chore(deps): bump containerd-shim-wasm from 0.5.0 to 0.6.0

[dependabot]

Bumps containerd-shim-wasm from 0.5.0 to 0.6.0.

Release notes

Sourced from containerd-shim-wasm's releases.

containerd-shim-wasm/v0.6.0

What's Changed

• Bump test module crate version by @​jsturtevant in containerd/runwasi#522
• Enable building and release of oci-tar-builder by @​jsturtevant in containerd/runwasi#523
• Add Description and license to oci-tar-builder cargo.toml by @​jsturtevant in containerd/runwasi#525
• change release flow to be workflow_dispatch rather than tag based by @​devigned in containerd/runwasi#532
• Fix for running sed on Linux for release pipeline by @​jsturtevant in containerd/runwasi#533
• Add a user to git commit by @​jsturtevant in containerd/runwasi#535
• Remove auto-commit and verify version by @​jsturtevant in containerd/runwasi#536
• ci(release): remove pre-release by @​Mossaka in containerd/runwasi#545
• ci(*): merge build action by @​Mossaka in containerd/runwasi#548
• ci(*): update checkout to v4 and add gh action to dependabot by @​Mossaka in containerd/runwasi#559
• docs: clarify how the binary works by @​Mossaka in containerd/runwasi#568
• Makefile: Define RUSTC to avoid "rustc: not found" during sudo make install by @​keisku in containerd/runwasi#578
• Makefile: Remove build dependency from install by @​keisku in containerd/runwasi#581
• feat(tracing): add tracing instruments to containerd-shim-wasm by @​Mossaka in containerd/runwasi#564
• chore: bump rust version to 1.78 by @​Mossaka in containerd/runwasi#598
• making tracaing::instrument macro optional by @​Mossaka in containerd/runwasi#592
• chore: bump youki libcontainer to v0.3.3 by @​Mossaka in containerd/runwasi#601
• release: batch-bump minor version of shims and core crate by @​Mossaka in containerd/runwasi#602
• fix(release): syntax error in runtime_sub step by @​Mossaka in containerd/runwasi#603
• fix(release): fix another syntax error on runtime_sub by @​Mossaka in containerd/runwasi#604

New Contributors

• @​keisku made their first contribution in containerd/runwasi#578

Full Changelog: containerd/runwasi@containerd-shim-wasm/v0.5.0...containerd-shim-wasm/v0.6.0

Changelog

Sourced from containerd-shim-wasm's changelog.

Releasing a new crate version

This document describes the steps to release a new version of the crate.

Overview

To create a new release, either run the release.yml workflow as a workload_dispatch trigger through the GitHub UI, or via the following command substituting the proper values for crate and version.

gh workflow run release.yml -f dry_run=true -f crate=containerd-shim-wasm -f version=0.4.0

Input Values for Release.yml

• crate: [string] the name of the crate within the runwasi project. It should be a directory under ./crates.
• version: [string] the version of the crate to stamp, tag, and release (e.g., 1.0.0, 0.6.0-rc1)
• dry_run: [boolean] a flag that causes the workflow to run all step except ones that would tag or push artifacts.

The workflow performs the following steps:

• Verifies inputs
• Verifies ability to push crates
• Updates the version of the crate to the version specified in the workflow input
• Build the crate to be released (determined by the tag), including any artifacts (e.g., associated binaries)
• Run the tests for that crate (and only that crate!)
• Publishes to the crates.io
• Tags the repository for the release
• Creates a GitHub release for that crate (attaching any artifacts)

Crate Release Sequence

Must release the creates in this order due to dependencies:

1. containerd-shim-wasm-test-modules
2. oci-tar-builder
3. containerd-shim-wasm
4. All runtime-related crates.

The workflow utilizes a bot account (@​containerd-runwasi-release-bot) to publish the crate to crates.io. The bot account is only used to get a limited-scope API token to publish the crate on crates.io. The token is stored as a secret in the repository and is only used by the release workflow.

Local Development vs. Release

Locally, crates reference local paths. During release, they target published versions. Use both path and version fields in the workspace Cargo.toml:

e.g.

containerd-shim-wasm = { path = "crates/containerd-shim-wasm", version = "0.4.0" }

Steps

1. Open a PR to bump crate versions and dependency versions in Cargo.toml for that crate
2. PR can be merged after 2 LGTMs

... (truncated)

Commits

• 1a1393a Merge pull request #604 from containerd/fix-release-pipeline-substring2
• beddf64 fix(release): fix another syntax error on runtime_sub
• 8b945f9 fix: syntax error in runtime_sub step (#603)
• 68c84aa Merge pull request #602 from Mossaka/batch-bump
• 5f4fb6c relase: batch-bump minor version of shims and core crate
• d3d9758 Merge pull request #601 from Mossaka/bump-youki
• 80d0103 chore: bump youki libcontainer to v0.3.3
• 238c0c8 Merge pull request #600 from containerd/dependabot/cargo/wasmparser-0.208.1
• c87a26f Merge pull request #599 from containerd/dependabot/cargo/wat-1.208.1
• 42523b9 ---
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)