• CRI-O v1.30.0
  • Downloads
  • Changelog since v1.29.0
    • Changes by Kind
      • Other
      • Dependency-Change
      • Ci
      • Deprecation
      • API Change
      • Feature
      • Bug or Regression
      • Other (Cleanup or Flake)
      • Uncategorized
  • Dependencies
    • Added
    • Changed
    • Removed

CRI-O v1.30.0

The release notes have been generated for the commit range v1.29.0…3923f4f on Fri, 03 May 2024 05:41:52 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

• cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sha256sum
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sig
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.cert
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.sig
  • cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.cert
• cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sha256sum
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sig
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.cert
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.sig
  • cri-o.arm64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.cert
• cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sha256sum
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sig
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.cert
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.sig
  • cri-o.ppc64le.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.cert
• cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sha256sum
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sig
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.cert
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.sig
  • cri-o.s390x.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx.cert

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz \
    --certificate-identity https://github.com/cri-o/cri-o/.github/workflows/test.yml@refs/tags/3923f4f1745819983c0f9f952d05d1f67eec8979 \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/cri-o \
    --certificate-github-workflow-ref refs/tags/3923f4f1745819983c0f9f952d05d1f67eec8979 \
    --signature cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.sig \
    --certificate cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz
> bom validate -e cri-o.amd64.3923f4f1745819983c0f9f952d05d1f67eec8979.tar.gz.spdx -d cri-o

Changelog since v1.29.0

Changes by Kind

Other

• Enable automatic OpenTelemetry instrumentation of ttrpc calls to NRI plugins when tracing is globally enabled in cri-o.
• Bumping our NRI deps also fixes a bug where starting a cri-o launched NRI plugin could cause the accidental closing of an unrelated fd (socket, file, etc.) due to an fd double-close bug. (#7728, @klihub)
• Flip NRI on by default. To revert to a configuration with NRI disabled, either either pass the --enable-nri=false option to crio on the command line, or set the enable_nri = false in the [crio.nri] section of the configuration. (#7790, @klihub)
• In case of an empty struct of DSNConfig /etc/resolv.conf be copied. (#7764, @roman-kiselenko)

Dependency-Change

• Bump to kubernetes 1.30.0 (#8094, @haircommander)
• Update ocicrypt to v1.1.10. (#8062, @kannon92)

Ci

• Packit: Update config and sync to Fedora (#7922, @LorbusChris)

Deprecation

• Migrate off deprecated AppArmorProfile CRI API

The AppArmor profile to the CRI via the deprecated apparmor_profile field in favor of the newer structured apparmor field. CRI provides the AppArmor profile via both fields to maintain backwards compatibility. ref https://github.com/kubernetes/kubernetes/pull/123811 Process new field and fallback to deprecated. From the kubernetes side both fields are populated. (#7901, @roman-kiselenko)

• Removed --seccomp-use-default-when-empty/seccomp_use_default_when_empty option in favor of the SeccompDefault feature in Kubernetes. (#7830, @saschagrunert)

API Change

• Added more file system information in ImageFsInfo as part of the garbage collection KEP. (#7269, @kannon92)

Feature

• Add configurable container minimum memory limit that can be set per OCI runtime. (#7832, @roman-kiselenko)
• Add support for –metrics-host. (#7677, @rphillips)
• Add support for OCI artifact seccomp profiles using the seccomp-profile.kubernetes.cri-o.io/<CONTAINER_NAME> and seccomp-profile.kubernetes.cri-o.io/POD annotations on container images or Kubernetes workloads. (#7719, @saschagrunert)
• Add support for specifying timezone for pods and containers (#7589, @sohankunkerkar)
• Add support for the Recursive Read-only (RRO) mounts following runtimes and kernel support to enable read-only mounts to be recursively read-only. (#7962, @kwilczynski)
• Added OCI artifact layer cache to avoid repeatedly pulling the same container image. (#7837, @saschagrunert)
• Added dynamic image pull timeout if the network availability goes down during the operation. (#7887, @saschagrunert)
• Added s390x architecture support to static binaries. (#7821, @saschagrunert)
• Allow containers within a Kubernetes cluster to opt out of FIPS mode when required (#8011, @sohankunkerkar)
• CRI-O’s checkpoint/restore support defaults to on mirroring the changes in Kubernetes. (#7846, @adrianreber)
• Extend workloads config option to support CPU limits for containers that use the workloads annotations. This will expose cpuperiod and cpuquota options for a desired default value outside the norm. This feature will primarily be utilized to ensure that containers with workload annotations are correctly limited, the average use cases will not need to alter the default values. (#7822, @eggfoobar)
• Move the metrics endpoint listener to use 127.0.0.1 as the new default. (#7714, @kwilczynski)
• Now CRI-O reports to the Kubelet what features are available to a handler (#7765, @giuseppe)
• Print runtime version info on CRI-O startup. (#8014, @saschagrunert)
• Updates pinned images list on config reload (#7976, @roman-kiselenko)

Bug or Regression

• Cleanup deleted container from container_runtime_crio_containers_oom metric, preventing leaks and high cardinality (#7656, @haircommander)
• Fix AppArmour profile Apply() function to correctly handle an “Unconfined” mode. (#8103, @roman-kiselenko)
• Fix a bug where a container that exits soon after a StopContainer request is issued will be paused in termination for longer than the grace period (#7735, @haircommander)
• Keep track of exec calls for a container, and make sure to kill them when a container is being stopped (#7937, @haircommander)
• Restore infra containers state on CRI-O restart. Without this, the infra containers will be accounted as missing, leading to a spurious error message. (#7726, @dsxing)
• Reverted image ID field change in the container status. While the change did fix an issue with Kubelet image GC, it caused an unintended change in the container status of the Kubernetes pod API, breaking an accidentally stable API (#7762, @saschagrunert)
• Using musl libc for s390x until the static glibc issue is resolved. (#8070, @saschagrunert)

Other (Cleanup or Flake)

• Change conmon version parse error to be distinguishable from the binary execution error. (#8060, @saschagrunert)
• Removed deprecated metrics from CRI-O:
  • crio_operations
  • crio_operations_latency_microseconds_total
  • crio_operations_latency_microseconds
  • crio_operations_errors
  • crio_image_pulls_by_digest
  • crio_image_pulls_by_name
  • crio_image_pulls_by_name_skipped
  • crio_image_pulls_successes
  • crio_image_pulls_failures
  • crio_image_layer_reuse
  • crio_containers_oom (#7782, @saschagrunert)
• Set the verbosity of the Allowed annotations are specified for workload message to info (instead of warn). (#8022, @saschagrunert)

Uncategorized

• Fix CVE-2024-3154, a security flaw where CRI-O allowed users to specify annotations that changed specific fields in the runtime. One consequence is a user can change the systemd properties of the container, allowing unsafe properties to be set by the runtime (#8088, @haircommander)
• Update linked logs to drop an intermediate directory and append .log to the container symlink (#7653, @haircommander)
• Use libcontainer cgroup manager to collect container and Sandbox stats (#7658, @Mo-Fatah)

Dependencies

Added

• cloud.google.com/go/apikeys: v0.6.0
• cloud.google.com/go/dataproc: v1.12.0
• cloud.google.com/go/gaming: v1.9.0
• cloud.google.com/go/grafeas: v0.2.0
• cloud.google.com/go/recaptchaenterprise: v1.3.1
• cloud.google.com/go/servicecontrol: v1.11.1
• cloud.google.com/go/servicemanagement: v1.8.0
• cloud.google.com/go/serviceusage: v1.6.0
• cloud.google.com/go/vision: v1.2.0
• gioui.org: 57750fc
• git.sr.ht/~sbinet/gg: v0.3.1
• github.com/DATA-DOG/go-sqlmock: v1.5.0
• github.com/JohnCGriffin/overflow: 46fa312
• github.com/ajstarks/deck/generate: c3f852c
• github.com/ajstarks/deck: 30c9fc6
• github.com/ajstarks/svgo: 1546f12
• github.com/apache/arrow/go/v10: v10.0.1
• github.com/apache/arrow/go/v11: v11.0.0
• github.com/apache/thrift: v0.16.0
• github.com/boombuler/barcode: v1.0.1
• github.com/buildkite/go-pipeline: v0.2.0
• github.com/containerd/errdefs: v0.1.0
• github.com/containerd/otelttrpc: ea5083f
• github.com/fogleman/gg: v1.3.0
• github.com/go-fonts/dejavu: v0.1.0
• github.com/go-fonts/latin-modern: v0.2.0
• github.com/go-fonts/liberation: v0.2.0
• github.com/go-fonts/stix: v0.1.0
• github.com/go-latex/latex: c0d11ff
• github.com/go-pdf/fpdf: v0.6.0
• github.com/golang/freetype: e2365df
• github.com/google/flatbuffers: v2.0.8+incompatible
• github.com/google/go-github/v58: v58.0.0
• github.com/google/martian/v3: v3.3.2
• github.com/googleapis/go-type-adapters: v1.0.0
• github.com/googleapis/google-cloud-go-testing: bcd43fb
• github.com/iancoleman/strcase: v0.2.0
• github.com/jmoiron/sqlx: v1.3.5
• github.com/jung-kurt/gofpdf: 24315ac
• github.com/kballard/go-shellquote: 95032a8
• github.com/klauspost/asmfmt: v1.3.2
• github.com/lyft/protoc-gen-star/v2: v2.0.1
• github.com/lyft/protoc-gen-star: v0.6.1
• github.com/minio/asm2plan9s: cdd7644
• github.com/minio/c2goasm: 36a3d3b
• github.com/moby/sys/user: v0.1.0
• github.com/phpdave11/gofpdf: v1.4.2
• github.com/phpdave11/gofpdi: v1.0.13
• github.com/pkg/diff: 20ebb0f
• github.com/remyoudompheng/bigfft: eec4a21
• github.com/ruudk/golang-pdf417: a7e3863
• github.com/zeebo/assert: v1.3.0
• github.com/zeebo/xxh3: v1.0.2
• golang.org/x/telemetry: f48c80b
• gonum.org/v1/gonum: v0.11.0
• gonum.org/v1/netlib: 8cb4219
• gonum.org/v1/plot: v0.10.1
• k8s.io/gengo/v2: 51d4e06
• lukechampine.com/uint128: v1.2.0
• modernc.org/cc/v3: v3.36.3
• modernc.org/ccgo/v3: v3.16.9
• modernc.org/ccorpus: v1.11.6
• modernc.org/httpfs: v1.0.6
• modernc.org/libc: v1.17.1
• modernc.org/mathutil: v1.5.0
• modernc.org/memory: v1.2.1
• modernc.org/opt: v0.1.3
• modernc.org/sqlite: v1.18.1
• modernc.org/strutil: v1.1.3
• modernc.org/tcl: v1.13.1
• modernc.org/token: v1.0.0
• modernc.org/z: v1.5.1
• rsc.io/pdf: v0.1.1

Changed

• cloud.google.com/go/aiplatform: v1.54.0 → v1.58.0
• cloud.google.com/go/analytics: v0.21.6 → v0.22.0
• cloud.google.com/go/asset: v1.15.3 → v1.17.0
• cloud.google.com/go/batch: v1.6.3 → v1.7.0
• cloud.google.com/go/bigquery: v1.57.1 → v1.58.0
• cloud.google.com/go/billing: v1.17.4 → v1.18.0
• cloud.google.com/go/binaryauthorization: v1.7.3 → v1.8.0
• cloud.google.com/go/channel: v1.17.3 → v1.17.4
• cloud.google.com/go/contactcenterinsights: v1.12.0 → v1.12.1
• cloud.google.com/go/container: v1.28.0 → v1.29.0
• cloud.google.com/go/datacatalog: v1.19.0 → v1.19.2
• cloud.google.com/go/dataplex: v1.11.2 → v1.14.0
• cloud.google.com/go/deploy: v1.15.0 → v1.17.0
• cloud.google.com/go/dialogflow: v1.44.3 → v1.48.1
• cloud.google.com/go/documentai: v1.23.5 → v1.23.7
• cloud.google.com/go/gkemulticloud: v1.0.3 → v1.1.0
• cloud.google.com/go/logging: v1.8.1 → v1.9.0
• cloud.google.com/go/maps: v1.6.1 → v1.6.3
• cloud.google.com/go/monitoring: v1.16.3 → v1.17.0
• cloud.google.com/go/orgpolicy: v1.11.4 → v1.12.0
• cloud.google.com/go/oslogin: v1.12.2 → v1.13.0
• cloud.google.com/go/pubsub: v1.33.0 → v1.34.0
• cloud.google.com/go/recaptchaenterprise/v2: v2.8.4 → v2.9.0
• cloud.google.com/go/recommender: v1.11.3 → v1.12.0
• cloud.google.com/go/securitycenter: v1.24.2 → v1.24.3
• cloud.google.com/go/spanner: v1.53.0 → v1.55.0
• cloud.google.com/go/translate: v1.9.3 → v1.10.0
• cloud.google.com/go: v0.110.10 → v0.112.0
• github.com/Azure/azure-sdk-for-go/sdk/azcore: v1.8.0 → v1.9.0
• github.com/Azure/azure-sdk-for-go/sdk/internal: v1.3.0 → v1.5.0
• github.com/Microsoft/cosesign1go: v0.0.1 → v1.1.0
• github.com/Microsoft/hcsshim: v0.12.0-rc.1 → v0.12.0
• github.com/ProtonMail/go-crypto: afb1ddc → v1.0.0
• github.com/alecthomas/template: fb15b89 → a0175ee
• github.com/alexflint/go-filemutex: v1.2.0 → v1.3.0
• github.com/aws/aws-sdk-go-v2/config: v1.19.1 → v1.25.11
• github.com/aws/aws-sdk-go-v2/credentials: v1.13.43 → v1.16.9
• github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.13.13 → v1.14.9
• github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.11.56 → v1.11.76
• github.com/aws/aws-sdk-go-v2/internal/configsources: v1.1.43 → v1.2.8
• github.com/aws/aws-sdk-go-v2/internal/endpoints/v2: v2.4.37 → v2.5.8
• github.com/aws/aws-sdk-go-v2/internal/ini: v1.3.45 → v1.7.1
• github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding: v1.9.14 → v1.10.3
• github.com/aws/aws-sdk-go-v2/service/internal/presigned-url: v1.9.37 → v1.10.8
• github.com/aws/aws-sdk-go-v2/service/sso: v1.15.2 → v1.18.2
• github.com/aws/aws-sdk-go-v2/service/ssooidc: v1.17.3 → v1.21.2
• github.com/aws/aws-sdk-go-v2/service/sts: v1.23.2 → v1.26.2
• github.com/aws/aws-sdk-go-v2: v1.21.2 → v1.23.5
• github.com/aws/aws-sdk-go: v1.45.20 → v1.48.7
• github.com/aws/smithy-go: v1.15.0 → v1.18.1
• github.com/buildkite/agent/v3: v3.58.0 → v3.59.0
• github.com/checkpoint-restore/go-criu/v7: v7.0.0 → v7.1.0
• github.com/cloudflare/circl: v1.3.5 → v1.3.7
• github.com/cncf/xds/go: e9ce688 → 0fa0005
• github.com/containerd/containerd: v1.7.11 → v1.7.13
• github.com/containerd/nri: v0.5.0 → v0.6.0
• github.com/containerd/ttrpc: v1.2.2 → v1.2.3
• github.com/containernetworking/plugins: v1.4.0 → v1.4.1
• github.com/containers/buildah: v1.33.2 → v1.33.5
• github.com/containers/common: v0.57.1 → v0.57.4
• github.com/containers/gvisor-tap-vsock: v0.7.1 → v0.7.2
• github.com/containers/image/v5: v5.29.0 → ea4fcca
• github.com/containers/ocicrypt: v1.1.9 → v1.1.10
• github.com/containers/podman/v4: v4.8.2 → v4.9.3
• github.com/coreos/go-oidc/v3: v3.7.0 → v3.9.0
• github.com/coreos/stream-metadata-go: v0.4.3 → v0.4.4
• github.com/cri-o/ocicni: v0.4.1 → v0.4.2
• github.com/envoyproxy/go-control-plane: v0.11.1 → v0.12.0
• github.com/envoyproxy/protoc-gen-validate: v1.0.2 → v1.0.4
• github.com/fxamacker/cbor/v2: v2.4.0 → v2.6.0
• github.com/gabriel-vasile/mimetype: v1.4.3 → v1.4.2
• github.com/gliderlabs/ssh: v0.3.5 → v0.3.7
• github.com/go-chi/chi/v5: v5.0.10 → v5.0.12
• github.com/go-git/go-git/v5: v5.10.0 → v5.12.0
• github.com/go-jose/go-jose/v3: v3.0.1 → v3.0.3
• github.com/go-kit/kit: v0.9.0 → v0.8.0
• github.com/go-logr/logr: v1.3.0 → v1.4.1
• github.com/go-openapi/spec: v0.20.9 → v0.20.11
• github.com/go-openapi/strfmt: v0.21.7 → v0.21.8
• github.com/go-openapi/validate: v0.22.1 → v0.22.3
• github.com/go-rod/rod: v0.114.4 → v0.114.5
• github.com/go-sql-driver/mysql: v1.5.0 → v1.7.1
• github.com/golang/glog: v1.1.2 → v1.2.0
• github.com/golang/protobuf: v1.5.3 → v1.5.4
• github.com/google/cel-go: v0.17.7 → v0.17.8
• github.com/google/go-containerregistry: v0.16.1 → v0.18.0
• github.com/google/uuid: v1.5.0 → v1.6.0
• github.com/grpc-ecosystem/grpc-gateway/v2: v2.18.1 → v2.19.0
• github.com/intel/goresctrl: v0.5.0 → v0.6.0
• github.com/jellydator/ttlcache/v3: v3.1.0 → v3.1.1
• github.com/kata-containers/kata-containers/src/runtime: c7c7632 → b99f574
• github.com/klauspost/compress: v1.17.3 → v1.17.4
• github.com/konsorten/go-windows-terminal-sequences: v1.0.3 → v1.0.1
• github.com/kr/pty: v1.1.5 → v1.1.1
• github.com/lestrrat-go/jwx: v1.2.26 → v1.2.28
• github.com/maxbrunsfeld/counterfeiter/v6: v6.7.0 → v6.8.1
• github.com/moby/buildkit: v0.12.3 → v0.12.5
• github.com/onsi/ginkgo/v2: v2.13.2 → v2.17.0
• github.com/onsi/ginkgo: v1.16.5 → v1.16.4
• github.com/onsi/gomega: v1.30.0 → v1.31.1
• github.com/open-policy-agent/opa: v0.58.0 → v0.59.0
• github.com/opencontainers/image-spec: v1.1.0-rc5 → v1.1.0
• github.com/opencontainers/runc: v1.1.10 → v1.1.12
• github.com/opencontainers/runtime-spec: c0e9043 → v1.2.0
• github.com/philhofer/fwd: v1.1.2 → v1.1.1
• github.com/prometheus/client_golang: v1.17.0 → v1.18.0
• github.com/secure-systems-lab/go-securesystemslib: v0.7.0 → v0.8.0
• github.com/sergi/go-diff: v1.3.1 → 5b0b94c
• github.com/sigstore/cosign/v2: v2.2.1 → v2.2.2
• github.com/sigstore/rekor: v1.3.3 → v1.3.4
• github.com/sigstore/sigstore: v1.7.5 → v1.8.1
• github.com/skeema/knownhosts: v1.2.0 → v1.2.2
• github.com/stretchr/objx: v0.5.1 → v0.5.2
• github.com/stretchr/testify: v1.8.4 → v1.9.0
• github.com/theupdateframework/go-tuf: v0.6.1 → v0.7.0
• github.com/tidwall/pretty: v1.2.0 → v1.0.0
• github.com/tinylib/msgp: v1.1.8 → v1.1.5
• github.com/urfave/cli/v2: v2.26.0 → v2.27.1
• github.com/xanzy/go-gitlab: v0.93.2 → v0.94.0
• go.etcd.io/bbolt: v1.3.8 → v1.3.9
• go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.46.1 → v0.48.0
• go.opentelemetry.io/otel/exporters/jaeger: v1.14.0 → v1.0.0
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.21.0 → v1.23.1
• go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.21.0 → v1.23.1
• go.opentelemetry.io/otel/metric: v1.21.0 → v1.23.1
• go.opentelemetry.io/otel/sdk: v1.21.0 → v1.23.1
• go.opentelemetry.io/otel/trace: v1.21.0 → v1.23.1
• go.opentelemetry.io/otel: v1.21.0 → v1.23.1
• go.opentelemetry.io/proto/otlp: v1.0.0 → v1.1.0
• go.step.sm/crypto: v0.36.1 → v0.38.0
• go.uber.org/atomic: v1.11.0 → v1.7.0
• go.uber.org/mock: v0.3.0 → v0.4.0
• golang.org/x/crypto: v0.17.0 → v0.21.0
• golang.org/x/exp: 7918f67 → aacd6d4
• golang.org/x/image: cff245a → 723b81c
• golang.org/x/lint: 738671d → 6edffad
• golang.org/x/mod: v0.14.0 → v0.16.0
• golang.org/x/net: v0.19.0 → v0.23.0
• golang.org/x/oauth2: v0.14.0 → v0.16.0
• golang.org/x/sync: v0.5.0 → v0.6.0
• golang.org/x/sys: v0.15.0 → v0.18.0
• golang.org/x/term: v0.15.0 → v0.18.0
• golang.org/x/time: v0.3.0 → v0.5.0
• golang.org/x/tools: v0.16.0 → v0.19.0
• google.golang.org/api: v0.149.0 → v0.152.0
• google.golang.org/genproto/googleapis/api: 3a041ad → ef43131
• google.golang.org/genproto/googleapis/rpc: 3a041ad → ef43131
• google.golang.org/genproto: 3a041ad → ef43131
• google.golang.org/grpc: v1.60.1 → v1.62.0
• google.golang.org/protobuf: v1.31.0 → v1.33.0
• gopkg.in/go-jose/go-jose.v2: v2.6.1 → v2.6.3
• honnef.co/go/tools: v0.0.1-2020.1.3 → v0.1.3
• k8s.io/api: v0.29.0 → v0.30.0
• k8s.io/apimachinery: v0.29.0 → v0.30.0
• k8s.io/apiserver: v0.29.0 → v0.30.0
• k8s.io/client-go: v0.29.0 → v0.30.0
• k8s.io/component-base: v0.29.0 → v0.30.0
• k8s.io/cri-api: v0.29.0 → v0.30.0
• k8s.io/klog/v2: v2.110.1 → v2.120.1
• k8s.io/kms: v0.29.0 → v0.30.0
• k8s.io/kube-openapi: 2dd684a → 70dd376
• k8s.io/kubelet: v0.29.0 → v0.30.0
• k8s.io/utils: b307cd5 → e7106e6
• sigs.k8s.io/apiserver-network-proxy/konnectivity-client: v0.28.0 → v0.29.0
• sigs.k8s.io/release-sdk: v0.10.4 → v0.11.0
• tags.cncf.io/container-device-interface/specs-go: v0.6.0 → v0.7.0
• tags.cncf.io/container-device-interface: v0.6.2 → v0.7.2

Removed

• bazil.org/fuse: 371fbbd
• github.com/Azure/azure-sdk-for-go/sdk/storage/azblob: v0.4.1
• github.com/Azure/go-autorest/autorest/mocks: v0.4.1
• github.com/DataDog/appsec-internal-go: v1.0.0
• github.com/DataDog/datadog-agent/pkg/obfuscate: v0.48.1
• github.com/DataDog/datadog-agent/pkg/remoteconfig/state: v0.48.1
• github.com/DataDog/datadog-go/v5: v5.3.0
• github.com/DataDog/go-libddwaf: v1.5.0
• github.com/DataDog/go-tuf: v1.0.2-0.5.2
• github.com/DataDog/sketches-go: v1.4.3
• github.com/Microsoft/hcsshim/test: 43a75bb
• github.com/Shopify/logrus-bugsnag: 577dee2
• github.com/acomagu/bufpipe: v1.0.4
• github.com/agext/levenshtein: v1.2.3
• github.com/anchore/go-struct-converter: c68fdcf
• github.com/armon/circbuf: 5111143
• github.com/armon/consul-api: eb2c6b5
• github.com/bgentry/speakeasy: v0.1.0
• github.com/bitly/go-simplejson: v0.5.0
• github.com/bits-and-blooms/bitset: v1.2.0
• github.com/bmizerany/assert: b7ed37b
• github.com/bshuster-repo/logrus-logstash-hook: v0.4.1
• github.com/bugsnag/bugsnag-go: b1d1530
• github.com/bugsnag/osext: 0dd3f91
• github.com/bugsnag/panicwrap: e2c2850
• github.com/checkpoint-restore/go-criu/v4: v4.1.0
• github.com/cockroachdb/datadriven: 80d97fb
• github.com/containerd/btrfs: v1.0.0
• github.com/containerd/fuse-overlayfs-snapshotter: v1.0.2
• github.com/containerd/nydus-snapshotter: v0.8.2
• github.com/containerd/stargz-snapshotter: v0.14.3
• github.com/coreos/bbolt: v1.3.2
• github.com/coreos/etcd: v3.3.10+incompatible
• github.com/coreos/pkg: 399ea9e
• github.com/denverdino/aliyungo: a747050
• github.com/dgrijalva/jwt-go: v3.2.0+incompatible
• github.com/dgryski/go-sip13: e10d5fe
• github.com/dnaeon/go-vcr: v1.0.1
• github.com/docker/spdystream: 449fdfc
• github.com/ebitengine/purego: v0.5.0
• github.com/emicklei/go-restful: v2.9.5+incompatible
• github.com/form3tech-oss/jwt-go: v3.2.2+incompatible
• github.com/fullsailor/pkcs7: d7302db
• github.com/garyburd/redigo: 535138d
• github.com/gobuffalo/attrs: a9411de
• github.com/gobuffalo/depgen: v0.1.0
• github.com/gobuffalo/envy: v1.7.0
• github.com/gobuffalo/flect: v0.1.3
• github.com/gobuffalo/genny: v0.1.1
• github.com/gobuffalo/gitgen: cc08618
• github.com/gobuffalo/gogen: v0.1.1
• github.com/gobuffalo/logger: 86e12af
• github.com/gobuffalo/mapi: v1.0.2
• github.com/gobuffalo/packd: v0.1.0
• github.com/gobuffalo/packr/v2: v2.2.0
• github.com/gobuffalo/syncx: 33c2958
• github.com/godbus/dbus: ade71ed
• github.com/gofrs/flock: v0.8.1
• github.com/gogo/googleapis: v1.4.1
• github.com/google/go-github/v50: v50.2.0
• github.com/google/go-github/v56: v56.0.0
• github.com/googleapis/gnostic: v0.4.1
• github.com/gopherjs/gopherjs: 0766667
• github.com/gowebpki/jcs: v1.0.1
• github.com/hanwen/go-fuse/v2: v2.2.0
• github.com/hashicorp/go-immutable-radix: v1.3.1
• github.com/j-keck/arping: 2cf9dc6
• github.com/jessevdk/go-flags: v1.5.0
• github.com/joefitzgerald/rainbow-reporter: v0.1.0
• github.com/joho/godotenv: v1.3.0
• github.com/jtolds/gls: v4.20.0+incompatible
• github.com/karrick/godirwalk: v1.10.3
• github.com/lestrrat-go/httprc: v1.0.4
• github.com/lestrrat-go/jwx/v2: v2.0.16
• github.com/markbates/oncer: bf2de49
• github.com/markbates/safe: v1.0.1
• github.com/marstr/guid: v1.1.0
• github.com/matryer/is: v1.2.0
• github.com/mistifyio/go-zfs: f784269
• github.com/mitchellh/hashstructure/v2: v2.0.2
• github.com/mitchellh/osext: 5e2d6d4
• github.com/moby/sys/mount: v0.3.3
• github.com/ncw/swift: v1.0.47
• github.com/outcaste-io/ristretto: v0.2.3
• github.com/package-url/packageurl-go: 8907843
• github.com/pkg/profile: v1.5.0
• github.com/prometheus/tsdb: v0.7.1
• github.com/puzpuzpuz/xsync/v2: v2.5.1
• github.com/satori/go.uuid: v1.2.0
• github.com/sclevine/spec: v1.2.0
• github.com/segmentio/asm: v1.2.0
• github.com/serialx/hashring: 8b29126
• github.com/smartystreets/assertions: b2de0cb
• github.com/smartystreets/goconvey: 68dc04a
• github.com/spdx/tools-golang: v0.5.1
• github.com/spf13/jwalterweatherman: v1.0.0
• github.com/tchap/go-patricia: v2.3.0+incompatible
• github.com/tonistiigi/fsutil: 36ef4d8
• github.com/tonistiigi/go-actions-cache: 0bdeb6e
• github.com/tonistiigi/go-archvariant: v1.0.0
• github.com/tonistiigi/units: 6950e57
• github.com/tonistiigi/vt100: f9a4f7e
• github.com/ugorji/go: v1.1.4
• github.com/willf/bitset: v1.1.11
• github.com/xordataexchange/crypt: b2862e3
• github.com/yvasiyarov/go-metrics: 57bccd1
• github.com/yvasiyarov/gorelic: a9bba5b
• github.com/yvasiyarov/newrelic_platform_go: b21fdbd
• go.etcd.io/etcd: dd1b699
• go.etcd.io/gofail: v0.1.0
• go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace: v0.40.0
• go4.org/intern: 6c62f75
• go4.org/unsafe/assume-no-moving-gc: e7c30c7
• google.golang.org/cloud: 975617b
• gopkg.in/DataDog/dd-trace-go.v1: v1.56.1
• gopkg.in/airbrake/gobrake.v2: v2.0.9
• gopkg.in/cheggaaa/pb.v1: v1.0.25
• gopkg.in/gemnasium/logrus-airbrake-hook.v2: v2.1.2
• gopkg.in/resty.v1: v1.12.0
• inet.af/netaddr: b8eac61
• k8s.io/code-generator: v0.19.7
• k8s.io/gengo: 9cce18d
• k8s.io/klog: v1.0.0
• kernel.org/pub/linux/libs/security/libcap/cap: v1.2.67
• kernel.org/pub/linux/libs/security/libcap/psx: v1.2.67