来源: https://github.com/containerd/containerd/releases/tag/v1.7.28
containerd/containerd v1.7.28 Release Notes
Published at: 2025-07-26T00:57:19Z
Welcome to the v1.7.28 release of containerd!
The twenty-eighth patch release for containerd 1.7 contains various fixes and updates.
Highlights
Image Distribution
- Refresh OAuth tokens when they expire during registry operations (#11721)
- Set default differ for the default unpack config of transfer service (#11689)
Runtime
- Update runc binary to v1.3.0 (#11800)
- Remove invalid error log when stopping container after containerd restart (#11620)
Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.
Contributors
- Akhil Mohan
- Akihiro Suda
- Austin Vazquez
- Maksym Pavlenko
- Phil Estes
- Derek McGowan
- Kirtana Ashok
- Henry Wang
- Iain Macdonald
- Jin Dong
- Swagat Bora
- Wei Fu
- Yang Yang
- madraceee
Changes
57 commits
- Prepare release notes for v1.7.28 (#12134)
b01b809f8Prepare release notes for v1.7.28
- ci: bump Go 1.23.11, 1.24.5 (#12117)
ce2373176ci: bump Go 1.23.11, 1.24.5
- Backport windows test fixes (#12121)
- ci: use fedora 39 archive (#12123)
6d7e021cfci: use fedora/39-cloud-base image from archive
- update runners to ubuntu 24.04 (#11802)
- go.mod: golang.org/x/* latest (#12096)
da5d1a371go.mod: golang.org/x/* latest
- Remove additional fuzzers from instrumentation repo (#12099)
5fef123baRemove additional fuzzers from CI
- backport windows runner and golang toolchain updates (#11972)
- test: added runc v1 tests using vagrant (#11896)
60e73122ctest: added runc v1 tests using vagrant
- Revert “disable portmap test in ubuntu-22 to make CI happy” (#11803)
- Update runc binary to v1.3.0 (#11800)
b001469c7Update runc binary to v1.3.0
- Refresh OAuth tokens when they expire during registry operations (#11721)
a6421da84remotes/docker/authorizer.go: invalidate auth tokens when they expire.
- [CI] Fix vagrant (#11739)
effc49e8bFix vagrant setup
- Fix CI (#11722)
d3e7dd716Skip criu on Arms7cf9ebe94Disable port mapping tests in CRI-in-UserNS42657a4eddisable portmap test in ubuntu-22 to make CI happyb300fd37badd option to skip tests in critest6f4ffad27Address cgroup mountpoint does not existcef298331Update Ubuntu to 242dd9be16eci: update GitHub Actions release runner to ubuntu-24.04
- Set default differ for the default unpack config of transfer service (#11689)
e40e59e4eSet default differ for the default unpack config of transfer service
- silence govulncheck false positives (#11679)
ff097d5a4silence govulncheck false positives
- vendor: github.com/go-jose/go-jose/v3 v3.0.4 (#11619)
52dd4dc51vendor: github.com/go-jose/go-jose/v3 v3.0.4
- Remove invalid error log when stopping container after containerd restart (#11620)
24f41d2d5use shimCtx for fifo copy
- Update runc binary to v1.2.6 (#11584)
1e1e78ad7Update runc binary to v1.2.6
- Use RWMutex in NSMap and reduce lock area (#11556)
9a8d1d44aUse RWMutex in NSMap and reduce lock area
Dependency Changes
- github.com/go-jose/go-jose/v3 v3.0.3 -> v3.0.4
- golang.org/x/crypto v0.31.0 -> v0.40.0
- golang.org/x/mod v0.17.0 -> v0.26.0
- golang.org/x/net v0.33.0 -> v0.42.0
- golang.org/x/oauth2 v0.11.0 -> v0.30.0
- golang.org/x/sync v0.10.0 -> v0.16.0
- golang.org/x/sys v0.28.0 -> v0.34.0
- golang.org/x/term v0.27.0 -> v0.33.0
- golang.org/x/text v0.21.0 -> v0.27.0
- golang.org/x/time 90d013bbcef8 -> v0.12.0
Previous release can be found at v1.7.27