Skip to content

Bump github.com/opencontainers/runtime-spec from 1.2.1 to 1.3.0#1744

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/opencontainers/runtime-spec-1.3.0
Open

Bump github.com/opencontainers/runtime-spec from 1.2.1 to 1.3.0#1744
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/opencontainers/runtime-spec-1.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Nov 4, 2025

Bumps github.com/opencontainers/runtime-spec from 1.2.1 to 1.3.0.

Release notes

Sourced from github.com/opencontainers/runtime-spec's releases.

v1.3.0

This is the fourth minor release of the v1 series of the Open Container Initiative Runtime Specification. This release features the addition of the specification for FreeBSD.

Additions

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Thanks to the following contributors for making this release possible: @​Artoria2e5 @​Sharmaann @​aojea @​ariel-anieli @​askervin @​cyphar @​dfr @​gogolok @​ipuustin @​kolyshkin @​marquiz @​oleksiimoisieiev @​tianon

Vote-Results: +9 -0 *2 (#1302) Signed-off-by: Akihiro Suda (@​AkihiroSuda)

Changelog

Sourced from github.com/opencontainers/runtime-spec's changelog.

OpenContainers Specifications

Changes with v1.3.0:

Additions:

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes:

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance:

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Changes with v1.2.1:

Additions:

  • zos updates (#1273)
  • Add support for windows CPU affinity (#1258)
  • specs-go: sync SCMP_ARCH_* constants with libseccomp main (#1229)
  • Add CPU affinity to executed processes (#1253, #1261)
  • config-linux: describe the format of cpus and mems (#1253)

Minor fixes:

  • Fix description of errnoRet in Seccomp (#1277)
  • config-linux: update for libseccomp v2.6.0 (#1276)

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@dependabot dependabot Bot requested a review from a team as a code owner November 4, 2025 18:09
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@github-actions github-actions Bot removed the go Pull requests that update Go code label Nov 4, 2025
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Nov 4, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/opencontainers/runtime-spec 1.3.0 🟢 6.1
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • go.mod

Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases)
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog)
- [Commits](opencontainers/runtime-spec@v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/github.com/opencontainers/runtime-spec-1.3.0 branch from 5384778 to 0f89b1b Compare November 8, 2025 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants