chore(deps): bump github.com/containers/podman/v5 from 5.4.2 to 5.5.0

[dependabot]

Bumps github.com/containers/podman/v5 from 5.4.2 to 5.5.0.

Release notes

Sourced from github.com/containers/podman/v5's releases.

v5.5.0

Features

• A new command has been added, podman machine cp, to copy files into a running podman machine VM.
• A new command has been added, podman artifact extract, to copy some or all of the contents of an OCI artifact to a location on disk.
• The --mount option to podman create, podman run, and podman pod create now supports a new mount type, --mount type=artifact, to mount OCI artifacts into containers.
• The podman artifact add command now features two new options, --append (to add new files to an existing artifact) and --file-type (to specify the MIME type of the file added to the artifact) (#25884).
• The podman artifact rm command now features a new option, --all, to remove all artifacts in the local store.
• The --filter option to podman pause, podman ps, podman restart, podman rm, podman start, podman stop, and podman unpause now accepts a new filter, command, which filters on the first element (argv[0]) of the command run in the container.
• The podman exec command now supports a new option, --cidfile, to specify the ID of the container to exec into via a file (#21256).
• The podman kube generate and podman kube play commands now supports a new annotation, io.podman.annotation.pids-limit/$containername, preserving the PID limit for containers across kube generate and kube play (#24418).
• Quadlet .container units now support three new keys, Memory= (set maximum memory for the created container), ReloadCmd (execute a command via systemd ExecReload), and ReloadSignal (kill the container with the given signal via systemd ExecReload) (#22036).
• Quadlet .container, .image, and .build units now support two new keys, Retry (number of times to retry pulling image on failure) and RetryDelay (delay between retries) (#25109).
• Quadlet .pod units now support a new key, HostName=, to set the pod's hostname (#25639).
• Quadlet files now support a new option, UpheldBy, in the Install section, corresponding to the systemd Upholds option.
• The names of Quadlet units specified as systemd dependencies are now automatically translated - e.g. Wants=my.container is now valid.
• Podman now generates events for the creation and removal of secrets (#24030).
• A new global option has been added to Podman, --cdi-spec-dir, to specify additional search paths for CDI specs to the CDI loader (#18292 and #25691).
• The podman build command now supports a new option, --inherit-labels (defaults to true), which controls whether labels are inherited from the base image or base stages.
• The podman update command now supports two new options, --env and --unsetenv, to alter the environment variables of existing containers (#24875).

Breaking Changes

• Due to changes in Docker API types, two small breaking changes have been made in the Go bindings for the REST API. The containers.Commit() function now returns a new struct (types.IDResponse) with identical contents, and the containers.ExecCreate function's handlers.ExecCreateConfig parameter now contains a different embedded struct, potentially requiring changes to how it is assigned to.

Changes

• Podman now requires at least Go 1.23 to build.
• Healthchecks have been refactored to avoid writing to the database as much as possible, greatly improving performance on systems with many simultaneous healthchecks running.
• Healthchecks now have a new status, stopped, which is reported if the container the healthcheck was run on stopped before the check could be completed (#25276).
• Containers in pods are now stopped in order based on their dependencies, with the infra container being stopped last, preventing application containers from losing networking before they are stopped due to the infra container stopping prematurely.
• Due to challenges with handling automatic installation, the Windows installer no longer installs WSLv2 or Hyper-V.
• Quadlet will now print warnings when skipping lines to help identify malformed Quadlet files (#25339).
• Creating podman machine VMs with a host mount over the VM's /tmp directory is no longer allowed (#18230).
• The podman logs command now allows options to be specified after the container name (e.g. podman logs $containername --follow) (#25653).
• Podman, by default, no longer uses a pause image for pod infra and service containers. Instead, a root filesystem containing only the catatonit binary will be used (#23292).
• The podman system reset command no longer removes the user's podman.sock API socket.
• When using Netavark v1.15 and higher, containers in non-default networks will no longer have the default search domain dns.podman added. Queries resolving such names will still work.
• Stopping a Quadlet .network unit will now delete the network (if no containers are actively using it) (#23678).
• For security hardening, the /proc/interrupts and /sys/devices/system/cpu/$CPU/thermal_throttle paths are now masked by default in containers (#25634).

Bugfixes

• Fixed a bug where healthchecks would still run while a container was paused (#24590).
• Fixed a bug where the remote Podman client on Windows could not mount named volumes with a single-character name into containers (#25218).
• Fixed a bug where mounting an image could panic when run without CAP_SYS_ADMIN (#25241).
• Fixed a bug where Podman would not report errors when setting up healthchecks (#25034).
• Fixed a bug where the podman exec command would not add the additional groups of the user the exec session was run as unless the user was explicitly added with the --user option (#25610).
• Fixed a bug where errors during the podman network connect and podman network disconnect commands could create errors in the database which would cause podman inspect on the container to fail.
• Fixed a bug where the podman kube generate command did not correctly generate YAML for volume mounts using a subpath.
• Fixed a bug where the podman system df command could show a negative reclaimable size.
• Fixed a bug where accessing a rootful podman machine VM that was not podman-machine-default (the default VM) with the podman machine ssh command would put the user into the rootless shell (#25332).
• Fixed a bug where the podman machine init would report nonsensical memory values in error messages when trying to create a machine with more memory than the system.
• Fixed a bug where the remote Podman client's podman start --attach command would incorrectly print an error when run on a container created with the --rm option (#25965).

... (truncated)

Changelog

Sourced from github.com/containers/podman/v5's changelog.

5.5.0

Features

• A new command has been added, podman machine cp, to copy files into a running podman machine VM.
• A new command has been added, podman artifact extract, to copy some or all of the contents of an OCI artifact to a location on disk.
• The --mount option to podman create, podman run, and podman pod create now supports a new mount type, --mount type=artifact, to mount OCI artifacts into containers.
• The podman artifact add command now features two new options, --append (to add new files to an existing artifact) and --file-type (to specify the MIME type of the file added to the artifact) (#25884).
• The podman artifact rm command now features a new option, --all, to remove all artifacts in the local store.
• The --filter option to podman pause, podman ps, podman restart, podman rm, podman start, podman stop, and podman unpause now accepts a new filter, command, which filters on the first element (argv[0]) of the command run in the container.
• The podman exec command now supports a new option, --cidfile, to specify the ID of the container to exec into via a file (#21256).
• The podman kube generate and podman kube play commands now supports a new annotation, io.podman.annotation.pids-limit/$containername, preserving the PID limit for containers across kube generate and kube play (#24418).
• Quadlet .container units now support three new keys, Memory= (set maximum memory for the created container), ReloadCmd (execute a command via systemd ExecReload), and ReloadSignal (kill the container with the given signal via systemd ExecReload) (#22036).
• Quadlet .container, .image, and .build units now support two new keys, Retry (number of times to retry pulling image on failure) and RetryDelay (delay between retries) (#25109).
• Quadlet .pod units now support a new key, HostName=, to set the pod's hostname (#25639).
• Quadlet files now support a new option, UpheldBy, in the Install section, corresponding to the systemd Upholds option.
• The names of Quadlet units specified as systemd dependencies are now automatically translated - e.g. Wants=my.container is now valid.
• Podman now generates events for the creation and removal of secrets (#24030).
• A new global option has been added to Podman, --cdi-spec-dir, to specify additional search paths for CDI specs to the CDI loader (#18292 and #25691).
• The podman build command now supports a new option, --inherit-labels (defaults to true), which controls whether labels are inherited from the base image or base stages.
• The podman update command now supports two new options, --env and --unsetenv, to alter the environment variables of existing containers (#24875).

Breaking Changes

• Due to changes in Docker API types, two small breaking changes have been made in the Go bindings for the REST API. The containers.Commit() function now returns a new struct (types.IDResponse) with identical contents, and the containers.ExecCreate function's handlers.ExecCreateConfig parameter now contains a different embedded struct, potentially requiring changes to how it is assigned to.

Changes

• Podman now requires at least Go 1.23 to build.
• Healthchecks have been refactored to avoid writing to the database as much as possible, greatly improving performance on systems with many simultaneous healthchecks running.
• Healthchecks now have a new status, stopped, which is reported if the container the healthcheck was run on stopped before the check could be completed (#25276).
• Containers in pods are now stopped in order based on their dependencies, with the infra container being stopped last, preventing application containers from losing networking before they are stopped due to the infra container stopping prematurely.
• Due to challenges with handling automatic installation, the Windows installer no longer installs WSLv2 or Hyper-V.
• Quadlet will now print warnings when skipping lines to help identify malformed Quadlet files (#25339).
• Creating podman machine VMs with a host mount over the VM's /tmp directory is no longer allowed (#18230).
• The podman logs command now allows options to be specified after the container name (e.g. podman logs $containername --follow) (#25653).
• Podman, by default, no longer uses a pause image for pod infra and service containers. Instead, a root filesystem containing only the catatonit binary will be used (#23292).
• The podman system reset command no longer removes the user's podman.sock API socket.
• When using Netavark v1.15 and higher, containers in non-default networks will no longer have the default search domain dns.podman added. Queries resolving such names will still work.
• Stopping a Quadlet .network unit will now delete the network (if no containers are actively using it) (#23678).
• For security hardening, the /proc/interrupts and /sys/devices/system/cpu/$CPU/thermal_throttle paths are now masked by default in containers (#25634).

Bugfixes

• Fixed a bug where healthchecks would still run while a container was paused (#24590).
• Fixed a bug where the remote Podman client on Windows could not mount named volumes with a single-character name into containers (#25218).
• Fixed a bug where mounting an image could panic when run without CAP_SYS_ADMIN (#25241).
• Fixed a bug where Podman would not report errors when setting up healthchecks (#25034).
• Fixed a bug where the podman exec command would not add the additional groups of the user the exec session was run as unless the user was explicitly added with the --user option (#25610).
• Fixed a bug where errors during the podman network connect and podman network disconnect commands could create errors in the database which would cause podman inspect on the container to fail.
• Fixed a bug where the podman kube generate command did not correctly generate YAML for volume mounts using a subpath.
• Fixed a bug where the podman system df command could show a negative reclaimable size.
• Fixed a bug where accessing a rootful podman machine VM that was not podman-machine-default (the default VM) with the podman machine ssh command would put the user into the rootless shell (#25332).
• Fixed a bug where the podman machine init would report nonsensical memory values in error messages when trying to create a machine with more memory than the system.
• Fixed a bug where the remote Podman client's podman start --attach command would incorrectly print an error when run on a container created with the --rm option (#25965).

... (truncated)

Commits

• 0dbcb51 Bump to v5.5.0
• d0d4a79 Merge pull request #26122 from mheon/release_notes_550
• 712291a Update release notes for v5.5.0 final
• 37f6215 Bump bundled krunkit to 0.2.1
• ab71ceb Merge commit from fork
• 5ad243a [skip-ci] Tighten version match
• 61f170a Merge pull request #26096 from l0rd/win-arm64-for-5.5
• e326330 Merge pull request #26093 from openshift-cherrypick-robot/cherry-pick-25722-t...
• 6628362 Update win-installer github job for arm64
• eecb412 Build windows arm64 artifacts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)