chore(deps): update dependency containerd/nerdctl to v2.1.2 #12401
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
nicholasdille-bot
approved these changes
May 21, 2025
🔍 Vulnerabilities of
|
| digest | sha256:c526aaf0883b0d81f7056ce47d8a4d9e7429834d19b96b8d07bedd7b0a7c5577 |
| vulnerabilities |     |
| platform | linux/amd64 |
| size | 11 MB |
| packages | 123 |
|
Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/15152058327. |
|
PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/15152058327. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
2.1.1->2.1.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
containerd/nerdctl (containerd/nerdctl)
v2.1.2Compare Source
Changes
Bumped up the containerd library from v2.1.0 to v2.1.1, which contains the fix for CVE-2025-47290 (GHSA-cm76-qm8v-3j95) (#4274).
nerdctl v2.1.0 and v2.1.1 were affected by this vulnerability.
Other changes:
nerdctl run:--security-opt writable-cgroups=true|falseflag (#4271, thanks to @ningmingxiao)--runtimeflag (#4257, thanks to @apostasie)nerdctl attach:--no-stdinflag (#4176, thanks to @subashkotha)Full changes: https://github.com/containerd/nerdctl/milestone/52?closed=1
Thanks to @apostasie @haytok @ningmingxiao @subashkotha
Compatible containerd versions
This release of nerdctl is expected to be used with containerd v1.6, v1.7, v2.0, or v2.1.
About the binaries
nerdctl-2.1.2-linux-amd64.tar.gz): nerdctl onlynerdctl-full-2.1.2-linux-amd64.tar.gz): Includes dependencies such as containerd, runc, and CNIMinimal
Extract the archive to a path like
/usr/local/binor~/bin.tar Cxzvvf /usr/local/bin nerdctl-2.1.2-linux-amd64.tar.gz
Full
Extract the archive to a path like
/usr/localor~/.local.tar Cxzvvf /usr/local nerdctl-full-2.1.2-linux-amd64.tar.gz
Included components
See
share/doc/nerdctl-full/README.md:Quick start
Rootful
Rootless
Enabling cgroup v2 is highly recommended for rootless mode, see https://rootlesscontaine.rs/getting-started/common/cgroup2/ .
The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/containerd/nerdctl/actions/runs/15145623567
The sha256sum of the SHA256SUMS file itself is
74e933415ab48f10565491f49bf2a5cafa6106a9e1dc6e631fc96d3f1f746b86.Release manager: @AkihiroSuda
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.