Skip to content

Update version in docs to v0.14.1#2012

Open
github-actions[bot] wants to merge 17 commits into
release/0.14from
create-pull-request/update-version-in-docs-to-v0.14.1
Open

Update version in docs to v0.14.1#2012
github-actions[bot] wants to merge 17 commits into
release/0.14from
create-pull-request/update-version-in-docs-to-v0.14.1

Conversation

@github-actions

Copy link
Copy Markdown

This change updates SOCI docs to point to v0.14.1.

This PR must be closed and reopened manually to trigger automated checks.

Auto-generated by create-pull-request.

GitHub and others added 16 commits May 28, 2026 16:07
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Per containerd/containerd#7863, this has been
reprecated since Kubernetes 1.26, which was released in December 2022.
Given that it has about 3.5 years since, it seems sufficient to remove
it as upgrading to containerdv2 will also remove support for this.

Signed-off-by: David Son <davbson@amazon.com>
This reverts commit f2b5076.

Signed-off-by: David Son <davbson@amazon.com>
v2.3.1 (latest as of this commit) requires Go 1.26 which is why we chose
to use v2.2.4 instead. This should be an easy upgrade to 2.3 anyway
should we choose to upgrade it down the line.

This naturally means we are also upgrading a ton of transitive
dependencies (as this is an update we have been putting off for a while)
so hoping this won't break anything too major...

Signed-off-by: David Son <davbson@amazon.com>
When the AuthClient serves a request from its redirect cache, it
bypasses the 307 redirect hop and sends directly to the cached target.
This causes Go's HTTP client to never set the Referer header, breaking
registries that use Referer-based hot-link protection.

The fix sets Referer to the original registry URL before rewriting the
request, simulating what Go would set during a real redirect. This is
safe for all registries: those that don't check Referer simply ignore it.

Only affects parallel-pull-unpack mode (the only path enabling redirect
caching). Lazy SOCI mode and standard containerd pulls are unaffected.

Signed-off-by: ayush-panta <ayushkp@amazon.com>
This change adds a GitHub Actions workflow for creating release branches
with jobs to 1) create the branch and 2) open a pull request with the
generated THIRD_PARTY_LICENSES file and updated getting started guide
version.

Signed-off-by: Austin Vazquez <macedonv@amazon.com>
(cherry picked from commit 916aae9)
Signed-off-by: David Son <davbson@amazon.com>
Bumps [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) from 2.6.0 to 2.6.1.
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](oras-project/oras-go@v2.6.0...v2.6.1)

---
updated-dependencies:
- dependency-name: oras.land/oras-go/v2
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.46.0.
- [Commits](golang/sys@v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.20.0 to 0.21.0.
- [Commits](golang/sync@v0.20.0...v0.21.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>
Bumps [github.com/containerd/plugin](https://github.com/containerd/plugin) from 1.0.0 to 1.1.0.
- [Release notes](https://github.com/containerd/plugin/releases)
- [Commits](containerd/plugin@v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/plugin
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Arjun Raja Yogidas <arjunry@amazon.com>
Every minor/major version bump should be intentional for containerd in
case of breaking changes + compatibility reasons.

Signed-off-by: David Son <davbson@amazon.com>
Signed-off-by: David Son <davbson@amazon.com>
Signed-off-by: David Son <davbson@amazon.com>
@github-actions github-actions Bot requested a review from a team as a code owner June 12, 2026 18:22
@github-actions github-actions Bot added automated-pr Pull requests opened by automation easy-to-review Pull requests that are straight forward to review labels Jun 12, 2026
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@github-actions github-actions Bot force-pushed the create-pull-request/update-version-in-docs-to-v0.14.1 branch from 0bee0f1 to 0fc6b8c Compare June 12, 2026 21:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

automated-pr Pull requests opened by automation easy-to-review Pull requests that are straight forward to review

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants