Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 4, 2025

Bumps github.com/opencontainers/runtime-spec from 1.2.1 to 1.3.0.

Release notes

Sourced from github.com/opencontainers/runtime-spec's releases.

v1.3.0

This is the fourth minor release of the v1 series of the Open Container Initiative Runtime Specification. This release features the addition of the specification for FreeBSD.

Additions

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Thanks to the following contributors for making this release possible: @​Artoria2e5 @​Sharmaann @​aojea @​ariel-anieli @​askervin @​cyphar @​dfr @​gogolok @​ipuustin @​kolyshkin @​marquiz @​oleksiimoisieiev @​tianon

Vote-Results: +9 -0 *2 (#1302) Signed-off-by: Akihiro Suda (@​AkihiroSuda)

Changelog

Sourced from github.com/opencontainers/runtime-spec's changelog.

OpenContainers Specifications

Changes with v1.3.0:

Additions:

  • config-vm: add hwConfig object (#1209)
  • config-linux: add intelRdt.schemata field (#1230)
  • config-linux: add netDevices object (#1271)
  • config-linux: add memoryPolicy object (#1282)
  • config-freebsd: add the spec for FreeBSD (#1286)
  • config-linux: add intelRdt.enableMonitoring field (#1287)

Minor fixes:

  • config-linux: clarify intelRdt configuration (#1196)
  • runtime: fail when a poststart hook fails (#1262)
  • config-linux: clarify pids cgroup settings (#1279)
  • config-linux: define default clos for intelRdt (#1289)
  • features-linux: add intelRdt.enableMonitoring field (#1290)
  • features-linux: add intelRdt.schemata field (#1291)
  • config-linux: fix and elaborate memoryPolicy.nodes field (#1294)
  • config-linux, schema: fix FileMode description (#1298)

Documentation, CI & Governance:

  • add systemd-nspawn to implementations.md (#1272)
  • CI: add codespell, bump golangci-lint (#1281)
  • docs: add missing backticks for code formatting (#1284)
  • docs: fix typo (#1285)
  • principles: fix typo (#1288)
  • schema: fix json (#1297)
  • ci: use supported Go versions (#1300)
  • Add minimum supported Go version to CI (#1303)
  • Mention FreeBSD platform (#1304)

Changes with v1.2.1:

Additions:

  • zos updates (#1273)
  • Add support for windows CPU affinity (#1258)
  • specs-go: sync SCMP_ARCH_* constants with libseccomp main (#1229)
  • Add CPU affinity to executed processes (#1253, #1261)
  • config-linux: describe the format of cpus and mems (#1253)

Minor fixes:

  • Fix description of errnoRet in Seccomp (#1277)
  • config-linux: update for libseccomp v2.6.0 (#1276)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 4, 2025 18:09
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2025
@github-actions github-actions bot removed the go Pull requests that update Go code label Nov 4, 2025
@github-actions
Copy link

github-actions bot commented Nov 4, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/opencontainers/runtime-spec 1.3.0 🟢 6.1
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • go.mod

Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases)
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog)
- [Commits](opencontainers/runtime-spec@v1.2.1...v1.3.0)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/opencontainers/runtime-spec-1.3.0 branch from 5384778 to 0f89b1b Compare November 8, 2025 00:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants