chore: update dependencies

[renovate]

Update Request | Renovate Bot

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
cgr.dev/chainguard/wolfi-base		digest	3b271f8 -> 9637e55
git://git.kernel.org/pub/scm/utils/mdadm/mdadm.git		minor	4.3 -> 4.4
golang.org/x/sys	require	minor	v0.28.0 -> v0.29.0
google/gvisor		minor	20241118.0 -> 20241217.0
kata-containers/kata-containers		minor	3.3.0 -> 3.12.0
nvidia/nvidia-container-toolkit		patch	v1.17.2 -> v1.17.3

---

Release Notes

google/gvisor (google/gvisor)

v20241217.0

Compare Source

v20241210.0

Compare Source

v20241202.0

Compare Source

kata-containers/kata-containers (kata-containers/kata-containers)

v3.12.0: Kata Containers 3.12.0

Compare Source

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-8d4e72f0d-107265821-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-aff3d98dd-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-69ed4bc3b-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-9c8b20b2b-x86_64
• tools: quay.io/kata-containers/builders:tools-95fc58510-59ed19e8b-3fb91dd63-fb87bf221-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• ci: Re-enable SNP CI by @​AdithyaKrishnan in https://github.com/kata-containers/kata-containers/pull/10558
• osbuilder: Fix build dependency of ubuntu rootfs with Docker by @​coolljt0725 in https://github.com/kata-containers/kata-containers/pull/10377
• ci: Required jobs by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/10447
• osbuilder: Drop Clear Linux by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10520
• gpu: NVIDIA GPU initrd/image build by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10464
• docs: Fix several build failures when I tried the procedures in "Kata Containers with AMD SEV-SNP VMs" by @​kimullaa in https://github.com/kata-containers/kata-containers/pull/10386
• ci: Fix error on self-hosted machines by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10516
• genpolicy: avoid regorus warning by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10543
• runtime-rs: fix vfio device name combination issue by @​Apokleos in https://github.com/kata-containers/kata-containers/pull/10577
• kata-deploy: Support containerd configuration version 3 by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10584
• workflows: Remove rootfs binary artifacts by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10586
• agent: fix startup when guest_components_procs is set to none by @​squarti in https://github.com/kata-containers/kata-containers/pull/10583
• kata-deploy: Use drop-in files whenever it's possible by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10585
• coco: ci: Lay groundwork for compiling and publishing CSI driver image [1/x] by @​sprt in https://github.com/kata-containers/kata-containers/pull/10561
• runtime: clh: addNet() logging clean-up by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10564
• gha: Unbreak CI and work around workflow limit by @​sprt in https://github.com/kata-containers/kata-containers/pull/10589
• ci: unbreak: Reallow no-op builds by @​sprt in https://github.com/kata-containers/kata-containers/pull/10594
• Unbreak the CI, 3rd attempt by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10597
• gatekeeper: add run-k8s-tests-on-zvsi(devmapper) to required jobs by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10595
• ci: Fix variant for confidential targets by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10590
• ci: Fix Docker publishing for CSI driver by @​sprt in https://github.com/kata-containers/kata-containers/pull/10609
• policy: add constants to rules.rego by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10592
• policy: ignore optional metadata uid field by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10608
• ci: Fix Docker publishing for CSI driver, 2nd try by @​sprt in https://github.com/kata-containers/kata-containers/pull/10612
• coco: ci: Fully implement compilation of CSI driver and require it for CoCo tests [2/x] by @​sprt in https://github.com/kata-containers/kata-containers/pull/10563
• Add subchannel support to qemu-runtime-rs for s390x by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10574
• genpolicy: align state path getter and setter by @​3u13r in https://github.com/kata-containers/kata-containers/pull/10604
• runtime: skip logging some of the dial errors by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10607
• workflows: Fix remove artifact name filter by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10615
• metrics: Increase minval range for failing tests by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10588
• tests: Skip k8s job test on qemu-coco-dev by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10617
• ci.gatekeeper: Update existing results by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/10572
• kata-deploy: Add support to multi-installation by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10551
• release: helm: Add the chart as part of the release by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10627
• runtime: Set memory config shared=false when shared_fs=None in CLH. by @​Sumynwa in https://github.com/kata-containers/kata-containers/pull/10548
• Action lint workflow by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10631
• policy: improve pod namespace validation by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10593
• Revert "ci: Skip the failing tests in SNP" by @​ryansavino in https://github.com/kata-containers/kata-containers/pull/10581
• runtime-rs: Fix the issues with stderr fifo by @​justxuewei in https://github.com/kata-containers/kata-containers/pull/10638
• runtime-rs: Ignore BUILD_TYPE if it is not release by @​justxuewei in https://github.com/kata-containers/kata-containers/pull/10641
• runtime-rs & agent: Fix the issues with bind volumes by @​justxuewei in https://github.com/kata-containers/kata-containers/pull/10643
• qemu: Upgrade qemu 9.1.2 by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10492
• vfio-ap: Assign default string "0" for empty APID and APQI by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10660
• kata-ctl: fix outdated comments by @​liubogithub in https://github.com/kata-containers/kata-containers/pull/10655
• release: Bump version to 3.12.0 by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10663
• qemu: Fix aarch64 build by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/10669
• workflows: Remove potential timing issues with artifacts by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10620

New Contributors

• @​coolljt0725 made their first contribution in https://github.com/kata-containers/kata-containers/pull/10377
• @​kimullaa made their first contribution in https://github.com/kata-containers/kata-containers/pull/10386

Full Changelog: kata-containers/kata-containers@3.11.0...3.12.0

v3.11.0: Kata Containers 3.11.0

Compare Source

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-8d4e72f0d-107265821-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-aff3d98dd-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-9c8b20b2b-x86_64
• tools: quay.io/kata-containers/builders:tools-c20731226-df5e6e65b-0ce3f5fc6-0adf7a66c-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• re-enable measured rootfs build & tests by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10466
• build: cache: Ensure shim-v2-root_hash.txt is in "${workdir}" by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10473
• runtime: log vm start error before cleanup by @​koct9i in https://github.com/kata-containers/kata-containers/pull/10074
• Revert "tests: Add trap statement in kata doc script" by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10475
• tests: Increase time to run stressng k8s tests by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10462
• packaging: Remove kernel config repo variable as it is unused by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10474
• gha: Switch KUBERNETES from k3s to kubeadm on s390x by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10476
• runtime-rs: Add basic boilerplate for remote hypervisor by @​Chasing1020 in https://github.com/kata-containers/kata-containers/pull/10225
• genpolicy: support darwin target by @​burgerdev in https://github.com/kata-containers/kata-containers/pull/10425
• gha: Add missing steps in Kata stability workflow by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10480
• ci: Use ubuntu for static building of kata tools. by @​Sumynwa in https://github.com/kata-containers/kata-containers/pull/10442
• runtime: Add GPU annotations for remote hypervisor by @​bpradipt in https://github.com/kata-containers/kata-containers/pull/10453
• docs: Update virtualization document by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10482
• agent: perform attestation init w/o process launch by @​mkulke in https://github.com/kata-containers/kata-containers/pull/10481
• gha: Fix source for gha stability run script by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10485
• agent-ctl: Add support to test kata-agent's container creation APIs. by @​Sumynwa in https://github.com/kata-containers/kata-containers/pull/10395
• tests: k8s: Update bats by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10459
• builds: ovmf: Workaround Zeex repo becoming private by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10490
• image: Add suffix to image or initrd depending on the NVIDIA driver version by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/9480
• build: kernel: Teach our machinery to deal with -rc kernels by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10488
• agent: fix typo on getting EphemeralHandler size option by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10491
• ci: export CONTAINER_RUNTIME to the test scripts by @​littlejawa in https://github.com/kata-containers/kata-containers/pull/10496
• ci: skip nginx connectivity test with qemu/crio by @​littlejawa in https://github.com/kata-containers/kata-containers/pull/10495
• workflows: Use AUTO_GENERATE_POLICY for qemu-coco-dev by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10486
• gha: Add install kata tools as part of the stability workflow by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10493
• runtime: Files are not synced between host and guest VMs by @​squarti in https://github.com/kata-containers/kata-containers/pull/10500
• kata-agent: Add CDI support by @​zvonkok in https://github.com/kata-containers/kata-containers/pull/9584
• metrics: Skip metrics on stratovirt by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10505
• workflow: Remove/skip runk CI by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10506
• tests: k8s: Update image pull timeout error by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10498
• ci.ocp: Use the official python:3 container for sanity by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/10511
• tests: remove manifest v1 test by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10517
• ci: tdx: kbs: Ensure https_proxy is taken in consideration by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10513
• gha: Hardcode ubuntu-22.04 instead of latest by @​sprt in https://github.com/kata-containers/kata-containers/pull/10515
• gha: Get artifacts when installing kata tools in stability workflow by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10508
• Reapply "runtime: confidential: Do not set the max_vcpu to cpu" by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10519
• ci: Temporarily skip SNP CI by @​AdithyaKrishnan in https://github.com/kata-containers/kata-containers/pull/10539
• osbuilder: remove redundant env variable by @​ncppd in https://github.com/kata-containers/kata-containers/pull/10521
• genpolicy: add state to policy by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10431
• runtime: Set maxvcpus equal to vcpus for the static resources case by @​alex-matei in https://github.com/kata-containers/kata-containers/pull/9195
• rootfs: Install missing clang in Ubuntu docker image by @​mrIncompetent in https://github.com/kata-containers/kata-containers/pull/9407
• ci: tdx: Split jobs to run in 2 different machines by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10501
• kernel: add CONFIG_KEYS=y to enable kernel keyring by @​Crypt0s in https://github.com/kata-containers/kata-containers/pull/10542
• agent: overwrite OCI process spec when overwriting pause image by @​squarti in https://github.com/kata-containers/kata-containers/pull/10514
• runtime: fix comment to accurately reflect clh behavior by @​Camelron in https://github.com/kata-containers/kata-containers/pull/10545
• release: Bump version to 3.11.0 by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10552
• workflows: Remove skipping of artifact uploads by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10562

New Contributors

• @​koct9i made their first contribution in https://github.com/kata-containers/kata-containers/pull/10074
• @​Chasing1020 made their first contribution in https://github.com/kata-containers/kata-containers/pull/10225
• @​ncppd made their first contribution in https://github.com/kata-containers/kata-containers/pull/10521
• @​mrIncompetent made their first contribution in https://github.com/kata-containers/kata-containers/pull/9407
• @​Crypt0s made their first contribution in https://github.com/kata-containers/kata-containers/pull/10542
• @​Camelron made their first contribution in https://github.com/kata-containers/kata-containers/pull/10545

Full Changelog: kata-containers/kata-containers@3.10.1...3.11.0

v3.10.1: Kata Containers 3.10.1

Compare Source

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-2b2d0f738-107265821-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-c99ba42d6-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-25c784c56-x86_64
• tools: quay.io/kata-containers/builders:tools-c06bf2e3b-fefcf7cfa-322846b36-bc195d758-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• tools: Change PACKAGES var for cbl-mariner by @​ms-mahuber in https://github.com/kata-containers/kata-containers/pull/10439
• workflows: Ensure shim-v2 is built as the last asset by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10446
• runtime: Failed to clean up resources when QEMU is terminated by @​wtootw in https://github.com/kata-containers/kata-containers/pull/10208
• Add a specific workflow for testing the CI, without messing up with the "nightly" weather by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10449
• docs: Fix misspelling in CI documentation by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10438
• tests: Add trap statement in kata doc script by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10452
• workflows: devel: Follow-up on the manually triggered jobs by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10461
• agent: Correct rustjail device filemode permission typo by @​skaegi in https://github.com/kata-containers/kata-containers/pull/10463
• release: Bump version to 3.10.1 by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10467
• workflows: Possibly fix the release workflow by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10471

New Contributors

• @​wtootw made their first contribution in https://github.com/kata-containers/kata-containers/pull/10208

Full Changelog: kata-containers/kata-containers@3.10.0...3.10.1

v3.10.0: Kata Containers 3.10.0

Compare Source

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with the following GNU LGPL-2.1 licensed libseccomp library.

• libseccomp

The kata-agent uses the libseccomp v2.5.5 which is not modified from the upstream version.
However, in order to comply with the LGPL-2.1 (§6(a)), we attach the complete source code for the library.

Kata Containers builder images

• agent (on all its different flavours): quay.io/kata-containers/builders:agent-2b2d0f738-107265821-x86_64
• Kernel (on all its different flavours): quay.io/kata-containers/builders:kernel-c95ae5a50-x86_64
• OVMF (on all its different flavours): quay.io/kata-containers/builders:ovmf-c99ba42d6-x86_64
• QEMU (on all its different flavurs): quay.io/kata-containers/builders:qemu-74662a072-x86_64
• shim-v2: quay.io/kata-containers/builders:shim-v2-go-1.22.2-rust-1.75.0-25c784c56-x86_64
• tools: quay.io/kata-containers/builders:tools-c06bf2e3b-fefcf7cfa-3dabe0f5f-bc195d758-x86_64
• virtiofsd: quay.io/kata-containers/builders:virtiofsd-1.72.0-musl-c99ba42d6-x86_64

Installation

Follow the Kata installation instructions.

What's Changed

• gha: Increase timeout to run k8s tests on TDX by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10336
• acrn: Drop support by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10239
• kata-deploy: clean up and fix docs for k0s by @​sprt in https://github.com/kata-containers/kata-containers/pull/10335
• runtime-rs: fix the issue of using block_on by @​lifupan in https://github.com/kata-containers/kata-containers/pull/10339
• tests: Fix loop device handling for exec_host() by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10232
• doc: Update the release process by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10337
• tools.kata-webhook: Specify runtime class using configMap by @​Bickor in https://github.com/kata-containers/kata-containers/pull/10329
• Introduce cdi in runtime-rs by @​Apokleos in https://github.com/kata-containers/kata-containers/pull/10146
• ci: don't require sudo for yq if already installed by @​pawelpros in https://github.com/kata-containers/kata-containers/pull/10311
• runtime: add DAN support for VFIO network device in Go kata-runtime by @​l8huang in https://github.com/kata-containers/kata-containers/pull/9977
• tests: Improve k8s negative tests by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10328
• ci: Reorder webhook deployment by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/10345
• tests: Delete custom node debugger pod on EXIT by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10348
• Some prepared work for sandbox api support by @​lifupan in https://github.com/kata-containers/kata-containers/pull/10330
• runtime-rs: Notify containerd when process exits by @​lsc2001 in https://github.com/kata-containers/kata-containers/pull/10293
• ci: Enable basic docker tests for runtime-rs by @​lsc2001 in https://github.com/kata-containers/kata-containers/pull/10318
• tests: Minor improvement k8s tests by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10346
• agent: fix the issue of setup sandbox pidns by @​lifupan in https://github.com/kata-containers/kata-containers/pull/10351
• sandbox: refactor the sandbox init process by @​lifupan in https://github.com/kata-containers/kata-containers/pull/10349
• runtime-rs: Port TAP implementation from dragonball by @​sidneychang in https://github.com/kata-containers/kata-containers/pull/10219
• gha: Add ita_key as a github secret by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10357
• docs: Remove qemu information not longer valid by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10342
• ci:tdx: Use an ITA key for TDX by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10305
• runtime-rs: Add Configurable Compilation for Dragonball in Runtime-rs by @​sidneychang in https://github.com/kata-containers/kata-containers/pull/10312
• tests: Add k8s-block-volume test to GHA CI by @​sprt in https://github.com/kata-containers/kata-containers/pull/7165
• genpolicy: validate create sandbox storages by @​Redent0r in https://github.com/kata-containers/kata-containers/pull/10340
• tests: Skip k8s-block-volume.bats for qemu-runtime-rs by @​BbolroC in https://github.com/kata-containers/kata-containers/pull/10374
• metrics: Update fast footprint script to use grep by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10369
• tests: k8s-policy-rc: remove default UID from YAML by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10370
• k8s: tests: Re-enable empty-dirs tests for TDX / coco-qemu-dev by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10371
• runtime-rs: add network device hotplugging to qemu-rs by @​pmores in https://github.com/kata-containers/kata-containers/pull/10165
• k8s:kbs: Add trap statement to clean up tmp files by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10375
• ci.ocp: Sort images according to git by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/10134
• osbuilder: Remove duplicated arch variable definition by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10381
• CI: Select jobs by touched code by @​ldoktor in https://github.com/kata-containers/kata-containers/pull/9637
• gha: enable AUTO_GENERATE_POLICY where needed by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10376
• tests: k8s: AUTO_GENERATE_POLICY=yes for local testing by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10384
• build: Fix RPM build fail due to AGENT_POLICY by @​emanuellima1 in https://github.com/kata-containers/kata-containers/pull/10389
• image-builder: Remove unused variable by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10383
• Support Confidential Sealed Secrets (as volume) by @​ChengyuZhu6 in https://github.com/kata-containers/kata-containers/pull/10363
• local-build: add ability to build rootfs-image-mariner by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10390
• tools/osbuilder/tests: Add trap statement in test images script by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10388
• Revert "agent:cdh: unittest for sealed secret as file" by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10404
• ci: mariner: Use the image instead of the initrd by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10396
• packaging: Remove unused variable in build kernel script by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10407
• build: mariner: Remove the ability to build the marine initrd by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10397
• Kbs deploy overlays update by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10401
• agent:cdh: fix unit tests about sealed secret by @​ChengyuZhu6 in https://github.com/kata-containers/kata-containers/pull/10406
• kbs: ita: Ensure the proper image / image_tag is used for ITA by @​fidencio in https://github.com/kata-containers/kata-containers/pull/10409
• tools/osbuilder/tests: Remove egrep in test images script by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10415
• ci: Install build dependencies for building agent-ctl with image pull. by @​Sumynwa in https://github.com/kata-containers/kata-containers/pull/10402
• genpolicy: read binaryData value as String by @​3u13r in https://github.com/kata-containers/kata-containers/pull/10426
• ci: static_sandbox_resource_mgmt for cbl-mariner by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10416
• tests: k8s-inotify.bats improvements by @​danmihai1 in https://github.com/kata-containers/kata-containers/pull/10417
• agent: config: Use rstest for unit tests by @​stevenhorsman in https://github.com/kata-containers/kata-containers/pull/10412
• gha: Use a arch_to_golang variable to have uniformity by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10428
• docs: Update CI documentation by @​GabyCT in https://github.com/kata-containers/kata-containers/pull/10430
• runtime-rs: Use vCPU and memory values from config by @​ananos in https://github.com/kata-containers/kata-containers/pull/10435
• ci: add provenance attestation for agent artifact by @​mkulke in https://github.com/kata-containers/kata-containers/pull/10433
• ci: don't parse oci image for cached artifacts by @​mkulke in https://github.com/kata-containers/kata-containers/pull/10437
• kata-agent: fixing bug of unable setting hostname correctly. by @​Apokleos in https://github.com/kata-containers/kata-containers/pull/10421
• runtime-rs: support virtio-scsi device in qemu-rs by @​pmores in https://github.com/kata-containers/kata-containers/pull/10420
• release: Bump VERSION to 3.10.0 by @​gkurz in https://github.com/kata-containers/kata-containers/pull/10443

New Contributors

• @​Bickor made their first contribution in https://github.com/kata-containers/kata-containers/pull/10329
• @​pawelpros made their first contribution in https://github.com/kata-containers/kata-containers/pull/10311
• @​lsc2001 made their first contribution in https://github.com/kata-containers/kata-containers/pull/10293

Full Changelog: kata-containers/kata-containers@3.9.0...3.10.0

v3.9.0: Kata Containers 3.9.0

Compare Source

Survey

Please take the Kata Containers survey:

• https://openinfrafoundation.formstack.com/forms/kata_containers_user_survey

This will help the Kata Containers community understand:

• how you use Kata Containers
• what features and improvements you would like to see in Kata Containers

Libseccomp Notices

The kata-agent binaries inside the Kata Containers images provided with this release are
statically linked with

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.