Skip to content

chore(all): update deps (major) - #711

Open
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/major-deps
Open

chore(all): update deps (major)#711
renovate-bot wants to merge 1 commit into
openconfig:mainfrom
renovate-bot:renovate/major-deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/containernetworking/cni v0.8.1 → v1.3.0 age confidence
github.com/containernetworking/plugins v0.9.1 → v1.9.1 age confidence
github.com/grpc-ecosystem/go-grpc-middleware v1.4.0 → v2.3.3 age confidence

Release Notes

containernetworking/cni (github.com/containernetworking/cni)

v1.3.0

Compare Source

What's Changed

This adds a new config flag loadPluginsFromFolder - if present, for a given named network bar, plugin configuration objects will be loaded from <path-to-bar-network-config-file>/bar/xxx.conf. This may be useful for vendors providing chained plugins: you can add your plugin to a chain without needing to edit the file in-place.

New Contributors

Full Changelog: containernetworking/cni@v1.2.3...v1.3.0

v1.2.3: libcni v1.2.3

Compare Source

This is a minor release to correct a divergence between the specification and libcni. In this case, the specification was updated, as it concerns a new feature, GC, that is not yet deployed.

What's Changed

v1.2.2: libcni v1.2.2

Compare Source

What's Changed

Full Changelog: containernetworking/cni@v1.2.1...v1.2.2

v1.2.1: CNI Spec v1.1 / libcni v1.2.1

Compare Source

This is a minor release that fixes some small bugs:

Improvements
  • (#​1098). SPEC: add warning about preserving shared resources for GC
  • (#​1090). Spec, libcni: add disableGC flag This allows administrators to disable garbage collection in exceptional circumstances, such as multiple runtimes sharing a network configuration.
Bug fixes:
  • (#​1097). Fix faulty json.Marshal behavior for embeds types.NetConf Fix #​1096
  • (#​1095). libcni: always delete the cache on conflist for CNI DEL This aligns the call with DelNetwork, and allows CRIO tests to bump

v1.2.0: CNI spec v1.1 / libcni v1.2.0

Compare Source

This is libcni v1.2.0, which releases the new CNI spec version v1.1.0.

Major changes:

GC verb

The GC verb allows runtimes to specify the set of known-good attachments, allowing plugins to clean up stale and leaked resources such as IPAM reservations. Libcni will also synthesize a CNI DEL for any stale cached attachments, so all users will have a form of GC, even if their plugins do not support CNI v1.1

STATUS verb

The STATUS verb allows a plugin to report its readiness to accept ADD requests. Runtimes such as containerd and cri-o will no longer have to rely merely on the presence of a CNI configuration file to determine network readiness.

Version negotiation

CNI configurations may now contain multiple versions, so that an administrator can opportunistically update the protocol version without breaking older runtimes:

{
  "cniVersion": "1.0.0",
  "cniVersions": ["1.0.0", "1.1.0"]
}

New fields

A number of new fields have been added to the result type:

Other improvements

  • (#​911). libcni: add specific type for CHECK not supported
  • (#​1072). tolerate invalid cni caches for deletion
  • (#​1054). Add Version() to CNI interface

v1.1.2: CNI v1.1.2

Compare Source

This is a minor update to the CNI libraries and tooling. This does not bump the protocol / spec version, which remains at v1.0.0.

What's Changed

New Contributors

Full Changelog: containernetworking/cni@v1.1.1...v1.1.2

v1.1.1: CNI v1.1.1

Compare Source

This is a minor update to the CNI libraries and tooling. This does not bump the protocol / spec version, which remains at v1.0.0.

Changes include:

New Contributors:

Full Changelog: containernetworking/cni@v1.1.0...v1.1.1

v1.1.0: CNI v1.1.0

Compare Source

This is a minor update to the CNI libraries and tooling. This does not bump the protocol / spec version, which remains at v1.0.0.

Changes include:

  • libcni: handle empty version when parsing version (#​893). Without this, Delete failed for empty-version configs, which was a regression from v0.8.0.
  • Fix incorrect pointer inputs to json.Unmarshal (#​880).
  • [exec-plugins]: support plugin lists (#​865).
  • skel: remove superfluous err nil check in (*dispatcher).pluginMain (#​864).
  • skel: print out CNI versions supported in help text (#​860).

v1.0.1: 🎉 CNI v1.0.1 🎉

Compare Source

Hot off the presses, it's CNI v1.0!

CNI v1.0 doesn't change much about how CNI works, but it declares API stability.

This release includes

  • a rewritten spec (for clarity)
  • libcni improvements
  • way more tests.

You can see the full spec changelog here: https://github.com/containernetworking/cni/blob/v1.0.1/Documentation/spec-upgrades.md

v1.0.0

Compare Source

containernetworking/plugins (github.com/containernetworking/plugins)

v1.9.1

Compare Source

This is a patch release with dependency updates and some minor fixes.

Minor fixes

New Contributors

Full Changelog: containernetworking/plugins@v1.9.0...v1.9.1

v1.9.0: CNI plugins v1.9.0

Compare Source

What's Changed

This release fixes CVE-2025-67499, a bug in the nftables backend for the portmap plugin that can cause traffic to be unexpectedly intercepted.

Bugs
Other changes

Full Changelog: containernetworking/plugins@v1.8.0...v1.9.0

v1.8.0: CNI plugins v1.8.0

Compare Source

The Bridge CNI plugin has removed limitations on VLAN trunk implementation. This aligns with recommended access and trunk port configurations, ensuring proper VLAN isolation and enhanced usability.

What's Changed

New Contributors

Full Changelog: containernetworking/plugins@v1.7.0...v1.8.0

v1.7.1: CNI plugins v1.7.1

Compare Source

What's Changed

(Administrative note: the GitHub release v1.7.0 somehow got split in to two immutable releases. v1.7.1 is a re-release that corrects the issue. Apologies for the trouble).

New features / options
Other improvements
Bug fixes

New Contributors

Full Changelog: containernetworking/plugins@v1.6.2...v1.7.1

v1.7.0

Compare Source

v1.6.2

Compare Source

(administrative note: release v1.6.1 was somehow double-created in GitHub; v1.6.2 is identical but fixes the duplication.)

What's Changed

Full Changelog: containernetworking/plugins@v1.6.0...v1.6.2

v1.6.1

Compare Source

v1.6.0: CNI plugins v1.6.0

Compare Source

This is the v1.6.0 release of the CNI community plugins.

Changelog

Important

  • revert htb changes due to ongoing issues and missing maintainer by @​h0nIg in #​1105. This reverts the (undocumented) feature added in v1.5 where traffic from a specific CIDR would be exempted from bandwidth shaping. Unfortunately the implementation was lacking. We hope to re-add this feature in the future.

New features

CNI v1.1 support

Other improvements

Fixes

Misc / CI

New Contributors

Full Changelog: containernetworking/plugins@v1.5.1...v1.6.0

v1.5.1

Compare Source

What's Changed

Full Changelog: containernetworking/plugins@v1.5.0...v1.5.1

v1.5.0: CNI Plugins v1.5.0

Compare Source

What's Changed

New Features:

Fixes:

New Contributors

Full Changelog: containernetworking/plugins@v1.4.1...v1.5.0

v1.4.1

Compare Source

v1.4.0: CNI Plugins v1.4.0

Compare Source

New features:
  • (#​832). tap: allow for a tap device to be created as a bridge port
  • (#​914). [tuning] add ability to set tx queue len
Improvements:
  • (#​969). Add CNI_NETNS_OVERRIDE
  • (#​979). Add ndisc_notify in ipvlan for ipv6 ndp
  • (#​974). macvlan: enable ipv6 ndisc_notify
  • (#​950). Create IPAM files with 0600 permissions
  • (#​924). More efficient iptables usage.
  • (#​902). spoofcheck: Make use of go-nft's ApplyConfigEcho(). This is much faster
  • (#​874). Add routes propagation for VRF plugin
Build:
  • (#​982). Bump to golang:1.21-alpine
  • (#​948). build: Use POSIX sh for shell scripts
Bug fixes:
  • (#​954). macvlan cmdDel: handle deletion when master has been deleted
  • (#​927). vrf: fix route filter to use output iface

v1.3.0: CNI Plugins v1.3.0

Compare Source

This release introduces a new plugin: tap. Thanks to @​mmirecki for contributing this

New features:

  • (#​784). tap: This PR adds a plugin to create tap devices.
  • (#​829). bridge: add vlan trunk support
  • (#​875). bridge: Add parameter to disable default vlan
  • (#​814). macvlan: Add support for in-container master
  • (#​813). ipvlan: Add support for in-container master
  • (#​781). vlan: Add support for in-container master

Improvements:

  • (#​880). bridge: read only required chain on cni del instead of the entire ruleset
  • (#​873). bridge, spoof check: remove drop rule index

Bug fixes:

  • (#​892). sbr: Ignore LinkNotFoundError during cmdDel null
  • (#​887). ptp: Fix ValidateExpectedRoute with non default routes and nil GW
  • (#​885). tuning: fix cmdCheck when using IFNAME
  • (#​831). Fix overwritten error var in getMTUByName
  • (#​821). Only check or del ipv6 when an IPv6 is configured

v1.2.0: CNI Plugins v1.2.0

Compare Source

Changelog:

New plugins & features

  • (#​743). dummy: Create a Dummy CNI plugin that creates a virtual interface
  • (#​725). V2 API support for win-overlay CNI
  • (#​693). tuning Add sysctl allowList

Bug fixes

  • (#​809). bridge: refresh host-veth mac after port add
  • (#​802). Add IPv6 support for AddDefaultRoute
  • (#​779). Fix path substitution to enable setting sysctls on vlan interfaces
  • (#​782). host-local: fix bug on getting NextIP of addresses with first byte
  • (#​709). dhcp: Fix client id in renew/release

Improvements & Cleanups:

  • (#​772). portmap support masquerade all
  • (#​733). bridge: support IPAM DNS settings
  • (#​702). bridge: call ipam.ExecDel after clean up device in netns #​702
  • (#​768). dhcp: Cleanup Socket and Pidfile on exit
  • (#​792). dhcp: Update Allocate method to reuse lease if present
  • (#​755). dhcp: Use the same options for acquiring, renewing lease
  • (#​730). tuning Check for duplicated sysctl keys
  • (#​739). build: support riscv64
  • (#​712). bug: return errors when iptables and ip6tables are unusable
  • (#​719). Make description for static plugin more exact

As always, many thanks to our contributors.

v1.1.1: CNI plugins v1.1.1

Compare Source

Plugins release v1.1.1

This is a patch release that fixes the following bugs in v1.1.0:

  • #​702 bridge: call ipam.ExecDel after clean up device in netns
  • #​709 ipam/dhcp: Fix client id in renew/release

v1.1.0 Changelog:

One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.

New features:

  • firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#​584)
  • dhcp ipam: support customizing dhcp options from CNI args (#​670)
  • Allow setting sysctls on a particular interface (#​669)
  • bridge: Add macspoofchk support (#​639).

Bug fixes:

  • portmap: fix bug that new udp connection deletes all existing conntrack entries (#​705)
  • portmap: fix checkPorts result when chain does not exist (#​707)
  • dhcp: fixed DHCP problem that broke when fast retry was added (#​681)
  • ipvlan: Send Gratuitous ARP after IPs are set (#​675)

Improvements

  • host-device: Bring interfaces up after moving into container (#​679)
  • Explicitly Disable Duplicate Address Detection For Container Side Veth (#​695)
  • Replace arping package with arp_notify (#​687)
  • host-device: add ipam support for dpdk device (#​642)

Other changes

  • Ignore NetNS path errors on delete (#​686)
  • Fix confusing error msg invalid cidr (#​638)

v1.1.0: CNI Plugins v1.1.0

Compare Source

This release brings a number of new features, along with the usual
smattering of bug fixes and cleanups.

One minor-but-major change is that we no longer wait for IPv6 Duplicate
Address Detection to complete. This reduces execution time by 2 seconds.

New features:

  • firewall: support ingressPolicy=(open|same-bridge) for isolating bridges as in Docker (#​584)
  • dhcp ipam: support customizing dhcp options from CNI args (#​670)
  • Allow setting sysctls on a particular interface (#​669)
  • bridge: Add macspoofchk support (#​639).

Bug fixes:

  • portmap: fix bug that new udp connection deletes all existing conntrack entries (#​705)
  • portmap: fix checkPorts result when chain does not exist (#​707)
  • dhcp: fixed DHCP problem that broke when fast retry was added (#​681)
  • ipvlan: Send Gratuitous ARP after IPs are set (#​675)

Improvements

  • host-device: Bring interfaces up after moving into container (#​679)
  • Explicitly Disable Duplicate Address Detection For Container Side Veth (#​695)
  • Replace arping package with arp_notify (#​687)
  • host-device: add ipam support for dpdk device (#​642)

Other changes

  • Ignore NetNS path errors on delete (#​686)
  • Fix confusing error msg invalid cidr (#​638)

v1.0.1: 🎉 CNI Plugins v1.0.1 🎉

Compare Source

CNI Plugins v1.0.1 is here

This release adds support for CNI Spec v1.0. Additionally, it officially declares CNI as a stable project.

The Flannel CNI plugin has been moved to a separate project, and is no longer included here.

Changes since v1.0.0 🤦‍♂️

  • plugins: fix bug where support for CNI version 0.4.0 or 1.0.0 was dropped

Changes since v0.9.1

⚠️ Breaking Changes

📈 New Features

  • bridge: Add mac field to specify container iface mac (#​636).
  • (generic) Allow multiple routes to be added for the same prefix (#​615). Enables ECMP.
  • (sbr): Add multi IP support (#​623).

✨ Other improvements

  • (generic): place veth peer in host namspace directly (#​645).
  • (windows): refactor win-bridge, support HNSv2 (#​617).
  • (host-local): support ip/prefix in env args and CNI args (#​630).
  • (host-local): support custom IPs allocation through runtime configuraton (#​599).
  • (tuning): always update MAC in CNI result (#​626).
  • (tuning): Add support of altering the allmulticast flag (#​624).

🐛 Bug Fixes

  • host-local: remove redundant startRange in RangeIterator to avoid mismatching with startIP (#​583). Fixes possible infinite loop.
  • portmap: use slashes in sysctl template to support interface names which separated by dots (#​589).
  • pkg/ipam: convert dots to slashes in interface names for sysctl (#​585).
  • win-bridge: fix panic while calling HNS api (#​590). fix a nil pointer panic while calling HNS API (V1) on win-bridge.
  • [macvlan] Stop setting proxy-arp on macvlan interface (#​586).

As always, thanks to our dedicated maintainers and contributors!

v1.0.0: 🎉 CNI Plugins v1.0.0 🎉

Compare Source

CNI Plugins v1.0.0 is here

This release adds support for CNI Spec v1.0. Additionally, it officially declares CNI as a stable project.

Changes since v0.9.1

⚠️ Breaking Changes

📈 New Features

  • bridge: Add mac field to specify container iface mac (#​636).
  • (generic) Allow multiple routes to be added for the same prefix (#​615). Enables ECMP.
  • (sbr): Add multi IP support (#​623).

✨ Other improvements

  • (generic): place veth peer in host namspace directly (#​645).
  • (windows): refactor win-bridge, support HNSv2 (#​617).
  • (host-local): support ip/prefix in env args and CNI args (#​630).
  • (host-local): support custom IPs allocation through runtime configuraton (#​599).
  • (tuning): always update MAC in CNI result (#​626).
  • (tuning): Add support of altering the allmulticast flag (#​624).

🐛 Bug Fixes

  • host-local: remove redundant startRange in RangeIterator to avoid mismatching with startIP (#​583). Fixes possible infinite loop.
  • portmap: use slashes in sysctl template to support interface names which separated by dots (#​589).
  • pkg/ipam: convert dots to slashes in interface names for sysctl (#​585).
  • win-bridge: fix panic while calling HNS api (#​590). fix a nil pointer panic while calling HNS API (V1) on win-bridge.
  • [macvlan] Stop setting proxy-arp on macvlan interface (#​586).

As always, thanks to our dedicated maintainers and contributors!

grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware)

v2.3.3

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3

v2.3.2

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.1...v2.3.2

v2.3.1

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.2.0...v2.3.0

v2.2.0

Compare Source

What's Changed

  • Call retry callback on retry by @​fredr in #​700
  • interceptors: Update logging interceptor Reporter to re-extract fields from context before logging by @​chancez in #​702
  • logging: Document correct WithFieldsFromConte

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Monday through Friday (* * * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate

forking-renovate Bot commented Jul 8, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: third_party/meshnet/go.sum
Command failed: go get -t ./...
go: downloading k8s.io/apimachinery v0.36.0
go: downloading k8s.io/client-go v0.36.0
go: downloading github.com/containernetworking/cni v1.3.0
go: downloading github.com/containernetworking/plugins v1.9.1
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading k8s.io/api v0.36.0
go: github.com/openconfig/kne/third_party/meshnet/plugin imports
	github.com/containernetworking/cni/pkg/types/current: cannot find module providing package github.com/containernetworking/cni/pkg/types/current

@renovate-bot
renovate-bot force-pushed the renovate/major-deps branch 3 times, most recently from 097d168 to b0e3f3b Compare July 20, 2026 16:06
@renovate-bot
renovate-bot force-pushed the renovate/major-deps branch 2 times, most recently from 50474da to cb2f922 Compare July 23, 2026 16:25
@renovate-bot
renovate-bot force-pushed the renovate/major-deps branch from cb2f922 to 0c1ddf7 Compare July 23, 2026 21:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@renovate-bot