Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: microsoft/hcsshim
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.12.5
Choose a base ref
...
head repository: microsoft/hcsshim
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.12.7
Choose a head ref
  • 9 commits
  • 1,454 files changed
  • 3 contributors

Commits on Aug 19, 2024

  1. Omnibus dependency update (#2166) 

    Dependebot PRs:

 - hcsshim/2140
 - hcsshim/2145
 - hcsshim/2146
 - hcsshim/2149
 - hcsshim/2153
 - hcsshim/2154
 - hcsshim/2159
 - hcsshim/2161
 - hcsshim/2174
 - hcsshim/2175
 - hcsshim/2176

Update protobuf files.

`google.golang.org/grpc v1.64.0` deprecated `Dial[Context]` and
`WithBlock`.
Replacing either is non-trivial, and left for a future PR.

Update dependabot file to ignore patch updates: they rarely provide bug
fixes and increase repo churn.

Signed-off-by: Hamza El-Saawy <[email protected]>
(cherry picked from commit 75428d1)
Signed-off-by: Kirtana Ashok <[email protected]>
    @helsaawy @kiashok
    helsaawy authored and kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    4f46058 View commit details
    Browse the repository at this point in the history

  2. Upgrade deps to resolve CVEs (#2225) 

    CVE alerts:

 - https://github.com/microsoft/hcsshim/security/dependabot/108
 - https://github.com/microsoft/hcsshim/security/dependabot/107

Dependabot PRs:

 - 2224
 - 2223
 - 2219
 - 2218
 - 2213

Signed-off-by: Hamza El-Saawy <[email protected]>
(cherry picked from commit a8ef0c4)
Signed-off-by: Kirtana Ashok <[email protected]>
    @helsaawy @kiashok
    helsaawy authored and kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    6a5ebd3 View commit details
    Browse the repository at this point in the history

  3. Bump opa/containerd to latest versions 

    Signed-off-by: Kirtana Ashok <[email protected]>
(cherry picked from commit 88ac0d9)
Signed-off-by: Kirtana Ashok <[email protected]>
    @kiashok
    kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    d4b1cc0 View commit details
    Browse the repository at this point in the history

  4. drop usage of deprecated package/methods 

    Signed-off-by: Davanum Srinivas <[email protected]>
(cherry picked from commit 56e8cf9)
Signed-off-by: Kirtana Ashok <[email protected]>
    @dims @kiashok
    dims authored and kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    85a5a57 View commit details
    Browse the repository at this point in the history

  5. Update module versions 

    Signed-off-by: Kirtana Ashok <[email protected]>
    @kiashok
    kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    7d25ce2 View commit details
    Browse the repository at this point in the history

  6. Omnibus dependency updates (#2051) 

    Consolidate dependabot updates:
 - github.com//pull/2050
 - github.com//pull/2048
 - github.com//pull/2047
 - github.com//pull/2046
 - github.com//pull/2045
 - github.com//pull/2044
 - github.com//pull/2043
 - github.com//pull/2042

Signed-off-by: Hamza El-Saawy <[email protected]>
(cherry picked from commit 060de7c)
Signed-off-by: Kirtana Ashok <[email protected]>
    @helsaawy @kiashok
    helsaawy authored and kiashok committed Aug 19, 2024
    Configuration menu
    Copy the full SHA
    f922f2a View commit details
    Browse the repository at this point in the history

Commits on Sep 25, 2024

  1. Update pkg versions 

    This commit updates pkg versions in go.mod and most importantly
updates github.com/veraison/go-cose to retract v1.2.0 version

Signed-off-by: Kirtana Ashok <[email protected]>
    @kiashok
    kiashok committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    8f3fccd View commit details
    Browse the repository at this point in the history

  2. Update runc to v1.1.14 

    Signed-off-by: Kirtana Ashok <[email protected]>
    @kiashok
    kiashok committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    5ae96f3 View commit details
    Browse the repository at this point in the history

  3. Bump golangci/golangci-lint-action from 4 to 6 

    Signed-off-by: Kirtana Ashok <[email protected]>
    @kiashok
    kiashok committed Sep 25, 2024
    Configuration menu
    Copy the full SHA
    86b5333 View commit details
    Browse the repository at this point in the history
Loading