Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Bumps the go-modules-root group with 5 updates:

Package From To
github.com/containerd/containerd/v2 2.1.5 2.2.0
github.com/containerd/platforms 1.0.0-rc.1 1.0.0-rc.2
github.com/jaypipes/ghw 0.19.1 0.20.0
github.com/prometheus/common 0.67.1 0.67.4
golang.org/x/sync 0.17.0 0.18.0

Updates github.com/containerd/containerd/v2 from 2.1.5 to 2.2.0

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.2.0

Welcome to the v2.2.0 release of containerd!

The second minor release of containerd 2.x focuses on continued stability alongside new features and improvements. This is the second time-based released for containerd.

Highlights

  • Add mount manager (#12063)

    The mount manager is a new service that provides lifecycle management for filesystem mounts to support more advanced use cases, such as:

    • Device formatting to create formatted filesystems (xfs, ext4) on-demand
    • Mount activation to prepare devices such as loopbacks or network fileystems
    • Mount transformation to allow mount arguments to be filled in dynamically from previous mounts
    • Garbage collection of mounts to ensure temporary mounts are never leaked
  • Add conf.d include in the default config (#12323)

  • Add support for back references in the garbage collector (#12025)

Container Runtime Interface (CRI)

  • Pod Sandbox Metrics (#10691)

    Full implementation of Kubernetes CRI pod-level metrics API

    • ListPodSandboxMetrics: Query metrics for running pods/sandboxes
    • ListMetricsDescriptors: Discover available metrics and their descriptions
  • Support image volume mount subpath (#11578)

Go client

  • Update pkg/oci to use fs.FS interface and os.OpenRoot (#12245)

Image Distribution

Image Storage

  • EROFS enhancements using mount manager (#12333)

    Improvements to EROFS snapshotter using the new mount manager service

    • Quota Support: Support for sized block devices as the upper layer for overlayfs
    • Mount Lifecycle: Loopback setup, block device creation, and overlayfs argument formatting is moved to the mount manager to be performed on-demand or within the runtime.

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Minor releases are provided on a time basis with an initial cadence of 6 months. The next two containerd releases should have a target release date scheduled based on the current release cadence. Changes to the release cadence will not impact releases which are already scheduled.

The maintainers will maintain a roadmap and milestones for each release, however, features may be pushed to accommodate the release timeline. If your issue or feature

... (truncated)

Commits

Updates github.com/containerd/platforms from 1.0.0-rc.1 to 1.0.0-rc.2

Release notes

Sourced from github.com/containerd/platforms's releases.

v1.0.0-rc.2

What's Changed

New Contributors

Full Changelog: containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.2

Commits
  • 2e51fd9 Merge pull request #25 from helio/windows-os-version-sort
  • 8c0d9f9 use windowsMatchComparer for OSVersion match order
  • 2fec6c4 Merge pull request #24 from kiashok/add-ws2025
  • 8447b0a Update ci.yml
  • 4549974 Add WS2025 to Windows matcher and code optimizations
  • See full diff in compare view

Updates github.com/jaypipes/ghw from 0.19.1 to 0.20.0

Release notes

Sourced from github.com/jaypipes/ghw's releases.

v0.20.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.19.1...v0.20.0

Commits
  • 5595b94 Merge pull request #430 from christoph-zededa/pci_iommu_group
  • f74a86b pci: add iommu group
  • 60c5a60 testdata/snapshots: add X1 Carbon Gen10 thinkpad
  • bc628af Merge pull request #429 from ServerDeveloper9447/main
  • d3362ac Updated according to review
  • 2fe9154 Added volume name in the partition struct
  • See full diff in compare view

Updates github.com/prometheus/common from 0.67.1 to 0.67.4

Release notes

Sourced from github.com/prometheus/common's releases.

v0.67.4 / 2025-11-18

What's Changed

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3 / 2025-11-18

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

Commits
  • d80d854 chore: Add omitempty tag to all config fields (#865)
  • 04686b2 chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them ...
  • 0b2fbf3 chore: clean up golangci-lint configuration (#782)
  • b2cdb07 Merge pull request #863 from prometheus/remove-http2-comment
  • cd1ab56 Config: remove outdated comment about HTTP/2 issues
  • f4c0aea Support JWT Profile for Authorization Grant (RFC 7523 3.1) (#862)
  • 594f4d4 Merge pull request #861 from prometheus/beorn7/version
  • 440c1a3 Cut v0.67.2
  • acb1873 Merge pull request #860 from prometheus/superq/linting
  • 1e32339 Cleanup linting issues
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.17.0 to 0.18.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 24, 2025
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-modules-root-40aa8594ed branch 2 times, most recently from a0c0ce3 to c96261d Compare November 24, 2025 19:40
Bumps the go-modules-root group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.1.5` | `2.2.0` |
| [github.com/containerd/platforms](https://github.com/containerd/platforms) | `1.0.0-rc.1` | `1.0.0-rc.2` |
| [github.com/jaypipes/ghw](https://github.com/jaypipes/ghw) | `0.19.1` | `0.20.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.67.1` | `0.67.4` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.17.0` | `0.18.0` |


Updates `github.com/containerd/containerd/v2` from 2.1.5 to 2.2.0
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.1.5...v2.2.0)

Updates `github.com/containerd/platforms` from 1.0.0-rc.1 to 1.0.0-rc.2
- [Release notes](https://github.com/containerd/platforms/releases)
- [Commits](containerd/platforms@v1.0.0-rc.1...v1.0.0-rc.2)

Updates `github.com/jaypipes/ghw` from 0.19.1 to 0.20.0
- [Release notes](https://github.com/jaypipes/ghw/releases)
- [Commits](jaypipes/ghw@v0.19.1...v0.20.0)

Updates `github.com/prometheus/common` from 0.67.1 to 0.67.4
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.1...v0.67.4)

Updates `golang.org/x/sync` from 0.17.0 to 0.18.0
- [Commits](golang/sync@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: github.com/jaypipes/ghw
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-root
- dependency-name: golang.org/x/sync
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-root
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-modules-root-40aa8594ed branch from c96261d to 4d00307 Compare December 1, 2025 07:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant