Update hcsshim to v0.15.0-rc.3 tag#13684
Closed
helsaawy wants to merge 1 commit into
Closed
Conversation
Dependabot PR containerd#13671 is using older tag, which is blocked by `selinux` update (containerd#13395). Update hcsshim to version that does not bump the `selinux` package (which was only updated via dependabot PRs). Signed-off-by: Hamza El-Saawy <[email protected]>
helsaawy
force-pushed
the
helsaawy/hcsshim-0.15.0-rc.3
branch
from
June 29, 2026 18:15
2a43e2f to
e959b28
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
This PR updates the vendored dependency set to use github.com/Microsoft/hcsshim v0.15.0-rc.3 (per the PR description’s goal of unblocking other dependency work), and refreshes the vendor/ tree accordingly. As part of the vendor refresh, multiple other transitive dependencies are also updated, resulting in broad changes across vendor/ (not just hcsshim).
Changes:
- Bump
github.com/Microsoft/hcsshimtov0.15.0-rc.3and regeneratevendor/. - Update multiple vendored transitive dependencies (e.g.
golang.org/x/net,github.com/cilium/ebpf,cyphar.com/go-pathrs,github.com/cyphar/filepath-securejoin) and remove vendoredgolang.org/x/exp. - Pull in upstream vendor behavior changes (notably HTTP/2 wrapping behavior in
x/net/http2and new/updated Windows and eBPF helpers in vendored libraries).
Reviewed changes
Copilot reviewed 1 out of 151 changed files in this pull request and generated 1 comment.
Show a summary per file
| File | Description |
|---|---|
| go.mod | Updates hcsshim to rc.3 and adjusts several indirect dependency versions. |
| vendor/modules.txt | Reflects updated vendored module versions and package lists. |
| vendor/golang.org/x/net/http2/transport_wrap.go | Restores enabling HTTP/2 on wrapped http.Transport in vendor. |
| vendor/golang.org/x/net/http2/server_wrap.go | Restores ALPN protocol registration for HTTP/2 server wrapping in vendor. |
| vendor/golang.org/x/exp/PATENTS | Removes vendored x/exp patent file after dependency drop. |
| vendor/golang.org/x/exp/LICENSE | Removes vendored x/exp license file after dependency drop. |
| vendor/golang.org/x/exp/constraints/constraints.go | Removes vendored x/exp/constraints after dependency drop. |
| vendor/github.com/Microsoft/hcsshim/README.md | Updates hcsshim docs and expands shim v2 documentation. |
| vendor/github.com/Microsoft/hcsshim/Protobuild.toml | Updates protobuf build config and import prefixes. |
| vendor/github.com/Microsoft/hcsshim/internal/winapi/zsyscall_windows.go | Adds new Win32 syscall wrappers used by hcsshim. |
| vendor/github.com/Microsoft/hcsshim/internal/winapi/jobobject.go | Adds GROUP_AFFINITY struct for processor-group affinity support. |
| vendor/github.com/Microsoft/hcsshim/internal/winapi/cpuaffinity.go | Adds CPU affinity syscalls for group-aware affinity handling. |
| vendor/github.com/Microsoft/hcsshim/internal/winapi/cimwriter/cimwriter.go | Enhances cimwriter DLL logging (includes version when available). |
| vendor/github.com/Microsoft/hcsshim/internal/wclayer/legacy.go | Fixes handle cleanup to avoid leaking temp import directories on failures. |
| vendor/github.com/Microsoft/hcsshim/internal/wclayer/importlayer.go | Cleans up temp import directory on initialization failures. |
| vendor/github.com/Microsoft/hcsshim/internal/wclayer/expandscratchsize.go | Switches VHD attach to go-winio/vhd helper with encryption bypass flag. |
| vendor/github.com/Microsoft/hcsshim/internal/logfields/fields.go | Adds/renames structured log field constants. |
| vendor/github.com/Microsoft/hcsshim/internal/log/scrub.go | Enables log scrubbing by default; adds CreateOptions scrubbing helper. |
| vendor/github.com/Microsoft/hcsshim/internal/log/hook.go | Minor refactor of type switch for JSON encoding of log fields. |
| vendor/github.com/Microsoft/hcsshim/internal/jobobject/limits.go | Adds ctx to SetResourceLimits and introduces CPU group affinity APIs. |
| vendor/github.com/Microsoft/hcsshim/internal/jobobject/jobobject.go | Adds GroupAffinity and extends JobLimits to support group affinities. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/system.go | Adds silo-opening helper and CPU group affinity setter for containers. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/virtual_pci_device.go | Formatting-only schema alignment update. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/virtual_machine.go | Adds new schema fields (resource partition + migration options). |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/virtual_machine_processor.go | Formatting-only schema alignment update. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/virtual_machine_memory.go | Formatting-only schema alignment update. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/topology.go | Formatting-only schema alignment update. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/storage.go | Adds privileged container root path field to schema. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/storage_stats.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/statistics.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/silo_properties.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/property_query.go | Adds Queries field for advanced property queries. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/properties.go | Adds property response mapping types and JSON import. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/processor.go | Updates schema version header comment. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/processor_stats.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/process_details.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/plan9_share.go | Replaces ad-hoc flags fields with typed Plan9ShareFlags. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/plan9_share_flags.go | Introduces typed Plan9 share flags bitfield. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/pause_options.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/pause_notification.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/numa_setting.go | Formatting-only schema alignment update. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/migration.go | Adds migration workflow schema types. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/memory_stats.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/hv_socket_system_config.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/hv_socket_address.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/hv_socket_2.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/guest_connection_info.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/container.go | Adds IsolationType and HostProcess constant to schema. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/container_memory_information.go | Comment case fix. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema2/com_port.go | Comment formatting cleanup. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/schema1/schema1.go | Adds guest capability flag for HostProcess container support. |
| vendor/github.com/Microsoft/hcsshim/internal/hcs/process.go | Implements MigrationState() method (returns zero state for HCS processes). |
| vendor/github.com/Microsoft/hcsshim/internal/cow/cow.go | Adds migration state struct and new container method for CPU group affinities. |
| vendor/github.com/Microsoft/hcsshim/hcn/hcnpolicy.go | Fixes invalid JSON struct tags for multiple policy structs. |
| vendor/github.com/Microsoft/hcsshim/hcn/hcnnamespace.go | Fixes invalid JSON struct tags in namespace-related structs. |
| vendor/github.com/Microsoft/hcsshim/cmd/containerd-shim-runhcs-v1/stats/stats.pb.go | Regenerates protobuf output with newer protoc-gen-go. |
| vendor/github.com/Microsoft/hcsshim/cmd/containerd-shim-runhcs-v1/options/runhcs.proto | Makes scrub_logs optional and documents default behavior. |
| vendor/github.com/Microsoft/hcsshim/cmd/containerd-shim-runhcs-v1/options/runhcs.pb.go | Regenerates protobuf output; ScrubLogs becomes *bool (oneof). |
| vendor/github.com/Microsoft/hcsshim/.gitignore | Expands ignored generated artifacts and adds rust/target/. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/linux/openat2_linux.go | Makes openat2 capability detection resilient to runtime seccomp changes. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gopathrs/openat2_linux.go | Fixes file descriptor leak on fallback path by closing old file. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gopathrs/lookup_linux.go | Tightens openat2 fallback logic to avoid downgrade attacks. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_atomic_unsupported.go | Adds atomic Bool implementation for linux + pre-go1.19 builds. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/gocompat/gocompat_atomic_go119.go | Uses atomic.Bool for linux + go1.19 builds. |
| vendor/github.com/cyphar/filepath-securejoin/pathrs-lite/internal/fd/openat2_linux.go | Makes Openat2 a variable to enable forcing failures in tests. |
| vendor/github.com/cilium/ebpf/variable.go | Adds support for manipulating global variables via MapSpec/Memory. |
| vendor/github.com/cilium/ebpf/types.go | Adds new map/attach types and improves flag handling. |
| vendor/github.com/cilium/ebpf/types_string.go | Updates generated stringer output for new map types. |
| vendor/github.com/cilium/ebpf/syscalls.go | Refactors feature tests, uses new internal/linux helpers, and improves error handling. |
| vendor/github.com/cilium/ebpf/README.md | Documents new pin package. |
| vendor/github.com/cilium/ebpf/prog.go | Refactors kernel/module detection, verifier log sizing, and pinned object loading. |
| vendor/github.com/cilium/ebpf/netlify.toml | Adds Python version env for docs build. |
| vendor/github.com/cilium/ebpf/memory.go | Introduces mmap-based map memory access abstraction. |
| vendor/github.com/cilium/ebpf/Makefile | Updates build targets and container flags for vendor testdata builds. |
| vendor/github.com/cilium/ebpf/linker.go | Improves flattening and adds ksym resolution for .ksyms references. |
| vendor/github.com/cilium/ebpf/link/uprobe.go | Refactors feature probe versioning and simplifies error paths. |
| vendor/github.com/cilium/ebpf/link/uprobe_multi.go | Improves pid overflow error message and marks unsupported Update args as unused. |
| vendor/github.com/cilium/ebpf/link/tracing.go | Marks unsupported Update arg as unused. |
| vendor/github.com/cilium/ebpf/link/syscalls.go | Refactors feature tests to new version-selection API. |
| vendor/github.com/cilium/ebpf/link/perf_event.go | Marks unsupported Update args as unused; refactors feature tests. |
| vendor/github.com/cilium/ebpf/link/netfilter.go | Marks unsupported Update arg as unused. |
| vendor/github.com/cilium/ebpf/link/link.go | Uses typed object loading for pinned links and pins via sys helpers. |
| vendor/github.com/cilium/ebpf/link/kprobe.go | Uses internal/linux platform prefix helper and improves docs. |
| vendor/github.com/cilium/ebpf/link/kprobe_multi.go | Adds session attach support and improves feature probing/error reporting. |
| vendor/github.com/cilium/ebpf/internal/version.go | Removes kernel version helpers in favor of internal/linux package. |
| vendor/github.com/cilium/ebpf/internal/unix/types_other.go | Refactors non-Linux stubs to use centralized unsupported error + errno shims. |
| vendor/github.com/cilium/ebpf/internal/unix/types_linux.go | Adjusts constants and adds Auxv wrapper. |
| vendor/github.com/cilium/ebpf/internal/unix/strings_windows.go | Adds windows implementations for string pointer helpers. |
| vendor/github.com/cilium/ebpf/internal/unix/strings_other.go | Adds non-linux/windows stubs for string pointer helpers. |
| vendor/github.com/cilium/ebpf/internal/unix/error.go | Introduces centralized errNonLinux() helper. |
| vendor/github.com/cilium/ebpf/internal/unix/errno_windows.go | Adds Windows errno compatibility shim type. |
| vendor/github.com/cilium/ebpf/internal/unix/errno_string_windows.go | Adds generated errno stringer output for Windows. |
| vendor/github.com/cilium/ebpf/internal/unix/errno_other.go | Adds errno constants/type alias for non-linux/windows. |
| vendor/github.com/cilium/ebpf/internal/unix/errno_linux.go | Restores errno constants as Linux syscall.Errno aliases. |
| vendor/github.com/cilium/ebpf/internal/tracefs/kprobe.go | Uses linux FSType helper and improves EINVAL handling for unknown symbols. |
| vendor/github.com/cilium/ebpf/internal/testutils/fdtrace/main.go | Adds fd leak tracing TestMain helper. |
| vendor/github.com/cilium/ebpf/internal/testutils/fdtrace/fd_trace.go | Implements fd trace registry and leak reporting. |
| vendor/github.com/cilium/ebpf/internal/sysenc/buffer.go | Exposes safe Bytes() accessor and uses it for Copy/Append/Unmarshal. |
| vendor/github.com/cilium/ebpf/internal/sys/syscall.go | Moves constants/types and removes duplicated map flag enums. |
| vendor/github.com/cilium/ebpf/internal/sys/ptr.go | Makes slice pointer helper generic over slice element type. |
| vendor/github.com/cilium/ebpf/internal/sys/pinning.go | Moves pinning logic into sys package and uses linux FSType helper. |
| vendor/github.com/cilium/ebpf/internal/sys/mapflags_string.go | Removes generated MapFlags stringer (MapFlags removed). |
| vendor/github.com/cilium/ebpf/internal/sys/fd.go | Refactors fd tracking using new fdtrace package and adds typed ObjGet helper. |
| vendor/github.com/cilium/ebpf/internal/sys/fd_trace.go | Removes old fd tracing implementation superseded by fdtrace. |
| vendor/github.com/cilium/ebpf/internal/math.go | Removes x/exp dependency and adds internal integer constraints + Between(). |
| vendor/github.com/cilium/ebpf/internal/linux/version.go | Introduces Linux-specific kernel version detection helpers. |
| vendor/github.com/cilium/ebpf/internal/linux/vdso.go | Moves vDSO parsing into linux package and uses internal helpers. |
| vendor/github.com/cilium/ebpf/internal/linux/statfs.go | Moves fs type helpers into linux package. |
| vendor/github.com/cilium/ebpf/internal/linux/platform.go | Moves platform prefix helper into linux package. |
| vendor/github.com/cilium/ebpf/internal/linux/kconfig.go | Adds kconfig file discovery under linux package. |
| vendor/github.com/cilium/ebpf/internal/linux/doc.go | Adds package documentation for linux helpers. |
| vendor/github.com/cilium/ebpf/internal/linux/auxv.go | Switches auxv reading to unix.Auxv and adds OS gating. |
| vendor/github.com/cilium/ebpf/internal/kconfig/kconfig.go | Removes kconfig Find helper, fixes tristate encoding size handling. |
| vendor/github.com/cilium/ebpf/internal/kallsyms/reader.go | Adds efficient word/line reader for kallsyms parsing. |
| vendor/github.com/cilium/ebpf/internal/kallsyms/cache.go | Adds small generic cache wrapper around sync.Map. |
| vendor/github.com/cilium/ebpf/internal/goos.go | Adds internal.OnLinux constant. |
| vendor/github.com/cilium/ebpf/internal/feature.go | Adds per-OS feature version mapping and ErrNotSupportedOnOS. |
| vendor/github.com/cilium/ebpf/internal/errors.go | Removes deprecated verifier log truncation flag. |
| vendor/github.com/cilium/ebpf/elf_sections.go | Adds new ELF section definitions (kprobe session, sk_skb/verdict). |
| vendor/github.com/cilium/ebpf/CODEOWNERS | Adds docs ownership entry. |
| vendor/github.com/cilium/ebpf/btf/workarounds.go | Fixes type tag naming (TypeTag). |
| vendor/github.com/cilium/ebpf/btf/traversal.go | Adds decl tag traversal handling and tag emission. |
| vendor/github.com/cilium/ebpf/btf/marshal.go | Adds kernel-compat options for decl/type tags and refactors deflation. |
| vendor/github.com/cilium/ebpf/btf/kernel.go | Uses linux kernel release helper. |
| vendor/github.com/cilium/ebpf/btf/format.go | Allows formatting Var by formatting its inner type. |
| vendor/github.com/cilium/ebpf/btf/feature.go | Refactors feature tests and adds decl/type tag feature probes. |
| vendor/github.com/cilium/ebpf/btf/btf.go | Fixes mutableTypes copy locking and skips declTags in iterator. |
| vendor/github.com/cilium/ebpf/btf/btf_types.go | Documents TypeTag kind version. |
| vendor/github.com/cilium/ebpf/attachtype_string.go | Updates generated stringer output for new attach type. |
| vendor/github.com/cilium/ebpf/asm/instruction.go | Uses sys constant for tag size instead of unix. |
| vendor/github.com/cilium/ebpf/asm/func.go | Removes unused BuiltinFunc.Max and maxBuiltinFunc sentinel. |
| vendor/github.com/cilium/ebpf/.golangci.yaml | Adds depguard to enforce internal/unix usage. |
| vendor/cyphar.com/go-pathrs/utils_linux.go | Updates copyright headers. |
| vendor/cyphar.com/go-pathrs/root_linux.go | Doc comment cleanup and updates copyright headers. |
| vendor/cyphar.com/go-pathrs/procfs/procfs_linux.go | Tightens pid bounds check and updates docs/copyright. |
| vendor/cyphar.com/go-pathrs/internal/libpathrs/libpathrs_linux.go | Uses size_t for buffer sizes and updates copyright headers. |
| vendor/cyphar.com/go-pathrs/internal/libpathrs/error_unix.go | Updates copyright headers. |
| vendor/cyphar.com/go-pathrs/internal/fdutils/fd_linux.go | Updates copyright headers. |
| vendor/cyphar.com/go-pathrs/handle_linux.go | Doc comment cleanup and updates copyright headers. |
| vendor/cyphar.com/go-pathrs/doc.go | Updates copyright headers. |
| vendor/cyphar.com/go-pathrs/.golangci.yml | Updates copyright headers. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This was referenced Jun 30, 2026
github-project-automation
Bot
moved this from Needs Triage
to Done
in Pull Request Review
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Dependabot PR #13671 is using older tag, which is blocked by
selinuxupdate (#13395).Update hcsshim to version that does not bump the
selinuxpackage (which was only updated via dependabot PRs).Also update several indirect dependencies that hcsshim has more recent versions of.