Skip to content

chore(deps): bump github.com/containerd/containerd/v2 from 2.3.4 to 2.3.5 in /builds - #4

Merged
kmendell merged 1 commit into
mainfrom
dependabot-go_modules-builds-github.com-containerd-containerd-v2-2.3.5
Sep 17, 2026
Merged

kmendell merged 1 commit into
mainfrom
dependabot-go_modules-builds-github.com-containerd-containerd-v2-2.3.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps github.com/containerd/containerd/v2 from 2.3.4 to 2.3.5.

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.3.5

Welcome to the v2.3.5 release of containerd!

The fifth patch release for containerd 2.3 contains various fixes and updates including security patches.

Security Updates

Highlights

Image Distribution

  • Apply hardening to strip sensitive authentication headers when fetching descriptor URLs (#14030)

Runtime

  • Avoid hangs and data races when streaming container standard I/O in CRI (#14094)
  • Fix missing error messages in OpenTelemetry trace attributes (#14049)
  • Fix user and group lookup failures in container rootfs containing symlinked /etc/passwd or /etc/group (#13999)
  • Fix configuration loading error when drop-in configuration files have a higher version than the root configuration (#13995)
  • Avoid containerd startup hangs when loading shims (#13983)
  • Add context to error when shim delete times out (#13921)
  • Fix Windows Server 2022 container compatibility on host builds newer than the latest LTSC (containerd/platforms#34)

Snapshotters

  • Fix unpack failure for EROFS images containing the erofs OS feature (#14062)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Phil Estes
  • Samuel Karp
  • Derek McGowan
  • Sebastiaan van Stijn
  • Akhil Mohan
  • Maksym Pavlenko
  • Wei Fu
  • Oleh Konko
  • Austin Vazquez
  • Jing Chen
  • Martín Fernández
  • Paco Xu
  • XlabAI

... (truncated)

Commits
  • 1294c24 Merge pull request #14092 from samuelkarp/prepare-release-2.3.5
  • db68d72 Prepare release notes for v2.3.5
  • be419b0 Merge commit from fork
  • 84ea25b Merge commit from fork
  • 5db0399 Merge pull request #14094 from k8s-infra-cherrypick-robot/cherry-pick-14085-t...
  • 9f6be86 Fix data races and a deadlock in the byte stream helpers
  • 9ec55f0 cri: cancel ExecSync IO drain on context cancellation
  • c535779 archive: skip redundant opaque whiteout walks
  • 3684f86 Merge pull request #14063 from k8s-infra-cherrypick-robot/cherry-pick-14057-t...
  • 7459b1f Merge pull request #14062 from k8s-infra-cherrypick-robot/cherry-pick-14012-t...
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from a team as a code owner September 10, 2026 23:31
Bumps [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) from 2.3.4 to 2.3.5.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v2.3.4...v2.3.5)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot-go_modules-builds-github.com-containerd-containerd-v2-2.3.5 branch from 75ee69f to b06cba5 Compare September 17, 2026 04:50
@kmendell
kmendell merged commit 7d7b573 into main Sep 17, 2026
10 checks passed
@kmendell
kmendell deleted the dependabot-go_modules-builds-github.com-containerd-containerd-v2-2.3.5 branch September 17, 2026 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant