Commit Graph

6581 Commits

Author SHA1 Message Date
openshift-merge-bot[bot] 5d13311073
Merge pull request #6406 from containers/renovate/github.com-docker-docker-28.x
fix(deps): update module github.com/docker/docker to v28.5.0+incompatible
2025-10-03 17:06:47 +00:00
openshift-merge-bot[bot] c315f3df0f
Merge pull request #6399 from containers/renovate/github.com-moby-buildkit-0.x
fix(deps): update module github.com/moby/buildkit to v0.25.0
2025-10-03 13:32:21 +00:00
renovate[bot] 8efc913856
fix(deps): update module github.com/docker/docker to v28.5.0+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 21:06:31 +00:00
openshift-merge-bot[bot] 842bb6ed42
Merge pull request #6400 from containers/renovate/github.com-containers-luksy-digest
fix(deps): update github.com/containers/luksy digest to 2cf5bc9
2025-10-02 17:26:20 +00:00
renovate[bot] ceff05295d
fix(deps): update module github.com/moby/buildkit to v0.25.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 15:07:34 +00:00
renovate[bot] b7961ac348
fix(deps): update github.com/containers/luksy digest to 2cf5bc9
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-10-02 15:02:10 +00:00
openshift-merge-bot[bot] 269b43de51
Merge pull request #6405 from nalind/are-you-hardlinking-identical-files
Make some test files different from each other
2025-10-02 14:58:52 +00:00
Nalin Dahyabhai a654d35349 Make some test files different from each other
In case there's some opportunistic hard linking going on, which might be
causing problems when the tests are packaged and run in an environment
which is wildly different from CI.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-10-02 09:20:50 -04:00
openshift-merge-bot[bot] b74149334e
Merge pull request #6403 from Luap99/revert-securejoin
Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0"
2025-10-01 16:41:39 +00:00
Paul Holzinger 82702b4938
Revert "fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0"
This reverts commit e3468665bd.

filepath-securejoin v0.5.0 contains code licensed under MPL-2.0 which is
not approved per CNCF license rules by default. It requires an exception
which has not yet been granted, see
https://github.com/cncf/foundation/issues/1074

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-10-01 16:48:49 +02:00
openshift-merge-bot[bot] ae46726d30
Merge pull request #6396 from containers/renovate/github.com-cyphar-filepath-securejoin-0.x
fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0
2025-09-29 15:33:08 +00:00
renovate[bot] e3468665bd
fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:09:48 +00:00
openshift-merge-bot[bot] af3199a039
Merge pull request #6386 from flouthoc/test_vendor_update_go
.cirrus.yml: Test Vendoring bump golang
2025-09-24 15:53:29 +00:00
flouthoc 5bb6d9e487
.cirrus.yml: Test Vendoring bump golang
Fixes issue caught in https://github.com/containers/buildah/pull/6385

Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-09-16 12:55:51 -07:00
flouthoc e3f55fec61
vendor: bump go.podman.io/{common,image,storage} to main
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-09-16 12:55:46 -07:00
openshift-merge-bot[bot] fb473e4d53
Merge pull request #6368 from containers/renovate/github.com-docker-docker-28.x
fix(deps): update module github.com/docker/docker to v28.4.0+incompatible
2025-09-16 15:50:41 +00:00
openshift-merge-bot[bot] cb483c84e5
Merge pull request #6387 from containers/renovate/golang.org-x-crypto-0.x
fix(deps): update module golang.org/x/crypto to v0.42.0
2025-09-16 15:35:52 +00:00
openshift-merge-bot[bot] baaaeddf2d
Merge pull request #6381 from nalind/mount-target-parent-perms
Run: create parent directories of mount targets with mode 0755
2025-09-16 15:24:14 +00:00
openshift-merge-bot[bot] 73194da661
Merge pull request #6367 from containers/renovate/github.com-moby-buildkit-0.x
fix(deps): update module github.com/moby/buildkit to v0.24.0
2025-09-16 15:18:36 +00:00
renovate[bot] 6d0c9ed7e0
fix(deps): update module golang.org/x/crypto to v0.42.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 15:02:29 +00:00
openshift-merge-bot[bot] 517e9970c0
Merge pull request #6374 from containers/renovate/github.com-opencontainers-cgroups-0.x
fix(deps): update module github.com/opencontainers/cgroups to v0.0.5
2025-09-16 15:01:32 +00:00
renovate[bot] fbe61f7303
fix(deps): update module github.com/docker/docker to v28.4.0+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 15:00:06 +00:00
openshift-merge-bot[bot] 3819cf3bb6
Merge pull request #6376 from containers/renovate/golang.org-x-sync-0.x
fix(deps): update module golang.org/x/sync to v0.17.0
2025-09-16 14:55:45 +00:00
openshift-merge-bot[bot] 701d96ecf8
Merge pull request #6372 from containers/renovate/github.com-opencontainers-runc-1.x
fix(deps): update module github.com/opencontainers/runc to v1.3.1
2025-09-16 14:52:58 +00:00
openshift-merge-bot[bot] 89b4a0a821
Merge pull request #6351 from containers/renovate/github.com-fsouza-go-dockerclient-1.x
fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.2
2025-09-16 14:50:05 +00:00
openshift-merge-bot[bot] 4d9f54c6ca
Merge pull request #6360 from containers/renovate/github.com-spf13-pflag-1.x
fix(deps): update module github.com/spf13/pflag to v1.0.10
2025-09-16 14:46:53 +00:00
renovate[bot] 881f14f015
fix(deps): update module github.com/moby/buildkit to v0.24.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:40 +00:00
renovate[bot] bea03a01d8
fix(deps): update module github.com/spf13/pflag to v1.0.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:32 +00:00
renovate[bot] dcb6da0970
fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:11:22 +00:00
renovate[bot] 477dd35638
fix(deps): update module github.com/opencontainers/runc to v1.3.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:09:07 +00:00
renovate[bot] 296a8f3eb4
fix(deps): update module github.com/opencontainers/cgroups to v0.0.5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:08:18 +00:00
renovate[bot] 1c384c9593
fix(deps): update module golang.org/x/sync to v0.17.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-16 14:07:10 +00:00
Nalin Dahyabhai 9cd4768bde tests/run.bats: "run masks" test: accept "unreadable" masked directories
When checking that certain directories are masked, treat the
readable-but-empty case as acceptable, as before, and now also accept
the actually-unreadable case, which can happen with crun 1.24.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-16 10:03:08 -04:00
Nalin Dahyabhai a18468f703 Run: create parent directories of mount targets with mode 0755
Relax the permissions on directories we create to hold mount targets,
from 0700 to 0755.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-16 09:57:13 -04:00
openshift-merge-bot[bot] 48ac5410cb
Merge pull request #6380 from nalind/go1.24
Update to Go 1.24
2025-09-15 18:41:48 +00:00
openshift-merge-bot[bot] 9bd608b3c0
Merge pull request #6378 from nalind/chroot-path
chroot: use $PATH when finding commands
2025-09-15 17:26:15 +00:00
Nalin Dahyabhai 6e4d1ca83a tests/run.bats: "run masks" test: accept "unreadable" masked directories
When checking that certain directories are masked, treat the
readable-but-empty case as acceptable, as before, and now also accept
actually-unreadable case, which can happen with crun 1.24.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 15:34:41 -04:00
Nalin Dahyabhai af18a2ea6a New VM images
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:39:27 -04:00
Nalin Dahyabhai 42d6b68db1 Suppress a linter warning
Yes, this helper function always returns nil as one of its results, but
that lets the callers not have to remember to do that, so it's shorter
than changing the call sites.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:24:50 -04:00
Nalin Dahyabhai 7aedebdccd modernize: JSON doesn't do "omitempty" structs, so stop asking
Drop the "omitempty" tag from the "json" tag on struct members that are
themselves structs, since the JSON encoder doesn't actually do that, per
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:19:38 -04:00
Nalin Dahyabhai 802b069799 modernize: use maps.Copy() instead of iterating over a map to copy it
Use maps.Copy() instead of iterating over a map's keys and values to
copy the keys and values to a new map.  Overdue from
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:19:34 -04:00
Nalin Dahyabhai 16680a4dfd modernize: use strings.CutPrefix/SplitSeq/FieldsSeq
Use the CutPrefix(), SplitSeq(), and FieldsSeq() functions from the
strings package when chopping up or iterating over parts of strings, per
golang.org/x/tools/gopls/internal/analysis/modernize/cmd/modernize

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:11:00 -04:00
Nalin Dahyabhai ebc9b40491 Update expected/minimum version of Go to 1.24
Update the version of Go we suggest in go.mod to 1.24, and update the
one we use for the vendoring CI test to match.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 13:02:47 -04:00
Nalin Dahyabhai 76c18c8970 chroot: use $PATH when finding commands
Use the $PATH from the runtime config, if it includes one, so that when
the command to run isn't an absolute path and the command isn't being
processed by the shell, exec.Command()'s internal call to
exec.LookPath() will find it.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-10 12:55:59 -04:00
openshift-merge-bot[bot] f297289c72
Merge pull request #6357 from containers/renovate/go-github.com-ulikunitz-xz-vulnerability
Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY]
2025-09-02 20:24:12 +00:00
renovate[bot] 95591dbc85
Update module github.com/ulikunitz/xz to v0.5.15 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-02 19:49:53 +00:00
openshift-merge-bot[bot] 6cfceff318
Merge pull request #6364 from containers/renovate/github.com-openshift-imagebuilder-1.x
Update module github.com/openshift/imagebuilder to v1
2025-09-02 19:47:57 +00:00
Nalin Dahyabhai dd4f9fcd69 Update go.sum
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-02 15:15:12 -04:00
Nalin Dahyabhai 7c0c647d61 New VM images
Update the version of the VM image set that we use for running tests.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-09-02 14:54:37 -04:00
renovate[bot] ac85735250
Update module github.com/openshift/imagebuilder to v1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-02 17:49:39 +00:00