openshift-merge-bot[bot]
ca4526f3bb
Merge pull request #6407 from containers/renovate/github.com-opencontainers-runc-1.x
...
fix(deps): update module github.com/opencontainers/runc to v1.3.2
2025-10-06 14:36:01 +00:00
openshift-merge-bot[bot]
5d13311073
Merge pull request #6406 from containers/renovate/github.com-docker-docker-28.x
...
fix(deps): update module github.com/docker/docker to v28.5.0+incompatible
2025-10-03 17:06:47 +00:00
openshift-merge-bot[bot]
c315f3df0f
Merge pull request #6399 from containers/renovate/github.com-moby-buildkit-0.x
...
fix(deps): update module github.com/moby/buildkit to v0.25.0
2025-10-03 13:32:21 +00:00
renovate[bot]
31cb2af46e
fix(deps): update module github.com/opencontainers/runc to v1.3.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-03 04:50:24 +00:00
renovate[bot]
8efc913856
fix(deps): update module github.com/docker/docker to v28.5.0+incompatible
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 21:06:31 +00:00
openshift-merge-bot[bot]
842bb6ed42
Merge pull request #6400 from containers/renovate/github.com-containers-luksy-digest
...
fix(deps): update github.com/containers/luksy digest to 2cf5bc9
2025-10-02 17:26:20 +00:00
renovate[bot]
ceff05295d
fix(deps): update module github.com/moby/buildkit to v0.25.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 15:07:34 +00:00
renovate[bot]
b7961ac348
fix(deps): update github.com/containers/luksy digest to 2cf5bc9
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 15:02:10 +00:00
openshift-merge-bot[bot]
269b43de51
Merge pull request #6405 from nalind/are-you-hardlinking-identical-files
...
Make some test files different from each other
2025-10-02 14:58:52 +00:00
Nalin Dahyabhai
a654d35349
Make some test files different from each other
...
In case there's some opportunistic hard linking going on, which might be
causing problems when the tests are packaged and run in an environment
which is wildly different from CI.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-10-02 09:20:50 -04:00
openshift-merge-bot[bot]
b74149334e
Merge pull request #6403 from Luap99/revert-securejoin
...
Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0"
2025-10-01 16:41:39 +00:00
Paul Holzinger
82702b4938
Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0"
...
This reverts commit e3468665bd
.
filepath-securejoin v0.5.0 contains code licensed under MPL-2.0 which is
not approved per CNCF license rules by default. It requires an exception
which has not yet been granted, see
https://github.com/cncf/foundation/issues/1074
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-10-01 16:48:49 +02:00
openshift-merge-bot[bot]
ae46726d30
Merge pull request #6396 from containers/renovate/github.com-cyphar-filepath-securejoin-0.x
...
fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0
2025-09-29 15:33:08 +00:00
renovate[bot]
e3468665bd
fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:09:48 +00:00
openshift-merge-bot[bot]
af3199a039
Merge pull request #6386 from flouthoc/test_vendor_update_go
...
.cirrus.yml: Test Vendoring bump golang
2025-09-24 15:53:29 +00:00
flouthoc
5bb6d9e487
.cirrus.yml: Test Vendoring bump golang
...
Fixes issue caught in https://github.com/containers/buildah/pull/6385
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-09-16 12:55:51 -07:00
flouthoc
e3f55fec61
vendor: bump go.podman.io/{common,image,storage} to main
...
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-09-16 12:55:46 -07:00
openshift-merge-bot[bot]
fb473e4d53
Merge pull request #6368 from containers/renovate/github.com-docker-docker-28.x
...
fix(deps): update module github.com/docker/docker to v28.4.0+incompatible
2025-09-16 15:50:41 +00:00
openshift-merge-bot[bot]
cb483c84e5
Merge pull request #6387 from containers/renovate/golang.org-x-crypto-0.x
...
fix(deps): update module golang.org/x/crypto to v0.42.0
2025-09-16 15:35:52 +00:00
openshift-merge-bot[bot]
baaaeddf2d
Merge pull request #6381 from nalind/mount-target-parent-perms
...
Run: create parent directories of mount targets with mode 0755
2025-09-16 15:24:14 +00:00
openshift-merge-bot[bot]
73194da661
Merge pull request #6367 from containers/renovate/github.com-moby-buildkit-0.x
...
fix(deps): update module github.com/moby/buildkit to v0.24.0
2025-09-16 15:18:36 +00:00
renovate[bot]
6d0c9ed7e0
fix(deps): update module golang.org/x/crypto to v0.42.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 15:02:29 +00:00
openshift-merge-bot[bot]
517e9970c0
Merge pull request #6374 from containers/renovate/github.com-opencontainers-cgroups-0.x
...
fix(deps): update module github.com/opencontainers/cgroups to v0.0.5
2025-09-16 15:01:32 +00:00
renovate[bot]
fbe61f7303
fix(deps): update module github.com/docker/docker to v28.4.0+incompatible
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 15:00:06 +00:00
openshift-merge-bot[bot]
3819cf3bb6
Merge pull request #6376 from containers/renovate/golang.org-x-sync-0.x
...
fix(deps): update module golang.org/x/sync to v0.17.0
2025-09-16 14:55:45 +00:00
openshift-merge-bot[bot]
701d96ecf8
Merge pull request #6372 from containers/renovate/github.com-opencontainers-runc-1.x
...
fix(deps): update module github.com/opencontainers/runc to v1.3.1
2025-09-16 14:52:58 +00:00
openshift-merge-bot[bot]
89b4a0a821
Merge pull request #6351 from containers/renovate/github.com-fsouza-go-dockerclient-1.x
...
fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.2
2025-09-16 14:50:05 +00:00
openshift-merge-bot[bot]
4d9f54c6ca
Merge pull request #6360 from containers/renovate/github.com-spf13-pflag-1.x
...
fix(deps): update module github.com/spf13/pflag to v1.0.10
2025-09-16 14:46:53 +00:00
renovate[bot]
881f14f015
fix(deps): update module github.com/moby/buildkit to v0.24.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:40 +00:00
renovate[bot]
bea03a01d8
fix(deps): update module github.com/spf13/pflag to v1.0.10
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:32 +00:00
renovate[bot]
dcb6da0970
fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.2
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:22 +00:00
renovate[bot]
477dd35638
fix(deps): update module github.com/opencontainers/runc to v1.3.1
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:09:07 +00:00
renovate[bot]
296a8f3eb4
fix(deps): update module github.com/opencontainers/cgroups to v0.0.5
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:08:18 +00:00
renovate[bot]
1c384c9593
fix(deps): update module golang.org/x/sync to v0.17.0
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:07:10 +00:00
Nalin Dahyabhai
9cd4768bde
tests/run.bats: "run masks" test: accept "unreadable" masked directories
...
When checking that certain directories are masked, treat the
readable-but-empty case as acceptable, as before, and now also accept
the actually-unreadable case, which can happen with crun 1.24.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-16 10:03:08 -04:00
Nalin Dahyabhai
a18468f703
Run: create parent directories of mount targets with mode 0755
...
Relax the permissions on directories we create to hold mount targets,
from 0700 to 0755.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-16 09:57:13 -04:00
openshift-merge-bot[bot]
48ac5410cb
Merge pull request #6380 from nalind/go1.24
...
Update to Go 1.24
2025-09-15 18:41:48 +00:00
openshift-merge-bot[bot]
9bd608b3c0
Merge pull request #6378 from nalind/chroot-path
...
chroot: use $PATH when finding commands
2025-09-15 17:26:15 +00:00
Nalin Dahyabhai
6e4d1ca83a
tests/run.bats: "run masks" test: accept "unreadable" masked directories
...
When checking that certain directories are masked, treat the
readable-but-empty case as acceptable, as before, and now also accept
actually-unreadable case, which can happen with crun 1.24.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 15:34:41 -04:00
Nalin Dahyabhai
af18a2ea6a
New VM images
...
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:39:27 -04:00
Nalin Dahyabhai
42d6b68db1
Suppress a linter warning
...
Yes, this helper function always returns nil as one of its results, but
that lets the callers not have to remember to do that, so it's shorter
than changing the call sites.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:24:50 -04:00
Nalin Dahyabhai
7aedebdccd
modernize: JSON doesn't do "omitempty" structs, so stop asking
...
Drop the "omitempty" tag from the "json" tag on struct members that are
themselves structs, since the JSON encoder doesn't actually do that, per
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:19:38 -04:00
Nalin Dahyabhai
802b069799
modernize: use maps.Copy() instead of iterating over a map to copy it
...
Use maps.Copy() instead of iterating over a map's keys and values to
copy the keys and values to a new map. Overdue from
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:19:34 -04:00
Nalin Dahyabhai
16680a4dfd
modernize: use strings.CutPrefix/SplitSeq/FieldsSeq
...
Use the CutPrefix(), SplitSeq(), and FieldsSeq() functions from the
strings package when chopping up or iterating over parts of strings, per
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:11:00 -04:00
Nalin Dahyabhai
ebc9b40491
Update expected/minimum version of Go to 1.24
...
Update the version of Go we suggest in go.mod to 1.24, and update the
one we use for the vendoring CI test to match.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:02:47 -04:00
Nalin Dahyabhai
76c18c8970
chroot: use $PATH when finding commands
...
Use the $PATH from the runtime config, if it includes one, so that when
the command to run isn't an absolute path and the command isn't being
processed by the shell, exec.Command()'s internal call to
exec.LookPath() will find it.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 12:55:59 -04:00
openshift-merge-bot[bot]
f297289c72
Merge pull request #6357 from containers/renovate/go-github.com-ulikunitz-xz-vulnerability
...
Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY]
2025-09-02 20:24:12 +00:00
renovate[bot]
95591dbc85
Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY]
...
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-02 19:49:53 +00:00
openshift-merge-bot[bot]
6cfceff318
Merge pull request #6364 from containers/renovate/github.com-openshift-imagebuilder-1.x
...
Update module github.com/openshift/imagebuilder to v1
2025-09-02 19:47:57 +00:00
Nalin Dahyabhai
dd4f9fcd69
Update go.sum
...
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-02 15:15:12 -04:00