Skip to content

🌱 Update containerd/containerd to 2.3.3#2111

Open
syself-bot[bot] wants to merge 1 commit into
mainfrom
renovate/containerd-containerd-2.3.x
Open

🌱 Update containerd/containerd to 2.3.3#2111
syself-bot[bot] wants to merge 1 commit into
mainfrom
renovate/containerd-containerd-2.3.x

Conversation

@syself-bot

@syself-bot syself-bot Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change
containerd/containerd patch 2.3.12.3.3

Release Notes

containerd/containerd (containerd/containerd)

v2.3.3: containerd 2.3.3

Compare Source

Welcome to the v2.3.3 release of containerd!

The third patch release for containerd 2.3 contains various fixes and updates.

Highlights
  • Set SystemTemp environment variable on Windows so temp directory overrides work for SYSTEM services (#​13694)
Container Runtime Interface (CRI)
  • Fix nil pointer dereference in NRI GetIPs during pod sandbox teardown or container exit (#​13697)
  • Reject CreateContainer calls when the target sandbox is not running (#​13668)
  • Ensure sandbox shutdown on RunPodSandbox hook failures to avoid mount leaks (#​13645)
Image Distribution
  • Surface OCI error bodies in registry 403 responses by falling back to GET requests (#​13738)
Snapshotters
  • Align default 4K mkfs block size for EROFS across all platforms (#​13632)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Maksym Pavlenko
  • Samuel Karp
  • Chris Henzie
  • Phil Estes
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Austin Vazquez
  • Chris Crone
  • Derek McGowan
  • Maksim An
  • crawfordxx
  • cshung
  • lauralorenz
Changes
14 commits

  • Prepare release notes for v2.3.3 (#​13750)
  • CI: migrate Vagrant to Lima (#​13744)
  • remotes: surface OCI error body in registry 4xx responses (#​13738)
    • 457fba3a3 remotes: surface OCI error body on HEAD 403 via GET fallback
  • Update go to 1.26.5 (#​13732)
  • ci: pin fog-json to resolve gem conflict (#​13711)
    • 5be0495df ci: pin fog-json to resolve gem conflict
  • Fix nil pointer dereference in NRI GetIPs (#​13697)
    • 36c713971 Fix nil pointer dereference in NRI GetIPs
  • Set SystemTemp env var to config temp on Windows (#​13694)
    • 26dce170d Set SystemTemp env var to config temp on Windows
  • update runhcs to v0.15.0-rc.3 (#​13693)
  • Update to current setup-go version (#​13686)
    • 3e97edeb7 Update to current setup-go version
  • cri: reject CreateContainer when sandbox is not running (#​13668)
    • 8856b0f9c cri: reject CreateContainer when sandbox is not running
  • update runhcs to v0.15.0-rc.2 (#​13666)
  • test: fix flaky image timestamp check on coarse clocks (#​13643)
    • 168d56783 test: fix flaky image timestamp check on coarse clocks
  • Add defer in event of mid-function failures in RunPodSandbox to avoid mount leaks (#​13645)
    • d1db61db8 Add deferred call to ShutdownSandbox to avoid leaks
  • erofs: align default mkfs block size across platforms (#​13632)
    • 01b0f03f6 erofs: align default mkfs block size across platforms

Dependency Changes

This release has no dependency changes

Previous release can be found at v2.3.2

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

v2.3.2: containerd 2.3.2

Compare Source

Welcome to the v2.3.2 release of containerd!

The second patch release for containerd 2.3 contains various fixes
and updates including security patches.

Security Updates
Highlights
  • Fix a data race when reading shim logs on Windows (#​13522)
Image Distribution
  • Allow the last host to retry on transient network errors (#​13591)
Runtime
  • Fix container startup failures caused by concurrent task RPC timeouts during slow container creation (#​13512)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors
  • Samuel Karp
  • Chris Henzie
  • Akihiro Suda
  • Derek McGowan
  • Akhil Mohan
  • Austin Vazquez
  • Ben Cressey
  • Brian Goff
  • Maksym Pavlenko
  • Sebastiaan van Stijn
  • Sergey Kanzhelev
Changes
30 commits

  • Prepare release notes for v2.3.2 (#​13627)
    • fb8ca00b0 Prepare release notes for v2.3.2
    • 9c69960ba Merge commit from fork
    • 0f6251520 Merge commit from fork
    • 91d7471e2 cri: filter CDI annotations on checkpoint restore
    • 7c2e086bf Merge commit from fork
    • dae67765f cri: do not re-tag restored checkpoints
    • 94aa1e2c1 Merge commit from fork
    • 09599078f cri: make checkpoint restore robust to unexpected archive content
    • e1fdb8d22 Merge commit from fork
    • ff1d116ef Bound user-database file reads in openUserFile
    • d156e07cb Merge commit from fork
    • f99aad54a Do not propagate reserved labels from image configs
  • vendor: golang.org/x/crypto v0.53.0 (#​13608)
    • 0b9469501 [release/2.3] vendor: golang.org/x/crypto v0.53.0
  • resolver: retry on transient network errors (#​13591)
    • 983bbddc1 resolver: retry on transient network errors
  • update runc binary to v1.4.3 (#​13601)
  • update go to 1.26.4 (#​13580)
    • 8a49dfe85 update go to 1.26.4
    • 5aa6bb2b7 remove 1.26.2 from CI builds as it is not supported any longer due to the dependency
  • Configure udevd children-max for root-test (#​13568)
    • bfb8aebc0 Configure udevd children-max for root-test
  • core/runtime/v2: fix race on Windows deferredPipeConnection.c in Read (#​13522)
    • 62ceafff0 core/runtime/v2: fix race on Windows deferredPipeConnection.c in Read
  • runc-shim: don't hold the service lock across runc create (#​13512)
    • 9b0c0dc58 runc-shim: don't hold the service lock across runc create
  • contrib/checkpoint: increase timeouts to 30s (#​13459)
    • f588bc6fb contrib/checkpoint: increase timeouts to 30s

Dependency Changes
  • golang.org/x/crypto v0.49.0 -> v0.53.0
  • golang.org/x/mod v0.35.0 -> v0.36.0
  • golang.org/x/net v0.52.0 -> v0.55.0
  • golang.org/x/sync v0.20.0 -> v0.21.0
  • golang.org/x/sys v0.43.0 -> v0.46.0
  • golang.org/x/term v0.41.0 -> v0.44.0
  • golang.org/x/text v0.35.0 -> v0.38.0

Previous release can be found at v2.3.1

Which file should I download?
  • containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
  • containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@github-actions github-actions Bot added size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. area/templates Changes made in the templates directory labels Jun 19, 2026
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.2 🌱 Update containerd/containerd to 2.3.2 - autoclosed Jul 10, 2026
@syself-bot syself-bot Bot closed this Jul 10, 2026
@syself-bot
syself-bot Bot deleted the renovate/containerd-containerd-2.3.x branch July 10, 2026 13:03
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.2 - autoclosed 🌱 Update containerd/containerd to 2.3.3 Jul 11, 2026
@syself-bot syself-bot Bot reopened this Jul 11, 2026
@syself-bot
syself-bot Bot force-pushed the renovate/containerd-containerd-2.3.x branch 2 times, most recently from ea5597d to ef6a6f1 Compare July 11, 2026 11:44
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.3 🌱 Update containerd/containerd to 2.3.3 - autoclosed Jul 13, 2026
@syself-bot syself-bot Bot closed this Jul 13, 2026
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.3 - autoclosed 🌱 Update containerd/containerd to 2.3.3 Jul 14, 2026
@syself-bot syself-bot Bot reopened this Jul 14, 2026
@syself-bot
syself-bot Bot force-pushed the renovate/containerd-containerd-2.3.x branch 2 times, most recently from ef6a6f1 to 7cc2a05 Compare July 14, 2026 12:06
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.3 🌱 Update containerd/containerd to 2.3.3 - autoclosed Jul 20, 2026
@syself-bot syself-bot Bot closed this Jul 20, 2026
| datasource  | package               | from  | to    |
| ----------- | --------------------- | ----- | ----- |
| github-tags | containerd/containerd | 2.3.1 | 2.3.3 |
@syself-bot syself-bot Bot changed the title 🌱 Update containerd/containerd to 2.3.3 - autoclosed 🌱 Update containerd/containerd to 2.3.3 Jul 22, 2026
@syself-bot syself-bot Bot reopened this Jul 22, 2026
@syself-bot
syself-bot Bot force-pushed the renovate/containerd-containerd-2.3.x branch from 7cc2a05 to 8415e79 Compare July 22, 2026 12:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/templates Changes made in the templates directory size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. type/patch

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants