CRI-O v1.25.0
The release notes have been generated for the commit range
v1.24.0…3b9c724 on Thu, 22 Dec 2022 21:12:00 UTC.
Downloads
Download one of our static release bundles via our Google Cloud Bucket:
To verify the artifact signatures via cosign, run:
> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.3b9c724af645436a310b143e9ac2182f20a3fd65.tar.gz \
--signature cri-o.amd64.3b9c724af645436a310b143e9ac2182f20a3fd65.tar.gz.sig \
--certificate cri-o.amd64.3b9c724af645436a310b143e9ac2182f20a3fd65.tar.gz.cert
To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:
> tar xfz cri-o.amd64.3b9c724af645436a310b143e9ac2182f20a3fd65.tar.gz
> bom validate -e cri-o.amd64.3b9c724af645436a310b143e9ac2182f20a3fd65.tar.gz.spdx -d cri-o
Changelog since v1.24.0
Changes by Kind
Dependency-Change
- Fix a panic caused by using the improper Result structure version when setting up CNI plugins (#5949, @haircommander)
- Fixed bug to restore
/var/lib/containers/storage/overlay/backingFsBlockDev
on XFS file systems. (#6358, @saschagrunert)
- Updated cri-tools to v1.24.2. (#5906, @saschagrunert)
- Updated crun to v1.5. (#6078, @saschagrunert)
- Updated golang dependencies (#5917, @saschagrunert)
Deprecation
- Fix CVE-2022-4318 by failing to create container if it’s passed a HOME environment variable with a newline (#6450, @haircommander)
API Change
- Removed support for CRI
v1alpha2
, means that CRI-O now only supports v1
. (#6347, @saschagrunert)
Feature
- Add an option “add_inheritable_capabilities” which adds added capabilities to the inheritable list as well. As of CRI-O 1.24.0, CRI-O drops the inheritable capabilities to fix CVE-2022-27652 . However, this can cause regressions in workloads that attempt to pass capabilities to non-root users through inheritable capabilities. (#6236, @haircommander)
- Added OTLP tracing support via conmon-rs. (#6293, @saschagrunert)
- Added a new boolean configuration flag “–evented-pleg”(defaulted to “false”) to enable the evented pleg mechanism in cri-o. The environment variable “EVENTED_PLEG” when set to “true” also enables the evented pleg in the cri-o. (#6404, @sairameshv)
- Added logs and GRPC error codes to OpenTelemetry traces. (#6294, @saschagrunert)
- Added more verbose output to version information.
Added new
crio version -v,--verbose
flag to additionally list all compiled dependencies. (#5750, @saschagrunert)
- Added seccomp notifier feature, which can be enabled by setting the annotation
io.kubernetes.cri-o.seccompNotifierAction
either to stop
(for terminating the workload) or anything else to just create metrics or logs. This also includes the new metric crio_containers_seccomp_notifier_count_total
. For more information on its usage, please refer to the crio.conf.5 man page. (#6120, @saschagrunert)
- Added support for setting the max log size in the pod runtime (used by conmonrs). (#6083, @saschagrunert)
- Added support to checkpoint and restore containers in pods without infrastructure containers. (#6379, @adrianreber)
- Allow
crio.runtime.runtimes
configuration to be updated on reload. (#6248, @elezar)
- Allow for a reload to add additional runtimes and change the default runtime (#6056, @elezar)
- CRI-O now logs the stage of container or pod creation under system load. This allows users to find why their creation requests are stalling. (#5683, @haircommander)
- Fallback to the internal seccomp profile if the one specified in the config cannot be found on disk. (#6029, @saschagrunert)
- If
$KUBENSMNT
is defined in the environment, assume the file it points at is
a bindmount to a mount namespace that CRI-O should join:
- If the environment variable is not set, take no action.
- If the environment variable is set and points at a valid mount
namespace, CRI-O will join that mount namespace.
- If the environment variable is set but points at a missing file, or the file
is not a valid mount namespace, CRI-O will print a warning but continue to
run in the original mount namespace. (#5974, @lack)
- More information available in tracing spans (#6343, @vrutkovs)
- Now CRI-O honors the user namespace configuration that the Kubelet specified (#6004, @giuseppe)
- This PR introduces additional annotations that can be optionally used to configure power management features for containers. It does not impact existing users who do not use the new annotations. (#5927, @bartwensley)
- This adds minimal checkpoint/restore support to cri-o. The minimal support allows to checkpoint a container and restore it again. Optionally it can be restored in another pod. (#4199, @adrianreber)
- Updated
get
script to verify the SBOM if the bom tool is available in $PATH
. (#5992, @saschagrunert)
- Use default umask
0o022
if CRI-O runs under a different umask value. (#5904, @saschagrunert)
- We now provide a bill of materials for the static binary bundle. (#5988, @saschagrunert)
- We now sign the static binary bundle via sigstore signatures. This also includes support for the get script. (#5975, @saschagrunert)
Documentation
- Updated CLI and config documentation to show how to enable Open Telemetry trace sampling for every span. (#6324, @saschagrunert)
Bug or Regression
- Add
monitor_exec_cgroup
to the configuration’s runtime handler struct. This allows an admin to specify which cgroup the monitor for exec sync requests runs in (defaults to that of CRI-O). (#5837, @donpenney)
- Added ImageName and SandboxName annotations to the sandbox (#6164, @littlejawa)
- Fix a bug where
conmon_cgroup
and monitor_path
became out of sync (#6255, @haircommander)
- Fix a bug where
internal/resourcestore.(*ResourceStore).SetStageForResource
leaks memory (#6403, @haircommander)
- Fix a bug where a container is stuck in INIT because CRI-O believes it to be paused, and never updates the state (#6122, @haircommander)
- Fix a bug where child processes of containers in the host’s PID namespace appear to leak after the child exits (#5895, @haircommander)
- Fix a bug where exit files were never cleaned up from
/run/crio/exits
(#5508, @haircommander)
- Fix a bug where static pods cannot be created because they’ve already been created. (#6123, @haircommander)
- Fix a bug where the GID of the container is not specified in the AdditionalGids, leading to a low risk security vulnerability. For more information please see CVE-2022-2995. (#6159, @haircommander)
- Fix a bug where updating
default_runtime
would cause the runc
entry in the runtimes table to be deleted (#6257, @haircommander)
- Fix a rare deadlock while communicating to systemd (RHBZ 2082344) (#5922, @kolyshkin)
- Fix a segfault in
crio config
when runtime.workloads.resources
is nil (#6192, @haircommander)
- Fix an issue with leaked systemd scopes by always sending runc the
--systemd-cgroup
flag when using systemd cgroups (#6153, @haircommander)
- Fix conmonrs cgroup when infra container is dropped (#6416, @mrunalp)
- Fixed possible panic on attach when using
runtime_type = "pod"
if no stdin is being provided. (#6110, @saschagrunert)
- Fixed wrong tracing key for hostname field (
service.instance.id
→ host.name
).
- Added process.id to the traces. (#6326, @saschagrunert)
- If the ProcMountType feature gate is enabled, CRI-O now honors the ProcMount securityContext set. (#6025, @dgl)
- Update
version-file-persist
to be empty by default, and do not wipe images when it is so. (#6022, @haircommander)
- Update systemd unit restart policy to be
on-failure
(#6408, @haircommander)
Other (Cleanup or Flake)
- Fix some inconsistencies in the help text (#6217, @haircommander)
- Update runc to v1.1.4 in static binary bundle. (#6180, @saschagrunert)
Uncategorized
- Add initial support for Node Resource Interface (NRI) v0.2.0. NRI allows vendors to customize container behavior and configuration using plugins. NRI plugins can register to various events in containers’ lifecycle and make controlled changes to containers’ configuration when these events occur. This feature is experimental and disabled by default. It can be enabled using the
--enable-nri
command line option or by setting enable_nri = true
in the CRI-O configuration [crio.nri]
table. The same table can be used to set other NRI-related configuration options. In addition to enabling NRI support in cri-o, an NRI configuration file also needs to be in place. The default location for this file is /etc/nri/nri.conf
and it can be empty. (#5318, @klihub)
- Fix a bug where CRI-O would fail if Kubelet specified
-1
for swap (which is a valid way of specifying unlimited) (#6139, @haircommander)
- This introduces the ability to store checkpoint archives as OCI images and push the checkpoint images to a remote registry. Important to remember is that the checkpoint image contains all memory pages of the checkpoint and therefore might contain sensitive information (password, encryption keys, …). (#6181, @adrianreber)
Dependencies
Added
- bitbucket.org/creachadair/shell: v0.0.7
- cloud.google.com/go/aiplatform: v1.24.0
- cloud.google.com/go/analytics: v0.12.0
- cloud.google.com/go/area120: v0.6.0
- cloud.google.com/go/artifactregistry: v1.7.0
- cloud.google.com/go/asset: v1.7.0
- cloud.google.com/go/assuredworkloads: v1.6.0
- cloud.google.com/go/automl: v1.6.0
- cloud.google.com/go/billing: v1.5.0
- cloud.google.com/go/binaryauthorization: v1.2.0
- cloud.google.com/go/cloudtasks: v1.6.0
- cloud.google.com/go/compute: v1.10.0
- cloud.google.com/go/containeranalysis: v0.6.0
- cloud.google.com/go/datacatalog: v1.6.0
- cloud.google.com/go/dataflow: v0.7.0
- cloud.google.com/go/dataform: v0.4.0
- cloud.google.com/go/datalabeling: v0.6.0
- cloud.google.com/go/dataqna: v0.6.0
- cloud.google.com/go/datastream: v1.3.0
- cloud.google.com/go/dialogflow: v1.16.1
- cloud.google.com/go/documentai: v1.8.0
- cloud.google.com/go/domains: v0.7.0
- cloud.google.com/go/edgecontainer: v0.1.0
- cloud.google.com/go/errorreporting: v0.2.0
- cloud.google.com/go/functions: v1.7.0
- cloud.google.com/go/gaming: v1.6.0
- cloud.google.com/go/gkeconnect: v0.6.0
- cloud.google.com/go/gkehub: v0.10.0
- cloud.google.com/go/grafeas: v0.1.0
- cloud.google.com/go/iam: v0.5.0
- cloud.google.com/go/kms: v1.4.0
- cloud.google.com/go/language: v1.6.0
- cloud.google.com/go/lifesciences: v0.6.0
- cloud.google.com/go/mediatranslation: v0.6.0
- cloud.google.com/go/memcache: v1.5.0
- cloud.google.com/go/metastore: v1.6.0
- cloud.google.com/go/monitoring: v1.1.0
- cloud.google.com/go/networkconnectivity: v1.5.0
- cloud.google.com/go/networksecurity: v0.6.0
- cloud.google.com/go/notebooks: v1.3.0
- cloud.google.com/go/osconfig: v1.8.0
- cloud.google.com/go/oslogin: v1.5.0
- cloud.google.com/go/phishingprotection: v0.6.0
- cloud.google.com/go/privatecatalog: v0.6.0
- cloud.google.com/go/recaptchaenterprise/v2: v2.2.0
- cloud.google.com/go/recommendationengine: v0.6.0
- cloud.google.com/go/recommender: v1.6.0
- cloud.google.com/go/redis: v1.8.0
- cloud.google.com/go/retail: v1.9.0
- cloud.google.com/go/scheduler: v1.5.0
- cloud.google.com/go/secretmanager: v1.6.0
- cloud.google.com/go/security: v1.8.0
- cloud.google.com/go/securitycenter: v1.14.0
- cloud.google.com/go/servicedirectory: v1.5.0
- cloud.google.com/go/spanner: v1.31.0
- cloud.google.com/go/speech: v1.7.0
- cloud.google.com/go/talent: v1.2.0
- cloud.google.com/go/trace: v1.0.0
- cloud.google.com/go/videointelligence: v1.7.0
- cloud.google.com/go/vision/v2: v2.3.0
- cloud.google.com/go/webrisk: v1.5.0
- cloud.google.com/go/workflows: v1.7.0
- code.gitea.io/sdk/gitea: v0.11.3
- contrib.go.opencensus.io/exporter/aws: 2befc13
- contrib.go.opencensus.io/exporter/ocagent: v0.5.0
- contrib.go.opencensus.io/exporter/stackdriver: v0.13.12
- contrib.go.opencensus.io/integrations/ocsql: v0.1.4
- contrib.go.opencensus.io/resource: v0.1.1
- cuelang.org/go: v0.4.3
- filippo.io/edwards25519: v1.0.0-rc.1
- github.com/AdaLogics/go-fuzz-headers: 37f5449
- github.com/AdamKorcz/go-118-fuzz-build: e1f97a0
- github.com/Azure/azure-amqp-common-go/v2: v2.1.0
- github.com/Azure/azure-pipeline-go: v0.2.1
- github.com/Azure/azure-service-bus-go: v0.9.1
- github.com/Azure/azure-storage-blob-go: v0.8.0
- github.com/Azure/go-autorest/autorest/azure/auth: v0.5.11
- github.com/Azure/go-autorest/autorest/azure/cli: v0.4.6
- github.com/DATA-DOG/go-sqlmock: v1.5.0
- github.com/GoogleCloudPlatform/cloudsql-proxy: e802c2c
- github.com/Knetic/govaluate: 9aa4983
- github.com/Masterminds/goutils: v1.1.1
- github.com/Masterminds/semver/v3: v3.1.1
- github.com/Masterminds/semver: v1.5.0
- github.com/Masterminds/sprig/v3: v3.2.2
- github.com/Masterminds/sprig: v2.22.0+incompatible
- github.com/Masterminds/squirrel: v1.5.3
- github.com/Masterminds/vcs: v1.13.3
- github.com/PaesslerAG/gval: v1.0.0
- github.com/PaesslerAG/jsonpath: v0.1.1
- github.com/ProtonMail/go-crypto: 4b6e5c5
- github.com/ReneKroon/ttlcache/v2: v2.11.0
- github.com/Shopify/sarama: v1.19.0
- github.com/Shopify/toxiproxy: v2.1.4+incompatible
- github.com/ThalesIgnite/crypto11: v1.2.5
- github.com/VividCortex/gohistogram: v1.0.0
- github.com/acomagu/bufpipe: v1.0.3
- github.com/afex/hystrix-go: fa1af6a
- github.com/agnivade/levenshtein: v1.0.1
- github.com/alecthomas/kingpin: v2.2.6+incompatible
- github.com/andreyvit/diff: c7f18ee
- github.com/aokoli/goutils: v1.0.1
- github.com/apache/beam/sdks/v2: ef43645
- github.com/apache/beam: v2.28.0+incompatible
- github.com/apache/thrift: v0.13.0
- github.com/apex/log: v1.1.4
- github.com/apex/logs: v0.0.4
- github.com/aphistic/golf: 02c07f1
- github.com/aphistic/sweet: v0.2.0
- github.com/aryann/difflib: e206f87
- github.com/aws/aws-lambda-go: v1.13.3
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: v1.4.3
- github.com/aws/aws-sdk-go-v2/config: v1.17.8
- github.com/aws/aws-sdk-go-v2/credentials: v1.12.21
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.17
- github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.23
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.17
- github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.24
- github.com/aws/aws-sdk-go-v2/internal/v4a: v1.0.5
- github.com/aws/aws-sdk-go-v2/service/ecr: v1.15.0
- github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.12.0
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.9.3
- github.com/aws/aws-sdk-go-v2/service/internal/checksum: v1.1.9
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.17
- github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.13.8
- github.com/aws/aws-sdk-go-v2/service/kms: v1.18.12
- github.com/aws/aws-sdk-go-v2/service/s3: v1.27.1
- github.com/aws/aws-sdk-go-v2/service/sso: v1.11.23
- github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.13.6
- github.com/aws/aws-sdk-go-v2/service/sts: v1.16.19
- github.com/aws/aws-sdk-go-v2: v1.16.16
- github.com/aws/smithy-go: v1.13.3
- github.com/awslabs/amazon-ecr-credential-helper/ecr-login: 396b203
- github.com/aybabtme/rgbterm: cc83f3b
- github.com/beeker1121/goque: d618510
- github.com/beevik/etree: v1.1.0
- github.com/blakesmith/ar: 809d437
- github.com/blang/semver/v4: v4.0.0
- github.com/blendle/zapdriver: v1.3.1
- github.com/bradfitz/gomemcache: a41fca8
- github.com/bwesterb/go-ristretto: v1.2.0
- github.com/bytecodealliance/wasmtime-go: v0.36.0
- github.com/caarlos0/ctrlc: v1.0.0
- github.com/campoy/unique: 88950e5
- github.com/casbin/casbin/v2: v2.1.2
- github.com/cavaliercoder/badio: ce52801
- github.com/cavaliercoder/go-cpio: 925f952
- github.com/cavaliercoder/go-rpm: 8cb9fd9
- github.com/cenkalti/backoff/v3: v3.2.2
- github.com/cenkalti/backoff: v2.2.1+incompatible
- github.com/checkpoint-restore/go-criu/v6: v6.3.0
- github.com/chrismellard/docker-credential-acr-env: fe33c00
- github.com/clbanning/x2j: 8252494
- github.com/cloudflare/circl: v1.1.0
- github.com/cockroachdb/apd/v2: v2.0.1
- github.com/cockroachdb/apd: v1.1.0
- github.com/codahale/hdrhistogram: 3a0bb77
- github.com/codahale/rfc6979: 6a90f24
- github.com/common-nighthawk/go-figure: 734e95f
- github.com/containers/kubensmnt: v1.2.0
- github.com/containers/podman/v4: 757fdca
- github.com/coreos/go-oidc/v3: v3.4.0
- github.com/cyberphone/json-canonicalization: dc406ce
- github.com/depcheck-test/depcheck-test: 199033a
- github.com/devigned/tab: v0.1.1
- github.com/dgraph-io/badger/v3: v3.2103.2
- github.com/dgraph-io/ristretto: v0.1.0
- github.com/dgryski/go-farm: a6ae236
- github.com/dgryski/go-rendezvous: 9f7001d
- github.com/dimchansky/utfbom: v1.1.1
- github.com/distribution/distribution/v3: ffbd94c
- github.com/eapache/go-resiliency: v1.1.0
- github.com/eapache/go-xerial-snappy: 776d571
- github.com/eapache/queue: v1.1.0
- github.com/edsrzf/mmap-go: v1.0.0
- github.com/eggsampler/acme/v3: v3.3.0
- github.com/emicklei/go-restful/v3: v3.8.0
- github.com/emicklei/proto: v1.6.15
- github.com/etcd-io/gofail: ad7f989
- github.com/facebookgo/clock: 600d898
- github.com/facebookgo/limitgroup: 6abd8d7
- github.com/facebookgo/muster: fd3d795
- github.com/flynn/go-docopt: f6dd2eb
- github.com/fortytw2/leaktest: v1.3.0
- github.com/foxcpp/go-mockdns: fb145fc
- github.com/franela/goblin: c9ffbef
- github.com/franela/goreq: bcd34c9
- github.com/fullstorydev/grpcurl: v1.8.6
- github.com/fxamacker/cbor/v2: v2.4.0
- github.com/go-chi/chi: v4.1.2+incompatible
- github.com/go-gorp/gorp/v3: v3.0.2
- github.com/go-openapi/analysis: v0.21.4
- github.com/go-openapi/errors: v0.20.3
- github.com/go-openapi/loads: v0.21.2
- github.com/go-openapi/runtime: v0.24.1
- github.com/go-openapi/spec: v0.20.7
- github.com/go-openapi/strfmt: v0.21.3
- github.com/go-openapi/validate: v0.22.0
- github.com/go-piv/piv-go: v1.10.0
- github.com/go-playground/assert/v2: v2.0.1
- github.com/go-playground/locales: v0.14.0
- github.com/go-playground/universal-translator: v0.18.0
- github.com/go-playground/validator/v10: v10.11.0
- github.com/go-redis/redis/v8: v8.11.5
- github.com/go-redis/redis: v6.15.9+incompatible
- github.com/go-rod/rod: v0.112.0
- github.com/go-test/deep: v1.0.8
- github.com/goadesign/goa: v2.2.5+incompatible
- github.com/gobuffalo/attrs: a9411de
- github.com/gobuffalo/depgen: v0.1.0
- github.com/gobuffalo/envy: v1.7.0
- github.com/gobuffalo/flect: v0.1.3
- github.com/gobuffalo/genny: v0.1.1
- github.com/gobuffalo/gitgen: cc08618
- github.com/gobuffalo/gogen: v0.1.1
- github.com/gobuffalo/logger: 86e12af
- github.com/gobuffalo/mapi: v1.0.2
- github.com/gobuffalo/packd: v0.1.0
- github.com/gobuffalo/packr/v2: v2.2.0
- github.com/gobuffalo/syncx: 33c2958
- github.com/golang-jwt/jwt/v4: v4.4.2
- github.com/golang-jwt/jwt: v3.2.2+incompatible
- github.com/golangplus/bytes: v1.0.0
- github.com/golangplus/fmt: v1.0.0
- github.com/gomodule/redigo: v1.8.2
- github.com/google/certificate-transparency-go: v1.1.3
- github.com/google/flatbuffers: v1.12.1
- github.com/google/gnostic: v0.5.7-v3refs
- github.com/google/go-github/v28: v28.1.1
- github.com/google/go-github/v39: v39.2.0
- github.com/google/go-github/v42: v42.0.0
- github.com/google/go-github/v45: v45.2.0
- github.com/google/go-licenses: ce1d916
- github.com/google/go-replayers/grpcreplay: v0.1.0
- github.com/google/go-replayers/httpreplay: v0.1.0
- github.com/google/licenseclassifier: bb04aff
- github.com/google/rpmpack: dc539ef
- github.com/google/subcommands: v1.0.1
- github.com/google/tink/go: v1.7.0
- github.com/google/trillian: v1.4.1
- github.com/google/wire: v0.5.0
- github.com/googleapis/enterprise-certificate-proxy: v0.2.0
- github.com/googleapis/gax-go: v2.0.2+incompatible
- github.com/googleapis/go-type-adapters: v1.0.0
- github.com/googleapis/google-cloud-go-testing: bcd43fb
- github.com/gordonklaus/ineffassign: 7953dde
- github.com/goreleaser/goreleaser: v0.134.0
- github.com/goreleaser/nfpm: v1.2.1
- github.com/gorilla/context: v1.1.1
- github.com/gosuri/uitable: v0.0.4
- github.com/grpc-ecosystem/grpc-gateway/v2: v2.11.2
- github.com/hashicorp/go-plugin: v1.4.5
- github.com/hashicorp/go-secure-stdlib/mlock: v0.1.2
- github.com/hashicorp/go-secure-stdlib/parseutil: v0.1.7
- github.com/hashicorp/go-secure-stdlib/strutil: v0.1.2
- github.com/hashicorp/go-version: v1.6.0
- github.com/hashicorp/vault/api: v1.8.1
- github.com/hashicorp/vault/sdk: v0.6.0
- github.com/hashicorp/yamux: v0.1.1
- github.com/honeycombio/beeline-go: v1.10.0
- github.com/honeycombio/libhoney-go: v1.16.0
- github.com/howeyc/gopass: 7cb4b85
- github.com/huandu/xstrings: v1.3.2
- github.com/hudl/fargo: v1.3.0
- github.com/iancoleman/strcase: v0.2.0
- github.com/in-toto/in-toto-golang: fa494aa
- github.com/influxdata/influxdb1-client: 8bf82d3
- github.com/jarcoal/httpmock: v1.0.5
- github.com/jedisct1/go-minisign: 1c139d1
- github.com/jellydator/ttlcache/v2: v2.11.1
- github.com/jhump/gopoet: v0.1.0
- github.com/jhump/goprotoc: v0.5.0
- github.com/jhump/protoreflect: v1.13.0
- github.com/jmhodges/clock: 880ee4c
- github.com/joho/godotenv: v1.3.0
- github.com/juju/ratelimit: v1.0.1
- github.com/kelseyhightower/envconfig: v1.4.0
- github.com/lann/builder: 47ae307
- github.com/lann/ps: 62de8c4
- github.com/leodido/go-urn: v1.2.1
- github.com/letsencrypt/boulder: 7658355
- github.com/letsencrypt/challtestsrv: v1.2.1
- github.com/letsencrypt/pkcs11key/v4: v4.0.0
- github.com/lightstep/lightstep-tracer-common/golang/gogo: bc2310a
- github.com/lightstep/lightstep-tracer-go: v0.18.1
- github.com/linkedin/goavro: v2.1.0+incompatible
- github.com/linuxkit/virtsock: f8cee7d
- github.com/lufia/plan9stats: 39d0f17
- github.com/lyft/protoc-gen-star: v0.5.3
- github.com/lyft/protoc-gen-validate: v0.0.13
- github.com/markbates/oncer: bf2de49
- github.com/markbates/safe: v1.0.1
- github.com/matryer/is: v1.2.0
- github.com/mattn/go-ieproxy: 91bb50d
- github.com/mattn/go-zglob: v0.0.1
- github.com/mediocregopher/radix/v4: v4.1.1
- github.com/mgutz/ansi: 9520e82
- github.com/mistifyio/go-zfs/v3: v3.0.0
- github.com/mitchellh/copystructure: v1.2.0
- github.com/mitchellh/reflectwalk: v1.0.2
- github.com/mndrix/tap-go: 629fa40
- github.com/moby/sys/sequential: b22ba8a
- github.com/moby/sys/signal: v0.7.0
- github.com/montanaflynn/stats: 1bf9dbc
- github.com/mpvl/unique: cbe035f
- github.com/mwitkow/go-proto-validators: v0.2.0
- github.com/nats-io/jwt: v0.3.2
- github.com/nats-io/nats-server/v2: v2.1.2
- github.com/nats-io/nats.go: v1.9.1
- github.com/nats-io/nkeys: v0.1.3
- github.com/nats-io/nuid: v1.0.1
- github.com/nightlyone/lockfile: v1.0.0
- github.com/nishanths/predeclared: 86fad75
- github.com/oklog/oklog: v0.3.2
- github.com/oklog/run: v1.1.0
- github.com/op/go-logging: 970db52
- github.com/open-policy-agent/opa: v0.43.0
- github.com/opentracing-contrib/go-observer: a52f234
- github.com/opentracing/basictracer-go: v1.0.0
- github.com/openzipkin-contrib/zipkin-go-opentracing: v0.4.5
- github.com/openzipkin/zipkin-go: v0.2.2
- github.com/otiai10/copy: v1.2.0
- github.com/otiai10/curr: v1.0.0
- github.com/otiai10/mint: v1.3.1
- github.com/package-url/packageurl-go: d704593
- github.com/pact-foundation/pact-go: v1.0.4
- github.com/pelletier/go-toml/v2: v2.0.1
- github.com/performancecopilot/speed: v3.0.0+incompatible
- github.com/peterh/liner: bf27d3b
- github.com/phayes/freeport: 74d24b5
- github.com/pierrec/lz4: v2.6.1+incompatible
- github.com/pkg/browser: 681adbf
- github.com/pkg/profile: v1.2.1
- github.com/power-devops/perfstat: 5aafc22
- github.com/prashantv/gostub: v1.1.0
- github.com/proglottis/gpgme: v0.1.3
- github.com/prometheus/prometheus: v2.5.0+incompatible
- github.com/protocolbuffers/txtpbfmt: f6a6b3f
- github.com/pseudomuto/protoc-gen-doc: v1.5.1
- github.com/pseudomuto/protokit: v0.2.0
- github.com/qur/ar: 282534b
- github.com/rcrowley/go-metrics: cf1acfc
- github.com/rs/cors: v1.8.2
- github.com/rubenv/sql-migrate: v1.1.2
- github.com/ryanuber/go-glob: v1.0.0
- github.com/sagikazarmark/crypt: v0.6.0
- github.com/samuel/go-zookeeper: 2cc03de
- github.com/sassoftware/go-rpmutils: v0.1.1
- github.com/sassoftware/relic: dfb082b
- github.com/sebdah/goldie/v2: v2.5.3
- github.com/secure-systems-lab/go-securesystemslib: v0.4.0
- github.com/segmentio/ksuid: v1.0.4
- github.com/shibumi/go-pathspec: v1.3.0
- github.com/shopspring/decimal: v1.2.0
- github.com/shurcooL/githubv4: a14260e
- github.com/shurcooL/graphql: 18c5c31
- github.com/sigstore/cosign: v1.11.1
- github.com/sigstore/fulcio: v0.5.3
- github.com/sigstore/rekor: v0.11.0
- github.com/sigstore/sigstore: v1.4.5
- github.com/skratchdot/open-golang: eef8423
- github.com/smartystreets/go-aws-auth: 0c1422d
- github.com/smartystreets/gunit: v1.0.0
- github.com/sony/gobreaker: v0.4.1
- github.com/spiffe/go-spiffe/v2: v2.1.1
- github.com/streadway/amqp: v1.0.0
- github.com/streadway/handy: d5acb31
- github.com/sylabs/sif/v2: v2.8.1
- github.com/syndtr/goleveldb: 126854a
- github.com/tchap/go-patricia/v2: v2.3.1
- github.com/tent/canonical-json-go: 96e4ba3
- github.com/thales-e-security/pool: v0.0.2
- github.com/theupdateframework/go-tuf: 3890c1e
- github.com/tidwall/pretty: v1.2.0
- github.com/tilinna/clock: v1.1.0
- github.com/titanous/rocacheck: afe7314
- github.com/tj/assert: 0180943
- github.com/tj/go-elastic: 36157cb
- github.com/tj/go-kinesis: 08b17f5
- github.com/tj/go-spin: v1.1.0
- github.com/tklauser/go-sysconf: v0.3.10
- github.com/tklauser/numcpus: v0.4.0
- github.com/tomasen/realip: f0c99a9
- github.com/transparency-dev/merkle: v0.0.1
- github.com/tv42/httpunix: 2ba4b9c
- github.com/uptrace/opentelemetry-go-extra/otellogrus: v0.1.17
- github.com/uptrace/opentelemetry-go-extra/otelutil: v0.1.17
- github.com/vektah/gqlparser/v2: v2.4.6
- github.com/veraison/go-cose: v1.0.0-rc.1
- github.com/vmihailenco/msgpack/v5: v5.3.5
- github.com/vmihailenco/tagparser/v2: v2.0.0
- github.com/weppos/publicsuffix-go: dd1d648
- github.com/withfig/autocomplete-tools/integrations/cobra: v1.2.1
- github.com/x448/float16: v0.8.4
- github.com/xdg-go/pbkdf2: v1.0.0
- github.com/xdg-go/scram: v1.1.1
- github.com/xdg-go/stringprep: v1.0.3
- github.com/xrash/smetrics: 039620a
- github.com/yashtewari/glob-intersection: v0.1.0
- github.com/youmark/pkcs8: 1be2e3e
- github.com/ysmood/goob: v0.4.0
- github.com/ysmood/gson: v0.7.2
- github.com/ysmood/leakless: v0.8.0
- github.com/yusufpapurcu/wmi: v1.2.2
- github.com/zalando/go-keyring: v0.1.1
- github.com/zeebo/errs: v1.2.2
- github.com/zmap/zcrypto: 6f9bc4a
- github.com/zmap/zlint/v3: cb17369
- go.etcd.io/etcd/etcdctl/v3: v3.6.0-alpha.0
- go.etcd.io/etcd/etcdutl/v3: v3.6.0-alpha.0
- go.etcd.io/etcd/tests/v3: v3.6.0-alpha.0
- go.etcd.io/etcd/v3: v3.6.0-alpha.0
- go.etcd.io/etcd: 3cf2f69
- go.mongodb.org/mongo-driver: v1.10.0
- go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful: v0.20.0
- go.opentelemetry.io/contrib/propagators: v0.20.0
- go.opentelemetry.io/otel/exporters/otlp/internal/retry: v1.11.1
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp: v1.7.0
- go.step.sm/crypto: v0.17.2
- go.uber.org/automaxprocs: v1.5.1
- go.uber.org/tools: 2cfd321
- goa.design/goa: v2.2.5+incompatible
- gocloud.dev: 028788a
- google.golang.org/grpc/cmd/protoc-gen-go-grpc: v1.2.0
- google.golang.org/grpc/examples: c456688
- gopkg.in/alexcesaro/statsd.v2: v2.0.0
- gopkg.in/cheggaaa/pb.v1: v1.0.28
- gopkg.in/linkedin/goavro.v1: v1.0.5
- helm.sh/helm/v3: v3.10.0
- knative.dev/pkg: 1f7514a
- oras.land/oras-go: v1.2.0
- pack.ag/amqp: v0.11.2
- sigs.k8s.io/bom: v0.4.1
- sigs.k8s.io/promo-tools/v3: v3.4.2
- sigs.k8s.io/release-sdk: v0.9.3
- sourcegraph.com/sourcegraph/appdash: ebfcffb
Changed
Removed
- github.com/beevik/ntp: v0.3.0
- github.com/c-bata/go-prompt: v0.2.6
- github.com/checkpoint-restore/go-criu/v4: v4.1.0
- github.com/clusterhq/flocker-go: 2b8b725
- github.com/containers/podman/v3: 8bcc086
- github.com/docker/libnetwork: 5a177b7
- github.com/dsnet/golib: 1ea1667
- github.com/dtylman/scp: f3000a3
- github.com/fanliao/go-promise: 1890db3
- github.com/gojuno/minimock/v3: v3.0.8
- github.com/google/cel-spec: v0.6.0
- github.com/google/go-tpm-tools: 1614c14
- github.com/google/go-tpm: 5d8a91d
- github.com/google/goexpect: 5b69886
- github.com/google/goterm: 555d40f
- github.com/hexdigest/gowrap: v1.1.8
- github.com/hugelgupf/socketpair: 05d35a9
- github.com/insomniacslk/dhcp: 7d93572
- github.com/intel-go/cpuid: 2aa7292
- github.com/jsimonetti/rtnetlink: d2c2404
- github.com/juju/ansiterm: 720a095
- github.com/kaey/framebuffer: 7b38548
- github.com/lunixbochs/vtclean: 2d01aac
- github.com/mattn/go-tty: v0.0.3
- github.com/mdlayher/ethernet: 0394541
- github.com/mdlayher/netlink: v1.1.1
- github.com/mdlayher/raw: 50f2db8
- github.com/moby/vpnkit: v0.5.0
- github.com/mtrmac/gpgme: v0.1.2
- github.com/orangecms/go-framebuffer: a0700d9
- github.com/pborman/getopt/v2: v2.1.0
- github.com/pkg/term: v1.2.0-beta.2
- github.com/pquerna/ffjson: dac163c
- github.com/quobyte/api: v0.1.8
- github.com/rck/unit: v0.0.3
- github.com/rekby/gpt: a930afb
- github.com/songgao/water: 2b4b6d7
- github.com/storageos/go-api: v2.2.0+incompatible
- github.com/twitchtv/twirp: v5.8.0+incompatible
- github.com/u-root/gobusybox/src: 4e2fbb8
- github.com/u-root/iscsinl: 84c3264
- github.com/u-root/u-root: d511ded
- github.com/u-root/uio: e40b768
- github.com/vbauerster/mpb/v5: v5.4.0
- github.com/vbauerster/mpb/v6: v6.0.4
- github.com/vdemeester/k8s-pkg-credentialprovider: f1d1696
- github.com/vtolstov/go-ioctl: 6be9cce
- pack.ag/tftp: 07909df
- src.elv.sh: fda6250