1.0.0
- github.com/sonatard/noctx: v0.0.1
- github.com/sony/gobreaker: v0.4.1
- github.com/spiffe/go-spiffe/v2: v2.1.0
- github.com/ssgreg/nlreturn/v2: v2.2.1
- github.com/streadway/amqp: v1.0.0
- github.com/streadway/handy: d5acb31
- github.com/sylabs/sif/v2: v2.7.0
- github.com/sylvia7788/contextcheck: v1.0.4
- github.com/syndtr/goleveldb: 2ae1ddf
- github.com/tdakkota/asciicheck: e657995
- github.com/tenntenn/modver: v1.0.1
- github.com/tenntenn/text/transform: 7eef512
- github.com/tent/canonical-json-go: 96e4ba3
- github.com/thales-e-security/pool: v0.0.2
- github.com/theupdateframework/go-tuf: v0.3.0
- github.com/tidwall/pretty: v1.2.0
- github.com/tilinna/clock: v1.1.0
- github.com/tinylib/msgp: v1.1.5
- github.com/titanous/rocacheck: afe7314
- github.com/tj/assert: 0180943
- github.com/tj/go-elastic: 36157cb
- github.com/tj/go-kinesis: 08b17f5
- github.com/tj/go-spin: v1.1.0
- github.com/tklauser/go-sysconf: v0.3.10
- github.com/tklauser/numcpus: v0.4.0
- github.com/tomarrell/wrapcheck/v2: v2.4.0
- github.com/tomasen/realip: f0c99a9
- github.com/tommy-muehle/go-mnd/v2: v2.4.0
- github.com/transparency-dev/merkle: v0.0.1
- github.com/tsenart/vegeta/v12: v12.8.4
- github.com/tv42/httpunix: 2ba4b9c
- github.com/u-root/uio: 8295801
- github.com/vektah/gqlparser: v1.1.2
- github.com/viki-org/dnscache: c70c1f2
- github.com/vmihailenco/msgpack/v4: v4.3.12
- github.com/vmihailenco/tagparser: v0.1.1
- github.com/weppos/publicsuffix-go: 9a40b60
- github.com/withfig/autocomplete-tools/packages/cobra: 31d3821
- github.com/xdg-go/pbkdf2: v1.0.0
- github.com/xdg-go/scram: v1.0.2
- github.com/xdg-go/stringprep: v1.0.2
- github.com/xdg/scram: 7eeb566
- github.com/xdg/stringprep: 73f8eec
- github.com/xo/terminfo: ca9a967
- github.com/xrash/smetrics: 039620a
- github.com/yashtewari/glob-intersection: 5c77d91
- github.com/yeya24/promlinter: v0.1.0
- github.com/youmark/pkcs8: 1be2e3e
- github.com/ysmood/goob: v0.4.0
- github.com/ysmood/got: v0.15.1
- github.com/ysmood/gotrace: v0.2.2
- github.com/ysmood/gson: v0.7.1
- github.com/ysmood/leakless: v0.7.0
- github.com/yudai/gojsondiff: v1.0.0
- github.com/yudai/golcs: ecda9a5
- github.com/yudai/pp: v2.0.1+incompatible
- github.com/yusufpapurcu/wmi: v1.2.2
- github.com/zalando/go-keyring: v0.1.1
- github.com/zeebo/errs: v1.2.2
- github.com/zmap/zcrypto: 6f9bc4a
- github.com/zmap/zlint/v3: cb17369
- go.etcd.io/etcd/etcdctl/v3: v3.6.0-alpha.0
- go.etcd.io/etcd/etcdutl/v3: v3.6.0-alpha.0
- go.etcd.io/etcd/tests/v3: v3.6.0-alpha.0
- go.etcd.io/etcd: e048e16
- go.mongodb.org/mongo-driver: v1.8.3
- go.mozilla.org/mozlog: 4bb1313
- go.opentelemetry.io/contrib/propagators: v0.19.0
- go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.7.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.3.0
- go.step.sm/crypto: v0.14.0
- go.uber.org/automaxprocs: v1.4.0
- go.uber.org/tools: 2cfd321
- gocloud.dev: 028788a
- gomodules.xyz/jsonpatch/v2: v2.2.0
- google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.1.0
- google.golang.org/grpc/examples: c456688
- gopkg.in/alexcesaro/statsd.v2: v2.0.0
- gopkg.in/cheggaaa/pb.v1: v1.0.28
- gopkg.in/go-playground/assert.v1: v1.2.1
- gopkg.in/go-playground/validator.v9: v9.29.1
- knative.dev/hack/schema: e178598
- knative.dev/hack: e178598
- knative.dev/pkg: 1f7514a
- mvdan.cc/gofumpt: v0.1.1
- nhooyr.io/websocket: v1.8.7
- pack.ag/amqp: v0.11.2
- sigs.k8s.io/bom: 3850e8f
- sigs.k8s.io/promo-tools/v3: v3.4.2
- sigs.k8s.io/release-sdk: v0.9.1
- sourcegraph.com/sourcegraph/appdash: ebfcffb
Changed
Removed