fix(deps): update module github.com/cri-o/cri-o to v1.34.3 #162

red-hat-konflux · 2025-10-09T12:26:38Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cri-o/cri-o	`v1.34.0` -> `v1.34.3`

Release Notes

cri-o/cri-o (github.com/cri-o/cri-o)

`v1.34.3`

Compare Source

CRI-O v1.34.3

CRI-O v1.34.3

The release notes have been generated for the commit range
v1.34.2...v1.34.3 on Tue, 02 Dec 2025 00:25:30 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.34.3.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --signature cri-o.amd64.v1.34.3.tar.gz.sig \
    --certificate cri-o.amd64.v1.34.3.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.34.3.tar.gz
> bom validate -e cri-o.amd64.v1.34.3.tar.gz.spdx -d cri-o

Changelog since v1.34.2

Changes by Kind

Feature

Add support for the credential provider: https://github.com/cri-o/crio-credential-provider (#9512, @saschagrunert)

Bug or Regression

Fixed CVE-2025-58183: Updated tar-split to v0.12.2 to fix unbounded memory allocation vulnerability when parsing malicious container images with GNU sparse tar files. (#9590, @saschagrunert)

Uncategorized

This commit introduces a new housekeeping value for the irq-load-balancing.crio.io annotation.

When housekeeping is set:

The housekeeping CPU set is injected into the container's environment variables as OPENSHIFT_HOUSEKEEPING_CPUS
IRQ SMP affinity bits are not disabled on the housekeeping CPUs when adding a new container
The housekeeping CPUs are chosen as the first CPU within each container plus its thread siblings (#9564, @openshift-cherrypick-robot)

Dependencies

Added

github.com/cri-o/crio-credential-provider: v0.1.1
github.com/joho/godotenv: v1.5.1
go.podman.io/image/v5: v5.37.0
go.podman.io/storage: v1.60.0

Changed

github.com/containers/storage: v1.59.1 → 606f1e4
github.com/golang-jwt/jwt/v5: v5.2.2 → v5.3.0
github.com/vbatts/tar-split: v0.12.1 → v0.12.2
k8s.io/api: v0.34.0 → v0.34.1
k8s.io/apimachinery: v0.34.0 → v0.34.1
k8s.io/apiserver: v0.34.0 → v0.34.1
k8s.io/client-go: v0.34.0 → v0.34.1
k8s.io/component-base: v0.34.0 → v0.34.1
k8s.io/cri-api: v0.34.0 → v0.34.1
k8s.io/kms: v0.34.0 → v0.34.1
k8s.io/kubelet: v0.34.0 → v0.34.1

Removed

Nothing has changed.

`v1.34.2`

Compare Source

CRI-O v1.34.2

CRI-O v1.34.2

The release notes have been generated for the commit range
v1.34.1...v1.34.2 on Tue, 11 Nov 2025 11:56:19 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.34.2.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --signature cri-o.amd64.v1.34.2.tar.gz.sig \
    --certificate cri-o.amd64.v1.34.2.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.34.2.tar.gz
> bom validate -e cri-o.amd64.v1.34.2.tar.gz.spdx -d cri-o

Changelog since v1.34.1

Changes by Kind

Uncategorized

Changed GRPC debug log format to be more informative (#9503, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

`v1.34.1`

Compare Source

CRI-O v1.34.1

CRI-O v1.34.1

The release notes have been generated for the commit range
v1.34.0...v1.34.1 on Thu, 02 Oct 2025 00:23:21 UTC.

Downloads

Download one of our static release bundles via our Google Cloud Bucket:

To verify the artifact signatures via cosign, run:

> export COSIGN_EXPERIMENTAL=1
> cosign verify-blob cri-o.amd64.v1.34.1.tar.gz \
    --certificate-identity https://github.com/cri-o/packaging/.github/workflows/obs.yml@refs/heads/main \
    --certificate-oidc-issuer https://token.actions.githubusercontent.com \
    --certificate-github-workflow-repository cri-o/packaging \
    --certificate-github-workflow-ref refs/heads/main \
    --signature cri-o.amd64.v1.34.1.tar.gz.sig \
    --certificate cri-o.amd64.v1.34.1.tar.gz.cert

To verify the bill of materials (SBOM) in SPDX format using the bom tool, run:

> tar xfz cri-o.amd64.v1.34.1.tar.gz
> bom validate -e cri-o.amd64.v1.34.1.tar.gz.spdx -d cri-o

Changelog since v1.34.0

Changes by Kind

Uncategorized

Fixed static build gpgme issue resulting in an "Invalid crypto engine" error on various platforms. (#9487, @openshift-cherrypick-robot)
Server: Fix network cleanup failures when NetNS path is empty (#9471, @openshift-cherrypick-robot)

Dependencies

Added

Nothing has changed.

Changed

Nothing has changed.

Removed

Nothing has changed.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2025-11-11T16:46:17Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/runtime/go.sum

Command failed: go get -t ./...
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/opencontainers/runtime-spec v1.2.1
go: downloading go.opentelemetry.io/otel v1.38.0
go: downloading github.com/containerd/containerd v1.7.28
go: downloading github.com/containerd/cgroups v1.1.0
go: downloading github.com/blang/semver v3.5.1+incompatible
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading github.com/BurntSushi/toml v1.5.0
go: downloading github.com/container-orchestrated-devices/container-device-interface v0.6.0
go: downloading go.opentelemetry.io/otel/exporters/jaeger v1.0.0
go: downloading golang.org/x/sys v0.36.0
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/containerd/console v1.0.5
go: downloading github.com/containernetworking/plugins v1.8.0
go: downloading github.com/go-ini/ini v1.67.0
go: downloading github.com/containerd/containerd/api v1.9.0
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/coreos/go-systemd/v22 v22.6.0
go: downloading github.com/prometheus/procfs v0.16.1
go: downloading github.com/cri-o/cri-o v1.34.3
go: downloading go.opentelemetry.io/otel/sdk v1.38.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading google.golang.org/grpc v1.75.0
go: downloading github.com/containerd/ttrpc v1.2.7
go: downloading github.com/godbus/dbus/v5 v5.1.1-0.20230522191255-76236955d466
go: downloading github.com/urfave/cli v1.22.16
go: downloading github.com/pbnjay/memory v0.0.0-20210728143218-7b4eea64cf58
go: downloading github.com/prometheus/common v0.66.1
go: downloading google.golang.org/protobuf v1.36.8
go: downloading github.com/opencontainers/runc v1.3.1
go: downloading k8s.io/apimachinery v0.34.1
go: downloading github.com/containerd/fifo v1.1.0
go: downloading k8s.io/cri-api v0.34.1
go: downloading go.opentelemetry.io/otel/trace v1.38.0
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/go-openapi/runtime v0.28.0
go: downloading github.com/mdlayher/vsock v1.2.1
go: downloading github.com/vishvananda/netlink v1.3.1
go: downloading github.com/go-openapi/strfmt v0.23.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading golang.org/x/oauth2 v0.30.0
go: downloading github.com/intel-go/cpuid v0.0.0-20210602155658-5747e5cec0d9
go: downloading github.com/go-openapi/errors v0.22.1
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/opencontainers/selinux v1.12.0
go: downloading github.com/go-openapi/swag v0.23.1
go: downloading github.com/safchain/ethtool v0.6.2
go: downloading github.com/go-openapi/validate v0.24.0
go: downloading github.com/vishvananda/netns v0.0.5
go: downloading gitlab.com/nvidia/cloud-native/go-nvlib v0.0.0-20220601114329-47893b162965
go: downloading github.com/containerd/cri-containerd v1.19.0
go: downloading github.com/containerd/typeurl/v2 v2.2.3
go: downloading code.cloudfoundry.org/bytefmt v0.0.0-20211005130812-5bb3c17173e5
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/cilium/ebpf v0.17.3
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading golang.org/x/mod v0.27.0
go: downloading github.com/opencontainers/runtime-tools v0.9.1-0.20250523060157-0ea5ed0382a2
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/containernetworking/cni v1.3.0
go: downloading github.com/containerd/log v0.1.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20250826171959-ef028d996bc1
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/go-logr/logr v1.4.3
go: downloading go.opentelemetry.io/otel/metric v1.38.0
go: downloading github.com/google/uuid v1.6.0
go: downloading google.golang.org/genproto v0.0.0-20250826171959-ef028d996bc1
go: downloading github.com/intel/goresctrl v0.9.0
go: downloading github.com/opencontainers/cgroups v0.0.5
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/opencontainers/image-spec v1.1.1
go: downloading github.com/Microsoft/hcsshim v0.13.0
go: downloading github.com/containerd/continuity v0.4.5
go: downloading github.com/moby/sys/mountinfo v0.7.2
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/mdlayher/socket v0.5.1
go: downloading golang.org/x/net v0.43.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/opentracing/opentracing-go v1.2.0
go: downloading golang.org/x/sync v0.17.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading github.com/mitchellh/mapstructure v1.5.1-0.20231216201459-8508981c8b6c
go: downloading github.com/oklog/ulid v1.3.1
go: downloading go.mongodb.org/mongo-driver v1.17.3
go: downloading github.com/mailru/easyjson v0.9.0
go: downloading go.yaml.in/yaml/v2 v2.4.2
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.1.0
go: downloading github.com/moby/sys/sequential v0.5.0
go: downloading github.com/containerd/go-runc v1.1.0
go: downloading github.com/containerd/platforms v0.2.1
go: downloading github.com/moby/sys/user v0.4.0
go: downloading github.com/containerd/cgroups/v3 v3.0.5
go: downloading tags.cncf.io/container-device-interface v1.0.1
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/moby/sys/capability v0.4.0
go: downloading github.com/cyphar/filepath-securejoin v0.4.1
go: downloading github.com/go-openapi/analysis v0.23.0
go: downloading github.com/go-openapi/loads v0.22.0
go: downloading github.com/go-openapi/spec v0.21.0
go: downloading github.com/go-openapi/jsonpointer v0.21.0
go: downloading github.com/josharian/intern v1.0.0
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8
go: downloading github.com/docker/go-events v0.0.0-20250808211157-605354379745
go: downloading github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20230306123547-8075edf89bb0
go: downloading github.com/moby/sys/signal v0.7.1
go: downloading github.com/moby/sys/symlink v0.2.0
go: downloading tags.cncf.io/container-device-interface/specs-go v1.0.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/go-openapi/jsonreference v0.21.0
go: downloading github.com/klauspost/compress v1.18.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24
go: downloading github.com/moby/locker v1.0.1
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opencensus.io v0.24.0
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8
go: downloading golang.org/x/text v0.28.0
go: downloading github.com/opencontainers/runc v1.4.0
go: github.com/kata-containers/kata-containers/src/runtime/pkg/resourcecontrol imports
	github.com/opencontainers/runc/libcontainer/cgroups/systemd: cannot find module providing package github.com/opencontainers/runc/libcontainer/cgroups/systemd
go: module go.opentelemetry.io/otel/exporters/jaeger is deprecated: This module is no longer supported.

red-hat-konflux · 2025-11-16T01:13:43Z

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/osc-release/github.com-cri-o-cri-o-1.x branch from 2819abd to 95d789c Compare November 11, 2025 16:46

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.1~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.2 Nov 11, 2025

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.2~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.2 - abandoned Nov 16, 2025

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.2 - abandoned~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.2 Nov 16, 2025

fix(deps): update module github.com/cri-o/cri-o to v1.34.3

46d803c

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/osc-release/github.com-cri-o-cri-o-1.x branch from 95d789c to 46d803c Compare December 2, 2025 08:59

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.2~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.3 Dec 2, 2025

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.3~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.3 - abandoned Dec 4, 2025

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/cri-o/cri-o to v1.34.3 - abandoned~~ fix(deps): update module github.com/cri-o/cri-o to v1.34.3 Dec 4, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update module github.com/cri-o/cri-o to v1.34.3 #162

fix(deps): update module github.com/cri-o/cri-o to v1.34.3 #162

Uh oh!

red-hat-konflux bot commented Oct 9, 2025 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Nov 11, 2025 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Nov 16, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

fix(deps): update module github.com/cri-o/cri-o to v1.34.3 #162

Are you sure you want to change the base?

fix(deps): update module github.com/cri-o/cri-o to v1.34.3 #162

Uh oh!

Conversation

red-hat-konflux bot commented Oct 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.34.3

CRI-O v1.34.3

Downloads

Changelog since v1.34.2

Changes by Kind

Feature

Bug or Regression

Uncategorized

Dependencies

Added

Changed

Removed

v1.34.2

CRI-O v1.34.2

Downloads

Changelog since v1.34.1

Changes by Kind

Uncategorized

Dependencies

Added

Changed

Removed

v1.34.1

CRI-O v1.34.1

Downloads

Changelog since v1.34.0

Changes by Kind

Uncategorized

Dependencies

Added

Changed

Removed

Configuration

Documentation

Uh oh!

red-hat-konflux bot commented Nov 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: src/runtime/go.sum

Uh oh!

red-hat-konflux bot commented Nov 16, 2025

Autoclosing Skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Oct 9, 2025 •

edited

Loading

`v1.34.3`

`v1.34.2`

`v1.34.1`

red-hat-konflux bot commented Nov 11, 2025 •

edited

Loading