Skip to content

chore(deps): bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2#549

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/containerd/containerd/v2-2.2.2
Open

chore(deps): bump github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2#549
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/containerd/containerd/v2-2.2.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 19, 2026

Bumps github.com/containerd/containerd/v2 from 2.2.1 to 2.2.2.

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.2.2

Welcome to the v2.2.2 release of containerd!

The second patch release for containerd 2.2 contains various fixes and improvements.

Highlights

Container Runtime Interface (CRI)

  • Fix migrated CRI image config when using legacy registry mirrors (#12987)
  • Unpack images with per-layer labels for runtime-specific snapshotters (#12936)
  • Fix CNI issue where DEL is never executed after a restart (#12926)
  • Harden error handling to strip potentially-sensitive registry parameters (#12804)
  • Fix nil pointer dereference in container spec memory metrics when memory constraints are not fully configured (#12731)
  • Use the specified runtime handler when pulling images (#12721)
  • Reduce noisy CDI logs (#12717)
  • Fix regression for pulling encrypted images (#12712)

Runtime

  • Fix unintended dropping of mount flags for read-only bind-mounts in user namespaces (#12944)
  • Fix AppArmor bug disallowing unix domain sockets on newer kernels (#12897)

ctr development tool

  • Fix ctr image mount failing with "no such device" (#12831)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Maksym Pavlenko
  • Akhil Mohan
  • Samuel Karp
  • Wei Fu
  • Michael Zappa
  • Phil Estes
  • Fabiano Fidêncio
  • Jérôme Poulin
  • Luke Hinds
  • Aadhar Agarwal
  • Akihiro Suda
  • Alex Chernyakhovsky
  • Chris Adeniyi-Jones
  • Kazuyoshi Kato
  • Rodrigo Campos
  • Sebastiaan van Stijn
  • You Binhao
  • ningmingxiao

... (truncated)

Commits
  • 301b2da Merge pull request #12998 from samuelkarp/prepare-release-2.2.2
  • 7e6ecf4 Prepare release notes for v2.2.2
  • 5dc7bb2 Merge pull request #12987 from k8s-infra-cherrypick-robot/cherry-pick-12617-t...
  • a20dead set default config_path in plugin init
  • 8b085dd Merge pull request #12936 from fidencio/release-2.2/backport-12835
  • 7022bea Merge pull request #12957 from k8s-infra-cherrypick-robot/cherry-pick-12950-t...
  • 68855cb ci: modprobe xt_comment on almalinux
  • 46fabcc Merge pull request #12944 from k8s-infra-cherrypick-robot/cherry-pick-12941-t...
  • ef7a8be core/mount: add test for getUnprivilegedMountFlags
  • 07b2cc0 core/mount: fix getUnprivilegedMountFlags iterating over indices instead of v...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.2.1 to 2.2.2.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.2.1...v2.2.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 19, 2026
@github-actions
Copy link

Benchmark Test Results

Benchmark results from the latest changes vs base branch
make .tool/task
make[1]: Entering directory '/home/runner/work/stereoscope/stereoscope'
make[1]: Leaving directory '/home/runner/work/stereoscope/stereoscope'
.tool/task show-benchstat
?   	github.com/anchore/stereoscope	[no test files]
?   	github.com/anchore/stereoscope/examples	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal	0.004s
?   	github.com/anchore/stereoscope/internal/bus	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/containerd	0.007s
PASS
ok  	github.com/anchore/stereoscope/internal/docker	0.005s
?   	github.com/anchore/stereoscope/internal/log	[no test files]
PASS
ok  	github.com/anchore/stereoscope/internal/podman	0.005s
?   	github.com/anchore/stereoscope/internal/testutil	[no test files]
?   	github.com/anchore/stereoscope/pkg/event	[no test files]
?   	github.com/anchore/stereoscope/pkg/event/parsers	[no test files]
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkTarIndex-4   	   27099	     44337 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   26976	     44619 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27036	     44378 ns/op	    5701 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27166	     44359 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27018	     44141 ns/op	    5700 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27019	     45067 ns/op	    5702 B/op	      93 allocs/op
BenchmarkTarIndex-4   	   27109	     44329 ns/op	    5703 B/op	      93 allocs/op
PASS
ok  	github.com/anchore/stereoscope/pkg/file	11.578s
PASS
ok  	github.com/anchore/stereoscope/pkg/filetree	0.005s
?   	github.com/anchore/stereoscope/pkg/filetree/filenode	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/containerd	0.008s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/docker	0.005s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci	0.006s
PASS
ok  	github.com/anchore/stereoscope/pkg/image/oci/credhelpers	0.005s
?   	github.com/anchore/stereoscope/pkg/image/podman	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/image/sif	0.004s
?   	github.com/anchore/stereoscope/pkg/imagetest	[no test files]
PASS
ok  	github.com/anchore/stereoscope/pkg/tree	0.004s
PASS
ok  	github.com/anchore/stereoscope/pkg/tree/node	0.003s
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/test/integration
cpu: AMD EPYC 7763 64-Core Processor                
BenchmarkSimpleImage_GetImage/docker-archive-4 	     918	   1294592 ns/op	  279375 B/op	    2444 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     904	   1335756 ns/op	  279749 B/op	    2445 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     912	   1314847 ns/op	  279404 B/op	    2444 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     914	   1311061 ns/op	  279240 B/op	    2444 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     908	   1303161 ns/op	  279176 B/op	    2444 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     918	   1376565 ns/op	  279200 B/op	    2444 allocs/op
BenchmarkSimpleImage_GetImage/docker-archive-4 	     920	   1314011 ns/op	  278934 B/op	    2443 allocs/op
--- FAIL: BenchmarkSimpleImage_GetImage/podman
    fixture_image_simple_test.go:175: could not get fixture image: unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
#0 building with "default" instance using docker driver

#1 [internal] load build definition from Dockerfile
#1 transferring dockerfile: 345B done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load build context
#3 transferring context: 209B done
#3 DONE 0.0s

#4 [1/3] ADD file-1.txt /somefile-1.txt
#4 CACHED

#5 [2/3] ADD file-2.txt /somefile-2.txt
#5 CACHED

#6 [3/3] ADD target /
#6 CACHED

#7 exporting to image
#7 exporting layers done
#7 writing image sha256:a5bcac95bf403bd55be59fcc4964db6399ab85f611ef88f32a6a889d8ffdfb20 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7 done
#7 naming to docker.io/library/stereoscope-fixture-image-simple:latest done
#7 DONE 0.0s
time="2026-03-19T20:35:23Z" level=warning msg="Failed to check deprecations" error="connection error: desc = \"transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied\""
ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
--- FAIL: BenchmarkSimpleImage_GetImage
    image_fixtures.go:195: using existing image tar: 'testdata/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-19 20:34:32.047032092 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:243: Build docker image: name="stereoscope-fixture-image-simple" tag="04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7"
    image_fixtures.go:293: saveImage running: docker image save stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7
    image_fixtures.go:288: 
        	Error Trace:	/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:288
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:164
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:154
        	            				/home/runner/work/stereoscope/stereoscope/pkg/imagetest/image_fixtures.go:35
        	            				/home/runner/work/stereoscope/stereoscope/test/integration/fixture_image_simple_test.go:163
        	            				/opt/hostedtoolcache/go/1.25.8/x64/src/testing/benchmark.go:245
        	            				/opt/hostedtoolcache/go/1.25.8/x64/src/runtime/asm_amd64.s:1693
        	Error:      	Received unexpected error:
        	            	exit status 1
        	Test:       	BenchmarkSimpleImage_GetImage
        	Messages:   	could not import docker image to containerd (shell out)
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45639	     26168 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45456	     26032 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45706	     26155 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45870	     26084 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   46177	     26105 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   45556	     26077 ns/op	    2616 B/op	      18 allocs/op
BenchmarkSimpleImage_FetchSquashedContents/docker-archive-4         	   46022	     26177 ns/op	    2616 B/op	      18 allocs/op
--- FAIL: BenchmarkSimpleImage_FetchSquashedContents
    image_fixtures.go:195: using existing image tar: 'testdata/cache/stereoscope-fixture-image-simple-04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7.tar' (size: 22528, modified: 2026-03-19 20:34:32.047032092 +0000 UTC, mode: -rw-r--r--)
    image_fixtures.go:77: error getting fixture image: 'podman' 'image-simple' with request 'podman:stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7': unable to detect input for 'stereoscope-fixture-image-simple:04e16e44161c8888a1a963720fd0443cbf7eef8101434c431de8725cd98cc9f7', errs: podman not available: no host address
FAIL
exit status 1
FAIL	github.com/anchore/stereoscope/test/integration	21.384s
FAIL
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-dbf6840.txt │
           │           sec/op           │
TarIndex-4                  44.36µ ± 2%

           │ .tmp/benchmark-dbf6840.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-dbf6840.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-dbf6840.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.314m ± 5%

                                      │ .tmp/benchmark-dbf6840.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 272.7Ki ± 0%

                                      │ .tmp/benchmark-dbf6840.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.444k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  26.11µ ± 0%

                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%
goos: linux
goarch: amd64
pkg: github.com/anchore/stereoscope/pkg/file
cpu: AMD EPYC 7763 64-Core Processor                
ctr: 
           │ .tmp/benchmark-dbf6840.txt │
           │           sec/op           │
TarIndex-4                  44.36µ ± 2%

           │ .tmp/benchmark-dbf6840.txt │
           │            B/op            │
TarIndex-4                 5.566Ki ± 0%

           │ .tmp/benchmark-dbf6840.txt │
           │         allocs/op          │
TarIndex-4                   93.00 ± 0%

pkg: github.com/anchore/stereoscope/test/integration
                                      │ .tmp/benchmark-dbf6840.txt │
                                      │           sec/op           │
SimpleImage_GetImage/docker-archive-4                  1.314m ± 5%

                                      │ .tmp/benchmark-dbf6840.txt │
                                      │            B/op            │
SimpleImage_GetImage/docker-archive-4                 272.7Ki ± 0%

                                      │ .tmp/benchmark-dbf6840.txt │
                                      │         allocs/op          │
SimpleImage_GetImage/docker-archive-4                  2.444k ± 0%

ctr: connection error: desc = "transport: Error while dialing: dial unix /run/containerd/containerd.sock: connect: permission denied"
                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │           sec/op           │
SimpleImage_FetchSquashedContents/docker-archive-4                  26.11µ ± 0%

                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │            B/op            │
SimpleImage_FetchSquashedContents/docker-archive-4                 2.555Ki ± 0%

                                                   │ .tmp/benchmark-dbf6840.txt │
                                                   │         allocs/op          │
SimpleImage_FetchSquashedContents/docker-archive-4                   18.00 ± 0%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants