containerd 1.6.28 Welcome to the v1.6.28 release of containerd! The twenty-eighth patch release for containerd 1.6 updates the runc binary in the release builds to address CVE-2024-21626 ### Notable Updates * **Update runc binary to v1.1.12** ([GHSA-xr7r-f8xq-vfvv](https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv)) * **Update seccomp profile for new syscalls added since Linux 5.16** ([#9694](https://github.com/containerd/containerd/pull/9694)) See the changelog for complete list of changes Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues. ### Contributors * Andrey Epifanov * Derek McGowan * Akihiro Suda * Maksym Pavlenko * Phil Estes * Shengjing Zhu * Wei Fu ### Changes <details><summary>13 commits</summary> <p> * Prepare v1.6.28 and update runc to v1.1.12 ([#9723](https://github.com/containerd/containerd/pull/9723)) * [`570c7c637`](https://github.com/containerd/containerd/commit/570c7c637745c9a5d41309c51193107a25768200) Prepare release notes for v1.6.28 * [`b20b9f86b`](https://github.com/containerd/containerd/commit/b20b9f86b583b11a7fac34e6c682bc7633c74237) Update runc binary to v1.1.12 * [release/1.6] upgrade OpenTelemetry to v1.21.0 / v0.46.0 (CVE-2023-47108) etc. ([#9707](https://github.com/containerd/containerd/pull/9707)) * [`19500722a`](https://github.com/containerd/containerd/commit/19500722aec045da29536401fa4c76dfc5ef0cbe) [release/1.6] vendor: golang.org/x/crypto v0.18.0 * [`919928f6b`](https://github.com/containerd/containerd/commit/919928f6b006e563d1a1c57af36e29b570dd726a) [release/1.6] vendor: golang.org/x/term v0.16.0 * [`7d6a4d23b`](https://github.com/containerd/containerd/commit/7d6a4d23b182e419c0cfa732c369d7f4c90c7a02) [release/1.6] vendor: golang.org/x/sys v0.16.0 * [`16ac018ae`](https://github.com/containerd/containerd/commit/16ac018ae3efaa0389678a47d0135c739a93cbae) [release/1.6] vendor: upgrade OpenTelemetry to v1.21.0 / v0.46.0 * [release/1.6] seccomp: kernel 6.7 ([#9694](https://github.com/containerd/containerd/pull/9694)) * [`f44628305`](https://github.com/containerd/containerd/commit/f44628305d7cdccfd1f7b8996b39846db5c4f035) seccomp: kernel 6.7 * [release/1.6] carry #9557 - enable ARM CI ([#9636](https://github.com/containerd/containerd/pull/9636)) * [`65e1656f2`](https://github.com/containerd/containerd/commit/65e1656f2755727770f2adc90df8b972e7a513f2) cri: fix integration test on cgroupsv2 system * [`9cf1e1a39`](https://github.com/containerd/containerd/commit/9cf1e1a39ca17328c973a7d2ed2969e4f98993cc) *: enable ARM64 runner </p> </details> ### Dependency Changes * **github.com/go-logr/logr** v1.2.2 -> v1.3.0 * **github.com/google/go-cmp** v0.5.9 -> v0.6.0 * **github.com/google/uuid** v1.3.0 -> v1.3.1 * **go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc** v0.28.0 -> v0.46.0 * **go.opentelemetry.io/otel** v1.3.0 -> v1.21.0 * **go.opentelemetry.io/otel/metric** v1.21.0 **_new_** * **go.opentelemetry.io/otel/sdk** v1.3.0 -> v1.21.0 * **go.opentelemetry.io/otel/trace** v1.3.0 -> v1.21.0 * **golang.org/x/crypto** v0.14.0 -> v0.18.0 * **golang.org/x/net** v0.17.0 -> v0.18.0 * **golang.org/x/oauth2** v0.10.0 -> v0.11.0 * **golang.org/x/sys** v0.13.0 -> v0.16.0 * **golang.org/x/term** v0.13.0 -> v0.16.0 * **golang.org/x/text** v0.13.0 -> v0.14.0 * **google.golang.org/grpc** v1.58.3 -> v1.59.0 Previous release can be found at [v1.6.27](https://github.com/containerd/containerd/releases/tag/v1.6.27)