fix(deps): update module github.com/containerd/containerd to v1.7.13

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/containerd/containerd	v1.7.11 -> v1.7.13

---

Release Notes

containerd/containerd (github.com/containerd/containerd)

v1.7.13: containerd 1.7.13

Compare Source

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary
in the release builds to address CVE-2024-21626

Notable Updates

• Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
• Update seccomp profile for new syscalls added since Linux 5.16 (#​9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Akihiro Suda
• Evan Lezar
• Paweł Gronowski
• Phil Estes
• Wei Fu

Changes

9 commits

• Prepare v1.7.13 and update runc to v1.1.12 (#​9724)
  • b97e611b9 Prepare release notes for v1.7.13
  • 2e7fa14db Update runc binary to v1.1.12
• [release/1.7] seccomp: kernel 6.7 (#​9693)
  • 1bed37871 seccomp: kernel 6.7
• [release/1.7] Update container-device-interface to v0.6.2 (#​9685)
  • 14628d4aa Update container-device-interface to v0.6.2
• [release/1.7] content: Add InfoReaderProvider (#​9658)
  • 836477930 content: Add InfoReaderProvider

Dependency Changes

• tags.cncf.io/container-device-interface v0.6.2 new
• tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

v1.7.12: containerd 1.7.12

Compare Source

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

• Fix on dialer function for Windows (#​9501)
• Improve /etc/group handling when appending groups (#​9544)
• Update shim pidfile permissions to 0644 (#​9548)
• Update runc binary to v1.1.11 (#​9596)
• Allow import and export to reference missing content (#​9600)
• Remove runc import (#​9605)
• Update Go version to 1.20.13 (#​9624)

Deprecation Warnings

• Emit deprecation warning for containerd.io/restart.logpath label usage (#​9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Akihiro Suda
• Sebastiaan van Stijn
• Wei Fu
• Derek McGowan
• Paweł Gronowski
• Jaroslav Jindrak
• Maksym Pavlenko
• Samuel Karp
• Anthony Nandaa
• Bjorn Neergaard
• Djordje Lukic
• Kay Yan

Changes

34 commits

• [release/1.7] Prepare release notes for v1.7.12 (#​9632)
  • 775d544fe Prepare release notes for v1.7.12
• [release/1.7] update to go1.20.13, test go1.21.6 (#​9624)
  • a5dc5b894 update to go1.20.13, test go1.21.6
• [release/1.7] shim: Create pid-file and address with 0644 permissions (#​9548)
  • 8d82242eb shim: Create address file with 0644 permissions
  • 260963a35 shim: Create pid-file with 0644 permissions
• [release/1.7 backport] switch back from golang.org/x/sys/execabs to os/exec (go1.19) (#​9602)
  • 872af82f5 remove remaining uses of golang.org/x/sys/execabs
  • 2ad2a2e83 switch back from golang.org/x/sys/execabs to os/exec (go1.19)
• [release/1.7] update to CDI v0.6.1, and remove github.com/opencontainers/runc dependency (#​9605)
  • 9251072f7 remove github.com/opencontainers/runc dependency
  • 4e67213d4 vendor: github.com/cncf-tags/container-device-interface v0.6.1
  • e0ee0be0d go.mod: github.com/opencontainers/runtime-spec v1.1.0
  • 02be2236a go.mod: github.com/.../container-device-interface v0.6.0
  • 91f953bb4 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.2
• [release/1.7 backport] import/export: Support references to missing content (#​9600)
  • 6089b05d9 images/Export: Revert signature change
  • 6b4b760c3 integration/import-export: Add WithSkipMissing tests
  • abb3c5ef9 export: Copy distribution source labels to manifest annotations
  • 9609f04f6 import/export: Support references to missing content
  • 42b60d865 images/archive: use mediatype helpers
• [release/1.7 backport] update runc binary to v1.1.11 (#​9596)
  • 23516a99c update runc binary to v1.1.11
• [release/1.7 backport] go.mod: dario.cat/mergo v1.0.0 (#​9569)
  • 428714e32 go.mod: dario.cat/mergo v1.0.0
• [release/1.7] restart: containerd.io/restart.logpath warning (#​9567)
  • 03fed557e restart: containerd.io/restart.logpath warning
• [release 1.7] backport: fix on dialer function for windows (#​9501)
  • 68d237392 fix(pkg/dialer): minor fix on dialer function for windows
• [release/1.7] *: enable ARM64 runner (#​9502)
  • c63165123 *: enable ARM64 runner
• [release/1.7 backport] WithAppendAdditionalGroups: better /etc/group handling (#​9544)
  • 55e570844 WithAppendAdditionalGroups: better /etc/group handling

Dependency Changes

• dario.cat/mergo v1.0.0 new
• github.com/container-orchestrated-devices/container-device-interface v0.5.4 -> v0.6.1
• github.com/moby/sys/user v0.1.0 new
• github.com/opencontainers/runtime-spec v1.1.0-rc.1 -> v1.1.0

Previous release can be found at v1.7.11

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[rhatdan]

/approve
/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: renovate[bot], rhatdan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [rhatdan]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

New changes are detected. LGTM label has been removed.