chore: update releases

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Update	Change
containerd/containerd	patch	v2.0.0 -> v2.0.1
containernetworking/plugins	patch	v1.6.0 -> v1.6.1
git://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git	minor	6.11.0 -> 6.12.0
git://git.kernel.org/pub/scm/libs/libcap/libcap.git	minor	2.72 -> 2.73
git://git.kernel.org/pub/scm/linux/kernel/git/firmware/linux-firmware.git	minor	20241110 -> 20241210
git://repo.or.cz/socat.git	patch	1.8.0.1 -> 1.8.0.2
git://sourceware.org/git/lvm2.git	patch	2_03_28 -> 2_03_29
https://github.com/ipxe/ipxe.git	digest	4f7dd7f -> 24db39f
systemd/systemd	minor	256.8 -> 256.9

---

Release Notes

containerd/containerd (containerd/containerd)

v2.0.1: containerd 2.0.1

Compare Source

Welcome to the v2.0.1 release of containerd!

The first patch release for containerd 2.0 includes a number of bug fixes and improvements.

Highlights

Container Runtime Interface (CRI)

• Fix apply IoOwner options when not in user namespace (#​11151)
• Fix cri grpc plugin config migration (#​11140)
• Support CNI STATUS Verb (containerd/go-cni#123)

Image Distribution

• Update differ to handle zstd media types (#​11068)

Runtime

• Update runc binary to v1.2.3 (#​11142)
• Fix panic due to nil dereference cgroups v2 (#​11098)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Wei Fu
• Archit Kulkarni
• Jin Dong
• Phil Estes
• Akhil Mohan
• Akihiro Suda
• Alexey Lunev
• Austin Vazquez
• Maksym Pavlenko
• Mike Brown
• Michael Zappa
• Samuel Karp
• Sebastiaan van Stijn
• Andrey Smirnov
• Davanum Srinivas

Changes

50 commits

• Prepare release notes for v2.0.1 (#​11158)
  • b0ece5dc5 Prepare release notes for v2.0.1
• build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0 (#​11154)
  • fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0
• update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ (#​11153)
  • eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+
• ctr pull should unpack for default platform when transfer service is used (#​11139)
  • 44cdca68b ctr pull unpack for default platform using transfer service
• Fix apply IoOwner options when not in user namespace (#​11151)
  • 018d83650 internal/cri: should not apply IoOwner options
• Update go-cni for CNI STATUS (#​11146)
  • 5eb7995a9 feat: update go-cni version for CNI STATUS
• Fix cri grpc plugin config migration (#​11140)
  • a2302ea89 Add integration test for custom configuration
  • be5eda069 complete cri grpc config migration
• Update runc binary to v1.2.3 (#​11142)
  • a53eff53d update runc binary to v1.2.3
• Update differ to handle zstd media types (#​11068)
  • 73f57acb0 Update differ to handle zstd media types
• update to go1.23.4 / go1.22.10 (#​11109)
  • 290e8bc70 update to go1.23.4 / go1.22.10
• CI: update Fedora to 41 (#​11110)
  • 62b790bfa CI: update Fedora to 41
• Fix panic due to nil dereference cgroups v2 (#​11098)
  • 3ba2df924 fix panic due to nil dereference cgroups v2
• Publish attestation as release artifact (#​11067)
  • 34a45cab2 Publish attestation as release artifact
• Move rockylinux 9.4 to almalinux/9 in CI (#​11053)
  • 7dec6b460 move rocky 9.4 to almalinux/9 in CI
• *: should align pipe's owner with init process (#​11035)
  • cf07f28ee *: should align pipe's owner with init process
• fix: set the credentials even if not provided (#​11031)
  • 986088866 fix: set the credentials even if not provided
• fsverity_test.go: fix nil pointer derefence, fix test fail, fix minor/major device numbers resolving (#​10978)
  • 30b929ece fsverity_test.go: fix major/minor device number resolving
  • 10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail
• update runc binary to 1.2.2 (#​11023)
  • 9081e979f update runc binary to 1.2.2
• Revert "Disable vagrant strict dependency checking" (#​11009)
  • 6399c936f Revert "Disable vagrant strict dependency checking"
• fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems (#​11005)
  • a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
• bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3 (#​10997)
  • 389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
• update to go1.23.3 / go1.22.9 (#​10973)
  • 5b879f30c update to go1.23.3 / go1.22.9
• ci: enable marking 2.0 releases as latest (#​10963)
  • 458215f6c ci: enable marking 2.0 releases as latest
• Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz (#​10968)
  • e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz

Changes from containerd/go-cni

7 commits

• Support CNI STATUS Verb (containerd/go-cni#123)
  • 208eca9 support CNI status verb
• Bump github actions dependencies to match containerd CI repo and fix lint (containerd/go-cni#122)
  • 386f475 Fix ci.yml indent
  • a9b0675 Another doc commit to trigger lint?
  • 14af454 Bump github actions dependency versions
  • 9e0d096 Trivial doc commit to trigger lint

Dependency Changes

• github.com/containerd/go-cni v1.1.10 -> v1.1.11
• github.com/containerd/typeurl/v2 v2.2.2 -> v2.2.3

Previous release can be found at v2.0.0

Which file should I download?

• containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.31 (Ubuntu 20.04).
• containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on non-glibc Linux distributions. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

containernetworking/plugins (containernetworking/plugins)

v1.6.1

Compare Source

systemd/systemd (systemd/systemd)

v256.9: systemd v256.9

Compare Source

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.