starred/act

Fork 0

mirror of https://github.com/nektos/act.git synced 2026-04-26 01:15:51 +03:00

containerd from 1.6.16 to 1.6.18 #2047

New issue

Closed

opened 2026-03-01 21:53:47 +03:00 by kerem · 0 comments

kerem commented

2026-03-01 21:53:47 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/nektos/act/pull/1637
Author: @dependabot[bot]
Created: 2/20/2023
Status: ✅ Merged
Merged: 2/23/2023
Merged by: @mergify[bot]

Base: master ← Head: dependabot/go_modules/github.com/containerd/containerd-1.6.18

📝 Commits (3)

27502ee build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
8769498 Merge branch 'master' into dependabot/go_modules/github.com/containerd/containerd-1.6.18
7efe794 Merge branch 'master' into dependabot/go_modules/github.com/containerd/containerd-1.6.18

📊 Changes

2 files changed (+3 additions, -3 deletions)

View changed files

📝 go.mod (+1 -1)
📝 go.sum (+2 -2)

📄 Description

Bumps github.com/containerd/containerd from 1.6.16 to 1.6.18.

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.6.18

Welcome to the v1.6.18 release of containerd!

The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173 along with a security update for Go.

Notable Updates

Fix OCI image importer memory exhaustion (GHSA-259w-8hf6-59c2)

Fix supplementary groups not being set up properly (GHSA-hmfx-3pcx-653p)

Revert removal of /sbin/apparmor_parser check (#8087)

Update Go to 1.19.6 (#8111)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda

Derek McGowan

Ye Sijun

Samuel Karp

Bjorn Neergaard

Wei Fu

Brian Goff

Iceber Gu

Kazuyoshi Kato

Phil Estes

Swagat Bora

Changes

[release/1.6] Prepare release notes for v1.6.18 (#8118)

44e61d764 Add release notes for v1.6.18

Github Security Advisory GHSA-hmfx-3pcx-653p

286a01f35 oci: fix additional GIDs

301823453 oci: fix loop iterator aliasing

0070ab70f oci: skip checking gid for WithAppendAdditionalGroups

16d52de64 refactor: reduce duplicate code

b45e30292 add WithAdditionalGIDs test

0a06c284a add WithAppendAdditionalGroups helper

Github Security Advisory GHSA-259w-8hf6-59c2

84936fd1f importer: stream oci-layout and manifest.json

[1.6] Add fallback for windows platforms without osversion (#8106)

b327af6a4 Add fallback for windows platforms without osversion

[release/1.6] Go 1.19.6 (#8111)

... (truncated)

Commits

2456e98 Merge pull request #8118 from dmcgowan/prepare-v1.6.18
44e61d7 Add release notes for v1.6.18
133f6bb Merge pull request from GHSA-hmfx-3pcx-653p
0c31490 Merge pull request from GHSA-259w-8hf6-59c2
9cec7a8 Merge pull request #8106 from cpuguy83/1.6_loosen_windows_platform_matching
47f1aad Merge pull request #8111 from AkihiroSuda/cherrypick-8109-1.6
54ead5b Go 1.19.6
b327af6 Add fallback for windows platforms without osversion
4d724f6 Merge pull request #8094 from Iceber/ctr_run_1.6
2b4b35a ctr/run: flags --detach and --rm cannot be specified together
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/nektos/act/pull/1637 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 2/20/2023 **Status:** ✅ Merged **Merged:** 2/23/2023 **Merged by:** [@mergify[bot]](https://github.com/apps/mergify) **Base:** `master` ← **Head:** `dependabot/go_modules/github.com/containerd/containerd-1.6.18` --- ### 📝 Commits (3) - [`27502ee`](https://github.com/nektos/act/commit/27502ee5ae9f0d76d4ad886d4f807b400ce1d529) build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 - [`8769498`](https://github.com/nektos/act/commit/8769498e68854e707ba719b9abb4c67b0c1419ff) Merge branch 'master' into dependabot/go_modules/github.com/containerd/containerd-1.6.18 - [`7efe794`](https://github.com/nektos/act/commit/7efe794ca9df4ce8626209c0c2bd5055e97eadd2) Merge branch 'master' into dependabot/go_modules/github.com/containerd/containerd-1.6.18 ### 📊 Changes **2 files changed** (+3 additions, -3 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+1 -1) 📝 `go.sum` (+2 -2) </details> ### 📄 Description Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.16 to 1.6.18. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/containerd/containerd/releases">github.com/containerd/containerd's releases</a>.</em></p> <blockquote> <h2>containerd 1.6.18</h2> <p>Welcome to the v1.6.18 release of containerd!</p> <p>The eighteenth patch release for containerd 1.6 includes fixes for CVE-2023-25153 and CVE-2023-25173 along with a security update for Go.</p> <h3>Notable Updates</h3> <ul> <li><strong>Fix OCI image importer memory exhaustion</strong> (<a href="https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2">GHSA-259w-8hf6-59c2</a>)</li> <li><strong>Fix supplementary groups not being set up properly</strong> (<a href="https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p">GHSA-hmfx-3pcx-653p</a>)</li> <li><strong>Revert removal of <code>/sbin/apparmor_parser</code> check</strong> (<a href="https://github-redirect.dependabot.com/containerd/containerd/pull/8087">#8087</a>)</li> <li><strong>Update Go to 1.19.6</strong> (<a href="https://github-redirect.dependabot.com/containerd/containerd/pull/8111">#8111</a>)</li> </ul> <p>See the changelog for complete list of changes</p> <p>Please try out the release binaries and report any issues at <a href="https://github.com/containerd/containerd/issues">https://github.com/containerd/containerd/issues</a>.</p> <h3>Contributors</h3> <ul> <li>Akihiro Suda</li> <li>Derek McGowan</li> <li>Ye Sijun</li> <li>Samuel Karp</li> <li>Bjorn Neergaard</li> <li>Wei Fu</li> <li>Brian Goff</li> <li>Iceber Gu</li> <li>Kazuyoshi Kato</li> <li>Phil Estes</li> <li>Swagat Bora</li> </ul> <h3>Changes</h3>  <ul> <li>[release/1.6] Prepare release notes for v1.6.18 (<a href="https://github-redirect.dependabot.com/containerd/containerd/pull/8118">#8118</a>) <ul> <li><a href="https://github.com/containerd/containerd/commit/44e61d7641f71f44353263306a4967276933173b"><code>44e61d764</code></a> Add release notes for v1.6.18</li> </ul> </li> <li>Github Security Advisory <a href="https://github.com/containerd/containerd/security/advisories/GHSA-hmfx-3pcx-653p">GHSA-hmfx-3pcx-653p</a> <ul> <li><a href="https://github.com/containerd/containerd/commit/286a01f350a2298b4fdd7e2a0b31c04db3937ea8"><code>286a01f35</code></a> oci: fix additional GIDs</li> <li><a href="https://github.com/containerd/containerd/commit/301823453d788ce409e222e88a27d7faf2c2093d"><code>301823453</code></a> oci: fix loop iterator aliasing</li> <li><a href="https://github.com/containerd/containerd/commit/0070ab70fa58045d25fc6ebab27edcae328e38f1"><code>0070ab70f</code></a> oci: skip checking gid for WithAppendAdditionalGroups</li> <li><a href="https://github.com/containerd/containerd/commit/16d52de64d9b0b0e4bf7e11226199281561a3d96"><code>16d52de64</code></a> refactor: reduce duplicate code</li> <li><a href="https://github.com/containerd/containerd/commit/b45e30292ce9b214158fa403a6165aabbf5b23f0"><code>b45e30292</code></a> add WithAdditionalGIDs test</li> <li><a href="https://github.com/containerd/containerd/commit/0a06c284aec5860a58a803b5da83def3462dc3a0"><code>0a06c284a</code></a> add WithAppendAdditionalGroups helper</li> </ul> </li> <li>Github Security Advisory <a href="https://github.com/containerd/containerd/security/advisories/GHSA-259w-8hf6-59c2">GHSA-259w-8hf6-59c2</a> <ul> <li><a href="https://github.com/containerd/containerd/commit/84936fd1f6a0670ab8c7665cb87fae6b87b0b908"><code>84936fd1f</code></a> importer: stream oci-layout and manifest.json</li> </ul> </li> <li>[1.6] Add fallback for windows platforms without osversion (<a href="https://github-redirect.dependabot.com/containerd/containerd/pull/8106">#8106</a>) <ul> <li><a href="https://github.com/containerd/containerd/commit/b327af6a4f635611d8b59beec94db0beace48063"><code>b327af6a4</code></a> Add fallback for windows platforms without osversion</li> </ul> </li> <li>[release/1.6] Go 1.19.6 (<a href="https://github-redirect.dependabot.com/containerd/containerd/pull/8111">#8111</a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/containerd/containerd/commit/2456e983eb9e37e47538f59ea18f2043c9a73640"><code>2456e98</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/containerd/containerd/issues/8118">#8118</a> from dmcgowan/prepare-v1.6.18</li> <li><a href="https://github.com/containerd/containerd/commit/44e61d7641f71f44353263306a4967276933173b"><code>44e61d7</code></a> Add release notes for v1.6.18</li> <li><a href="https://github.com/containerd/containerd/commit/133f6bb6cd827ce35a5fb279c1ead12b9d21460a"><code>133f6bb</code></a> Merge pull request from GHSA-hmfx-3pcx-653p</li> <li><a href="https://github.com/containerd/containerd/commit/0c314901076a74a7b797a545d2f462285fdbb8c4"><code>0c31490</code></a> Merge pull request from GHSA-259w-8hf6-59c2</li> <li><a href="https://github.com/containerd/containerd/commit/9cec7a87c5537e7a02f83d0ae0a7af38f178c3d5"><code>9cec7a8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/containerd/containerd/issues/8106">#8106</a> from cpuguy83/1.6_loosen_windows_platform_matching</li> <li><a href="https://github.com/containerd/containerd/commit/47f1aad3b4de2a55739b83876f376b1a7b71da2a"><code>47f1aad</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/containerd/containerd/issues/8111">#8111</a> from AkihiroSuda/cherrypick-8109-1.6</li> <li><a href="https://github.com/containerd/containerd/commit/54ead5b7b71a0f458566e42eac28eb274286af47"><code>54ead5b</code></a> Go 1.19.6</li> <li><a href="https://github.com/containerd/containerd/commit/b327af6a4f635611d8b59beec94db0beace48063"><code>b327af6</code></a> Add fallback for windows platforms without osversion</li> <li><a href="https://github.com/containerd/containerd/commit/4d724f66eb8733b2391becdfaf41360a03b6368c"><code>4d724f6</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/containerd/containerd/issues/8094">#8094</a> from Iceber/ctr_run_1.6</li> <li><a href="https://github.com/containerd/containerd/commit/2b4b35ab49b0cea79f76c4f52923c74cfc26ccfb"><code>2b4b35a</code></a> ctr/run: flags --detach and --rm cannot be specified together</li> <li>Additional commits viewable in <a href="https://github.com/containerd/containerd/compare/v1.6.16...v1.6.18">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/containerd/containerd&package-manager=go_modules&previous-version=1.6.16&new-version=1.6.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/nektos/act/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

kerem

2026-03-01 21:53:47 +03:00

closed this issue
added the
pull-request
label

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/act#2047

No description provided.

Rows
Columns