Update CDI dependency to v0.8.1.

Signed-off-by: Krisztian Litkey <[email protected]>

from xfsprogs 5.19.0, minimum size of xfs volume has to be 300MB

Ref: https://git.kernel.org/pub/scm/fs/xfs/xfsprogs-dev.git/commit/?id=6e0ed3d19c54603f0f7d628ea04b550151d8a262
Signed-off-by: Akhil Mohan <[email protected]>
(cherry picked from commit 624aa49)
Signed-off-by: Akihiro Suda <[email protected]>

GHA now provides ARM runners for free

https://github.blog/changelog/2025-01-16-linux-arm64-hosted-runners-now-available-for-free-in-public-repositories-public-preview/

Signed-off-by: Akihiro Suda <[email protected]>
(cherry picked from commit 4e7484d)
> Conflicts:
>	.github/workflows/ci.yml
Signed-off-by: Akihiro Suda <[email protected]>

[release/1.7] CI: arm64-8core-32gb -> ubuntu-24.04-arm

…gsegv

[release/1.7] go.{mod,sum}: bump CDI deps to v0.8.1.

Signed-off-by: Jin Dong <[email protected]>

Signed-off-by: Jin Dong <[email protected]>

Co-authored-by: Akhil Mohan <[email protected]>
Signed-off-by: Jin Dong <[email protected]>

This is the lowest goresctrl version that removed
hashicorp/go-multierror dependency.

This is to fully remove hashicorp/go-multierror dependency.

But this also introduces a few minor version upgrades
of other dependencies.

Signed-off-by: Jin Dong <[email protected]>

use the shim bundled with cri-cni-containerd tar rather than using
the shim present on the host machine for running e2e

Signed-off-by: Akhil Mohan <[email protected]>
(cherry picked from commit 393ad5b)
Signed-off-by: Jin Dong <[email protected]>

[release/1.7] Remove hashicorp/go-multierror dependency and fix CI

- go1.23.7 (released 2025-03-04) includes security fixes to the net/http
package, as well as bug fixes to cgo, the compiler, and the reflect,
runtime, and syscall packages. See the Go 1.23.7 milestone on our issue
tracker for details

- go1.24.1 (released 2025-03-04) includes security fixes to the net/http
package, as well as bug fixes to cgo, the compiler, the go command, and
the reflect, runtime, and syscall packages. See the Go 1.24.1 milestone
on our issue tracker for details.

Signed-off-by: Akhil Mohan <[email protected]>

[release/1.7] update build to go1.23.7, test go1.24.1

Before this patch, calling `image.Children` on an image built with
BuildKit would produce unnecessary `encountered unknown type
application/vnd.in-toto+json; children may not be fetched` debug logs,
because the media type is neither a known layer or config type.

Make the `image.Children` aware of the attestation layers and don't
attempt to traverse them.

Signed-off-by: Paweł Gronowski <[email protected]>
(cherry picked from commit e751b6b)
Signed-off-by: Derek McGowan <[email protected]>

Don't produce `reference for unknown type: application/vnd.in-toto+json`
warning logs when pushing/fetching an image containing the attestation
manifests.

Signed-off-by: Paweł Gronowski <[email protected]>
(cherry picked from commit 3cdfc10)
Signed-off-by: Derek McGowan <[email protected]>

Signed-off-by: Derek McGowan <[email protected]>

[release/1.7] Update image type checks to avoid unnecessary logs for attestations

[release/1.7] Prepare release notes for v1.7.27

[release 1.7] validate uid/gid